飘云阁安全论坛

 找回密码
 快速注册

QQ登录

只需一步,快速开始

查看: 549|回复: 8

[原创] 来玩无壳CM,解出有红包

[复制链接]
  • TA的每日心情
    开心
    2021-7-27 17:21
  • 签到天数: 9 天

    [LV.3]偶尔看看II

    发表于 7 天前 | 显示全部楼层 |阅读模式
    给表哥们出了个有奖CM,没有讨厌的VM和壳。题目很easy,只有一个简单的算法。得到正确的口令,可以使用支付宝领取口令红包,共计5个红包,先到先得。红包默认24小时后过期,看情况决定是否续时。


    CM0.zip

    5.66 KB, 下载次数: 30, 下载积分: 飘云币 -2 枚

  • TA的每日心情
    开心
    2019-2-26 11:14
  • 签到天数: 459 天

    [LV.9]以坛为家II

    发表于 7 天前 | 显示全部楼层
    抠搜的表哥
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    开心
    2021-7-27 17:21
  • 签到天数: 9 天

    [LV.3]偶尔看看II

     楼主| 发表于 7 天前 | 显示全部楼层


    看这么大的红包,还说抠搜不
    Screenshot_20210910.png
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    开心
    2019-3-14 10:36
  • 签到天数: 44 天

    [LV.5]常住居民I

    发表于 6 天前 | 显示全部楼层
    这。。。放水了?
    可以穷举啊。

    dK@#b_B!cnUVt/UulNat&WsxF[T@


    点评

    大Z哥还是大Z哥 第一个解出来  详情 回复 发表于 6 天前
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    开心
    2019-3-25 15:21
  • 签到天数: 487 天

    [LV.9]以坛为家II

    发表于 6 天前 | 显示全部楼层
    zenix 发表于 2021-9-11 01:17
    这。。。放水了?
    可以穷举啊。

    大Z哥还是大Z哥 第一个解出来
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    无聊
    11 小时前
  • 签到天数: 17 天

    [LV.4]偶尔看看III

    发表于 5 天前 | 显示全部楼层
    1.png
    hash key
    2.png

    转到生成函数
    [AppleScript] 纯文本查看 复制代码
    00361000 | 55                       | push ebp                                |
    00361001 | 53                       | push ebx                                |
    00361002 | 57                       | push edi                                |
    00361003 | 56                       | push esi                                |
    00361004 | 81EC 88000000            | sub esp,88                              |
    0036100A | 8B8424 9C000000          | mov eax,dword ptr ss:[esp+9C]           |
    00361011 | BD 00203B00              | mov ebp,[lamp-ret.fun]_cm (1).3B2000    |
    00361016 | C74424 3C 00000000       | mov dword ptr ss:[esp+3C],0             |
    0036101E | C74424 30 00000000       | mov dword ptr ss:[esp+30],0             |
    00361026 | EB 23                    | jmp [lamp-ret.fun]_cm (1).36104B        |
    00361028 | 0F1F8400 00000000        | nop dword ptr ds:[eax+eax],eax          |
    00361030 | FF4424 30                | inc dword ptr ss:[esp+30]               |
    00361034 | 814424 3C 00400000       | add dword ptr ss:[esp+3C],4000          |
    0036103C | 8B8424 9C000000          | mov eax,dword ptr ss:[esp+9C]           |
    00361043 | 89FD                     | mov ebp,edi                             |
    00361045 | 81C5 00600000            | add ebp,6000                            |
    0036104B | 0FB650 0A                | movzx edx,byte ptr ds:[eax+A]           |
    0036104F | 0FB648 05                | movzx ecx,byte ptr ds:[eax+5]           |
    00361053 | 0FB658 09                | movzx ebx,byte ptr ds:[eax+9]           |
    00361057 | 0FB678 06                | movzx edi,byte ptr ds:[eax+6]           |
    0036105B | 0FB670 0B                | movzx esi,byte ptr ds:[eax+B]           |
    0036105F | 895424 0C                | mov dword ptr ss:[esp+C],edx            |
    00361063 | 0FB650 0F                | movzx edx,byte ptr ds:[eax+F]           |
    00361067 | 894C24 28                | mov dword ptr ss:[esp+28],ecx           |
    0036106B | 895C24 14                | mov dword ptr ss:[esp+14],ebx           |
    0036106F | 895424 08                | mov dword ptr ss:[esp+8],edx            |
    00361073 | 0FB650 0E                | movzx edx,byte ptr ds:[eax+E]           |
    00361077 | 895424 1C                | mov dword ptr ss:[esp+1C],edx           |
    0036107B | 0FB650 03                | movzx edx,byte ptr ds:[eax+3]           |
    0036107F | 895424 18                | mov dword ptr ss:[esp+18],edx           |
    00361083 | 0FB650 0D                | movzx edx,byte ptr ds:[eax+D]           |
    00361087 | 895424 2C                | mov dword ptr ss:[esp+2C],edx           |
    0036108B | 0FB650 02                | movzx edx,byte ptr ds:[eax+2]           |
    0036108F | 895424 04                | mov dword ptr ss:[esp+4],edx            |
    00361093 | 0FB650 07                | movzx edx,byte ptr ds:[eax+7]           |
    00361097 | 895424 20                | mov dword ptr ss:[esp+20],edx           |
    0036109B | 0FB650 01                | movzx edx,byte ptr ds:[eax+1]           |
    0036109F | 8848 01                  | mov byte ptr ds:[eax+1],cl              |
    003610A2 | 8B4C24 0C                | mov ecx,dword ptr ss:[esp+C]            |
    003610A6 | 8848 02                  | mov byte ptr ds:[eax+2],cl              |
    003610A9 | 8B4C24 08                | mov ecx,dword ptr ss:[esp+8]            |
    003610AD | 895424 10                | mov dword ptr ss:[esp+10],edx           |
    003610B1 | 8848 03                  | mov byte ptr ds:[eax+3],cl              |
    003610B4 | 8B4C24 1C                | mov ecx,dword ptr ss:[esp+1C]           |
    003610B8 | 8858 05                  | mov byte ptr ds:[eax+5],bl              |
    003610BB | 8B5C24 2C                | mov ebx,dword ptr ss:[esp+2C]           |
    003610BF | 8848 06                  | mov byte ptr ds:[eax+6],cl              |
    003610C2 | 8B4C24 18                | mov ecx,dword ptr ss:[esp+18]           |
    003610C6 | 8848 07                  | mov byte ptr ds:[eax+7],cl              |
    003610C9 | 8B4C24 04                | mov ecx,dword ptr ss:[esp+4]            |
    003610CD | 8858 09                  | mov byte ptr ds:[eax+9],bl              |
    003610D0 | 8848 0A                  | mov byte ptr ds:[eax+A],cl              |
    003610D3 | 8B4C24 20                | mov ecx,dword ptr ss:[esp+20]           |
    003610D7 | 8848 0B                  | mov byte ptr ds:[eax+B],cl              |
    003610DA | 89F1                     | mov ecx,esi                             |
    003610DC | 8B7424 30                | mov esi,dword ptr ss:[esp+30]           |
    003610E0 | 8850 0D                  | mov byte ptr ds:[eax+D],dl              |
    003610E3 | 89FA                     | mov edx,edi                             |
    003610E5 | 89C7                     | mov edi,eax                             |
    003610E7 | 8850 0E                  | mov byte ptr ds:[eax+E],dl              |
    003610EA | 8848 0F                  | mov byte ptr ds:[eax+F],cl              |
    003610ED | 83FE 09                  | cmp esi,9                               | 9:'\t'
    003610F0 | 0F84 F4090000            | je [lamp-ret.fun]_cm (1).361AEA         |
    003610F6 | 8B4424 3C                | mov eax,dword ptr ss:[esp+3C]           |
    003610FA | 31C9                     | xor ecx,ecx                             |
    003610FC | C74424 1C 00000000       | mov dword ptr ss:[esp+1C],0             |
    00361104 | C74424 20 FFFFFFFF       | mov dword ptr ss:[esp+20],FFFFFFFF      |
    0036110C | C74424 0C 00000000       | mov dword ptr ss:[esp+C],0              |
    00361114 | C74424 50 00000000       | mov dword ptr ss:[esp+50],0             |
    0036111C | 892C24                   | mov dword ptr ss:[esp],ebp              |
    0036111F | 894424 28                | mov dword ptr ss:[esp+28],eax           |
    00361123 | B8 FFFFFFFF              | mov eax,FFFFFFFF                        |
    00361128 | 0F1F8400 00000000        | nop dword ptr ds:[eax+eax],eax          |
    00361130 | 89C7                     | mov edi,eax                             |
    00361132 | 89CD                     | mov ebp,ecx                             |
    00361134 | 894424 4C                | mov dword ptr ss:[esp+4C],eax           |
    00361138 | 25 558D33BC              | and eax,BC338D55                        |
    0036113D | 81E1 AA72CC43            | and ecx,43CC72AA                        |
    00361143 | 8B9C24 9C000000          | mov ebx,dword ptr ss:[esp+9C]           |
    0036114A | 8B5424 30                | mov edx,dword ptr ss:[esp+30]           |
    0036114E | FF4424 50                | inc dword ptr ss:[esp+50]               |
    00361152 | F7D7                     | not edi                                 |
    00361154 | 09C1                     | or ecx,eax                              |
    00361156 | 896C24 2C                | mov dword ptr ss:[esp+2C],ebp           |
    0036115A | 89F8                     | mov eax,edi                             |
    0036115C | 81F1 548D33BC            | xor ecx,BC338D54                        |
    00361162 | 83E7 03                  | and edi,3                               |
    00361165 | 83E0 01                  | and eax,1                               |
    00361168 | 09C8                     | or eax,ecx                              |
    0036116A | C1E2 0E                  | shl edx,E                               |
    0036116D | 0FB63403                 | movzx esi,byte ptr ds:[ebx+eax]         |
    00361171 | 894424 40                | mov dword ptr ss:[esp+40],eax           |
    00361175 | C1E0 0A                  | shl eax,A                               |
    00361178 | 895424 78                | mov dword ptr ss:[esp+78],edx           |
    0036117C | 8D8C02 00603600          | lea ecx,dword ptr ds:[edx+eax+366000]   |
    00361183 | 898424 84000000          | mov dword ptr ss:[esp+84],eax           |
    0036118A | 8B04B1                   | mov eax,dword ptr ds:[ecx+esi*4]        |
    0036118D | 89E9                     | mov ecx,ebp                             |
    0036118F | 83F1 02                  | xor ecx,2                               |
    00361192 | 894424 04                | mov dword ptr ss:[esp+4],eax            |
    00361196 | 89E8                     | mov eax,ebp                             |
    00361198 | 83E0 02                  | and eax,2                               |
    0036119B | 09C1                     | or ecx,eax                              |
    0036119D | 0FB6340B                 | movzx esi,byte ptr ds:[ebx+ecx]         |
    003611A1 | 89C8                     | mov eax,ecx                             |
    003611A3 | 894C24 44                | mov dword ptr ss:[esp+44],ecx           |
    003611A7 | C1E0 0A                  | shl eax,A                               |
    003611AA | 8D8C02 00603600          | lea ecx,dword ptr ds:[edx+eax+366000]   |
    003611B1 | 898424 80000000          | mov dword ptr ss:[esp+80],eax           |
    003611B8 | 8B04B1                   | mov eax,dword ptr ds:[ecx+esi*4]        |
    003611BB | 89E9                     | mov ecx,ebp                             |
    003611BD | 81E1 0D8D6122            | and ecx,22618D0D                        |
    003611C3 | 894424 10                | mov dword ptr ss:[esp+10],eax           |
    003611C7 | 8B4424 4C                | mov eax,dword ptr ss:[esp+4C]           |
    003611CB | 25 F2729EDD              | and eax,DD9E72F2                        |
    003611D0 | 09C1                     | or ecx,eax                              |
    003611D2 | 81F1 F1729EDD            | xor ecx,DD9E72F1                        |
    003611D8 | 09CF                     | or edi,ecx                              |
    003611DA | 0FB6043B                 | movzx eax,byte ptr ds:[ebx+edi]         |
    003611DE | 89F9                     | mov ecx,edi                             |
    003611E0 | 897C24 48                | mov dword ptr ss:[esp+48],edi           |
    003611E4 | C1E1 0A                  | shl ecx,A                               |
    003611E7 | 894C24 7C                | mov dword ptr ss:[esp+7C],ecx           |
    003611EB | 8D8C0A 00603600          | lea ecx,dword ptr ds:[edx+ecx+366000]   |
    003611F2 | 8B5424 04                | mov edx,dword ptr ss:[esp+4]            |
    003611F6 | 8B3481                   | mov esi,dword ptr ds:[ecx+eax*4]        |
    003611F9 | 0FB6042B                 | movzx eax,byte ptr ds:[ebx+ebp]         |
    003611FD | 8B4C24 28                | mov ecx,dword ptr ss:[esp+28]           |
    00361201 | 8B6C24 1C                | mov ebp,dword ptr ss:[esp+1C]           |
    00361205 | C1EA 1C                  | shr edx,1C                              |
    00361208 | 8B8481 00603600          | mov eax,dword ptr ds:[ecx+eax*4+366000] |
    0036120F | 89EF                     | mov edi,ebp                             |
    00361211 | 89F3                     | mov ebx,esi                             |
    00361213 | 897424 18                | mov dword ptr ss:[esp+18],esi           |
    00361217 | 896C24 1C                | mov dword ptr ss:[esp+1C],ebp           |
    0036121B | 83F7 01                  | xor edi,1                               |
    0036121E | C1EB 1C                  | shr ebx,1C                              |
    00361221 | 89C1                     | mov ecx,eax                             |
    00361223 | 894424 08                | mov dword ptr ss:[esp+8],eax            |
    00361227 | 8B4424 30                | mov eax,dword ptr ss:[esp+30]           |
    0036122B | C1E9 18                  | shr ecx,18                              |
    0036122E | 894C24 14                | mov dword ptr ss:[esp+14],ecx           |
    00361232 | 83E1 F0                  | and ecx,FFFFFFF0                        |
    00361235 | 09CA                     | or edx,ecx                              |
    00361237 | 89E9                     | mov ecx,ebp                             |
    00361239 | 83E1 01                  | and ecx,1                               |
    0036123C | 8D0440                   | lea eax,dword ptr ds:[eax+eax*2]        |
    0036123F | 031424                   | add edx,dword ptr ss:[esp]              |
    00361242 | 09CF                     | or edi,ecx                              |
    00361244 | 8B4C24 10                | mov ecx,dword ptr ss:[esp+10]           |
    00361248 | C1E0 0D                  | shl eax,D                               |
    0036124B | C1E7 08                  | shl edi,8                               |
    0036124E | 894424 34                | mov dword ptr ss:[esp+34],eax           |
    00361252 | 8DB438 00203B00          | lea esi,dword ptr ds:[eax+edi+3B2000]   |
    00361259 | 89C7                     | mov edi,eax                             |
    0036125B | 8B4424 0C                | mov eax,dword ptr ss:[esp+C]            |
    0036125F | 897424 74                | mov dword ptr ss:[esp+74],esi           |
    00361263 | C1E9 18                  | shr ecx,18                              |
    00361266 | 83E1 F0                  | and ecx,FFFFFFF0                        |
    00361269 | 01F1                     | add ecx,esi                             |
    0036126B | 0FB6340B                 | movzx esi,byte ptr ds:[ebx+ecx]         |
    0036126F | 89E9                     | mov ecx,ebp                             |
    00361271 | 89EB                     | mov ebx,ebp                             |
    00361273 | 81E5 67BBA900            | and ebp,A9BB67                          |
    00361279 | 83E1 04                  | and ecx,4                               |
    0036127C | 83F3 04                  | xor ebx,4                               |
    0036127F | 09CB                     | or ebx,ecx                              |
    00361281 | 0FB60C10                 | movzx ecx,byte ptr ds:[eax+edx]         |
    00361285 | C1E3 08                  | shl ebx,8                               |
    00361288 | 8D941F 00203B00          | lea edx,dword ptr ds:[edi+ebx+3B2000]   |
    0036128F | 8B7C24 04                | mov edi,dword ptr ss:[esp+4]            |
    00361293 | 895424 70                | mov dword ptr ss:[esp+70],edx           |
    00361297 | C1E1 04                  | shl ecx,4                               |
    0036129A | 01D1                     | add ecx,edx                             |
    0036129C | 0FB6040E                 | movzx eax,byte ptr ds:[esi+ecx]         |
    003612A0 | 8B7424 20                | mov esi,dword ptr ss:[esp+20]           |
    003612A4 | C1EF 18                  | shr edi,18                              |
    003612A7 | 884424 38                | mov byte ptr ss:[esp+38],al             |
    003612AB | 8B4424 14                | mov eax,dword ptr ss:[esp+14]           |
    003612AF | 89F3                     | mov ebx,esi                             |
    003612B1 | 89F2                     | mov edx,esi                             |
    003612B3 | 897424 20                | mov dword ptr ss:[esp+20],esi           |
    003612B7 | F7D3                     | not ebx                                 |
    003612B9 | 89C1                     | mov ecx,eax                             |
    003612BB | 81F1 F0000000            | xor ecx,F0                              |
    003612C1 | 21C1                     | and ecx,eax                             |
    003612C3 | 89F0                     | mov eax,esi                             |
    003612C5 | 8B7424 34                | mov esi,dword ptr ss:[esp+34]           |
    003612C9 | 25 98445600              | and eax,564498                          |
    003612CE | C1E1 04                  | shl ecx,4                               |
    003612D1 | 09C5                     | or ebp,eax                              |
    003612D3 | 89D8                     | mov eax,ebx                             |
    003612D5 | 81F5 9A445600            | xor ebp,56449A                          |
    003612DB | 83E0 02                  | and eax,2                               |
    003612DE | 09E8                     | or eax,ebp                              |
    003612E0 | 89FD                     | mov ebp,edi                             |
    003612E2 | 81F5 F0000000            | xor ebp,F0                              |
    003612E8 | C1E0 08                  | shl eax,8                               |
    003612EB | 21FD                     | and ebp,edi                             |
    003612ED | 8B7C24 1C                | mov edi,dword ptr ss:[esp+1C]           |
    003612F1 | 8D8406 00203B00          | lea eax,dword ptr ds:[esi+eax+3B2000]   |
    003612F8 | 01C1                     | add ecx,eax                             |
    003612FA | 894424 6C                | mov dword ptr ss:[esp+6C],eax           |
    003612FE | 89D0                     | mov eax,edx                             |
    00361300 | 0FB65424 38              | movzx edx,byte ptr ss:[esp+38]          |
    00361305 | 25 02F37600              | and eax,76F302                          |
    0036130A | 0FB64C0D 00              | movzx ecx,byte ptr ss:[ebp+ecx]         |
    0036130F | 89DD                     | mov ebp,ebx                             |
    00361311 | 83E3 05                  | and ebx,5                               |
    00361314 | 83E5 03                  | and ebp,3                               |
    00361317 | 81E7 FD0C8900            | and edi,890CFD                          |
    0036131D | 09C7                     | or edi,eax                              |
    0036131F | 8B4424 10                | mov eax,dword ptr ss:[esp+10]           |
    00361323 | C0E2 04                  | shl dl,4                                |
    00361326 | 81F7 01F37600            | xor edi,76F301                          |
    0036132C | C1E1 04                  | shl ecx,4                               |
    0036132F | 09FD                     | or ebp,edi                              |
    00361331 | 8B7C24 18                | mov edi,dword ptr ss:[esp+18]           |
    00361335 | C1E5 08                  | shl ebp,8                               |
    00361338 | C1E8 14                  | shr eax,14                              |
    0036133B | 8DAC2E 00203B00          | lea ebp,dword ptr ds:[esi+ebp+3B2000]   |
    00361342 | 894424 14                | mov dword ptr ss:[esp+14],eax           |
    00361346 | 25 F0000000              | and eax,F0                              |
    0036134B | 896C24 68                | mov dword ptr ss:[esp+68],ebp           |
    0036134F | C1EF 18                  | shr edi,18                              |
    00361352 | 01E8                     | add eax,ebp                             |
    00361354 | 8B6C24 1C                | mov ebp,dword ptr ss:[esp+1C]           |
    00361358 | 83E7 0F                  | and edi,F                               |
    0036135B | 0FB60407                 | movzx eax,byte ptr ds:[edi+eax]         |
    0036135F | 8B7C24 20                | mov edi,dword ptr ss:[esp+20]           |
    00361363 | 834424 20 E8             | add dword ptr ss:[esp+20],FFFFFFE8      |
    00361368 | 81E5 A8AD6700            | and ebp,67ADA8                          |
    0036136E | 81E7 57529800            | and edi,985257                          |
    00361374 | 09FD                     | or ebp,edi                              |
    00361376 | 81F5 52529800            | xor ebp,985252                          |
    0036137C | 09EB                     | or ebx,ebp                              |
    0036137E | 8B6C24 08                | mov ebp,dword ptr ss:[esp+8]            |
    00361382 | C1E3 08                  | shl ebx,8                               |
    00361385 | 8DB41E 00203B00          | lea esi,dword ptr ds:[esi+ebx+3B2000]   |
    0036138C | 89D3                     | mov ebx,edx                             |
    0036138E | 80CA 08                  | or dl,8                                 |
    00361391 | 01F1                     | add ecx,esi                             |
    00361393 | 897424 64                | mov dword ptr ss:[esp+64],esi           |
    00361397 | 8B7424 1C                | mov esi,dword ptr ss:[esp+1C]           |
    0036139B | F6D3                     | not bl                                  |
    0036139D | 8A3408                   | mov dh,byte ptr ds:[eax+ecx]            |
    003613A0 | 8B4C24 14                | mov ecx,dword ptr ss:[esp+14]           |
    003613A4 | 89C8                     | mov eax,ecx                             |
    003613A6 | 35 F00F0000              | xor eax,FF0                             |
    003613AB | 21C8                     | and eax,ecx                             |
    003613AD | 89F1                     | mov ecx,esi                             |
    003613AF | 83F6 06                  | xor esi,6                               |
    003613B2 | 83E1 06                  | and ecx,6                               |
    003613B5 | C1E0 04                  | shl eax,4                               |
    003613B8 | 09CE                     | or esi,ecx                              |
    003613BA | 8B4C24 04                | mov ecx,dword ptr ss:[esp+4]            |
    003613BE | C1E6 08                  | shl esi,8                               |
    003613C1 | C1E9 14                  | shr ecx,14                              |
    003613C4 | 89CF                     | mov edi,ecx                             |
    003613C6 | 81F7 F00F0000            | xor edi,FF0                             |
    003613CC | 21CF                     | and edi,ecx                             |
    003613CE | 88F1                     | mov cl,dh                               |
    003613D0 | 80E6 F7                  | and dh,F7                               |
    003613D3 | F6D1                     | not cl                                  |
    003613D5 | 08CB                     | or bl,cl                                |
    003613D7 | 80E1 08                  | and cl,8                                |
    003613DA | 08CE                     | or dh,cl                                |
    003613DC | F6D3                     | not bl                                  |
    003613DE | 8B4C24 2C                | mov ecx,dword ptr ss:[esp+2C]           |
    003613E2 | 30F2                     | xor dl,dh                               |
    003613E4 | 08D3                     | or bl,dl                                |
    003613E6 | 8B9424 9C000000          | mov edx,dword ptr ss:[esp+9C]           |
    003613ED | 885C24 27                | mov byte ptr ss:[esp+27],bl             |
    003613F1 | 881C0A                   | mov byte ptr ds:[edx+ecx],bl            |
    003613F4 | 8B5C24 34                | mov ebx,dword ptr ss:[esp+34]           |
    003613F8 | 89E9                     | mov ecx,ebp                             |
    003613FA | C1E9 10                  | shr ecx,10                              |
    003613FD | 81E1 F0000000            | and ecx,F0                              |
    00361403 | 8D9433 00203B00          | lea edx,dword ptr ds:[ebx+esi+3B2000]   |
    0036140A | 01D1                     | add ecx,edx                             |
    0036140C | 895424 38                | mov dword ptr ss:[esp+38],edx           |
    00361410 | 8B5424 1C                | mov edx,dword ptr ss:[esp+1C]           |
    00361414 | 834424 1C 18             | add dword ptr ss:[esp+1C],18            |
    00361419 | 0FB60C0F                 | movzx ecx,byte ptr ds:[edi+ecx]         |
    0036141D | 8B7C24 18                | mov edi,dword ptr ss:[esp+18]           |
    00361421 | 894C24 14                | mov dword ptr ss:[esp+14],ecx           |
    00361425 | 89D1                     | mov ecx,edx                             |
    00361427 | 83F2 07                  | xor edx,7                               |
    0036142A | 83E1 07                  | and ecx,7                               |
    0036142D | 09CA                     | or edx,ecx                              |
    0036142F | 89F9                     | mov ecx,edi                             |
    00361431 | C1E9 14                  | shr ecx,14                              |
    00361434 | C1E2 08                  | shl edx,8                               |
    00361437 | 89CE                     | mov esi,ecx                             |
    00361439 | 81F6 F00F0000            | xor esi,FF0                             |
    0036143F | 21CE                     | and esi,ecx                             |
    00361441 | 8D8C13 00203B00          | lea ecx,dword ptr ds:[ebx+edx+3B2000]   |
    00361448 | 89FB                     | mov ebx,edi                             |
    0036144A | 01C8                     | add eax,ecx                             |
    0036144C | 894C24 34                | mov dword ptr ss:[esp+34],ecx           |
    00361450 | 8B4C24 04                | mov ecx,dword ptr ss:[esp+4]            |
    00361454 | 0FB60406                 | movzx eax,byte ptr ds:[esi+eax]         |
    00361458 | C1E9 10                  | shr ecx,10                              |
    0036145B | 89CA                     | mov edx,ecx                             |
    0036145D | 81F2 F0FF0000            | xor edx,FFF0                            |
    00361463 | 21CA                     | and edx,ecx                             |
    00361465 | 89E9                     | mov ecx,ebp                             |
    00361467 | C1E9 0C                  | shr ecx,C                               |
    0036146A | 81E1 F0000000            | and ecx,F0                              |
    00361470 | 01D1                     | add ecx,edx                             |
    00361472 | 89FA                     | mov edx,edi                             |
    00361474 | 8B7C24 10                | mov edi,dword ptr ss:[esp+10]           |
    00361478 | C1EA 10                  | shr edx,10                              |
    0036147B | 030C24                   | add ecx,dword ptr ss:[esp]              |
    0036147E | 89D6                     | mov esi,edx                             |
    00361480 | 81F6 F0FF0000            | xor esi,FFF0                            |
    00361486 | 21D6                     | and esi,edx                             |
    00361488 | 89FA                     | mov edx,edi                             |
    0036148A | C1EA 0C                  | shr edx,C                               |
    0036148D | 81E2 F0000000            | and edx,F0                              |
    00361493 | 01F2                     | add edx,esi                             |
    00361495 | 8B7424 14                | mov esi,dword ptr ss:[esp+14]           |
    00361499 | 031424                   | add edx,dword ptr ss:[esp]              |
    0036149C | C1E6 04                  | shl esi,4                               |
    0036149F | 01C6                     | add esi,eax                             |
    003614A1 | 8B4424 0C                | mov eax,dword ptr ss:[esp+C]            |
    003614A5 | 897424 14                | mov dword ptr ss:[esp+14],esi           |
    003614A9 | 89EE                     | mov esi,ebp                             |
    003614AB | C1EE 04                  | shr esi,4                               |
    003614AE | 81E6 F0000000            | and esi,F0                              |
    003614B4 | 0FB68C08 00080000        | movzx ecx,byte ptr ds:[eax+ecx+800]     |
    003614BC | 0FB68410 00090000        | movzx eax,byte ptr ds:[eax+edx+900]     |
    003614C4 | 8B5424 04                | mov edx,dword ptr ss:[esp+4]            |
    003614C8 | C1E1 04                  | shl ecx,4                               |
    003614CB | 01C1                     | add ecx,eax                             |
    003614CD | 89D0                     | mov eax,edx                             |
    003614CF | C1EA 08                  | shr edx,8                               |
    003614D2 | 894C24 60                | mov dword ptr ss:[esp+60],ecx           |
    003614D6 | 89E9                     | mov ecx,ebp                             |
    003614D8 | C1E8 0C                  | shr eax,C                               |
    003614DB | 89FD                     | mov ebp,edi                             |
    003614DD | C1E9 08                  | shr ecx,8                               |
    003614E0 | 83E0 0F                  | and eax,F                               |
    003614E3 | C1ED 08                  | shr ebp,8                               |
    003614E6 | 81E1 F0000000            | and ecx,F0                              |
    003614EC | 81E5 F0000000            | and ebp,F0                              |
    003614F2 | 09C1                     | or ecx,eax                              |
    003614F4 | 89D8                     | mov eax,ebx                             |
    003614F6 | C1E8 0C                  | shr eax,C                               |
    003614F9 | 894C24 5C                | mov dword ptr ss:[esp+5C],ecx           |
    003614FD | 89C1                     | mov ecx,eax                             |
    003614FF | 81F1 F0FF0F00            | xor ecx,FFFF0                           |
    00361505 | 21C1                     | and ecx,eax                             |
    00361507 | 89F8                     | mov eax,edi                             |
    00361509 | 01CD                     | add ebp,ecx                             |
    0036150B | 89D1                     | mov ecx,edx                             |
    0036150D | 35 F0FFFF0F              | xor eax,FFFFFF0                         |
    00361512 | 81F1 F0FFFF00            | xor ecx,FFFFF0                          |
    00361518 | 032C24                   | add ebp,dword ptr ss:[esp]              |
    0036151B | 21D1                     | and ecx,edx                             |
    0036151D | 01CE                     | add esi,ecx                             |
    0036151F | 89D9                     | mov ecx,ebx                             |
    00361521 | C1E9 08                  | shr ecx,8                               |
    00361524 | 897424 58                | mov dword ptr ss:[esp+58],esi           |
    00361528 | 89CA                     | mov edx,ecx                             |
    0036152A | 81F2 F0FFFF00            | xor edx,FFFFF0                          |
    00361530 | 21CA                     | and edx,ecx                             |
    00361532 | 89F9                     | mov ecx,edi                             |
    00361534 | 8B7C24 0C                | mov edi,dword ptr ss:[esp+C]            |
    00361538 | 21C8                     | and eax,ecx                             |
    0036153A | C1E9 04                  | shr ecx,4                               |
    0036153D | 894424 54                | mov dword ptr ss:[esp+54],eax           |
    00361541 | 8B4424 14                | mov eax,dword ptr ss:[esp+14]           |
    00361545 | 89CE                     | mov esi,ecx                             |
    00361547 | 81F6 F0FFFF0F            | xor esi,FFFFFF0                         |
    0036154D | 21CE                     | and esi,ecx                             |
    0036154F | 81E1 F0000000            | and ecx,F0                              |
    00361555 | 897C24 0C                | mov dword ptr ss:[esp+C],edi            |
    00361559 | 01D1                     | add ecx,edx                             |
    0036155B | C1E6 04                  | shl esi,4                               |
    0036155E | 030424                   | add eax,dword ptr ss:[esp]              |
    00361561 | 030C24                   | add ecx,dword ptr ss:[esp]              |
    00361564 | 8AB407 000A0000          | mov dh,byte ptr ds:[edi+eax+A00]        |
    0036156B | 8B4424 60                | mov eax,dword ptr ss:[esp+60]           |
    0036156F | 030424                   | add eax,dword ptr ss:[esp]              |
    00361572 | C0E6 04                  | shl dh,4                                |
    00361575 | 88F2                     | mov dl,dh                               |
    00361577 | 80E6 10                  | and dh,10                               |
    0036157A | F6D2                     | not dl                                  |
    0036157C | 0FB68407 000B0000        | movzx eax,byte ptr ds:[edi+eax+B00]     |
    00361584 | 88D4                     | mov ah,dl                               |
    00361586 | 80E4 E2                  | and ah,E2                               |
    00361589 | 08E6                     | or dh,ah                                |
    0036158B | 88C4                     | mov ah,al                               |
    0036158D | 24 1D                    | and al,1D                               |
    0036158F | F6D4                     | not ah                                  |
    00361591 | 08E2                     | or dl,ah                                |
    00361593 | 80E4 E2                  | and ah,E2                               |
    00361596 | 08E0                     | or al,ah                                |
    00361598 | F6D2                     | not dl                                  |
    0036159A | 30F0                     | xor al,dh                               |
    0036159C | 08C2                     | or dl,al                                |
    0036159E | 8B4424 40                | mov eax,dword ptr ss:[esp+40]           |
    003615A2 | 885424 10                | mov byte ptr ss:[esp+10],dl             |
    003615A6 | 8B9424 9C000000          | mov edx,dword ptr ss:[esp+9C]           |
    003615AD | 0FB65C24 10              | movzx ebx,byte ptr ss:[esp+10]          |
    003615B2 | 881C02                   | mov byte ptr ds:[edx+eax],bl            |
    003615B5 | 8B5424 5C                | mov edx,dword ptr ss:[esp+5C]           |
    003615B9 | 89F8                     | mov eax,edi                             |
    003615BB | 8B5C24 08                | mov ebx,dword ptr ss:[esp+8]            |
    003615BF | 0FB6AC2F 000D0000        | movzx ebp,byte ptr ds:[edi+ebp+D00]     |
    003615C7 | 0FB68C08 000F0000        | movzx ecx,byte ptr ds:[eax+ecx+F00]     |
    003615CF | 031424                   | add edx,dword ptr ss:[esp]              |
    003615D2 | 83E3 0F                  | and ebx,F                               |
    003615D5 | C1E3 04                  | shl ebx,4                               |
    003615D8 | 0FB69417 000C0000        | movzx edx,byte ptr ds:[edi+edx+C00]     |
    003615E0 | 8B7C24 58                | mov edi,dword ptr ss:[esp+58]           |
    003615E4 | 033C24                   | add edi,dword ptr ss:[esp]              |
    003615E7 | C1E2 04                  | shl edx,4                               |
    003615EA | 01EA                     | add edx,ebp                             |
    003615EC | 031424                   | add edx,dword ptr ss:[esp]              |
    003615EF | 0FB6BC38 000E0000        | movzx edi,byte ptr ds:[eax+edi+E00]     |
    003615F7 | 8B4424 04                | mov eax,dword ptr ss:[esp+4]            |
    003615FB | C1E7 04                  | shl edi,4                               |
    003615FE | 01CF                     | add edi,ecx                             |
    00361600 | 89C1                     | mov ecx,eax                             |
    00361602 | 83F1 F0                  | xor ecx,FFFFFFF0                        |
    00361605 | 033C24                   | add edi,dword ptr ss:[esp]              |
    00361608 | 21C1                     | and ecx,eax                             |
    0036160A | C1E8 04                  | shr eax,4                               |
    0036160D | 89C5                     | mov ebp,eax                             |
    0036160F | 01CB                     | add ebx,ecx                             |
    00361611 | 8B4C24 18                | mov ecx,dword ptr ss:[esp+18]           |
    00361615 | 81F5 F0FFFF0F            | xor ebp,FFFFFF0                         |
    0036161B | 21C5                     | and ebp,eax                             |
    0036161D | 8B4424 08                | mov eax,dword ptr ss:[esp+8]            |
    00361621 | 895C24 08                | mov dword ptr ss:[esp+8],ebx            |
    00361625 | 8B5C24 54                | mov ebx,dword ptr ss:[esp+54]           |
    00361629 | 83E1 0F                  | and ecx,F                               |
    0036162C | 25 F0000000              | and eax,F0                              |
    00361631 | C1E3 04                  | shl ebx,4                               |
    00361634 | 01E8                     | add eax,ebp                             |
    00361636 | 8B6C24 18                | mov ebp,dword ptr ss:[esp+18]           |
    0036163A | 09CB                     | or ebx,ecx                              |
    0036163C | 030424                   | add eax,dword ptr ss:[esp]              |
    0036163F | 031C24                   | add ebx,dword ptr ss:[esp]              |
    00361642 | C1ED 04                  | shr ebp,4                               |
    00361645 | 83E5 0F                  | and ebp,F                               |
    00361648 | 09EE                     | or esi,ebp                              |
    0036164A | 8B6C24 0C                | mov ebp,dword ptr ss:[esp+C]            |
    0036164E | 033424                   | add esi,dword ptr ss:[esp]              |
    00361651 | 0FB68C15 00100000        | movzx ecx,byte ptr ss:[ebp+edx+1000]    |
    00361659 | 0FB6943D 00110000        | movzx edx,byte ptr ss:[ebp+edi+1100]    |
    00361661 | 8BBC24 9C000000          | mov edi,dword ptr ss:[esp+9C]           |
    00361668 | C0E1 04                  | shl cl,4                                |
    0036166B | 88CD                     | mov ch,cl                               |
    0036166D | 30D1                     | xor cl,dl                               |
    0036166F | 20D5                     | and ch,dl                               |
    00361671 | 8B5424 44                | mov edx,dword ptr ss:[esp+44]           |
    00361675 | 08E9                     | or cl,ch                                |
    00361677 | 880C17                   | mov byte ptr ds:[edi+edx],cl            |
    0036167A | 0FB6C9                   | movzx ecx,cl                            |
    0036167D | 0FB68405 00120000        | movzx eax,byte ptr ss:[ebp+eax+1200]    |
    00361685 | 0FB69435 00130000        | movzx edx,byte ptr ss:[ebp+esi+1300]    |
    0036168D | 0FB6B41D 00150000        | movzx esi,byte ptr ss:[ebp+ebx+1500]    |
    00361695 | C1E0 04                  | shl eax,4                               |
    00361698 | 01D0                     | add eax,edx                             |
    0036169A | 8B5424 08                | mov edx,dword ptr ss:[esp+8]            |
    0036169E | 030424                   | add eax,dword ptr ss:[esp]              |
    003616A1 | 031424                   | add edx,dword ptr ss:[esp]              |
    003616A4 | 0FB68405 00160000        | movzx eax,byte ptr ss:[ebp+eax+1600]    |
    003616AC | 0FB69415 00140000        | movzx edx,byte ptr ss:[ebp+edx+1400]    |
    003616B4 | C0E0 04                  | shl al,4                                |
    003616B7 | 88C4                     | mov ah,al                               |
    003616B9 | C1E2 04                  | shl edx,4                               |
    003616BC | 01F2                     | add edx,esi                             |
    003616BE | 0FB67424 10              | movzx esi,byte ptr ss:[esp+10]          |
    003616C3 | 031424                   | add edx,dword ptr ss:[esp]              |
    003616C6 | 0FB69415 00170000        | movzx edx,byte ptr ss:[ebp+edx+1700]    |
    003616CE | 20D4                     | and ah,dl                               |
    003616D0 | 30D0                     | xor al,dl                               |
    003616D2 | 8B5424 48                | mov edx,dword ptr ss:[esp+48]           |
    003616D6 | 08E0                     | or al,ah                                |
    003616D8 | 880417                   | mov byte ptr ds:[edi+edx],al            |
    003616DB | 8B7C24 78                | mov edi,dword ptr ss:[esp+78]           |
    003616DF | 8B9424 84000000          | mov edx,dword ptr ss:[esp+84]           |
    003616E6 | 0FB6C0                   | movzx eax,al                            |
    003616E9 | 8D9417 00A03800          | lea edx,dword ptr ds:[edi+edx+38A000]   |
    003616F0 | 8B1CB2                   | mov ebx,dword ptr ds:[edx+esi*4]        |
    003616F3 | 8B9424 80000000          | mov edx,dword ptr ss:[esp+80]           |
    003616FA | 8DB417 00A03800          | lea esi,dword ptr ds:[edi+edx+38A000]   |
    00361701 | 895C24 10                | mov dword ptr ss:[esp+10],ebx           |
    00361705 | 8B2C8E                   | mov ebp,dword ptr ds:[esi+ecx*4]        |
    00361708 | 8B4C24 7C                | mov ecx,dword ptr ss:[esp+7C]           |
    0036170C | 8D8C0F 00A03800          | lea ecx,dword ptr ds:[edi+ecx+38A000]   |
    00361713 | 8B7C24 0C                | mov edi,dword ptr ss:[esp+C]            |
    00361717 | 896C24 04                | mov dword ptr ss:[esp+4],ebp            |
    0036171B | 8B1481                   | mov edx,dword ptr ds:[ecx+eax*4]        |
    0036171E | 8B4424 28                | mov eax,dword ptr ss:[esp+28]           |
    00361722 | 0FB64C24 27              | movzx ecx,byte ptr ss:[esp+27]          |
    00361727 | 814424 28 00100000       | add dword ptr ss:[esp+28],1000          |
    0036172F | 8B8C88 00A03800          | mov ecx,dword ptr ds:[eax+ecx*4+38A000] |
    00361736 | 89D8                     | mov eax,ebx                             |
    00361738 | C1EB 1C                  | shr ebx,1C                              |
    0036173B | 895424 08                | mov dword ptr ss:[esp+8],edx            |
    0036173F | C1E8 18                  | shr eax,18                              |
    00361742 | 894C24 18                | mov dword ptr ss:[esp+18],ecx           |
    00361746 | C1E9 18                  | shr ecx,18                              |
    00361749 | 89CE                     | mov esi,ecx                             |
    0036174B | 83E1 0F                  | and ecx,F                               |
    0036174E | 83E6 F0                  | and esi,FFFFFFF0                        |
    00361751 | C1E1 04                  | shl ecx,4                               |
    00361754 | 09F3                     | or ebx,esi                              |
    00361756 | 89EE                     | mov esi,ebp                             |
    00361758 | 89D5                     | mov ebp,edx                             |
    0036175A | 034C24 6C                | add ecx,dword ptr ss:[esp+6C]           |
    0036175E | 031C24                   | add ebx,dword ptr ss:[esp]              |
    00361761 | C1EE 18                  | shr esi,18                              |
    00361764 | C1ED 1C                  | shr ebp,1C                              |
    00361767 | 83E6 F0                  | and esi,FFFFFFF0                        |
    0036176A | 037424 74                | add esi,dword ptr ss:[esp+74]           |
    0036176E | 0FB61C1F                 | movzx ebx,byte ptr ds:[edi+ebx]         |
    00361772 | 89D7                     | mov edi,edx                             |
    00361774 | 0FB67435 00              | movzx esi,byte ptr ss:[ebp+esi]         |
    00361779 | 89C5                     | mov ebp,eax                             |
    0036177B | 81F5 F0000000            | xor ebp,F0                              |
    00361781 | C1E3 04                  | shl ebx,4                               |
    00361784 | 21C5                     | and ebp,eax                             |
    00361786 | 89D0                     | mov eax,edx                             |
    00361788 | 8B5424 2C                | mov edx,dword ptr ss:[esp+2C]           |
    0036178C | 035C24 70                | add ebx,dword ptr ss:[esp+70]           |
    00361790 | 0FB64C0D 00              | movzx ecx,byte ptr ss:[ebp+ecx]         |
    00361795 | C1E8 18                  | shr eax,18                              |
    00361798 | 83E0 0F                  | and eax,F                               |
    0036179B | 0FB61C1E                 | movzx ebx,byte ptr ds:[esi+ebx]         |
    0036179F | 8B7424 04                | mov esi,dword ptr ss:[esp+4]            |
    003617A3 | C1E1 04                  | shl ecx,4                               |
    003617A6 | 034C24 64                | add ecx,dword ptr ss:[esp+64]           |
    003617AA | C1EE 14                  | shr esi,14                              |
    003617AD | C0E3 04                  | shl bl,4                                |
    003617B0 | 89F5                     | mov ebp,esi                             |
    003617B2 | 81E5 F0000000            | and ebp,F0                              |
    003617B8 | 036C24 68                | add ebp,dword ptr ss:[esp+68]           |
    003617BC | 0FB60428                 | movzx eax,byte ptr ds:[eax+ebp]         |
    003617C0 | 89F5                     | mov ebp,esi                             |
    003617C2 | 81F5 F00F0000            | xor ebp,FF0                             |
    003617C8 | 21F5                     | and ebp,esi                             |
    003617CA | C1E5 04                  | shl ebp,4                               |
    003617CD | 8A3C08                   | mov bh,byte ptr ds:[eax+ecx]            |
    003617D0 | 89D9                     | mov ecx,ebx                             |
    003617D2 | 80E3 40                  | and bl,40                               |
    003617D5 | 8B4424 18                | mov eax,dword ptr ss:[esp+18]           |
    003617D9 | 036C24 34                | add ebp,dword ptr ss:[esp+34]           |
    003617DD | F6D1                     | not cl                                  |
    003617DF | 88CD                     | mov ch,cl                               |
    003617E1 | 80E5 BA                  | and ch,BA                               |
    003617E4 | 08EB                     | or bl,ch                                |
    003617E6 | 88FD                     | mov ch,bh                               |
    003617E8 | 80E7 45                  | and bh,45                               |
    003617EB | C1E8 10                  | shr eax,10                              |
    003617EE | F6D5                     | not ch                                  |
    003617F0 | 89C6                     | mov esi,eax                             |
    003617F2 | 08E9                     | or cl,ch                                |
    003617F4 | 80E5 BA                  | and ch,BA                               |
    003617F7 | 81F6 F0FF0000            | xor esi,FFF0                            |
    003617FD | 08EF                     | or bh,ch                                |
    003617FF | F6D1                     | not cl                                  |
    00361801 | 21C6                     | and esi,eax                             |
    00361803 | 25 F0000000              | and eax,F0                              |
    00361808 | 30DF                     | xor bh,bl                               |
    0036180A | 034424 38                | add eax,dword ptr ss:[esp+38]           |
    0036180E | C1E6 04                  | shl esi,4                               |
    00361811 | 08F9                     | or cl,bh                                |
    00361813 | 8B9C24 9C000000          | mov ebx,dword ptr ss:[esp+9C]           |
    0036181A | 880C13                   | mov byte ptr ds:[ebx+edx],cl            |
    0036181D | 8B5424 10                | mov edx,dword ptr ss:[esp+10]           |
    00361821 | 89D1                     | mov ecx,edx                             |
    00361823 | C1E9 14                  | shr ecx,14                              |
    00361826 | 83E1 0F                  | and ecx,F                               |
    00361829 | 0FB60C01                 | movzx ecx,byte ptr ds:[ecx+eax]         |
    0036182D | 89F8                     | mov eax,edi                             |
    0036182F | C1EF 10                  | shr edi,10                              |
    00361832 | C1E8 14                  | shr eax,14                              |
    00361835 | 89C3                     | mov ebx,eax                             |
    00361837 | 81F3 F00F0000            | xor ebx,FF0                             |
    0036183D | 21C3                     | and ebx,eax                             |
    0036183F | C1E1 04                  | shl ecx,4                               |
    00361842 | 0FB6042B                 | movzx eax,byte ptr ds:[ebx+ebp]         |
    00361846 | 89D3                     | mov ebx,edx                             |
    00361848 | C1EB 10                  | shr ebx,10                              |
    0036184B | 89DD                     | mov ebp,ebx                             |
    0036184D | 81F5 F0FF0000            | xor ebp,FFF0                            |
    00361853 | 21DD                     | and ebp,ebx                             |
    00361855 | 8B5C24 04                | mov ebx,dword ptr ss:[esp+4]            |
    00361859 | 01C1                     | add ecx,eax                             |
    0036185B | 01EE                     | add esi,ebp                             |
    0036185D | 030C24                   | add ecx,dword ptr ss:[esp]              |
    00361860 | 033424                   | add esi,dword ptr ss:[esp]              |
    00361863 | C1EB 10                  | shr ebx,10                              |
    00361866 | 89DD                     | mov ebp,ebx                             |
    00361868 | 81F5 F0FF0000            | xor ebp,FFF0                            |
    0036186E | 21DD                     | and ebp,ebx                             |
    00361870 | 89FB                     | mov ebx,edi                             |
    00361872 | 81F3 F0FF0000            | xor ebx,FFF0                            |
    00361878 | C1E5 04                  | shl ebp,4                               |
    0036187B | 21FB                     | and ebx,edi                             |
    0036187D | 8B7C24 0C                | mov edi,dword ptr ss:[esp+C]            |
    00361881 | 01DD                     | add ebp,ebx                             |
    00361883 | 032C24                   | add ebp,dword ptr ss:[esp]              |
    00361886 | 0FB68437 00080000        | movzx eax,byte ptr ds:[edi+esi+800]     |
    0036188E | 0FB68C0F 000A0000        | movzx ecx,byte ptr ds:[edi+ecx+A00]     |
    00361896 | 8B7424 08                | mov esi,dword ptr ss:[esp+8]            |
    0036189A | 0FB6942F 00090000        | movzx edx,byte ptr ds:[edi+ebp+900]     |
    003618A2 | 8B6C24 18                | mov ebp,dword ptr ss:[esp+18]           |
    003618A6 | C1E0 04                  | shl eax,4                               |
    003618A9 | C0E1 04                  | shl cl,4                                |
    003618AC | C1EE 08                  | shr esi,8                               |
    003618AF | 01D0                     | add eax,edx                             |
    003618B1 | 89CA                     | mov edx,ecx                             |
    003618B3 | 80E1 B0                  | and cl,B0                               |
    003618B6 | 030424                   | add eax,dword ptr ss:[esp]              |
    003618B9 | F6D2                     | not dl                                  |
    003618BB | 0FB68407 000B0000        | movzx eax,byte ptr ds:[edi+eax+B00]     |
    003618C3 | 88D4                     | mov ah,dl                               |
    003618C5 | 8B7C24 10                | mov edi,dword ptr ss:[esp+10]           |
    003618C9 | 80E4 48                  | and ah,48                               |
    003618CC | 08E1                     | or cl,ah                                |
    003618CE | 88C4                     | mov ah,al                               |
    003618D0 | 24 B7                    | and al,B7                               |
    003618D2 | F6D4                     | not ah                                  |
    003618D4 | 08E2                     | or dl,ah                                |
    003618D6 | 80E4 48                  | and ah,48                               |
    003618D9 | 08E0                     | or al,ah                                |
    003618DB | F6D2                     | not dl                                  |
    003618DD | 30C8                     | xor al,cl                               |
    003618DF | 8B8C24 9C000000          | mov ecx,dword ptr ss:[esp+9C]           |
    003618E6 | 08C2                     | or dl,al                                |
    003618E8 | 8B4424 40                | mov eax,dword ptr ss:[esp+40]           |
    003618EC | 881401                   | mov byte ptr ds:[ecx+eax],dl            |
    003618EF | 89E8                     | mov eax,ebp                             |
    003618F1 | C1ED 04                  | shr ebp,4                               |
    003618F4 | C1E8 0C                  | shr eax,C                               |
    003618F7 | 89C3                     | mov ebx,eax                             |
    003618F9 | 81F3 F0FF0F00            | xor ebx,FFFF0                           |
    003618FF | 21C3                     | and ebx,eax                             |
    00361901 | 89F8                     | mov eax,edi                             |
    00361903 | C1E8 0C                  | shr eax,C                               |
    00361906 | C1E3 04                  | shl ebx,4                               |
    00361909 | 89C1                     | mov ecx,eax                             |
    0036190B | 81F1 F0FF0F00            | xor ecx,FFFF0                           |
    00361911 | 21C1                     | and ecx,eax                             |
    00361913 | 8B4424 08                | mov eax,dword ptr ss:[esp+8]            |
    00361917 | 01CB                     | add ebx,ecx                             |
    00361919 | 8B4C24 04                | mov ecx,dword ptr ss:[esp+4]            |
    0036191D | 031C24                   | add ebx,dword ptr ss:[esp]              |
    00361920 | C1E8 0C                  | shr eax,C                               |
    00361923 | 89C2                     | mov edx,eax                             |
    00361925 | C1E9 08                  | shr ecx,8                               |
    00361928 | 81F2 F0FF0F00            | xor edx,FFFF0                           |
    0036192E | 81E1 F0000000            | and ecx,F0                              |
    00361934 | 21C2                     | and edx,eax                             |
    00361936 | 89F8                     | mov eax,edi                             |
    00361938 | 8B7C24 0C                | mov edi,dword ptr ss:[esp+C]            |
    0036193C | 01D1                     | add ecx,edx                             |
    0036193E | C1E8 08                  | shr eax,8                               |
    00361941 | 89EA                     | mov edx,ebp                             |
    00361943 | 83E0 0F                  | and eax,F                               |
    00361946 | 81E2 F0000000            | and edx,F0                              |
    0036194C | 030C24                   | add ecx,dword ptr ss:[esp]              |
    0036194F | 09C2                     | or edx,eax                              |
    00361951 | 89F0                     | mov eax,esi                             |
    00361953 | 35 F0FFFF00              | xor eax,FFFFF0                          |
    00361958 | 031424                   | add edx,dword ptr ss:[esp]              |
    0036195B | 21F0                     | and eax,esi                             |
    0036195D | 8B7424 04                | mov esi,dword ptr ss:[esp+4]            |
    00361961 | 0FB68C0F 000D0000        | movzx ecx,byte ptr ds:[edi+ecx+D00]     |
    00361969 | C1EE 04                  | shr esi,4                               |
    0036196C | 897424 14                | mov dword ptr ss:[esp+14],esi           |
    00361970 | 81E6 F0000000            | and esi,F0                              |
    00361976 | 01C6                     | add esi,eax                             |
    00361978 | 0FB6841F 000C0000        | movzx eax,byte ptr ds:[edi+ebx+C00]     |
    00361980 | 89EB                     | mov ebx,ebp                             |
    00361982 | 033424                   | add esi,dword ptr ss:[esp]              |
    00361985 | 81F3 F0FFFF0F            | xor ebx,FFFFFF0                         |
    0036198B | 21EB                     | and ebx,ebp                             |
    0036198D | C1E3 04                  | shl ebx,4                               |
    00361990 | C1E0 04                  | shl eax,4                               |
    00361993 | 01C8                     | add eax,ecx                             |
    00361995 | 0FB68C17 000E0000        | movzx ecx,byte ptr ds:[edi+edx+E00]     |
    0036199D | 0FB69437 000F0000        | movzx edx,byte ptr ds:[edi+esi+F00]     |
    003619A5 | 8B7424 10                | mov esi,dword ptr ss:[esp+10]           |
    003619A9 | 030424                   | add eax,dword ptr ss:[esp]              |
    003619AC | C1E1 04                  | shl ecx,4                               |
    003619AF | 01D1                     | add ecx,edx                             |
    003619B1 | 0FB68407 00100000        | movzx eax,byte ptr ds:[edi+eax+1000]    |
    003619B9 | 030C24                   | add ecx,dword ptr ss:[esp]              |
    003619BC | C0E0 04                  | shl al,4                                |
    003619BF | 0FB68C0F 00110000        | movzx ecx,byte ptr ds:[edi+ecx+1100]    |
    003619C7 | 89C2                     | mov edx,eax                             |
    003619C9 | 20CA                     | and dl,cl                               |
    003619CB | 30C8                     | xor al,cl                               |
    003619CD | 8B4C24 44                | mov ecx,dword ptr ss:[esp+44]           |
    003619D1 | 08D0                     | or al,dl                                |
    003619D3 | 8B9424 9C000000          | mov edx,dword ptr ss:[esp+9C]           |
    003619DA | 88040A                   | mov byte ptr ds:[edx+ecx],al            |
    003619DD | 8B4424 14                | mov eax,dword ptr ss:[esp+14]           |
    003619E1 | 8B5424 04                | mov edx,dword ptr ss:[esp+4]            |
    003619E5 | 89C5                     | mov ebp,eax                             |
    003619E7 | 81F5 F0FFFF0F            | xor ebp,FFFFFF0                         |
    003619ED | 21C5                     | and ebp,eax                             |
    003619EF | 8B4424 18                | mov eax,dword ptr ss:[esp+18]           |
    003619F3 | C1E5 04                  | shl ebp,4                               |
    003619F6 | 89C1                     | mov ecx,eax                             |
    003619F8 | 81F1 F0FFFF0F            | xor ecx,FFFFFF0                         |
    003619FE | 21C1                     | and ecx,eax                             |
    00361A00 | 89D0                     | mov eax,edx                             |
    00361A02 | 35 F0FFFF0F              | xor eax,FFFFFF0                         |
    00361A07 | C1E1 04                  | shl ecx,4                               |
    00361A0A | 21D0                     | and eax,edx                             |
    00361A0C | 89F2                     | mov edx,esi                             |
    00361A0E | 83F2 F0                  | xor edx,FFFFFFF0                        |
    00361A11 | C1E0 04                  | shl eax,4                               |
    00361A14 | 21F2                     | and edx,esi                             |
    00361A16 | C1EE 04                  | shr esi,4                               |
    00361A19 | 83E6 0F                  | and esi,F                               |
    00361A1C | 01D1                     | add ecx,edx                             |
    00361A1E | 8B5424 08                | mov edx,dword ptr ss:[esp+8]            |
    00361A22 | 09F3                     | or ebx,esi                              |
    00361A24 | 8B7424 08                | mov esi,dword ptr ss:[esp+8]            |
    00361A28 | 031C24                   | add ebx,dword ptr ss:[esp]              |
    00361A2B | 83E2 0F                  | and edx,F                               |
    00361A2E | C1EE 04                  | shr esi,4                               |
    00361A31 | 09D0                     | or eax,edx                              |
    00361A33 | 89F7                     | mov edi,esi                             |
    00361A35 | 81F7 F0FFFF0F            | xor edi,FFFFFF0                         |
    00361A3B | 21F7                     | and edi,esi                             |
    00361A3D | 01FD                     | add ebp,edi                             |
    00361A3F | 8B7C24 0C                | mov edi,dword ptr ss:[esp+C]            |
    00361A43 | 032C24                   | add ebp,dword ptr ss:[esp]              |
    00361A46 | 0FB6941F 00120000        | movzx edx,byte ptr ds:[edi+ebx+1200]    |
    00361A4E | 89FB                     | mov ebx,edi                             |
    00361A50 | 0FB6B42F 00130000        | movzx esi,byte ptr ds:[edi+ebp+1300]    |
    00361A58 | 8B3C24                   | mov edi,dword ptr ss:[esp]              |
    00361A5B | C1E2 04                  | shl edx,4                               |
    00361A5E | 01F9                     | add ecx,edi                             |
    00361A60 | 01F8                     | add eax,edi                             |
    00361A62 | 01F2                     | add edx,esi                             |
    00361A64 | 89DE                     | mov esi,ebx                             |
    00361A66 | 0FB68C0B 00140000        | movzx ecx,byte ptr ds:[ebx+ecx+1400]    |
    00361A6E | 0FB68403 00150000        | movzx eax,byte ptr ds:[ebx+eax+1500]    |
    00361A76 | 01FA                     | add edx,edi                             |
    00361A78 | 81C6 00180000            | add esi,1800                            |
    00361A7E | 897424 0C                | mov dword ptr ss:[esp+C],esi            |
    00361A82 | C1E1 04                  | shl ecx,4                               |
    00361A85 | 01C1                     | add ecx,eax                             |
    00361A87 | 0FB68413 00160000        | movzx eax,byte ptr ds:[ebx+edx+1600]    |
    00361A8F | 01F9                     | add ecx,edi                             |
    00361A91 | 0FB68C0B 00170000        | movzx ecx,byte ptr ds:[ebx+ecx+1700]    |
    00361A99 | C0E0 04                  | shl al,4                                |
    00361A9C | 89C2                     | mov edx,eax                             |
    00361A9E | 24 90                    | and al,90                               |
    00361AA0 | F6D2                     | not dl                                  |
    00361AA2 | 88D4                     | mov ah,dl                               |
    00361AA4 | 80E4 65                  | and ah,65                               |
    00361AA7 | 08E0                     | or al,ah                                |
    00361AA9 | 88CC                     | mov ah,cl                               |
    00361AAB | 80E1 9A                  | and cl,9A                               |
    00361AAE | F6D4                     | not ah                                  |
    00361AB0 | 08E2                     | or dl,ah                                |
    00361AB2 | 80E4 65                  | and ah,65                               |
    00361AB5 | 08E1                     | or cl,ah                                |
    00361AB7 | F6D2                     | not dl                                  |
    00361AB9 | 30C1                     | xor cl,al                               |
    00361ABB | 8B4424 48                | mov eax,dword ptr ss:[esp+48]           |
    00361ABF | 08CA                     | or dl,cl                                |
    00361AC1 | 8B8C24 9C000000          | mov ecx,dword ptr ss:[esp+9C]           |
    00361AC8 | 881401                   | mov byte ptr ds:[ecx+eax],dl            |
    00361ACB | 8B4C24 2C                | mov ecx,dword ptr ss:[esp+2C]           |
    00361ACF | 8B4424 4C                | mov eax,dword ptr ss:[esp+4C]           |
    00361AD3 | 83C1 04                  | add ecx,4                               |
    00361AD6 | 83C0 FC                  | add eax,FFFFFFFC                        |
    00361AD9 | 81FE 00600000            | cmp esi,6000                            |
    00361ADF | 0F85 4BF6FFFF            | jne [lamp-ret.fun]_cm (1).361130        |
    00361AE5 | E9 46F5FFFF              | jmp [lamp-ret.fun]_cm (1).361030        |
    00361AEA | 0FB637                   | movzx esi,byte ptr ds:[edi]             |
    00361AED | 8A86 00403600            | mov al,byte ptr ds:[esi+364000]         |
    00361AF3 | 880424                   | mov byte ptr ss:[esp],al                |
    00361AF6 | 8807                     | mov byte ptr ds:[edi],al                |
    00361AF8 | 8B4424 28                | mov eax,dword ptr ss:[esp+28]           |
    00361AFC | 8A80 00413600            | mov al,byte ptr ds:[eax+364100]         |
    00361B02 | 8847 01                  | mov byte ptr ds:[edi+1],al              |
    00361B05 | 8B4424 0C                | mov eax,dword ptr ss:[esp+C]            |
    00361B09 | 8A80 00423600            | mov al,byte ptr ds:[eax+364200]         |
    00361B0F | 8847 02                  | mov byte ptr ds:[edi+2],al              |
    00361B12 | 8B4424 08                | mov eax,dword ptr ss:[esp+8]            |
    00361B16 | 8A80 00433600            | mov al,byte ptr ds:[eax+364300]         |
    00361B1C | 8847 03                  | mov byte ptr ds:[edi+3],al              |
    00361B1F | 0FB647 04                | movzx eax,byte ptr ds:[edi+4]           |
    00361B23 | 8A80 00443600            | mov al,byte ptr ds:[eax+364400]         |
    00361B29 | 8847 04                  | mov byte ptr ds:[edi+4],al              |
    00361B2C | 8B4424 14                | mov eax,dword ptr ss:[esp+14]           |
    00361B30 | 8A80 00453600            | mov al,byte ptr ds:[eax+364500]         |
    00361B36 | 8847 05                  | mov byte ptr ds:[edi+5],al              |
    00361B39 | 8B4424 1C                | mov eax,dword ptr ss:[esp+1C]           |
    00361B3D | 8A80 00463600            | mov al,byte ptr ds:[eax+364600]         |
    00361B43 | 8847 06                  | mov byte ptr ds:[edi+6],al              |
    00361B46 | 8B4424 18                | mov eax,dword ptr ss:[esp+18]           |
    00361B4A | 8A80 00473600            | mov al,byte ptr ds:[eax+364700]         |
    00361B50 | 8847 07                  | mov byte ptr ds:[edi+7],al              |
    00361B53 | 0FB647 08                | movzx eax,byte ptr ds:[edi+8]           |
    00361B57 | 8A80 00483600            | mov al,byte ptr ds:[eax+364800]         |
    00361B5D | 8847 08                  | mov byte ptr ds:[edi+8],al              |
    00361B60 | 8A83 00493600            | mov al,byte ptr ds:[ebx+364900]         |
    00361B66 | 8847 09                  | mov byte ptr ds:[edi+9],al              |
    00361B69 | 8B4424 04                | mov eax,dword ptr ss:[esp+4]            |
    00361B6D | 8A80 004A3600            | mov al,byte ptr ds:[eax+364A00]         |
    00361B73 | 8847 0A                  | mov byte ptr ds:[edi+A],al              |
    00361B76 | 8B4424 20                | mov eax,dword ptr ss:[esp+20]           |
    00361B7A | 8A80 004B3600            | mov al,byte ptr ds:[eax+364B00]         |
    00361B80 | 8847 0B                  | mov byte ptr ds:[edi+B],al              |
    00361B83 | 0FB647 0C                | movzx eax,byte ptr ds:[edi+C]           |
    00361B87 | 8A80 004C3600            | mov al,byte ptr ds:[eax+364C00]         |
    00361B8D | 8847 0C                  | mov byte ptr ds:[edi+C],al              |
    00361B90 | 8B4424 10                | mov eax,dword ptr ss:[esp+10]           |
    00361B94 | 8A80 004D3600            | mov al,byte ptr ds:[eax+364D00]         |
    00361B9A | 8847 0D                  | mov byte ptr ds:[edi+D],al              |
    00361B9D | 8A82 004E3600            | mov al,byte ptr ds:[edx+364E00]         |
    00361BA3 | 8847 0E                  | mov byte ptr ds:[edi+E],al              |
    00361BA6 | 8A81 004F3600            | mov al,byte ptr ds:[ecx+364F00]         |
    00361BAC | 8847 0F                  | mov byte ptr ds:[edi+F],al              |
    00361BAF | 8B8424 A0000000          | mov eax,dword ptr ss:[esp+A0]           |
    00361BB6 | 89C1                     | mov ecx,eax                             |
    00361BB8 | 8A0424                   | mov al,byte ptr ss:[esp]                |
    00361BBB | 8801                     | mov byte ptr ds:[ecx],al                |
    00361BBD | 8A47 01                  | mov al,byte ptr ds:[edi+1]              |
    00361BC0 | 8841 01                  | mov byte ptr ds:[ecx+1],al              |
    00361BC3 | 8A47 02                  | mov al,byte ptr ds:[edi+2]              |
    00361BC6 | 8841 02                  | mov byte ptr ds:[ecx+2],al              |
    00361BC9 | 8A47 03                  | mov al,byte ptr ds:[edi+3]              |
    00361BCC | 8841 03                  | mov byte ptr ds:[ecx+3],al              |
    00361BCF | 8A47 04                  | mov al,byte ptr ds:[edi+4]              |
    00361BD2 | 8841 04                  | mov byte ptr ds:[ecx+4],al              |
    00361BD5 | 8A47 05                  | mov al,byte ptr ds:[edi+5]              |
    00361BD8 | 8841 05                  | mov byte ptr ds:[ecx+5],al              |
    00361BDB | 8A47 06                  | mov al,byte ptr ds:[edi+6]              |
    00361BDE | 8841 06                  | mov byte ptr ds:[ecx+6],al              |
    00361BE1 | 8A47 07                  | mov al,byte ptr ds:[edi+7]              |
    00361BE4 | 8841 07                  | mov byte ptr ds:[ecx+7],al              |
    00361BE7 | 8A47 08                  | mov al,byte ptr ds:[edi+8]              |
    00361BEA | 8841 08                  | mov byte ptr ds:[ecx+8],al              |
    00361BED | 8A47 09                  | mov al,byte ptr ds:[edi+9]              |
    00361BF0 | 8841 09                  | mov byte ptr ds:[ecx+9],al              |
    00361BF3 | 8A47 0A                  | mov al,byte ptr ds:[edi+A]              |
    00361BF6 | 8841 0A                  | mov byte ptr ds:[ecx+A],al              |
    00361BF9 | 8A47 0B                  | mov al,byte ptr ds:[edi+B]              |
    00361BFC | 8841 0B                  | mov byte ptr ds:[ecx+B],al              |
    00361BFF | 8A47 0C                  | mov al,byte ptr ds:[edi+C]              |
    00361C02 | 8841 0C                  | mov byte ptr ds:[ecx+C],al              |
    00361C05 | 8A47 0D                  | mov al,byte ptr ds:[edi+D]              |
    00361C08 | 8841 0D                  | mov byte ptr ds:[ecx+D],al              |
    00361C0B | 8A47 0E                  | mov al,byte ptr ds:[edi+E]              |
    00361C0E | 8841 0E                  | mov byte ptr ds:[ecx+E],al              |
    00361C11 | 8A47 0F                  | mov al,byte ptr ds:[edi+F]              |
    00361C14 | 8841 0F                  | mov byte ptr ds:[ecx+F],al              |
    00361C17 | 81C4 88000000            | add esp,88                              |
    00361C1D | 5E                       | pop esi                                 |
    00361C1E | 5F                       | pop edi                                 |
    00361C1F | 5B                       | pop ebx                                 |
    00361C20 | 5D                       | pop ebp                                 |
    00361C21 | C3                       | ret                                     |



    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    开心
    2021-7-27 17:21
  • 签到天数: 9 天

    [LV.3]偶尔看看II

     楼主| 发表于 5 天前 | 显示全部楼层

    这是CM1吧,搞定了吗?不是hash算法,肯定是能解密的
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    无聊
    3 天前
  • 签到天数: 110 天

    [LV.6]常住居民II

    发表于 3 天前 | 显示全部楼层
    留下了 没有技术的泪水,仰望大表哥(们)。
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    无聊
    11 小时前
  • 签到天数: 17 天

    [LV.4]偶尔看看III

    发表于 昨天 21:28 | 显示全部楼层
    BinCrack 发表于 2021-9-12 09:47
    这是CM1吧,搞定了吗?不是hash算法,肯定是能解密的

    没解密出来 CM1
    回复 支持 反对

    使用道具 举报

    您需要登录后才可以回帖 登录 | 快速注册

    本版积分规则

    关闭

    站长推荐上一条 /1 下一条

    快速回复 返回顶部 返回列表