Skip to content
Broken Event edited this page Feb 5, 2015 · 6 revisions

Introduction

Obfuscar Mapping Parser is a tool to read Obfuscar's Mapping.xml files and deobfuscate stacktraces created from obfuscated applications.

Just like this:

Main purpose of the application

Usecase

The main usecase is simple:

If you have an .NET application and used Obfuscar for it...

If the release obfuscated version of your application has crashed and you have a stacktrace...

If you don't afraid to use it to fix your application...

So just open Mapping.xml (generated by the Obfuscar) in Obfuscar Mapping Parser and deobfuscate your stacktrace.

Features

  • Parsing Obfuscar mapping files.
  • Exploring and search in classes tree.
  • Deobfuscation of the stacktraces.
  • Analysis of items were missing in mapping and failed to deobfuscate.

Some more to say...

Other features

If your stacktrace is somehow broken (no parameters or results and so on), the Obfuscar Mapping Parser will try to substitute as much as it could. Even if obfuscated value was not added to mapping, the application will decode classname.

Another useful feature is PDB files. Microsoft Visual Studio stores there method-file mapping, so it is possible to get filename and line number for any method by its name. If you attach PDB file to Obfuscar Mapping Parser, it could open methods from items tree and Stacktrace analyzer in VS.

Known problems

  • If your stacktrace contains method from derived class which overrides a method of the base class, it would not be deobfuscated correctly. Just because this method of this class doesn't appear in the mapping file. It appears for the base class, but not for the derived. And the Obfuscar Mapping Parser is no way to know that current class inherits the base.

Future plans

  • Assembly and reflection support. This will allow to solve issues with inheritance and also may improve the quality of stacktrace deobfuscation.
  • To made something like Visual Studio plugin for Obfuscar Mapping Parser. This will allow to process stacktraces just from IDE.

Notification

This project is not connected with the original Obfuscar.

To get the original .NET obfuscation tool please follow here:

https://obfuscar.codeplex.com/

All copyrights to the "Obfuscar" name are reserved to its author.

P.S.

You can always get the latest released Install at ObfuscarMappingParser.Install.exe. It may be updated earlier and may updates more frequently than GitHub.

Official web-page: brokenevent.com/projects/obfuscarparser

Contact information

If you want to watch this project news, you may use one of following:

Twitter

G+

Facebook

Own site

Trello

This is really possible that information there will be updated more frequently than here.

Clone this wiki locally