Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - yubikiri

Pages: [1]
1
uwah, i'm envius that you managed to do it so fast  ::) ::)
i guess i still have many thing too learn..
btw does the global version used the same file with japan version? i can't tell about the content, but the size of dll file is about the same

2
It's "BSJB" (0x424A5342) DWORD missing in metadata section (probably). I have no idea how to locate it.

This may be extremely helpful:
https://www.codeproject.com/Articles/12585/The-NET-File-Format

On CFF explorer author site I found SNSRemover, a software that removes signature from .NET assembly, maybe they used that?

idk, maybe they did remove it by using that software...
it's not really my thing but it does help me understand better about the structure.
if it's "BSJB".. i think it could be located by inputting the value of "MetaData RVA" from MetaData Header to address converter on CFF, hmmm, i'll just try it later

3
This is jp version because it has only Japanese servers and assets list encoded to download. Original file has damaged meta-data header (the magic net header I forgot now), it's not really obfuscated, just protected from IL decompiling. Net unpacker doesn't work with this, you have to rip the dll manually or find a way to fix this header.

woah, so that is how it is, i've been messing with the global version and no luck yet.
it's always ended up with *Object reference not set to an instance of an object.*
thanks for the heads up

4
Decrypted Assembly-CSharp.dll (PC):
https://yadi.sk/d/dI9_Cqw_3ECdtr

It says (PC), which version the original file, was it steam jp?
was it obfuscated dll or encrypted one btw? since there is invalid RVA warning

Pages: [1]