[求助]请教大虾，这是什么加解密算法，谢谢！-软件逆向-看雪-安全社区|安全招聘|kanxue.com

[求助]请教大虾，这是什么加解密算法，谢谢！

发表于: 2006-7-7 18:38 3556

[求助]请教大虾，这是什么加解密算法，谢谢！

chunzao1

活跃值

2006-7-7 18:38

3556

该子程序是注册码研证的一部分，可以将字符串：“00E04C5BC8CE”转换为
“6B 94 C4 04 3E E9 F4 83 60 23 B0 5A”，由于用算法识别工具从程序中识别出10多种加密方法，加上水平有限，因此确定不了。

麻烦各位大虾指教一下，这是哪种算法，谢谢！

代码如下：
004BBE00 /.  55                push ebp
004BBE01 |.  8BEC             mov ebp,esp
004BBE03 |.  83C4 DC          add esp,-24
004BBE06 |.  53                push ebx
004BBE07 |.  56                push esi
004BBE08 |.  57                push edi
004BBE09 |.  8955 EC          mov dword ptr ss:[ebp-14],edx
004BBE0C |.  8D7D F4          lea edi,dword ptr ss:[ebp-C]
004BBE0F |.  8B40 38          mov eax,dword ptr ds:[eax+38]
004BBE12 |.  8B50 3C          mov edx,dword ptr ds:[eax+3C]
004BBE15 |.  8955 E8          mov dword ptr ss:[ebp-18],edx
004BBE18 |.  8B50 40          mov edx,dword ptr ds:[eax+40]
004BBE1B |.  8955 E4          mov dword ptr ss:[ebp-1C],edx
004BBE1E |.  8B50 44          mov edx,dword ptr ds:[eax+44]
004BBE21 |.  8955 E0          mov dword ptr ss:[ebp-20],edx
004BBE24 |.  83C0 48          add eax,48
004BBE27 |.  8945 DC          mov dword ptr ss:[ebp-24],eax
004BBE2A |.  8B75 EC          mov esi,dword ptr ss:[ebp-14]
004BBE2D |.  8B46 08          mov eax,dword ptr ds:[esi+8]
004BBE30 |.  E8 F7D0FEFF       call XXXX.004A8F2C
004BBE35 |.  8907             mov dword ptr ds:[edi],eax
004BBE37 |.  8B46 04          mov eax,dword ptr ds:[esi+4]
004BBE3A |.  E8 EDD0FEFF       call XXXX.004A8F2C
004BBE3F |.  8BD8             mov ebx,eax
004BBE41 |.  8B06             mov eax,dword ptr ds:[esi]
004BBE43 |.  E8 E4D0FEFF       call XXXX.004A8F2C
004BBE48 |.  8945 F0          mov dword ptr ss:[ebp-10],eax
004BBE4B |.  B8 0B000000       mov eax,0B
004BBE50 |>  8B17             /mov edx,dword ptr ds:[edi]
004BBE52 |.  3355 E8          |xor edx,dword ptr ss:[ebp-18]
004BBE55 |.  8B4D DC          |mov ecx,dword ptr ss:[ebp-24]
004BBE58 |.  8B09             |mov ecx,dword ptr ds:[ecx]
004BBE5A |.  C1E1 10          |shl ecx,10
004BBE5D |.  33D1             |xor edx,ecx
004BBE5F |.  8917             |mov dword ptr ds:[edi],edx
004BBE61 |.  335D E4          |xor ebx,dword ptr ss:[ebp-1C]
004BBE64 |.  8B55 F0          |mov edx,dword ptr ss:[ebp-10]
004BBE67 |.  3355 E0          |xor edx,dword ptr ss:[ebp-20]
004BBE6A |.  8B4D DC          |mov ecx,dword ptr ss:[ebp-24]
004BBE6D |.  3311             |xor edx,dword ptr ds:[ecx]
004BBE6F |.  8955 F0          |mov dword ptr ss:[ebp-10],edx
004BBE72 |.  8345 DC 04       |add dword ptr ss:[ebp-24],4
004BBE76 |.  8B0F             |mov ecx,dword ptr ds:[edi]
004BBE78 |.  C1E9 10          |shr ecx,10
004BBE7B |.  330F             |xor ecx,dword ptr ds:[edi]
004BBE7D |.  8BF3             |mov esi,ebx
004BBE7F |.  C1E6 10          |shl esi,10
004BBE82 |.  33CE             |xor ecx,esi
004BBE84 |.  8BD3             |mov edx,ebx
004BBE86 |.  C1EA 10          |shr edx,10
004BBE89 |.  33CA             |xor ecx,edx
004BBE8B |.  8B75 F0          |mov esi,dword ptr ss:[ebp-10]
004BBE8E |.  C1E6 10          |shl esi,10
004BBE91 |.  33CE             |xor ecx,esi
004BBE93 |.  8BF3             |mov esi,ebx
004BBE95 |.  C1EE 18          |shr esi,18
004BBE98 |.  33CE             |xor ecx,esi
004BBE9A |.  8B75 F0          |mov esi,dword ptr ss:[ebp-10]
004BBE9D |.  C1E6 08          |shl esi,8
004BBEA0 |.  33CE             |xor ecx,esi
004BBEA2 |.  8B75 F0          |mov esi,dword ptr ss:[ebp-10]
004BBEA5 |.  C1EE 08          |shr esi,8
004BBEA8 |.  33CE             |xor ecx,esi
004BBEAA |.  8B37             |mov esi,dword ptr ds:[edi]
004BBEAC |.  C1E6 18          |shl esi,18
004BBEAF |.  33CE             |xor ecx,esi
004BBEB1 |.  8B75 F0          |mov esi,dword ptr ss:[ebp-10]
004BBEB4 |.  C1EE 10          |shr esi,10
004BBEB7 |.  33CE             |xor ecx,esi
004BBEB9 |.  8B37             |mov esi,dword ptr ds:[edi]
004BBEBB |.  C1E6 10          |shl esi,10
004BBEBE |.  33CE             |xor ecx,esi
004BBEC0 |.  8B75 F0          |mov esi,dword ptr ss:[ebp-10]
004BBEC3 |.  C1EE 18          |shr esi,18
004BBEC6 |.  33CE             |xor ecx,esi
004BBEC8 |.  8B37             |mov esi,dword ptr ds:[edi]
004BBECA |.  C1E6 08          |shl esi,8
004BBECD |.  33CE             |xor ecx,esi
004BBECF |.  894D FC          |mov dword ptr ss:[ebp-4],ecx
004BBED2 |.  8BF2             |mov esi,edx
004BBED4 |.  33F3             |xor esi,ebx
004BBED6 |.  8B55 F0          |mov edx,dword ptr ss:[ebp-10]
004BBED9 |.  C1E2 10          |shl edx,10
004BBEDC |.  33F2             |xor esi,edx
004BBEDE |.  8B55 F0          |mov edx,dword ptr ss:[ebp-10]
004BBEE1 |.  C1EA 10          |shr edx,10
004BBEE4 |.  33F2             |xor esi,edx
004BBEE6 |.  8B17             |mov edx,dword ptr ds:[edi]
004BBEE8 |.  C1E2 10          |shl edx,10
004BBEEB |.  33F2             |xor esi,edx
004BBEED |.  8B55 F0          |mov edx,dword ptr ss:[ebp-10]
004BBEF0 |.  C1EA 18          |shr edx,18
004BBEF3 |.  33F2             |xor esi,edx
004BBEF5 |.  8B17             |mov edx,dword ptr ds:[edi]
004BBEF7 |.  C1E2 08          |shl edx,8
004BBEFA |.  33F2             |xor esi,edx
004BBEFC |.  8B17             |mov edx,dword ptr ds:[edi]
004BBEFE |.  C1EA 08          |shr edx,8
004BBF01 |.  33F2             |xor esi,edx
004BBF03 |.  8BD3             |mov edx,ebx
004BBF05 |.  C1E2 18          |shl edx,18
004BBF08 |.  33F2             |xor esi,edx
004BBF0A |.  8B17             |mov edx,dword ptr ds:[edi]
004BBF0C |.  C1EA 10          |shr edx,10
004BBF0F |.  33F2             |xor esi,edx
004BBF11 |.  8BD3             |mov edx,ebx
004BBF13 |.  C1E2 10          |shl edx,10
004BBF16 |.  33F2             |xor esi,edx
004BBF18 |.  8B17             |mov edx,dword ptr ds:[edi]
004BBF1A |.  C1EA 18          |shr edx,18
004BBF1D |.  33F2             |xor esi,edx
004BBF1F |.  8BD3             |mov edx,ebx
004BBF21 |.  C1E2 08          |shl edx,8
004BBF24 |.  33F2             |xor esi,edx
004BBF26 |.  8B55 F0          |mov edx,dword ptr ss:[ebp-10]
004BBF29 |.  C1EA 10          |shr edx,10
004BBF2C |.  3355 F0          |xor edx,dword ptr ss:[ebp-10]
004BBF2F |.  8B0F             |mov ecx,dword ptr ds:[edi]
004BBF31 |.  C1E1 10          |shl ecx,10
004BBF34 |.  33D1             |xor edx,ecx
004BBF36 |.  8B0F             |mov ecx,dword ptr ds:[edi]
004BBF38 |.  C1E9 10          |shr ecx,10
004BBF3B |.  33D1             |xor edx,ecx
004BBF3D |.  8BCB             |mov ecx,ebx
004BBF3F |.  C1E1 10          |shl ecx,10
004BBF42 |.  33D1             |xor edx,ecx
004BBF44 |.  8B0F             |mov ecx,dword ptr ds:[edi]
004BBF46 |.  C1E9 18          |shr ecx,18
004BBF49 |.  33D1             |xor edx,ecx
004BBF4B |.  8BCB             |mov ecx,ebx
004BBF4D |.  C1E1 08          |shl ecx,8
004BBF50 |.  33D1             |xor edx,ecx
004BBF52 |.  8BCB             |mov ecx,ebx
004BBF54 |.  C1E9 08          |shr ecx,8
004BBF57 |.  33D1             |xor edx,ecx
004BBF59 |.  8B4D F0          |mov ecx,dword ptr ss:[ebp-10]
004BBF5C |.  C1E1 18          |shl ecx,18
004BBF5F |.  33D1             |xor edx,ecx
004BBF61 |.  8BCB             |mov ecx,ebx
004BBF63 |.  C1E9 10          |shr ecx,10
004BBF66 |.  33D1             |xor edx,ecx
004BBF68 |.  8B4D F0          |mov ecx,dword ptr ss:[ebp-10]
004BBF6B |.  C1E1 10          |shl ecx,10
004BBF6E |.  33D1             |xor edx,ecx
004BBF70 |.  C1EB 18          |shr ebx,18
004BBF73 |.  33D3             |xor edx,ebx
004BBF75 |.  8B4D F0          |mov ecx,dword ptr ss:[ebp-10]
004BBF78 |.  C1E1 08          |shl ecx,8
004BBF7B |.  33D1             |xor edx,ecx
004BBF7D |.  8955 F8          |mov dword ptr ss:[ebp-8],edx
004BBF80 |.  C14D FC 0A       |ror dword ptr ss:[ebp-4],0A
004BBF84 |.  D145 F8          |rol dword ptr ss:[ebp-8],1
004BBF87 |.  8B55 F8          |mov edx,dword ptr ss:[ebp-8]
004BBF8A |.  F7D2             |not edx
004BBF8C |.  0BD6             |or edx,esi
004BBF8E |.  3355 FC          |xor edx,dword ptr ss:[ebp-4]
004BBF91 |.  8917             |mov dword ptr ds:[edi],edx
004BBF93 |.  8B5D FC          |mov ebx,dword ptr ss:[ebp-4]
004BBF96 |.  F7D3             |not ebx
004BBF98 |.  0B5D F8          |or ebx,dword ptr ss:[ebp-8]
004BBF9B |.  33DE             |xor ebx,esi
004BBF9D |.  F7D6             |not esi
004BBF9F |.  0B75 FC          |or esi,dword ptr ss:[ebp-4]
004BBFA2 |.  3375 F8          |xor esi,dword ptr ss:[ebp-8]
004BBFA5 |.  8975 F0          |mov dword ptr ss:[ebp-10],esi
004BBFA8 |.  D145 F4          |rol dword ptr ss:[ebp-C],1
004BBFAB |.  C14D F0 0A       |ror dword ptr ss:[ebp-10],0A
004BBFAF |.  48                |dec eax
004BBFB0 |.^ 0F85 9AFEFFFF    \jnz XXXX.004BBE50
004BBFB6 |.  8B07             mov eax,dword ptr ds:[edi]
004BBFB8 |.  3345 E8          xor eax,dword ptr ss:[ebp-18]
004BBFBB |.  8B55 DC          mov edx,dword ptr ss:[ebp-24]
004BBFBE |.  8B12             mov edx,dword ptr ds:[edx]
004BBFC0 |.  C1E2 10          shl edx,10
004BBFC3 |.  33C2             xor eax,edx
004BBFC5 |.  8907             mov dword ptr ds:[edi],eax
004BBFC7 |.  335D E4          xor ebx,dword ptr ss:[ebp-1C]
004BBFCA |.  8B45 F0          mov eax,dword ptr ss:[ebp-10]
004BBFCD |.  3345 E0          xor eax,dword ptr ss:[ebp-20]
004BBFD0 |.  8B55 DC          mov edx,dword ptr ss:[ebp-24]
004BBFD3 |.  3302             xor eax,dword ptr ds:[edx]
004BBFD5 |.  8945 F0          mov dword ptr ss:[ebp-10],eax
004BBFD8 |.  8B17             mov edx,dword ptr ds:[edi]
004BBFDA |.  C1EA 10          shr edx,10
004BBFDD |.  3317             xor edx,dword ptr ds:[edi]
004BBFDF |.  8BCB             mov ecx,ebx
004BBFE1 |.  C1E1 10          shl ecx,10
004BBFE4 |.  33D1             xor edx,ecx
004BBFE6 |.  8BC3             mov eax,ebx
004BBFE8 |.  C1E8 10          shr eax,10
004BBFEB |.  33D0             xor edx,eax
004BBFED |.  8B4D F0          mov ecx,dword ptr ss:[ebp-10]
004BBFF0 |.  C1E1 10          shl ecx,10
004BBFF3 |.  33D1             xor edx,ecx
004BBFF5 |.  8BCB             mov ecx,ebx
004BBFF7 |.  C1E9 18          shr ecx,18
004BBFFA |.  33D1             xor edx,ecx
004BBFFC |.  8B4D F0          mov ecx,dword ptr ss:[ebp-10]
004BBFFF |.  C1E1 08          shl ecx,8
004BC002 |.  33D1             xor edx,ecx
004BC004 |.  8B4D F0          mov ecx,dword ptr ss:[ebp-10]
004BC007 |.  C1E9 08          shr ecx,8
004BC00A |.  33D1             xor edx,ecx
004BC00C |.  8B0F             mov ecx,dword ptr ds:[edi]
004BC00E |.  C1E1 18          shl ecx,18
004BC011 |.  33D1             xor edx,ecx
004BC013 |.  8B4D F0          mov ecx,dword ptr ss:[ebp-10]
004BC016 |.  C1E9 10          shr ecx,10
004BC019 |.  33D1             xor edx,ecx
004BC01B |.  8B0F             mov ecx,dword ptr ds:[edi]
004BC01D |.  C1E1 10          shl ecx,10
004BC020 |.  33D1             xor edx,ecx
004BC022 |.  8B4D F0          mov ecx,dword ptr ss:[ebp-10]
004BC025 |.  C1E9 18          shr ecx,18
004BC028 |.  33D1             xor edx,ecx
004BC02A |.  8B0F             mov ecx,dword ptr ds:[edi]
004BC02C |.  C1E1 08          shl ecx,8
004BC02F |.  33D1             xor edx,ecx
004BC031 |.  8955 FC          mov dword ptr ss:[ebp-4],edx
004BC034 |.  8BF0             mov esi,eax
004BC036 |.  33F3             xor esi,ebx
004BC038 |.  8B45 F0          mov eax,dword ptr ss:[ebp-10]
004BC03B |.  C1E0 10          shl eax,10
004BC03E |.  33F0             xor esi,eax
004BC040 |.  8B45 F0          mov eax,dword ptr ss:[ebp-10]
004BC043 |.  C1E8 10          shr eax,10
004BC046 |.  33F0             xor esi,eax
004BC048 |.  8B07             mov eax,dword ptr ds:[edi]
004BC04A |.  C1E0 10          shl eax,10
004BC04D |.  33F0             xor esi,eax
004BC04F |.  8B45 F0          mov eax,dword ptr ss:[ebp-10]
004BC052 |.  C1E8 18          shr eax,18
004BC055 |.  33F0             xor esi,eax
004BC057 |.  8B07             mov eax,dword ptr ds:[edi]
004BC059 |.  C1E0 08          shl eax,8
004BC05C |.  33F0             xor esi,eax
004BC05E |.  8B07             mov eax,dword ptr ds:[edi]
004BC060 |.  C1E8 08          shr eax,8
004BC063 |.  33F0             xor esi,eax
004BC065 |.  8BC3             mov eax,ebx
004BC067 |.  C1E0 18          shl eax,18
004BC06A |.  33F0             xor esi,eax
004BC06C |.  8B07             mov eax,dword ptr ds:[edi]
004BC06E |.  C1E8 10          shr eax,10
004BC071 |.  33F0             xor esi,eax
004BC073 |.  8BC3             mov eax,ebx
004BC075 |.  C1E0 10          shl eax,10
004BC078 |.  33F0             xor esi,eax
004BC07A |.  8B07             mov eax,dword ptr ds:[edi]
004BC07C |.  C1E8 18          shr eax,18
004BC07F |.  33F0             xor esi,eax
004BC081 |.  8BC3             mov eax,ebx
004BC083 |.  C1E0 08          shl eax,8
004BC086 |.  33F0             xor esi,eax
004BC088 |.  8B45 F0          mov eax,dword ptr ss:[ebp-10]
004BC08B |.  C1E8 10          shr eax,10
004BC08E |.  3345 F0          xor eax,dword ptr ss:[ebp-10]
004BC091 |.  8B17             mov edx,dword ptr ds:[edi]
004BC093 |.  C1E2 10          shl edx,10
004BC096 |.  33C2             xor eax,edx
004BC098 |.  8B17             mov edx,dword ptr ds:[edi]
004BC09A |.  C1EA 10          shr edx,10
004BC09D |.  33C2             xor eax,edx
004BC09F |.  8BD3             mov edx,ebx
004BC0A1 |.  C1E2 10          shl edx,10
004BC0A4 |.  33C2             xor eax,edx
004BC0A6 |.  8B17             mov edx,dword ptr ds:[edi]
004BC0A8 |.  C1EA 18          shr edx,18
004BC0AB |.  33C2             xor eax,edx
004BC0AD |.  8BD3             mov edx,ebx
004BC0AF |.  C1E2 08          shl edx,8
004BC0B2 |.  33C2             xor eax,edx
004BC0B4 |.  8BD3             mov edx,ebx
004BC0B6 |.  C1EA 08          shr edx,8
004BC0B9 |.  33C2             xor eax,edx
004BC0BB |.  8B55 F0          mov edx,dword ptr ss:[ebp-10]
004BC0BE |.  C1E2 18          shl edx,18
004BC0C1 |.  33C2             xor eax,edx
004BC0C3 |.  8BD3             mov edx,ebx
004BC0C5 |.  C1EA 10          shr edx,10
004BC0C8 |.  33C2             xor eax,edx
004BC0CA |.  8B55 F0          mov edx,dword ptr ss:[ebp-10]
004BC0CD |.  C1E2 10          shl edx,10
004BC0D0 |.  33C2             xor eax,edx
004BC0D2 |.  C1EB 18          shr ebx,18
004BC0D5 |.  33C3             xor eax,ebx
004BC0D7 |.  8B55 F0          mov edx,dword ptr ss:[ebp-10]
004BC0DA |.  C1E2 08          shl edx,8
004BC0DD |.  33C2             xor eax,edx
004BC0DF |.  8945 F8          mov dword ptr ss:[ebp-8],eax
004BC0E2 |.  8B45 FC          mov eax,dword ptr ss:[ebp-4]
004BC0E5 |.  E8 42CEFEFF       call XXXX.004A8F2C
004BC0EA |.  8B5D EC          mov ebx,dword ptr ss:[ebp-14]
004BC0ED |.  8943 08          mov dword ptr ds:[ebx+8],eax
004BC0F0 |.  8BC6             mov eax,esi
004BC0F2 |.  E8 35CEFEFF       call XXXX.004A8F2C
004BC0F7 |.  8943 04          mov dword ptr ds:[ebx+4],eax
004BC0FA |.  8B45 F8          mov eax,dword ptr ss:[ebp-8]
004BC0FD |.  E8 2ACEFEFF       call XXXX.004A8F2C
004BC102 |.  8903             mov dword ptr ds:[ebx],eax
004BC104 |.  5F                pop edi
004BC105 |.  5E                pop esi
004BC106 |.  5B                pop ebx
004BC107 |.  8BE5             mov esp,ebp
004BC109 |.  5D                pop ebp
004BC10A \.  C3                retn

[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法

收藏・0

免费・0

支持

分享

最新回复 (3)
chunzao1 雪币： 201 活跃值： (12) 能力值： ( LV2，RANK：10 ) 在线值：发帖 4 回帖 12 粉丝 0 关注私信	chunzao1 2 楼帮帮忙，谢谢 2006-7-8 14:59 0
kywds 雪币： 201 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 5 回帖 35 粉丝 0 关注私信	kywds 3 楼这一段是数据初始话,它的后面是纯粹的数字游戏,自己分析 004BBE00 /. 55 push ebp 004BBE01 \|. 8BEC mov ebp,esp 004BBE03 \|. 83C4 DC add esp,-24 004BBE06 \|. 53 push ebx 004BBE07 \|. 56 push esi 004BBE08 \|. 57 push edi 004BBE09 \|. 8955 EC mov dword ptr ss:[ebp-14],edx 004BBE0C \|. 8D7D F4 lea edi,dword ptr ss:[ebp-C] 004BBE0F \|. 8B40 38 mov eax,dword ptr ds:[eax+38] 004BBE12 \|. 8B50 3C mov edx,dword ptr ds:[eax+3C] 004BBE15 \|. 8955 E8 mov dword ptr ss:[ebp-18],edx;初始数据1 004BBE18 \|. 8B50 40 mov edx,dword ptr ds:[eax+40] 004BBE1B \|. 8955 E4 mov dword ptr ss:[ebp-1C],edx;初始数据2 004BBE1E \|. 8B50 44 mov edx,dword ptr ds:[eax+44] 004BBE21 \|. 8955 E0 mov dword ptr ss:[ebp-20],edx;初始数据3 004BBE24 \|. 83C0 48 add eax,48 004BBE27 \|. 8945 DC mov dword ptr ss:[ebp-24],eax;初始数据4 004BBE2A \|. 8B75 EC mov esi,dword ptr ss:[ebp-14];等同于MOV ESI,EDX,EDX的内容向上看 004BBE2D \|. 8B46 08 mov eax,dword ptr ds:[esi+8];初始数据5 004BBE30 \|. E8 F7D0FEFF call XXXX.004A8F2C;这个call只有一个参数EAX,它的作用就是变形EAX 004BBE35 \|. 8907 mov dword ptr ds:[edi],eax;变形数据5给DS:[EDI] 004BBE37 \|. 8B46 04 mov eax,dword ptr ds:[esi+4];初始数据6 004BBE3A \|. E8 EDD0FEFF call XXXX.004A8F2C 004BBE3F \|. 8BD8 mov ebx,eax;变形数据6给EBX 004BBE41 \|. 8B06 mov eax,dword ptr ds:[esi];初始数据7 004BBE43 \|. E8 E4D0FEFF call XXXX.004A8F2C 004BBE48 \|. 8945 F0 mov dword ptr ss:[ebp-10],eax;变形数据7给[EBP-10] 004BBE4B \|. B8 0B000000 mov eax,0B 2006-7-8 18:06 0
readyu 雪币： 11705 活跃值： (970) 能力值： ( LV12，RANK：779 ) 在线值：发帖 36 回帖 392 粉丝 45 关注私信	readyu 12 4 楼有人把homecode称为"binary sex" ? 2006-7-8 19:24 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

返回

chunzao1

发帖

回帖

RANK

他的文章

看雪公众号

专注于PC、移动、智能设备安全研究及逆向工程的开发者社区

//