Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 08-23-2014, 03:56
0x22 0x22 is offline
Family
 
Join Date: Aug 2014
Posts: 66
Rept. Given: 14
Rept. Rcvd 47 Times in 18 Posts
Thanks Given: 12
Thanks Rcvd at 64 Times in 21 Posts
0x22 Reputation: 47
Question regarding .NET dumping

Hello guys, usually i only reverse native applications but I've started to get some interest in .NET as well, so i have a question

My target is packed with themida.
The problem is that, when i load the program it will say "invalid email" or yeah you know.. Then it will auto close the dos window so i dont have time to press dump process.

So i tried a different approach, i started the file with MegaDumper and used the option to break on load, but after i did that it will break on laod on the first dos window but there are actually two that opens, the first one loads a second one who stated the invalid text. So yeah it will break on the first one and if i dump it at that point the program will get an exception and non-functional.

Could anyone help me out on this or tell me some tools i might use instead to get me on the right track ?

This is not a request because i want to do this myself to learn different obsticles. I will attach the file so that you might be able to understand it better as im bad at explaining

Thank you four time, have a good day

https://www.sendspace.com/file/lhgpkj
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Dumping Armadillo protected DLL? FEARHQ General Discussion 10 02-09-2005 11:08
svkp dumping problem SvensK General Discussion 30 05-10-2004 07:09
Dumping sfld General Discussion 2 03-20-2004 23:56
Dumping a dll with ollydump ceK52z General Discussion 6 02-08-2004 19:39


All times are GMT +8. The time now is 14:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )