public StringDecrypter(ModuleDefMD module, StringDecrypter oldOne) { this.module = module; stringDecrypterType = lookup(oldOne.stringDecrypterType, "Could not find stringDecrypterType"); stringDecrypterMethod = lookup(oldOne.stringDecrypterMethod, "Could not find stringDecrypterMethod"); stringDecrypterKey = oldOne.stringDecrypterKey; }
public StringDecrypter(ModuleDefMD module, StringDecrypter oldOne) { this.module = module; stringDecrypterType = Lookup(oldOne.stringDecrypterType, "Could not find stringDecrypterType"); keyInitField = Lookup(oldOne.keyInitField, "Could not find key init field"); keyArrayField = Lookup(oldOne.keyArrayField, "Could not find key array field"); foreach (var info in oldOne.stringDecrypterInfos.Keys) { var m = Lookup(info.Method, "Could not find string decrypter method"); var f = Lookup(info.Field, "Could not find string decrypter field"); stringDecrypterInfos[new StringDecrypterInfo(m, f)] = true; } stringDecrypterKey = oldOne.stringDecrypterKey; }
protected override void scanForObfuscator() { findCliSecureAttribute(); cliSecureRtType = new CliSecureRtType(module); cliSecureRtType.find(ModuleBytes); stringDecrypter = new StringDecrypter(module, cliSecureRtType.StringDecrypterMethod); stringDecrypter.find(); resourceDecrypter = new ResourceDecrypter(module); resourceDecrypter.find(); proxyCallFixer = new ProxyCallFixer(module); proxyCallFixer.findDelegateCreator(); csvm = new vm.Csvm(DeobfuscatedFile.DeobfuscatorContext, module); csvm.find(); }
protected override void ScanForObfuscator() { FindCliSecureAttribute(); cliSecureRtType = new CliSecureRtType(Module); cliSecureRtType.Find(ModuleBytes); stringDecrypter = new StringDecrypter(Module, cliSecureRtType.StringDecrypterInfos); stringDecrypter.Find(); resourceDecrypter = new ResourceDecrypter(Module); resourceDecrypter.Find(); proxyCallFixer = new ProxyCallFixer(Module); proxyCallFixer.FindDelegateCreator(); csvmV1 = new vm.v1.Csvm(DeobfuscatedFile.DeobfuscatorContext, Module); csvmV1.Find(); csvmV2 = new vm.v2.Csvm(DeobfuscatedFile.DeobfuscatorContext, Module); csvmV2.Find(); }