Questions tagged [c#]

A multi-paradigm programming language encompassing strong typing, imperative, declarative, functional, generic, object-oriented (class-based), and component-oriented programming disciplines

15 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
28 views

How can I tell whether or not a given library method is being referenced by a consumer program statically in OOP languages?

Preface: This question is about source code reverse engineering and static analysis. Meaning, there is no built code available but I have access to the source code of the program. Imagine I'm looking ...
2
votes
0answers
159 views

Decompress from file with crush32

I have some files *.bli, *.ilg, *.pix, etc. These files are from technical documentation LinkOne, and compressed with old C/Win32 compression library crush32.dll. information can be found here ...
2
votes
0answers
99 views

Patching an app that updates frequently

Hello i am working with an app coded in c# which updates very often usually within 2-3 days or sometimes every 12 hours The updates are really needed for the app to work So i was wondering what can i ...
2
votes
0answers
321 views

COM interface call from managed code

I have managed assembly that calls COM interface methods. I am interested in IManager interface, here is the code from NET Reflector: namespace Lib { [ComImport, CompilerGenerated, CoClass(...
1
vote
0answers
190 views

Deobfuscating Unknown C# obfuscator?

Hello, I am having an exe file that I am trying to deobfuscate and debug using dnspy. The exe file was written in C# and obfuscated with unknown deobfuscate according to de4dot! I tried to all my ...
1
vote
0answers
120 views

Re-engineering to create UML Diagrams from .NET binary assembly

What is the base way to generate UML diagrams (both class and sequence) from .NET assembly using OpenSource tools? The 200% Reflective Class Diagram Creation Tool cannot be used due on problems ...
1
vote
0answers
357 views

C# Hidden Method through transparent proxy object?

I'm dealing with an interesting form of obfuscation. A C# program I am reversing has a central API, let's call it "Central API". This Central API has several functions that aren't exactly defined. ...
1
vote
0answers
63 views

Can I see Stack and Heap value/addresses from this simple C# program process?

I am studying reading dumped memory image and analyzing it with volatility. I wrote this c# program and I was hoping to see the analyzed data from Volatiliy namespace CSharpEx1 { class Program ...
1
vote
0answers
637 views

Why does calling the original function from my hook fail?

I am trying to retrieve text from another program. I used Ollydbg to find the address for the function I need to hook to get the info. I used EasyHook to inject the code below. The hook works fine ...
0
votes
0answers
74 views

Modify Strings in a ELF (Executable and Linking Format) that are stored in the .rodata

I have 2 ELF files here, each containing strings in the ".rodata" for an translation that I want to modify. The first ELF "(binary1)" I have already successfully modified from ...
0
votes
0answers
20 views

Intercepting object value in a Frida intercepted method

Suppose I have a C# method with the following signature public virtual void DoSomething(int index, int value, List<int> results) I've had success so far using Frida to hook into the method call ...
0
votes
0answers
194 views

Cannot detect obfuscator of executable C#

I have an obfuscated exe file writen in c#, which I want to deobfuscate. In dnSpy I can see this de4dot said unknown obfuscator, tried to deobfuscate with some result which looks on dnSpy the same (...
0
votes
0answers
251 views

How can I have a breakpoint once a value changes in DnSpy?

I am trying to track a certain value in a game to analyze the cause of a crash (basically, it goes to null at one point and I would like to know what exactly puts that to null as it causes issues ...
0
votes
0answers
42 views

is it possible to write the first byte at the entry point of a process dll module?

Hello so my problem is kind of weird .. im trying to write memory using this : WriteProcessMemory(intptr pHandle, intptr lpBaseAddr, byte[] lpBuffer, uint nSize, int lpNbrOfBytesWritten); have a ...
0
votes
0answers
127 views

reverse engineering obfuscated .net dll

I am decompiling a third party .NET dll which was obfuscated using codeveil my aim is to get full source code, I tried decompiling using dnSpy, JustDecompile & Reflector however it just shows the ...