603 Commits

Author	SHA1	Message	Date
de4dot	91f7d2cb51	Find and remove resource decrypter types	2012-02-11 23:23:25 +01:00
de4dot	c18bed7d69	Add namespace	2012-02-11 23:11:54 +01:00
de4dot	bffbe419d5	Add hasInteger() method	2012-02-11 23:11:41 +01:00
de4dot	d44db9871e	Add log message that we have decrypted a resource	2012-02-11 21:51:48 +01:00
de4dot	57b947a3da	Add InvalidDataException	2012-02-11 21:49:22 +01:00
de4dot	8b2ef5d6bb	Update if expression	2012-02-11 21:43:26 +01:00
de4dot	cd7d3724c3	Move fields from binder to exception	2012-02-11 21:30:54 +01:00
de4dot	9050af8a03	Refactor method	2012-02-11 19:34:07 +01:00
de4dot	ccd7d2ac79	Decrypt .resources files	2012-02-11 16:46:39 +01:00
de4dot	e5a72396c2	Remove length parameter from xxxteaDecrypt()	2012-02-11 16:46:02 +01:00
de4dot	76d9e87c3c	Add code to write .resources files	2012-02-11 16:43:53 +01:00
de4dot	ae97752d9c	Set data field to a 1-byte array	2012-02-09 10:14:59 +01:00
de4dot	ba399609c7	Initialize otherInitMethods in 2nd ctor	2012-02-09 10:14:29 +01:00
de4dot	45bf016a2e	Rename method	2012-02-09 10:14:08 +01:00
de4dot	15713a2b38	Check assembly for null (it could be a netmodule)	2012-02-08 22:01:10 +01:00
de4dot	d5089fa888	Remove kill type in deobfuscateBegin()	2012-02-08 19:54:05 +01:00
de4dot	b5c8a89b32	Remove init method calls called from .ctors	2012-02-08 19:40:17 +01:00
de4dot	a8d6aac306	Update detection of tamper detection types when proxy calls are enabled	2012-02-08 19:36:58 +01:00
de4dot	04247b5533	Remove most calls to main CV type	2012-02-08 19:21:00 +01:00
de4dot	c757139357	Remove string decrypter type	2012-02-08 18:58:06 +01:00
de4dot	98c8ea49e9	Remove tamper detection code	2012-02-08 18:40:24 +01:00
de4dot	1583552825	Make sure rvas list is never null	2012-02-08 16:14:07 +01:00
de4dot	780da4a0ad	Update detection of encrypted methods data	2012-02-08 15:52:39 +01:00
de4dot	fa6b0d4054	Move detection of CV main type to its own class	2012-02-08 15:40:11 +01:00
de4dot	bb89ce2983	Remove method since base class now has the same method	2012-02-08 15:19:45 +01:00
de4dot	1e3daf3b45	Dump embedded assemblies	2012-02-08 12:33:02 +01:00
de4dot	09e840923d	Search for sig starting from _stub RVA	2012-02-08 09:29:49 +01:00
de4dot	a8d4b38c79	Mover version info to a new ObfuscatorVersion enum	2012-02-08 08:55:45 +01:00
de4dot	0e89c0fc35	Only check Version property if methods decrypter was found	2012-02-08 08:50:36 +01:00
de4dot	776fd7f69f	Speed up finding V5 methods decrypter type	2012-02-07 15:17:41 +01:00
de4dot	1076218a81	Detect CV version	2012-02-07 15:05:27 +01:00
de4dot	6ab0748bdd	Decrypt V5 encrypted methods	2012-02-07 14:55:20 +01:00
de4dot	f11c51830f	Make sure info is copied	2012-02-07 14:53:58 +01:00
de4dot	97d09c4c65	Make method accessible by sub classes	2012-02-07 14:53:34 +01:00
de4dot	3276f433c9	Add code to detect V5 methods decrypter	2012-02-07 05:08:02 +01:00
de4dot	0aeee176cc	Merge v3-v4 and v5 code	2012-02-07 04:45:59 +01:00
de4dot	f1a1188409	Add a new ctor to copy values from old instance	2012-02-07 04:45:04 +01:00
de4dot	8f9cc6d290	Re-use v3-v4 string decrypter	2012-02-07 03:03:49 +01:00
de4dot	d512889833	Fix 'shadow calls' obfuscation	2012-02-07 02:07:31 +01:00
de4dot	c2313110b8	Add getDelegateTypes() and fix findProxyCall()	2012-02-07 02:02:49 +01:00
de4dot	ad8a5078fe	Rename method	2012-02-07 00:42:32 +01:00
de4dot	2ccb35afb0	Add CV5 files	2012-02-06 15:55:35 +01:00
de4dot	26bf21a84e	Show obfuscator version	2012-02-06 15:55:14 +01:00
de4dot	b39725f12f	Remove useless 'using'	2012-02-06 15:52:19 +01:00
de4dot	0d6542e383	Move v3-v4 code to a sub dir	2012-02-06 15:49:27 +01:00
de4dot	da3a28f0a8	Move (and rename) XXTEA decrypt func to DeobUtils	2012-02-06 08:22:55 +01:00
de4dot	b867301797	Update valid name regex	2012-02-06 08:20:04 +01:00
de4dot	b3750f9d4c	Initialize its token field	2012-02-05 23:04:24 +01:00
de4dot	542c6bb213	Support 3.2 methods decrypter	2012-02-05 22:49:10 +01:00
de4dot	d5c3a6964b	Support 4.0 methods decrypter	2012-02-05 21:27:36 +01:00