06C166E0 83EC 48 SUB ESP,48
06C166E3 53 PUSH EBX
06C166E4 55 PUSH EBP
06C166E5 56 PUSH ESI
06C166E6 57 PUSH EDI
06C166E7 8BF8 MOV EDI,EAX
06C166E9 8B17 MOV EDX,DWORD PTR DS:[EDI]
06C166EB 83FA 04 CMP EDX,4
06C166EE 8D47 0C LEA EAX,DWORD PTR DS:[EDI+C]
06C166F1 0F85 AB110000 JNZ 06C178A2
06C166F7 8B10 MOV EDX,DWORD PTR DS:[EAX]
06C166F9 3311 XOR EDX,DWORD PTR DS:[ECX]
06C166FB 8B7F 08 MOV EDI,DWORD PTR DS:[EDI+8]
06C166FE 83C0 04 ADD EAX,4
06C16701 8B70 04 MOV ESI,DWORD PTR DS:[EAX+4]
06C16704 83C1 04 ADD ECX,4
06C16707 3371 04 XOR ESI,DWORD PTR DS:[ECX+4]
06C1670A 895424 18 MOV DWORD PTR SS:[ESP+18],EDX
06C1670E 8B10 MOV EDX,DWORD PTR DS:[EAX]
06C16710 3311 XOR EDX,DWORD PTR DS:[ECX]
06C16712 83C0 04 ADD EAX,4
06C16715 83C1 04 ADD ECX,4
06C16718 8B49 04 MOV ECX,DWORD PTR DS:[ECX+4]
06C1671B 3348 04 XOR ECX,DWORD PTR DS:[EAX+4]
06C1671E 83C0 04 ADD EAX,4
06C16721 83C0 04 ADD EAX,4
06C16724 83FF 0E CMP EDI,0E
06C16727 897424 20 MOV DWORD PTR SS:[ESP+20],ESI
06C1672B 894C24 24 MOV DWORD PTR SS:[ESP+24],ECX
06C1672F 0F85 4F040000 JNZ 06C16B84
06C16735 8BDE MOV EBX,ESI
06C16737 C1EB 10 SHR EBX,10
06C1673A 0FB6F3 MOVZX ESI,BL
06C1673D 8B5C24 24 MOV EBX,DWORD PTR SS:[ESP+24]
06C16741 8B7C24 20 MOV EDI,DWORD PTR SS:[ESP+20]
06C16745 C1E9 08 SHR ECX,8
06C16748 0FB6C9 MOVZX ECX,CL
06C1674B 8B0C8D 00C1C406 MOV ECX,DWORD PTR DS:[ECX*4+6C4C100]
06C16752 330CB5 00BDC406 XOR ECX,DWORD PTR DS:[ESI*4+6C4BD00]
06C16759 8BF2 MOV ESI,EDX
06C1675B C1EE 18 SHR ESI,18
06C1675E 330CB5 00B9C406 XOR ECX,DWORD PTR DS:[ESI*4+6C4B900]
06C16765 0FB67424 18 MOVZX ESI,BYTE PTR SS:[ESP+18]
06C1676A 330CB5 00C5C406 XOR ECX,DWORD PTR DS:[ESI*4+6C4C500]
06C16771 C1EB 10 SHR EBX,10
06C16774 3308 XOR ECX,DWORD PTR DS:[EAX]
06C16776 0FB6F3 MOVZX ESI,BL
06C16779 8B34B5 00BDC406 MOV ESI,DWORD PTR DS:[ESI*4+6C4BD00]
06C16780 8B5C24 18 MOV EBX,DWORD PTR SS:[ESP+18]
06C16784 C1EB 08 SHR EBX,8
06C16787 C1EF 18 SHR EDI,18
06C1678A 3334BD 00B9C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4B900]
06C16791 0FB6FB MOVZX EDI,BL
06C16794 3334BD 00C1C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C100]
06C1679B 0FB6FA MOVZX EDI,DL
06C1679E 3334BD 00C5C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C500]
06C167A5 8BDA MOV EBX,EDX
06C167A7 3370 04 XOR ESI,DWORD PTR DS:[EAX+4]
06C167AA 83C0 04 ADD EAX,4
06C167AD 897424 2C MOV DWORD PTR SS:[ESP+2C],ESI
06C167B1 8B7424 24 MOV ESI,DWORD PTR SS:[ESP+24]
06C167B5 C1EE 18 SHR ESI,18
06C167B8 8B34B5 00B9C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4B900]
06C167BF C1EB 08 SHR EBX,8
06C167C2 0FB6FB MOVZX EDI,BL
06C167C5 3334BD 00C1C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C100]
06C167CC 8B5C24 18 MOV EBX,DWORD PTR SS:[ESP+18]
06C167D0 0FB67C24 20 MOVZX EDI,BYTE PTR SS:[ESP+20]
06C167D5 897424 10 MOV DWORD PTR SS:[ESP+10],ESI
06C167D9 C1EB 10 SHR EBX,10
06C167DC 0FB6F3 MOVZX ESI,BL
06C167DF 8B34B5 00BDC406 MOV ESI,DWORD PTR DS:[ESI*4+6C4BD00]
06C167E6 317424 10 XOR DWORD PTR SS:[ESP+10],ESI
06C167EA 8B7424 10 MOV ESI,DWORD PTR SS:[ESP+10]
06C167EE 3334BD 00C5C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C500]
06C167F5 8B5C24 20 MOV EBX,DWORD PTR SS:[ESP+20]
06C167F9 3370 04 XOR ESI,DWORD PTR DS:[EAX+4]
06C167FC C1EA 10 SHR EDX,10
06C167FF 897424 30 MOV DWORD PTR SS:[ESP+30],ESI
06C16803 83C0 04 ADD EAX,4
06C16806 0FB6D2 MOVZX EDX,DL
06C16809 C1EB 08 SHR EBX,8
06C1680C 0FB6F3 MOVZX ESI,BL
06C1680F 8B34B5 00C1C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4C100]
06C16816 333495 00BDC406 XOR ESI,DWORD PTR DS:[EDX*4+6C4BD00]
06C1681D 8B5424 18 MOV EDX,DWORD PTR SS:[ESP+18]
06C16821 8B5C24 30 MOV EBX,DWORD PTR SS:[ESP+30]
06C16825 C1EA 18 SHR EDX,18
06C16828 333495 00B9C406 XOR ESI,DWORD PTR DS:[EDX*4+6C4B900]
06C1682F 0FB65424 24 MOVZX EDX,BYTE PTR SS:[ESP+24]
06C16834 333495 00C5C406 XOR ESI,DWORD PTR DS:[EDX*4+6C4C500]
06C1683B 83C0 04 ADD EAX,4
06C1683E 3330 XOR ESI,DWORD PTR DS:[EAX]
06C16840 C1EB 10 SHR EBX,10
06C16843 8BD6 MOV EDX,ESI
06C16845 C1EA 08 SHR EDX,8
06C16848 0FB6D2 MOVZX EDX,DL
06C1684B 8B1495 00C1C406 MOV EDX,DWORD PTR DS:[EDX*4+6C4C100]
06C16852 897424 34 MOV DWORD PTR SS:[ESP+34],ESI
06C16856 0FB6F3 MOVZX ESI,BL
06C16859 3314B5 00BDC406 XOR EDX,DWORD PTR DS:[ESI*4+6C4BD00]
06C16860 8B7424 2C MOV ESI,DWORD PTR SS:[ESP+2C]
06C16864 8B5C24 34 MOV EBX,DWORD PTR SS:[ESP+34]
06C16868 C1EE 18 SHR ESI,18
06C1686B 3314B5 00B9C406 XOR EDX,DWORD PTR DS:[ESI*4+6C4B900]
06C16872 0FB6F1 MOVZX ESI,CL
06C16875 3314B5 00C5C406 XOR EDX,DWORD PTR DS:[ESI*4+6C4C500]
06C1687C 83C0 04 ADD EAX,4
06C1687F 3310 XOR EDX,DWORD PTR DS:[EAX]
06C16881 83C0 04 ADD EAX,4
06C16884 C1EB 10 SHR EBX,10
06C16887 8B7C24 30 MOV EDI,DWORD PTR SS:[ESP+30]
06C1688B 0FB6F3 MOVZX ESI,BL
06C1688E 8B34B5 00BDC406 MOV ESI,DWORD PTR DS:[ESI*4+6C4BD00]
06C16895 C1EF 18 SHR EDI,18
06C16898 3334BD 00B9C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4B900]
06C1689F 0FB67C24 2C MOVZX EDI,BYTE PTR SS:[ESP+2C]
06C168A4 897424 10 MOV DWORD PTR SS:[ESP+10],ESI
06C168A8 8BD9 MOV EBX,ECX
06C168AA C1EB 08 SHR EBX,8
06C168AD 0FB6F3 MOVZX ESI,BL
06C168B0 8B34B5 00C1C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4C100]
06C168B7 317424 10 XOR DWORD PTR SS:[ESP+10],ESI
06C168BB 8B7424 10 MOV ESI,DWORD PTR SS:[ESP+10]
06C168BF 3334BD 00C5C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C500]
06C168C6 8B5C24 2C MOV EBX,DWORD PTR SS:[ESP+2C]
06C168CA 3330 XOR ESI,DWORD PTR DS:[EAX]
06C168CC C1EB 08 SHR EBX,8
06C168CF 897424 1C MOV DWORD PTR SS:[ESP+1C],ESI
06C168D3 8B7424 34 MOV ESI,DWORD PTR SS:[ESP+34]
06C168D7 C1EE 18 SHR ESI,18
06C168DA 8B34B5 00B9C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4B900]
06C168E1 0FB6FB MOVZX EDI,BL
06C168E4 3334BD 00C1C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C100]
06C168EB 0FB67C24 30 MOVZX EDI,BYTE PTR SS:[ESP+30]
06C168F0 897424 10 MOV DWORD PTR SS:[ESP+10],ESI
06C168F4 8BD9 MOV EBX,ECX
06C168F6 C1EB 10 SHR EBX,10
06C168F9 0FB6F3 MOVZX ESI,BL
06C168FC 8B34B5 00BDC406 MOV ESI,DWORD PTR DS:[ESI*4+6C4BD00]
06C16903 317424 10 XOR DWORD PTR SS:[ESP+10],ESI
06C16907 8B7424 10 MOV ESI,DWORD PTR SS:[ESP+10]
06C1690B 3334BD 00C5C406 XOR ESI,DWORD PTR DS:[EDI*4+6C4C500]
06C16912 8B5C24 30 MOV EBX,DWORD PTR SS:[ESP+30]
06C16916 3370 04 XOR ESI,DWORD PTR DS:[EAX+4]
06C16919 C1EB 08 SHR EBX,8
06C1691C 897424 20 MOV DWORD PTR SS:[ESP+20],ESI
06C16920 83C0 04 ADD EAX,4
06C16923 0FB6F3 MOVZX ESI,BL
06C16926 8B34B5 00C1C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4C100]
06C1692D 8B5C24 2C MOV EBX,DWORD PTR SS:[ESP+2C]
06C16931 C1EB 10 SHR EBX,10
06C16934 0FB6FB MOVZX EDI,BL
06C16937 3334BD 00BDC406 XOR ESI,DWORD PTR DS:[EDI*4+6C4BD00]
06C1693E 8B5C24 20 MOV EBX,DWORD PTR SS:[ESP+20]
06C16942 C1E9 18 SHR ECX,18
中间省略N行代码（完整代码请看附件）。。。。。。。。。。。。。。。。。。
06C1AD88 8B34B5 009DC406 MOV ESI,DWORD PTR DS:[ESI*4+6C49D00]
06C1AD8F 8B5C24 50 MOV EBX,DWORD PTR SS:[ESP+50]
06C1AD93 C1EB 18 SHR EBX,18
06C1AD96 33349D 0099C406 XOR ESI,DWORD PTR DS:[EBX*4+6C49900]
06C1AD9D 8BDA MOV EBX,EDX
06C1AD9F C1EB 08 SHR EBX,8
06C1ADA2 0FB6DB MOVZX EBX,BL
06C1ADA5 33349D 00A1C406 XOR ESI,DWORD PTR DS:[EBX*4+6C4A100]
06C1ADAC 0FB65C24 40 MOVZX EBX,BYTE PTR SS:[ESP+40]
06C1ADB1 33349D 00A5C406 XOR ESI,DWORD PTR DS:[EBX*4+6C4A500]
06C1ADB8 8B5C24 40 MOV EBX,DWORD PTR SS:[ESP+40]
06C1ADBC 3370 04 XOR ESI,DWORD PTR DS:[EAX+4]
06C1ADBF C1EB 08 SHR EBX,8
06C1ADC2 8977 04 MOV DWORD PTR DS:[EDI+4],ESI
06C1ADC5 8B7424 54 MOV ESI,DWORD PTR SS:[ESP+54]
06C1ADC9 83C0 04 ADD EAX,4
06C1ADCC 0FB6DB MOVZX EBX,BL
06C1ADCF 83C7 04 ADD EDI,4
06C1ADD2 C1EE 18 SHR ESI,18
06C1ADD5 8B34B5 0099C406 MOV ESI,DWORD PTR DS:[ESI*4+6C49900]
06C1ADDC 33349D 00A1C406 XOR ESI,DWORD PTR DS:[EBX*4+6C4A100]
06C1ADE3 8BD9 MOV EBX,ECX
06C1ADE5 C1EB 10 SHR EBX,10
06C1ADE8 0FB6DB MOVZX EBX,BL
06C1ADEB 33349D 009DC406 XOR ESI,DWORD PTR DS:[EBX*4+6C49D00]
06C1ADF2 8B5C24 44 MOV EBX,DWORD PTR SS:[ESP+44]
06C1ADF6 0FB6EB MOVZX EBP,BL
06C1ADF9 3334AD 00A5C406 XOR ESI,DWORD PTR DS:[EBP*4+6C4A500]
06C1AE00 83C0 04 ADD EAX,4
06C1AE03 3330 XOR ESI,DWORD PTR DS:[EAX]
06C1AE05 C1EB 08 SHR EBX,8
06C1AE08 83C7 04 ADD EDI,4
06C1AE0B 8937 MOV DWORD PTR DS:[EDI],ESI
06C1AE0D 0FB6F3 MOVZX ESI,BL
06C1AE10 8B34B5 00A1C406 MOV ESI,DWORD PTR DS:[ESI*4+6C4A100]
06C1AE17 8BDA MOV EBX,EDX
06C1AE19 C1EB 10 SHR EBX,10
06C1AE1C 0FB6DB MOVZX EBX,BL
06C1AE1F 33349D 009DC406 XOR ESI,DWORD PTR DS:[EBX*4+6C49D00]
06C1AE26 C1E9 18 SHR ECX,18
06C1AE29 83C7 04 ADD EDI,4
06C1AE2C 83C0 04 ADD EAX,4
06C1AE2F 33348D 0099C406 XOR ESI,DWORD PTR DS:[ECX*4+6C49900]
06C1AE36 8B4C24 48 MOV ECX,DWORD PTR SS:[ESP+48]
06C1AE3A 0FB6D9 MOVZX EBX,CL
06C1AE3D 33349D 00A5C406 XOR ESI,DWORD PTR DS:[EBX*4+6C4A500]
06C1AE44 8BD9 MOV EBX,ECX
06C1AE46 3330 XOR ESI,DWORD PTR DS:[EAX]
06C1AE48 C1EB 08 SHR EBX,8
06C1AE4B 8937 MOV DWORD PTR DS:[EDI],ESI
06C1AE4D 8B7424 40 MOV ESI,DWORD PTR SS:[ESP+40]
06C1AE51 0FB6DB MOVZX EBX,BL
06C1AE54 8B1C9D 00A1C406 MOV EBX,DWORD PTR DS:[EBX*4+6C4A100]
06C1AE5B 8BCE MOV ECX,ESI
06C1AE5D C1E9 10 SHR ECX,10
06C1AE60 0FB6E9 MOVZX EBP,CL
06C1AE63 331CAD 009DC406 XOR EBX,DWORD PTR DS:[EBP*4+6C49D00]
06C1AE6A C1EA 18 SHR EDX,18
06C1AE6D 331C95 0099C406 XOR EBX,DWORD PTR DS:[EDX*4+6C49900]
06C1AE74 8B5424 4C MOV EDX,DWORD PTR SS:[ESP+4C]
06C1AE78 0FB6EA MOVZX EBP,DL
06C1AE7B 331CAD 00A5C406 XOR EBX,DWORD PTR DS:[EBP*4+6C4A500]
06C1AE82 8B6C24 44 MOV EBP,DWORD PTR SS:[ESP+44]
06C1AE86 3358 04 XOR EBX,DWORD PTR DS:[EAX+4]
06C1AE89 83C0 04 ADD EAX,4
06C1AE8C 895F 04 MOV DWORD PTR DS:[EDI+4],EBX
06C1AE8F C1EA 08 SHR EDX,8
06C1AE92 83C7 04 ADD EDI,4
06C1AE95 0FB6D2 MOVZX EDX,DL
06C1AE98 8B0C95 00A1C406 MOV ECX,DWORD PTR DS:[EDX*4+6C4A100]
06C1AE9F 8B5424 50 MOV EDX,DWORD PTR SS:[ESP+50]
06C1AEA3 8BDD MOV EBX,EBP
06C1AEA5 C1EB 10 SHR EBX,10
06C1AEA8 0FB6DB MOVZX EBX,BL
06C1AEAB 330C9D 009DC406 XOR ECX,DWORD PTR DS:[EBX*4+6C49D00]
06C1AEB2 C1EE 18 SHR ESI,18
06C1AEB5 330CB5 0099C406 XOR ECX,DWORD PTR DS:[ESI*4+6C49900]
06C1AEBC 0FB6F2 MOVZX ESI,DL
06C1AEBF 330CB5 00A5C406 XOR ECX,DWORD PTR DS:[ESI*4+6C4A500]
06C1AEC6 83C0 04 ADD EAX,4
06C1AEC9 3308 XOR ECX,DWORD PTR DS:[EAX]
06C1AECB 83C7 04 ADD EDI,4
06C1AECE 890F MOV DWORD PTR DS:[EDI],ECX
06C1AED0 8B4C24 48 MOV ECX,DWORD PTR SS:[ESP+48]
06C1AED4 C1EA 08 SHR EDX,8
06C1AED7 0FB6D2 MOVZX EDX,DL
06C1AEDA 8B1495 00A1C406 MOV EDX,DWORD PTR DS:[EDX*4+6C4A100]
06C1AEE1 C1E9 10 SHR ECX,10
06C1AEE4 0FB6C9 MOVZX ECX,CL
06C1AEE7 33148D 009DC406 XOR EDX,DWORD PTR DS:[ECX*4+6C49D00]
06C1AEEE 0FB64C24 54 MOVZX ECX,BYTE PTR SS:[ESP+54]
06C1AEF3 C1ED 18 SHR EBP,18
06C1AEF6 3314AD 0099C406 XOR EDX,DWORD PTR DS:[EBP*4+6C49900]
06C1AEFD 33148D 00A5C406 XOR EDX,DWORD PTR DS:[ECX*4+6C4A500]
06C1AF04 3350 04 XOR EDX,DWORD PTR DS:[EAX+4]
06C1AF07 8957 04 MOV DWORD PTR DS:[EDI+4],EDX
06C1AF0A 5F POP EDI
06C1AF0B 5E POP ESI
06C1AF0C 5D POP EBP
06C1AF0D 5B POP EBX
06C1AF0E 83C4 48 ADD ESP,48
06C1AF11 C2 0400 RETN 4
06C1AF14 CC INT3
[课程]Linux pwn 探索篇！
