10/06/2011, 01:27 AM
Looky what I found on wololo.net because of VF Blog. 
Something that may be of interest to KIRK 1 researchers and developers.
10 6D 65 5D F7 Before C0 41 5D AB 17 3C AE 6D D8 F2
66 4F E1 F2 E9 D6 63 36 F7 33 0B CA B9 55 6D B6
EB E8 05 DC F5 57 E2 F8 C8 1F D9 5C B6 0B 60 1B
F0 86 2D DB 1F CB 4E AF CD E3 88 A6 3C 1D 57 DC
5E 94 EE AC 2E 6C 9F 2E 81 C7 1C 58 3A F1 81 74
CB B5 C6 10 4B 09 D1 79 08 B8 B7 44 92 08 5C 23
01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00
26 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
7E 50 53 50 07 10 01 00 08 01 65 78 61 6D 70 6C
65 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
EE 92 8E AE 50 CA 4E 01 19 9C 1C A6 90 B8 61 70
0A 95 54 57 8F C5 EF 2C A2 49 A6 B5 08 DF 8C 78
2E 38 94 28 9B E1 1F C4 CE 61 DB 32 0B 5E 05 F0
This buffer will return 0 and decrypt when passed directly into the KIRK 1 function. Notice the header and the 01 at position 0x64 Enjoy.
--------------------------------------------------------------------------------------
Test worked and the decrypted message is here:
Address: 00 01 02 03 04 05 06 07 - 08 09 0A 0B 0C 0D 0E 0F 0123456789ABCDEF
===================================================================
0x00000000 54 68 69 73 20 69 73 20 - 61 20 70 72 6F 70 65 72 This.is.a.proper
0x00000010 20 45 43 44 53 41 20 73 - 69 67 6E 65 64 20 6D 65 .ECDSA.signed.me
0x00000020 73 73 61 67 65 21 ssage!
--------------------------------------------------------------------------------------
VF Blog Source
Wololo Source