• Welcome to Valhalla Legends Archive.
 

Playing with Battle.snp in IDA

Started by UserLoser., December 15, 2003, 08:55 PM

Previous topic - Next topic

iago

Yeah, DWORD's or just plain memory where everything is between 0x40 and 0x80 tends to stand out to me :)
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


Etheran

don't forget 0x30-0x39 for numbers

thetempest

ya those are great because they are such an easy conversion...

0x30 = 0
0x31 = 1
blah blah