太大了，完整的在附件中。
下面是片断：
mov eax, [ebp-28h]
mov [ebp-34h], eax
lea ecx, [ebp-34h]
mov [ebp-38h], ecx
lea edx, [ebp-18h]
mov [ebp-10h], edx
mov dword ptr [ebp-18h], 0
mov eax, [ebp-38h]
mov cl, [eax+1]
mov [ebp-14h], cl
mov edx, [ebp-10h]
add edx, 2
mov [ebp-20h], edx
movsx eax, byte ptr [ebp-14h]
sar eax, 7
and eax, 1
mov [ebp-14h], al
movsx ecx, byte ptr [ebp-14h]
shl ecx, 4
mov [ebp-14h], cl
mov edx, [ebp-20h]
mov al, [edx]
or al, [ebp-14h]
mov ecx, [ebp-20h]
mov [ecx], al
mov edx, [ebp-38h]
mov al, [edx+2]
mov [ebp-14h], al
mov ecx, [ebp-10h]
mov [ebp-20h], ecx
movsx edx, byte ptr [ebp-14h]
sar edx, 1
and edx, 1
mov [ebp-14h], dl
movsx eax, byte ptr [ebp-14h]
shl eax, 6
mov [ebp-14h], al
mov ecx, [ebp-20h]
mov dl, [ecx]
or dl, [ebp-14h]
mov eax, [ebp-20h]
mov [eax], dl
mov ecx, [ebp-38h]
mov dl, [ecx+3]
mov [ebp-14h], dl
mov eax, [ebp-10h]
add eax, 3
mov [ebp-20h], eax
movsx ecx, byte ptr [ebp-14h]
sar ecx, 5
and ecx, 1
mov [ebp-14h], cl
movsx edx, byte ptr [ebp-14h]
shl edx, 5
mov [ebp-14h], dl
mov eax, [ebp-20h]
mov cl, [eax]
or cl, [ebp-14h]
mov edx, [ebp-20h]
mov [edx], cl
mov eax, [ebp-38h]
mov cl, [eax+3]
mov [ebp-14h], cl
mov edx, [ebp-10h]
add edx, 1
mov [ebp-20h], edx
movsx eax, byte ptr [ebp-14h]
sar eax, 1
and eax, 1
mov [ebp-14h], al
movsx ecx, byte ptr [ebp-14h]
shl ecx, 5
mov [ebp-14h], cl
mov edx, [ebp-20h]
mov al, [edx]
or al, [ebp-14h]
mov ecx, [ebp-20h]
mov [ecx], al
mov edx, [ebp-38h]
mov al, [edx]
mov [ebp-14h], al
mov ecx, [ebp-10h]
add ecx, 1
mov [ebp-20h], ecx
movsx edx, byte ptr [ebp-14h]
sar edx, 5
and edx, 1
mov [ebp-14h], dl
movsx eax, byte ptr [ebp-14h]
shl eax, 6
mov [ebp-14h], al
mov ecx, [ebp-20h]
mov dl, [ecx]
or dl, [ebp-14h]
mov eax, [ebp-20h]
mov [eax], dl
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
