0xMcX
0d5ce67987
stack recovery for dup & ldelem.ref ( #206 )
...
* dup recursive search
* previous instruction from branch
* ldelem.ref if operand is ref type
* methodstack without loops and check for fall through
* without Linq
* without recursivity
* optimisation
* Added branch backtracking
* CRLF to LF
* Added range check
2020-06-08 19:00:43 +02:00
浅陌兮
f8f52c734d
remove stringbuilder crypter ( #202 )
...
* Add files via upload
remove stringbuilder crypter
* Update Deobfuscator.cs
remove stringbuilder crypter
* Format this file
* Format this file and fix some errors
2019-09-03 22:26:17 +02:00
de4dot
ba8ee30e82
Remove useless braces
2019-06-25 06:36:26 +02:00
Diego Ernesto Farías
bfd82046d2
Updated TamperProtectionRemover for SmartAssembly ( #201 )
...
* Updated TamperProtectionRemover for SmartAssembly
Added compatibilty to remove tamper protection for SmartAssembly 7.0.3.2212+ (and others). Added new anti-tamper IL instructions as comment for a best reference.
* Update TamperProtectionRemover.cs
2019-06-25 06:34:02 +02:00
Behnam Momeni
6842287b92
Updating MVID of deobfuscated modules ( #199 )
...
* Updating MVID of deobfuscated modules
* Creating a random GUID for the new MVID value
2019-02-17 22:36:37 +01:00
etmatrix
ef59696d5f
CryptoObfuscator: Improvements for ResourceDecrypter and AntiDebugger
2019-02-02 08:45:33 +01:00
etmatrix
8c5d2b0c02
CryptoObfuscator: Fix an issue on GetProxyCreateMethod, not find delegate creator and proxy call fixer is not activated.
2019-01-27 21:27:20 +01:00
de4dot
db2fef8d72
Remove utf8 bom
2019-01-01 12:53:38 +01:00
de4dot
5109679b6b
Use NETFRAMEWORK
2018-11-14 15:42:43 +01:00
de4dot
c6f392016e
Target .NET Core 2.1 and .NET Framework 3.5
2018-10-17 21:03:45 +02:00
de4dot
737ef1cfc5
Remove public, add static
2018-05-22 22:02:46 +02:00
destnity2018
dfaff152f9
update cflow cleaner of 4.33 pro
2018-05-20 07:43:06 +08:00
de4dot
3b5b98bd9b
Format code
2018-04-29 03:06:59 +02:00
0xd4d
17346ee1e2
Merge pull request #151 from destnity/master
...
fix string decrypter
2018-04-29 03:03:54 +02:00
de4dot
d44974d8a2
Use latest dnlib
2018-04-28 04:13:36 +02:00
FishUncle
f92c122a28
fix string decrypter
2018-04-24 01:08:53 +08:00
de4dot
a246ca94bf
Add updated submodule
2018-03-30 16:37:23 +02:00
0xd4d
3cf3ea3a67
Merge pull request #142 from GhostFish2018/master
...
fix couldn't calculate magic value exception Error.
2018-03-19 11:05:49 +01:00
ghostfish
de75caf3d1
Fix the exception:
...
Couldn't calculate magic value
So I am the bad guy.
2018-03-19 11:23:22 +08:00
de4dot
e9f938a030
Don't statically decrypt strings if dynamic decryption is enabled, fixes #140
2018-03-18 15:15:11 +01:00
de4dot
01f29039f2
Update project files, use C# 7.2
2018-03-16 21:38:41 +01:00
de4dot
6cbb3e18eb
Use dnlib 3.0
2018-03-16 07:26:24 +01:00
GhostFish2018
e8e12f6501
Fix CheckFields of ResourceResolver to fit Dnr5 ( #139 )
...
* fix to support DNR 4.99 and 5.0
* Fix CheckFields to Fit NR5
2018-01-26 18:36:16 +01:00
GhostFish2018
bf3a660fa8
fix to support DNR 4.99 and 5.0 ( #138 )
2018-01-17 23:52:33 +01:00
de4dot
f30a61cc4b
Add parens
2018-01-11 02:05:32 +01:00
Twometer
5613ca3136
Support for some DNR >=4.8 versions ( #137 )
...
* Support for some DNR >=4.8 versions
* undone using the latest c# version
* fixed code typo
* Fixed the new detection code
* Fixed for older DNR versions
2018-01-11 02:03:27 +01:00
HoLLy
b4d8ac928a
Fix decrypter type getting removed ( #136 )
...
* Fix Eazfuscator detection
* Detect new Eazfuscator version
* Eaz 5.8 has been released already
* Various fixes
* Completely fix Eazfuscator string decryption
* Fix version detection
* Fix decrypter type getting removed
2017-10-30 23:42:39 +01:00
HoLLy
da23d834bb
Fix version detection
2017-10-30 19:31:30 +01:00
HoLLy
59767bfb76
Completely fix Eazfuscator string decryption
2017-10-30 19:31:30 +01:00
HoLLy
d694d2d319
Various fixes
2017-10-30 19:31:30 +01:00
HoLLy
16e3d7d9c9
Eaz 5.8 has been released already
2017-10-30 19:31:30 +01:00
HoLLy
701c6cd807
Detect new Eazfuscator version
2017-10-30 19:31:30 +01:00
HoLLy
55a3f3b762
Fix Eazfuscator detection
2017-10-30 19:31:30 +01:00
de4dot
68d412ed2e
Fix merge
2017-09-27 20:55:41 +02:00
cawk
e29fb57078
Sorry Small Fix ( #134 )
...
* Agile VM Support
This supports latest agile vm
* Fix
* Supports
* t
* Fix Or
* Delete CSVM6.bin
2017-09-27 20:52:48 +02:00
cawk
2eec34719f
Agile VM Support ( #133 )
...
* Agile VM Support
This supports latest agile vm
* Fix
* Supports
2017-09-27 19:44:59 +02:00
Net7Cracker
59801507f8
Support dotFuscator pro Version. ( #131 )
...
* Support dotFuscator pro Version.
Fix string decrypter and add ControlFlow cleaner
* fix pro Version Check
* fixed some codes
2017-09-24 19:36:10 +02:00
PoroCYon
126758fa6f
Fix compiler errors (on mono) ( #123 )
2017-01-05 13:46:04 +01:00
XODE0
be964e1637
Fix for .NETReactor versions(4.7+).
2016-03-19 20:13:02 +01:00
XODE0
bbe3d325fb
Fix for old .NETReactor versions.
2016-03-19 18:26:07 +01:00
XODE0
38cfc6507a
Update EncryptedResource.cs
2016-03-19 16:26:05 +01:00
XODE0
f6a107c9bf
Support dotNETReactor v5.0.0.0
2016-03-19 16:16:22 +01:00
xode0
236b1768f4
Fix for the last .NETReactor.
2016-02-16 23:47:14 +01:00
de4dot
958ad86ceb
Fix merge
2016-02-11 20:50:54 +01:00
0xd4d
71eddd4689
Merge pull request #119 from XODE0/master
...
Add resource name decryption for Crypto.
2016-02-11 20:43:35 +01:00
xode0
6bfb3bc4a7
Add resource name decryption
...
.
Update Crypto StringDecrypter and move DecryptResourceName from ConstantsDecrypter to CoUtils.
Follow de4dot coding style.
Tabify the last commits.
2016-02-11 20:28:00 +01:00
PythEch
17c23f9ad7
Use default shift constants when Eazfuscator.NET < 5.0
2016-02-06 17:38:14 +02:00
PythEch
d7c7c7ce85
Fix Indentation
2016-01-24 00:47:09 +02:00
PythEch
2581da1c26
Make it compatible with 5.0 again
...
Version detection may be flawed since it checks if the string decryptor
method uses cgt.un instead of ceq for flags because the changes in 5.1
are subtle.
2016-01-24 00:45:37 +02:00
PythEch
84e0aa0b77
Fix the calculation of magic
...
It seems that Eazfuscator.NET sometimes calculates the magic with
different constants so I had to get them programmatically
2016-01-23 22:55:29 +02:00