Jump to content
View in the app

A better way to browse. Learn more.
Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

A better way to dump .NET assembly packed by a native stub

wwh1004
wwh1004
in Reverse Engineering Articles

Featured Replies

Also, another question,

the binary has at least 3 packer signatures, BoxedApp, ConfuserEx and DNGuard HVM.

When I dump while at ExecuteMainMethod, i get this .NET Executable that seems I am not able to fix. Even setting AddressOfEntryPoint to _CorExeMain +0x1E, Universal Fixer fails telling me that it Metadata.RVA (BSJB) is invalid and aborts the fix.

dnSpy can open the binary and show me the structure and I see calls to DNGuard inside so maybe ConfuserEx is the third stage.

How to handle this?

    • Like 1

    @Leaf : the software you mentioned should be EagleSpy.exe

    • Like 1
    • 10 months later...

    Create an account or sign in to comment

    https://forum.tuts4you.com/topic/41385-a-better-way-to-dump-net-assembly-packed-by-a-native-stub/
    Go to topic listing

    Configure browser push notifications
    Chrome (Android)
    1. Tap the lock icon next to the address bar.
    2. Tap Permissions → Notifications.
    3. Adjust your preference.
    Chrome (Desktop)
    1. Click the padlock icon in the address bar.
    2. Select Site settings.
    3. Find Notifications and adjust your preference.