![]() |
Babel-Deobfuscator
1 Attachment(s)
Babel-Deobfuscator:
original link: https://github.com/JenildoHaxhiraj/Babel-Deobfuscator * added support for last Babel version; * added resources decryption; You will need to dump files with MegaDumper - detected so change file name of MegaDumper exe to random name. You will still need to use de4dot-3.1 once after using this tools else while running unpacked program may report some method as having Invalid body. Babel-Deobfuscator.exe is inside Babel-Deobfuscator_Src_BinInDllFolder.rar\Babel-Deobfuscator_Src\Babel-Deobfuscator\Babel-Deobfuscator\dll Enjoy. |
Babel-Deobfuscator - Fixed a bug
1 Attachment(s)
Babel-Deobfuscator:
- *new: Fixed a bug - a method had body empty (no instructions after restoring). |
Babel-DeobfuscatorNET8
1 Attachment(s)
Babel-DeobfuscatorNET7- with config to run on .NET 8 is in Babel-DeobfuscatorNET7.zip\Babel-DeobfuscatorNET7\ReleaseExe
Fixed for Quadspinner Gaea 2: https://forum.exetools.com/showthread.php?p=133132 |
Quote:
Edit: Resolved... |
Here is Babel.Licensing, Version=10.9.0.0 dumped:
https://workupload.com/file/LXu3VEetDrU |
Quote:
However It seems that only one patch in Gaea.Engine.dll can active the full application |
QuadSpinner.Gaea.App.OnStartup(StartupEventArgs e)
// Token: 0x0600046A RID: 1130 RVA: 0x00036A38 File Offset: 0x00034C38 protected override void OnStartup(StartupEventArgs e) |
Babel-DeobfuscatorNET7_Fixed2
1 Attachment(s)
Babel-DeobfuscatorNET7_Fixed2:
Fixed 2 errors: 1. one on control flow deobfuscation on the above: QuadSpinner.Gaea.App.OnStartup(StartupEventArgs e) // Token: 0x0600046A RID: 1130 RVA: 0x00036A38 File Offset: 0x00034C38 protected override void OnStartup(StartupEventArgs e) \ControlFlow\De4Dot.cs There was an unnecessarily //List<Block> allBlocks = blocks.MethodBlocks.GetAllBlocks(); which is now marked with comment 2. Second error on getting Type from IntPtr (on resolve local variables). SuperDynamicReader.cs TypeSig ISignatureReaderHelper.ConvertRTInternalAddress(IntPtr address) Here is the completely unpacked dll Gaea.dll: https://workupload.com/file/jy5LcPeQUMJ |
Babel-DeobfuscatorNET4_fixed4
1 Attachment(s)
Babel-DeobfuscatorNET4_fixed4:
- specially build last version of Babel; https://www.babelfor.net/sdm_downloads/babel-obfuscator-1150/ deobfuscating Babel.Licensing.dll file. First time execute only VM Decryption so press E key on console window when asked. I got to do this is because VM Decryption stuff execute some craps. Second time; after saving you should have a full de-obfuscated assembly. |
| All times are GMT +8. The time now is 14:54. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX