Jump to content
Sign in to follow this  
Steve

AgileDotNet DeobfuscateMe

Recommended Posts

I'm trying to fix de4dot for this version of clisecure, but i don't assure anything  :sad:

Share this post


Link to post

I'm trying to fix de4dot for this version of clisecure, but i don't assure anything  :sad:

 

Methods has totally changed in the new version

Edited by Steve

Share this post


Link to post

Just have to use Kao's de4dot to clean the dll and then copy the decryption methjod into de4dot.

 

f48c13271a5c89267a43c587fad1c257.png

Share this post


Link to post

Just have to use Kao's de4dot to clean the dll and then copy the decryption methjod into de4dot.

 

f48c13271a5c89267a43c587fad1c257.png

That's not just this..(i think) seems,infact, that there are new VM opcodes in the last version

Edited by Erjey

Share this post


Link to post

does anybody got agile.net 5.x version of their pc? i assume i could fix it

Edited by li0nsar3c00l

Share this post


Link to post

I don't know how is difficult really, maybe an opinion from kao or 0xd4d could clarify the difficult :D
I think is not so easy for the reason above but maybe i am wrong

Share this post


Link to post

5.x versions used the old name: Clisecure. :)

Clisecure v5.4 (trial): http://www.mediafire.com/?k31s5113d6uk1dv

 

I hope you guys will figure out a way to fix de4dot. Good luck!

 

Cheers,

kao.

 

P.S. My guess after briefly looking at it - you will have to write complete de-VM engine from scratch. Let's hope I'm wrong. :D

  • Upvote 3

Share this post


Link to post

Just have to wait until 0xd4d found free time. :sad: , Maybe an impossible task....

Edited by bprg

Share this post


Link to post

Just have to wait until 0xd4d found free time. :sad: , Maybe an impossible task....

He won't. Is the time for the .net reversing scene to learn something and not always wait for someone that will do the job.Kao helped us posting his de4dot, now let's try to fix the others one

  • Upvote 2

Share this post


Link to post

In new version after rename all members obfuscator not work, Is there a way work after rename members?

Share this post


Link to post

@Hasby:

Here works!

Try to import the attached registry!
 

Anyway the old version won't help much since the protection changed:

on old version each VM handler emulated one instruction!

Now a VM handler can contain more instructions!

 

ExportReg.zip

  • Upvote 1

Share this post


Link to post

@Hasby:

Here works!

Try to import the attached registry!

 

Anyway the old version won't help much since the protection changed:

on old version each VM handler emulated one instruction!

Now a VM handler can contain more instructions!

Thank you CodeCracker...

I will try it.

Share this post


Link to post

From a PM I received from Steve:

How to rename symbols in (AgileDotNet.Console.VMRuntime.dll) file without renaming (VMRuntime.Libraries)namespace and (CSVMRuntime)class ? I'm trying this arg all symbols renamed.

de4dot.exe AgileDotNet.Console.VMRuntime.dll -p un --un-name "^[a-z][A-Z][0-9]<>{}$.`-]*$"

I think you can't make a regex that will skip every class in the namespace, or every function in class.

I would try something like this:

de4dot AgileDotNet.Console.VMRuntime.dll -p un --un-name "Secure|Attri|Libr|CSVM|VMR|Run"
This will rename all namespaces, classes, functions that *do not* have one of these strings in the name.
  • Upvote 1

Share this post


Link to post

How can trial reset in newest versions ?

 

Thanks in advance.

Edited by Steve

Share this post


Link to post

@giv, I'm trying crack not run.

 

Edit: Reinstall Agile.NET and replace crack work fine, Thanks.

Edited by Steve

Share this post


Link to post

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×
×
  • Create New...