Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Rename de-obfuscated code

Is there any tools that can rename de-obfuscated code to readable code for .NET dlls ?

OBFUSCATION = convert original variable names, namespaces to non-readable variable name, also changing the control flow to make it hard for crackers to guess the original code

DE-OBFUSCATION = reverse process of obfuscation. convert non-readable variable names, namespaces to readable one like A1, A2 (cause converting back to original names is impossible) make it easy to track and understand the original source code.

like image 527
Ehsan Avatar asked Feb 26 '23 09:02

Ehsan


2 Answers

You could obfuscate it again, but disable options like overloading. That way members will be named A,B,C,... instead of all being named A (using overloading) or having non-printable names.

Also, an IL-level optimizer can often undo control flow obfuscations and remove dead code designed to crash decompilers.

Once you have compilable code, use Visual Studio's rename refactoring to introduce names. There's no way for tools to automatically guess appropriate names.

like image 69
Daniel Avatar answered Mar 04 '23 08:03

Daniel


No there isn't otherwise why would obfuscation tools exist in your opinion? What you call readable variable names no longer exist in the obfuscated assembly because they have been renamed to non-readable ones and no tool could guess what the original names were.

like image 41
Darin Dimitrov Avatar answered Mar 04 '23 08:03

Darin Dimitrov