想破解一个3des加密的key,反汇编后找到该函数的代码如下:
text:00000DA0 EXPORT Java_com_tv_shidian_utils_NativeUtils_get3DESKey
.text:00000DA0 Java_com_tv_shidian_utils_NativeUtils_get3DESKey
.text:00000DA0 08 B5 PUSH {R3,LR}
.text:00000DA2 04 49 LDR R1, =(keys_ptr - 0xDAC)
.text:00000DA4 02 68 LDR R2, [R0]
.text:00000DA6 A7 23 MOVS R3, #0xA7
.text:00000DA8 79 44 ADD R1, PC ; keys_ptr
.text:00000DAA 9B 00 LSLS R3, R3, #2
.text:00000DAC 09 68 LDR R1, [R1] ; keys
.text:00000DAE D3 58 LDR R3, [R2,R3]
.text:00000DB0 98 47 BLX R3
.text:00000DB2 08 BD POP {R3,PC}
.text:00000DB2 ; End of function Java_com_tv_shidian_utils_NativeUtils_get3DESKey
.text:00000DB2
.text:00000DB2 ; ---------------------------------------------------------------------------
.text:00000DB4 04 32 00 00 off_DB4 DCD keys_ptr - 0xDAC ; DATA XREF: Java_com_tv_shidian_utils_NativeUtils_get3DESKey+2r
.text:00000DB8
.text:00000DB8 ; =============== S U B R O U T I N E =======================================
.text:00000DB8
.text:00000DB8
.text:00000DB8 EXPORT Java_com_tv_shidian_utils_NativeUtils_get3DESKeyForGet
.text:00000DB8 Java_com_tv_shidian_utils_NativeUtils_get3DESKeyForGet
.text:00000DB8 08 B5 PUSH {R3,LR}
.text:00000DBA 04 49 LDR R1, =(keys_get_ptr - 0xDC4)
.text:00000DBC 02 68 LDR R2, [R0]
.text:00000DBE A7 23 MOVS R3, #0xA7
.text:00000DC0 79 44 ADD R1, PC ; keys_get_ptr
.text:00000DC2 9B 00 LSLS R3, R3, #2
.text:00000DC4 09 68 LDR R1, [R1] ; "76fae7c9a6e4b49ed61d740f"
.text:00000DC6 D3 58 LDR R3, [R2,R3]
.text:00000DC8 98 47 BLX R3
.text:00000DCA 08 BD POP {R3,PC}
.text:00000DCA ; End of function Java_com_tv_shidian_utils_NativeUtils_get3DESKeyForGet
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课