diff --git a/de4dot.code/deobfuscators/CryptoObfuscator/AntiDebugger.cs b/de4dot.code/deobfuscators/CryptoObfuscator/AntiDebugger.cs index 78b7f090d..90eccda6c 100644 --- a/de4dot.code/deobfuscators/CryptoObfuscator/AntiDebugger.cs +++ b/de4dot.code/deobfuscators/CryptoObfuscator/AntiDebugger.cs @@ -66,6 +66,7 @@ bool Find(MethodDef methodToCheck) { !ContainsString(method, "run with") && !ContainsString(method, "started under") && !ContainsString(method, "{0} detected") && + !ContainsString(method, "{0} was found - this software cannot be executed") && !ContainsString(method, "{0} found")) continue; diff --git a/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs b/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs index 3fca701fe..5b96349fb 100644 --- a/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs +++ b/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs @@ -313,6 +313,8 @@ static IEnumerable GetDecrypterMethods(TypeDef type) { yield return method; else if (DotNetUtils.IsMethod(method, "System.Byte[]", "(System.Char,System.IO.Stream)")) yield return method; + else if (DotNetUtils.IsMethod(method, "System.Byte[]", "(System.Int64,System.Object)")) + yield return method; } }