Rerversing protected .net application

[navinkaus]

Hi,

Any good link / material which describes how to unpack the protected .net application. Also I was not able to take the memory dump using ollydump plug-in while running .net application from ollydbg, it would be nice if you can provide me the information about dumping the .net application.


Thanks,
Navin

[Kurapica]

Look here

http://portal.b-at-s.info/tutorials.php

you may be interested in CodeVeil Manual Unpacking tutor too.

[navinkaus]

Thanks for the link, actually in my case .net assembly is converted into unmanaged application after protection, so I can't disassemble it .

Normally, what we do for native application, we run it under debugger , takes the dump , find the OEP and fixes the import table. What I need to do in case of .NET application, considering the fact that I can't dissamble it with ILDASM or any other tool.

Another case in which we can't disassemble is, for mixed mode application.

I hope you understand more now.

[Kurapica]

Check these two articles by Rendari

http://www.woodmann.com/forum/showthread.php?t=11474
http://www.woodmann.com/forum/showthread.php?t=11486

I hope it works.

[navinkaus]

Any tutorials which describes how to patch .net application if strings and constants are encrypted ?

Thanks,
Navin

[Kurapica]

check this tutor by UFO-PU55Y

http://www.tuts4you.com/download.php?view.1691