DotFuckScator v1.0

[ender]

Originally Posted by LibX

Anyway just released v1.3 the output will also be able to run now fixed a royal fuckup ;x

I was running v1.2 (which was the latest version at the time). I even redownloaded it and ran it against a fresh install of the app I was looking into before I posted (to make sure I'm not just talking out of my ass), but I got the same results (with not all strings being fully decoded).

I just tried v1.3 however, and whatever you changed fixed the problem, so thanks . Mind if I ask what the "royal fuckup" was?

[LibX]

Originally Posted by ender

I was running v1.2 (which was the latest version at the time). I even redownloaded it and ran it against a fresh install of the app I was looking into before I posted (to make sure I'm not just talking out of my ass), but I got the same results (with not all strings being fully decoded).

I just tried v1.3 however, and whatever you changed fixed the problem, so thanks . Mind if I ask what the "royal fuckup" was?

Well i don't know how it fixed the problem since i didnt change a single byte of code in the string decrypt function.. :S
But i forgot to fix a for loop that replaced the call to the string decrypt function with nops.
Now its working

Regards
LibX

[high6]

just downloaded 1.3 and it didn't break the app this time.

Thanks

[ender]

Haven't really had much time to try my hand at reversing anything since the last time I posted on this board, that said, I wanted to see if I could make a proper keygen for particular app and when I ran your dotFuckScator tool it decrypted most of the strings in the program, but there were several that were most definitely not decrypted. All the sections that weren't decrypted tended to be longer sections of text. I'm not sure if this has something to do with how your string "finding" routine works, but the only other thing I noticed is that bits and pieces of the string (usually at the very beginning of the string, but in one case at the very end of the string) did get decrypted.

The particular program in question is a freeware app (the same one I had previously tried to reverse). It's called "Video Thumbnails Maker" by Scorp. I'm only mentioning the app incase you thought you might be able to debug the program or had any ideas why it might not be decrypting some string.

In particular, if you run the app through dotFuckScator, if you look in main "m" class using reflector or somesuch, and scroll about halfway down the decompiled IL, you'll see a bunch of non-decrypted strings.

Thanks once again for the great tool and also for any help you might be able to give. If you have any idea what might be the prob, hope to hear back from you.