128bit的key，block大小为64bit
密文
8F 26 34 36 54 51 FE 0D
明文
00 61 00 70 00 2F 00 69
key
33 60 03 99 90 EB 55 62 7C 86 E5 16 E1 B2 A8 9E
代码中多次出现508B79E9这个常数，但是搜索不到有关内容，难道是自创的算法？
CPU Disasm
Address Hex dump Command Comments
004DCA90 /> \8B4424 0C MOV EAX, DWORD PTR SS:[ARG.3]
004DCA94 |. 0FB650 02 MOVZX EDX, BYTE PTR DS:[EAX+2]
004DCA98 |. 33C9 XOR ECX, ECX
004DCA9A |. 8A28 MOV CH, BYTE PTR DS:[EAX]
004DCA9C |. 53 PUSH EBX
004DCA9D |. 55 PUSH EBP
004DCA9E |. 56 PUSH ESI
004DCA9F |. 0FB670 06 MOVZX ESI, BYTE PTR DS:[EAX+6]
004DCAA3 |. 8A48 01 MOV CL, BYTE PTR DS:[EAX+1]
004DCAA6 |. 57 PUSH EDI
004DCAA7 |. BF 08000000 MOV EDI, 8
004DCAAC |. C1E1 08 SHL ECX, 8
004DCAAF |. 0BCA OR ECX, EDX
004DCAB1 |. 0FB650 03 MOVZX EDX, BYTE PTR DS:[EAX+3]
004DCAB5 |. C1E1 08 SHL ECX, 8
004DCAB8 |. 0BCA OR ECX, EDX
004DCABA |. 33D2 XOR EDX, EDX
004DCABC |. 8A70 04 MOV DH, BYTE PTR DS:[EAX+4]
004DCABF |. 8A50 05 MOV DL, BYTE PTR DS:[EAX+5]
004DCAC2 |. 0FB640 07 MOVZX EAX, BYTE PTR DS:[EAX+7]
004DCAC6 |. C1E2 08 SHL EDX, 8
004DCAC9 |. 0BD6 OR EDX, ESI
004DCACB |. 8B7424 14 MOV ESI, DWORD PTR SS:[ARG.5]
004DCACF |. C1E2 08 SHL EDX, 8
004DCAD2 |. 0BC2 OR EAX, EDX
004DCAD4 |. 837C24 18 01 CMP DWORD PTR SS:[ARG.6], 1
004DCAD9 |. 0F85 12010000 JNE 004DCBF1
004DCADF |. 33D2 XOR EDX, EDX
004DCAE1 |> 8BD8 /MOV EBX, EAX
004DCAE3 |. C1EB 05 |SHR EBX, 5
004DCAE6 |. 8BE8 |MOV EBP, EAX
004DCAE8 |. C1E5 04 |SHL EBP, 4
004DCAEB |. 33DD |XOR EBX, EBP
004DCAED |. 03D8 |ADD EBX, EAX
004DCAEF |. 8BEA |MOV EBP, EDX
004DCAF1 |. 83E5 03 |AND EBP, 00000003
004DCAF4 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCAF7 |. 03EA |ADD EBP, EDX
004DCAF9 |. 33DD |XOR EBX, EBP
004DCAFB |. 03CB |ADD ECX, EBX
004DCAFD |. 81C2 E9798B50 |ADD EDX, 508B79E9
004DCB03 |. 8BD9 |MOV EBX, ECX
004DCB05 |. C1EB 05 |SHR EBX, 5
004DCB08 |. 8BE9 |MOV EBP, ECX
004DCB0A |. C1E5 04 |SHL EBP, 4
004DCB0D |. 33DD |XOR EBX, EBP
004DCB0F |. 03D9 |ADD EBX, ECX
004DCB11 |. 8BEA |MOV EBP, EDX
004DCB13 |. C1ED 0B |SHR EBP, 0B
004DCB16 |. 83E5 03 |AND EBP, 00000003
004DCB19 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCB1C |. 03EA |ADD EBP, EDX
004DCB1E |. 33DD |XOR EBX, EBP
004DCB20 |. 03C3 |ADD EAX, EBX
004DCB22 |. 8BD8 |MOV EBX, EAX
004DCB24 |. C1EB 05 |SHR EBX, 5
004DCB27 |. 8BE8 |MOV EBP, EAX
004DCB29 |. C1E5 04 |SHL EBP, 4
004DCB2C |. 33DD |XOR EBX, EBP
004DCB2E |. 03D8 |ADD EBX, EAX
004DCB30 |. 8BEA |MOV EBP, EDX
004DCB32 |. 83E5 03 |AND EBP, 00000003
004DCB35 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCB38 |. 03EA |ADD EBP, EDX
004DCB3A |. 33DD |XOR EBX, EBP
004DCB3C |. 03CB |ADD ECX, EBX
004DCB3E |. 81C2 E9798B50 |ADD EDX, 508B79E9
004DCB44 |. 8BD9 |MOV EBX, ECX
004DCB46 |. C1EB 05 |SHR EBX, 5
004DCB49 |. 8BE9 |MOV EBP, ECX
004DCB4B |. C1E5 04 |SHL EBP, 4
004DCB4E |. 33DD |XOR EBX, EBP
004DCB50 |. 03D9 |ADD EBX, ECX
004DCB52 |. 8BEA |MOV EBP, EDX
004DCB54 |. C1ED 0B |SHR EBP, 0B
004DCB57 |. 83E5 03 |AND EBP, 00000003
004DCB5A |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCB5D |. 03EA |ADD EBP, EDX
004DCB5F |. 33DD |XOR EBX, EBP
004DCB61 |. 03C3 |ADD EAX, EBX
004DCB63 |. 8BD8 |MOV EBX, EAX
004DCB65 |. C1EB 05 |SHR EBX, 5
004DCB68 |. 8BE8 |MOV EBP, EAX
004DCB6A |. C1E5 04 |SHL EBP, 4
004DCB6D |. 33DD |XOR EBX, EBP
004DCB6F |. 03D8 |ADD EBX, EAX
004DCB71 |. 8BEA |MOV EBP, EDX
004DCB73 |. 83E5 03 |AND EBP, 00000003
004DCB76 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCB79 |. 03EA |ADD EBP, EDX
004DCB7B |. 33DD |XOR EBX, EBP
004DCB7D |. 03CB |ADD ECX, EBX
004DCB7F |. 8BD9 |MOV EBX, ECX
004DCB81 |. C1EB 05 |SHR EBX, 5
004DCB84 |. 8BE9 |MOV EBP, ECX
004DCB86 |. C1E5 04 |SHL EBP, 4
004DCB89 |. 33DD |XOR EBX, EBP
004DCB8B |. 81C2 E9798B50 |ADD EDX, 508B79E9
004DCB91 |. 8BEA |MOV EBP, EDX
004DCB93 |. C1ED 0B |SHR EBP, 0B
004DCB96 |. 83E5 03 |AND EBP, 00000003
004DCB99 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCB9C |. 03D9 |ADD EBX, ECX
004DCB9E |. 03EA |ADD EBP, EDX
004DCBA0 |. 33DD |XOR EBX, EBP
004DCBA2 |. 03C3 |ADD EAX, EBX
004DCBA4 |. 8BD8 |MOV EBX, EAX
004DCBA6 |. C1EB 05 |SHR EBX, 5
004DCBA9 |. 8BE8 |MOV EBP, EAX
004DCBAB |. C1E5 04 |SHL EBP, 4
004DCBAE |. 33DD |XOR EBX, EBP
004DCBB0 |. 03D8 |ADD EBX, EAX
004DCBB2 |. 8BEA |MOV EBP, EDX
004DCBB4 |. 83E5 03 |AND EBP, 00000003
004DCBB7 |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCBBA |. 03EA |ADD EBP, EDX
004DCBBC |. 33DD |XOR EBX, EBP
004DCBBE |. 03CB |ADD ECX, EBX
004DCBC0 |. 8BD9 |MOV EBX, ECX
004DCBC2 |. C1EB 05 |SHR EBX, 5
004DCBC5 |. 8BE9 |MOV EBP, ECX
004DCBC7 |. C1E5 04 |SHL EBP, 4
004DCBCA |. 33DD |XOR EBX, EBP
004DCBCC |. 81C2 E9798B50 |ADD EDX, 508B79E9
004DCBD2 |. 8BEA |MOV EBP, EDX
004DCBD4 |. C1ED 0B |SHR EBP, 0B
004DCBD7 |. 83E5 03 |AND EBP, 00000003
004DCBDA |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCBDD |. 03D9 |ADD EBX, ECX
004DCBDF |. 03EA |ADD EBP, EDX
004DCBE1 |. 33DD |XOR EBX, EBP
004DCBE3 |. 03C3 |ADD EAX, EBX
004DCBE5 |. 4F |DEC EDI
004DCBE6 |.^ 0F85 F5FEFFFF \JNZ 004DCAE1
004DCBEC |. E9 10010000 JMP 004DCD01
004DCBF1 |> BA 203D6F11 MOV EDX, 116F3D20
004DCBF6 |> 8BD9 /MOV EBX, ECX
004DCBF8 |. C1EB 05 |SHR EBX, 5
004DCBFB |. 8BE9 |MOV EBP, ECX
004DCBFD |. C1E5 04 |SHL EBP, 4
004DCC00 |. 33DD |XOR EBX, EBP
004DCC02 |. 03D9 |ADD EBX, ECX
004DCC04 |. 8BEA |MOV EBP, EDX
004DCC06 |. C1ED 0B |SHR EBP, 0B
004DCC09 |. 83E5 03 |AND EBP, 00000003
004DCC0C |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCC0F |. 03EA |ADD EBP, EDX
004DCC11 |. 33DD |XOR EBX, EBP
004DCC13 |. 2BC3 |SUB EAX, EBX
004DCC15 |. 81EA E9798B50 |SUB EDX, 508B79E9
004DCC1B |. 8BD8 |MOV EBX, EAX
004DCC1D |. C1EB 05 |SHR EBX, 5
004DCC20 |. 8BE8 |MOV EBP, EAX
004DCC22 |. C1E5 04 |SHL EBP, 4
004DCC25 |. 33DD |XOR EBX, EBP
004DCC27 |. 03D8 |ADD EBX, EAX
004DCC29 |. 8BEA |MOV EBP, EDX
004DCC2B |. 83E5 03 |AND EBP, 00000003
004DCC2E |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCC31 |. 03EA |ADD EBP, EDX
004DCC33 |. 33DD |XOR EBX, EBP
004DCC35 |. 2BCB |SUB ECX, EBX
004DCC37 |. 8BD9 |MOV EBX, ECX
004DCC39 |. C1EB 05 |SHR EBX, 5
004DCC3C |. 8BE9 |MOV EBP, ECX
004DCC3E |. C1E5 04 |SHL EBP, 4
004DCC41 |. 33DD |XOR EBX, EBP
004DCC43 |. 03D9 |ADD EBX, ECX
004DCC45 |. 8BEA |MOV EBP, EDX
004DCC47 |. C1ED 0B |SHR EBP, 0B
004DCC4A |. 83E5 03 |AND EBP, 00000003
004DCC4D |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCC50 |. 03EA |ADD EBP, EDX
004DCC52 |. 33DD |XOR EBX, EBP
004DCC54 |. 2BC3 |SUB EAX, EBX
004DCC56 |. 81EA E9798B50 |SUB EDX, 508B79E9
004DCC5C |. 8BD8 |MOV EBX, EAX
004DCC5E |. C1EB 05 |SHR EBX, 5
004DCC61 |. 8BE8 |MOV EBP, EAX
004DCC63 |. C1E5 04 |SHL EBP, 4
004DCC66 |. 33DD |XOR EBX, EBP
004DCC68 |. 03D8 |ADD EBX, EAX
004DCC6A |. 8BEA |MOV EBP, EDX
004DCC6C |. 83E5 03 |AND EBP, 00000003
004DCC6F |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCC72 |. 03EA |ADD EBP, EDX
004DCC74 |. 33DD |XOR EBX, EBP
004DCC76 |. 2BCB |SUB ECX, EBX
004DCC78 |. 8BD9 |MOV EBX, ECX
004DCC7A |. C1EB 05 |SHR EBX, 5
004DCC7D |. 8BE9 |MOV EBP, ECX
004DCC7F |. C1E5 04 |SHL EBP, 4
004DCC82 |. 33DD |XOR EBX, EBP
004DCC84 |. 8BEA |MOV EBP, EDX
004DCC86 |. C1ED 0B |SHR EBP, 0B
004DCC89 |. 83E5 03 |AND EBP, 00000003
004DCC8C |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCC8F |. 03EA |ADD EBP, EDX
004DCC91 |. 03D9 |ADD EBX, ECX
004DCC93 |. 33DD |XOR EBX, EBP
004DCC95 |. 2BC3 |SUB EAX, EBX
004DCC97 |. 8BD8 |MOV EBX, EAX
004DCC99 |. C1EB 05 |SHR EBX, 5
004DCC9C |. 8BE8 |MOV EBP, EAX
004DCC9E |. C1E5 04 |SHL EBP, 4
004DCCA1 |. 33DD |XOR EBX, EBP
004DCCA3 |. 81EA E9798B50 |SUB EDX, 508B79E9
004DCCA9 |. 8BEA |MOV EBP, EDX
004DCCAB |. 83E5 03 |AND EBP, 00000003
004DCCAE |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCCB1 |. 03D8 |ADD EBX, EAX
004DCCB3 |. 03EA |ADD EBP, EDX
004DCCB5 |. 33DD |XOR EBX, EBP
004DCCB7 |. 2BCB |SUB ECX, EBX
004DCCB9 |. 8BD9 |MOV EBX, ECX
004DCCBB |. C1EB 05 |SHR EBX, 5
004DCCBE |. 8BE9 |MOV EBP, ECX
004DCCC0 |. C1E5 04 |SHL EBP, 4
004DCCC3 |. 33DD |XOR EBX, EBP
004DCCC5 |. 8BEA |MOV EBP, EDX
004DCCC7 |. C1ED 0B |SHR EBP, 0B
004DCCCA |. 83E5 03 |AND EBP, 00000003
004DCCCD |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCCD0 |. 03EA |ADD EBP, EDX
004DCCD2 |. 03D9 |ADD EBX, ECX
004DCCD4 |. 33DD |XOR EBX, EBP
004DCCD6 |. 2BC3 |SUB EAX, EBX
004DCCD8 |. 8BD8 |MOV EBX, EAX
004DCCDA |. C1EB 05 |SHR EBX, 5
004DCCDD |. 8BE8 |MOV EBP, EAX
004DCCDF |. C1E5 04 |SHL EBP, 4
004DCCE2 |. 33DD |XOR EBX, EBP
004DCCE4 |. 81EA E9798B50 |SUB EDX, 508B79E9
004DCCEA |. 8BEA |MOV EBP, EDX
004DCCEC |. 83E5 03 |AND EBP, 00000003
004DCCEF |. 8B2CAE |MOV EBP, DWORD PTR DS:[EBP*4+ESI]
004DCCF2 |. 03D8 |ADD EBX, EAX
004DCCF4 |. 03EA |ADD EBP, EDX
004DCCF6 |. 33DD |XOR EBX, EBP
004DCCF8 |. 2BCB |SUB ECX, EBX
004DCCFA |. 4F |DEC EDI
004DCCFB |.^ 0F85 F5FEFFFF \JNZ 004DCBF6
004DCD01 |> 8B7424 20 MOV ESI, DWORD PTR SS:[ARG.8] ; ASCII "&46TQþ
"
004DCD05 |. 8BD1 MOV EDX, ECX
004DCD07 |. C1EA 18 SHR EDX, 18
004DCD0A |. 8816 MOV BYTE PTR DS:[ESI], DL
004DCD0C |. 8BD1 MOV EDX, ECX
004DCD0E |. C1EA 10 SHR EDX, 10
004DCD11 |. 8856 01 MOV BYTE PTR DS:[ESI+1], DL
004DCD14 |. 8BD1 MOV EDX, ECX
004DCD16 |. 884E 03 MOV BYTE PTR DS:[ESI+3], CL
004DCD19 |. 8BC8 MOV ECX, EAX
004DCD1B |. C1EA 08 SHR EDX, 8
004DCD1E |. C1E9 18 SHR ECX, 18
004DCD21 |. 8856 02 MOV BYTE PTR DS:[ESI+2], DL
004DCD24 |. 884E 04 MOV BYTE PTR DS:[ESI+4], CL
004DCD27 |. 8BD0 MOV EDX, EAX
004DCD29 |. 8BC8 MOV ECX, EAX
004DCD2B |. 5F POP EDI
004DCD2C |. C1EA 10 SHR EDX, 10
004DCD2F |. C1E9 08 SHR ECX, 8
004DCD32 |. 8846 07 MOV BYTE PTR DS:[ESI+7], AL
004DCD35 |. 8856 05 MOV BYTE PTR DS:[ESI+5], DL
004DCD38 |. 884E 06 MOV BYTE PTR DS:[ESI+6], CL
004DCD3B |. 5E POP ESI
004DCD3C |. 5D POP EBP
004DCD3D |. 33C0 XOR EAX, EAX
004DCD3F |. 5B POP EBX
004DCD40 \. C3 RETN
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
