Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > .NET Reverse Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
  #11  
Old 08-19-2008, 09:37 AM
citopr citopr is offline
Member
 
Join Date: Aug 2008
Posts: 8
Default Mmx

yes. I'm talking about the mmx part. It says that I have to do it for codeveil 1.2 just not for 1.3. O.K. if I don't have to do it for 1.2... I really don't know where to go from here. I'm really sorry for being such a nOOb. When I get good I promise to help someone else. It has a time 30 trial. You know of any tutorials on how to remove it or of what's my next move?
Reply With Quote
  #12  
Old 08-25-2008, 02:58 PM
eguan eguan is offline
Junior Member
 
Join Date: Aug 2008
Posts: 1
Default help me get some ideas about reverse something

Hi Sir, could you please help me reverse something? I think the code is somehow encrypted and all I gets after reflection is

"Expression stack is empty at offset 0006."

or

"/*
Stack is empty at 0006
at x25adc2ca6f05c4e5.x2637e979e1ce20a0.x47c79a4d20718 3de() at x25adc2ca6f05c4e5.x2637e979e1ce20a0.xf7ed8b5d3a356 83b(Int32 xdadd3e52ec363720) at x25adc2ca6f05c4e5.x2637e979e1ce20a0.xcca310a929e46 a7c(Int32 x13d4cb8d1bd20347, Int32 x2832f35f9e73679f) at x25adc2ca6f05c4e5.x2637e979e1ce20a0.x4c429db7bb96c 78c(xe4f1947afbf9c52f x1306445c04667cc7) at xb03536b881c730ad.x80decb06b0b136f1.x4c429db7bb96c 78c() at xb03536b881c730ad.xc5f99dd440b2d1db.x1be9855bf968d ec6(BinaryReader xe134235b3526fa75)

*/"


Could you please help? Any ideas?

Thanks!

Quote:
Originally Posted by Kurapica View Post
Hi People

In order to spread the knowledge and attract more people into dotNET RCE I will receive requests from anybody who wants to learn how to reverse a dotnet application.

After you make the request I will see If I can make a tutor about it, of course I can't reverse everything but I will try my best, Please understand that I won't crack your software or help you get a free copy of some commercial software, the only goal is to gain knowledge about this new field and share my ideas with all of you.

My only condition regarding the requests is that they are not too large in size so that I and other people who wants to apply the tutor can download quickly.

The tutors will be in Flash format of course, the targets can be either executable applications or DLL Libraries known as Components.

greetz
Reply With Quote
  #13  
Old 08-25-2008, 03:34 PM
Kurapica Kurapica is offline
Senior Member
 
Join Date: May 2006
Location: Archives
Posts: 357
Default

Quote:
Stack is empty at 0006
at x25adc2ca6f05c4e5.x2637e979e1ce20a0.x47c79a4d20718 3de() at x25adc2ca6f05c4e5.x2637e979e1ce20a0.xf7ed8b5d3a356 83b(Int32 xdadd3e52ec363720) at x25adc2ca6f05c4e5.x2637e979e1ce20a0.xcca310a929e46 a7c(Int32 x13d4cb8d1bd20347, Int32 x2832f35f9e73679f) at x25adc2ca6f05c4e5.x2637e979e1ce20a0.x4c429db7bb96c 78c(xe4f1947afbf9c52f x1306445c04667cc7) at xb03536b881c730ad.x80decb06b0b136f1.x4c429db7bb96c 78c() at xb03536b881c730ad.xc5f99dd440b2d1db.x1be9855bf968d ec6(BinaryReader xe134235b3526fa75)
very creative request !
How am I supposed to help you ? :-[
__________________
Life can only be understood backwards but It must be read forwards.
Reply With Quote
  #14  
Old 08-27-2008, 04:43 AM
JackTheRipper JackTheRipper is offline
Member
 
Join Date: Jan 2008
Posts: 22
Default

By the format of the obfuscated members name (the "x" at the beginning followed by an hex string), I think this assembly is most probably obfuscated by Xenocode PostBuild.
Reply With Quote
  #15  
Old 09-14-2008, 02:39 AM
oracle oracle is offline
Junior Member
 
Join Date: Sep 2008
Posts: 2
Default

Hi Pros,

hats off to all senior RCE pros over here, and thanks a ton for the learnings offered to amateur like...

here come my long time kept query,
In a situation where as a Single MSIL Executable contains both Managed and UnManaged Code, in this case reversing of Managed Code is as simple as reversing a pure managed code with Reflector but how it is to reverse the UnManaged Code Chunks from that Mixed Executable...

It would be greatfull to see a tutorial on this...

Here is the link containing sample mixed code.

http://rapidshare.com/files/145118471/RxSpiy.rar.html

Thanks again Pros... do keep flying...
Reply With Quote
  #16  
Old 09-14-2008, 09:38 AM
shahram shahram is offline
Member
 
Join Date: Apr 2008
Posts: 39
Default Deploy LX

Is there a solution for XHEO licensing (not Codveil).
I mean the other product of this company named Deploy LX Licensing ?!

BR
Shahram
Reply With Quote
  #17  
Old 11-11-2008, 08:17 AM
FREEONE FREEONE is offline
Junior Member
 
Join Date: Nov 2008
Posts: 1
Default

I meet the same question, how to Solve it ,Maybe someone could get the help!/*
Stack is empty at 0006
在 x25adc2ca6f05c4e5.x2637e979e1ce20a0.x47c79a4d20718 3de() 在 x25adc2ca6f05c4e5.x2637e979e1ce20a0.xf7ed8b5d3a356 83b(Int32 xdadd3e52ec363720) 在 x25adc2ca6f05c4e5.x2637e979e1ce20a0.xcca310a929e46 a7c(Int32 x13d4cb8d1bd20347, Int32 x2832f35f9e73679f) 在 x25adc2ca6f05c4e5.x2637e979e1ce20a0.x4c429db7bb96c 78c(xe4f1947afbf9c52f x1306445c04667cc7) 在 xb03536b881c730ad.x80decb06b0b136f1.x4c429db7bb96c 78c() 在 xb03536b881c730ad.xc5f99dd440b2d1db.x1be9855bf968d ec6(BinaryReader xe134235b3526fa75)

*/
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.