dotscope 0.7.0

A high-performance, cross-platform framework for analyzing and reverse engineering .NET PE executables
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

//! General utility functions for the dotscope framework.
//!
//! This module consolidates utility functions from across the framework into a central,
//! reusable location. It provides fundamental operations needed by multiple components,
//! promoting code reuse and maintainability.
//!
//! # Module Organization
//!
//! The utilities are organized by functional area:
//!
//! - [`crate::utils::compression`] - ECMA-335 compressed integer encoding/decoding
//! - [`crate::utils::alignment`] - Memory alignment operations for binary layouts
//! - [`crate::utils::heap_calc`] - Metadata heap size calculation functions
//!
//! # Design Principles
//!
//! - **Framework-Wide Reusability**: Functions can be used across all modules
//! - **High Performance**: Optimized for frequent usage throughout the pipeline
//! - **ECMA-335 Compliance**: All utilities maintain strict .NET specification compliance
//! - **Thread Safety**: All functions are thread-safe with immutable operations
//! - **Comprehensive Testing**: Extensive unit tests ensure reliability
//!
//! # Examples
//!
//! ## Compressed Integer Encoding
//!
//! ```rust,ignore
//! use dotscope::utils::compression::{write_compressed_uint, compressed_uint_size};
//!
//! let mut buffer = Vec::new();
//! write_compressed_uint(300, &mut buffer);
//! assert_eq!(compressed_uint_size(300), buffer.len() as u64);
//! ```
//!
//! ## Memory Alignment
//!
//! ```rust,ignore
//! use dotscope::utils::alignment::{align_to_4_bytes, align_to};
//!
//! assert_eq!(align_to_4_bytes(17), 20);
//! assert_eq!(align_to(1000, 512), 1024);
//! ```

mod alignment;
mod base64;
mod bitset;
mod compression;
mod crypto;
mod decompress;
mod dot;
mod enums;
pub(crate) mod graph;
mod hash;
mod heap_calc;
mod io;
mod lebytes;
mod math;
mod synchronization;
mod visitedmap;

pub use alignment::align_to;
#[cfg(feature = "emulation")]
pub use base64::{base64_decode, base64_encode};
pub use bitset::BitSet;
pub use compression::compressed_uint_size;
pub use dot::escape_dot;
pub use enums::EnumUtils;
pub use hash::{hash_blob, hash_guid, hash_string};
pub use heap_calc::calculate_table_row_size;
#[allow(unused_imports)]
pub use io::{
    decode_utf16le, read_be, read_be_at, read_be_at_dyn, read_compressed_int,
    read_compressed_int_at, read_compressed_uint, read_compressed_uint_at, read_le, read_le_at,
    read_le_at_dyn, read_packed_len, write_7bit_encoded_int, write_be, write_be_at,
    write_be_at_dyn, write_compressed_int, write_compressed_uint, write_le, write_le_at,
    write_le_at_dyn, write_prefixed_string_utf16, write_prefixed_string_utf8, write_string_at,
    write_string_utf8, CilIO,
};
#[cfg(feature = "emulation")]
pub use lebytes::LeBytes;
#[cfg(feature = "compiler")]
pub use math::is_power_of_two;
#[cfg(feature = "emulation")]
pub use math::to_i32_saturating;
pub use math::to_u32;
pub use synchronization::FailFastBarrier;
pub use visitedmap::VisitedMap;

#[cfg(all(feature = "deobfuscation", feature = "legacy-crypto"))]
pub(crate) use crypto::derive_key_iv;
#[cfg(all(feature = "legacy-crypto", feature = "emulation"))]
pub(crate) use crypto::derive_pbkdf1_key;
#[cfg(feature = "deobfuscation")]
pub(crate) use crypto::CryptoParameters;
#[cfg(feature = "emulation")]
pub(crate) use crypto::{apply_crypto_transform, derive_pbkdf2_key, verify_rsa_pkcs1v15};
#[cfg(feature = "emulation")]
pub(crate) use crypto::{compute_hmac_sha256, compute_hmac_sha512};
#[cfg(feature = "legacy-crypto")]
pub(crate) use crypto::{compute_md5, compute_sha1};
pub(crate) use crypto::{compute_sha256, compute_sha384, compute_sha512};

#[allow(unused_imports)]
pub(crate) use decompress::{
    decompress_confuserex_lzma, decompress_deflate, decompress_gzip, is_confuserex_lzma,
};