de4dot
|
adc2c277fd
|
Strings and resources are decrypted
|
2011-10-22 17:13:28 +02:00 |
|
de4dot
|
dd13df28d6
|
Add updated cecil submodule
|
2011-10-22 17:12:16 +02:00 |
|
de4dot
|
65dacdf7cd
|
Initialize assemblyInfos in case there's no embedded assemblies
|
2011-10-22 14:55:43 +02:00 |
|
de4dot
|
50a9421657
|
Assembly resolver doesn't need resource decrypter
|
2011-10-22 14:53:24 +02:00 |
|
de4dot
|
3f1b9152bd
|
Add CO deobfuscator. Can decrypt embedded assemblies.
|
2011-10-22 14:31:38 +02:00 |
|
de4dot
|
99bd79e418
|
Change to version 1.1.0
|
2011-10-21 22:27:26 +02:00 |
|
de4dot
|
603fa74ceb
|
Only use DNR hack if methods have same declaring type
|
2011-10-21 21:47:06 +02:00 |
|
de4dot
|
88f7a31ff1
|
Print number of removed instructions
|
2011-10-21 21:35:35 +02:00 |
|
de4dot
|
2ff8a0ea7a
|
Remove old cflow deobfuscator code
|
2011-10-21 20:35:13 +02:00 |
|
de4dot
|
9063a62325
|
Remove old comment
|
2011-10-21 20:21:45 +02:00 |
|
de4dot
|
d14f52660d
|
Remove old comments
|
2011-10-21 20:19:51 +02:00 |
|
de4dot
|
cdd92d1415
|
Add fix for old DF
|
2011-10-21 20:14:25 +02:00 |
|
de4dot
|
a594b11254
|
Remember to add this as first arg if HasThis is set
|
2011-10-21 19:32:37 +02:00 |
|
de4dot
|
8c2f26bfcb
|
Replace stloc + ldloc with dup + stloc only if it's a bool local
|
2011-10-21 18:53:36 +02:00 |
|
de4dot
|
4b3c52c44f
|
Truncate values when emulating stloc/starg
|
2011-10-21 18:45:59 +02:00 |
|
de4dot
|
c1290ec3ee
|
Should be instance variables
|
2011-10-21 18:05:24 +02:00 |
|
de4dot
|
2bba9e688a
|
Remove more dead code and useless stores
|
2011-10-21 18:02:58 +02:00 |
|
de4dot
|
9d132bfeaf
|
Change --no-control-flow-deob => --no-cflow-deob
|
2011-10-21 10:38:27 +02:00 |
|
de4dot
|
b1340bc84f
|
Merge branch 'master' into newcode
|
2011-10-21 10:33:00 +02:00 |
|
de4dot
|
8c924617c3
|
Update CIL output when -vv is used
|
2011-10-21 10:32:43 +02:00 |
|
de4dot
|
e2dd6a217d
|
Add updated cecil submodule
|
2011-10-21 10:30:58 +02:00 |
|
de4dot
|
58af131485
|
Add code to remove dup + pop
|
2011-10-20 12:29:19 +02:00 |
|
de4dot
|
d76afbf8a1
|
Ignore ArgumentOutOfRangeException when loading files
|
2011-10-20 12:28:15 +02:00 |
|
de4dot
|
8e83bc22f2
|
Update isBranchBlock() method
|
2011-10-20 05:43:01 +02:00 |
|
de4dot
|
9df4a6c9d2
|
Undo dup fix
|
2011-10-20 04:50:58 +02:00 |
|
de4dot
|
948d5c1744
|
Only use the DNR inline method hack if it's a static method
|
2011-10-20 03:34:05 +02:00 |
|
de4dot
|
f79b12d4f3
|
Make sure blocks are laid out in a verifiable order
|
2011-10-20 02:58:30 +02:00 |
|
de4dot
|
865cfb9536
|
Get rid of the useless list
|
2011-10-20 02:45:55 +02:00 |
|
de4dot
|
c8500b4f33
|
Remove unused local variables
|
2011-10-20 02:38:44 +02:00 |
|
de4dot
|
c3d6e25ad7
|
Add instructions that clear the stack
|
2011-10-20 01:43:33 +02:00 |
|
de4dot
|
c643755267
|
Add updated cecil submodule
|
2011-10-20 01:40:15 +02:00 |
|
de4dot
|
debc4b346a
|
Nops are removed
|
2011-10-20 00:47:38 +02:00 |
|
de4dot
|
28f95d386e
|
Fix problem with dup, and don't include nops
|
2011-10-20 00:36:30 +02:00 |
|
de4dot
|
d7c61c65fe
|
Remove pop instrs and code that pushes the value
|
2011-10-19 15:49:19 +02:00 |
|
de4dot
|
f519d6f6d8
|
Update switch cflow deob code to handle more cases
|
2011-10-19 09:13:27 +02:00 |
|
de4dot
|
7fe71a963a
|
Add inline bool method hack for DNR
|
2011-10-19 01:53:42 +02:00 |
|
de4dot
|
80acf1d59f
|
Add switch cflow deobfuscator
|
2011-10-18 23:31:50 +02:00 |
|
de4dot
|
f374308d1e
|
Emulate instrs only if last instr is bcc/switch
|
2011-10-18 08:28:23 +02:00 |
|
de4dot
|
98936364f7
|
Add code to emulate switch and ldelem
|
2011-10-18 08:17:21 +02:00 |
|
de4dot
|
de8e63d140
|
Emulate more instructions
|
2011-10-17 21:34:00 +02:00 |
|
de4dot
|
122878a094
|
Update div and rem emu code
|
2011-10-17 20:19:17 +02:00 |
|
de4dot
|
778bc7e940
|
Fix some copy paste errors. Update add/sub emu code
|
2011-10-17 09:06:46 +02:00 |
|
de4dot
|
d34184f811
|
Return 0 if we emulate x - x
|
2011-10-17 07:55:06 +02:00 |
|
de4dot
|
fdd3c119f5
|
Make sure the unknown bool is pushed
|
2011-10-17 07:51:20 +02:00 |
|
de4dot
|
718cdb0487
|
Add validMask field to Int32/64Value
|
2011-10-17 07:28:53 +02:00 |
|
de4dot
|
05065d6ac7
|
Start work on new cflow deobfuscator
|
2011-10-17 00:22:22 +02:00 |
|
de4dot
|
b6a994700c
|
Cecil submodule was updated
|
2011-10-13 22:33:52 +02:00 |
|
de4dot
|
dabad1e177
|
Cecil submodule was updated
|
2011-10-13 20:17:50 +02:00 |
|
de4dot
|
4c43807de7
|
Detect SA 1.x-5.1 assemblies
|
2011-10-13 12:22:17 +02:00 |
|
de4dot
|
01da4a979f
|
Also make sure type.Name is empty
|
2011-10-12 23:30:57 +02:00 |
|