Hacking Mono.Cecil - allowing invalid opcodes : Paul Mason

home
architecture
view story

1 Kicks

Hacking Mono.Cecil - allowing invalid opcodes : Paul Mason(blog.paul-mason.co.nz)

submitted by tivit(364) 2 years, 4 months ago

In the last post we took a look at how to manually remove invalid opcodes from an obfuscated assembly. We did this by decompiling the assembly, replacing with the nop opcode and then recompiling. We used this manual method of removing these as Mono.Cecil crashed at the sight of some of the invalid opcodes. In this post we take a look at a tiny "hack" to Mono.Cecil which allows us to do the same thing in an automated manner.

add a comment |category: Architecture |Views: 31
Tweet