Miles Wolbe was looking for some strings in a Dell BIOS update; it took him some time to figure out they are ROT-1 encoded.
I updated my XORSearch tool to support ROT encoding.
Sunday 19 April 2009
2 Comments »
RSS feed for comments on this post. TrackBack URI
Excellent tool! I will definitely use this. I doubly appreciate the lack of windows system calls. It built without any modifications on gcc. Thanks.
I did a little looking at your exe with a tool of my own. It’s mostly a neat toy, but I thought you might be interested. http://randommusingsofarealgeek.blogspot.com/2009/04/why-are-windows-executables-so-big.html
Comment by Bryan Harris — Tuesday 21 April 2009 @ 13:39
That’s one of my requirements for this tool: being able to compile it with a standard C compiler on different OSes.
The EXE is compiled with Borland, and the C library (like printf) is linked in. And then there is also a digital signature (Authenticode) adding to the size.
Comment by Didier Stevens — Tuesday 21 April 2009 @ 14:11