├── README.md ├── 26.0.0 - X-Gorgon.7z └── ttEncrypt 分析.txt /README.md: -------------------------------------------------------------------------------- 1 | # DouYin_algorithm 2 | Dy版本 26.0.0 算法分析 后续不定时更新六神 3 | -------------------------------------------------------------------------------- /26.0.0 - X-Gorgon.7z: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Ccccccccvvm/DouYin_algorithm/HEAD/26.0.0 - X-Gorgon.7z -------------------------------------------------------------------------------- /ttEncrypt 分析.txt: -------------------------------------------------------------------------------- 1 | [16:00:26 766][libEncryptor.so 0x02bd0] [896e8c52] 0x40002bd0: "movz w9, #0x6374" w9=0x4000b290 => w9=0x6374 2 | [16:00:26 766][libEncryptor.so 0x02bd4] [a900a272] 0x40002bd4: "movk w9, #0x1005, lsl #16" w9=0x6374 => w9=0x10056374 3 | 4 | 5 | [17:53:10 493][libEncryptor.so 0x02bd0] [896e8c52] 0x40002bd0: "movz w9, #0x6374" w9=0x4000b290 => w9=0x6374 6 | [17:53:10 494][libEncryptor.so 0x02bd4] [a900a272] 0x40002bd4: "movk w9, #0x1005, lsl #16" w9=0x6374 => w9=0x10056374 7 | 74630510 //固定 8 | 9 | 0000 //固定 10 | 11 | 12 | E4 60 69 94 EC 57 4B 0F BF DE 8E 26 7E DB 35 0F C0 46 55 45 86 11 E6 1D 67 63 45 D0 11 DF 46 F5 //循环取32位随机数 13 | 14 | 15 | 16 | f602f17a22f0359dadf502a51d95caa8660aceb8701c74a689cddeeaed88f58ff5f14648b0cb34fb8c9d1d76ba3b82cab9db283197e0448612b3ff8a3b7cfa301f10fbbb52e8c9f68a6fa99c93e3d4a7 //AesCbc加密后内容 17 | 18 | 19 | 20 | // SHa512 计算第一段 21 | SHa512结果 = 668902766fa3e05cab6ae9618bf1c2ec54e5975eafbbbaac25aee8155e9a3be5be468a1501da623b6a479cf228f101a2213562b8c8e81a1e84140a6f7b8a9bb7 22 | >-----------------------------------------------------------------------------< 数据来源 //循环取32位随机数 23 | [20:43:56 565]x0=RW@0x40358000, md5=93dc60fb42371145c8aecb2feb23986b, hex=e4606994ec574b0fbfde8e267edb350fc04655458611e61d676345d011df46f5 24 | size: 32 25 | 0000: E4 60 69 94 EC 57 4B 0F BF DE 8E 26 7E DB 35 0F .`i..WK....&~.5. 26 | 0010: C0 46 55 45 86 11 E6 1D 67 63 45 D0 11 DF 46 F5 .FUE....gcE...F. 27 | ^-----------------------------------------------------------------------------^ 28 | 29 | 30 | 31 | 32 | // SHa512 计算aes key iv 33 | SHa512结果 = a6fa84e68a44b1c551f97e8754e381b049d657ccf1004891e33a205bd682093b946f488fd019f8afb3193c99878cdb632c22052a5a700f72c5678c35ef5ea18f 34 | 0000: A6 FA 84 E6 8A 44 B1 C5 51 F9 7E 87 54 E3 81 B0 .....D..Q.~.T... //key 35 | 0010: 49 D6 57 CC F1 00 48 91 E3 3A 20 5B D6 82 09 3B I.W...H..: [...; //iv 36 | >-----------------------------------------------------------------------------< 37 | [20:44:22 443]x0=RW@0x40356100, md5=7301f635317b3738045e5e1e4c290bc9, hex=668902766fa3e05cab6ae9618bf1c2ec54e5975eafbbbaac25aee8155e9a3be5be468a1501da623b6a479cf228f101a2213562b8c8e81a1e84140a6f7b8a9bb7 4dd4c2e6b83162090e52b3c7a6733ba41cb2462b829ab58a196b39db57177524f49baf7f08e8d68d26a72e37c1a95a2f1f05a51892aef2949732b62a38aadd58 固定 38 | size: 128 39 | 0000: 66 89 02 76 6F A3 E0 5C AB 6A E9 61 8B F1 C2 EC f..vo..\.j.a.... 40 | 0010: 54 E5 97 5E AF BB BA AC 25 AE E8 15 5E 9A 3B E5 T..^....%...^.;. 41 | 0020: BE 46 8A 15 01 DA 62 3B 6A 47 9C F2 28 F1 01 A2 .F....b;jG..(... 42 | 0030: 21 35 62 B8 C8 E8 1A 1E 84 14 0A 6F 7B 8A 9B B7 !5b........o{... 43 | 0040: 4D D4 C2 E6 B8 31 62 09 0E 52 B3 C7 A6 73 3B A4 M....1b..R...s;. 44 | 0050: 1C B2 46 2B 82 9A B5 8A 19 6B 39 DB 57 17 75 24 ..F+.....k9.W.u$ 45 | 0060: F4 9B AF 7F 08 E8 D6 8D 26 A7 2E 37 C1 A9 5A 2F ........&..7..Z/ 46 | 0070: 1F 05 A5 18 92 AE F2 94 97 32 B6 2A 38 AA DD 58 .........2.*8..X 47 | ^-----------------------------------------------------------------------------^ 48 | 49 | 50 | 51 | 52 | 53 | 54 | aes需要加密内容 = AES(SHA512（9fdafd） + 9fdafd) 9fdafd = 加密后原文 55 | f1eb6596f4a972cdf1886c8ea5853af6a2b580960c9dfc12ca419a0cda00348e8674e666f63b155bcd45450a6ecafc3e2a756d0dfa8850c6d16ba9fe724b2c089fdafd 56 | >-----------------------------------------------------------------------------< 57 | [20:46:03 712]x0=RW@0x40051000[libc++.so]0x1000, md5=dcc2939ba34ef83489001096d363976e, hex=9fdafd 58 | size: 3 59 | 0000: 9F DA FD ... 60 | ^-----------------------------------------------------------------------------^ --------------------------------------------------------------------------------