Babel-Deobfuscator

[CodeCracker]

Babel-Deobfuscator:
original link:
https://github.com/JenildoHaxhiraj/Babel-Deobfuscator
* added support for last Babel version;
* added resources decryption;

You will need to dump files with MegaDumper - detected so change file name of MegaDumper exe to random name.
You will still need to use de4dot-3.1 once after using this tools else while running unpacked program may report some method as having Invalid body.

Babel-Deobfuscator.exe is inside Babel-Deobfuscator_Src_BinInDllFolder.rar\Babel-Deobfuscator_Src\Babel-Deobfuscator\Babel-Deobfuscator\dll
Enjoy.

[CodeCracker]

Babel-Deobfuscator:
- *new: Fixed a bug - a method had body empty (no instructions after restoring).

[CodeCracker]

Babel-DeobfuscatorNET7- with config to run on .NET 8 is in Babel-DeobfuscatorNET7.zip\Babel-DeobfuscatorNET7\ReleaseExe
Fixed for Quadspinner Gaea 2:
https://forum.exetools.com/showthread.php?p=133132

[Mendax47]

Originally Posted by CodeCracker

Babel-DeobfuscatorNET7- with config to run on .NET 8 is in Babel-DeobfuscatorNET7.zip\Babel-DeobfuscatorNET7\ReleaseExe
Fixed for Quadspinner Gaea 2:
https://forum.exetools.com/showthread.php?p=133132

If some assembly is directly marged in the target file then it throws exception that Could not load file or assembly 'Babel.Licensing....
Edit: Resolved...

[CodeCracker]

Here is Babel.Licensing, Version=10.9.0.0 dumped:
https://workupload.com/file/LXu3VEetDrU

[Mendax47]

Originally Posted by CodeCracker

Here is Babel.Licensing, Version=10.9.0.0 dumped:
https://workupload.com/file/LXu3VEetDrU

I have dumped the dll file using your dumper... after deobsucation of Gaea.dll program crashes rapidly..... however deobsucation of Gaea.Engine.dll sucessfully starts the program...

However It seems that only one patch in Gaea.Engine.dll can active the full application

[CodeCracker]

QuadSpinner.Gaea.App.OnStartup(StartupEventArgs e)
// Token: 0x0600046A RID: 1130 RVA: 0x00036A38 File Offset: 0x00034C38
protected override void OnStartup(StartupEventArgs e)

[CodeCracker]

Babel-DeobfuscatorNET7_Fixed2:
Fixed 2 errors: 1. one on control flow deobfuscation on the above:
QuadSpinner.Gaea.App.OnStartup(StartupEventArgs e)
// Token: 0x0600046A RID: 1130 RVA: 0x00036A38 File Offset: 0x00034C38
protected override void OnStartup(StartupEventArgs e)
\ControlFlow\De4Dot.cs
There was an unnecessarily
//List<Block> allBlocks = blocks.MethodBlocks.GetAllBlocks();
which is now marked with comment

2. Second error on getting Type from IntPtr (on resolve local variables).
SuperDynamicReader.cs
TypeSig ISignatureReaderHelper.ConvertRTInternalAddress(IntPtr address)

Here is the completely unpacked dll Gaea.dll:
https://workupload.com/file/jy5LcPeQUMJ