如何找到 dnspy逆向出类的声明的变量 的定义

Oneton

没活跃被删号，15天之后还不是回来啦233

三月初在打OSU CTF，里面有一道Unity的逆向题

reverse/ecs!catch
enscribe
During his sophomore year of high school, enscribe made a really bad osu!catch clone for his final project in his Exploring Computer Science class. It was his first time on Unity, but it has some charm to it!

Receive an SS (with maximum score) on "Bakamitai", the hardest map, to receive the flag. Shouldn't be too difficult, right?

Note: An SS is not enough! The remote has additional checks for specific scoring (the maximum score if SS'ed "legitimately").

Note: This executable is built for x86 Windows.

Downloads: ecs!catch.zip（https://ctf.osugaming.lol/uploads/d6d57424f0db556152201e42666683ea5fa689747e4459a314d8a9fc6fb807ae/ecs!catch.zip）

目标是让你拿到全连的分数

这题我最后是调换了处理漏掉和接住音符的函数解决的，但是一开始的想法是修改接住音符篮子的面积，让它能覆盖整个界面下方

但是用dnspy反编译时发现红框里的东西似乎只有声明没有定义，分析器里面也找不到

所以这些玩意的定义/赋值，应该在哪找啊

当时想问，不过想起来上论坛的时候，发现号已经被清理了，开放注册之后也是拖到现在才来问

wtujoxk

unity的赋值跟脚本挂在那里有关系，只要找到脚本挂的位置，在任何地方都有可能赋值

Oneton

wtujoxk 发表于 2024-3-23 09:48
unity的赋值跟脚本挂在那里有关系，只要找到脚本挂的位置，在任何地方都有可能赋值

那怎么找到脚本挂的位置呢？
也就是说，除了Assembly-CSarp.dll这个文件，还有逻辑放在其它文件里面是吗，谢谢！