Phx Deobufscator, a .Net control flow deobufscator

[tankaiha]

Just a toy, don't be too serious about it.

how to use:
1) click "open" to load assembly
2) click "deobfuscate and save as" to output

why the file size is so big?
it uses lot's of dll library. bundled by xenocode postbuild.

caution:
make sure input assembly has correct metadata. if not, try to ildasm then ilasm it.

having fun!:cool:

http://www.filesend.net/download.php?f=3b41b3f20b2c671296191ea54dd04ac8

[ricker]

i can not use it ,because when i use it my screen will be blue,i think it has lots of problem.:eek:

[tankaiha]

i think .net program can hardly make blue screen death, so maybe it's the problem of xenocode postbuild.

i suggest you run it in VMWare or VPC first.

[UFO-Pu55y]

This is interesting ofc ! But on which obfuscator do you test your tool ?
I've tried it on smartassembly now:
************** Exception Text **************
System.NullReferenceException: Object reference not set to an instance of an object.
at Phx.Metadata.x8af98980d87b23e4.x413fee23de3d57b9()
at Phx.Metadata.x8af98980d87b23e4.xf0d8c827c408e60c()
at Phx.x85858555d80a5107.xf0d8c827c408e60c()
at ....
...Exception comes up, when pressing 'Deobfuscate and Save As'...

Greets

[tankaiha]

for{sa}，you should first ildasm then ilasm it, becoz {sa} has too much error metadata.
also useful for .net reactor dumped exe.

[ricker]

i think .net program can hardly make blue screen death, so maybe it's the problem of xenocode postbuild.

i suggest you run it in VMWare or VPC first.

can you provide us with out packed by xenocode postbuild flow deobufscator :D

[jacky]

can you provide us with out packed by xenocode postbuild flow deobufscator :D
that's good, open source is better.

[tankaiha]

not open source now for 2 reasons:
1) still beta version. i want to add lot's more functions to it. and want to make it more stable.

2) i'm not a professional programmer, my code is... :p