Miscellaneous Forums > Scripting and Reverse Engineering
Mobius Final Fantasy [Unity]
yubikiri:
--- Quote from: Albeoris on 2017-02-17 10:24:18 ---Decrypted Assembly-CSharp.dll (PC):
https://yadi.sk/d/dI9_Cqw_3ECdtr
--- End quote ---
It says (PC), which version the original file, was it steam jp?
was it obfuscated dll or encrypted one btw? since there is invalid RVA warning
Maki:
This is jp version because it has only Japanese servers and assets list encoded to download. Original file has damaged meta-data header (the magic net header I forgot now), it's not really obfuscated, just protected from IL decompiling. Net unpacker doesn't work with this, you have to rip the dll manually or find a way to fix this header.
yubikiri:
--- Quote from: Maki on 2017-02-23 09:08:08 ---This is jp version because it has only Japanese servers and assets list encoded to download. Original file has damaged meta-data header (the magic net header I forgot now), it's not really obfuscated, just protected from IL decompiling. Net unpacker doesn't work with this, you have to rip the dll manually or find a way to fix this header.
--- End quote ---
woah, so that is how it is, i've been messing with the global version and no luck yet.
it's always ended up with *Object reference not set to an instance of an object.*
thanks for the heads up
Maki:
It's "BSJB" (0x424A5342) DWORD missing in metadata section (probably). I have no idea how to locate it.
This may be extremely helpful:
https://www.codeproject.com/Articles/12585/The-NET-File-Format
On CFF explorer author site I found SNSRemover, a software that removes signature from .NET assembly, maybe they used that?
yubikiri:
--- Quote from: Maki on 2017-02-23 10:21:58 ---It's "BSJB" (0x424A5342) DWORD missing in metadata section (probably). I have no idea how to locate it.
This may be extremely helpful:
https://www.codeproject.com/Articles/12585/The-NET-File-Format
On CFF explorer author site I found SNSRemover, a software that removes signature from .NET assembly, maybe they used that?
--- End quote ---
idk, maybe they did remove it by using that software...
it's not really my thing but it does help me understand better about the structure.
if it's "BSJB".. i think it could be located by inputting the value of "MetaData RVA" from MetaData Header to address converter on CFF, hmmm, i'll just try it later
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version