1230 Commits

Author SHA1 Message Date
0xMcX 0d5ce67987 stack recovery for dup & ldelem.ref (#206)
* dup recursive search

* previous instruction from branch

* ldelem.ref if operand is ref type

* methodstack without loops and check for fall through

* without Linq

* without recursivity

* optimisation

* Added branch backtracking

* CRLF to LF

* Added range check
2020-06-08 19:00:43 +02:00
浅陌兮 f8f52c734d remove stringbuilder crypter (#202)
* Add files via upload

remove stringbuilder crypter

* Update Deobfuscator.cs

remove stringbuilder crypter

* Format this file

* Format this file and fix some errors
2019-09-03 22:26:17 +02:00
de4dot ba8ee30e82 Remove useless braces 2019-06-25 06:36:26 +02:00
Diego Ernesto Farías bfd82046d2 Updated TamperProtectionRemover for SmartAssembly (#201)
* Updated TamperProtectionRemover for SmartAssembly

Added compatibilty to remove tamper protection for SmartAssembly 7.0.3.2212+ (and others). Added new anti-tamper IL instructions as comment for a best reference.

* Update TamperProtectionRemover.cs
2019-06-25 06:34:02 +02:00
Behnam Momeni 6842287b92 Updating MVID of deobfuscated modules (#199)
* Updating MVID of deobfuscated modules

* Creating a random GUID for the new MVID value
2019-02-17 22:36:37 +01:00
etmatrix ef59696d5f CryptoObfuscator: Improvements for ResourceDecrypter and AntiDebugger 2019-02-02 08:45:33 +01:00
etmatrix 8c5d2b0c02 CryptoObfuscator: Fix an issue on GetProxyCreateMethod, not find delegate creator and proxy call fixer is not activated. 2019-01-27 21:27:20 +01:00
de4dot db2fef8d72 Remove utf8 bom 2019-01-01 12:53:38 +01:00
de4dot 5109679b6b Use NETFRAMEWORK 2018-11-14 15:42:43 +01:00
de4dot c6f392016e Target .NET Core 2.1 and .NET Framework 3.5 2018-10-17 21:03:45 +02:00
de4dot 737ef1cfc5 Remove public, add static 2018-05-22 22:02:46 +02:00
destnity2018 dfaff152f9 update cflow cleaner of 4.33 pro 2018-05-20 07:43:06 +08:00
de4dot 3b5b98bd9b Format code 2018-04-29 03:06:59 +02:00
0xd4d 17346ee1e2 Merge pull request #151 from destnity/master
fix string decrypter
2018-04-29 03:03:54 +02:00
de4dot d44974d8a2 Use latest dnlib 2018-04-28 04:13:36 +02:00
FishUncle f92c122a28 fix string decrypter 2018-04-24 01:08:53 +08:00
de4dot a246ca94bf Add updated submodule 2018-03-30 16:37:23 +02:00
0xd4d 3cf3ea3a67 Merge pull request #142 from GhostFish2018/master
fix couldn't calculate magic value exception Error.
2018-03-19 11:05:49 +01:00
ghostfish de75caf3d1 Fix the exception:
Couldn't calculate magic value
So I am the bad guy.
2018-03-19 11:23:22 +08:00
de4dot e9f938a030 Don't statically decrypt strings if dynamic decryption is enabled, fixes #140 2018-03-18 15:15:11 +01:00
de4dot 01f29039f2 Update project files, use C# 7.2 2018-03-16 21:38:41 +01:00
de4dot 6cbb3e18eb Use dnlib 3.0 2018-03-16 07:26:24 +01:00
GhostFish2018 e8e12f6501 Fix CheckFields of ResourceResolver to fit Dnr5 (#139)
* fix to support DNR 4.99 and 5.0

* Fix CheckFields to Fit NR5
2018-01-26 18:36:16 +01:00
GhostFish2018 bf3a660fa8 fix to support DNR 4.99 and 5.0 (#138) 2018-01-17 23:52:33 +01:00
de4dot f30a61cc4b Add parens 2018-01-11 02:05:32 +01:00
Twometer 5613ca3136 Support for some DNR >=4.8 versions (#137)
* Support for some DNR >=4.8 versions

* undone using the latest c# version

* fixed code typo

* Fixed the new detection code

* Fixed for older DNR versions
2018-01-11 02:03:27 +01:00
HoLLy b4d8ac928a Fix decrypter type getting removed (#136)
* Fix Eazfuscator detection

* Detect new Eazfuscator version

* Eaz 5.8 has been released already

* Various fixes

* Completely fix Eazfuscator string decryption

* Fix version detection

* Fix decrypter type getting removed
2017-10-30 23:42:39 +01:00
HoLLy da23d834bb Fix version detection 2017-10-30 19:31:30 +01:00
HoLLy 59767bfb76 Completely fix Eazfuscator string decryption 2017-10-30 19:31:30 +01:00
HoLLy d694d2d319 Various fixes 2017-10-30 19:31:30 +01:00
HoLLy 16e3d7d9c9 Eaz 5.8 has been released already 2017-10-30 19:31:30 +01:00
HoLLy 701c6cd807 Detect new Eazfuscator version 2017-10-30 19:31:30 +01:00
HoLLy 55a3f3b762 Fix Eazfuscator detection 2017-10-30 19:31:30 +01:00
de4dot 68d412ed2e Fix merge 2017-09-27 20:55:41 +02:00
cawk e29fb57078 Sorry Small Fix (#134)
* Agile VM Support

This supports latest agile vm

* Fix

* Supports

* t

* Fix Or

* Delete CSVM6.bin
2017-09-27 20:52:48 +02:00
cawk 2eec34719f Agile VM Support (#133)
* Agile VM Support

This supports latest agile vm

* Fix

* Supports
2017-09-27 19:44:59 +02:00
Net7Cracker 59801507f8 Support dotFuscator pro Version. (#131)
* Support dotFuscator pro Version.
Fix string decrypter and add ControlFlow cleaner

* fix pro Version Check

* fixed some codes
2017-09-24 19:36:10 +02:00
PoroCYon 126758fa6f Fix compiler errors (on mono) (#123) 2017-01-05 13:46:04 +01:00
XODE0 be964e1637 Fix for .NETReactor versions(4.7+). 2016-03-19 20:13:02 +01:00
XODE0 bbe3d325fb Fix for old .NETReactor versions. 2016-03-19 18:26:07 +01:00
XODE0 38cfc6507a Update EncryptedResource.cs 2016-03-19 16:26:05 +01:00
XODE0 f6a107c9bf Support dotNETReactor v5.0.0.0 2016-03-19 16:16:22 +01:00
xode0 236b1768f4 Fix for the last .NETReactor. 2016-02-16 23:47:14 +01:00
de4dot 958ad86ceb Fix merge 2016-02-11 20:50:54 +01:00
0xd4d 71eddd4689 Merge pull request #119 from XODE0/master
Add resource name decryption for Crypto.
2016-02-11 20:43:35 +01:00
xode0 6bfb3bc4a7 Add resource name decryption
.

Update Crypto StringDecrypter and move DecryptResourceName from ConstantsDecrypter to CoUtils.

Follow de4dot coding style.

Tabify the last commits.
2016-02-11 20:28:00 +01:00
PythEch 17c23f9ad7 Use default shift constants when Eazfuscator.NET < 5.0 2016-02-06 17:38:14 +02:00
PythEch d7c7c7ce85 Fix Indentation 2016-01-24 00:47:09 +02:00
PythEch 2581da1c26 Make it compatible with 5.0 again
Version detection may be flawed since it checks if the string decryptor
method uses cgt.un instead of ceq for flags because the changes in 5.1
are subtle.
2016-01-24 00:45:37 +02:00
PythEch 84e0aa0b77 Fix the calculation of magic
It seems that Eazfuscator.NET sometimes calculates the magic with
different constants so I had to get them programmatically
2016-01-23 22:55:29 +02:00