takumy Posted April 25, 2019 Share Posted April 25, 2019 I am searching a value R which is encrypted by XOR. Let the two XOR inputs be v1 and v2. I found that R = hex(v1) XOR reverse-hex(v2). In above example, 5F368E20h XOR 5F368EBEh = 9Eh = 158 (decimal, which is the value display in my game) Is it possible to do the above XOR search? Thank you very much. Link to comment Share on other sites More sharing options...
Administrators Enyby Posted April 25, 2019 Administrators Share Posted April 25, 2019 20 XOR BE = 9E. So if value less 255 you can search 9EX7 as Byte. Link to comment Share on other sites More sharing options...
takumy Posted April 25, 2019 Author Share Posted April 25, 2019 The contiguous bytes should be: 5F 36 8E 20 BE 8E 36 5F, why 9EX7 but not 9EX1? ###################################################################### On the other hand, how about the value greater than 255? For example: Link to comment Share on other sites More sharing options...
Administrators Enyby Posted April 25, 2019 Administrators Share Posted April 25, 2019 4 hours ago, takumy said: The contiguous bytes should be No. Continues bytes always reverse hex. If value greater 255, then no luck for you. try search last part of number. 850 it is 352 hex, so search 52x7. [added 0 minutes later] Using reverse hex with HEX editor - X-Plore, GameGuardian (#6m86plcw) Link to comment Share on other sites More sharing options...
Question
takumy
I am searching a value R which is encrypted by XOR.
Let the two XOR inputs be v1 and v2.
I found that R = hex(v1) XOR reverse-hex(v2).
In above example, 5F368E20h XOR 5F368EBEh = 9Eh = 158 (decimal, which is the value display in my game)
Is it possible to do the above XOR search?
Thank you very much.
Link to comment
Share on other sites
3 answers to this question
Recommended Posts
Archived
This topic is now archived and is closed to further replies.