Wanted a tool for decompiling obfuscated .NET code

Posted by Shrike on Stack Overflow See other posts from Stack Overflow or by Shrike
Published on 2009-08-04T10:14:15Z Indexed on 2010/04/15 22:53 UTC
Read the original article Hit count: 449

Filed under:

disassembling

|

code-completion

|

reverse-engineering

|

.NET

Hello. I need a tool to decompile obfuscated .NET code. Yes, I know about Reflector and its plugins (FileDisassemble, FileGenerator). But they create VS project which won't compile.

For an example the decompiled code contains: private sealed class d__0 : IEnumerator, IEnumerator, IDisposable { private int <>1__state; private int <>2__current;

I need a tool which could rename automatically such name into readable (read "compilable") form. Thnx.

© Stack Overflow or respective owner

Related posts about disassembling

Disassembling with python - no easy solution?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I'm trying to create a python script that will disassemble a binary (a Windows exe to be precise) and analyze its code. I need the ability to take a certain buffer, and extract some sort of struct containing information about the instructions in it. I've worked with libdisasm in C before, and… >>> More
How is printf() implemented in c?

as seen on Stack Overflow - Search for 'Stack Overflow'
Disassembling printf doesn't give much info: (gdb) disas printf Dump of assembler code for function printf: 0x00401b38 <printf+0>: jmp *0x405130 0x00401b3e <printf+6>: nop 0x00401b3f <printf+7>: nop End of assembler dump. How is it implemented under the hood? Why disassembling… >>> More
What does * address(found in printf) mean in assembly?

as seen on Stack Overflow - Search for 'Stack Overflow'
Disassembling printf doesn't give much info: (gdb) disas printf Dump of assembler code for function printf: 0x00401b38 <printf+0>: jmp *0x405130 0x00401b3e <printf+6>: nop 0x00401b3f <printf+7>: nop End of assembler dump. (gdb) disas 0x405130 Dump of assembler code for function… >>> More
Why is a function executed from the same memory address each time?

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm disassembling an executable: (gdb) disas main Dump of assembler code for function main: 0x004012d0 <main+0>: push %ebp 0x004012d1 <main+1>: mov %esp,%ebp ... Each time the memory address is the same:0x004012d0. Isn't the memory address to be dynamically assigned by the… >>> More
How is prinf() implemented in c?

as seen on Stack Overflow - Search for 'Stack Overflow'
Disassembling printf doesn't give much info: (gdb) disas printf Dump of assembler code for function printf: 0x00401b38 <printf+0>: jmp *0x405130 0x00401b3e <printf+6>: nop 0x00401b3f <printf+7>: nop End of assembler dump. How is it implemented under the hood? >>> More

Related posts about code-completion

Writing a Javascript library that is code-completion and code-inspection friendly

as seen on Stack Overflow - Search for 'Stack Overflow'
I recently made my own Javascript library and I initially used the following pattern: var myLibrary = (function () { var someProp = "..."; function someFunc() { ... } function someFunc2() { ... } return { func: someFunc, fun2: someFunc2, prop: someProp; } }()); The… >>> More
Python editor with automatic code completion?

as seen on Stack Overflow - Search for 'Stack Overflow'
I have seen various articles about good Python editors/IDEs, like this. However, none of them points out whether the editors support automatic code completion. I tried notepad++, PyScript and Komodo Edit, but all of these requires a hotkey to invoke the code completion dialog. Do you know any Python… >>> More
Can I make Visual Studio's code completion window more like Eclipse (Java)?

as seen on Stack Overflow - Search for 'Stack Overflow'
Is it possible to make Visual Studio 2010's code completion window more like that of Eclipse (Java)? In particular, I'd love the code completion window to give me a variable's type, and a method's return type and expected parameters, without needing to hover the highlight over that particular variable/method… >>> More
Code Completion -- Aptana Eclipse Plugin

as seen on Stack Overflow - Search for 'Stack Overflow'
I have been doing javascript development for the last couple weeks and have tried JSDT and Aptana to assist in code completion. JSDT wasn't very good at all, but I did have more luck with Aptana (used as eclipse plug-in, not the standalone product). The problem I'm encountering is that when I create… >>> More
Eclipse/Java code completion not working

as seen on Stack Overflow - Search for 'Stack Overflow'
I've downloaded, unzipped and setup Eclipse 3.4.2 with some plugins (noteable, EPIC, Clearcase, QuantumDB, MisterQ). Now I find when I'm editing Java projects the code completion is not working. If I type String. and press ctrl-space a popup shows "No Default Proposals" and the status bar at the… >>> More