1

I want to do a reverse-engineering of an obfuscated Unity DLL assembly, but de4dot doesn't work. It says "Unknown Obfuscator". Also tried iMPROVE and it says that there is a 97% chance that it is a DotWall obfuscated assembly, but deobfuscation doesn't work!

Here is the DLL: http://uploadboy.me/87n60oy2ifiw/Assembly-CSharp.zip.html

Can someone say how can I deobfuscate it? or at least which obfuscator has produced this DLL?

1 Answer 1

1

It is CodeWall, strings are not encrypted, or really slightly (a simple XOR but nothing more complexe). You can use the IsLatin regex with De4Dot to clean the file as far as names are concerned.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.