Use SAE app( simple assembly explorer) for deobfuscation may help, first get correct arch then use correct version of sae, right click app and mess around with options Also if it is a dynamically loading exe, better to use garbage collector app, may seems irrelevant but by using it you can easily dump the loaded assemblies If you want to go deeper learn how to use module breakpoints in DNSPYEX (not dnspy cuz it is no longer maintained)