5. ILDASM
ILDASM is the abbreviation of the IL Disassembler. This is one tool decompile the file. NET Microsoft's own creation, is the same in the Visual Studio + Windows SDK, which can be called from Visual Studio Command Prompt (source: MSDN). The main function is decompiled program. NET and can be transferred to IL form, then save it as a txt file. We can fix this code from a text file, and then compile it with a tool to go along with ILDASM is ILASM. ILDASM and ILASM (also located in the Visual Studio).
True to its name, merely 1 ILDASM tool Rã no more and no less, and its mission is just decompile the IL code, so it lacks so many essential features such as code analysis, code search, multi-file disassemble,
…
ILDASM
+ Pluses: Lightweight, available (if they have installed Visual Studio and Windows SDK), show good code, good code export
+ The minus: Too monotonous, lacking many basic features as well as expanded features, enhanced
6. ILSpy
Information and download: http://ilspy.net/
ILSpy is the decompiler / Disassembler open source, created for the purpose of replacing. NET Reflector Red-Gate after the acquisition. NET Reflector and turn it into commercial software. ILSpy is one tool is lightweight and only includes the basic features enough, was able to replace any part. NET Reflector. Personally I like most about this software is its fast and light. Decompiled code after some accuracy.
Features:
- Assembly browsing
- IL Disassembly
- Support C# 5.0 “async”
- Decompilation to C#
- Supports lambdas and ‘yield return’
- Shows XML documentation
- Decompilation to VB
- Saving of resources
- Save decompiled assembly as .csproj
- Search for types/methods/properties (substring)
- Hyperlink-based type/method/property navigation
- Base/Derived types navigation
- Navigation history
- BAML to XAML decompiler
- Save Assembly as C# Project
- Find usage of field/method
- Extensible via plugins (MEF)
- Assembly Lists
ILSpy
+ Pluses: very light, fast, basically full-featured, open source, free
+ The minus: Little plugin, lack of enhanced features expand
7. Dotnet Resolver
Thông tin và download: http://dotnetresolver.eu5.org/
This is the first tool designed by the community Reverser, aims to replace. NET Reflector and other programs decompile, As built by the Reverser have much experience so it is quite sufficient to meet the essential features, both the intuitive and easy to use as. NET Reflector, lightweight and fast just like ILSpy, lighter and faster than just ILSpy, and also very strong, almost SAE. Personally I appreciate this is one very good tool, but this tool is new and still in its developmental stages, and we can hope there will be more new features in the future. The current version is stable and ready to use.
Features:
- Translate to C# and Visual Basic
- Editing MSIL Instructions
- Stable Assembly Reader
- Member Analyser
- Plug-in Support
DotNet Resolver
+ Pluses: Fast, strong, fairly full-featured, lightweight, free, well-developed, easy to use, good scalability
+ The minus: Less plugin
8. IDA
Thông tin và download: https://www.hex-rays.com/products/ida/
IDA is so famous in the world and Reverser. This is the most powerful tool to decompile and analyze programs and plugins with many professional features. But developers IDA focuses primarily on developing tools for the purpose of decompiling native PE files and applications on other platforms like iOS, ARM, Linux, Android, ... So the features for the reverse. NET stop at sufficient levels, can not be compared with the decompiled program I have been introduced above. And I also do not use too much IDA to decompile the program. NET, so this section only for the purpose of writing is the main reference, can not be assessed in detail. Because only based on the ability to decompile. NET IDA to assess the strength of this program is really not accurate at all.
IDA
(To be continued)
0 Comments:
Post a Comment