BoT Fehleranalyse

KalHack 12 - Cleaned Source - by BakaBug
http://www.BakaBug.net/
----------------------------------------------------
 Patch adresses to recv
 Setup send
 Setup AES  -Crypt
 Setup Table-Crypt
----------------------------------------------------


Got a packet ...
 SIZE:  83
    53 00 16 d9 66 13 51 dc 8f 4d fc 3d c2 53 fc 3d        S..┘f.Q▄ÅM³=┬S³=
    34 a5 7b 29 29 9f 29 29 63 fa 99 a6 1b 63 74 d4        4Ñ{))ƒ))c·Öª.ctÈ
    b7 95 89 b7 87 f0 f3 2e 77 17 27 23 bd 04 f2 f2        ÀòëÀç*¾.w.'#¢.‗‗
    90 5a 77 5d b5 b2 c9 12 20 1d a5 f9 78 c4 45 9a        ÉZw]Á▓╔...Ѩx─EÜ
    8a e5 af 39 ad 84 d3 12 c4 14 ff 44 e3 76 82 58        èÕ»9¡äË.─. DÒvéX
    42 29 29                                               B))



Decrypt Layer1 ...
 SIZE:  83
    53 00 0b 00 08 66 67 ce cb 05 b2 30 d3 fb b2 30        S....fg╬╦.▓0˹▓0
    f4 e0 d8 74 74 9c 74 74 bb 3a 06 b5 4d bb 35 78        ¶ÓÏtt£tt╗:.ÁM╗5x
    b4 13 83 b4 77 86 c7 91 7b 9d 26 c0 07 9f 31 31        ┤.â┤wåÃæ{Ø&└.ƒ11
    bd 5e 7b 0e ef b9 b0 fa d2 6b e0 8c 25 38 ca 09        ¢^{.´╣░·ÊkÓî%8╩.
    7c 40 94 c1 a7 e8 d5 fa 38 57 f9 4e c5 d6 9b 0d        |@ö┴ºÞı·8W¨N┼Íø.
    46 74 74                                               Ftt



Decrypt Layer2 ...
 SIZE:  83
    53 00 0b b0 6c 9c 01 75 23 14 78 15 00 00 00 44        S..░l£.u#.x....D
    ea 22 00 b0 6c 9c 01 75 23 14 78 15 00 00 00 44        Û".░l£.u#.x....D
    ea 22 00 b0 6c 9c 01 75 23 14 78 15 00 00 00 44        Û".░l£.u#.x....D
    ea 22 00 b0 6c 9c 01 75 23 14 78 15 00 00 00 44        Û".░l£.u#.x....D
    ea 22 00 b0 6c 9c 01 75 23 14 78 15 00 00 00 44        Û".░l£.u#.x....D
    ea 22 00                                               Û".

.code:00524025                 mov     ecx, [ebp+BUF]
.code:00524028                 add     ecx, 3
.code:0052402B                 push    ecx             [B]; P4, BUF+3[/B]
.code:0052402C                 push    offset IMPORTANT_MAYBY[B] ; P3, UNKNOW[255]={0}[/B]
.code:00524031                 mov     edx, [ebp+BUF]
.code:00524034                 movzx   eax, word ptr [edx]
.code:00524037                 sub     eax, 3
.code:0052403A                 push    eax             ;[B] P2, *(PWORD(BUF))-3[/B]
.code:0052403B                 mov     ecx, [ebp+BUF]
.code:0052403E                 add     ecx, 3
.code:00524041                 push    ecx            [B] ; P1, BUF+3[/B]
.code:00524042                 call    DecryptAES