 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
|
|
|
|
||||||||||
|
||||||||||||||
|
||||||||||||||
|
#13
10-06-2008, 03:12 AM
|
|||
|
|||
Hey LibX. I've been trying to get up to speed on .net reversing, so first off, I just wanted to say I really appreciate all the stuff you guys have put together here at the RET board. It's really helped.
That being said  ... in case it helps you work any kinks out of the tool, I just wanted to let you know that I tried running dotfuckscator against a dotobfuscated binary the other day, and while being able to see the (mostly) decoded strings in the disassembler was great, I found that in any given class, many strings weren't fully decoded and still had several chars that were still in the '\u####' format.If you wanted to take a look, the program I was messing around with was "Video Thumbnails Maker by Scorp". You can grab it here: http://www.suu-design.com/downloads.html. Just as a quick disclaimer, the app is already free/donationware, and I was only using it as something to practice on. Anyway, thanks again for the great tool, and if you happen to find any time to figure out why some strings are only being partially decoded, would love to hear back from you.
__________________
if you build a man a fire he will be warm for a day; if you set a man on fire he will be warm for the rest of his life. :rolleyes: Last edited by ender : 10-07-2008 at 08:06 AM. 
|
|
#14
10-06-2008, 08:26 AM
|
|||
|
|||
|
Quote:
 I have tested this tool on Vista x86/64 / windows 2008 server 64 / windows xp x86/64 and windows 2003 x86 and its all working just fine. Do u have .NET framework 2.0 with latest service pack installed? Gr LibX
|
|
#15
10-06-2008, 08:28 AM
|
|||
|
|||
|
Quote:
 And happy to hear you find the tools usefull regards LibX
|
|
#16
10-06-2008, 08:36 AM
|
|||
|
|||
|
Quote:
 So everything is decrypted just fine you just can't display the russian characters on your windows i think (they do show here becouse i have virtualy all codepages installed) Anyway if you find other bugs lemme know Regards LibX
|
|
#17
10-06-2008, 03:03 PM
|
|||
|
|||
|
Quote:
Cecil uses Encoding.Unicode.GetString against a byte array but in some cases the result from this function isn't correct. I fixed it with my own function that reads the string as raw bytes first then convert all of them to chars and create a new string out of this wich i then decrypt to get the proper result Hope this helps Regards LibX
|
|
#18
10-07-2008, 01:16 AM
|
|||
|
|||
|
Quote:
As a quick side note (while I am aware the prog I am looking into has strings encoded from different languages) the "half decrypted" strings I was talking about were all in English (in some cases the "space" character wasn't decoded, or a miscellaneous letter wasn't decoded from the middle of the application title for instance, but the letters before and after were). Anyway, thanks for your quick response, and just ignore this if your previous response didn't have anything to do with me.
__________________
if you build a man a fire he will be warm for a day; if you set a man on fire he will be warm for the rest of his life. :rolleyes: Last edited by ender : 10-07-2008 at 01:28 AM.
|
|
#19
10-07-2008, 06:57 AM
|
|||
|
|||
|
Quote:
But are you sure you are running the latest version of DotFuckScator since i made a dump here of all strings that are decrypted and all strings are perfectly fine here :S Latest version is v1.2 the title bar of the form should show this. If its still not working please post a screenshot of the problem regards LibX
|
Linear Mode
