00612C00 55 push ebp
00612C01 68 C82C6100 push 123_.00612CC8
00612C06 64:FF30 push dword ptr fs:[eax]
00612C09 64:8920 mov dword ptr fs:[eax],esp
00612C0C 55 push ebp
00612C0D E8 1AFDFFFF call 123_.0061292C
00612C12 59 pop ecx
00612C13 E8 84FDFFFF call 123_.0061299C ; 获取硬盘系列号
00612C18 8BD0 mov edx,eax
00612C1A 8D85 F0FBFFFF lea eax,dword ptr ss:[ebp-410]
00612C20 E8 BF26DFFF call 123_.004052E4
00612C25 8B85 F0FBFFFF mov eax,dword ptr ss:[ebp-410]
00612C2B 8D95 FCFBFFFF lea edx,dword ptr ss:[ebp-404]
00612C31 E8 9271DFFF call 123_.00409DC8
00612C36 8D85 ECFBFFFF lea eax,dword ptr ss:[ebp-414]
00612C3C E8 8B65E8FF call 123_.004991CC ; CPU
00612C41 8B85 ECFBFFFF mov eax,dword ptr ss:[ebp-414]
00612C47 8D95 F8FBFFFF lea edx,dword ptr ss:[ebp-408]
00612C4D E8 7671DFFF call 123_.00409DC8
00612C52 8D85 E8FBFFFF lea eax,dword ptr ss:[ebp-418]
00612C58 E8 BF68E8FF call 123_.0049951C ; 获取网卡系列号
00612C5D 8B85 E8FBFFFF mov eax,dword ptr ss:[ebp-418]
00612C63 8D95 F4FBFFFF lea edx,dword ptr ss:[ebp-40C]
00612C69 E8 5A71DFFF call 123_.00409DC8
00612C6E 55 push ebp
00612C6F 8D85 E0FBFFFF lea eax,dword ptr ss:[ebp-420]
00612C75 8B8D F8FBFFFF mov ecx,dword ptr ss:[ebp-408]
00612C7B 8B95 FCFBFFFF mov edx,dword ptr ss:[ebp-404]
00612C81 E8 7227DFFF call 123_.004053F8 ; 硬盘加CPU
00612C86 8B85 E0FBFFFF mov eax,dword ptr ss:[ebp-420]
00612C8C 8D8D E4FBFFFF lea ecx,dword ptr ss:[ebp-41C]
00612C92 BA D58E0700 mov edx,78ED5
00612C97 E8 7CFEFFFF call 123_.00612B18 ; C3CFA3C0
00612C9C 59 pop ecx
00612C9D 8B85 E4FBFFFF mov eax,dword ptr ss:[ebp-41C]
00612CA3 8BD3 mov edx,ebx
00612CA5 E8 1E71DFFF call 123_.00409DC8
00612CAA 33C0 xor eax,eax
00612CAC 5A pop edx
00612CAD 59 pop ecx
00612CAE 59 pop ecx
00612CAF 64:8910 mov dword ptr fs:[eax],edx
00612CB2 68 CF2C6100 push 123_.00612CCF
00612CB7 8D85 E0FBFFFF lea eax,dword ptr ss:[ebp-420]
00612CBD BA 08000000 mov edx,8
00612CC2 E8 3924DFFF call 123_.00405100
00612CC7 C3 retn
00612CC8 - E9 871CDFFF jmp 123_.00404954
00612CCD ^ EB E8 jmp short 123_.00612CB7
00612CCF 5B pop ebx
00612CD0 8BE5 mov esp,ebp
00612CD2 5D pop ebp
00612CD3 C3 retn
00612CD4 55 push ebp
00612CD5 8BEC mov ebp,esp
00612CD7 B9 0C000000 mov ecx,0C
00612CDC 6A 00 push 0
00612CDE 6A 00 push 0
00612CE0 49 dec ecx
00612CE1 ^ 75 F9 jnz short 123_.00612CDC
00612CE3 53 push ebx
00612CE4 8945 FC mov dword ptr ss:[ebp-4],eax
00612CE7 33C0 xor eax,eax
00612CE9 55 push ebp
00612CEA 68 44316100 push 123_.00613144
00612CEF 64:FF30 push dword ptr fs:[eax]
00612CF2 64:8920 mov dword ptr fs:[eax],esp
00612CF5 E8 6679FFFF call 123_.0060A660
00612CFA 84C0 test al,al
00612CFC 74 2E je short 123_.00612D2C
00612CFE 6A 30 push 30
00612D00 68 50316100 push 123_.00613150
00612D05 68 58316100 push 123_.00613158
00612D0A E8 D555DFFF call <jmp.&user32.GetActiveWindow>
00612D0F 50 push eax
00612D10 E8 2F58DFFF call <jmp.&user32.MessageBoxA>
00612D15 6A 00 push 0
00612D17 E8 084FDFFF call <jmp.&kernel32.GetCurrentProcessId>
00612D1C 50 push eax
00612D1D 6A 00 push 0
00612D1F 6A 01 push 1
00612D21 E8 4E50DFFF call <jmp.&kernel32.OpenProcess>
00612D26 50 push eax
00612D27 E8 B850DFFF call <jmp.&kernel32.TerminateProcess>
00612D2C 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612D2F C680 6D030000 0>mov byte ptr ds:[eax+36D],0
00612D36 33C0 xor eax,eax
00612D38 8945 E8 mov dword ptr ss:[ebp-18],eax
00612D3B C745 EC 20D0E34>mov dword ptr ss:[ebp-14],40E3D020
00612D42 E8 6598DFFF call 123_.0040C5AC
00612D47 DC5D E8 fcomp qword ptr ss:[ebp-18]
00612D4A DFE0 fstsw ax
00612D4C 9E sahf
00612D4D 76 0C jbe short 123_.00612D5B
00612D4F A1 1CBC6100 mov eax,dword ptr ds:[61BC1C]
00612D54 8B00 mov eax,dword ptr ds:[eax]
00612D56 E8 454DE8FF call 123_.00497AA0
00612D5B 8D55 D8 lea edx,dword ptr ss:[ebp-28]
00612D5E A1 1CBC6100 mov eax,dword ptr ds:[61BC1C]
00612D63 8B00 mov eax,dword ptr ds:[eax]
00612D65 E8 9A53E8FF call 123_.00498104
00612D6A 8B45 D8 mov eax,dword ptr ss:[ebp-28]
00612D6D 8D55 DC lea edx,dword ptr ss:[ebp-24]
00612D70 E8 2F7DDFFF call 123_.0040AAA4
00612D75 8B45 DC mov eax,dword ptr ss:[ebp-24]
00612D78 8D55 E0 lea edx,dword ptr ss:[ebp-20]
00612D7B E8 ACB6EBFF call 123_.004CE42C
00612D80 8B4D E0 mov ecx,dword ptr ss:[ebp-20]
00612D83 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
00612D86 BA E8316100 mov edx,123_.006131E8
00612D8B E8 6826DFFF call 123_.004053F8
00612D90 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
00612D93 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612D96 8B80 50030000 mov eax,dword ptr ds:[eax+350]
00612D9C E8 3734E6FF call 123_.004761D8
00612DA1 A1 08BD6100 mov eax,dword ptr ds:[61BD08]
00612DA6 8B00 mov eax,dword ptr ds:[eax]
00612DA8 8B58 60 mov ebx,dword ptr ds:[eax+60]
00612DAB 8BC3 mov eax,ebx
00612DAD E8 DEF5E9FF call 123_.004B2390
00612DB2 84C0 test al,al
00612DB4 74 07 je short 123_.00612DBD
00612DB6 8BC3 mov eax,ebx
00612DB8 E8 93F4E9FF call 123_.004B2250
00612DBD 8D55 D4 lea edx,dword ptr ss:[ebp-2C]
00612DC0 B8 F8316100 mov eax,123_.006131F8 ; ASCII "D10851F6AD5CE592FA3295B353871F222AA1BEAC6BBCEA9C903AFEC75586A0EE"
00612DC5 E8 4656EBFF call 123_.004C8410
00612DCA 8B45 D4 mov eax,dword ptr ss:[ebp-2C]
00612DCD 50 push eax
00612DCE 8BC3 mov eax,ebx
00612DD0 E8 4F3EEBFF call 123_.004C6C24
00612DD5 5A pop edx
00612DD6 8B08 mov ecx,dword ptr ds:[eax]
00612DD8 FF51 2C call dword ptr ds:[ecx+2C]
00612DDB 8BC3 mov eax,ebx
00612DDD E8 62F4E9FF call 123_.004B2244
00612DE2 8D55 CC lea edx,dword ptr ss:[ebp-34]
00612DE5 B8 44326100 mov eax,123_.00613244 ; ASCII "A52D31C4C0C7F606"
00612DEA E8 2156EBFF call 123_.004C8410
00612DEF 8B55 CC mov edx,dword ptr ss:[ebp-34]
00612DF2 8BC3 mov eax,ebx
00612DF4 E8 9704EAFF call 123_.004B3290
00612DF9 8D55 D0 lea edx,dword ptr ss:[ebp-30]
00612DFC 8B08 mov ecx,dword ptr ds:[eax]
00612DFE FF51 60 call dword ptr ds:[ecx+60]
00612E01 8B45 D0 mov eax,dword ptr ss:[ebp-30]
00612E04 8D55 F0 lea edx,dword ptr ss:[ebp-10]
00612E07 E8 0456EBFF call 123_.004C8410
00612E0C BA 60326100 mov edx,123_.00613260
00612E11 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612E14 E8 BF33E6FF call 123_.004761D8
00612E19 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612E1C 8B80 04030000 mov eax,dword ptr ds:[eax+304]
00612E22 BA 74326100 mov edx,123_.00613274
00612E27 E8 AC33E6FF call 123_.004761D8
00612E2C 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612E2F E8 D0100000 call 123_.00613F04
00612E34 A1 08BD6100 mov eax,dword ptr ds:[61BD08]
00612E39 8B00 mov eax,dword ptr ds:[eax]
00612E3B 8B98 84000000 mov ebx,dword ptr ds:[eax+84]
00612E41 8BC3 mov eax,ebx
00612E43 E8 48F5E9FF call 123_.004B2390
00612E48 84C0 test al,al
00612E4A 74 07 je short 123_.00612E53
00612E4C 8BC3 mov eax,ebx
00612E4E E8 FDF3E9FF call 123_.004B2250
00612E53 8BC3 mov eax,ebx
00612E55 E8 CA3DEBFF call 123_.004C6C24
00612E5A BA 90326100 mov edx,123_.00613290
00612E5F 8B08 mov ecx,dword ptr ds:[eax]
00612E61 FF51 2C call dword ptr ds:[ecx+2C]
00612E64 8BC3 mov eax,ebx
00612E66 E8 D9F3E9FF call 123_.004B2244
00612E6B BA D8326100 mov edx,123_.006132D8 ; ASCII "CanTanRu"
00612E70 8BC3 mov eax,ebx
00612E72 E8 1904EAFF call 123_.004B3290
00612E77 8B10 mov edx,dword ptr ds:[eax]
00612E79 FF52 44 call dword ptr ds:[edx+44]
00612E7C 8BD0 mov edx,eax
00612E7E 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612E81 8B80 4C030000 mov eax,dword ptr ds:[eax+34C]
00612E87 8B08 mov ecx,dword ptr ds:[eax]
00612E89 FF91 CC000000 call dword ptr ds:[ecx+CC]
00612E8F BA EC326100 mov edx,123_.006132EC ; ASCII "CanPingMa"
00612E94 8BC3 mov eax,ebx
00612E96 E8 F503EAFF call 123_.004B3290
00612E9B 8B10 mov edx,dword ptr ds:[eax]
00612E9D FF52 44 call dword ptr ds:[edx+44]
00612EA0 8BD0 mov edx,eax
00612EA2 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612EA5 8B80 58030000 mov eax,dword ptr ds:[eax+358]
00612EAB 8B08 mov ecx,dword ptr ds:[eax]
00612EAD FF91 CC000000 call dword ptr ds:[ecx+CC]
00612EB3 BA 00336100 mov edx,123_.00613300 ; ASCII "DefaultHost"
00612EB8 8BC3 mov eax,ebx
00612EBA E8 D103EAFF call 123_.004B3290
00612EBF 8D55 C8 lea edx,dword ptr ss:[ebp-38]
00612EC2 8B08 mov ecx,dword ptr ds:[eax]
00612EC4 FF51 60 call dword ptr ds:[ecx+60]
00612EC7 8B55 C8 mov edx,dword ptr ss:[ebp-38]
00612ECA 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612ECD 8B80 60030000 mov eax,dword ptr ds:[eax+360]
00612ED3 E8 0033E6FF call 123_.004761D8
00612ED8 8BC3 mov eax,ebx
00612EDA E8 A11BEAFF call 123_.004B4A80
00612EDF A1 88B86100 mov eax,dword ptr ds:[61B888]
00612EE4 66:C700 DA07 mov word ptr ds:[eax],7DA
00612EE9 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612EEC 66:C780 6E03000>mov word ptr ds:[eax+36E],7DA
00612EF5 55 push ebp
00612EF6 8D45 C4 lea eax,dword ptr ss:[ebp-3C]
00612EF9 E8 C2FCFFFF call 123_.00612BC0
00612EFE 59 pop ecx
00612EFF 8B55 C4 mov edx,dword ptr ss:[ebp-3C]
00612F02 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612F05 05 70030000 add eax,370
00612F0A E8 2122DFFF call 123_.00405130
00612F0F 8D4D C0 lea ecx,dword ptr ss:[ebp-40]
00612F12 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612F15 8B80 70030000 mov eax,dword ptr ds:[eax+370]
00612F1B 66:BA FA31 mov dx,31FA
00612F1F E8 5844EBFF call 123_.004C737C ; 机器码后半部分
00612F24 8B45 C0 mov eax,dword ptr ss:[ebp-40]
00612F27 50 push eax
00612F28 8D55 BC lea edx,dword ptr ss:[ebp-44]
00612F2B B8 14336100 mov eax,123_.00613314 ; ASCII "70107086F2D0564FCDC274CBAE9B0343"
00612F30 E8 DB54EBFF call 123_.004C8410
00612F35 8B55 BC mov edx,dword ptr ss:[ebp-44]
00612F38 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612F3B 05 70030000 add eax,370
00612F40 59 pop ecx
00612F41 E8 B224DFFF call 123_.004053F8
00612F46 A1 D4B66100 mov eax,dword ptr ds:[61B6D4]
00612F4B 8B55 FC mov edx,dword ptr ss:[ebp-4]
00612F4E 8B92 70030000 mov edx,dword ptr ds:[edx+370]
00612F54 E8 D721DFFF call 123_.00405130
00612F59 C645 F6 00 mov byte ptr ss:[ebp-A],0
00612F5D B2 01 mov dl,1
00612F5F A1 60774400 mov eax,dword ptr ds:[447760]
00612F64 E8 1B4AE3FF call 123_.00447984
00612F69 8945 F8 mov dword ptr ss:[ebp-8],eax
00612F6C 33C0 xor eax,eax
00612F6E 55 push ebp
00612F6F 68 A8306100 push 123_.006130A8
00612F74 64:FF30 push dword ptr fs:[eax]
00612F77 64:8920 mov dword ptr fs:[eax],esp
00612F7A BA 02000080 mov edx,80000002
00612F7F 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00612F82 E8 D94AE3FF call 123_.00447A60
00612F87 8D55 B8 lea edx,dword ptr ss:[ebp-48]
00612F8A B8 40336100 mov eax,123_.00613340 ; ASCII "4D4914D939389AEA9AAFC2D52CAF9422C4293102BF368280EB4A4B4035C92E6E895C119310A5A26B6E34DB88C7CFED93"
00612F8F E8 7C54EBFF call 123_.004C8410
00612F94 8D45 B8 lea eax,dword ptr ss:[ebp-48]
00612F97 50 push eax
00612F98 8D55 B4 lea edx,dword ptr ss:[ebp-4C]
00612F9B 8B45 FC mov eax,dword ptr ss:[ebp-4]
00612F9E 0FB780 6E030000 movzx eax,word ptr ds:[eax+36E]
00612FA5 2D D6070000 sub eax,7D6
00612FAA E8 8973DFFF call 123_.0040A338
00612FAF 8B55 B4 mov edx,dword ptr ss:[ebp-4C]
00612FB2 58 pop eax
00612FB3 E8 FC23DFFF call 123_.004053B4
00612FB8 8B55 B8 mov edx,dword ptr ss:[ebp-48]
00612FBB B1 01 mov cl,1
00612FBD 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00612FC0 E8 DF4BE3FF call 123_.00447BA4
00612FC5 84C0 test al,al
00612FC7 0F84 8F000000 je 123_.0061305C
00612FCD 8D55 B0 lea edx,dword ptr ss:[ebp-50]
00612FD0 B8 AC336100 mov eax,123_.006133AC ; ASCII "F73841B204AFD930126E7E6EE00DE3EC"
00612FD5 E8 3654EBFF call 123_.004C8410
00612FDA 8B55 B0 mov edx,dword ptr ss:[ebp-50]
00612FDD 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00612FE0 E8 2B54E3FF call 123_.00448410
00612FE5 84C0 test al,al
00612FE7 74 54 je short 123_.0061303D
00612FE9 B8 AC336100 mov eax,123_.006133AC ; ASCII "F73841B204AFD930126E7E6EE00DE3EC"
00612FEE 8D55 AC lea edx,dword ptr ss:[ebp-54]
00612FF1 E8 1A54EBFF call 123_.004C8410
00612FF6 8B55 AC mov edx,dword ptr ss:[ebp-54]
00612FF9 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00612FFC E8 AB51E3FF call 123_.004481AC
00613001 8845 F7 mov byte ptr ss:[ebp-9],al
00613004 807D F7 00 cmp byte ptr ss:[ebp-9],0
00613008 76 2D jbe short 123_.00613037
0061300A 807D F7 82 cmp byte ptr ss:[ebp-9],82
0061300E 73 27 jnb short 123_.00613037
00613010 8D45 F7 lea eax,dword ptr ss:[ebp-9]
00613013 B2 05 mov dl,5
00613015 E8 1E74FFFF call 123_.0060A438
0061301A B8 AC336100 mov eax,123_.006133AC ; ASCII "F73841B204AFD930126E7E6EE00DE3EC"
0061301F 8D55 A8 lea edx,dword ptr ss:[ebp-58]
00613022 E8 E953EBFF call 123_.004C8410
00613027 8B55 A8 mov edx,dword ptr ss:[ebp-58]
0061302A 33C9 xor ecx,ecx
0061302C 8A4D F7 mov cl,byte ptr ss:[ebp-9]
0061302F 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00613032 E8 6151E3FF call 123_.00448198
00613037 807D F7 00 cmp byte ptr ss:[ebp-9],0
0061303B EB 55 jmp short 123_.00613092
0061303D B8 AC336100 mov eax,123_.006133AC ; ASCII "F73841B204AFD930126E7E6EE00DE3EC"
00613042 8D55 A4 lea edx,dword ptr ss:[ebp-5C]
00613045 E8 C653EBFF call 123_.004C8410
0061304A 8B55 A4 mov edx,dword ptr ss:[ebp-5C]
0061304D B9 05000000 mov ecx,5
00613052 8B45 F8 mov eax,dword ptr ss:[ebp-8]
00613055 E8 3E51E3FF call 123_.00448198
0061305A EB 36 jmp short 123_.00613092
0061305C 6A 00 push 0
0061305E 8D55 A0 lea edx,dword ptr ss:[ebp-60]
00613061 B8 D8336100 mov eax,123_.006133D8 ; ASCII "CEB04628A850929B28685F370DB566BC0A4B394C128C9956079BF92E24CBDA9C1B2E7F2B8FA6C5C4CF8B186D13BA7055"
00613066 E8 A553EBFF call 123_.004C8410
0061306B 8B45 A0 mov eax,dword ptr ss:[ebp-60]
0061306E 66:8B0D 3C34610>mov cx,word ptr ds:[61343C]
00613075 B2 01 mov dl,1
00613077 E8 44A3E2FF call 123_.0043D3C0
0061307C B8 48346100 mov eax,123_.00613448
00613081 E8 1A2EFFFF call 123_.00605EA0
00613086 A1 1CBC6100 mov eax,dword ptr ds:[61BC1C]
0061308B 8B00 mov eax,dword ptr ds:[eax]
0061308D E8 0E4AE8FF call 123_.00497AA0
00613092 33C0 xor eax,eax
00613094 5A pop edx
00613095 59 pop ecx
00613096 59 pop ecx
00613097 64:8910 mov dword ptr fs:[eax],edx
0061309A 68 AF306100 push 123_.006130AF
0061309F 8B45 F8 mov eax,dword ptr ss:[ebp-8]
006130A2 E8 0511DFFF call 123_.004041AC
006130A7 C3 retn
006130A8 - E9 A718DFFF jmp 123_.00404954
006130AD ^ EB F0 jmp short 123_.0061309F
006130AF 807D F6 00 cmp byte ptr ss:[ebp-A],0
006130B3 74 55 je short 123_.0061310A
006130B5 8B4D FC mov ecx,dword ptr ss:[ebp-4]
006130B8 B2 01 mov dl,1
006130BA A1 1C025E00 mov eax,dword ptr ds:[5E021C]
006130BF E8 8CCAE7FF call 123_.0048FB50
006130C4 8B15 80B36100 mov edx,dword ptr ds:[61B380] ; 123_.006206C8
006130CA 8902 mov dword ptr ds:[edx],eax
006130CC 33C0 xor eax,eax
006130CE 55 push ebp
006130CF 68 03316100 push 123_.00613103
006130D4 64:FF30 push dword ptr fs:[eax]
006130D7 64:8920 mov dword ptr fs:[eax],esp
006130DA A1 80B36100 mov eax,dword ptr ds:[61B380]
006130DF 8B00 mov eax,dword ptr ds:[eax]
006130E1 8B10 mov edx,dword ptr ds:[eax]
006130E3 FF92 EC000000 call dword ptr ds:[edx+EC]
006130E9 33C0 xor eax,eax
006130EB 5A pop edx
006130EC 59 pop ecx
006130ED 59 pop ecx
006130EE 64:8910 mov dword ptr fs:[eax],edx
006130F1 68 0A316100 push 123_.0061310A
006130F6 A1 80B36100 mov eax,dword ptr ds:[61B380]
006130FB 8B00 mov eax,dword ptr ds:[eax]
006130FD E8 AA10DFFF call 123_.004041AC
00613102 C3 retn
00613103 - E9 4C18DFFF jmp 123_.00404954
00613108 ^ EB EC jmp short 123_.006130F6
0061310A BA B4000000 mov edx,0B4
0061310F 8B45 FC mov eax,dword ptr ss:[ebp-4]
00613112 E8 7128E6FF call 123_.00475988
00613117 8B45 FC mov eax,dword ptr ss:[ebp-4]
0061311A C680 6C030000 0>mov byte ptr ds:[eax+36C],0
00613121 33C0 xor eax,eax
00613123 5A pop edx
00613124 59 pop ecx
00613125 59 pop ecx
00613126 64:8910 mov dword ptr fs:[eax],edx
00613129 68 4B316100 push 123_.0061314B
0061312E 8D45 A0 lea eax,dword ptr ss:[ebp-60]
00613131 BA 12000000 mov edx,12
00613136 E8 C51FDFFF call 123_.00405100
0061313B 8D45 F0 lea eax,dword ptr ss:[ebp-10]
0061313E E8 991FDFFF call 123_.004050DC
00613143 C3 retn
00613144 - E9 0B18DFFF jmp 123_.00404954
00613149 ^ EB E3 jmp short 123_.0061312E
0061314B 5B pop ebx
0061314C 8BE5 mov esp,ebp
0061314E 5D pop ebp
0061314F C3 retn
00613150 B4 ED mov ah,0ED
00613152 CE into
00613153 F3: prefix rep:
00613154 0000 add byte ptr ds:[eax],al
00613156 0000 add byte ptr ds:[eax],al
00613158 B6 D4 mov dh,0D4
0061315A B2 BB mov dl,0BB
0061315C C6 ??? ; 未知命令
0061315D F0:A3 ACBCECB2 lock mov dword ptr ds:[B2ECBCAC],eax ; 不允许锁定前缀
00613163 ^ E2 B5 loopd short 123_.0061311A
00613165 BD C4FAC9CF mov ebp,CFC9FAC4
0061316A D2BB B0E6B1BE sar byte ptr ds:[ebx+BEB1E6B0],cl
00613170 CA B9D3 retf 0D3B9
00613173 C3 retn
00613174 B5 C4 mov ch,0C4
00613176 CA C7B5 retf 0B5C7
00613179 C1B0 E6C8EDBC F>sal dword ptr ds:[eax+BCEDC8E6],0FE
00613180 A3 ACCFD6D6 mov dword ptr ds:[D6D6CFAC],eax
00613185 D0D6 rcl dh,1
00613187 B9 BDF8D0D0 mov ecx,D0D0F8BD
0061318C A3 ACC7EBC1 mov dword ptr ds:[C1EBC7AC],eax
00613191 AA stos byte ptr es:[edi]
00613192 CF iretd
00613193 B5 D5 mov ch,0D5
00613195 FD std
00613196 B0 E6 mov al,0E6
00613198 D7 xlat byte ptr ds:[ebx+al]
00613199 F7D5 not ebp
0061319B DF51 51 fist word ptr ds:[ecx+51]
0061319E 3A20 cmp ah,byte ptr ds:[eax]
006131A0 3339 xor edi,dword ptr ds:[ecx]
006131A2 383435 35373230 cmp byte ptr ds:[esi+30323735],dh
006131A9 A1 A3C8E7B9 mov eax,dword ptr ds:[B9E7C8A3]
006131AE FB sti
006131AF C4FA les edi,edx ; 非法使用寄存器
问题
谁教教算法是什么
算法CALL 在那
[课程]Linux pwn 探索篇！
