Comments on: XORSearch V1.2.0: XOR & ROL http://blog.didierstevens.com/2007/08/14/xorsearch-v120-xor-rol/ (blog 'DidierStevens) Wed, 08 Feb 2012 19:23:01 +0000 hourly 1 http://wordpress.com/ By: Didier Stevens http://blog.didierstevens.com/2007/08/14/xorsearch-v120-xor-rol/#comment-14116 Fri, 14 Sep 2007 20:11:23 +0000 http://didierstevens.wordpress.com/2007/08/14/xorsearch-v120-xor-rol/#comment-14116 “Een kus van de juffrouw en een bank vooruit!”

In Flanders this means: a kiss of the teacher and move one bench closer to the blackboard! ;-)

]]> By: Tony http://blog.didierstevens.com/2007/08/14/xorsearch-v120-xor-rol/#comment-13898 Mon, 10 Sep 2007 15:22:45 +0000 http://didierstevens.wordpress.com/2007/08/14/xorsearch-v120-xor-rol/#comment-13898 If you ROL 7 times you have effectively ROR’d an 8 bit byte :-)

]]> By: www.andrewhay.ca » Suggested Blog Reading - Thursday August 16th, 2007 http://blog.didierstevens.com/2007/08/14/xorsearch-v120-xor-rol/#comment-12876 Fri, 17 Aug 2007 11:24:29 +0000 http://didierstevens.wordpress.com/2007/08/14/xorsearch-v120-xor-rol/#comment-12876 [...] XORSearch V1.2.0: XOR & ROL – I look forward to Didier’s upcoming post with further details. Last week I analyzed a piece of malware that had each byte of its strings ROL 1 (ROtate Left) encoded. I’ll give more details about this trick in an upcoming post. [...]

]]>