Ejemplo n.º 1
0
 protected override void ScanForObfuscator()
 {
     RemoveObfuscatorAttribute();
     jitMethodsDecrypter = new JitMethodsDecrypter(Module, DeobfuscatedFile);
     try {
         jitMethodsDecrypter.Find();
     }
     catch {
     }
     if (jitMethodsDecrypter.Detected)
     {
         InitializeObfuscatorName();
         return;
     }
     memoryMethodsDecrypter = new MemoryMethodsDecrypter(Module, DeobfuscatedFile);
     memoryMethodsDecrypter.Find();
     if (memoryMethodsDecrypter.Detected)
     {
         InitializeObfuscatorName();
         return;
     }
     InitializeTheRest(null);
 }
Ejemplo n.º 2
0
 public MemoryMethodsDecrypter(ModuleDefMD module, ISimpleDeobfuscator simpleDeobfuscator, MemoryMethodsDecrypter other)
     : base(module, simpleDeobfuscator, other)
 {
     if (other != null)
     {
         version = other.version;
     }
 }
		public MemoryMethodsDecrypter(ModuleDefMD module, ISimpleDeobfuscator simpleDeobfuscator, MemoryMethodsDecrypter other)
			: base(module, simpleDeobfuscator, other) {
			if (other != null)
				this.version = other.version;
		}
Ejemplo n.º 4
0
		protected override void ScanForObfuscator() {
			RemoveObfuscatorAttribute();
			jitMethodsDecrypter = new JitMethodsDecrypter(module, DeobfuscatedFile);
			try {
				jitMethodsDecrypter.Find();
			}
			catch {
			}
			if (jitMethodsDecrypter.Detected) {
				InitializeObfuscatorName();
				return;
			}
			memoryMethodsDecrypter = new MemoryMethodsDecrypter(module, DeobfuscatedFile);
			memoryMethodsDecrypter.Find();
			if (memoryMethodsDecrypter.Detected) {
				InitializeObfuscatorName();
				return;
			}
			InitializeTheRest(null);
		}