Final Version of reflector V1.0 (+ simple anti-process obfuscation)

(0415 added the simple anti-process obfuscation function to meet daily usage requirements. If it is no longer updated, it will be switched to ilspy. For details, refer to the following figure)

Reflector expired? This is not acceptable! Do it yourself!

It's so easy to get the source code of reflector 7.0 from the snow, make a slight modification as needed, and compile it on your own!

 

For ease of use, I made some modifications:

1. Remove all authorization-relatedCodeAnd resources

2. Remove all codes and resources related to report errors.

3. Remove the code and resources related to reflectorinstaller. The size changes from 4.3 MB (obfuscation compression) to 2.8 mb (unobfuscation compression)

4. Add code coloring. It turns out to be black and dark green. It looks terrible. Class Name red, method name Green, class field light yellow, parameter light green, local variable black (if you do not like to modify the code)

5. Improve the if statement. When there is only one statement, no line breaks, no parentheses are added, and the code readability is increased. First line

6. Improve the parentheses of the expression. Originally, almost every subexpression is enclosed in parentheses. If a conditional expression is composed of multiple subexpressions, a large number of parentheses are displayed. The operator priority is introduced here. Parentheses are not required.

7. Manual anti-obfuscation of hundreds of classes to increase the readability of the reflector code. The version released this time has not been obfuscated.

9. Release reflector's anti-compilation restrictions for some products. There are actually domestic dv_news

10. For name obfuscation, if invisible characters appear, the slash \ + ASCII code is used.

11. Unseal all hidden functions. That path is the path where vs is located. Select the required function and then extract ......

 

12. added the simple anti-process obfuscation function

General process obfuscation (such as smartassembly) means that many jump commands are added to disrupt the order of IL commands, while reflector uses stack-based analysis. This is the simplest adjustment, the cluster crashes directly due to stack imbalance. After finding the problem, I found that there was no remedy at all, because reflector could say there was no ast at all! An attempt was made to kill all the unnecessary jumps. As a result, reflector's analysis process is quite fragile ...... Finally, before executing command analysis, add a function to sort the commands based on strong jumps. After sorting, each strong jump is actually the next sentence, then, at minimal cost, enhance reflector's analysis function (because it is still vulnerable to crash immediately ......)

At the end of the article, I suddenly remembered that I had used a tool for anti-name obfuscation and anti-process obfuscation in. Based on Cecil, I did not know where the code was lost after I left Shanghai. Of course, my tools also have some very distinctive features. porting to reflector is impossible, because the reflector architecture is really bad!

Same Root student and Cecil, I am very optimistic about ilspy! I also found that ilspy has a great AST and specialized anti-flow obfuscation!

 

Changed:Http://xcode.codeplex.com/releases/view/64499

 

Finally, we changed the version number to identify different modified versions!

Finally, the anti-process obfuscation capability of reflector is still poor.IlspyIt is open-source and standardized, with the trend of replacing Reflector!

 

 

Modified reflector v1.0.2011.0408

Source code(The password is newlife + group number, with 7 letters and 8 digits. Do not be lazy o)