Commit Graph

775 Commits

Author SHA1 Message Date
de4dot 3a8e1499f2 Use dynamic decryption if static decryption fails 2012-04-11 03:09:59 +02:00
de4dot 588373f5ff Add code to decrypt methods using the new dynamic methods decrypter 2012-04-10 21:28:22 +02:00
de4dot 1e33610ce8 Support latest MC build 2012-04-10 19:06:03 +02:00
de4dot b97dacbc54 Merge branch 'cs' 2012-04-10 16:32:40 +02:00
de4dot c756d543c1 Rename PE namespace 2012-04-10 16:32:15 +02:00
de4dot c5d9cc47ba Add code to decrypt methods dynamically.
This is not a generic methods decrypter that can decrypt any obfuscator's
encrypted methods. If it hooks compileMethod(), this code probably can
decrypt the methods. If not, a little rewriting should fix that.
2012-04-10 16:17:45 +02:00
de4dot ffa61e6a89 Move PE code to a common assembly 2012-04-10 15:09:59 +02:00
de4dot 553337adb7 Support EF 3.3.149 2012-04-10 03:52:18 +02:00
de4dot 2d583316cf Use the constant 2012-04-08 11:36:24 +02:00
de4dot 634e9ec023 Reverse return value 2012-04-07 06:47:19 +02:00
de4dot 11f992b0f2 Support some more instrs 2012-04-06 22:07:52 +02:00
de4dot 52d6f73f5e Add a newline 2012-04-06 16:36:07 +02:00
de4dot 1f74aeb1cf Rename variable 2012-04-06 16:25:25 +02:00
de4dot 33e2177059 Restore constrained. prefix 2012-04-06 16:08:35 +02:00
de4dot 1935e58dbf Support ldloca and ldarga 2012-04-06 16:08:09 +02:00
de4dot 5511ab833b Update ldelema type, and add unbox.any and ldobj 2012-04-06 15:38:44 +02:00
de4dot 2949862614 Print warning if we failed to restore an instr op 2012-04-06 12:33:39 +02:00
de4dot c39e421010 Fix locals 2012-04-06 12:25:15 +02:00
de4dot 86190ede1f Print devirtualized methods 2012-04-06 11:05:06 +02:00
de4dot 7ec17b6b23 Move class to its own file 2012-04-05 20:59:50 +02:00
de4dot 237732e98e Refactor 2012-04-05 20:45:16 +02:00
de4dot da0878d765 Restore types that are generic parameters 2012-04-05 19:38:05 +02:00
de4dot a38fe57ec1 Add CSVM devirtualizer 2012-04-05 19:15:10 +02:00
de4dot 0adbb3e70a Move code to a new class 2012-04-05 18:05:27 +02:00
de4dot 1ead27107b Don't add to list if null 2012-04-05 17:06:27 +02:00
de4dot 9cfe8431f6 Add shared deobfuscator data/methods 2012-04-04 21:06:10 +02:00
de4dot 7c8259905b Update CO code. Fixes #39 2012-03-31 13:53:33 +02:00
de4dot ab3c970cf4 Remove useless using statement 2012-03-29 04:52:39 +02:00
de4dot ec775b9ef5 Support another SK string encrypter 2012-03-27 15:33:57 +02:00
de4dot 065927f702 Use the property 2012-03-27 15:23:27 +02:00
de4dot d1e499454e Rename locals and fix problem with huge strings 2012-03-27 02:27:26 +02:00
de4dot 6e188aa7e0 Decrypt MC encrypted strings 2012-03-26 22:07:01 +02:00
de4dot e76321aaad Remove unused method 2012-03-26 20:12:07 +02:00
de4dot 716098d33a Change locals to instance variables 2012-03-26 19:34:09 +02:00
de4dot e62d4f910a Update detection of MC type 2012-03-24 19:35:38 +01:00
de4dot 4e042166b9 Fix getSectionHeader() 2012-03-24 19:13:58 +01:00
de4dot b323612508 New version: 1.7.4 2012-03-23 10:14:26 +01:00
de4dot efd317489d Support latest EF 3.3.143 2012-03-23 10:13:59 +01:00
de4dot 8ca040f0da Use callsMethod() 2012-03-21 03:49:28 +01:00
de4dot 7f1bad748e Add more asm search paths 2012-03-21 03:37:10 +01:00
de4dot ad5a759cd9 Remove useless cases 2012-03-21 03:19:26 +01:00
de4dot 1e9b20e432 Support EF obfuscated CF assemblies 2012-03-18 22:59:34 +01:00
de4dot e1292b2930 Add some more assembly search paths 2012-03-18 19:15:33 +01:00
de4dot 353673811b Fix problem where some WinForm property names weren't restored 2012-03-18 12:55:21 +01:00
de4dot 4b81854ea5 Restore resource names ending in ".g.resources" 2012-03-17 22:12:51 +01:00
de4dot 6f01d48593 Change getCalledMethods() return type 2012-03-17 20:36:41 +01:00
de4dot 0b858c47ed Support DS obfuscated SL assemblies 2012-03-17 15:02:48 +01:00
de4dot 37450a1515 Support old DS 3.0.3.41 - 3.0.4.44 2012-03-17 14:11:37 +01:00
de4dot 48c7d40fb6 Inline method 2012-03-17 11:19:03 +01:00
de4dot a3b052d15c Should be "continue" 2012-03-17 11:18:52 +01:00