A better way to dump .NET assembly packed by a native stub

[Leaf]

Also, another question,

the binary has at least 3 packer signatures, BoxedApp, ConfuserEx and DNGuard HVM.

When I dump while at ExecuteMainMethod, i get this .NET Executable that seems I am not able to fix. Even setting AddressOfEntryPoint to _CorExeMain +0x1E, Universal Fixer fails telling me that it Metadata.RVA (BSJB) is invalid and aborts the fix.

dnSpy can open the binary and show me the structure and I see calls to DNGuard inside so maybe ConfuserEx is the third stage.

How to handle this?

[collins]

@Leaf : the software you mentioned should be EagleSpy.exe