求助】帮看我该从那入手,那个是关键!
就是这个数字273C11300721015BE9
经过下面过程 算出67B39B72
我怎么做算法机。
eax=0012FCF8
0053F7FC /$ 55 push ebp ; 从这里开始可算
0053F7FD |. 8BEC mov ebp, esp
0053F7FF |. 83C4 D0 add esp, -30
0053F802 |. 53 push ebx
0053F803 |. 56 push esi
0053F804 |. 57 push edi
0053F805 |. 33DB xor ebx, ebx
0053F807 |. 895D D0 mov dword ptr [ebp-30], ebx
0053F80A |. 895D D8 mov dword ptr [ebp-28], ebx
0053F80D |. 895D D4 mov dword ptr [ebp-2C], ebx
0053F810 |. 895D E0 mov dword ptr [ebp-20], ebx
0053F813 |. 895D DC mov dword ptr [ebp-24], ebx
0053F816 |. 895D E8 mov dword ptr [ebp-18], ebx
0053F819 |. 894D F4 mov dword ptr [ebp-C], ecx
0053F81C |. 8955 F8 mov dword ptr [ebp-8], edx
0053F81F |. 8945 FC mov dword ptr [ebp-4], eax
0053F822 |. 8B45 FC mov eax, dword ptr [ebp-4]
0053F825 |. E8 7654ECFF call 00404CA0
0053F82A |. 8B45 F8 mov eax, dword ptr [ebp-8]
0053F82D |. E8 6E54ECFF call 00404CA0
0053F832 |. 33C0 xor eax, eax
0053F834 |. 55 push ebp
0053F835 |. 68 59F95300 push 0053F959
0053F83A |. 64:FF30 push dword ptr fs:[eax]
0053F83D |. 64:8920 mov dword ptr fs:[eax], esp
0053F840 |. 8B45 F8 mov eax, dword ptr [ebp-8]
0053F843 |. E8 6852ECFF call 00404AB0
0053F848 |. 8945 F0 mov dword ptr [ebp-10], eax
0053F84B |. 837D F0 00 cmp dword ptr [ebp-10], 0
0053F84F |. 75 0D jnz short 0053F85E
0053F851 |. 8D45 F8 lea eax, dword ptr [ebp-8]
0053F854 |. BA 70F95300 mov edx, 0053F970 ; think space
0053F859 |. E8 2A50ECFF call 00404888
0053F85E |> 33FF xor edi, edi
0053F860 |. 8D45 DC lea eax, dword ptr [ebp-24]
0053F863 |. 50 push eax
0053F864 |. B9 02000000 mov ecx, 2
0053F869 |. BA 01000000 mov edx, 1
0053F86E |. 8B45 FC mov eax, dword ptr [ebp-4]
0053F871 |. E8 9A54ECFF call 00404D10
0053F876 |. 8B4D DC mov ecx, dword ptr [ebp-24]
0053F879 |. 8D45 E0 lea eax, dword ptr [ebp-20]
0053F87C |. BA 84F95300 mov edx, 0053F984 ; $
0053F881 |. E8 7652ECFF call 00404AFC
0053F886 |. 8B45 E0 mov eax, dword ptr [ebp-20]
0053F889 |. E8 969BECFF call 00409424
0053F88E |. 8945 EC mov dword ptr [ebp-14], eax
0053F891 |. BE 03000000 mov esi, 3
0053F896 |> 8D45 D4 /lea eax, dword ptr [ebp-2C]
0053F899 |. 50 |push eax
0053F89A |. B9 02000000 |mov ecx, 2
0053F89F |. 8BD6 |mov edx, esi
0053F8A1 |. 8B45 FC |mov eax, dword ptr [ebp-4]
0053F8A4 |. E8 6754ECFF |call 00404D10
0053F8A9 |. 8B4D D4 |mov ecx, dword ptr [ebp-2C]
0053F8AC |. 8D45 D8 |lea eax, dword ptr [ebp-28]
0053F8AF |. BA 84F95300 |mov edx, 0053F984 ; $
0053F8B4 |. E8 4352ECFF |call 00404AFC
0053F8B9 |. 8B45 D8 |mov eax, dword ptr [ebp-28]
0053F8BC |. E8 639BECFF |call 00409424
0053F8C1 |. 8945 E4 |mov dword ptr [ebp-1C], eax
0053F8C4 |. 3B7D F0 |cmp edi, dword ptr [ebp-10]
0053F8C7 |. 7D 03 |jge short 0053F8CC
0053F8C9 |. 47 |inc edi
0053F8CA |. EB 05 |jmp short 0053F8D1
0053F8CC |> BF 01000000 |mov edi, 1
0053F8D1 |> 8B45 F8 |mov eax, dword ptr [ebp-8]
0053F8D4 |. 33DB |xor ebx, ebx
0053F8D6 |. 8A5C38 FF |mov bl, byte ptr [eax+edi-1]
0053F8DA |. 335D E4 |xor ebx, dword ptr [ebp-1C]
0053F8DD |. 3B5D EC |cmp ebx, dword ptr [ebp-14]
0053F8E0 |. 7F 0B |jg short 0053F8ED
0053F8E2 |. 81C3 FF000000 |add ebx, 0FF
0053F8E8 |. 2B5D EC |sub ebx, dword ptr [ebp-14]
0053F8EB |. EB 03 |jmp short 0053F8F0
0053F8ED |> 2B5D EC |sub ebx, dword ptr [ebp-14]
0053F8F0 |> 8D45 D0 |lea eax, dword ptr [ebp-30]
0053F8F3 |. 8BD3 |mov edx, ebx
0053F8F5 |. E8 DE50ECFF |call 004049D8
0053F8FA |. 8B55 D0 |mov edx, dword ptr [ebp-30]
0053F8FD |. 8D45 E8 |lea eax, dword ptr [ebp-18]
0053F900 |. E8 B351ECFF |call 00404AB8
0053F905 |. 8B45 E4 |mov eax, dword ptr [ebp-1C]
0053F908 |. 8945 EC |mov dword ptr [ebp-14], eax
0053F90B |. 83C6 02 |add esi, 2
0053F90E |. 8B45 FC |mov eax, dword ptr [ebp-4]
0053F911 |. E8 9A51ECFF |call 00404AB0
0053F916 |. 3BF0 |cmp esi, eax
0053F918 |.^ 0F8C 78FFFFFF \jl 0053F896
谢谢
[课程]Android-CTF解题方法汇总!