Ex:700 jpn main 0xC3 Encrypt()

[city7]

004394A3 . 8985 E0DEFFFF MOV DWORD PTR SS:[EBP-2120],EAX ; 0x33
004394A9 . C685 F8FEFFFF>MOV BYTE PTR SS:[EBP-108],0C3
004394B0 . 8A85 E0DEFFFF MOV AL,BYTE PTR SS:[EBP-2120]
004394B6 . 8885 F9FEFFFF MOV BYTE PTR SS:[EBP-107],AL
004394BC . 8B45 0C MOV EAX,DWORD PTR SS:[EBP+C] ; 0x31
004394BF . 2B85 E4DEFFFF SUB EAX,DWORD PTR SS:[EBP-211C]
004394C5 . 50 PUSH EAX ; 0x30
004394C6 . 8B85 E4DEFFFF MOV EAX,DWORD PTR SS:[EBP-211C] ; 0x01
004394CC . 8D8405 E8DEFF>LEA EAX,DWORD PTR SS:[EBP+EAX-2118]
004394D3 . 50 PUSH EAX
004394D4 . 8D85 FAFEFFFF LEA EAX,DWORD PTR SS:[EBP-106]
004394DA . 50 PUSH EAX ;0012B656
004394DB . FF35 7C012E01 PUSH DWORD PTR DS:[12E017C] ; mainc.08C43608
004394E1 . B9 2C76C408 MOV ECX,mainc.08C4762C
004394E6 . E8 F50B7700 CALL mainc.00BAA0E0 ; C3 Encryption function

---------------------------------------------------------------------------------------
00BB91C0 . 8B6C24 10 MOV EBP,DWORD PTR SS:[ESP+10]
00BB91C4 > 57 PUSH EDI
00BB91C5 . 8D8424 601000>LEA EAX,DWORD PTR SS:[ESP+1060]
00BB91CC . 50 PUSH EAX
00BB91CD . 55 PUSH EBP
00BB91CE . 889C3C 671000>MOV BYTE PTR SS:[ESP+EDI+1067],BL
00BB91D5 . E8 86DE2300 CALL mainc.00DF7060 ; Encrypted
---------------------------------------------------------------------------------------
No Encrypted:

C3 33 D7 2C 18 00 00 00 D0 88 D7 2C F0 AD D9 2C 90 6C 0A 23 01 FF FF FF DB 01 93 03 18 A6 3C 23

18 A6 3C 23 18 A6 3C 23 03 00 00 00 18 A6 3C 23 F0 AD D9 2C C8 19 A4 22 01 B6 12 00 69 7F DF 02

F8 AA 3C 23 F8 AA 3C 23 F8 AA 3C 23 02 A9 84 00 BD 9D 84 00 BD 9D 84 00 0C B7 12 00 BC B6 12 00

A9 9D 84 00 0C B7 12 00 7B 9C 84 00 0C C0 12 00 0C B7 12 00 DC B6 12 00 11 97
---------------------------------------------------------------------------------------
Encrypted:

C3 33 A8 C3 B9 12 CC 3B 86 3C 5A 0B 93 06 C2 64 D9 C7 C7 DF B1 11 46 FF BA A8 08 13 FC AB AA 76

06 FF 1A 32 26 BD E6 71 5B 5A 99 BB 49 29 0D 6F 07 5D 00 2C C8 19 A4 22 01 B6 12 00 69 7F DF 02

F8 AA 3C 23 F8 AA 3C 23 F8 AA 3C 23 02 A9 84 00 BD 9D 84 00 BD 9D 84 00 0C B7 12 00 BC B6 12 00

A9 9D 84 00 0C B7 12 00 7B 9C 84 00 0C C0 12 00 0C B7 12 00 DC B6 12 00 11 97 84 00 58 99 E0 2C

0C C0

Ver:1.04.07 main jpn

 

[lastpr0]

what's mean ?

 

[rodrigobmg]

Means you need to see what is the new method of encryption on SimpleModulus...

 

[RoRRe]

Means you need to see what is the new method of encryption on SimpleModulus...

encryption is now simplier ) ... same size packet, but more xor keys and variable xor loop

 

[zasmqniq]

thanks man