|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
 谁抠个name计算的code来，太多了  膜拜>ls |
|
|
完全扣出来的代码，虽然不知道它在干什么
 char * SHA(char *UserName, char *Key ,int len)
{
char wap[0x13C]={0};
char *pwap=wap;
//预处理 补齐数据
*(BYTE*)(UserName+len)=0x80;
if(len<0x20)
{
*(BYTE*)(UserName+0x3F)=8*len;
}
else
{
*(BYTE*)(UserName+0x3F)=8*len%0x20;
*(BYTE*)(UserName+0x3E)=len/0x20;
}
//改变字符串的字节序
_asm
{
xor ecx, ecx;
mov esi, UserName;
mov edi, pwap;
lab1:
mov eax,dword ptr [esi+ecx*4];
bswap eax;
mov dword ptr [edi+ecx*4], eax;
add ecx, 1;
cmp ecx, 0x10;
jl short lab1;
}
//生成表
_asm
{
mov edx,0x40;
mov eax,pwap;
add eax,8;
lab2:
mov ecx,dword ptr [eax+0x2C];
xor ecx,dword ptr [eax+0x18];
add eax,4;
xor ecx,dword ptr [eax-0xC];
xor ecx,dword ptr [eax-4];
rol ecx,1;
sub edx,1;
mov dword ptr [eax+0x34],ecx;
jnz short lab2;
}
//SHA
_asm
{
push ebp;
mov eax,Key;
mov edx,dword ptr [eax+4];
mov ebx,dword ptr [eax+0xC];
mov esi,dword ptr [eax+8];
mov edi,dword ptr [eax];
mov eax,dword ptr [eax+0x10];
push eax;
push edi;
xor eax,eax;
lab4:
rol edi,5;
mov ebp,esi;
and ebp,edx;
mov ecx,edx;
not ecx;
and ecx,ebx;
xor ecx,ebp;
add edi,ecx;
push ebp;
mov ebp,dword ptr [esp+0xC];
add edi,dword ptr [wap+eax*4];
pop ebp;
mov ecx,dword ptr [esp+4];
lea ecx,dword ptr [edi+ecx+0x5A827999];
mov edi,dword ptr [esp];
mov dword ptr [esp+4],ebx;
ror edx,2;
mov dword ptr [esp],ecx;
rol ecx,5;
mov ebx,edi;
not ebx;
and ebx,esi;
mov ebp,edx;
and ebp,edi;
xor ebx,ebp;
add ecx,ebx;
push ebp;
mov ebp,dword ptr [esp+0xC];
add ecx,dword ptr [wap+eax*4+4];
pop ebp;
mov ebx,dword ptr [esp+4];
lea ecx,dword ptr [ecx+ebx+0x5A827999];
ror edi,2;
mov dword ptr [esp+4],esi;
mov ebx,edx;
mov edx,dword ptr [esp];
mov dword ptr [esp],ecx;
rol ecx,5;
mov ebp,edi;
and ebp,edx;
mov esi,edx;
not esi;
and esi,ebx;
xor esi,ebp;
add ecx,esi;
push ebp;
mov ebp,dword ptr [esp+0xC];
add ecx,dword ptr [wap+eax*4+8];
pop ebp;
mov esi,dword ptr [esp+4];
lea ecx,dword ptr [ecx+esi+0x5A827999];
mov esi,dword ptr [esp];
ror edx,2;
mov dword ptr [esp+4],ebx;
mov dword ptr [esp],ecx;
rol ecx,5;
mov ebx,esi;
not ebx;
and ebx,edi;
mov ebp,edx;
and ebp,esi;
xor ebx,ebp;
add ecx,ebx;
push ebp;
mov ebp,dword ptr [esp+0xC];
add ecx,dword ptr [wap+eax*4+0xC];
pop ebp;
mov ebx,dword ptr [esp+4];
lea ecx,dword ptr [ecx+ebx+0x5A827999];
ror esi,2;
mov dword ptr [esp+4],edi;
mov ebx,esi;
mov esi,dword ptr [esp];
mov edi,esi;
not edi;
and edi,edx;
mov dword ptr [esp],ecx;
rol ecx,5;
mov ebp,ebx;
and ebp,esi;
xor edi,ebp;
add ecx,edi;
push ebp;
mov ebp,dword ptr [esp+0xC];
add ecx,dword ptr [wap+eax*4+0x10];
pop ebp;
mov edi,dword ptr [esp+4];
lea ecx,dword ptr [ecx+edi+0x5A827999];
mov ebp,edx;
mov edx,dword ptr [esp];
mov edi,ecx;
add eax,5;
ror esi,2;
mov dword ptr [esp+4],ebp;
mov dword ptr [esp],edi;
cmp eax,0x14;
jl lab4;
cmp eax,0x28;
jge short lab5;
lab6:
mov ebp,ebx;
xor ebp,esi;
xor ebp,edx;
rol ecx,5;
add ecx,ebp;
push ebp;
mov ebp,dword ptr [esp+0xC];
add ecx,dword ptr [wap+eax*4];
pop ebp;
mov ebp,dword ptr [esp+4];
lea ecx,dword ptr [ecx+ebp+0x6ED9EBA1];
ror edx,2;
mov ebp,ebx;
mov ebx,esi;
add eax,1;
cmp eax,0x28;
mov esi,edx;
mov edx,edi;
mov dword ptr [esp+4],ebp;
mov edi,ecx;
jl short lab6;
mov dword ptr [esp],ecx;
lab5:
cmp eax,0x3C;
jge short lab7;
lab8:
mov edi,esi;
xor edi,edx;
and edi,ebx;
mov ebp,esi;
and ebp,edx;
rol ecx,5;
add ecx,dword ptr [esp+4];
xor edi,ebp;
push ebp;
mov ebp,dword ptr [esp+0xC];
add edi,dword ptr [wap+eax*4];
pop ebp;
ror edx,2;
mov ebp,ebx;
mov ebx,esi;
add eax,1;
cmp eax,0x3C;
lea ecx,dword ptr [edi+ecx+0x8F1BBCDC];
mov esi,edx;
mov edx,dword ptr [esp];
mov dword ptr [esp+4],ebp;
mov dword ptr [esp],ecx;
jl short lab8;
lab7:
cmp eax,0x50;
jge short lab9;
lab10:
mov edi,ebx;
xor edi,esi;
rol ecx,5;
xor edi,edx;
push ebp;
mov ebp,dword ptr [esp+0xC];
add edi,dword ptr [wap+eax*4];
pop ebp;
add ecx,ebp;
ror edx,2;
mov ebp,ebx;
mov ebx,esi;
add eax,1;
cmp eax,0x50;
lea ecx,dword ptr [edi+ecx+0xCA62C1D6];
mov esi,edx;
mov edx,dword ptr [esp];
mov dword ptr [esp],ecx;
jl short lab10;
lab9:
push ebp;
mov ebp,dword ptr [esp+0xC];
mov eax,Key;
pop ebp;
mov edi,dword ptr [eax];
add edi,ecx;
mov ecx,dword ptr [eax+4];
add ecx,edx;
mov dword ptr [eax+4],ecx;
mov ecx,dword ptr [eax+8];
add ecx,esi;
mov dword ptr [eax+8],ecx;
mov ecx,dword ptr [eax+0xC];
add ecx,ebx;
mov dword ptr [eax],edi;
mov dword ptr [eax+0xC],ecx;
mov ecx,dword ptr [eax+0x10];
add ecx,ebp;
mov dword ptr [eax+0x10],ecx;
pop edi;
pop eax;
pop ebp;
}
//翻转字节序
_asm
{
xor ecx, ecx;
mov esi, Key;
lab11:
mov eax,dword ptr [esi+ecx*4];
bswap eax;
mov dword ptr [esi+ecx*4], eax;
add ecx, 1;
cmp ecx, 5;
jl short lab11;
}
return Key;
}
|
|
|
|
|
|
|
