3.6.0

What's Changed

• Fix an OOM issue that could be caused by the instruction emulator when emulating newarr with implausible sizes
• Various .NET Reactor fixes by @meck-gd in #26
  • Fix method decryption for newer versions
  • Fix resource decryption for newer versions
  • Fix detection of ldtoken VM handler in rare cases
• Babel.NET: String and resource decryption is now supported for newer versions of the obfuscator (v10/v1)1 by @meck-gd in #27

Full Changelog: 3.5.1...3.6.0

3.5.1

What's Changed

• ConfuserEx: Fix issues with native method emulation by @meck-gd in #24
  • BeaEngine is now built in CI and shipped with releases since the ConfuserEx native deobfuscator depends on it.

Full Changelog: 3.5.0...3.5.1

3.5.0

What's Changed

• Add support for .NET Reactor 7.0+ by @meck-gd in #23
  • This includes devirtualization support, but it's only been tested on protection-specific methods (like string encryption). The code for this was inspired by the excellent VMAttack by @void-stack.
• Remove the generic inlining code originally introduced in 2024 in 5c58a06. It doesn't do proper usage analysis and causes too many problems (methods being removed despite being referenced etc.). de4dot already has facilities to handle this (FindAndRemoveInlinedMethods()) that should be used in specific deobfuscator classes.

Full Changelog: 3.4.0...3.5.0

3.4.0

What's Changed

• Fix critical bug in VirtualGuard detection code that broke module cctors (#20)
• Add support for Confuser.Core (#21)
• Fix ConfuserEx constant decryption when initialization code is inlined into cctor (#21)

Full Changelog: 3.3.0...3.4.0

3.3.0

What's Changed

• Prevent an exception from being thrown when --keep-types or --preserve-tokens is specified at the wrong position (#18)
• Remove misleading "Try the latest version" nag (#18)
• Don't gate stack traces for unhandled exceptions behind an env var (#18)
• Fix a bug where specifying --no-cflow-deob could incorrectly cause proxy methods to be deleted (#19)
• Fix a bug where proxy inlining didn't copy the opcode, causing invalid IL (#19)

Full Changelog: 3.2.4...3.3.0

3.2.4

What's Changed

• Agile.NET: Fix delegate deobfuscation for some binaries by @meck-gd in #12
• cflow: Allow overflows for Int64 shifts too by @meck-gd in #13

Full Changelog: 3.2.3...3.2.4

3.2.3

What's Changed

• Add missing .net paths by @greenozon in #9
• Add -re option to handle exceptions when loading files gracefully by @mitchcapper in #10

New Contributors

• @mitchcapper made their first contribution in #10

Full Changelog: 3.2.2...3.2.3

3.2.2

What's Changed

• Add deobfuscator for string encoding seen in an XWorm sample by @meck-gd in #4
• InstructionEmulator: Fix rare exception caused by null values in arrays by @meck-gd in #5

Full Changelog: 3.2.1...3.2.2

3.2.1

What's Changed

• Update dnlib to uptodate version 4.5.0 by @greenozon in #2

New Contributors

• @greenozon made their first contribution in #2

Full Changelog: 3.2.0...3.2.1

3.2.0

Initial de4dotEx release.