PROJECT HAS BEEN COMPLETELY REMADE, MOVED TO:
https://github.com/ribthegreat99OrN0P/Agile.NET-Deobfuscator-Latest
PROJECT HAS BEEN COMPLETELY REMADE, MOVED TO:
https://github.com/ribthegreat99OrN0P/Agile.NET-Deobfuscator-Latest
Currently decompiling a file with Agile 6.6 with both string encryption & CSVM enabled. This is the process I've used so far:
-JitDumper 3 ran natively on a Windows 8 machine with NetBox as a framework substitute with 'Dump MD' checked.
-SAE with String & Flow with 'string delegates' checked.
-de4dot
-This tool
When using this tool, however, this error message shows up:
Any input would be appreciated.
ok
Hello,
today, I looked into the Source-Code to make the whole thing v6.6 compatible.
So first I looked, how the types 2XY= and 3XY= looked like in the 6.4 version.
After that, I looked after the same code pattern in new dll files.
So this is what I found so far:
Original 2XY= and 3XY=
`using System;
namespace l3U=
{
// Token: 0x02000016 RID: 22
public class 2XY= : 0XY=
{
// Token: 0x06000070 RID: 112 RVA: 0x000074F0 File Offset: 0x000056F0
public 2XY=(Array target, uint objId)
{
this.23Y= = target;
this.2nY= = (int)objId;
}
// Token: 0x06000071 RID: 113 RVA: 0x00007508 File Offset: 0x00005708
public t3Y= 3HY=()
{
object value = this.23Y=.GetValue(this.2nY=);
bool flag = value is t3Y=;
t3Y= result;
if (flag)
{
result = (t3Y=)value;
}
else
{
result = new t3Y=(value);
}
return result;
}
// Token: 0x06000072 RID: 114 RVA: 0x00007548 File Offset: 0x00005748
public void 3XY=(t3Y= 3nY=)
{
Type elementType = this.23Y=.GetType().GetElementType();
object value = (elementType == typeof(t3Y=)) ? 3nY= : 3nY=.vHY=();
R3c=.X3c=(ref value, elementType);
this.23Y=.SetValue(value, this.2nY=);
}
// Token: 0x04000051 RID: 81
private int 2nY=;
// Token: 0x04000052 RID: 82
private Array 23Y=;
}
}`
And this is what I think the same but from v.6.6 dll file:
`using System;
namespace nnU=
{
// Token: 0x0200001D RID: 29
public class aHc= : Pnc=
{
// Token: 0x060000BC RID: 188 RVA: 0x00002380 File Offset: 0x00000580
public aHc=(Array target, uint objId)
{
this.anc= = target;
this.aXc= = (int)objId;
}
// Token: 0x060000BD RID: 189 RVA: 0x00009B44 File Offset: 0x00007D44
public Z3Y= a3c=()
{
object value = this.anc=.GetValue(this.aXc=);
bool flag = value is Z3Y=;
Z3Y= result;
if (flag)
{
result = (Z3Y=)value;
}
else
{
result = new Z3Y=(value);
}
return result;
}
// Token: 0x060000BE RID: 190 RVA: 0x00009B84 File Offset: 0x00007D84
public void bHc=(Z3Y= bXc=)
{
Type elementType = this.anc=.GetType().GetElementType();
object value = (elementType == typeof(Z3Y=)) ? bXc= : bXc=.bHY=();
13U=.73U=(ref value, elementType);
this.anc=.SetValue(value, this.aXc=);
}
// Token: 0x04000073 RID: 115
private int aXc=;
// Token: 0x04000074 RID: 116
private Array anc=;
}
}`
So I changed 2XY= and 3XY= to aHc= and bHc=
But after compiling I still get "initialize field not found for string decryption" but why?
Any Ideas?
Originally posted by @panzerknacker20111 in #8 (comment)
exe work, but lost all resource like image, icon, ecc...
UPDATE
This method lost resource ProxyDelegatesModule.cs
Hi,
version 6.6 changed the function for creating methods to ":: dau". In case of virtualized code, (no code in the .exe but Agile becomes the JIL to retrieve the code at runtime of the executable), do you know how to do it?
Havent checked on this repo in a while sorry about that, all issues involving around the deobfuscator will be checked and fixed soon.
Can i get the pre compiled version of this the latest is now working it always throws error Unhandled Exception
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.