Skip to content

Releases: GDATAAdvancedAnalytics/de4dotEx

3.5.1

02 Apr 14:04
Immutable release. Only release title and notes can be modified.

Choose a tag to compare

What's Changed

  • ConfuserEx: Fix issues with native method emulation by @meck-gd in #24
    • BeaEngine is now built in CI and shipped with releases since the ConfuserEx native deobfuscator depends on it.

Full Changelog: 3.5.0...3.5.1

3.5.0

31 Mar 14:21
Immutable release. Only release title and notes can be modified.

Choose a tag to compare

What's Changed

  • Add support for .NET Reactor 7.0+ by @meck-gd in #23
    • This includes devirtualization support, but it's only been tested on protection-specific methods (like string encryption). The code for this was inspired by the excellent VMAttack by @void-stack.
  • Remove the generic inlining code originally introduced in 2024 in 5c58a06. It doesn't do proper usage analysis and causes too many problems (methods being removed despite being referenced etc.). de4dot already has facilities to handle this (FindAndRemoveInlinedMethods()) that should be used in specific deobfuscator classes.

Full Changelog: 3.4.0...3.5.0

3.4.0

12 Mar 13:23
Immutable release. Only release title and notes can be modified.

Choose a tag to compare

What's Changed

  • Fix critical bug in VirtualGuard detection code that broke module cctors (#20)
  • Add support for Confuser.Core (#21)
  • Fix ConfuserEx constant decryption when initialization code is inlined into cctor (#21)

Full Changelog: 3.3.0...3.4.0

3.3.0

06 Mar 09:57

Choose a tag to compare

What's Changed

  • Prevent an exception from being thrown when --keep-types or --preserve-tokens is specified at the wrong position (#18)
  • Remove misleading "Try the latest version" nag (#18)
  • Don't gate stack traces for unhandled exceptions behind an env var (#18)
  • Fix a bug where specifying --no-cflow-deob could incorrectly cause proxy methods to be deleted (#19)
  • Fix a bug where proxy inlining didn't copy the opcode, causing invalid IL (#19)

Full Changelog: 3.2.4...3.3.0

3.2.4

20 Nov 17:08

Choose a tag to compare

What's Changed

  • Agile.NET: Fix delegate deobfuscation for some binaries by @meck-gd in #12
  • cflow: Allow overflows for Int64 shifts too by @meck-gd in #13

Full Changelog: 3.2.3...3.2.4

3.2.3

12 Sep 10:17

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: 3.2.2...3.2.3

3.2.2

17 Jun 15:49

Choose a tag to compare

What's Changed

  • Add deobfuscator for string encoding seen in an XWorm sample by @meck-gd in #4
  • InstructionEmulator: Fix rare exception caused by null values in arrays by @meck-gd in #5

Full Changelog: 3.2.1...3.2.2

3.2.1

06 Jun 14:25
47540e7

Choose a tag to compare

What's Changed

  • Update dnlib to uptodate version 4.5.0 by @greenozon in #2

New Contributors

Full Changelog: 3.2.0...3.2.1

3.2.0

23 Apr 15:48

Choose a tag to compare

Initial de4dotEx release.