LocalVarSig - signatures ???

• 
  When it comes to those sorts of details, you are better off looking at ILDasm and make sure you turn on all the options to see the details so all the tokens are shown in the windows.
  
  If you provide the bytes that you get for a localvarsig that don't seem to be parsed by your code correctly I might be able to help you. Sometimes parsing those signatures can be tricky.

  haleyjason June 12, 2009 10:33

  - 0 +
• 
  Jason:
  
  Thankyou for the advice about ILDasm, I am sure it will assist me in the
  future; as to your offer of assistance; it is no longer needed as it was my
  own brain dead error!
  
  To answer the question I originally posed; Reflector does nothing special
  except for processing LocalVarSig properly.
  
  My primary interest in parsing PE image files is learning; I am attempting
  to build a VES as part of this learning process.
  
  Jason what are your interests in this regard?
  
  I would like to hear from others, who have built such a system or have
  an interest in building such systems.

  Johnonredgate June 23, 2009 10:42

  - 0 +
• 
  I got interested in building an IL disasembler about 4 or 5 years ago.
  
  Some of the stuff I've collected is on my site at: http://jasonhaley.com/reversing/ (there is a list of resources at the end of that page) and a few of the reflector addins i've wrote are at: http://jasonhaley.com/addins/
  
  You might want to check out: http://sourceforge.net/projects/dile

  haleyjason June 23, 2009 21:45

  - 0 +
• 
  I forgot to mention this one: http://vijaymukhi.com/documents/books/ildasm/ildasm.htm
  
  Great walkthrough of writing an IL disassembler.

  haleyjason June 23, 2009 21:46

  - 0 +

Add comment

Please sign in to leave a comment.