Hmily 发表于 2008-5-9 20:28

ILLY 0.1 Beta 3

Author: Ufo-Pu55y


his plugin is BETA - so don't expect too much.

Features:
-Auto-Hook on compileMethod()
-Shows the IL code of each method
-Break on jitted method (native code)
-All dumped methods (e.g. once shown in dump window) remain in BP window
-Manually dump IL code (In context menu of dump windows > Dump selection)

How to:
-Simply run a .net app in Olly and choose "Run ILLY"
-Run/Stop also via shortcut: CTRL + SHIFT + I
-Olly will remember, if to run the plugin from startup or not
-"SKIP" means closing the dump window and waiting for the next method
-"NEXT" means leaving the dump window open and waiting for the next method

Works on:
-All tested jithooking protectors: DNGuard, CliSecure, dotNet Protector,...
-Except for MaxToCode.. coz of the guarding DLL being protected with Themida :--/
ILLY works only after attaching then - not from startup !

ToDo:
-Resolve tokens
-Full method dump: Add method header and additional method sections (exception handlers) to dump.

cenfeng82 发表于 2013-2-4 01:35

正需要了。

02006691 发表于 2013-9-28 10:52

试试这个插件 .net无处下手 谢谢分享
页: [1]
查看完整版本: ILLY 0.1 Beta 3