simple-assembly-explorer - Project Hosting on Google Code

Earlier this year Sep 26, 2009 flvplayer.swf (Flash FLV Player) file uploaded by simpledotnet - Labels: Deprecated Labels: Deprecated Jun 15, 2009 SAE.20090616.7z (SAE Build 2009.06.16) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Jun 12, 2009 r87 (* Detect .Net 4.0 SDK) committed by simpledotnet - * Detect .Net 4.0 SDK * Detect .Net 4.0 SDK Jun 08, 2009 r86 (! Class Editor: exception when showing LinkedResource) committed by simpledotnet - ! Class Editor: exception when showing LinkedResource ! Class Editor: exception when showing LinkedResource Jun 07, 2009 r85 (* Class Editor: enhanced Search and Edit * Deobfuscator: en...) committed by simpledotnet - * Class Editor: enhanced Search and Edit * Deobfuscator: enhanced Flow options * Class Editor: enhanced Search and Edit * Deobfuscator: enhanced Flow options Jun 03, 2009 r84 (* Class Editor: enhanced Search, Exception Editor ... * Deob...) committed by simpledotnet - * Class Editor: enhanced Search, Exception Editor ... * Deobfuscator: enhanced Pattern, Switch ... (and remove debug break for Branch T_T) * Class Editor: enhanced Search, Exception Editor ... * Deobfuscator: enhanced Pattern, Switch ... (and remove debug break for Branch T_T) May 29, 2009 r83 (* Class Editor: support drag & drop instruction (on index co...) committed by simpledotnet - * Class Editor: support drag & drop instruction (on index column); support copy & paste instructions; * Deobfuscator: ignore Cecil "Can not read main module" exception if more than one main module; adjust Name option; * Class Editor: support drag & drop instruction (on index column); support copy & paste instructions; * Deobfuscator: ignore Cecil "Can not read main module" exception if more than one main module; adjust Name option; Apr 02, 2009 SAE.20090402.7z (SAE Build 2009.04.02) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Apr 02, 2009 r82 (* Deobfuscator -> Unreachable: add checking for instructions...) committed by simpledotnet - * Deobfuscator -> Unreachable: add checking for instructions count * Deobfuscator -> Unreachable: add checking for instructions count Apr 01, 2009 SAE.20090401.7z (SAE Build 2009.04.01) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Apr 01, 2009 r81 (* refer to Reflector 5.1.5) committed by simpledotnet - * refer to Reflector 5.1.5 * refer to Reflector 5.1.5 Mar 28, 2009 r80 (* handle method overrides and generic argument properly) committed by simpledotnet - * handle method overrides and generic argument properly * handle method overrides and generic argument properly Mar 23, 2009 r79 (* Cecil: GenericArgument.ReturnType.Name == "!0"?? no luck ....) committed by simpledotnet - * Cecil: GenericArgument.ReturnType.Name == "!0"?? no luck ... * Cecil: GenericArgument.ReturnType.Name == "!0"?? no luck ... Mar 22, 2009 r78 (* ClassEditor: some special handling for generic type) committed by simpledotnet - * ClassEditor: some special handling for generic type * ClassEditor: some special handling for generic type Mar 20, 2009 r77 (* Class Editor -> Rename: small enhancement for generic) committed by simpledotnet - * Class Editor -> Rename: small enhancement for generic * Class Editor -> Rename: small enhancement for generic Mar 19, 2009 r76 (* Class Editor and Reflector: handle generic type and parame...) committed by simpledotnet - * Class Editor and Reflector: handle generic type and parameter * Class Editor and Reflector: handle generic type and parameter Mar 10, 2009 r75 (* very small enhancements) committed by simpledotnet - * very small enhancements * very small enhancements Mar 10, 2009 r74 (* very small enhancements) committed by simpledotnet - * very small enhancements * very small enhancements Mar 09, 2009 r73 (+ Deobfuscator -> Flow options: add Unreachable option (This...) committed by simpledotnet - + Deobfuscator -> Flow options: add Unreachable option (This Patch is contributed by Pedgis S'igdep) + Deobfuscator -> Flow options: add Unreachable option (This Patch is contributed by Pedgis S'igdep) Feb 08, 2009 SAE.20090209.7z (SAE Build 2009.02.09) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Feb 08, 2009 r72 (+ Class Editor: View in Reflector option (right click on tre...) committed by simpledotnet - + Class Editor: View in Reflector option (right click on tree node) * SAE。Reflector: enhanced to open one reflector only by using RemoteController * Some other small enhancements + Class Editor: View in Reflector option (right click on tree node) * SAE。Reflector: enhanced to open one reflector only by using RemoteController * Some other small enhancements Jan 23, 2009 r71 (+ Class Editor -> Reflector: add Load button * Deobfuscator:...) committed by simpledotnet - + Class Editor -> Reflector: add Load button * Deobfuscator: enhanced method name handling ! Class Editor -> Reflector: array type not handled properly for two or more dimensions + Class Editor -> Reflector: add Load button * Deobfuscator: enhanced method name handling ! Class Editor -> Reflector: array type not handled properly for two or more dimensions Jan 09, 2009 r70 (Add a list option for sn -Vl) committed by simpledotnet - Add a list option for sn -Vl Add a list option for sn -Vl Jan 07, 2009 issue 4 (SAE反混淆：同名同參數不同返回值函數的處理有誤) Status changed by simpledotnet - The fix included in latest release. Status: Verified The fix included in latest release. Status: Verified Jan 01, 2009 r69 (* Small enhancements) committed by simpledotnet - * Small enhancements * Small enhancements Older Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 我是一个初学者，大侠指点之后，实在汗颜. 一定加强学习。谢谢大侠！我是一个初学者，大侠指点之后，实在汗颜. 一定加强学习。谢谢大侠！ Dec 31, 2008 r68 (! Class Editor: if Reflector not found, the form cannot be c...) committed by simpledotnet - ! Class Editor: if Reflector not found, the form cannot be closed ! Class Editor: if Reflector not found, the form cannot be closed Dec 31, 2008 SAE.20090101.7z (SAE Build 2009.01.01) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Dec 31, 2008 PluginInfo (Plugin information class for SAE Plugin) Wiki page edited by simpledotnet Dec 31, 2008 PluginIPlugin (IPlugin interface of SAE Plugin) Wiki page edited by simpledotnet Dec 31, 2008 SAE.20090101.7z (SAE Build 2009.01.01) file uploaded by simpledotnet - Labels: Featured Type-Archive Labels: Featured Type-Archive Dec 31, 2008 r65 (* Change argument of plugin interface * Misc small enhacemen...) committed by simpledotnet - * Change argument of plugin interface * Misc small enhacements and bugs fixed * Change argument of plugin interface * Misc small enhacements and bugs fixed Dec 31, 2008 issue 5 (不能反混淆) Status changed by simpledotnet - 你的这个例子可以这样解决： 1)Deobfuscator: 选择Pattern, Branch (Loop 1) 2) Class Editor: 浏览到ConvertEmailTemplateToMailMessage，把3个在try里面的奇怪的pop去掉 (右键->Nop) 3) 保存通过上述步骤，3个方法基本都可以在Reflector看，用来研究应该是没问题了。因为pop命令这个太普通，不好做通用处理，暂时还是手工用Class Editor处理一下。另外Class Editor里面还可以单独对某个方法用不同参数反混淆的，所以有特殊情况可以用Class Editor个别特殊处理。 Status: WontFix 你的这个例子可以这样解决： 1)Deobfuscator: 选择Pattern, Branch (Loop 1) 2) Class Editor: 浏览到ConvertEmailTemplateToMailMessage，把3个在try里面的奇怪的pop去掉 (右键->Nop) 3) 保存通过上述步骤，3个方法基本都可以在Reflector看，用来研究应该是没问题了。因为pop命令这个太普通，不好做通用处理，暂时还是手工用Class Editor处理一下。另外Class Editor里面还可以单独对某个方法用不同参数反混淆的，所以有特殊情况可以用Class Editor个别特殊处理。 Status: WontFix Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 上传上传 Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 尊敬的大侠：见到您的回复，十分荣幸！诚蒙您的关注，回复如下：在ChinaFriende->Components->Areas中method Organize(List<AreaStatistics> allAreas, int32 maxDepth) 在ChinaFriende->Components->Emails中method ConvertEmailTemplateToMailMessage (EmailTemplate emailTemplate) 在ChinaFriende->Components->EmailTask中method Execute(XmlNode node) 等等.... 都有多个.try，尤其包含pop时，不能反混淆。十分感谢！尊敬的大侠：见到您的回复，十分荣幸！诚蒙您的关注，回复如下：在ChinaFriende->Components->Areas中method Organize(List<AreaStatistics> allAreas, int32 maxDepth) 在ChinaFriende->Components->Emails中method ConvertEmailTemplateToMailMessage (EmailTemplate emailTemplate) 在ChinaFriende->Components->EmailTask中method Execute(XmlNode node) 等等.... 都有多个.try，尤其包含pop时，不能反混淆。十分感谢！ Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 传上来了后缀改为.dll就行了传上来了后缀改为.dll就行了 Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 上传不了不知何原因上传不了不知何原因 Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 上面那句写得太仓促了这里可以上传上面那句写得太仓促了这里可以上传 Dec 31, 2008 issue 5 (不能反混淆) commented on by longsir_...@163.com - 我的邮箱：longsir_2008@163.com 您的是？我的邮箱：longsir_2008@163.com 您的是？ Dec 31, 2008 issue 5 (不能反混淆) Labels changed by simpledotnet - 能否发个文件来看看，最好注明是哪个方法。 Labels: Type-Defect Priority-Medium 能否发个文件来看看，最好注明是哪个方法。 Labels: Type-Defect Priority-Medium Dec 31, 2008 r64 (+ Remove LicenseProvider option * Misc enhancements and bugs...) committed by simpledotnet - + Remove LicenseProvider option * Misc enhancements and bugs fixes + Remove LicenseProvider option * Misc enhancements and bugs fixes Dec 30, 2008 issue 5 (不能反混淆) reported by longsir_...@163.com - 当有多个.try时，尤其包含pop时，不能反混淆。形如： ................... 232 L_0257: nop 233 L_0258: nop 234 L_0259: leave.s 246 -> nop 235 L_025b: pop 236 L_025c: nop 237 L_025d: nop 238 L_025e: leave.s 246 -> nop 239 L_0260: nop 240 L_0261: nop 241 L_0262: ldloc.2 242 L_0263: ldc.i4.3 243 L_0264: add .................... .try 126 to 170 catch Object handler 170 to 190 .try 220 to 231 catch Object handler 231 to 246 .try 301 to 321 catch Object handler 321 to 362 当有多个.try时，尤其包含pop时，不能反混淆。形如： ................... 232 L_0257: nop 233 L_0258: nop 234 L_0259: leave.s 246 -> nop 235 L_025b: pop 236 L_025c: nop 237 L_025d: nop 238 L_025e: leave.s 246 -> nop 239 L_0260: nop 240 L_0261: nop 241 L_0262: ldloc.2 242 L_0263: ldc.i4.3 243 L_0264: add .................... .try 126 to 170 catch Object handler 170 to 190 .try 220 to 231 catch Object handler 231 to 246 .try 301 to 321 catch Object handler 321 to 362 Dec 30, 2008 r63 (+ Class Editor: integrate with Reflector * Deobfuscator: sma...) committed by simpledotnet - + Class Editor: integrate with Reflector * Deobfuscator: small enhancement on method overrides + Class Editor: integrate with Reflector * Deobfuscator: small enhancement on method overrides Dec 22, 2008 r62 (re-arrange project directories) committed by simpledotnet - re-arrange project directories re-arrange project directories Dec 19, 2008 r61 (save and restore output directory properly) committed by simpledotnet - save and restore output directory properly save and restore output directory properly Dec 15, 2008 r60 (+ Class Editor: Rename, Custom Attribute (Read only currentl...) committed by simpledotnet - + Class Editor: Rename, Custom Attribute (Read only currently) ! Issue 4 + Class Editor: Rename, Custom Attribute (Read only currently) ! Issue 4 Dec 15, 2008 issue 4 (SAE反混淆：同名同參數不同返回值函數的處理有誤) Status changed by simpledotnet - Please try this temporary build hxxp://www.fileden.com/files/2008/8/5/2035756/SAE.20081205.7z Status: Fixed Please try this temporary build hxxp://www.fileden.com/files/2008/8/5/2035756/SAE.20081205.7z Status: Fixed Dec 07, 2008 issue 4 (SAE反混淆：同名同參數不同返回值函數的處理有誤) reported by simpledotnet - Simple Assembly Explorer反混淆的问题 class A { abstract void fun1(string arg1,string arg2); abstract string fun1(string arg1,string arg2); } class B: A { override void fun1(string arg1,string arg2);//重载函数，与父类a 的 fun1函数名字相同 void fun1(string arg1); void fun2(int arg1); override string fun1(string arg1,string arg2); //重载函数，与父类a 的 fun1函数名字相同 } 当然了fun1 是那种看不到字符或者字符相当怪的，就是需要处理的函数名反混淆的时候可能就会出现错误 class A { abstract void fun1_m00001(string arg1,string arg2); abstract string fun1_m000002(string arg1,string arg2); } class B: A { override void fun_m00001(arg1,arg2);//重载函数 void fun_m00002(string arg1); void fun_m00003(int arg1); override string fun_m00004(arg1,arg2);//重载函数 // 混淆后，b中的函数重新编函数名，导致部分重载函数的名字与父类不一致！！！！！ } Simple Assembly Explorer反混淆的问题 class A { abstract void fun1(string arg1,string arg2); abstract string fun1(string arg1,string arg2); } class B: A { override void fun1(string arg1,string arg2);//重载函数，与父类a 的 fun1函数名字相同 void fun1(string arg1); void fun2(int arg1); override string fun1(string arg1,string arg2); //重载函数，与父类a 的 fun1函数名字相同 } 当然了fun1 是那种看不到字符或者字符相当怪的，就是需要处理的函数名反混淆的时候可能就会出现错误 class A { abstract void fun1_m00001(string arg1,string arg2); abstract string fun1_m000002(string arg1,string arg2); } class B: A { override void fun_m00001(arg1,arg2);//重载函数 void fun_m00002(string arg1); void fun_m00003(int arg1); override string fun_m00004(arg1,arg2);//重载函数 // 混淆后，b中的函数重新编函数名，导致部分重载函数的名字与父类不一致！！！！！ } Nov 16, 2008 HowtoBuild (How to Build SAE) Wiki page edited by simpledotnet Nov 15, 2008 HowtoBuild (How to Build SAE) Wiki page edited by simpledotnet

issue 4 (SAE反混淆：同名同參數不同返回值函數的處理有誤) reported by simpledotnet - Simple Assembly Explorer反混淆的问题 class A { abstract void fun1(string arg1,string arg2); abstract string fun1(string arg1,string arg2); } class B: A { override void fun1(string arg1,string arg2);//重载函数，与父类a 的 fun1函数名字相同 void fun1(string arg1); void fun2(int arg1); override string fun1(string arg1,string arg2); //重载函数，与父类a 的 fun1函数名字相同 } 当然了fun1 是那种看不到字符或者字符相当怪的，就是需要处理的函数名反混淆的时候可能就会出现错误 class A { abstract void fun1_m00001(string arg1,string arg2); abstract string fun1_m000002(string arg1,string arg2); } class B: A { override void fun_m00001(arg1,arg2);//重载函数 void fun_m00002(string arg1); void fun_m00003(int arg1); override string fun_m00004(arg1,arg2);//重载函数 // 混淆后，b中的函数重新编函数名，导致部分重载函数的名字与父类不一致！！！！！ }

Simple Assembly Explorer反混淆的问题 class A { abstract void fun1(string arg1,string arg2); abstract string fun1(string arg1,string arg2); } class B: A { override void fun1(string arg1,string arg2);//重载函数，与父类a 的 fun1函数名字相同 void fun1(string arg1); void fun2(int arg1); override string fun1(string arg1,string arg2); //重载函数，与父类a 的 fun1函数名字相同 } 当然了fun1 是那种看不到字符或者字符相当怪的，就是需要处理的函数名反混淆的时候可能就会出现错误 class A { abstract void fun1_m00001(string arg1,string arg2); abstract string fun1_m000002(string arg1,string arg2); } class B: A { override void fun_m00001(arg1,arg2);//重载函数 void fun_m00002(string arg1); void fun_m00003(int arg1); override string fun_m00004(arg1,arg2);//重载函数 // 混淆后，b中的函数重新编函数名，导致部分重载函数的名字与父类不一致！！！！！ }

Earlier this year

Older