Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Q: What's all the fuss regarding .NET Reflector? (https://forum.exetools.com/showthread.php?t=18665)

Stingered 02-18-2018 12:13

Q: What's all the fuss regarding .NET Reflector?
 
I'm a newb in .NET RE, but when I use DnSpy, it seems like a MUCH better product - to me at least. I love how it can create a project file out of an EXE (not perfect - but damn, it's close).

Anyway, I'm asking if there is some cool option in Reflector that I'm missing because the free tool seems a clear winner.

-thx

sendersu 02-19-2018 21:56

Reflector has different decompiler, so you never know which one will produce better output...
btw, dnSPy is based on old ILSpy (v2.x) decompiler which is pretty poor (eg can't take care of lambdas, etc)

ILSpy v3 in this scense is a cosmic rocket (but still in dev phase...)

Stingered 02-20-2018 01:26

Quote:

Originally Posted by sendersu (Post 112315)
Reflector has different decompiler, so you never know which one will produce better output...
btw, dnSPy is based on old ILSpy (v2.x) decompiler which is pretty poor (eg can't take care of lambdas, etc)

ILSpy v3 in this scense is a cosmic rocket (but still in dev phase...)

Hmmm... Never thought of it in that respect of decompiler differences. Good feeback. Although, I do like the debugging aspect of dnSPY, which I don't see in Reflector. But I guess it's no different in the respect of different tools for different tasks.

sendersu 02-20-2018 05:12

from debugging point of view dnSpy
is

a
super
nova
rock
star


no one is even a 100 miles neaby....

I'm serios - dnSpy is a genious .net debugger, the best ever seen!

sendersu 02-20-2018 05:18

Addendum - I'm also using these .net decompilers (not debuggers)
free, but closed source

- Telerik Just Decompile http://prntscr.com/ih1nzp
and
- JetBrains DotPeek http://prntscr.com/ih1q5u

the rest are rather old and or obsoleted...

a very few supports latest .net - core ed.

chants 02-20-2018 06:58

Can any .NET decompiler handle 100% of control flow constructs? Or are they all doing non-general naïve structuring algorithms? It seems the algo's are always kept quite proprietary but the graph structure is the only real interesting part of the decompiler.

Stingered 02-21-2018 07:55

Quote:

Originally Posted by chants (Post 112326)
Can any .NET decompiler handle 100% of control flow constructs? Or are they all doing non-general naïve structuring algorithms? It seems the algo's are always kept quite proprietary but the graph structure is the only real interesting part of the decompiler.

Forgive my ignorance, but I've not seen a graph view in a .NET disassembler. And my guess would be no, to your question, based on the different output I've seen by decompiling the same EXE using different tools. I think you can get close, if you know the language and framework. However, compiler options, etc, would dictate that you would never see a true representation, regardless. That said, you may want to start your own thread to get a potentially better response.

sendersu 02-21-2018 16:08

what do you mean under compiler options?
AFAIK there are no optimisation levels in C# comparing to C/C++ (-O1...5)

the question is that once some dirty packer eats genuine brilliant IL byes... they become pretty crazy to almost any decompiler :)

goggles99 02-21-2018 16:21

.NET Reflector was the first popular decompiler for .NET languages. It was freeware and had an extension API with quite a few useful community provided extensions. After being freeware for a number of years, the author sold it to redgate which commercialized it. Since then, many freeware and FOSS alternatives have appeared, and rival Reflector in quality.

I guess the fuss surrounding it is because it was once king, and it is the oldest of the good decompilers even though many abandoned it and consider the author a sellout.

wilson bibe 02-21-2018 16:43

In first contact with any net assembly the SAE is the way in my opinion, normaly this tool is enought to reverse the aplication, however sometimes the reflector-telerik-ilspy-dotpeek and a debugger dnspy(fantastic tool) need be used too. Reflector have good plugins like dnlibeditor developed by codecracker so you can manage app's in mixed mode, and the reflexil and others. So for me in the net languages scenario it is essential to have at least three tools: SAE, Reflector or Other, and finally the Dnspy.

Stingered 02-22-2018 06:53

Quote:

Originally Posted by sendersu (Post 112342)
what do you mean under compiler options?
AFAIK there are no optimisation levels in C# comparing to C/C++ (-O1...5)

the question is that once some dirty packer eats genuine brilliant IL byes... they become pretty crazy to almost any decompiler :)

Hmmm, that's probably true (as in levels of optimization - sry if I misunderstand you), but there are several compiler options and I thought there was an -optimize option in there somewhere. I'm certainly no expert. ;)

Stingered 02-22-2018 07:02

Quote:

Originally Posted by wilson bibe (Post 112345)
In first contact with any net assembly the SAE is the way in my opinion, normaly this tool is enought to reverse the aplication, however sometimes the reflector-telerik-ilspy-dotpeek and a debugger dnspy(fantastic tool) need be used too. Reflector have good plugins like dnlibeditor developed by codecracker so you can manage app's in mixed mode, and the reflexil and others. So for me in the net languages scenario it is essential to have at least three tools: SAE, Reflector or Other, and finally the Dnspy.

Excuse my ignorance. Are you talking this?

https://github.com/wickyhu/simple-assembly-explorer

Sadly, the external download locations for DnlibEditor.zip (posted on this forum) are all dead. If you provide an external link, I would be very grateful.

Cheers!

wilson bibe 02-22-2018 16:42

Quote:

Originally Posted by Stingered (Post 112356)
Excuse my ignorance. Are you talking this?

https://github.com/wickyhu/simple-assembly-explorer

Sadly, the external download locations for DnlibEditor.zip (posted on this forum) are all dead. If you provide an external link, I would be very grateful.

Cheers!

You can download this tool here:http://www115.zippyshare.com/v/KHXCRi80/file.html

sendersu 02-22-2018 19:27

wow, old good SAE - is it still supported?

Stingered 02-23-2018 00:55

Quote:

Originally Posted by sendersu (Post 112367)
wow, old good SAE - is it still supported?

The GitHub repository I found is 3yrs since last change. I don't know the original author, so... :(

wilson bibe 02-23-2018 02:49

Some time ago Dreamer published the SAE v1.15.00 r579 but not compiled, if someone want to try a look on it and compile, because I don't have a compiler for this, I would be in advance grateful.
http://www34.zippyshare.com/v/yg4siGfE/file.html
*I don't know for what the paste called "testproject", there are old versions of reflector and de4dot in it.

sendersu 02-23-2018 04:51

WOW guys

http://prntscr.com/iigsjv

https://www.red-gate.com/updatecontrols/details?etc=-2023532&guid=00000000-0000-0000-0000-000000000000&update=2111

sendersu 02-23-2018 05:17

thanks for latest sources of SAE!

I've built it
...
========== Rebuild All: 22 succeeded, 0 failed, 0 skipped ==========

and uploaded here, enjoy


https://www.sendspace.com/file/ktczma

Stingered 02-25-2018 00:46

Quote:

Originally Posted by sendersu (Post 112376)
thanks for latest sources of SAE!

I've built it
...
========== Rebuild All: 22 succeeded, 0 failed, 0 skipped ==========

and uploaded here, enjoy


https://www.sendspace.com/file/ktczma

That's cool. I built it, as well, but got some errors (the SAE-specific content builds fine). Did you make any modifications? Just curious. Also, what version of VS did you use?

niculaita 02-25-2018 02:49

Quote:

Originally Posted by sendersu (Post 112376)
thanks for latest sources of SAE!
I've built it
...
========== Rebuild All: 22 succeeded, 0 failed, 0 skipped ==========
and uploaded here, enjoy

https://www.sendspace.com/file/ktczma

http://nitroflare.com/view/E42F9FEDD3F50FF/sanet.cd_ReflectorInstaller_10.0.4.406.rar
or http://www6.zippyshare.com/v/3eFjJglO/file.html

sendersu 02-26-2018 18:17

Quote:

Originally Posted by Stingered (Post 112384)
That's cool. I built it, as well, but got some errors (the SAE-specific content builds fine). Did you make any modifications? Just curious. Also, what version of VS did you use?

what errors did you get?
I"ve added almost 0 changes (just some micro upd to About window! :)
:D

I was building using VS2010 (yeah, old good IDE...) almost dead for current trends :)

Stingered 02-27-2018 04:17

Quote:

Originally Posted by sendersu (Post 112418)
what errors did you get?
I"ve added almost 0 changes (just some micro upd to About window! :)
:D

I was building using VS2010 (yeah, old good IDE...) almost dead for current trends :)

Many deprecated calls and defines within \SimpleProfiler (which I can probably fix). As, I said, SAE builds works, and assumed it was built in an older IDE based on the errors being spit out.

I'm certain that I can locate an old VS2010 build, if I have to. :D

niculaita 02-27-2018 04:31

cleaned file have to be put/save on desktop then copied manualy near original exe

simx 03-25-2018 18:17

DnSpy all the way for me, so much easier to use.


All times are GMT +8. The time now is 20:58.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX