Thread: Improve .NET Deobfuscator
View Single Post
  #3  
Old 11-01-2013, 17:47
LordCoder LordCoder is offline
TEAM REiS
  
Join Date: May 2013
Location: TEAM REiS
Posts: 55
Rept. Given: 39
Rept. Rcvd 238 Times in 36 Posts
Thanks Given: 1
Thanks Rcvd at 15 Times in 9 Posts
LordCoder Reputation: 200-299 LordCoder Reputation: 200-299 LordCoder Reputation: 200-299
New version 0.1.7 with:
Quote:
  • Added RPX
  • Added option of context menu to the Explorer
  • Redesign of the main window
  • Added drag n' drop function
  • Added update checker
The DNGuard will be really difficult for me hope someone can help me on it. As I saw, it has a section called "hvm" which is encrypted. The dll is called as a .exe with an entry point on the DllImport of the .NET application. What I need to get is all IL code from the memory and save it as exe. My problem is how to get the code from the memory? The big problem for me is the low IDA/OllyDbg knowledge so it's really difficult for me to do so.

For the .NetObf is almost done and also TnTLicensing is also almost supported but not added until.


Download it here: https://sourceforge.net/projects/improvenetdeobf/

Thanks for support.
__________________
TEAM REiS - Reverse Engineering iN Software
Reply With Quote
The Following 9 Users Gave Reputation+1 to LordCoder For This Useful Post:
Av0id (11-05-2013), besoeso (11-01-2013), Dreamer (11-01-2013), giv (11-02-2013), HooK (11-14-2013), kjms (11-01-2013), nikkapedd (11-13-2013), sendersu (11-18-2013), XorRanger (11-01-2013)