﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>C++博客-Error-随笔分类-网狐棋牌源码分析</title><link>http://cppblog.com/Error/category/19835.html</link><description /><language>zh-cn</language><lastBuildDate>Mon, 19 Aug 2013 10:45:54 GMT</lastBuildDate><pubDate>Mon, 19 Aug 2013 10:45:54 GMT</pubDate><ttl>60</ttl><item><title>网狐6003居然已经改成tcp端连接了，泥马啊，，，</title><link>http://www.cppblog.com/Error/archive/2013/08/12/202476.html</link><dc:creator>Enic</dc:creator><author>Enic</author><pubDate>Sun, 11 Aug 2013 16:53:00 GMT</pubDate><guid>http://www.cppblog.com/Error/archive/2013/08/12/202476.html</guid><wfw:comment>http://www.cppblog.com/Error/comments/202476.html</wfw:comment><comments>http://www.cppblog.com/Error/archive/2013/08/12/202476.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cppblog.com/Error/comments/commentRss/202476.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/Error/services/trackbacks/202476.html</trackback:ping><description><![CDATA[<p>大厅确定已经是短连接了，，，为了支持手机？，，，泥马，，，这该不是中了我们公司的木马了吧，，，</p> <p>&nbsp;</p> <p>个人感觉这不是一个好方向，，，做个神马都要把密码带上，，，不过这样服务器设计确实简单很多，，，</p><img src ="http://www.cppblog.com/Error/aggbug/202476.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/Error/" target="_blank">Enic</a> 2013-08-12 00:53 <a href="http://www.cppblog.com/Error/archive/2013/08/12/202476.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Mission系统预览</title><link>http://www.cppblog.com/Error/archive/2013/08/12/202475.html</link><dc:creator>Enic</dc:creator><author>Enic</author><pubDate>Sun, 11 Aug 2013 16:33:00 GMT</pubDate><guid>http://www.cppblog.com/Error/archive/2013/08/12/202475.html</guid><wfw:comment>http://www.cppblog.com/Error/comments/202475.html</wfw:comment><comments>http://www.cppblog.com/Error/archive/2013/08/12/202475.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cppblog.com/Error/comments/commentRss/202475.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/Error/services/trackbacks/202475.html</trackback:ping><description><![CDATA[<p><a href="http://www.cppblog.com/images/cppblog_com/Error/Windows-Live-Writer/Mission_73D/image_2.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.cppblog.com/images/cppblog_com/Error/Windows-Live-Writer/Mission_73D/image_thumb.png" width="1012" height="571" /></a></p> <p>&nbsp;</p> <p>从大局上看Mission是和整体的MVC框架协作的，那ServerListData来说，ServerList这一个逻辑可以单独出来，维护三个位置Data、Mission、View<br />具体到list data的获取都直接由Mission完成，其他模块之需要使用就OK，Mission自己有策略决定何时去获取，或者定时更新</p><img src ="http://www.cppblog.com/Error/aggbug/202475.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/Error/" target="_blank">Enic</a> 2013-08-12 00:33 <a href="http://www.cppblog.com/Error/archive/2013/08/12/202475.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>大厅的列表服务预览</title><link>http://www.cppblog.com/Error/archive/2013/08/11/202473.html</link><dc:creator>Enic</dc:creator><author>Enic</author><pubDate>Sun, 11 Aug 2013 15:24:00 GMT</pubDate><guid>http://www.cppblog.com/Error/archive/2013/08/11/202473.html</guid><wfw:comment>http://www.cppblog.com/Error/comments/202473.html</wfw:comment><comments>http://www.cppblog.com/Error/archive/2013/08/11/202473.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cppblog.com/Error/comments/commentRss/202473.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/Error/services/trackbacks/202473.html</trackback:ping><description><![CDATA[<p><a href="http://www.cppblog.com/images/cppblog_com/Error/Windows-Live-Writer/93c45859e395_14879/image_2.png"><img style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="image" border="0" alt="image" src="http://www.cppblog.com/images/cppblog_com/Error/Windows-Live-Writer/93c45859e395_14879/image_thumb.png" width="879" height="518"></a></p><img src ="http://www.cppblog.com/Error/aggbug/202473.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/Error/" target="_blank">Enic</a> 2013-08-11 23:24 <a href="http://www.cppblog.com/Error/archive/2013/08/11/202473.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>网狐的加密模块，映射加密算法分析</title><link>http://www.cppblog.com/Error/archive/2012/12/11/196157.html</link><dc:creator>Enic</dc:creator><author>Enic</author><pubDate>Tue, 11 Dec 2012 02:19:00 GMT</pubDate><guid>http://www.cppblog.com/Error/archive/2012/12/11/196157.html</guid><wfw:comment>http://www.cppblog.com/Error/comments/196157.html</wfw:comment><comments>http://www.cppblog.com/Error/archive/2012/12/11/196157.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cppblog.com/Error/comments/commentRss/196157.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/Error/services/trackbacks/196157.html</trackback:ping><description><![CDATA[<p>//发送映射<br />const BYTE g_SendByteMap[256]=<br />{<br />&nbsp;&nbsp;&nbsp; 0x70,0x2F,0x40,0x5F,0x44,0x8E,0x6E,0x45,0x7E,0xAB,0x2C,0x1F,0xB4,0xAC,0x9D,0x91,<br />&nbsp;&nbsp;&nbsp; 0x0D,0x36,0x9B,0x0B,0xD4,0xC4,0x39,0x74,0xBF,0x23,0x16,0x14,0x06,0xEB,0x04,0x3E,<br />&nbsp;&nbsp;&nbsp; 0x12,0x5C,0x8B,0xBC,0x61,0x63,0xF6,0xA5,0xE1,0x65,0xD8,0xF5,0x5A,0x07,0xF0,0x13,<br />&nbsp;&nbsp;&nbsp; 0xF2,0x20,0x6B,0x4A,0x24,0x59,0x89,0x64,0xD7,0x42,0x6A,0x5E,0x3D,0x0A,0x77,0xE0,<br />&nbsp;&nbsp;&nbsp; 0x80,0x27,0xB8,0xC5,0x8C,0x0E,0xFA,0x8A,0xD5,0x29,0x56,0x57,0x6C,0x53,0x67,0x41,<br />&nbsp;&nbsp;&nbsp; 0xE8,0x00,0x1A,0xCE,0x86,0x83,0xB0,0x22,0x28,0x4D,0x3F,0x26,0x46,0x4F,0x6F,0x2B,<br />&nbsp;&nbsp;&nbsp; 0x72,0x3A,0xF1,0x8D,0x97,0x95,0x49,0x84,0xE5,0xE3,0x79,0x8F,0x51,0x10,0xA8,0x82,<br />&nbsp;&nbsp;&nbsp; 0xC6,0xDD,0xFF,0xFC,0xE4,0xCF,0xB3,0x09,0x5D,0xEA,0x9C,0x34,0xF9,0x17,0x9F,0xDA,<br />&nbsp;&nbsp;&nbsp; 0x87,0xF8,0x15,0x05,0x3C,0xD3,0xA4,0x85,0x2E,0xFB,0xEE,0x47,0x3B,0xEF,0x37,0x7F,<br />&nbsp;&nbsp;&nbsp; 0x93,0xAF,0x69,0x0C,0x71,0x31,0xDE,0x21,0x75,0xA0,0xAA,0xBA,0x7C,0x38,0x02,0xB7,<br />&nbsp;&nbsp;&nbsp; 0x81,0x01,0xFD,0xE7,0x1D,0xCC,0xCD,0xBD,0x1B,0x7A,0x2A,0xAD,0x66,0xBE,0x55,0x33,<br />&nbsp;&nbsp;&nbsp; 0x03,0xDB,0x88,0xB2,0x1E,0x4E,0xB9,0xE6,0xC2,0xF7,0xCB,0x7D,0xC9,0x62,0xC3,0xA6,<br />&nbsp;&nbsp;&nbsp; 0xDC,0xA7,0x50,0xB5,0x4B,0x94,0xC0,0x92,0x4C,0x11,0x5B,0x78,0xD9,0xB1,0xED,0x19,<br />&nbsp;&nbsp;&nbsp; 0xE9,0xA1,0x1C,0xB6,0x32,0x99,0xA3,0x76,0x9E,0x7B,0x6D,0x9A,0x30,0xD6,0xA9,0x25,<br />&nbsp;&nbsp;&nbsp; 0xC7,0xAE,0x96,0x35,0xD0,0xBB,0xD2,0xC8,0xA2,0x08,0xF3,0xD1,0x73,0xF4,0x48,0x2D,<br />&nbsp;&nbsp;&nbsp; 0x90,0xCA,0xE2,0x58,0xC1,0x18,0x52,0xFE,0xDF,0x68,0x98,0x54,0xEC,0x60,0x43,0x0F<br />};  </p><p>//接收映射<br />const BYTE g_RecvByteMap[256]=<br />{<br />&nbsp;&nbsp;&nbsp; 0x51,0xA1,0x9E,0xB0,0x1E,0x83,0x1C,0x2D,0xE9,0x77,0x3D,0x13,0x93,0x10,0x45,0xFF,<br />&nbsp;&nbsp;&nbsp; 0x6D,0xC9,0x20,0x2F,0x1B,0x82,0x1A,0x7D,0xF5,0xCF,0x52,0xA8,0xD2,0xA4,0xB4,0x0B,<br />&nbsp;&nbsp;&nbsp; 0x31,0x97,0x57,0x19,0x34,0xDF,0x5B,0x41,0x58,0x49,0xAA,0x5F,0x0A,0xEF,0x88,0x01,<br />&nbsp;&nbsp;&nbsp; 0xDC,0x95,0xD4,0xAF,0x7B,0xE3,0x11,0x8E,0x9D,0x16,0x61,0x8C,0x84,0x3C,0x1F,0x5A,<br />&nbsp;&nbsp;&nbsp; 0x02,0x4F,0x39,0xFE,0x04,0x07,0x5C,0x8B,0xEE,0x66,0x33,0xC4,0xC8,0x59,0xB5,0x5D,<br />&nbsp;&nbsp;&nbsp; 0xC2,0x6C,0xF6,0x4D,0xFB,0xAE,0x4A,0x4B,0xF3,0x35,0x2C,0xCA,0x21,0x78,0x3B,0x03,<br />&nbsp;&nbsp;&nbsp; 0xFD,0x24,0xBD,0x25,0x37,0x29,0xAC,0x4E,0xF9,0x92,0x3A,0x32,0x4C,0xDA,0x06,0x5E,<br />&nbsp;&nbsp;&nbsp; 0x00,0x94,0x60,0xEC,0x17,0x98,0xD7,0x3E,0xCB,0x6A,0xA9,0xD9,0x9C,0xBB,0x08,0x8F,<br />&nbsp;&nbsp;&nbsp; 0x40,0xA0,0x6F,0x55,0x67,0x87,0x54,0x80,0xB2,0x36,0x47,0x22,0x44,0x63,0x05,0x6B,<br />&nbsp;&nbsp;&nbsp; 0xF0,0x0F,0xC7,0x90,0xC5,0x65,0xE2,0x64,0xFA,0xD5,0xDB,0x12,0x7A,0x0E,0xD8,0x7E,<br />&nbsp;&nbsp;&nbsp; 0x99,0xD1,0xE8,0xD6,0x86,0x27,0xBF,0xC1,0x6E,0xDE,0x9A,0x09,0x0D,0xAB,0xE1,0x91,<br />&nbsp;&nbsp;&nbsp; 0x56,0xCD,0xB3,0x76,0x0C,0xC3,0xD3,0x9F,0x42,0xB6,0x9B,0xE5,0x23,0xA7,0xAD,0x18,<br />&nbsp;&nbsp;&nbsp; 0xC6,0xF4,0xB8,0xBE,0x15,0x43,0x70,0xE0,0xE7,0xBC,0xF1,0xBA,0xA5,0xA6,0x53,0x75,<br />&nbsp;&nbsp;&nbsp; 0xE4,0xEB,0xE6,0x85,0x14,0x48,0xDD,0x38,0x2A,0xCC,0x7F,0xB1,0xC0,0x71,0x96,0xF8,<br />&nbsp;&nbsp;&nbsp; 0x3F,0x28,0xF2,0x69,0x74,0x68,0xB7,0xA3,0x50,0xD0,0x79,0x1D,0xFC,0xCE,0x8A,0x8D,<br />&nbsp;&nbsp;&nbsp; 0x2E,0x62,0x30,0xEA,0xED,0x2B,0x26,0xB9,0x81,0x7C,0x46,0x89,0x73,0xA2,0xF7,0x72<br />};<br />// MapSend<br />desData = g_SendByteMap[(BYTE)(srcData+m_cbSendRound)];<br />m_cbSendRound += 3;<br />// MapRecv<br />desData = g_RecvByteMap[cbData] - m_cbRecvRound;<br />m_cbRecvRound += 3;  </p><p>映射加密原理分析：<br />约定srcData表示准备加密的数据desData表示加密后的数据，sendMap表示发送Map，recvMap表示接收Map；<br />就以上代码中恒有:<br />推导：<br />if desData == sendMap[srcData + offset]<br />then srcData == recvMap[desData] - offset<br />这个公式可以自己取一个[0, 255]之间的值，带到上面两个map中去算，，，<br />分析：<br />BYTE可能的值是0到255，正好是map的索引。<br />sendMap提供把实际值变成recvMap的索引的能力。<br />recvMap提供把recvMap索引还原成真实值的能力。<br />offset的引入是为了加强破解难度，唯一可能疑惑的问题是BYTE溢出，这个可以参考计算机组成原理前几章。<br />我们可以这样山寨：<br />class CSendMapper;<br />class CRecvMapper;<br />很显然sendMap是和CSendMapper类紧耦合的，recvMapper和CRecvMapper类紧耦合<br />所以：<br />class CSendMapper<br />&nbsp; ;<br />class CRecvMapper<br />&nbsp; static const BYTE[256] ms_recvMap;<br />接下来是offset，在网狐的代码中每次都有如下操作：m_cbSendRound += 3;<br />所以offset是和Mapper对象耦合的，同时也是上下文相关的，这样也倒置mapper是上下文相关的。<br />class CSendMapper<br />&nbsp; static const BYTE[256] ms_sendMap;<br />&nbsp; ;<br />class CRecvMapper<br />&nbsp; static const BYTE[256] ms_recvMap;<br />&nbsp; BYTE m_btOffset;  </p><p>&nbsp; </p><p><a href="http://www.cppblog.com/images/cppblog_com/Error/WindowsLiveWriter/4fbdc604ce16_915D/image_2.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="image" border="0" alt="image" src="http://www.cppblog.com/images/cppblog_com/Error/WindowsLiveWriter/4fbdc604ce16_915D/image_thumb.png" width="324" height="260" /></a>  </p><p>这样，只要是offset匹配的recv和send协作就能实现数据加解映射了，，， </p><p>最后的测试代码如下（MAP函数被实现的时候改了，返回值的做法写起来是方便了，但是优化的时候比较麻烦）： </p><p>nf6602::CSendMapper sendMapper;<br />_el::TBYTE btTem = 0;<br />sendMapper.SendMap(0, btTem);<br />if (0x70 != btTem)<br />{<br />&nbsp;&nbsp;&nbsp; std::cout &lt;&lt; "sendMapper.SendMap faild!" &lt;&lt; std::endl;<br />}  </p><p>nf6602::CRecvMapper recvMapper;<br />btTem = 0;<br />recvMapper.RecvMap(0, btTem);<br />if (0x51 != btTem)<br />{<br />&nbsp;&nbsp;&nbsp; std::cout &lt;&lt; "recvMapper.RecvMap faild!" &lt;&lt; std::endl;<br />}  </p><p>//if desData == sendMap[srcData]<br />//then srcData == recvMap[desData]<br />for (int i = 0; i &lt; _EL_MAX_TBYTE*10; i++)<br />{<br />&nbsp;&nbsp;&nbsp; _el::TBYTE btSrcData = i;<br />&nbsp;&nbsp;&nbsp; _el::TBYTE btDesData = 0;<br />&nbsp;&nbsp;&nbsp; sendMapper.SendMap(btSrcData, btTem);<br />&nbsp;&nbsp;&nbsp; recvMapper.RecvMap(btTem, btDesData);<br />&nbsp;&nbsp;&nbsp; if (btSrcData != btDesData)<br />&nbsp;&nbsp;&nbsp; {<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; std::cout &lt;&lt; "if desData == sendMap[srcData] then srcData == recvMap[desData] faild!" &lt;&lt; std::endl;<br />&nbsp;&nbsp;&nbsp; }<br />&nbsp;&nbsp;&nbsp; else<br />&nbsp;&nbsp;&nbsp; {<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; int j = 0 ;<br />&nbsp;&nbsp;&nbsp; }<br />}  </p><img src ="http://www.cppblog.com/Error/aggbug/196157.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/Error/" target="_blank">Enic</a> 2012-12-11 10:19 <a href="http://www.cppblog.com/Error/archive/2012/12/11/196157.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Module.h  网狐的“com”工具箱</title><link>http://www.cppblog.com/Error/archive/2012/08/27/188435.html</link><dc:creator>Enic</dc:creator><author>Enic</author><pubDate>Mon, 27 Aug 2012 09:07:00 GMT</pubDate><guid>http://www.cppblog.com/Error/archive/2012/08/27/188435.html</guid><wfw:comment>http://www.cppblog.com/Error/comments/188435.html</wfw:comment><comments>http://www.cppblog.com/Error/archive/2012/08/27/188435.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.cppblog.com/Error/comments/commentRss/188435.html</wfw:commentRss><trackback:ping>http://www.cppblog.com/Error/services/trackbacks/188435.html</trackback:ping><description><![CDATA[<p>Module.h<br />&nbsp;&nbsp;&nbsp; 网狐的&#8220;com&#8221;工具箱：<br />简单介绍下这个东东，其实我以前分析的时候就说过了，这个设计看上去很美，其实用起来不那么方便。这不6603就没有这玩意了。<br />&nbsp;&nbsp;&nbsp; 网狐的COM接口比较简单，只有两个接口<br />interface IUnknownEx<br />&nbsp; void Release()<br />&nbsp; void* QueryInterface(REFGUID guid, DWORD dwQueryVer)<br />从这个接口可以看出唯一的外部依赖就是guid 和 dwQueryVer</p>
<p>在来看那个help工具模版类<br />template &lt;typename IModeluInterface&gt; class CTempldateHelper<br />&nbsp;//构造函数<br />&nbsp;CTempldateHelper(REFGUID Guid, DWORD dwVersion);<br />&nbsp;//构造函数<br />&nbsp;CTempldateHelper(REFGUID Guid, DWORD dwVersion, LPCTSTR pszModuleDll, LPCSTR pszCreateProc);<br />两个构造函数，能看出点什么不，，，<br />// 这代表DLL的名，和DLL中创建组件的函数名，别告诉我你不知道动态加载dll<br />LPCTSTR pszModuleDll, LPCSTR pszCreateProc<br />// 这些稀烂班子就是隐藏了动态加载的过程而已<br />&nbsp;//获取错误<br />&nbsp;inline LPCTSTR GetErrorDescribe() const;<br />&nbsp;//指针重载<br />&nbsp;inline IModeluInterface * operator-&gt;() const;<br />&nbsp;//获取接口<br />&nbsp;inline IModeluInterface * GetInterface() const;</p>
<p>这样看起来很美，其实隐藏了太多东西，降低了代码的可读性。接口都看不到了，，，坑爹的，，，</p><img src ="http://www.cppblog.com/Error/aggbug/188435.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.cppblog.com/Error/" target="_blank">Enic</a> 2012-08-27 17:07 <a href="http://www.cppblog.com/Error/archive/2012/08/27/188435.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>