Quote:
Originally Posted by toro
to find verification function simply search for push 21b.
...
|
this works only for 32-bit binaries.
more common way is to find constant 2930h.
it is contained only in l_pubkey_verify and l_prikey_sign.
l_prikey_sign does not contain constant 0FFFFFFF8h,
which occurs in l_pubkey_verify at least one time.