View Single Post
  #1  
Old 08-23-2014, 03:56
0x22 0x22 is offline
Family
 
Join Date: Aug 2014
Posts: 66
Rept. Given: 14
Rept. Rcvd 47 Times in 18 Posts
Thanks Given: 12
Thanks Rcvd at 64 Times in 21 Posts
0x22 Reputation: 47
Question regarding .NET dumping

Hello guys, usually i only reverse native applications but I've started to get some interest in .NET as well, so i have a question

My target is packed with themida.
The problem is that, when i load the program it will say "invalid email" or yeah you know.. Then it will auto close the dos window so i dont have time to press dump process.

So i tried a different approach, i started the file with MegaDumper and used the option to break on load, but after i did that it will break on laod on the first dos window but there are actually two that opens, the first one loads a second one who stated the invalid text. So yeah it will break on the first one and if i dump it at that point the program will get an exception and non-functional.

Could anyone help me out on this or tell me some tools i might use instead to get me on the right track ?

This is not a request because i want to do this myself to learn different obsticles. I will attach the file so that you might be able to understand it better as im bad at explaining

Thank you four time, have a good day

https://www.sendspace.com/file/lhgpkj
Reply With Quote