admin/0xd4d-de4dot
1
0
Fork 0
mirror of https://github.com/0xd4d/de4dot synced 2026-06-08 10:09:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
844 Commits 1 Branch 0 Tags
c2d13d9059686060f7c8656ba2e1a09d03d03b70
Commit Graph

637 Commits

Author SHA1 Message Date
de4dot c2d13d9059 Remove all invalid methods 2012-02-12 16:29:29 +01:00
de4dot 4691c805d8 Ignore invalid methods 2012-02-12 16:25:12 +01:00
de4dot 46f23ce89d Add InvalidMethodsFinder 2012-02-12 16:24:59 +01:00
de4dot c15773b709 Merge branch 'cv' into next_version 
Conflicts:
	blocks/DotNetUtils.cs
 2012-02-12 14:47:24 +01:00
de4dot c73fcfc1d0 Remove CV type if it is empty 2012-02-12 14:38:42 +01:00
de4dot 5ce1f74263 Position has already been set to 0 2012-02-12 14:29:11 +01:00
de4dot 037cb5bc68 Decrypt the remaining (EREX) resources 2012-02-12 14:28:53 +01:00
de4dot 9a6bd53cb9 Remove obfuscator obfuscator bundle types 2012-02-12 13:38:23 +01:00
de4dot ded45dcb7a Remove proxy method types and main type 2012-02-12 13:00:38 +01:00
de4dot ff55be46b6 Rename getField() to getFieldByName() and add a real getField() method 2012-02-12 12:53:36 +01:00
de4dot 8999eb8e0f Remove CV main type methods if < v5.0 2012-02-12 12:08:46 +01:00
de4dot 42f66c3948 Fix detection; 3.2 doesn't have those extra fields 2012-02-12 12:03:55 +01:00
de4dot d6327b401e Remove all anti-reflection types 2012-02-12 11:39:00 +01:00
de4dot 80d338637e Add method to remove classes with no base type 2012-02-12 11:35:18 +01:00
de4dot 18cd71ecdc Update detection (v5.0) 2012-02-11 23:39:37 +01:00
de4dot 070acc59f1 Bail out earlier if not encrypted 2012-02-11 23:23:51 +01:00
de4dot 91f7d2cb51 Find and remove resource decrypter types 2012-02-11 23:23:25 +01:00
de4dot c18bed7d69 Add namespace 2012-02-11 23:11:54 +01:00
de4dot bffbe419d5 Add hasInteger() method 2012-02-11 23:11:41 +01:00
de4dot d44db9871e Add log message that we have decrypted a resource 2012-02-11 21:51:48 +01:00
de4dot 57b947a3da Add InvalidDataException 2012-02-11 21:49:22 +01:00
de4dot 8b2ef5d6bb Update if expression 2012-02-11 21:43:26 +01:00
de4dot cd7d3724c3 Move fields from binder to exception 2012-02-11 21:30:54 +01:00
de4dot 9050af8a03 Refactor method 2012-02-11 19:34:07 +01:00
de4dot ccd7d2ac79 Decrypt .resources files 2012-02-11 16:46:39 +01:00
de4dot e5a72396c2 Remove length parameter from xxxteaDecrypt() 2012-02-11 16:46:02 +01:00
de4dot 76d9e87c3c Add code to write .resources files 2012-02-11 16:43:53 +01:00
de4dot ae97752d9c Set data field to a 1-byte array 2012-02-09 10:14:59 +01:00
de4dot ba399609c7 Initialize otherInitMethods in 2nd ctor 2012-02-09 10:14:29 +01:00
de4dot 45bf016a2e Rename method 2012-02-09 10:14:08 +01:00
de4dot 15713a2b38 Check assembly for null (it could be a netmodule) 2012-02-08 22:01:10 +01:00
de4dot d5089fa888 Remove kill type in deobfuscateBegin() 2012-02-08 19:54:05 +01:00
de4dot b5c8a89b32 Remove init method calls called from .ctors 2012-02-08 19:40:17 +01:00
de4dot a8d6aac306 Update detection of tamper detection types when proxy calls are enabled 2012-02-08 19:36:58 +01:00
de4dot 04247b5533 Remove most calls to main CV type 2012-02-08 19:21:00 +01:00
de4dot c757139357 Remove string decrypter type 2012-02-08 18:58:06 +01:00
de4dot 98c8ea49e9 Remove tamper detection code 2012-02-08 18:40:24 +01:00
de4dot 1583552825 Make sure rvas list is never null 2012-02-08 16:14:07 +01:00
de4dot 780da4a0ad Update detection of encrypted methods data 2012-02-08 15:52:39 +01:00
de4dot fa6b0d4054 Move detection of CV main type to its own class 2012-02-08 15:40:11 +01:00
de4dot bb89ce2983 Remove method since base class now has the same method 2012-02-08 15:19:45 +01:00
de4dot 1e3daf3b45 Dump embedded assemblies 2012-02-08 12:33:02 +01:00
de4dot 09e840923d Search for sig starting from _stub RVA 2012-02-08 09:29:49 +01:00
de4dot a8d4b38c79 Mover version info to a new ObfuscatorVersion enum 2012-02-08 08:55:45 +01:00
de4dot 0e89c0fc35 Only check Version property if methods decrypter was found 2012-02-08 08:50:36 +01:00
de4dot 776fd7f69f Speed up finding V5 methods decrypter type 2012-02-07 15:17:41 +01:00
de4dot 1076218a81 Detect CV version 2012-02-07 15:05:27 +01:00
de4dot 6ab0748bdd Decrypt V5 encrypted methods 2012-02-07 14:55:20 +01:00
de4dot f11c51830f Make sure info is copied 2012-02-07 14:53:58 +01:00
de4dot 97d09c4c65 Make method accessible by sub classes 2012-02-07 14:53:34 +01:00