View Single Post
  #4  
Old 10-29-2019, 04:19
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,305
Rept. Given: 337
Rept. Rcvd 237 Times in 127 Posts
Thanks Given: 340
Thanks Rcvd at 652 Times in 357 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by jonwil View Post
I have some dlls that contain both .NET code and native code. Any tools, tips or other things that will help with reverse engineering such dlls?
Something that can decompile the .NET code and spit it all out (in C++/CLI syntax ideally but C# will do) and can then identify the native side of things (addresses etc) so I can then go in and reverse engineer those (including any calls from the native code back to the .NET code)
from my practice most of the time .net code is calling some native stuff..
so you have to study how to figure out where the hell for example IL opcode calli will jump to.. etc

most of the times dnSpy is your best friend in this journey + some hex tool like hiew or IDA

calling .net code from native sounds like a "nontraditional sex", pardon me
Reply With Quote