View Single Post
  #1  
Old 07-28-2003, 07:55
bunion bunion is offline
Friend
 
Join Date: Apr 2002
Posts: 227
Rept. Given: 45
Rept. Rcvd 11 Times in 8 Posts
Thanks Given: 0
Thanks Rcvd at 6 Times in 6 Posts
bunion Reputation: 11
Help..Anyone know if this is encrypted??

Ive use caspr to unpack a file and it runs great but the code looks funny when disassembled in w32dasm.is it encrypted or mangled and if so any idea by what program....Thanks

funny looking winhex code

:0041ECA0 6E outsb
:0041ECA1 9E sahf
:0041ECA2 F1 BYTE 0f1h
:0041ECA3 81FF81E0FFC4 cmp edi, C4FFE081
:0041ECA9 46 inc esi
:0041ECAA 4B dec ebx
:0041ECAB 57 push edi
:0041ECAC B258 mov dl, 58
:0041ECAE E9896EED95 jmp 962F5B3C
:0041ECB3 45 inc ebp
:0041ECB4 C49E4014FD50 les ebx, dword ptr [esi+50FD1440]
:0041ECBA EE out dx, al
:0041ECBB 00B690BDFEC4 add byte ptr [esi+C4FEBD90], dh
:0041ECC1 EA9655CFFD9B6F jmp 6F9B:FDCF5596
:0041ECC8 C5EA lds ebp, edx
:0041ECCA 12BE7EEA9615 adc bh, byte ptr [esi+1596EA7E]
:0041ECD0 43 inc ebx
:0041ECD1 865500 xchg byte ptr [ebp+00], dl
:0041ECD4 BB691FFF39 mov ebx, 39FF1F69
:0041ECD9 6A3C push 0000003C
:0041ECDB 8DBEB5E3FFC4 lea edi, dword ptr [esi+C4FFE3B5]
:0041ECE1 FD std
:0041ECE2 E36E jcxz 0041ED52
:0041ECE4 C5EA lds ebp, edx
:0041ECE6 9E sahf
:0041ECE7 F8 clc
:0041ECE8 386A0C cmp byte ptr [edx+0C], ch
:0041ECEB 8B7EE1 mov edi, dword ptr [esi-1F]
:0041ECEE 9D popfd
:0041ECEF 380460 cmp byte ptr [eax], al
:0041ECF2 098B7EE19D78 or dword ptr [ebx+789DE17E], ecx
:0041ECF8 3A15680BB050 cmp dl, byte ptr [50B00B68]
:0041ECFE 118B7B0D9445 adc dword ptr [ebx+45940D7B], ecx
:0041ED04 DF BYTE 0dfh
:0041ED05 FE00 inc byte ptr [eax]

paul333
Reply With Quote