EWH.DB password file, estimate is that the chat record of QQ encrypted with MD5 is saved with structured documents. The following is the analysis of the analysis of its nodes index.msj for 4 bytes to record each information. Location content length length start position 1 64 0x40 0x002 128 0x80 0x4011 200 0x110 0x80112 344 0x158 0x110 (10 01 00 00 estimated digital preservation into byte conversion) 3333 416 0x1a0 58 01 00 4480 0x1e0 A0 01 00 004444 552 0x22855555 624 0x270666666 696 0x28896 one byte 1 1160 0x488 464 95 1 1624 0x658 464 87 1 2080 0x820 458 bytes byte 7777777 2152 0x868 72 byte 88888888 2224 0x8b0 72999999999 2296 0x8f8 729999999990 2376 0x948 80 8 bytes per word The holiday is a minimum allocation space ???? 1 64 2--9 72 10- 80 (likeb, it is possible for special reservation bit) ----> The top 56 bytes of each record are other fields (send Letter / Date / Time / Time /) Obviously data is encrypted saved Matrix, which is likely to be encrypted data, and is the 0x2A9 681 byte 3 * 227 3 227 bytes of bytes based on user numbers or other information. MATRIX is an encryption matrix. , Refer to the following documentation
