| View previous topic :: View next topic |
| Author |
Message |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Tue Jul 29, 2008 9:27 pm Post subject: Loading C# .NET programs into IDA |
|
|
I'm trying to load a program coded in C# .NET into IDA, but it always gives me this error when I try opening it as Microsoft .NET assembly:
If I try opening as a Portable Executable it doesn't load it correctly. But I know this can be done because I see people use IDA on .NET programs all the time. And I tried loading it in olly, but olly didn't load it correctly. _________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
samuri25404 Grandmaster Cheater
Reputation: 7
Joined: 04 May 2007 Posts: 955 Location: Why do you care?
|
Posted: Tue Jul 29, 2008 9:44 pm Post subject: |
|
|
What exactly are you trying to do?
Why not just use Lutz Roeder's Reflector? _________________
|
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Tue Jul 29, 2008 10:12 pm Post subject: |
|
|
| samuri25404 wrote: | What exactly are you trying to do?
Why not just use Lutz Roeder's Reflector? |
I'm trying to load the program into IDA because it lists the function names and I know the program uses a function to encrypt the files it saves, and I want to hook it (a challenge that my friend gave me), and if I double click the function name (most likely ec knowing how he codes), I can find the address. _________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
AoiMasamune Master Cheater
Reputation: 1
Joined: 14 Jun 2007 Posts: 255
|
Posted: Tue Jul 29, 2008 10:45 pm Post subject: |
|
|
C# is a .Net language, meaning it doesn't compile to x86 commands that IDA or Olly can understand. Instead it is using the .Net JIT compiler, which generates the executable just before it runs. The .exe that you generate isn't actually an executable program, which is why IDA is having problems.
Samuri gave good advice, just use Reflector to look at the algorithm he's using, and duplicate it in your own program to decrypt the files. |
|
| Back to top |
|
 |
oib111 I post too much
Reputation: 0
Joined: 02 Apr 2007 Posts: 2947 Location: you wanna know why?
|
Posted: Tue Jul 29, 2008 10:50 pm Post subject: |
|
|
I don't wanna decrypt it. I wanted to hook the Encryption function. And I already know he's using AES anyway. _________________
| 8D wrote: |
cigs dont make people high, which weed does, which causes them to do bad stuff. like killing |
|
|
| Back to top |
|
 |
|