CODED DLL <- DECODE

[scbiz]

Or in PHP:

<?php
//Language   PHP5 (or use fopen, fwrite and fclose instead of file_put_contents)
//Author     nop
//Use        Decoding of an inefficient mechanism

$sCon = file_get_contents("needtodecode.dll");
$sSub = "6543212345";
$iLen = strlen($sCon);

$iA   = 0;
$sRet = "";

for($iB = 0; $iB < $iLen; $iB++)
{
  $sRet .= pack("i@", ord($sCon[$iB]) - $sSub[$iA]); 
  
  $iA = $iA + 1 == 10 ? 0 : $iA + 1;
}

file_put_contents("decoded.dll", $sRet);
?>

Still, Python is faster than PHP.

[MADR4T]

Thx guys! It really helped a lot, the dll is decoded and works fine! Really thx your time and your patient!!! Nop, sorry if i made you mad or anithing ! Thx again guys!!!!!!!!!

[MADR4T]

Hi guys again! I got one dll again and i think it uses Themida but im not sure, can someone help me to decode plz? Here is the dll:

[audi0slave]

sorry for interrupting you guys,i have no decrypting skills at all but i`d like to adress myself to madr4t.

so you got another dll.why dont you try the see the method that the last one has been decrypted and try to solve it in the same way?i dont think those guys will help you on and on.

[MADR4T]

The last one method not works, cause the header and some part of the file is good and not coded, but some of parts is coded and thats the reason why im asking again, cause this DLL belongs to an another application! Maybe they help maybe not but there is the chance they helps me and i will be a little clever than now Im waiting the "ultra brutal extra mega help"