tribal
07-08-2008, 04:37 PM
Hello,
I have an application which is obfuscated and packed by xenocode.
I used olly to unpack the .net assembly which seem to have worked. If I open the app when another instance is already running, I get the normal error message that the app is already running, so the binary seems to be good.
To remove the licence protection I want to edit some msil code and re-compile the app so it works without the licence.
However, if I disassemble the file using ildasm I get allot of unresolved function names (e.g. '?'(object '?',). I dont really know how i can resolve this problem. Using general de-obfuscators seem to break the program, reassembling the program doesnt work. (it breaks on all the xenocode functions. If i comment those functions out i get errors on the unresolved symbols).
Im a noob in reversing .net and still learning, and I dont know where to go from here.
fwiw, the licence lib used is xheo.com. If i try to load that dll into reflector it says // Invalid method body. I got stuck there also, so i tried this approach which fails also...
I have an application which is obfuscated and packed by xenocode.
I used olly to unpack the .net assembly which seem to have worked. If I open the app when another instance is already running, I get the normal error message that the app is already running, so the binary seems to be good.
To remove the licence protection I want to edit some msil code and re-compile the app so it works without the licence.
However, if I disassemble the file using ildasm I get allot of unresolved function names (e.g. '?'(object '?',). I dont really know how i can resolve this problem. Using general de-obfuscators seem to break the program, reassembling the program doesnt work. (it breaks on all the xenocode functions. If i comment those functions out i get errors on the unresolved symbols).
Im a noob in reversing .net and still learning, and I dont know where to go from here.
fwiw, the licence lib used is xheo.com. If i try to load that dll into reflector it says // Invalid method body. I got stuck there also, so i tried this approach which fails also...