Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [c#]

A multi-paradigm programming language encompassing strong typing, imperative, declarative, functional, generic, object-oriented (class-based), and component-oriented programming disciplines

1
vote
0answers
40 views

C# Hidden Method through transparent proxy object?

I'm dealing with an interesting form of obfuscation. A C# program I am reversing has a central API, let's call it "Central API". This Central API has several functions that aren't exactly defined. ...
1
vote
0answers
42 views

Can I see Stack and Heap value/addresses from this simple C# program process?

I am studying reading dumped memory image and analyzing it with volatility. I wrote this c# program and I was hoping to see the analyzed data from Volatiliy namespace CSharpEx1 { class Program ...
0
votes
1answer
143 views

Help Needed reversing a function inside a DLL [closed]

I have a broken installation of Metalogix Archive Manager (MAM). Sometimes, I need to go and retrieve attachments that this has archived when it was previously working. The original attachment name ...
3
votes
1answer
104 views

Compile C# like C++?

After reading the ins and outs of compilation differences between C# and C++ , my question is, cant we compile the C#application (or dll) with Visual Studio (or with other program), so similarly to C++...
0
votes
0answers
157 views

Dotpeek problem decompiling code?

As part of a reverse-engineering challenge on Hackthebox.eu I've tried to decompile a .net executable file. The entire program decompiled successfully but it has two errors. I will post below the ...
4
votes
1answer
118 views

How to tell if a particular .NET assembly was written in C# or F#?

The motivation for this question is that I used JetBrains dotPeek to decompile an .exe written in F#, but the output project directory produced C# code. Why does decompiling an F# assembly produce C# ...
0
votes
0answers
103 views

Understanding packets and sending them

I'm using WCell emulator to emulate WOW game, The game send a packet with packet id, etc. the emulator has a packet handler for each packet by id, and send the response back to the client. Well, it ...
0
votes
1answer
117 views

Reversing C# exe,Questions.Help

I am trying to debugging c# .NET application which receives a set of doubles and keep it as DataSeries every second. I want to rewrite its dataseries before the new data comes with my own dataset. ...
0
votes
1answer
125 views

Encrypted String? [closed]

(I made a topic but I was ask'd to re-made it) Hi! I have a program and when I want to decompile/dissamble it finish and when I inspect the code everywhere where should be some filenames there are .(...
3
votes
1answer
224 views

How to deobfuscation the public class names .NET

I already try de4dot with all dlls and exe and try remove strong name and don't work. what am I doing wrong?
1
vote
1answer
194 views

See how classes are used in a Unity 3D game [closed]

I'm trying to understand how the procedural generation in a particular Unity 3D game works. I do not have the source code/project file, just a windows build. I've opened up a dll called Assembly-...
3
votes
2answers
1k views

How to edit and modify a class with ILSpy + Reflexil

In the Maxsea.SmartDesktop.dll, I want to edit and modify class b1g. There is this in : if (isCrackedResult != null && isCrackedResult.IsCracked) and I want to modify for this : if (...
1
vote
1answer
533 views

Reverse engineering of Managed C++/C# CrackMe

I'm reverse engineering the CrackMe which is written on Managed C++/C#. Arguments are "string" (email in this case) and "serial". Serial is somehow depends on string and I need to understand how. I ...
1
vote
1answer
106 views

Reverse code check

I'm currently only patching this code to return true, do you guys have any idea of how I could start making a generator to make valid codes? I can't understand the logic here. public static bool ...
1
vote
1answer
7k views

Can we decompile an .exe or .dll as %100? [closed]

Can we decompile a .exe or .dll file as 100%? Also sometimes seems some mistakes on somewhere (like mainfrm.cs) , how can we fix that? What is the best .NET decompiler? or What would you prefer? I ...
0
votes
1answer
349 views

Extracting embedded dlls from .NET executable

I have a .NET executable that apparently has some embedded DLLs. It's just one standalone executable. I opened this executable with JetBrains dotPeek and ILSPY, both decomiplier are showing DLL names ...
3
votes
2answers
3k views

How to decompile a C# .exe on macOS?

It this even possible? Are there any free tools?
2
votes
0answers
161 views

COM interface call from managed code

I have managed assembly that calls COM interface methods. I am interested in IManager interface, here is the code from NET Reflector: namespace Lib { [ComImport, CompilerGenerated, CoClass(...
0
votes
0answers
480 views

C#: Convert Hex Text to Assembly Code Text

I was working on a disassembler (if I can successfully finish it, I will post the source code too), and so far it can output the contents of an EXE file into Hex text as a text file. Here's the code ...
0
votes
1answer
279 views

C# Source Reverse Eng into UML Model Fragment

While almost all UML tools provide a means of obtaining the structural content of a body of source material, i.e. namespaces as: packages, Class, Interfaces, Attributes and Operations. Has anyone ...
0
votes
0answers
98 views

Reversing so lib's with IDA

When i decompile APK file there are .so lib's i choise the one with my CPU architecture in my case ARMv7. The .so lib's are writen in C#, but i can't see the fine C sharp code, even when i decompile ...
0
votes
0answers
446 views

Is there any way to decompile C# from RAM?

I finally understood how my C# (Unity) code can download DLL (.bytes) from server at runtime and execute it from RAM (no local file written AFAIK). So now I wonder if there's a tool to decompile from ...
2
votes
0answers
71 views

Am I seeing this dll's innards correctly? [closed]

The dll in question is custom, from a retail/consumer software package that was first offered for sale in 2006/2007. I am fairly confident that it was compiled with Visual Studio .NET (2003). My ...
4
votes
1answer
840 views

Having keys and binary, how do I reverse/decrypt a stream encryption?

I would like to ask if you have any idea or approach to reverse engineer a decryption algorithm to find the opposite encryption function. I do have all required keys and fields and of course the ...
0
votes
1answer
247 views

How can I read the assembly instructions of a C program from C#?

I want to be able to do what an ordinary disassembler does—list the assembler instructions of an arbitrary executable—but from C#. It would consist, for instance, of finding a specific instruction ...
2
votes
5answers
14k views

Recover source code for C# .exe

I paid a freelancer programmer for an app to tun my clinic. He got about 95% of the project done, but then got a job elsewhere and vanished into thin air, along with my source code... So, I have a ...
1
vote
0answers
37 views

Field that is never assigned? [closed]

I am reversing a DLL insied a Unity game with .NET Reflector, and I found some weird fields. They are never assinged, there was no item under the Assigned by while there were some items under the Used ...
1
vote
1answer
1k views

Issue decompiling c# method

I'm trying to decompile a c# dll and on a particular method I'm getting this result public IEnumerable<Guid> GetDbIdentifiers(int classId) { switch ((794999935 == 794999935) ? 1 : 0) { ...
0
votes
2answers
359 views

Trying to reverse assembly code of a game so i can write to memory

First of all, i want to say that this is not to be used for cheating in online games, or give me an advantage over other players, it is striclty for learning purposes, and games are fun. I have in a ...
1
vote
1answer
287 views

Question of analysing function of DLL and write program to call it [closed]

I have a customized DLL in a large software. The DLL compress/decompress image files. I need to use the DLL separately to get my important images back to decompressed version. I can see its function ...
0
votes
2answers
327 views

Can I extract .txt files from .exe if I know their addresses?

I have disassembled the exe in IDA 6.1 and I think I found a hand full of text files and was wondering how to go about dialing into the addresses and extracting the data. Here is what I found I know ...
1
vote
1answer
114 views

Malware checks for hwid

Recently, I received malware executable to analyse - it's written in C#, and it's packed/obfuscated with unknown tool, so I started analysis from analysing it's traffic - what it's sending and ...
4
votes
3answers
24k views

Modify code with ILSpy

I want to modify an exe a little bit. With ILSpy I see all the code that I need but I don't know how to modify the code. I tried "save code" on ILSpy that exports a .cs file, but when I open the .cs ...
1
vote
0answers
536 views

Why does calling the original function from my hook fail?

I am trying to retrieve text from another program. I used Ollydbg to find the address for the function I need to hook to get the info. I used EasyHook to inject the code below. The hook works fine ...
1
vote
1answer
1k views

Convert assembly ADC to C#

I have this dissassembled routine from an executable but I am having troubles to translate it to C#. .text:005C9290 ; =============== S U B R O U T I N E ======================================= .text:...
1
vote
2answers
458 views

Identifying cryptography algorithm

I have a decryption algorithm that has been pulled from an x86 binary and converted into C# code. The C# works perfectly to decrypt data, but I'd like to identify the algorithm in use, so I could (...
0
votes
1answer
755 views

Cannot compile native/unmanaged method

I disassembled a C# program with ildasm and modified the il code to my needs but now when i try to assemble it back into an exe i get these errors: Cannot compile native/unmanaged method Local (...
0
votes
1answer
2k views

Extracting data from Filemaker application

I have an end user version of an application written in FileMaker 10 (FML10.dll) and I need the data behind the software. Anyone knows a way to extract the data? Looks like the USR file containts the ...
2
votes
1answer
688 views

IDApro subroutine analysis

I am using IDA to find out parameters of a routine in a DLL. I browsed to the routine in question and saw that IDA has automatically done that job for me and put a comment like this: ; ==============...
1
vote
2answers
633 views

Patch a Java class inside a jar using C# [closed]

Being a beginner in C# I wonder if it is possible to patch a .class file inside a .jar? Since jar files tend to act like "zip" files, the approach I think might work is to decompress the jar, patch ...
9
votes
1answer
1k views

Rename obfuscated names with .NET Reflector?

I have some obfuscated C# .NET code I want to analyze. Is it possible to rename those obfuscated symbols? So I can more easily track them? Like IDA Pro can work with renaming functions and so forth.