Gareth182
02-02-2008, 03:44 AM
This is my first post, so hello to everyone, I'm hoping someone can help me please.
I have a .NET application which has been obfuscated. Although I can see method names etc. I cannot see any IL. I know that within one of the DLLs is an encrypted resource (an embedded text file).
Is it possible to somehow retrieve this from memory when it is loaded by the CLR? This is my first effort at trying to reverse engineer some code. I'm guessing that I would need to first work out when to break the programme (perhaps by causing an exception) and then dump the relevant area of memory for a particular thread / process? I look forward to some interesting replies! Thanks.
Gareth
I have a .NET application which has been obfuscated. Although I can see method names etc. I cannot see any IL. I know that within one of the DLLs is an encrypted resource (an embedded text file).
Is it possible to somehow retrieve this from memory when it is loaded by the CLR? This is my first effort at trying to reverse engineer some code. I'm guessing that I would need to first work out when to break the programme (perhaps by causing an exception) and then dump the relevant area of memory for a particular thread / process? I look forward to some interesting replies! Thanks.
Gareth