Hot answers tagged

4 votes

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

UWP is a container/platform, different reversing techniques are needed depending on the executable content. .NET UWP apps can be compiled to CLR, then you can use standard .NET decompilation ...
chentiangemalc's user avatar
4 votes
Accepted

Is there a way to decompress a Fody-Costura generated exe in c#?

Embedded assemblies needs to be decompressed before they can be used so you can inspect all the code that does that in the assembly. Just go to Costura.AssemblyLoader to check how it is done. below is ...
Paweł Łukasik's user avatar
3 votes
Accepted

dnSpy: how to start 32 bit version

By default choco doesn't want to install 32bit if you are on 64bit system. But, with a little bit of effort, I found that to install 32bit you will need to add either add: --x86 or --forcex86 to force ...
BadSugar's user avatar
  • 110
3 votes

How to use dnSpyEx or some other .NET debugger to attach to a .NET process started with a process-hollowing technique?

You can insert an infinite loop in the code that you can find once you attach to the process. Right click the method you want to put a breakpoint on and select Edit Method. Add an infinite loop ...
Ana María Martínez Gómez's user avatar
3 votes

.NET: How to debug or decompile a DanamicMethod with dnSpy?

You can debug DynamicMethod's using the EventPipe API. I've written a library that uses it to allow for code injection via DynamicMethod that can be debugged: https://github.com/damieng/DamienG....
user42194's user avatar
2 votes

Assign a constant value to an ARM register

ARM limits the values of constants you can use in the MOV instruction: The complete MOV instruction needs to fit into 32 bits, so there is no space for an arbitrary 32-bit constant. Probably 0x25000 ...
Michael Karcher's user avatar
2 votes
Accepted

How to debug a .net DLL?

By far the easiest way to work with a .NET DLL is to just add it to a console app in the IDE. Create a new console app in Visual Studio / Rider, etc. - make sure it's the right Core / Framework ...
Rup's user avatar
  • 190
2 votes

Is there a way to decompress a Fody-Costura generated exe in c#?

I had success using the Fody-Costura-Decompress tool. You would need to build the solution from source. it has a simple GUI for choosing your file and decompressing it.
Alenros's user avatar
  • 121
1 vote

dnSpy not showing locals after hitting breakpoint

It is possible that your binary is protected using proxy objects. Proxy objects usually implement and provide obscure debugging information (and/or methods) that interferes dnSpy's or other debuggers' ...
Ri0ee's user avatar
  • 43
1 vote

Deobfuscating IOS dll file (I think arm64)

If you have really dll files in an iOS app then most likely it is a Xamarin based app. But the dll file you have does not contain .Net byte code: Because code interpreters were (or are?) not allowed ...
Robert's user avatar
  • 1,032
1 vote

dnSpy works really slow. How can I fix it?

Welcome, it's hard to guess with the information that you provided but I believe you tried very hard. Checkout https://github.com/dnSpy/dnSpy this is source code and it will help you tweak it for your ...
BadSugar's user avatar
  • 110
1 vote
Accepted

How to know where a sequences of bytes are used in a .NET application with Dnspy?

I figured it out: Right click and go to hex editor, then search the bytes you are looking for, then after finding it right click and select go to code reference.
Mery Ted's user avatar
  • 232
1 vote

Is there a tool to reverse engineer UWP apps, similar to dnSpy for .NET?

UWP apps are mostly native code unlike .NET apps which use CLR bytecode. Native code is much harder to analyze and decompile.
Igor Skochinsky's user avatar
  • 36.5k

Only top scored, non community-wiki answers of a minimum length are eligible