EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 12-28-2018, 14:29
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 114
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 145
Thanks Rcvd at 62 Times in 28 Posts
Stingered Reputation: 2
Need an assist with adding locals using DNspy

So I came across a version of .NET Reflector that I believe was manually edited (using DNspy or similar) to remove any and all serial/internet verification checks/etc, thus making the EXE completely portable. I'm trying to backtrack how this was done using an unedited but identical version of the Reflector EXE. I'm 95% there, but I'm stuck on the last bit.

I'm using DNspy, but I cannot figure out how these locals were added:

Code:
Reflector.Application.InternalApplicationManager.<>c__DisplayClass0_0__2
Reflector.Application.InternalApplicationManager.<>c__DisplayClass0_1__1
FYI: The method is, WindowManagerLoadPostProcessUiActions()

They are showing up under the LOCALS tab of the DNspy dialog that allows you to edit the IL instructions. It's damn frustration because it's the final piece to the puzzle and I can't figure out how to implement these locals into the EXE.

A pointer in the right direction would be very helpful.

-thx
Reply With Quote
  #2  
Old 12-30-2018, 07:15
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 827
Rept. Given: 324
Rept. Rcvd 216 Times in 110 Posts
Thanks Given: 165
Thanks Rcvd at 241 Times in 122 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
tokens with names like
<>c__DisplayClassXXXXX
are for sure generate by the C# compiler
Good decompiler transofrts that low-level stuff into high level C# constuctions (eg as ILSpy does)

what is the reason to add vars (by hands!?!) that are like internal compiler generated ones?
Reply With Quote
The Following User Says Thank You to sendersu For This Useful Post:
niculaita (12-30-2018)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 02:30.


��ICP��05004977��
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX