Giter Club home page Giter Club logo

agile.net-deobfuscator-moved's Introduction

agile.net-deobfuscator-moved's People

Contributors

ribthegreat99orn0p avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

agile.net-deobfuscator-moved's Issues

The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters.

Currently decompiling a file with Agile 6.6 with both string encryption & CSVM enabled. This is the process I've used so far:

-JitDumper 3 ran natively on a Windows 8 machine with NetBox as a framework substitute with 'Dump MD' checked.
-SAE with String & Flow with 'string delegates' checked.
-de4dot
-This tool

When using this tool, however, this error message shows up:
image

Any input would be appreciated.

"Feature Request" agile V.6.6 compatible

Hello,

today, I looked into the Source-Code to make the whole thing v6.6 compatible.

So first I looked, how the types 2XY= and 3XY= looked like in the 6.4 version.

After that, I looked after the same code pattern in new dll files.

So this is what I found so far:

Original 2XY= and 3XY=

`using System;

namespace l3U=
{
	// Token: 0x02000016 RID: 22
	public class 2XY= : 0XY=
	{
		// Token: 0x06000070 RID: 112 RVA: 0x000074F0 File Offset: 0x000056F0
		public 2XY=(Array target, uint objId)
		{
			this.23Y= = target;
			this.2nY= = (int)objId;
		}

		// Token: 0x06000071 RID: 113 RVA: 0x00007508 File Offset: 0x00005708
		public t3Y= 3HY=()
		{
			object value = this.23Y=.GetValue(this.2nY=);
			bool flag = value is t3Y=;
			t3Y= result;
			if (flag)
			{
				result = (t3Y=)value;
			}
			else
			{
				result = new t3Y=(value);
			}
			return result;
		}

		// Token: 0x06000072 RID: 114 RVA: 0x00007548 File Offset: 0x00005748
		public void 3XY=(t3Y= 3nY=)
		{
			Type elementType = this.23Y=.GetType().GetElementType();
			object value = (elementType == typeof(t3Y=)) ? 3nY= : 3nY=.vHY=();
			R3c=.X3c=(ref value, elementType);
			this.23Y=.SetValue(value, this.2nY=);
		}

		// Token: 0x04000051 RID: 81
		private int 2nY=;

		// Token: 0x04000052 RID: 82
		private Array 23Y=;
	}
}`

And this is what I think the same but from v.6.6 dll file:

`using System;

namespace nnU=
{
	// Token: 0x0200001D RID: 29
	public class aHc= : Pnc=
	{
		// Token: 0x060000BC RID: 188 RVA: 0x00002380 File Offset: 0x00000580
		public aHc=(Array target, uint objId)
		{
			this.anc= = target;
			this.aXc= = (int)objId;
		}

		// Token: 0x060000BD RID: 189 RVA: 0x00009B44 File Offset: 0x00007D44
		public Z3Y= a3c=()
		{
			object value = this.anc=.GetValue(this.aXc=);
			bool flag = value is Z3Y=;
			Z3Y= result;
			if (flag)
			{
				result = (Z3Y=)value;
			}
			else
			{
				result = new Z3Y=(value);
			}
			return result;
		}

		// Token: 0x060000BE RID: 190 RVA: 0x00009B84 File Offset: 0x00007D84
		public void bHc=(Z3Y= bXc=)
		{
			Type elementType = this.anc=.GetType().GetElementType();
			object value = (elementType == typeof(Z3Y=)) ? bXc= : bXc=.bHY=();
			13U=.73U=(ref value, elementType);
			this.anc=.SetValue(value, this.aXc=);
		}

		// Token: 0x04000073 RID: 115
		private int aXc=;

		// Token: 0x04000074 RID: 116
		private Array anc=;
	}
}`

So I changed 2XY= and 3XY= to aHc= and bHc=

But after compiling I still get "initialize field not found for string decryption" but why?

Any Ideas?

Originally posted by @panzerknacker20111 in #8 (comment)

Lost resource

exe work, but lost all resource like image, icon, ecc...

UPDATE
This method lost resource ProxyDelegatesModule.cs

Agile 6.6 opcode virtualization

Hi,
version 6.6 changed the function for creating methods to ":: dau". In case of virtualized code, (no code in the .exe but Agile becomes the JIL to retrieve the code at runtime of the executable), do you know how to do it?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.