某程序的密码加密算法,看了好久看不懂,请高手帮忙!
006EF8F8 |. E8 AB020000 call 006EFBA8 输入密码8854510断在这里;F7跟进
006EF8FD |. FF75 D0 push dword ptr [ebp-30] F2下断
006EF900 |. 8D55 CC lea edx, dword ptr [ebp-34]
006EF903 |. 8BC6 mov eax, esi
006EF905 |. E8 9E020000 call 006EFBA8
006EF90A |. FF75 CC push dword ptr [ebp-34]
006EF90D |. 8D55 C8 lea edx, dword ptr [ebp-38]
006EF910 |. 8BC7 mov eax, edi
006EF912 |. E8 91020000 call 006EFBA8
006EF917 |. FF75 C8 push dword ptr [ebp-38]
006EF91A |. 8D55 C4 lea edx, dword ptr [ebp-3C]
006EF91D |. 8B45 F4 mov eax, dword ptr [ebp-C]
006EF920 |. E8 83020000 call 006EFBA8
006EF925 |. FF75 C4 push dword ptr [ebp-3C]
006EF928 |. 8D45 D4 lea eax, dword ptr [ebp-2C]
006EF92B |. BA 04000000 mov edx, 4
006EF930 |. E8 3F55D1FF call 00404E74
006EF935 |. 8B55 D4 mov edx, dword ptr [ebp-2C]
006EF938 |. 8B45 FC mov eax, dword ptr [ebp-4]
006EF93B |. E8 7C5AD1FF call 004053BC
006EF940 |. 33C0 xor eax, eax
006EF942 |. 5A pop edx
006EF943 |. 59 pop ecx
006EF944 |. 59 pop ecx
006EF945 |. 64:8910 mov dword ptr fs:[eax], edx
006EF948 |. 68 70F96E00 push 006EF970
006EF94D |> 8D45 C4 lea eax, dword ptr [ebp-3C]
006EF950 |. BA 06000000 mov edx, 6
006EF955 |. E8 BE51D1FF call 00404B18
006EF95A |. 8D45 F8 lea eax, dword ptr [ebp-8]
006EF95D |. 8B15 50E96E00 mov edx, dword ptr [6EE950] ; 12.006EE954
006EF963 |. E8 606AD1FF call 004063C8
006EF968 \. C3 retn
006EF969 .^ E9 064AD1FF jmp 00404374
006EF96E .^ EB DD jmp short 006EF94D
006EF970 . 5F pop edi
006EF971 . 5E pop esi
006EF972 . 5B pop ebx
006EF973 . 8BE5 mov esp, ebp
006EF975 . 5D pop ebp
006EF976 . C3 retn
来到这里,请看。。
006EFB94 . 30 31 32 33 3>ascii "0123456789abcdef"
006EFBA4 . 00 ascii 0
006EFBA5 00 db 00
006EFBA6 00 db 00
006EFBA7 00 db 00
006EFBA8 /$ 53 push ebx
006EFBA9 |. 56 push esi
006EFBAA |. 57 push edi
006EFBAB |. 55 push ebp
006EFBAC |. 8BF2 mov esi, edx
006EFBAE |. 8BF8 mov edi, eax
006EFBB0 |. 8BC6 mov eax, esi
006EFBB2 |. BA 08000000 mov edx, 8
006EFBB7 |. E8 8455D1FF call 00405140
006EFBBC |. 33DB xor ebx, ebx
006EFBBE |> 8BC6 mov eax, esi
006EFBC0 |. E8 4754D1FF call 0040500C
006EFBC5 |. 8BD3 mov edx, ebx
006EFBC7 |. 03D2 add edx, edx
006EFBC9 |. 03C2 add eax, edx
006EFBCB |. 50 push eax
006EFBCC |. 8BEB mov ebp, ebx
006EFBCE |. C1E5 03 shl ebp, 3
006EFBD1 |. 8BCD mov ecx, ebp
006EFBD3 |. 83C1 04 add ecx, 4
006EFBD6 |. 8BC7 mov eax, edi
006EFBD8 |. D3E8 shr eax, cl
006EFBDA |. 83E0 0F and eax, 0F
006EFBDD |. 8B15 448BCB00 mov edx, dword ptr [CB8B44] ; 12.006EFB94
006EFBE3 |. 8A0402 mov al, byte ptr [edx+eax] 运行到这里;DX数据=0123456789abcdef 然后按F9
006EFBE6 |. 5A pop edx
006EFBE7 |. 8802 mov byte ptr [edx], al
006EFBE9 |. 8BC6 mov eax, esi
006EFBEB |. E8 1C54D1FF call 0040500C
006EFBF0 |. 8BD3 mov edx, ebx
006EFBF2 |. 03D2 add edx, edx
006EFBF4 |. 8D4410 01 lea eax, dword ptr [eax+edx+1]
006EFBF8 |. 50 push eax
006EFBF9 |. 8BCD mov ecx, ebp
006EFBFB |. 8BC7 mov eax, edi
006EFBFD |. D3E8 shr eax, cl
006EFBFF |. 83E0 0F and eax, 0F
006EFC02 |. 8B15 448BCB00 mov edx, dword ptr [CB8B44] ; 12.006EFB94
006EFC08 |. 8A0402 mov al, byte ptr [edx+eax]
006EFC0B |. 5A pop edx
006EFC0C |. 8802 mov byte ptr [edx], al
006EFC0E |. 43 inc ebx
006EFC0F |. 83FB 04 cmp ebx, 4
006EFC12 |.^ 75 AA jnz short 006EFBBE
006EFC14 |. 5D pop ebp
006EFC15 |. 5F pop edi
006EFC16 |. 5E pop esi
006EFC17 |. 5B pop ebx
006EFC18 \. C3 retn
程序到这里:上面那断
006EF8F8 |. E8 AB020000 call 006EFBA8 输入密码8854510断在这里;F7跟进
006EF8FD |. FF75 D0 push dword ptr [ebp-30] 此时ebp=0012fa47 ,0012fa44 的值为'1dc1c034'
006EF900 |. 8D55 CC lea edx, dword ptr [ebp-34]
006EF903 |. 8BC6 mov eax, esi
006EF905 |. E8 9E020000 call 006EFBA8
006EF90A |. FF75 CC push dword ptr [ebp-34]
006EF90D |. 8D55 C8 lea edx, dword ptr [ebp-38]
006EF910 |. 8BC7 mov eax, edi
006EF912 |. E8 91020000 call 006EFBA8
006EF917 |. FF75 C8 push dword ptr [ebp-38]
006EF91A |. 8D55 C4 lea edx, dword ptr [ebp-3C]
006EF91D |. 8B45 F4 mov eax, dword ptr [ebp-C]
006EF920 |. E8 83020000 call 006EFBA8
006EF925 |. FF75 C4 push dword ptr [ebp-3C]
006EF928 |. 8D45 D4 lea eax, dword ptr [ebp-2C]
006EF92B |. BA 04000000 mov edx, 4
006EF930 |. E8 3F55D1FF call 00404E74
006EF935 |. 8B55 D4 mov edx, dword ptr [ebp-2C]
006EF938 |. 8B45 FC mov eax, dword ptr [ebp-4]
006EF93B |. E8 7C5AD1FF call 004053BC
006EF940 |. 33C0 xor eax, eax
006EF942 |. 5A pop edx
006EF943 |. 59 pop ecx
006EF944 |. 59 pop ecx
006EF945 |. 64:8910 mov dword ptr fs:[eax], edx
006EF948 |. 68 70F96E00 push 006EF970
006EF94D |> 8D45 C4 lea eax, dword ptr [ebp-3C]
006EF950 |. BA 06000000 mov edx, 6
006EF955 |. E8 BE51D1FF call 00404B18
006EF95A |. 8D45 F8 lea eax, dword ptr [ebp-8]
006EF95D |. 8B15 50E96E00 mov edx, dword ptr [6EE950] ; 12.006EE954
006EF963 |. E8 606AD1FF call 004063C8
006EF968 \. C3 retn
006EF969 .^ E9 064AD1FF jmp 00404374
006EF96E .^ EB DD jmp short 006EF94D
006EF970 . 5F pop edi
006EF971 . 5E pop esi
006EF972 . 5B pop ebx
006EF973 . 8BE5 mov esp, ebp
006EF975 . 5D pop ebp
006EF976 . C3 retn
哪个大哥知道什么加密算法,有知道的给个答案
在线等!
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)