I know there have been plenty of posts about this in the past, but there seems to be no clear way to deobfuscate Agile.net.
de4dot fails straight out of the box:
Detected CliSecure (C:\Program Files (x86)\Control4\Composer\Pro\Terminal.exe)
Cleaning C:\Program Files (x86)\Control4\Composer\Pro\Terminal.exe
Using dynamic method decryption
ERROR:
ERROR:
ERROR:
ERROR: Hmmmm... something didn't work. Try the latest version.
It seems to be struggling to inject something that's monitoring the JIT VM Agile.net installs.
I've tried a stack of methods (XP VMs, netbox, etc.) but nothing comes to fruition.
Is there an easy way to get this unpacked?
de4dot fails straight out of the box:
Detected CliSecure (C:\Program Files (x86)\Control4\Composer\Pro\Terminal.exe)
Cleaning C:\Program Files (x86)\Control4\Composer\Pro\Terminal.exe
Using dynamic method decryption
ERROR:
ERROR:
ERROR:
ERROR: Hmmmm... something didn't work. Try the latest version.
It seems to be struggling to inject something that's monitoring the JIT VM Agile.net installs.
I've tried a stack of methods (XP VMs, netbox, etc.) but nothing comes to fruition.
Is there an easy way to get this unpacked?


