跳到正文

正在自动登录…

← 返回项目列表

Networkapbridge/dll-decryptor

DLL解密

一款用于逆向工程受保护DLL的Windows工具,可转储加密的DLL、解析混淆的导入并重建PE头,输出可在dnSpy、IDA或Ghidra中打开的模块。适用于游戏模组、作弊加载器等场景的逆向研究人员。

AI 中文解读 · 根据仓库描述与 README 生成 · 2026/10/20 22:41:45 · 查看原文

HTML应用与服务
累计 Stars
72
当前热度
未达当前门槛
仓库创建时间
打开 GitHub ↗

选用指南

AI 根据 README 整理 · 2026/10/20 22:41:45

使用方式

通过拖拽目标DLL到窗口或使用“打开模块”功能,选择转储配置文件后点击“转储”即可。也支持命令行模式用于批量脚本。

查看 README 依据
3. **🖱️ Run the .exe** — right-click → *Run as administrator* if the target is kernel-protected. 4. **🎯 Drag the target DLL** onto the window (or use *Open Module*) and pick the dump profile. 5. **💾 Hit Dump** — the decrypted module is written next to the source with a `_decrypted` suffix. --- ## 🔍 How It Works
- Method pointer map reconstruction. - Field name recovery. - Unity string decode. - Managed method signature reconstruction. - `.dll` ↔ metadata cross-check. **Workflow / UX** — the small stuff that makes dumps fast. - Drag-and-drop target. - Dump profiles (packed, obfuscated, IL2CPP, native). - Output folder presets. - Verbose log with copy-to-clipboard. - Re-dump on fail with tweaked profile. - CLI mode for batch scripting. That's 43 modules total across six families. --- ## 🔑 Key Features | Feature | Description | Benefit | |---|---|---|
部署要求

需要Windows 10 64位(1809+)或Windows 11,x64架构,.NET Framework 4.7.2或.NET 8运行时,至少4GB内存和200MB磁盘空间。

查看 README 依据
| OS | Windows 10 64-bit (1809+) | Windows 11 23H2+ | | CPU | 2 cores, x64 | 4+ cores | | RAM | 4 GB | 8+ GB | | .NET | .NET Framework 4.7.2 | .NET 8 runtime | | Disk | 200 MB free | 1 GB free (dumps) | | Privileges | User | Administrator for kernel-protected targets | | Architecture | x64 only | x64 only | --- ## 💻 Compatibility / Platform Support | Target | Support | Notes | |---|---|---| | Windows 10 x64 | ✅ Full | Primary platform | | Windows 11 x64 | ✅ Full | Tested on 24H2 | | .NET Framework DLLs | ✅ Full | IL decrypt + repair | | .NET 6/7/8 assemblies | ✅ Full | Modern IL support |
已知限制

32位模块支持部分,IL修复有限;内核级保护模块支持部分,需要管理员权限或驱动辅助。

查看 README 依据
| Native PE DLLs | ✅ Full | x64 native dump | | Unity IL2CPP `GameAssembly.dll` | ✅ Full | Global-metadata pairing | | Unreal Engine module DLLs | ✅ Working | Some UE5 builds need verbose mode | | Game mod DLLs | ✅ Full | Standard packed mod modules | | Cheat loader DLLs | ✅ Working | Report crashes via Issues | | 32-bit modules | ⚠️ Partial | WOW64 dump available, IL repair limited | --- ## 🚀 Quick Start 1. **📦 Download the release** — grab the `.exe` from the project page (link below). 2. **🗜️ Extract the archive** — copy to a folder you own, e.g. `C:\dll-decryptor\`.
| .NET Reactor strings | ✅ Working | Key recovery heuristics | | Enigma Protector | ✅ Working | x64 builds | | ASProtect SKE | ⚠️ Partial | Older signatures only | | Homebrew XOR packers | ✅ Working | Signature teaching mode | | Kernel-mode protectors | ⚠️ Partial | Elevated + driver assist | --- ## 🗂️ Comparison — dll decryptor vs alternatives | Aspect | Alternative | This Tool | |---|---|---| | Opinion on protector | Manual identification | Auto signature match | | Dump quality | Often corrupt PE | Section-aware rebuild | | IL repair | Heuristic only | Dedicated repair pass |

README

正在加载 README…

收录信息

仓库创建时间
2026/10/20 19:55:37
首次达标收录
2026/10/20 22:36:53
统计更新时间
2026/10/22 19:01:10

按创建时长与累计 Stars 判断等级。首次达标收录后,即使未达当前门槛仍保留;累计 Stars 和仓库状态会定期更新。确认只有 README 及辅助文件的仓库会停止公开。

仓库信息

最近推送
2026/10/20 19:58:05
许可证标识
MIT
Fork 数
31
当前状态
未归档

收录记录

按创建时长与累计 Stars 首次收录:小火
首次发现项目