Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 02-16-2020, 23:11
squareD's Avatar
squareD squareD is offline
VIP
 
Join Date: Aug 2005
Location: Banana Republic
Posts: 313
Rept. Given: 31
Rept. Rcvd 35 Times in 27 Posts
Thanks Given: 42
Thanks Rcvd at 116 Times in 76 Posts
squareD Reputation: 36
Anyone knows this cipher?

Does any of the reversers here know the cipher of this code snippet?

Code:
00DFC1DB | C1CD 16                  | ror ebp,16                          |
00DFC1DE | 33EB                     | xor ebp,ebx                         |
00DFC1E0 | C1CB 0B                  | ror ebx,B                           |
00DFC1E3 | 33EB                     | xor ebp,ebx                         |
00DFC1E5 | 03C5                     | add eax,ebp                         |
00DFC1E7 | 894424 20                | mov dword ptr ss:[esp+20],eax       |
00DFC1EB | 8B7C24 14                | mov edi,dword ptr ss:[esp+14]       |
00DFC1EF | 337C24 18                | xor edi,dword ptr ss:[esp+18]       |
00DFC1F3 | 23FA                     | and edi,edx                         |
00DFC1F5 | 337C24 18                | xor edi,dword ptr ss:[esp+18]       |
00DFC1F9 | 8BEA                     | mov ebp,edx                         |
00DFC1FB | C1CA 06                  | ror edx,6                           |
00DFC1FE | C1CD 19                  | ror ebp,19                          |
00DFC201 | 037E 04                  | add edi,dword ptr ds:[esi+4]        |
00DFC204 | 037C24 5C                | add edi,dword ptr ss:[esp+5C]       |
00DFC208 | 037C24 1C                | add edi,dword ptr ss:[esp+1C]       |
00DFC20C | 33EA                     | xor ebp,edx                         |
00DFC20E | C1CA 05                  | ror edx,5                           |
00DFC211 | 33EA                     | xor ebp,edx                         |
This snippet with lot's of ROR commands is repeated may be 10 times or more...
I searched in whole cipher sources I own, not only ROR xxx, 16, ROR xxx, 22, >> 16, >> 22 and so on.
Nothing to be found!
__________________
The three worst enemies of the reversers: sun , fresh air and especially this unbearable roar of birds ...
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 21:51.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )