Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Some guys can explain for me? (https://forum.exetools.com/showthread.php?t=16285)

poorit2011 10-23-2014 12:43

Some guys can explain for me?
 
Dear All...

Im compared the patched one with origin one and found that they are diffrent with codes below... Can guys explain for me what mean are in these codes?

088D: 0800 or [bx+si], al
088F: 75EC jne 087D
0891: F9 stc
0892: 0A49B3 or cl, [bx+di-4D]
0895: EC in al, dx
0896: 5E pop si
0897: 0400 add al, 00
0899: 305F15 xor [bx+15], bl
089C: 54 push sp

Syoma 10-23-2014 17:38

it is trash

Git 10-23-2014 18:41

Very unusual to see an IN command unless it's a kernel driver, but then it's 16 bit code. Also, the rest of the code looks very odd. Are you sure you're disassembling in the right mode?. If so, I would suspect that this section is data, not code. Can you post disassembly of both normal and patched code, and a bit more of each above and below what you have posted above, say 0860 to 08C0.

Git

fmtx 10-24-2014 11:26

It is data, could be encryption keys, serial seeds, or anything.


All times are GMT +8. The time now is 18:15.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX