View Single Post
  #1  
Old 05-16-2025, 23:12
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 905
Rept. Given: 68
Rept. Rcvd 661 Times in 278 Posts
Thanks Given: 64
Thanks Rcvd at 3,820 Times in 717 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
Babel-DeobfuscatorNET7_Fixed2

Babel-DeobfuscatorNET7_Fixed2:
Fixed 2 errors: 1. one on control flow deobfuscation on the above:
QuadSpinner.Gaea.App.OnStartup(StartupEventArgs e)
// Token: 0x0600046A RID: 1130 RVA: 0x00036A38 File Offset: 0x00034C38
protected override void OnStartup(StartupEventArgs e)
\ControlFlow\De4Dot.cs
There was an unnecessarily
//List<Block> allBlocks = blocks.MethodBlocks.GetAllBlocks();
which is now marked with comment

2. Second error on getting Type from IntPtr (on resolve local variables).
SuperDynamicReader.cs
TypeSig ISignatureReaderHelper.ConvertRTInternalAddress(IntPtr address)

Here is the completely unpacked dll Gaea.dll:
https://workupload.com/file/jy5LcPeQUMJ
Attached Files
File Type: rar Babel-DeobfuscatorNET7_Fixed2.rar (978.1 KB, 34 views)
Reply With Quote
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post:
Apuromafo (05-17-2025), Mendax47 (05-17-2025)
The Following 12 Users Say Thank You to CodeCracker For This Useful Post:
Apuromafo (05-17-2025), cjack (11-06-2025), Codeman (05-30-2025), darkBLACK (05-17-2025), Gyrus (05-17-2025), MarcElBichon (05-17-2025), Mendax47 (05-17-2025), pnta (06-28-2025), user_hidden (05-17-2025), wilson bibe (05-17-2025), wx69wx2023 (05-17-2025), Zeokat (05-17-2025)