-
Notifications
You must be signed in to change notification settings - Fork 587
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add an option to preserve method bodies even if they are invalid/encrypted or aren't in .text #307
Comments
If they're encrypted they can probably not be decrypted anyway after saving it. AFAIK, ConfuserEx hashes part of the file and uses that as a key. |
Doesn't it only hash the encrypted method bodies it injects as a separate section? You could still modify an AssemblyRef for example without damaging the encrypted data. Correct me if I am wrong, I am not 100% sure about this. |
Have you had time to verify it yet? Otherwise I suggest you decrypt the methods first. I don't want to spend time on a feature that perhaps won't work. |
From my testing, simply modifying stuff in the .NET Metadata Tables (I tested by changing the Name of an AssemblyRef (offset in |
Hello, i believe we have the same problem. Settings i used to save, and what the methods looked like: Error i got after saving: What the methods looked like after saving: Screenshot of the sections before saving: Screenshot of the sections after saving: I Attached a before and after test/crackme file. The file is protected with an older version of VMProtect .net |
A good example is ConfuserEx's anti tamper.
Just loading and saving the file with dnlib will remove the extra section injected by ConfuserEx and the assembly cannot be run or deobfuscated any further.
The text was updated successfully, but these errors were encountered: