zenix 发表于 2010-3-1 16:13:22

解謎游戲 - CrackMe by ZeNiX

也許大家在別的地方看到了.
雖然也已經有人破解出來了.

放到這裡,
給大家玩一玩.

題目: 就是這張圖片
要求: 找出正確密碼

第一步: 找出程序來運行
第二步: 找出正確密碼
第三步: 寫出分析

---ZeNiX---

zaas 发表于 2010-3-1 19:31:10

晕。好像是DOS的东东?
不是ZeNIX老大自己写的DOS吧。。。
完全摸不着头脑

[ 本帖最后由 zaas 于 2010-3-1 19:38 编辑 ]

lgjxj 发表于 2010-3-1 19:35:13

完全不会调试

Nisy 发表于 2010-3-4 20:36:09

转载一下,HeXer揭露了谜底 ~~
Link:http://www.unpack.cn/viewthread.php?tid=46551

ZeNiX是个魔术师,给我们表演了一个精彩的魔术,最近不是流行揭秘嘛,我也来做一次坏人。

第一个障眼法:
如何正确下载,错误的下载得到的可能是个JPG格式的预览图,这个我不说了,大家应该可以自己搞定。

第二个障眼法:
正确下载之后得到一个ZENIX.EXE.GIF文件,表面来看是个GIF图片,也确实是个GIF图片,是经过魔术师加工过的特殊的图片,把文件名改成ZENIX.EXE后能运行起来的神奇图片。

第三个障眼法:
名字改成了ZENIX.EXE,这真的是个EXE吗?我要告诉你,这里有个托儿(最近的魔术都流行这个),这里的托儿就是你使用的WINDOWS操作系统。当你运行它的时候,系统检查它不是个PE文件,甚至都不是一个(DOS下的16位EXE格式的)MZ文件,系统会不做声色的让它以DOS下16位的COM文件格式来运行。

第四个障眼法:
这个COM程序不是特别的纯,普通的COM程序是在一个64K的段里的,而这个COM程序经过调试可以看到有段切换,用了类似加壳的技术,顺便加了LOGO(传说中的内嵌广告?最近的魔术也流行这个)。
简单介绍一下调试方法,工具可以用系统自带的DEBUG命令,或者TR252(推荐),用IDA也可以,工具的使用请读者自己找资料学习。
不管用什么工具吧,入口的代码大概这样的,目的就是从GIF头跳转到图片后面的自定义代码处:
seg000:0100 47            inc   di
seg000:0101 49            dec   cx
seg000:0102 46            inc   si
seg000:0103 38 39         cmp   , bh
seg000:0105 61            popa
seg000:0106 F4            hlt
seg000:0107 01 53 01      add   , dx
seg000:010A F7 12         not   word ptr
seg000:010C E9 F1 7F      jmp   8100

自定义代码开始,显示LOGO:
seg000:8100 BC 00 F0   mov   sp, 0F000h
seg000:8103 90         nop
seg000:8104 BA 15 81   mov   dx, offset aHelloZenixCcg_ ; "\r\n\r\nHello ZeNiX....\r\n\r\nPress Key to start.\r\n\r\n$"
seg000:8107 B8 00 09   mov   ax, 900h
seg000:810A CD 21      int   21h             ; DOS - 输出$结尾的字符串
seg000:810C 31 C0      xor   ax, ax
seg000:810E CD 16      int   16h             ; 读键盘
seg000:8110 E9 36 00   jmp   loc_18149
段切换,返回到OEP:
seg000:8149            loc_18149:
seg000:8149 8C C8      mov   ax, cs
seg000:814B 05 07 08   add   ax, 807h      ;段地址差值
seg000:814E 8E D8      mov   ds, ax
seg000:8150 8E C0      mov   es, ax
seg000:8152 8E D0      mov   ss, ax
seg000:8154 1E         push    ds
seg000:8155 68 ED 00   push    0EDh
seg000:8158 1E         push    ds
seg000:8159 68 00 01   push    100h            ;飞向光明之巅(引用fly经典语句,以示膜拜)
seg000:815C CB         retf
来到这里以后,就可以dump脱壳了:
seg000:0100 FC         cld
seg000:0101            loc_0101:
seg000:0101 8B 36 52 01mov   si, off_10152
seg000:0105 AD         lodsw
seg000:0106 97         xchg    ax, di
seg000:0107 8B 3D      mov   di,
seg000:0109 AD         lodsw
seg000:010A 93         xchg    ax, bx
seg000:010B 0B 3F      or      di,
seg000:010D AD         lodsw
seg000:010E 97         xchg    ax, di
seg000:010F F7 D0      not   ax
seg000:0111 89 36 52 01mov   off_10152, si
seg000:0115 AB         stosw
seg000:0116 EB E9      jmp   short loc_0101
COM程序脱壳很简单,没有什么需要修复的,找准位置存成文件就OK了,对于本程序,只需要把整个图片文件的前面8070h长度切掉就可以了。

第五个障眼法:
脱壳后得到了很纯的COM程序了,这个可是魔术师借来的高级道具,想解开这把锁,还真不简单。
这个DOS程序姑且可以称它是个或非门运算的虚拟机,想在DOS下直接调试出个密码来,除非有sessiondiy牛那样的功力。

揭秘到此结束,以下部分是选读内容,纯属个人无聊瞎折腾:
我没有sessiondiy牛那样的功力,还好代码很短,我把它逆出来,编译成PE的,方便调试分析,后面的有点体力活。
测试密码输入12345,debugview得到log如下:
Solar input
Solar cpu: nor(0x0EA0,0x0EA0)=0xF15F
Solar cpu: nor(0xF15F,0xF15F)=0x0EA0
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0ED4,0x0ED4)=0xF12B
Solar cpu: nor(0xF12B,0xF12B)=0x0ED4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0F08,0x0F08)=0xF0F7
Solar cpu: nor(0xF0F7,0xF0F7)=0x0F08
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x040A,0x040A)=0xFBF5
Solar cpu: nor(0xFBF5,0xFBF5)=0x040A
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x04A8,0x04A8)=0xFB57
Solar cpu: nor(0xFB57,0xFB57)=0x04A8
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0456,0x0456)=0xFBA9
Solar cpu: nor(0xFBA9,0xFBA9)=0x0456
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1242
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x048A,0x048A)=0xFB75
Solar cpu: nor(0xFB75,0xFB75)=0x048A
Solar cpu: nor(0x049A,0x049A)=0xFB65
Solar cpu: nor(0xFB65,0xFB65)=0x049A
Solar cpu: nor(0x0C23,0x0C23)=0xF3DC
Solar cpu: nor(0xF3DC,0xF3DC)=0x0C23
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x0C3F,0x0C3F)=0xF3C0
Solar cpu: nor(0xF3C0,0xF3C0)=0x0C3F
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0CDD,0x0CDD)=0xF322
Solar cpu: nor(0xF322,0xF322)=0x0CDD
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0C8B,0x0C8B)=0xF374
Solar cpu: nor(0xF374,0xF374)=0x0C8B
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1244
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x0CBF,0x0CBF)=0xF340
Solar cpu: nor(0xF340,0xF340)=0x0CBF
Solar cpu: nor(0x0CCF,0x0CCF)=0xF330
Solar cpu: nor(0xF330,0xF330)=0x0CCF
Solar cpu: nor(0x0B2A,0x0B2A)=0xF4D5
Solar cpu: nor(0xF4D5,0xF4D5)=0x0B2A
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x0200,0x0200)=0xFDFF
Solar cpu: nor(0xFDFF,0xFDFF)=0x0200
Solar cpu: nor(0x0B52,0x0B52)=0xF4AD
Solar cpu: nor(0xF4AD,0xF4AD)=0x0B52
Solar cpu: nor(0x0B94,0x0B94)=0xF46B
Solar cpu: nor(0xF46B,0xF46B)=0x0B94
Solar cpu: nor(0x0B6E,0x0B6E)=0xF491
Solar cpu: nor(0xF491,0xF491)=0x0B6E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar output
Solar cpu: nor(0x0B97,0x0B97)=0xF468
Solar cpu: nor(0xF468,0xF468)=0x0B97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0BCB,0x0BCB)=0xF434
Solar cpu: nor(0xF434,0xF434)=0x0BCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1246
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0BFF,0x0BFF)=0xF400
Solar cpu: nor(0xF400,0xF400)=0x0BFF
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0CDD,0x0CDD)=0xF322
Solar cpu: nor(0xF322,0xF322)=0x0CDD
Solar cpu: nor(0x000A,0x000A)=0xFFF5
Solar cpu: nor(0xFFF5,0xFFF5)=0x000A
Solar cpu: nor(0x0CF9,0x0CF9)=0xF306
Solar cpu: nor(0xF306,0xF306)=0x0CF9
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0D97,0x0D97)=0xF268
Solar cpu: nor(0xF268,0xF268)=0x0D97
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0D45,0x0D45)=0xF2BA
Solar cpu: nor(0xF2BA,0xF2BA)=0x0D45
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1244
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x0D79,0x0D79)=0xF286
Solar cpu: nor(0xF286,0xF286)=0x0D79
Solar cpu: nor(0x0D89,0x0D89)=0xF276
Solar cpu: nor(0xF276,0xF276)=0x0D89
Solar cpu: nor(0x0B2A,0x0B2A)=0xF4D5
Solar cpu: nor(0xF4D5,0xF4D5)=0x0B2A
Solar cpu: nor(0x000A,0x000A)=0xFFF5
Solar cpu: nor(0xFFF5,0xFFF5)=0x000A
Solar cpu: nor(0x0200,0x0200)=0xFDFF
Solar cpu: nor(0xFDFF,0xFDFF)=0x0200
Solar cpu: nor(0x0B52,0x0B52)=0xF4AD
Solar cpu: nor(0xF4AD,0xF4AD)=0x0B52
Solar cpu: nor(0x0B94,0x0B94)=0xF46B
Solar cpu: nor(0xF46B,0xF46B)=0x0B94
Solar cpu: nor(0x0B6E,0x0B6E)=0xF491
Solar cpu: nor(0xF491,0xF491)=0x0B6E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar output
Solar cpu: nor(0x0B97,0x0B97)=0xF468
Solar cpu: nor(0xF468,0xF468)=0x0B97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0BCB,0x0BCB)=0xF434
Solar cpu: nor(0xF434,0xF434)=0x0BCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1246
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0BFF,0x0BFF)=0xF400
Solar cpu: nor(0xF400,0xF400)=0x0BFF
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0D97,0x0D97)=0xF268
Solar cpu: nor(0xF268,0xF268)=0x0D97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0DCB,0x0DCB)=0xF234
Solar cpu: nor(0xF234,0xF234)=0x0DCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0DFF,0x0DFF)=0xF200
Solar cpu: nor(0xF200,0xF200)=0x0DFF
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x04A8,0x04A8)=0xFB57
Solar cpu: nor(0xFB57,0xFB57)=0x04A8
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0546,0x0546)=0xFAB9
Solar cpu: nor(0xFAB9,0xFAB9)=0x0546
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x04F4,0x04F4)=0xFB0B
Solar cpu: nor(0xFB0B,0xFB0B)=0x04F4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1242
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0528,0x0528)=0xFAD7
Solar cpu: nor(0xFAD7,0xFAD7)=0x0528
Solar cpu: nor(0x0538,0x0538)=0xFAC7
Solar cpu: nor(0xFAC7,0xFAC7)=0x0538
Solar cpu: nor(0x0F2C,0x0F2C)=0xF0D3
Solar cpu: nor(0xF0D3,0xF0D3)=0x0F2C
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x0F48,0x0F48)=0xF0B7
Solar cpu: nor(0xF0B7,0xF0B7)=0x0F48
Solar cpu: nor(0xE3C7,0xE3C7)=0x1C38
Solar cpu: nor(0x1C38,0xE3C7)=0x0000
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x3231,0x3231)=0xCDCE      ;取出字符12
Solar cpu: nor(0xCDCE,0xCDCE)=0x3231
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x3231,0x3231)=0xCDCE
Solar cpu: nor(0xFF00,0xCDCE)=0x0031
Solar cpu: nor(0x000D,0x0031)=0xFFC2
Solar cpu: nor(0xFFC2,0xFFC2)=0x003D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0031,0x0031)=0xFFCE
Solar cpu: nor(0xFFF2,0xFFCE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x003D,0x003D)=0xFFC2
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0xFFC2,0x0001)=0x003C
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x003C,0x003C)=0xFFC3
Solar cpu: nor(0xFFC3,0xFFC3)=0x003C
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x003C
Solar cpu: nor(0x003B,0x003B)=0xFFC4
Solar cpu: nor(0xFFC4,0xFFC4)=0x003B
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1202
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x3231,0x0000)=0xCDCE
Solar cpu: nor(0xCDCE,0xCDCE)=0x3231
Solar cpu: nor(0x3231,0x3231)=0xCDCE
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xCDCE,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x3231,0x3231)=0xCDCE
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0xCDCE,0x0000)=0x3231
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x3332,0x3332)=0xCCCD      ;取出字符23
Solar cpu: nor(0xCCCD,0xCCCD)=0x3332
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x3332,0x3332)=0xCCCD
Solar cpu: nor(0xFF00,0xCCCD)=0x0032
Solar cpu: nor(0x000D,0x0032)=0xFFC0
Solar cpu: nor(0xFFC0,0xFFC0)=0x003F
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0032,0x0032)=0xFFCD
Solar cpu: nor(0xFFF2,0xFFCD)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x003F,0x003F)=0xFFC0
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0xFFC0,0x0000)=0x003F
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x003F,0x003F)=0xFFC0
Solar cpu: nor(0xFFC0,0xFFC0)=0x003F
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x003F
Solar cpu: nor(0x003E,0x003E)=0xFFC1
Solar cpu: nor(0xFFC1,0xFFC1)=0x003E
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1203
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面是xor过程
Solar cpu: nor(0x3231,0x3231)=0xCDCE      ;nor('12','12')
Solar cpu: nor(0xCDCE,0xCDCE)=0x3231      ;nor(nor('12','12'),nor('12','12')) = '12'
Solar cpu: nor(0x3332,0x3231)=0xCCCC      ;nor('23','12')
Solar cpu: nor(0xCCCC,0xCCCC)=0x3333      ;nor(nor('23','12'),nor('23','12')) = or('23','12')
Solar cpu: nor(0x3332,0x3332)=0xCCCD      ;nor('23','23')
Solar cpu: nor(0x3231,0x3231)=0xCDCE      ;nor('12','12')
Solar cpu: nor(0xCCCD,0xCDCE)=0x3230      ;nor(nor('23','23'),nor('12','12')) = and('23','12)
Solar cpu: nor(0x3230,0x3230)=0xCDCF      ;nor(and('23','12'),and('23','12')) = nand('23','12')
Solar cpu: nor(0x3333,0x3333)=0xCCCC      ;nor(or('23','12'),or('23','12')) = nor('23','12')
Solar cpu: nor(0xCDCF,0xCDCF)=0x3230      ;nor(nand('23','12'),nand('23','12')) = and('23','12')
Solar cpu: nor(0xCCCC,0x3230)=0x0103      ;nor(nor('23','12'),and('23','12')) = xor('23','12') = 0103h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x3433,0x3433)=0xCBCC
Solar cpu: nor(0xCBCC,0xCBCC)=0x3433
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x3433,0x3433)=0xCBCC
Solar cpu: nor(0xFF00,0xCBCC)=0x0033
Solar cpu: nor(0x000D,0x0033)=0xFFC0
Solar cpu: nor(0xFFC0,0xFFC0)=0x003F
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0033,0x0033)=0xFFCC
Solar cpu: nor(0xFFF2,0xFFCC)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x003F,0x003F)=0xFFC0
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0xFFC0,0x0001)=0x003E
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x003E,0x003E)=0xFFC1
Solar cpu: nor(0xFFC1,0xFFC1)=0x003E
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x003E
Solar cpu: nor(0x003D,0x003D)=0xFFC2
Solar cpu: nor(0xFFC2,0xFFC2)=0x003D
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1204
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面又是xor过程
Solar cpu: nor(0x0103,0x0103)=0xFEFC      ;
Solar cpu: nor(0xFEFC,0xFEFC)=0x0103      ;
Solar cpu: nor(0x3433,0x0103)=0xCACC      ;
Solar cpu: nor(0xCACC,0xCACC)=0x3533      ;
Solar cpu: nor(0x3433,0x3433)=0xCBCC      ;
Solar cpu: nor(0x0103,0x0103)=0xFEFC      ;
Solar cpu: nor(0xCBCC,0xFEFC)=0x0003      ;
Solar cpu: nor(0x0003,0x0003)=0xFFFC      ;
Solar cpu: nor(0x3533,0x3533)=0xCACC      ;
Solar cpu: nor(0xFFFC,0xFFFC)=0x0003      ;
Solar cpu: nor(0xCACC,0x0003)=0x3530      ;'34' xor '23' xor '12' = 3530h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x3534,0x3534)=0xCACB
Solar cpu: nor(0xCACB,0xCACB)=0x3534
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x3534,0x3534)=0xCACB
Solar cpu: nor(0xFF00,0xCACB)=0x0034
Solar cpu: nor(0x000D,0x0034)=0xFFC2
Solar cpu: nor(0xFFC2,0xFFC2)=0x003D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0034,0x0034)=0xFFCB
Solar cpu: nor(0xFFF2,0xFFCB)=0x0004
Solar cpu: nor(0x0004,0x0004)=0xFFFB
Solar cpu: nor(0x003D,0x003D)=0xFFC2
Solar cpu: nor(0xFFFB,0xFFFB)=0x0004
Solar cpu: nor(0xFFC2,0x0004)=0x0039
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0039,0x0039)=0xFFC6
Solar cpu: nor(0xFFC6,0xFFC6)=0x0039
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0039
Solar cpu: nor(0x0038,0x0038)=0xFFC7
Solar cpu: nor(0xFFC7,0xFFC7)=0x0038
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1205
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面又是xor过程
Solar cpu: nor(0x3530,0x3530)=0xCACF      ;
Solar cpu: nor(0xCACF,0xCACF)=0x3530      ;
Solar cpu: nor(0x3534,0x3530)=0xCACB      ;
Solar cpu: nor(0xCACB,0xCACB)=0x3534      ;
Solar cpu: nor(0x3534,0x3534)=0xCACB      ;
Solar cpu: nor(0x3530,0x3530)=0xCACF      ;
Solar cpu: nor(0xCACB,0xCACF)=0x3530      ;
Solar cpu: nor(0x3530,0x3530)=0xCACF      ;
Solar cpu: nor(0x3534,0x3534)=0xCACB      ;
Solar cpu: nor(0xCACF,0xCACF)=0x3530      ;
Solar cpu: nor(0xCACB,0x3530)=0x0004      ;'45' xor '34' xor '23' xor '12' = 0004h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x0D35,0x0D35)=0xF2CA
Solar cpu: nor(0xF2CA,0xF2CA)=0x0D35
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x0D35,0x0D35)=0xF2CA
Solar cpu: nor(0xFF00,0xF2CA)=0x0035
Solar cpu: nor(0x000D,0x0035)=0xFFC2
Solar cpu: nor(0xFFC2,0xFFC2)=0x003D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0035,0x0035)=0xFFCA
Solar cpu: nor(0xFFF2,0xFFCA)=0x0005
Solar cpu: nor(0x0005,0x0005)=0xFFFA
Solar cpu: nor(0x003D,0x003D)=0xFFC2
Solar cpu: nor(0xFFFA,0xFFFA)=0x0005
Solar cpu: nor(0xFFC2,0x0005)=0x0038
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0038,0x0038)=0xFFC7
Solar cpu: nor(0xFFC7,0xFFC7)=0x0038
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0038
Solar cpu: nor(0x0037,0x0037)=0xFFC8
Solar cpu: nor(0xFFC8,0xFFC8)=0x0037
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1206
Solar cpu: nor(0x1207,0x1207)=0xEDF8
Solar cpu: nor(0xEDF8,0xEDF8)=0x1207
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面又是xor过程
Solar cpu: nor(0x0004,0x0004)=0xFFFB      ;
Solar cpu: nor(0xFFFB,0xFFFB)=0x0004      ;最后一个字符是个回车0Dh
Solar cpu: nor(0x0D35,0x0004)=0xF2CA      ;
Solar cpu: nor(0xF2CA,0xF2CA)=0x0D35      ;
Solar cpu: nor(0x0D35,0x0D35)=0xF2CA      ;
Solar cpu: nor(0x0004,0x0004)=0xFFFB      ;
Solar cpu: nor(0xF2CA,0xFFFB)=0x0004      ;
Solar cpu: nor(0x0004,0x0004)=0xFFFB      ;
Solar cpu: nor(0x0D35,0x0D35)=0xF2CA      ;
Solar cpu: nor(0xFFFB,0xFFFB)=0x0004      ;
Solar cpu: nor(0xF2CA,0x0004)=0x0D31      ;0D35h xor '45' xor '34' xor '23' xor '12' = 0D31h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1207,0x1207)=0xEDF8
Solar cpu: nor(0xEDF8,0xEDF8)=0x1207
Solar cpu: nor(0x1207,0x1207)=0xEDF8
Solar cpu: nor(0xEDF8,0xEDF8)=0x1207
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFF00,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0xFFF2,0x000D)=0x0000
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0000
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0xFFFF,0xEFAD)=0x0000
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0x0000,0xEEF5)=0x110A
Solar cpu: nor(0x0000,0x110A)=0xEEF5
Solar cpu: nor(0xEEF5,0xEEF5)=0x110A
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x113E,0x113E)=0xEEC1
Solar cpu: nor(0xEEC1,0xEEC1)=0x113E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1172,0x1172)=0xEE8D
Solar cpu: nor(0xEE8D,0xEE8D)=0x1172
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0546,0x0546)=0xFAB9
Solar cpu: nor(0xFAB9,0xFAB9)=0x0546      ;下面又是xor
Solar cpu: nor(0x7528,0x0D31)=0x82C6      ;
Solar cpu: nor(0x82C6,0x82C6)=0x7D39      ;
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x0D31,0x0D31)=0xF2CE      ;
Solar cpu: nor(0x8AD7,0xF2CE)=0x0520      ;
Solar cpu: nor(0x0520,0x0520)=0xFADF      ;
Solar cpu: nor(0x7D39,0x7D39)=0x82C6      ;
Solar cpu: nor(0xFADF,0xFADF)=0x0520      ;
Solar cpu: nor(0x82C6,0x0520)=0x7819      ;7528h xor 0D31 = 7819h
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000      ;下面是与0比较
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x7819,0x7819)=0x87E6
Solar cpu: nor(0x87E6,0x87E6)=0x7819
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x05B0,0x05B0)=0xFA4F
Solar cpu: nor(0xFA4F,0xFA4F)=0x05B0
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x7819                ;acc一般应该是判断结果,然后进行跳转用的
从上面的log中可以分析出来算法基本如下:
输入的字符串最后加个回车0Dh,然后一次取两个字符循环xor下去,结果与7528h比较
再细细观察一下过程,你会发现:
只看低位字节,不算最后的回车0Dh,所有的字符的xor结果需要等于28h
然后再只看高位字节,除去第一个字符且不算最后的回车0Dh,所有的字符的xor结果需要等于75h xor 0Dh = 78h
从上面两条只差一第一个字符的区别,所以第一个字符必须是78h xor 28h = 50h,也就是大写字母P,然后余下的字符xor起来等于78h

我们先按这个规则,随便构造一组密码,比如Pxxx,然后再得到一份log来观察:
Solar input
Solar cpu: nor(0x0EA0,0x0EA0)=0xF15F
Solar cpu: nor(0xF15F,0xF15F)=0x0EA0
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0ED4,0x0ED4)=0xF12B
Solar cpu: nor(0xF12B,0xF12B)=0x0ED4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0F08,0x0F08)=0xF0F7
Solar cpu: nor(0xF0F7,0xF0F7)=0x0F08
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x040A,0x040A)=0xFBF5
Solar cpu: nor(0xFBF5,0xFBF5)=0x040A
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x04A8,0x04A8)=0xFB57
Solar cpu: nor(0xFB57,0xFB57)=0x04A8
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0456,0x0456)=0xFBA9
Solar cpu: nor(0xFBA9,0xFBA9)=0x0456
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1242
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x048A,0x048A)=0xFB75
Solar cpu: nor(0xFB75,0xFB75)=0x048A
Solar cpu: nor(0x049A,0x049A)=0xFB65
Solar cpu: nor(0xFB65,0xFB65)=0x049A
Solar cpu: nor(0x0C23,0x0C23)=0xF3DC
Solar cpu: nor(0xF3DC,0xF3DC)=0x0C23
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x0C3F,0x0C3F)=0xF3C0
Solar cpu: nor(0xF3C0,0xF3C0)=0x0C3F
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0CDD,0x0CDD)=0xF322
Solar cpu: nor(0xF322,0xF322)=0x0CDD
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0C8B,0x0C8B)=0xF374
Solar cpu: nor(0xF374,0xF374)=0x0C8B
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1244
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x0CBF,0x0CBF)=0xF340
Solar cpu: nor(0xF340,0xF340)=0x0CBF
Solar cpu: nor(0x0CCF,0x0CCF)=0xF330
Solar cpu: nor(0xF330,0xF330)=0x0CCF
Solar cpu: nor(0x0B2A,0x0B2A)=0xF4D5
Solar cpu: nor(0xF4D5,0xF4D5)=0x0B2A
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x0200,0x0200)=0xFDFF
Solar cpu: nor(0xFDFF,0xFDFF)=0x0200
Solar cpu: nor(0x0B52,0x0B52)=0xF4AD
Solar cpu: nor(0xF4AD,0xF4AD)=0x0B52
Solar cpu: nor(0x0B94,0x0B94)=0xF46B
Solar cpu: nor(0xF46B,0xF46B)=0x0B94
Solar cpu: nor(0x0B6E,0x0B6E)=0xF491
Solar cpu: nor(0xF491,0xF491)=0x0B6E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar output
Solar cpu: nor(0x0B97,0x0B97)=0xF468
Solar cpu: nor(0xF468,0xF468)=0x0B97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0BCB,0x0BCB)=0xF434
Solar cpu: nor(0xF434,0xF434)=0x0BCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1246
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0BFF,0x0BFF)=0xF400
Solar cpu: nor(0xF400,0xF400)=0x0BFF
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0CDD,0x0CDD)=0xF322
Solar cpu: nor(0xF322,0xF322)=0x0CDD
Solar cpu: nor(0x000A,0x000A)=0xFFF5
Solar cpu: nor(0xFFF5,0xFFF5)=0x000A
Solar cpu: nor(0x0CF9,0x0CF9)=0xF306
Solar cpu: nor(0xF306,0xF306)=0x0CF9
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0D97,0x0D97)=0xF268
Solar cpu: nor(0xF268,0xF268)=0x0D97
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0D45,0x0D45)=0xF2BA
Solar cpu: nor(0xF2BA,0xF2BA)=0x0D45
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1244
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x0D79,0x0D79)=0xF286
Solar cpu: nor(0xF286,0xF286)=0x0D79
Solar cpu: nor(0x0D89,0x0D89)=0xF276
Solar cpu: nor(0xF276,0xF276)=0x0D89
Solar cpu: nor(0x0B2A,0x0B2A)=0xF4D5
Solar cpu: nor(0xF4D5,0xF4D5)=0x0B2A
Solar cpu: nor(0x000A,0x000A)=0xFFF5
Solar cpu: nor(0xFFF5,0xFFF5)=0x000A
Solar cpu: nor(0x0200,0x0200)=0xFDFF
Solar cpu: nor(0xFDFF,0xFDFF)=0x0200
Solar cpu: nor(0x0B52,0x0B52)=0xF4AD
Solar cpu: nor(0xF4AD,0xF4AD)=0x0B52
Solar cpu: nor(0x0B94,0x0B94)=0xF46B
Solar cpu: nor(0xF46B,0xF46B)=0x0B94
Solar cpu: nor(0x0B6E,0x0B6E)=0xF491
Solar cpu: nor(0xF491,0xF491)=0x0B6E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar output
Solar cpu: nor(0x0B97,0x0B97)=0xF468
Solar cpu: nor(0xF468,0xF468)=0x0B97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1246,0x1246)=0xEDB9
Solar cpu: nor(0xEDB9,0xEDB9)=0x1246
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0BCB,0x0BCB)=0xF434
Solar cpu: nor(0xF434,0xF434)=0x0BCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1246
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0BFF,0x0BFF)=0xF400
Solar cpu: nor(0xF400,0xF400)=0x0BFF
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0D97,0x0D97)=0xF268
Solar cpu: nor(0xF268,0xF268)=0x0D97
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0DCB,0x0DCB)=0xF234
Solar cpu: nor(0xF234,0xF234)=0x0DCB
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0DFF,0x0DFF)=0xF200
Solar cpu: nor(0xF200,0xF200)=0x0DFF
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x04A8,0x04A8)=0xFB57
Solar cpu: nor(0xFB57,0xFB57)=0x04A8
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0546,0x0546)=0xFAB9
Solar cpu: nor(0xFAB9,0xFAB9)=0x0546
Solar cpu: nor(0x0002,0x0002)=0xFFFD
Solar cpu: nor(0xFFFD,0xFFFD)=0x0002
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x04F4,0x04F4)=0xFB0B
Solar cpu: nor(0xFB0B,0xFB0B)=0x04F4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0002,cx=0x1242
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x0528,0x0528)=0xFAD7
Solar cpu: nor(0xFAD7,0xFAD7)=0x0528
Solar cpu: nor(0x0538,0x0538)=0xFAC7
Solar cpu: nor(0xFAC7,0xFAC7)=0x0538
Solar cpu: nor(0x0F2C,0x0F2C)=0xF0D3
Solar cpu: nor(0xF0D3,0xF0D3)=0x0F2C
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x0F48,0x0F48)=0xF0B7
Solar cpu: nor(0xF0B7,0xF0B7)=0x0F48
Solar cpu: nor(0xE3C7,0xE3C7)=0x1C38
Solar cpu: nor(0x1C38,0xE3C7)=0x0000
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x7850,0x7850)=0x87AF
Solar cpu: nor(0x87AF,0x87AF)=0x7850
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x7850,0x7850)=0x87AF
Solar cpu: nor(0xFF00,0x87AF)=0x0050
Solar cpu: nor(0x000D,0x0050)=0xFFA2
Solar cpu: nor(0xFFA2,0xFFA2)=0x005D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0050,0x0050)=0xFFAF
Solar cpu: nor(0xFFF2,0xFFAF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x005D,0x005D)=0xFFA2
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0xFFA2,0x0000)=0x005D
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x005D,0x005D)=0xFFA2
Solar cpu: nor(0xFFA2,0xFFA2)=0x005D
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x005D
Solar cpu: nor(0x005C,0x005C)=0xFFA3
Solar cpu: nor(0xFFA3,0xFFA3)=0x005C
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1202,0x1202)=0xEDFD
Solar cpu: nor(0xEDFD,0xEDFD)=0x1202
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1202
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x7850,0x0000)=0x87AF
Solar cpu: nor(0x87AF,0x87AF)=0x7850
Solar cpu: nor(0x7850,0x7850)=0x87AF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x87AF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x7850,0x7850)=0x87AF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x87AF,0x0000)=0x7850
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x7878,0x7878)=0x8787
Solar cpu: nor(0x8787,0x8787)=0x7878
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x7878,0x7878)=0x8787
Solar cpu: nor(0xFF00,0x8787)=0x0078
Solar cpu: nor(0x000D,0x0078)=0xFF82
Solar cpu: nor(0xFF82,0xFF82)=0x007D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0078,0x0078)=0xFF87
Solar cpu: nor(0xFFF2,0xFF87)=0x0008
Solar cpu: nor(0x0008,0x0008)=0xFFF7
Solar cpu: nor(0x007D,0x007D)=0xFF82
Solar cpu: nor(0xFFF7,0xFFF7)=0x0008
Solar cpu: nor(0xFF82,0x0008)=0x0075
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0075,0x0075)=0xFF8A
Solar cpu: nor(0xFF8A,0xFF8A)=0x0075
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0075
Solar cpu: nor(0x0074,0x0074)=0xFF8B
Solar cpu: nor(0xFF8B,0xFF8B)=0x0074
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1203,0x1203)=0xEDFC
Solar cpu: nor(0xEDFC,0xEDFC)=0x1203
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1203
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面是xor过程
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0x87AF,0x87AF)=0x7850      ;
Solar cpu: nor(0x7878,0x7850)=0x8787      ;
Solar cpu: nor(0x8787,0x8787)=0x7878      ;
Solar cpu: nor(0x7878,0x7878)=0x8787      ;
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0x8787,0x87AF)=0x7850      ;
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0x7878,0x7878)=0x8787      ;
Solar cpu: nor(0x87AF,0x87AF)=0x7850      ;
Solar cpu: nor(0x8787,0x7850)=0x0028      ;'xx' xor 'Px' = 0028h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x7878,0x7878)=0x8787
Solar cpu: nor(0x8787,0x8787)=0x7878
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x7878,0x7878)=0x8787
Solar cpu: nor(0xFF00,0x8787)=0x0078
Solar cpu: nor(0x000D,0x0078)=0xFF82
Solar cpu: nor(0xFF82,0xFF82)=0x007D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0078,0x0078)=0xFF87
Solar cpu: nor(0xFFF2,0xFF87)=0x0008
Solar cpu: nor(0x0008,0x0008)=0xFFF7
Solar cpu: nor(0x007D,0x007D)=0xFF82
Solar cpu: nor(0xFFF7,0xFFF7)=0x0008
Solar cpu: nor(0xFF82,0x0008)=0x0075
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0075,0x0075)=0xFF8A
Solar cpu: nor(0xFF8A,0xFF8A)=0x0075
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0075
Solar cpu: nor(0x0074,0x0074)=0xFF8B
Solar cpu: nor(0xFF8B,0xFF8B)=0x0074
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1204,0x1204)=0xEDFB
Solar cpu: nor(0xEDFB,0xEDFB)=0x1204
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1204
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面是xor过程
Solar cpu: nor(0x0028,0x0028)=0xFFD7      ;
Solar cpu: nor(0xFFD7,0xFFD7)=0x0028      ;
Solar cpu: nor(0x7878,0x0028)=0x8787      ;
Solar cpu: nor(0x8787,0x8787)=0x7878      ;
Solar cpu: nor(0x7878,0x7878)=0x8787      ;
Solar cpu: nor(0x0028,0x0028)=0xFFD7      ;
Solar cpu: nor(0x8787,0xFFD7)=0x0028      ;
Solar cpu: nor(0x0028,0x0028)=0xFFD7      ;
Solar cpu: nor(0x7878,0x7878)=0x8787      ;
Solar cpu: nor(0xFFD7,0xFFD7)=0x0028      ;
Solar cpu: nor(0x8787,0x0028)=0x7850      ;'xx' xor 'xx' xor 'Px' = 7850h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x0D78,0x0D78)=0xF287
Solar cpu: nor(0xF287,0xF287)=0x0D78
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x0D78,0x0D78)=0xF287
Solar cpu: nor(0xFF00,0xF287)=0x0078
Solar cpu: nor(0x000D,0x0078)=0xFF82
Solar cpu: nor(0xFF82,0xFF82)=0x007D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x0078,0x0078)=0xFF87
Solar cpu: nor(0xFFF2,0xFF87)=0x0008
Solar cpu: nor(0x0008,0x0008)=0xFFF7
Solar cpu: nor(0x007D,0x007D)=0xFF82
Solar cpu: nor(0xFFF7,0xFFF7)=0x0008
Solar cpu: nor(0xFF82,0x0008)=0x0075
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0075,0x0075)=0xFF8A
Solar cpu: nor(0xFF8A,0xFF8A)=0x0075
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0075
Solar cpu: nor(0x0074,0x0074)=0xFF8B
Solar cpu: nor(0xFF8B,0xFF8B)=0x0074
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0x0000,0xEFAD)=0x1052
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0xFFFF,0xEEF5)=0x0000
Solar cpu: nor(0x1052,0x0000)=0xEFAD
Solar cpu: nor(0xEFAD,0xEFAD)=0x1052
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x1205,0x1205)=0xEDFA
Solar cpu: nor(0xEDFA,0xEDFA)=0x1205
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x1086,0x1086)=0xEF79
Solar cpu: nor(0xEF79,0xEF79)=0x1086
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0x0001,cx=0x1205
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x10BA,0x10BA)=0xEF45
Solar cpu: nor(0xEF45,0xEF45)=0x10BA      ;下面是xor过程
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0x87AF,0x87AF)=0x7850      ;
Solar cpu: nor(0x0D78,0x7850)=0x8287      ;
Solar cpu: nor(0x8287,0x8287)=0x7D78      ;
Solar cpu: nor(0x0D78,0x0D78)=0xF287      ;
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0xF287,0x87AF)=0x0850      ;
Solar cpu: nor(0x0850,0x0850)=0xF7AF      ;
Solar cpu: nor(0x7D78,0x7D78)=0x8287      ;
Solar cpu: nor(0xF7AF,0xF7AF)=0x0850      ;
Solar cpu: nor(0x8287,0x0850)=0x7528      ;0D78h xor 'xx' xor 'xx' xor 'Px' = 7528h
Solar cpu: nor(0x0F54,0x0F54)=0xF0AB
Solar cpu: nor(0xF0AB,0xF0AB)=0x0F54
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x1206,0x1206)=0xEDF9
Solar cpu: nor(0xEDF9,0xEDF9)=0x1206
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x00FF,0x00FF)=0xFF00
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFF00,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0x000D,0x000D)=0xFFF2
Solar cpu: nor(0xFFF2,0xFFF2)=0x000D
Solar cpu: nor(0xFFF2,0x000D)=0x0000
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0FF4,0x0FF4)=0xF00B
Solar cpu: nor(0xF00B,0xF00B)=0x0FF4
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0000
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x1052,0x1052)=0xEFAD
Solar cpu: nor(0xFFFF,0xEFAD)=0x0000
Solar cpu: nor(0x110A,0x110A)=0xEEF5
Solar cpu: nor(0x0000,0xEEF5)=0x110A
Solar cpu: nor(0x0000,0x110A)=0xEEF5
Solar cpu: nor(0xEEF5,0xEEF5)=0x110A
Solar cpu: nor(0xFFFE,0xFFFE)=0x0001
Solar cpu: nor(0x0001,0x0001)=0xFFFE
Solar cpu: nor(0x1244,0x1244)=0xEDBB
Solar cpu: nor(0xEDBB,0xEDBB)=0x1244
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x113E,0x113E)=0xEEC1
Solar cpu: nor(0xEEC1,0xEEC1)=0x113E
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFE,cx=0x1244
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1172,0x1172)=0xEE8D
Solar cpu: nor(0xEE8D,0xEE8D)=0x1172
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x1242,0x1242)=0xEDBD
Solar cpu: nor(0xEDBD,0xEDBD)=0x1242
Solar cpu: nor(0x0546,0x0546)=0xFAB9
Solar cpu: nor(0xFAB9,0xFAB9)=0x0546      ;下面是xor过程
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x8AD7,0x8AD7)=0x7528      ;
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x8AD7,0x8AD7)=0x7528      ;
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x7528,0x7528)=0x8AD7      ;
Solar cpu: nor(0x8AD7,0x8AD7)=0x7528      ;
Solar cpu: nor(0x8AD7,0x7528)=0x0000      ;7528h xor 7528h = 0
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000      ;与0比较
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x05B0,0x05B0)=0xFA4F
Solar cpu: nor(0xFA4F,0xFA4F)=0x05B0
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x0000
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x06D6,0x06D6)=0xF929
Solar cpu: nor(0xFFFF,0xF929)=0x0000
Solar cpu: nor(0x060E,0x060E)=0xF9F1
Solar cpu: nor(0x0000,0xF9F1)=0x060E
Solar cpu: nor(0x0000,0x060E)=0xF9F1
Solar cpu: nor(0xF9F1,0xF9F1)=0x060E      ;下面是xor过程,发现我的输入Pxxx构造的不好,容易分歧,懒得重写过程了
Solar cpu: nor(0x784D,0x7850)=0x87A2      ;7850h是前面输入值部分倒数第二次的xor结果
Solar cpu: nor(0x87A2,0x87A2)=0x785D      ;
Solar cpu: nor(0x784D,0x784D)=0x87B2      ;
Solar cpu: nor(0x7850,0x7850)=0x87AF      ;
Solar cpu: nor(0x87B2,0x87AF)=0x7840      ;
Solar cpu: nor(0x7840,0x7840)=0x87BF      ;
Solar cpu: nor(0x785D,0x785D)=0x87A2      ;
Solar cpu: nor(0x87BF,0x87BF)=0x7840      ;
Solar cpu: nor(0x87A2,0x7840)=0x001D      ;784Dh xor 7850h = 001Dh
Solar cpu: nor(0xFFFF,0xFFFF)=0x0000      ;与0比较
Solar cpu: nor(0x0000,0x0000)=0xFFFF
Solar cpu: nor(0x001D,0x001D)=0xFFE2
Solar cpu: nor(0xFFE2,0xFFE2)=0x001D
Solar cpu: nor(0x014D,0x014D)=0xFEB2
Solar cpu: nor(0xFEB2,0xFEB2)=0x014D
Solar cpu: nor(0x0678,0x0678)=0xF987
Solar cpu: nor(0xF987,0xF987)=0x0678
Solar cpu: nor(0x368B,0x368B)=0xC974
Solar cpu: nor(0xC974,0xC974)=0x368B
Solar cpu: nor(0x15EB,0x15EB)=0xEA14
Solar acc: ax=0xFFFF,cx=0x001D
从上面的log中可以分析出来进一步的算法:
输入的字符串舍弃最后一个字符,然后一次取两个字符循环xor下去,结果与754Dh比较
再细细观察一下过程,你又会发现:
然后再只看高位字节,除去第一个字符且不算最后的回车0Dh,所有的字符的xor结果需要等于78h,这条与第一log分析一致
只看低位字节,舍弃最后一个字符和回车0Dh,所有的字符的xor结果需要等于4Dh
从后面这条,结合第一份log的结论,可以算出最后一个字符是4Dh xor 28h = 65h,也就是最后一个字符是e
再梳理一下得到算法总结如下:
第一个字符是P,最后一个字符是e,所有字符xor起来等于28h,例如Pierce

manbug 发表于 2010-3-4 21:44:38

楼上的领队真厉害!什么时候能达到你的水平啊,唉。

Nisy 发表于 2010-3-5 00:26:44

原帖由 manbug 于 2010-3-4 21:44 发表 https://www.chinapyg.com/images/common/back.gif
楼上的领队真厉害!什么时候能达到你的水平啊,唉。

是转载的 HeXer大神分析的 我可弄不了这个 这是圈子里边的一猛会二猛 旁人只能看热闹了
页: [1]
查看完整版本: 解謎游戲 - CrackMe by ZeNiX