文章目錄

• • 代碼分析
  • • 腳本1
    • 腳本2

代碼分析

for ( i = 0; i < 32; i += 8 ){for ( j = 0; j < 128; ++j ){v10 = &Str[i];if ( *(int *)&Str[i + 4] >= 0 ) {*(_QWORD *)v10 *= 2i64; }else{*(_QWORD *)v10 *= 2i64; v3 = *((_DWORD *)v10 + 1) ^ 0xB0004B76;v4 = v10;*(_DWORD *)v10 ^= 0x79FA26B7u;*((_DWORD *)v4 + 1) = v3;}}}sub_4010F0(Str);v12 = 0;if ( sub_4012D5(dword_413000) )v5 = sub_401267(std::cout, "No");elsev5 = sub_401267(std::cout, "yeah, got it");std::ostream::operator<<(v5, sub_401050);system("pause");v12 = -1;sub_4012CB(v7);

if ( *(int *)&Str[i + 4] >= 0 ) {*(_QWORD *)v10 *= 2i64;}

代表高4字節(jié)的int值是否大于0，大于0的話，最高位符號(hào)位就是0，小于0的話，最高位符號(hào)位就為1，因?yàn)槌艘?把符號(hào)移出，所以最后進(jìn)行相與得出。
這里的話寫結(jié)果為偶數(shù)的判斷。

else{*(_QWORD *)v10 *= 2i64; v3 = *((_DWORD *)v10 + 1) ^ 0xB0004B76;v4 = v10;*(_DWORD *)v10 ^= 0x79FA26B7u;*((_DWORD *)v4 + 1) = v3;}

偶數(shù)就代表最低位為0，奇數(shù)就代表最低位為1，然后最低位肯定是1，所以下面偶數(shù)異或奇數(shù)，最后肯定是奇數(shù)，if判斷中就寫結(jié)果為奇數(shù)的判斷,

腳本1

a = [0x6054BB493C0FB65B, 0x11F144F66B5307DD, 0x4ED8899358F90DE1,0x60DF9B37738E1706] for i in range(len(a)):for j in range(128):if a[i]%2==0:a[i]//=2else:a[i]^=0xB0004B7679FA26B7a[i]//=2a[i] |= 0x8000000000000000 for i in range(len(a)):print(chr(a[i]&0xff),end='')print(chr((a[i]>>8) & 0xff),end='')print(chr((a[i]>>8*2) & 0xff),end='')print(chr((a[i]>>8*3) & 0xff),end='')print(chr((a[i]>>8*4) & 0xff),end='')print(chr((a[i]>>8*5) & 0xff),end='')print(chr((a[i] >> 8 * 6) & 0xff), end='')print(chr((a[i] >> 8 * 7) & 0xff), end='') f96ea7f314e5834a29930ca76aa0f29f

腳本2

a=[0x3C0FB65B,0x6054BB49,0x6B5307DD,0x11F144F6,0x58F90DE1,0x4ED88993,0x738E1706,0x60DF9B37] for i in range(0,len(a),2):for j in range(128):if ((a[i+1]<<32)+a[i])%2==0:temp=((a[i+1]<<32)+a[i])//2a[i]=temp&0xffffffffa[i + 1] = temp>>32else:a[i]^=0x79FA26B7a[i+1]^=0xB0004B76temp = (((a[i + 1] << 32) + a[i]) // 2)|0x8000000000000000a[i] = temp & 0xffffffffa[i + 1] = temp >> 32 for i in range(len(a)):print(chr(a[i] & 0xff), end='')print(chr((a[i] >> 8) & 0xff), end='')print(chr((a[i] >> 8 * 2) & 0xff), end='')print(chr((a[i] >> 8 * 3) & 0xff), end='') f96ea7f314e5834a29930ca76aa0f29f

總結(jié)

以上是生活随笔為你收集整理的Re题目------Enm.exe的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。