CPU Disasm
Address Hex dump Command Comments
0056FE00 /$ 56 PUSH ESI ; program.0056FE00(guessed Arg1,Arg2,Arg3,Arg4)
0056FE01 |. 8B7424 0C MOV ESI,DWORD PTR SS:[ARG.2]
0056FE05 |. 85F6 TEST ESI,ESI
0056FE07 |. 57 PUSH EDI
0056FE08 |. 74 1F JE SHORT 0056FE29
0056FE0A |. 8B7C24 14 MOV EDI,DWORD PTR SS:[ARG.3]
0056FE0E |. 85FF TEST EDI,EDI
0056FE10 |. 74 17 JE SHORT 0056FE29
0056FE12 |. 8B4424 18 MOV EAX,DWORD PTR SS:[ARG.4]
0056FE16 |. 85C0 TEST EAX,EAX
0056FE18 |. 74 0F JE SHORT 0056FE29
0056FE1A |. 8A4C24 0C MOV CL,BYTE PTR SS:[ARG.1]
0056FE1E |> 8A16 /MOV DL,BYTE PTR DS:[ESI]
0056FE20 |. 32D1 |XOR DL,CL
0056FE22 |. 46 |INC ESI
0056FE23 |. 8810 |MOV BYTE PTR DS:[EAX],DL
0056FE25 |. 40 |INC EAX
0056FE26 |. 4F |DEC EDI
0056FE27 |.^ 75 F5 JNE SHORT 0056FE1E
0056FE29 |> 5F POP EDI
0056FE2A |. 5E POP ESI
0056FE2B . C3 RETN
EncryptPacket(int KeyMaybe?, const unsigned char* RawData, int DataSize, unsigned char* RecvEncryptedBuffer)
I've been lazy. Haven't finished reversing this and haven't made a hook yet
sad .
seddrick619
IAY
why do those damn hackers do something with there there skill like make good protection for computers and get paid like god damn it
The goverment hackers I respect because use it for a good cause.
One of the dumbest things I've heard in a long while. Good cause huh? That's a funny one.
kiraes
;; How the ******** do I clear the stack again?
pop operations or you could just change the stack pointer manually. If you push data and then make a call you can just use the return operation.