首页
社区
课程
招聘
[讨论]算法求助
2010-3-25 17:05 5192

[讨论]算法求助

2010-3-25 17:05
5192
刚刚从一个控件里爬出来200多行的一个加密算法,是不是某种通用加密方法呢?

1000788E >/$  55            push    ebp
1000788F  |.  8BEC          mov     ebp, esp
10007891  |.  51            push    ecx
10007892  |.  51            push    ecx
10007893  |.  8B45 08       mov     eax, dword ptr [ebp+8]
10007896  |.  53            push    ebx
10007897  |.  56            push    esi
10007898  |.  33DB          xor     ebx, ebx
1000789A  |.  8B10          mov     edx, dword ptr [eax]
1000789C  |.  33C0          xor     eax, eax
1000789E  |.  3311          xor     edx, dword ptr [ecx]
100078A0  |.  57            push    edi
100078A1  |.  8955 FC       mov     dword ptr [ebp-4], edx
100078A4  |.  8A45 FE       mov     al, byte ptr [ebp-2]
100078A7  |.  8BF2          mov     esi, edx
100078A9  |.  8ADE          mov     bl, dh
100078AB  |.  8B8481 480400>mov     eax, dword ptr [ecx+eax*4+448]
100078B2  |.  8BFA          mov     edi, edx
100078B4  |.  C1EE 18       shr     esi, 18
100078B7  |.  0344B1 48     add     eax, dword ptr [ecx+esi*4+48]
100078BB  |.  BE FF000000   mov     esi, 0FF
100078C0  |.  23FE          and     edi, esi
100078C2  |.  338499 480800>xor     eax, dword ptr [ecx+ebx*4+848]
100078C9  |.  33DB          xor     ebx, ebx
100078CB  |.  0384B9 480C00>add     eax, dword ptr [ecx+edi*4+C48]
100078D2  |.  8B7D 0C       mov     edi, dword ptr [ebp+C]
100078D5  |.  3341 04       xor     eax, dword ptr [ecx+4]
100078D8  |.  3307          xor     eax, dword ptr [edi]
100078DA  |.  8945 F8       mov     dword ptr [ebp-8], eax
100078DD  |.  8A5D FA       mov     bl, byte ptr [ebp-6]
100078E0  |.  8BF8          mov     edi, eax
100078E2  |.  8B9C99 480400>mov     ebx, dword ptr [ecx+ebx*4+448]
100078E9  |.  C1EF 18       shr     edi, 18
100078EC  |.  035CB9 48     add     ebx, dword ptr [ecx+edi*4+48]
100078F0  |.  8BFB          mov     edi, ebx
100078F2  |.  33DB          xor     ebx, ebx
100078F4  |.  8ADC          mov     bl, ah
100078F6  |.  33BC99 480800>xor     edi, dword ptr [ecx+ebx*4+848]
100078FD  |.  8BD8          mov     ebx, eax
100078FF  |.  23DE          and     ebx, esi
10007901  |.  03BC99 480C00>add     edi, dword ptr [ecx+ebx*4+C48]
10007908  |.  33DB          xor     ebx, ebx
1000790A  |.  3379 08       xor     edi, dword ptr [ecx+8]
1000790D  |.  33D7          xor     edx, edi
1000790F  |.  8955 FC       mov     dword ptr [ebp-4], edx
10007912  |.  8A5D FE       mov     bl, byte ptr [ebp-2]
10007915  |.  C1EA 18       shr     edx, 18
10007918  |.  8BBC99 480400>mov     edi, dword ptr [ecx+ebx*4+448]
1000791F  |.  33DB          xor     ebx, ebx
10007921  |.  037C91 48     add     edi, dword ptr [ecx+edx*4+48]
10007925  |.  33D2          xor     edx, edx
10007927  |.  8A55 FD       mov     dl, byte ptr [ebp-3]
1000792A  |.  33BC91 480800>xor     edi, dword ptr [ecx+edx*4+848]
10007931  |.  8B55 FC       mov     edx, dword ptr [ebp-4]
10007934  |.  23D6          and     edx, esi
10007936  |.  03BC91 480C00>add     edi, dword ptr [ecx+edx*4+C48]
1000793D  |.  33D2          xor     edx, edx
1000793F  |.  3379 0C       xor     edi, dword ptr [ecx+C]
10007942  |.  33C7          xor     eax, edi
10007944  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007947  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
1000794A  |.  8BF8          mov     edi, eax
1000794C  |.  8ADC          mov     bl, ah
1000794E  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007955  |.  C1EF 18       shr     edi, 18
10007958  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
1000795C  |.  8BF8          mov     edi, eax
1000795E  |.  23FE          and     edi, esi
10007960  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007967  |.  33DB          xor     ebx, ebx
10007969  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007970  |.  3351 10       xor     edx, dword ptr [ecx+10]
10007973  |.  3155 FC       xor     dword ptr [ebp-4], edx
10007976  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007979  |.  8A5D FD       mov     bl, byte ptr [ebp-3]
1000797C  |.  33D2          xor     edx, edx
1000797E  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
10007981  |.  C1EF 18       shr     edi, 18
10007984  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
1000798B  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
1000798F  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007992  |.  23FE          and     edi, esi
10007994  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
1000799B  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
100079A2  |.  3351 14       xor     edx, dword ptr [ecx+14]
100079A5  |.  33DB          xor     ebx, ebx
100079A7  |.  33C2          xor     eax, edx
100079A9  |.  33D2          xor     edx, edx
100079AB  |.  8945 F8       mov     dword ptr [ebp-8], eax
100079AE  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
100079B1  |.  8BF8          mov     edi, eax
100079B3  |.  8ADC          mov     bl, ah
100079B5  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
100079BC  |.  C1EF 18       shr     edi, 18
100079BF  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
100079C3  |.  8BF8          mov     edi, eax
100079C5  |.  23FE          and     edi, esi
100079C7  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
100079CE  |.  33DB          xor     ebx, ebx
100079D0  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
100079D7  |.  3351 18       xor     edx, dword ptr [ecx+18]
100079DA  |.  3155 FC       xor     dword ptr [ebp-4], edx
100079DD  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
100079E0  |.  8A5D FD       mov     bl, byte ptr [ebp-3]
100079E3  |.  33D2          xor     edx, edx
100079E5  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
100079E8  |.  C1EF 18       shr     edi, 18
100079EB  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
100079F2  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
100079F6  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
100079F9  |.  23FE          and     edi, esi
100079FB  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007A02  |.  33DB          xor     ebx, ebx
10007A04  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007A0B  |.  3351 1C       xor     edx, dword ptr [ecx+1C]
10007A0E  |.  33C2          xor     eax, edx
10007A10  |.  33D2          xor     edx, edx
10007A12  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007A15  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
10007A18  |.  8BF8          mov     edi, eax
10007A1A  |.  8ADC          mov     bl, ah
10007A1C  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007A23  |.  C1EF 18       shr     edi, 18
10007A26  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007A2A  |.  8BF8          mov     edi, eax
10007A2C  |.  23FE          and     edi, esi
10007A2E  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007A35  |.  33DB          xor     ebx, ebx
10007A37  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007A3E  |.  3351 20       xor     edx, dword ptr [ecx+20]
10007A41  |.  3155 FC       xor     dword ptr [ebp-4], edx
10007A44  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007A47  |.  8A5D FD       mov     bl, byte ptr [ebp-3]
10007A4A  |.  33D2          xor     edx, edx
10007A4C  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
10007A4F  |.  C1EF 18       shr     edi, 18
10007A52  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007A59  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007A5D  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007A60  |.  23FE          and     edi, esi
10007A62  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007A69  |.  33DB          xor     ebx, ebx
10007A6B  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007A72  |.  3351 24       xor     edx, dword ptr [ecx+24]
10007A75  |.  33C2          xor     eax, edx
10007A77  |.  33D2          xor     edx, edx
10007A79  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007A7C  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
10007A7F  |.  8BF8          mov     edi, eax
10007A81  |.  8ADC          mov     bl, ah
10007A83  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007A8A  |.  C1EF 18       shr     edi, 18
10007A8D  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007A91  |.  8BF8          mov     edi, eax
10007A93  |.  23FE          and     edi, esi
10007A95  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007A9C  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007AA3  |.  3351 28       xor     edx, dword ptr [ecx+28]
10007AA6  |.  3155 FC       xor     dword ptr [ebp-4], edx
10007AA9  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007AAC  |.  33D2          xor     edx, edx
10007AAE  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
10007AB1  |.  C1EF 18       shr     edi, 18
10007AB4  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007ABB  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007ABF  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007AC2  |.  33DB          xor     ebx, ebx
10007AC4  |.  8A5D FD       mov     bl, byte ptr [ebp-3]
10007AC7  |.  23FE          and     edi, esi
10007AC9  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007AD0  |.  33DB          xor     ebx, ebx
10007AD2  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007AD9  |.  3351 2C       xor     edx, dword ptr [ecx+2C]
10007ADC  |.  33C2          xor     eax, edx
10007ADE  |.  33D2          xor     edx, edx
10007AE0  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007AE3  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
10007AE6  |.  8BF8          mov     edi, eax
10007AE8  |.  8ADC          mov     bl, ah
10007AEA  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007AF1  |.  C1EF 18       shr     edi, 18
10007AF4  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007AF8  |.  8BF8          mov     edi, eax
10007AFA  |.  23FE          and     edi, esi
10007AFC  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007B03  |.  33DB          xor     ebx, ebx
10007B05  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007B0C  |.  3351 30       xor     edx, dword ptr [ecx+30]
10007B0F  |.  3155 FC       xor     dword ptr [ebp-4], edx
10007B12  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007B15  |.  8A5D FD       mov     bl, byte ptr [ebp-3]
10007B18  |.  33D2          xor     edx, edx
10007B1A  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
10007B1D  |.  C1EF 18       shr     edi, 18
10007B20  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007B27  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007B2B  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007B2E  |.  23FE          and     edi, esi
10007B30  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007B37  |.  33DB          xor     ebx, ebx
10007B39  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007B40  |.  3351 34       xor     edx, dword ptr [ecx+34]
10007B43  |.  33C2          xor     eax, edx
10007B45  |.  33D2          xor     edx, edx
10007B47  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007B4A  |.  8A55 FA       mov     dl, byte ptr [ebp-6]
10007B4D  |.  8BF8          mov     edi, eax
10007B4F  |.  8ADC          mov     bl, ah
10007B51  |.  8B9491 480400>mov     edx, dword ptr [ecx+edx*4+448]
10007B58  |.  C1EF 18       shr     edi, 18
10007B5B  |.  0354B9 48     add     edx, dword ptr [ecx+edi*4+48]
10007B5F  |.  8BF8          mov     edi, eax
10007B61  |.  23FE          and     edi, esi
10007B63  |.  339499 480800>xor     edx, dword ptr [ecx+ebx*4+848]
10007B6A  |.  0394B9 480C00>add     edx, dword ptr [ecx+edi*4+C48]
10007B71  |.  3351 38       xor     edx, dword ptr [ecx+38]
10007B74  |.  3155 FC       xor     dword ptr [ebp-4], edx
10007B77  |.  8B7D FC       mov     edi, dword ptr [ebp-4]
10007B7A  |.  33D2          xor     edx, edx
10007B7C  |.  8A55 FE       mov     dl, byte ptr [ebp-2]
10007B7F  |.  C1EF 18       shr     edi, 18
10007B82  |.  8B9C91 480400>mov     ebx, dword ptr [ecx+edx*4+448]
10007B89  |.  8B55 FC       mov     edx, dword ptr [ebp-4]
10007B8C  |.  035CB9 48     add     ebx, dword ptr [ecx+edi*4+48]
10007B90  |.  8BFB          mov     edi, ebx
10007B92  |.  33DB          xor     ebx, ebx
10007B94  |.  8ADE          mov     bl, dh
10007B96  |.  33BC99 480800>xor     edi, dword ptr [ecx+ebx*4+848]
10007B9D  |.  8BDA          mov     ebx, edx
10007B9F  |.  23DE          and     ebx, esi
10007BA1  |.  03BC99 480C00>add     edi, dword ptr [ecx+ebx*4+C48]
10007BA8  |.  33DB          xor     ebx, ebx
10007BAA  |.  3379 3C       xor     edi, dword ptr [ecx+3C]
10007BAD  |.  33C7          xor     eax, edi
10007BAF  |.  8945 F8       mov     dword ptr [ebp-8], eax
10007BB2  |.  8A5D FA       mov     bl, byte ptr [ebp-6]
10007BB5  |.  8BF8          mov     edi, eax
10007BB7  |.  8B9C99 480400>mov     ebx, dword ptr [ecx+ebx*4+448]
10007BBE  |.  C1EF 18       shr     edi, 18
10007BC1  |.  035CB9 48     add     ebx, dword ptr [ecx+edi*4+48]
10007BC5  |.  8BFB          mov     edi, ebx
10007BC7  |.  33DB          xor     ebx, ebx
10007BC9  |.  8ADC          mov     bl, ah
10007BCB  |.  33BC99 480800>xor     edi, dword ptr [ecx+ebx*4+848]
10007BD2  |.  8BD8          mov     ebx, eax
10007BD4  |.  23DE          and     ebx, esi
10007BD6  |.  03BC99 480C00>add     edi, dword ptr [ecx+ebx*4+C48]
10007BDD  |.  3379 40       xor     edi, dword ptr [ecx+40]
10007BE0  |.  8B49 44       mov     ecx, dword ptr [ecx+44]
10007BE3  |.  33D7          xor     edx, edi
10007BE5  |.  33C8          xor     ecx, eax
10007BE7  |.  8B45 08       mov     eax, dword ptr [ebp+8]
10007BEA  |.  5F            pop     edi
10007BEB  |.  5E            pop     esi
10007BEC  |.  5B            pop     ebx
10007BED  |.  8908          mov     dword ptr [eax], ecx
10007BEF  |.  8B45 0C       mov     eax, dword ptr [ebp+C]
10007BF2  |.  8910          mov     dword ptr [eax], edx
10007BF4  |.  C9            leave
10007BF5  \.  C2 0800       retn    8

[培训]《安卓高级研修班(网课)》月薪三万计划,掌 握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法

收藏
点赞0
打赏
分享
最新回复 (7)
雪    币: 399
活跃值: (38)
能力值: (RANK:350 )
在线值:
发帖
回帖
粉丝
stalker 8 2010-3-25 18:19
2
0
通用加密方法==常见加密算法?
用Krypto Analyzer看看
雪    币: 200
活跃值: (46)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
kafly 2010-3-26 09:32
3
0
常见    谢谢版版
雪    币: 200
活跃值: (46)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
kafly 2010-3-26 09:44
4
0
ADLER32 :: 000343BC :: 100343BC
ADLER32 :: 00034491 :: 10034491
BASE64 table :: 00045570 :: 10045570
CRC32 :: 00047828 :: 10047828
HAVAL (5 pass) :: 00004F59 :: 10004F59
ZLIB deflate [word] :: 00049858 :: 10049858

我的MM呀,,这么多种?
雪    币: 200
活跃值: (46)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
kafly 2010-3-26 09:54
5
0
找到了!!

http://bbs.99nets.com/read.php?tid=228201

如出一辙
雪    币: 2071
活跃值: (77)
能力值: ( LV9,RANK:180 )
在线值:
发帖
回帖
粉丝
sessiondiy 4 2010-3-26 09:59
6
0
blowfish
雪    币: 200
活跃值: (46)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
kafly 2010-3-26 11:28
7
0
blowfish


是啊,好象有点变异,KEY是不断变化的
雪    币: 128
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
yeskysong 2010-4-26 09:42
8
0
看看。
游客
登录 | 注册 方可回帖
返回