cryp proc
sub esp, 3Ch
mov eax, [esp+40h]
push ebx
push ebp
push esi
mov edx, [eax+0Ch]
mov esi, [eax+8]
mov ecx, [eax]
mov ebp, edx
push edi
mov edi, [eax+4]
mov eax, [esp+54h]
xor ebp, esi
and ebp, edi
mov ebx, [eax]
xor ebp, edx
add ebp, ebx
mov [esp+54h], ebx
mov ebx, [eax+4]
lea ecx, [ecx+ebp-28955B88h]
mov ebp, esi
rol ecx, 7
xor ebp, edi
add ecx, edi
and ebp, ecx
mov [esp+20h], ebx
xor ebp, esi
add ebp, ebx
mov ebx, [eax+8]
mov [esp+40h], ebx
lea edx, [edx+ebp-173848AAh]
mov ebp, edi
rol edx, 0Ch
add edx, ecx
xor ebp, ecx
and ebp, edx
xor ebp, edi
add ebp, ebx
mov ebx, [eax+0Ch]
mov [esp+18h], ebx
lea esi, [esi+ebp+242070DBh]
mov ebp, edx
rol esi, 11h
add esi, edx
xor ebp, ecx
and ebp, esi
xor ebp, ecx
add ebp, ebx
mov ebx, [eax+10h]
mov [esp+30h], ebx
lea edi, [edi+ebp-3E423112h]
mov ebp, edx
rol edi, 16h
add edi, esi
xor ebp, esi
and ebp, edi
xor ebp, edx
add ebp, ebx
mov ebx, [eax+14h]
mov [esp+14h], ebx
lea ecx, [ecx+ebp-0A83F051h]
mov ebp, esi
rol ecx, 7
add ecx, edi
xor ebp, edi
and ebp, ecx
xor ebp, esi
add ebp, ebx
mov ebx, [eax+18h]
mov [esp+28h], ebx
lea edx, [edx+ebp+4787C62Ah]
mov ebp, edi
rol edx, 0Ch
add edx, ecx
xor ebp, ecx
and ebp, edx
xor ebp, edi
add ebp, ebx
mov ebx, [eax+1Ch]
lea esi, [esi+ebp-57CFB9EDh]
rol esi, 11h
add esi, edx
mov ebp, edx
mov [esp+10h], ebx
xor ebp, ecx
and ebp, esi
xor ebp, ecx
add ebp, ebx
mov ebx, [eax+20h]
mov [esp+24h], ebx
lea edi, [edi+ebp-2B96AFFh]
mov ebp, edx
rol edi, 16h
xor ebp, esi
add edi, esi
and ebp, edi
xor ebp, edx
add ebp, ebx
mov ebx, [eax+24h]
mov [esp+38h], ebx
lea ecx, [ecx+ebp+698098D8h]
mov ebp, esi
rol ecx, 7
xor ebp, edi
add ecx, edi
and ebp, ecx
xor ebp, esi
add ebp, ebx
mov ebx, [eax+28h]
mov [esp+1Ch], ebx
lea edx, [edx+ebp-74BB0851h]
mov ebp, edi
rol edx, 0Ch
add edx, ecx
xor ebp, ecx
and ebp, edx
xor ebp, edi
add ebp, ebx
mov ebx, [eax+2Ch]
mov [esp+34h], ebx
lea esi, [esi+ebp-0A44Fh]
mov ebp, edx
rol esi, 11h
add esi, edx
xor ebp, ecx
and ebp, esi
xor ebp, ecx
add ebp, ebx
mov ebx, [eax+30h]
mov [esp+3Ch], ebx
lea edi, [edi+ebp-76A32842h]
mov ebp, edx
rol edi, 16h
add edi, esi
xor ebp, esi
and ebp, edi
xor ebp, edx
add ebp, ebx
mov ebx, [eax+34h]
mov [esp+2Ch], ebx
lea ecx, [ecx+ebp+6B901122h]
mov ebp, esi
rol ecx, 7
add ecx, edi
xor ebp, edi
and ebp, ecx
xor ebp, esi
add ebp, ebx
mov ebx, [eax+38h]
mov eax, [eax+3Ch]
mov [esp+44h], ebx
lea edx, [edx+ebp-2678E6Dh]
mov ebp, edi
rol edx, 0Ch
add edx, ecx
xor ebp, ecx
and ebp, edx
mov [esp+48h], eax
xor ebp, edi
add ebp, ebx
lea esi, [esi+ebp-5986BC72h]
rol esi, 11h
add esi, edx
mov ebp, edx
xor ebp, ecx
and ebp, esi
xor ebp, ecx
add ebp, eax
lea edi, [edi+ebp+49B40821h]
mov ebp, esi
rol edi, 16h
add edi, esi
xor ebp, edi
and ebp, edx
xor ebp, esi
add ebp, [esp+20h]
lea ecx, [ecx+ebp-9E1DA9Eh]
mov ebp, edi
rol ecx, 5
add ecx, edi
xor ebp, ecx
and ebp, esi
xor ebp, edi
add ebp, [esp+28h]
lea edx, [edx+ebp-3FBF4CC0h]
rol edx, 9
add edx, ecx
mov ebp, edx
xor ebp, ecx
and ebp, edi
xor ebp, ecx
add ebp, [esp+34h]
lea esi, [esi+ebp+265E5A51h]
mov ebp, edx
rol esi, 0Eh
add esi, edx
xor ebp, esi
and ebp, ecx
xor ebp, edx
add ebp, [esp+54h]
lea edi, [edi+ebp-16493856h]
mov ebp, esi
rol edi, 14h
add edi, esi
xor ebp, edi
and ebp, edx
xor ebp, esi
add ebp, [esp+14h]
lea ecx, [ecx+ebp-29D0EFA3h]
mov ebp, edi
rol ecx, 5
add ecx, edi
xor ebp, ecx
and ebp, esi
xor ebp, edi
add ebp, [esp+1Ch]
lea edx, [edx+ebp+2441453h]
rol edx, 9
add edx, ecx
mov ebp, edx
xor ebp, ecx
and ebp, edi
xor ebp, ecx
add ebp, eax
mov eax, edx
lea esi, [esi+ebp-275E197Fh]
mov ebp, [esp+30h]
rol esi, 0Eh
add esi, edx
xor eax, esi
and eax, ecx
xor eax, edx
add eax, ebp
mov ebp, [esp+38h]
lea edi, [eax+edi-182C0438h]
mov eax, esi
rol edi, 14h
add edi, esi
xor eax, edi
and eax, edx
xor eax, esi
add eax, ebp
lea ecx, [eax+ecx+21E1CDE6h]
rol ecx, 5
add ecx, edi
mov eax, edi
xor eax, ecx
mov ebp, [esp+24h]
and eax, esi
xor eax, edi
add eax, ebx
mov ebx, [esp+18h]
lea edx, [eax+edx-3CC8F82Ah]
rol edx, 9
add edx, ecx
mov eax, edx
xor eax, ecx
and eax, edi
xor eax, ecx
add eax, ebx
mov ebx, [esp+2Ch]
lea esi, [eax+esi-0B2AF279h]
mov eax, edx
rol esi, 0Eh
add esi, edx
xor eax, esi
and eax, ecx
xor eax, edx
add eax, ebp
mov ebp, [esp+40h]
lea edi, [eax+edi+455A14EDh]
mov eax, esi
rol edi, 14h
add edi, esi
xor eax, edi
and eax, edx
xor eax, esi
add eax, ebx
mov ebx, [esp+10h]
lea ecx, [eax+ecx-561C16FBh]
mov eax, edi
rol ecx, 5
add ecx, edi
xor eax, ecx
and eax, esi
xor eax, edi
add eax, ebp
mov ebp, [esp+3Ch]
lea edx, [eax+edx-3105C08h]
rol edx, 9
add edx, ecx
mov eax, edx
xor eax, ecx
and eax, edi
xor eax, ecx
add eax, ebx
mov ebx, edx
lea esi, [eax+esi+676F02D9h]
rol esi, 0Eh
add esi, edx
xor ebx, esi
mov eax, ebx
and eax, ecx
xor eax, edx
add eax, ebp
mov ebp, [esp+14h]
lea edi, [eax+edi-72D5B376h]
mov eax, esi
rol edi, 14h
add edi, esi
xor ebx, edi
xor eax, edi
add ebx, ebp
lea ecx, [ebx+ecx-5C6BEh]
mov ebx, [esp+24h]
rol ecx, 4
add ecx, edi
xor eax, ecx
add eax, ebx
lea ebx, [eax+edx-788E097Fh]
rol ebx, 0Bh
add ebx, ecx
mov edx, ebx
xor edx, edi
xor edx, ecx
mov ebp, [esp+34h]
mov eax, ebx
add edx, ebp
mov ebp, [esp+44h]
lea esi, [edx+esi+6D9D6122h]
rol esi, 10h
add esi, ebx
xor eax, esi
mov edx, eax
xor edx, ecx
add edx, ebp
mov ebp, [esp+1Ch]
lea edx, [edx+edi-21AC7F4h]
mov edi, [esp+20h]
rol edx, 17h
add edx, esi
xor eax, edx
add eax, edi
mov edi, [esp+30h]
lea ecx, [eax+ecx-5B4115BCh]
mov eax, esi
rol ecx, 4
xor eax, edx
add ecx, edx
xor eax, ecx
add eax, edi
lea edi, [eax+ebx+4BDECFA9h]
mov ebx, [esp+10h]
rol edi, 0Bh
add edi, ecx
mov eax, edi
xor eax, edx
xor eax, ecx
add eax, ebx
lea esi, [eax+esi-944B4A0h]
mov eax, edi
rol esi, 10h
add esi, edi
xor eax, esi
mov ebx, eax
xor ebx, ecx
add ebx, ebp
mov ebp, [esp+28h]
lea edx, [ebx+edx-41404390h]
mov ebx, [esp+2Ch]
rol edx, 17h
add edx, esi
xor eax, edx
add eax, ebx
mov ebx, [esp+54h]
lea ecx, [eax+ecx+289B7EC6h]
mov eax, esi
rol ecx, 4
add ecx, edx
xor eax, edx
xor eax, ecx
add eax, ebx
mov ebx, [esp+18h]
lea edi, [eax+edi-155ED806h]
rol edi, 0Bh
add edi, ecx
mov eax, edi
xor eax, edx
xor eax, ecx
add eax, ebx
lea ebx, [eax+esi-2B10CF7Bh]
mov eax, edi
rol ebx, 10h
add ebx, edi
xor eax, ebx
mov esi, eax
xor esi, ecx
add esi, ebp
mov ebp, [esp+38h]
lea edx, [esi+edx+4881D05h]
rol edx, 17h
add edx, ebx
xor eax, edx
add eax, ebp
lea ecx, [eax+ecx-262B2FC7h]
rol ecx, 4
mov eax, [esp+3Ch]
mov esi, ebx
add ecx, edx
xor esi, edx
xor esi, ecx
mov ebp, [esp+48h]
add esi, eax
lea esi, [esi+edi-1924661Bh]
rol esi, 0Bh
add esi, ecx
mov edi, esi
xor edi, edx
xor edi, ecx
add edi, ebp
mov ebp, esi
lea edi, [edi+ebx+1FA27CF8h]
mov ebx, [esp+40h]
rol edi, 10h
add edi, esi
xor ebp, edi
xor ebp, ecx
add ebp, ebx
lea edx, [edx+ebp-3B53A99Bh]
mov ebp, esi
rol edx, 17h
add edx, edi
not ebp
or ebp, edx
xor ebp, edi
add ebp, [esp+54h]
lea ecx, [ecx+ebp-0BD6DDBCh]
mov ebp, edi
rol ecx, 6
add ecx, edx
not ebp
or ebp, ecx
xor ebp, edx
add ebp, [esp+10h]
lea esi, [esi+ebp+432AFF97h]
mov ebp, edx
rol esi, 0Ah
add esi, ecx
not ebp
or ebp, esi
xor ebp, ecx
add ebp, [esp+44h]
lea edi, [edi+ebp-546BDC59h]
mov ebp, ecx
rol edi, 0Fh
add edi, esi
not ebp
or ebp, edi
xor ebp, esi
add ebp, [esp+14h]
lea edx, [edx+ebp-36C5FC7h]
mov ebp, esi
rol edx, 15h
add edx, edi
not ebp
or ebp, edx
xor ebp, edi
add ebp, eax
mov eax, edi
not eax
lea ecx, [ecx+ebp+655B59C3h]
mov ebp, [esp+18h]
rol ecx, 6
add ecx, edx
or eax, ecx
xor eax, edx
add eax, ebp
mov ebp, [esp+1Ch]
lea esi, [eax+esi-70F3336Eh]
mov eax, edx
rol esi, 0Ah
add esi, ecx
not eax
or eax, esi
xor eax, ecx
add eax, ebp
lea edi, [eax+edi-100B83h]
mov ebp, [esp+20h]
mov eax, ecx
rol edi, 0Fh
add edi, esi
not eax
or eax, edi
xor eax, esi
add eax, ebp
mov ebp, [esp+24h]
lea edx, [eax+edx-7A7BA22Fh]
mov eax, esi
rol edx, 15h
add edx, edi
not eax
or eax, edx
xor eax, edi
add eax, ebp
mov ebp, [esp+48h]
lea ecx, [eax+ecx+6FA87E4Fh]
mov eax, edi
rol ecx, 6
add ecx, edx
not eax
or eax, ecx
xor eax, edx
add eax, ebp
mov ebp, [esp+28h]
lea eax, [eax+esi-1D31920h]
mov esi, edx
rol eax, 0Ah
add eax, ecx
not esi
or esi, eax
xor esi, ecx
add esi, ebp
mov ebp, [esp+2Ch]
lea esi, [esi+edi-5CFEBCECh]
mov edi, ecx
rol esi, 0Fh
add esi, eax
not edi
or edi, esi
xor edi, eax
add edi, ebp
mov ebp, [esp+30h]
lea edx, [edi+edx+4E0811A1h]
mov edi, eax
rol edx, 15h
add edx, esi
not edi
or edi, edx
xor edi, esi
add edi, ebp
mov ebp, [esp+34h]
lea ecx, [edi+ecx-8AC817Eh]
mov edi, esi
rol ecx, 6
add ecx, edx
not edi
or edi, ecx
xor edi, edx
add edi, ebp
mov ebp, [esp+38h]
lea edi, [edi+eax-42C50DCBh]
mov eax, edx
rol edi, 0Ah
add edi, ecx
not eax
or eax, edi
xor eax, ecx
add eax, ebx
lea esi, [eax+esi+2AD7D2BBh]
mov eax, ecx
rol esi, 0Fh
add esi, edi
not eax
or eax, esi
xor eax, edi
add eax, ebp
lea edx, [eax+edx-14792C6Fh]
rol edx, 15h
mov eax, [esp+50h]
add edx, esi
mov ebx, [eax]
add ebx, ecx
mov ecx, [eax+4]
add ecx, edx
mov [eax], ebx
mov [eax+4], ecx
mov ecx, [eax+8]
add ecx, esi
mov [eax+8], ecx
mov ecx, [eax+0Ch]
add ecx, edi
pop edi
pop esi
pop ebp
mov [eax+0Ch], ecx
pop ebx
add esp, 3Ch
ret 8
cryp endp
[培训]二进制漏洞攻防(第3期);满10人开班;模糊测试与工具使用二次开发;网络协议漏洞挖掘;Linux内核漏洞挖掘与利用;AOSP漏洞挖掘与利用;代码审计。