Jump to content
Tuts 4 You

ILSpy mod by Medsft: NET assembly browser and decompiler, debugger, Hi


Medsft

Recommended Posts

Hello !  ILSpy and ILSpector are the best tools ever seen !! Compliments to the developer / Developers !


 


I see that it show how the item on a dialog resource are placed (coordinates and order of the buttons, textbox, and so on..).


So... would it be possible to re-create this dialog by the software ? Or just show a "visual" copy of the disposition of the buttons ?


 


I need this to understand which button correspond to which function on the .net application i am studying. I see "button_1_click" but can't understand which one is "button 1".


I hope i have explained well my question...


 


thanks !


regards


Link to post
  • Replies 65
  • Created
  • Last Reply

Top Posters In This Topic

  • Medsft

    35

  • heartcoffee

    3

  • RTSmnq08px

    3

  • djpolgio

    2

Top Posters In This Topic

Popular Posts

ILSpy mod by Medsft: NET assembly browser and decompiler, debugger, High and Low level Editor Project renamed. ILSpy NEXT. NET assembly browser and decompiler, debugger, High and Low level Edi

New release (build 26_02_15_10_56) + New type of search: Find method call. Shows the list of methods which call specified search pattern. For example, you specify getpub as pattern and get the list of

Some bug fix. File replace.Please reload. Last build 27_04_18_02_42 fix: add scroll control on form`s with list control

Posted Images

  • 2 weeks later...
  • 4 weeks later...
MokneyDonkey

1.- can not save the code, and

2.- if you open an assembly and select save assembly it crashes:

System.IO.__Error.WinIOError()

* Could not find a part of the path 'C:\Users\*******\Downloads\WCP_Editor-cleaned_saved_8\2\2015_1.exe'.

* DirectoryNotFoundException

2.- original file name opened: WCP_Editor-cleaned.exe

Windows 10 ent. X64

Great Program though, thank you

Link to post
  • 5 months later...

New version 3.5.0 (A gift from Santa)

- added: rename for overrided method (context menu - rename)
- fixed: breakpoints did not work
- added: auto breakpoint for external methods (Breakpoint menu)
- added: auto breakpoint for external classes (Breakpoint menu)
- added: x86-x64 native code disasm (click on unmanaged method)
- added: options for x64-64 disasm (option im main menu)
- added: byte-patch for native methods (Edit as bytes contextmenu)(view tutorials)
- added: OllyDbg OD2Plg breakpoints export (view tutorials)
- added: size correction for native methods body
- added: x86-64 assembler support as byte-patch
- fixed: "Restore original bytes" working for both managed and native

Link to post
  • 2 months later...

New version 3.6.0

+ add unmangle method body (wickyhu tech.)
+ add plugin`s system to deobuscate method body, based on de4dot tech (Early version)
(Source include). Add 2 plugin: C...Ex,Ne.R...r
+ add assembly comparer
+ add reference editor

+ add Contributors
- fix (show hidden name tech. IgnoreNameCollection works correctly)
- fix (show constant`s in Hex)

!!! Check Readme.txt before install

  • Like 1
Link to post

Thank you Medsoft for your great tool;

but honestly I cant get it to work, whenever I click a button it show : sorry, we crashed.

here is  a screen shot

ILspector.PNG

Link to post
  • 2 weeks later...
  • 4 months later...

new version 3.7.5

- fix option "Show hidden name" algorithm processing speed improved
- fix debugger core more stable
+ add method local`s panel (debugger)(with save value to disk)
+ add method argument`s panel (debugger)(with save value to disk)
+ add process memory panel (with dump region to disk) 
+ add module`s panel (with dump module to disk)
- fix stack panel
+ change option: view locale`s in IL as C#
+ add "Goto MDToken" to context menu
- fix: patch algorithm updated to support code block alignments with NOPs 

  • Like 2
Link to post
  • 6 months later...
On 8/12/2016 at 11:43 AM, Medsft said:

new version 3.7.5

- fix option "Show hidden name" algorithm processing speed improved
- fix debugger core more stable
+ add method local`s panel (debugger)(with save value to disk)
+ add method argument`s panel (debugger)(with save value to disk)
+ add process memory panel (with dump region to disk) 
+ add module`s panel (with dump module to disk)
- fix stack panel
+ change option: view locale`s in IL as C#
+ add "Goto MDToken" to context menu
- fix: patch algorithm updated to support code block alignments with NOPs 

file protected with confuserex 1.0 give me error - i'm newbie with re maybe i need do something in ollydbg first idk but i want learn not only use unpackers:

CmPTtL3.png

Link to post
  • 2 years later...
On 1/30/2015 at 7:34 PM, Medsft said:
ILSpy mod by Medsft: NET assembly browser and decompiler, debugger, High and Low level Editor
Project renamed.
ILSpy NEXT. NET assembly browser and decompiler, debugger, High and Low level Editor

Description:

ILSpy (latest ILSpy public version 2.2.0.1737)

-add debugger from the SharpDeveloper studio

-add CopyFullyQualifiedTypeName.Plugin

-add OpCodeTableForm

-add to treeview contextmenu: 

- strong name utility

- rename class utility

- Jump to EntryPoint

- string viewer utility (search enable)

- extension exeecute utility (reservation work enable)

- hexeditor methodbody utility (runtime compilation enable, 

- search any text in decompileTextView

- find method call

Analyze. Reference calls positioning and highlight ("IL Code" view)

two technologies save the result(High Level:recompile assembly 

and Low Level:Binary Patch(See results and work in Patch_table)))

add to decompiletextview contextmenu:

- replace instruction (High Level,need recompile to save assembly)

- nop instruction (High Level,need recompile to save assembly)

- reverse branch (High Level,need recompile to save assembly)

- nop instruction (Low Level, no need recompile binary patch see Patch Table)

- reverse branch (Low Level, no need recompile binary patch see Patch Table)

- class or method injector (High level)

- "Undo" operation

Mono.Cecil

-ignore null type (Read TypeDefinition)

-ignore invalid parameter(Read MethodDefinition)

-ignore invalid generic argument()

-ignore invalid attribute (if (attribute.Constructor == null) continue;)

-ignore invalid signature(GetSecurityDeclarationSignature)

-fix handle null value in obfuscated assembly

-add ToString for CustomAttributeArgument

-add ToString for CustomAttributeNamedArgument

-ignore null element(MemberDefinition)

-avoid recursive declaringtype of some obfuscated assemblies,currently only one level checking

-add AllMemberReferences(IEnumerable<MemberReference> GetMemberReferences)

-add ElementTypeIntValue(ElementTypeIntValue)

-add support to read/write directly from bytes(FromBytes)

-Read reloc section, Contributed by Khiem Nguyen

-add alternative "Save" technology modified assembly (support obfuscated assembly)

Pack "ALL in One"

 
The latest releases of ILSpy.NEXT on http://il4re.ml//
 
[t]We are opened! Welcome, guys.[/t]
 
Last build: 12_08_2016

Sorry for my bad English and WPF

 

please reupload 

Link to post
  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...