case: 见附件
命令：test.exe -i testin.txt -o testout.txt
第二次来到0048AD40时，
0048AD3D |. 50 PUSH EAX
0048AD3E |. 51 PUSH ECX
0048AD3F |. 56 PUSH ESI
0048AD40 |. E8 FB510100 CALL test._
Ox5056
EAX = 0012CFA8
ECX = 0012CEA8 （内存值如下：7B E8 ......B1 3B）
ESI = 000000F5
0012CEA8 7B E8 9A 5D 34 86 29 67 E9 94 60 6B 53 28 EE 76 {铓]4?g閿`kS(顅
0012CEB8 3E 6E AA 88 7D 1F BA 7B CB C0 8B 34 B1 3B >n獔}簕死??..
run过Ox5056后0012CFA8内的值如下
0012CFA8 1C 00 00 00 47 01 00 00 7D 00 00 00 FE 00 00 00 ...G..}...?..
0012CFB8 D1 00 00 00 49 01 00 00 3D 01 00 00 17 00 00 00 ?..I..=.....
0012CFC8 38 01 00 00 06 01 00 00 7A 01 00 00 98 00 00 00 8....z..?..
0012CFD8 E5 01 00 00 D8 01 00 00 DF 01 00 00 17 00 00 00 ?..?..?.....
0012CFE8 E5 00 00 00 48 00 00 00 51 00 00 00 1C 00 00 00 ?..H...Q......
0012CFF8 F3 00 00 00 77 00 00 00 50 00 00 00 E0 00 00 00 ?..w...P...?..
0012D008 2F 00 00 00 E1 00 00 00 FA 00 00 00 31 00 00 00 /...?..?..1...
0012D018 51 00 00 00 Q...
请教下这里Ox5056的算法过程，即这段代码转换是怎么实现的？
7B E8 9A 5D 34 86 29 67 E9 94 60 6B 53 28 EE 76 3E 6E AA 88 7D 1F BA 7B CB C0 8B 34 B1 3B
=>
1C 00 00 00 47 01 00 00 7D 00 00 00 FE 00 00 00 D1 00 00 00 49 01 00 00 3D 01 00 00 17 00 00 00
38 01 00 00 06 01 00 00 7A 01 00 00 98 00 00 00 E5 01 00 00 D8 01 00 00 DF 01 00 00 17 00 00 00
E5 00 00 00 48 00 00 00 51 00 00 00 1C 00 00 00 F3 00 00 00 77 00 00 00 50 00 00 00 E0 00 00 00
2F 00 00 00 E1 00 00 00 FA 00 00 00 31 00 00 00 51 00 00 00
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
