Quote:
Originally Posted by xyz987
What I am going to say is just an speculation, but may be it helps. Atari Vampire's DK is repeated at 2 positions in memdump. So may be WinDVD works this way:
1- Program stores DK at one of the positions.
2- Program computes sub DK and stores it at the other position
3- Program copy sub DK (output DK) to the first position, so the new DK becomes the input of the new iteration of AES-G3.
If the above is true, parent DK of Atari Vampire's DK is at one of these 2 positions sometimes.
|
You might be on to something here
. Putting it in c-terms: it looks like a stucture (or something similar) with maybe an "in" and "out" key which is used iteratively.
In my memdump:
1) address 00008A00
2) address 00008A34
This is exactly the same distance (34h) as with ATARI Vampire.