Page 2 of 2 FirstFirst 12
Results 16 to 22 of 22

Thread: .NET DeObfuscator

  1. #16
    thateam
    Guest
    Please help
    doesn't work on this sample.?
    http://rapidshare.com/files/164285331/bin.rar.html
    Why ? can you help me?
    Error : Index was out range.Must be non-negative and less then the size of collection Parameter name index
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #17
    Blacklist Hunter Kurapica's Avatar
    Join Date
    Jun 2008
    Location
    JIT compiler
    Posts
    102
    There are two files :

    1- HoWaveRull.dll : not an assembly and can't be deobfuscated !
    2- HoWaveVGO.dll : this one is an assembly but all its names and code are clear and not obfuscated, I tried to deobfuscate but the tool failed because some items were made invalid to kill reflector and similar tools, it will be added to future updates.
    Life can only be understood backwards but It must be read forwards

    http://board.b-at-s.info
    http://portal.b-at-s.info/news.php

  3. #18
    Worf
    Guest
    Hi.

    Sorry for asking this but how do you use it?

    I double clicked on it and nothing happened.

    Many Thanks

    Worf
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #19
    Blacklist Hunter Kurapica's Avatar
    Join Date
    Jun 2008
    Location
    JIT compiler
    Posts
    102
    first make sure the file PE structure is OK then click the "..." and select the file
    Select the location where the new deobfuscated file will be saved
    Click the "deobfuscate" button and watch the log for errors.

    that's all
    Life can only be understood backwards but It must be read forwards

    http://board.b-at-s.info
    http://portal.b-at-s.info/news.php

  5. #20
    Worf
    Guest
    Hi Kurapica.

    Thank you for your reply. Just found out that the one i downloaded was Version 0.1, got Version 0.5 now
    Last edited by Worf; November 7th, 2009 at 03:59.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #21
    demon
    Guest

    Lightbulb I has idea with small improvement for Kurapica Deobfuscator

    Hi Kurapica,

    I tested your tool .NET Deobfuscator 0.5version it works great, just one small feature you missed.
    The feature must be look like this:
    * Add new checkbox witch allow exclude from renaming all names witch
    are valid by regular expression: ^[a-Z] what is mean, actually as I seen nobody could rename class or function or procedure and etc with numbers or not standart symbols. So idea wood be as exclude from renaming by ReGex all names witch valid. E.g. Most obfuscators obfuscate strings as not standart simbols or use numerics strings.

    Will be nice if you add this feature, then will help a lot.

    Regards,
    Demon
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #22
    Blacklist Hunter Kurapica's Avatar
    Join Date
    Jun 2008
    Location
    JIT compiler
    Posts
    102
    Thanks for the tip, I will definitely take into consideration in the next version.

    greetz
    Life can only be understood backwards but It must be read forwards

    http://board.b-at-s.info
    http://portal.b-at-s.info/news.php

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •