-
-
[旧帖] [求助]菜鸟的问题～破外挂，老是在这代码里跳～～ 0.00雪花
-
发表于: 2008-1-19 17:48 2963
-
004B9425 . 58 POP EAX
004B9426 . 66:59 POP CX
004B9428 . D3E0 SHL EAX,CL
004B942A . 50 PUSH EAX
004B942B . 9C PUSHFD
004B942C . E9 69000000 JMP tuo.004B949A
004B9431 . 80E0 3C AND AL,3C
004B9434 . 8F0407 POP DWORD PTR DS:[EDI+EAX]
004B9437 . E9 5E000000 JMP tuo.004B949A
004B943C . 5A POP EDX
004B943D . 36:FF32 PUSH DWORD PTR SS:[EDX]
004B9440 . E9 55000000 JMP tuo.004B949A
004B9445 . 5A POP EDX
004B9446 . 66:FF32 PUSH WORD PTR DS:[EDX]
004B9449 . E9 4C000000 JMP tuo.004B949A
004B944E > 9C PUSHFD
004B944F 57 PUSH EDI
004B9450 52 PUSH EDX
004B9451 56 PUSH ESI
004B9452 50 PUSH EAX
004B9453 51 PUSH ECX
004B9454 55 PUSH EBP
004B9455 53 PUSH EBX
004B9456 51 PUSH ECX
004B9457 68 00000000 PUSH 0
004B945C 8B7424 28 MOV ESI,DWORD PTR SS:[ESP+28]
004B9460 BA 00604C00 MOV EDX,tuo.004C6000
004B9465 FF15 BC114C00 CALL DWORD PTR DS:[<&kernel32.GetCurrent>; [GetCurrentThreadId
004B946B 89C3 MOV EBX,EAX
004B946D B9 00010000 MOV ECX,100
004B9472 89D7 MOV EDI,EDX
004B9474 9C PUSHFD
004B9475 FC CLD
004B9476 F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9478 74 0D JE SHORT tuo.004B9487
004B947A B8 00010000 MOV EAX,100
004B947F 91 XCHG EAX,ECX
004B9480 89D7 MOV EDI,EDX
004B9482 F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9484 895F FC MOV DWORD PTR DS:[EDI-4],EBX
004B9487 89FD MOV EBP,EDI
004B9489 29D7 SUB EDI,EDX
004B948B D1E7 SHL EDI,1
004B948D 8DBCFA C00300>LEA EDI,DWORD PTR DS:[EDX+EDI*8+3C0]
004B9494 9D POPFD
004B9495 89F3 MOV EBX,ESI
004B9497 033424 ADD ESI,DWORD PTR SS:[ESP]
004B949A 8A06 MOV AL,BYTE PTR DS:[ESI]
004B949C 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B949F 30D8 XOR AL,BL
004B94A1 C0C0 04 ROL AL,4
004B94A4 FEC0 INC AL
004B94A6 C0C8 04 ROR AL,4
004B94A9 F6D0 NOT AL
004B94AB 30C3 XOR BL,AL
004B94AD 0FB6C0 MOVZX EAX,AL
004B94B0 FF3485 F6774B>PUSH DWORD PTR DS:[EAX*4+4B77F6]
004B94B7 C3 RETN
004B94B8 89E1 MOV ECX,ESP
004B94BA 51 PUSH ECX
004B94BB ^ E9 DAFFFFFF JMP tuo.004B949A
004B94C0 5A POP EDX
004B94C1 66:58 POP AX
004B94C3 36:8802 MOV BYTE PTR SS:[EDX],AL
004B94C6 ^ E9 CFFFFFFF JMP tuo.004B949A
004B94CB 58 POP EAX
004B94CC 64:8F00 POP DWORD PTR FS:[EAX]
004B94CF ^ E9 C6FFFFFF JMP tuo.004B949A
004B94D4 66:58 POP AX
004B94D6 66:010424 ADD WORD PTR SS:[ESP],AX
004B94DA 9C PUSHFD
004B94DB ^ E9 BAFFFFFF JMP tuo.004B949A
004B94E0 58 POP EAX
004B94E1 5A POP EDX
004B94E2 66:59 POP CX
004B94E4 0FA5D0 SHLD EAX,EDX,CL
004B94E7 50 PUSH EAX
004B94E8 9C PUSHFD
004B94E9 ^ E9 ACFFFFFF JMP tuo.004B949A
004B94EE 5E POP ESI
004B94EF ^ E9 A1FFFFFF JMP tuo.004B9495
004B94F4 8A06 MOV AL,BYTE PTR DS:[ESI]
004B94F6 28D8 SUB AL,BL
004B94F8 C0C0 07 ROL AL,7
004B94FB F6D0 NOT AL
004B94FD 83C6 01 ADD ESI,1
004B9500 FEC0 INC AL
004B9502 C0C8 05 ROR AL,5
004B9505 04 54 ADD AL,54
004B9507 28C3 SUB BL,AL
004B9509 66:FF3407 PUSH WORD PTR DS:[EDI+EAX]
004B950D ^ E9 88FFFFFF JMP tuo.004B949A
004B9512 80E0 3C AND AL,3C
004B9515 FF3407 PUSH DWORD PTR DS:[EDI+EAX]
004B9518 ^ E9 7DFFFFFF JMP tuo.004B949A
004B951D 59 POP ECX
004B951E 010C24 ADD DWORD PTR SS:[ESP],ECX
004B9521 9C PUSHFD
004B9522 ^ E9 73FFFFFF JMP tuo.004B949A
004B9527 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B952A 30D8 XOR AL,BL
004B952C FEC0 INC AL
004B952E 34 63 XOR AL,63
004B9530 C0C0 03 ROL AL,3
004B9533 83C6 01 ADD ESI,1
004B9536 FEC0 INC AL
004B9538 C0C0 02 ROL AL,2
004B953B 30C3 XOR BL,AL
004B953D 8A0407 MOV AL,BYTE PTR DS:[EDI+EAX]
004B9540 66:50 PUSH AX
004B9542 ^ E9 53FFFFFF JMP tuo.004B949A
004B9547 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B954A 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B954D 28D8 SUB AL,BL
004B954F C0C0 07 ROL AL,7
004B9552 F6D0 NOT AL
004B9554 FEC0 INC AL
004B9556 C0C8 05 ROR AL,5
004B9559 04 54 ADD AL,54
004B955B 28C3 SUB BL,AL
004B955D 66:8F0407 POP WORD PTR DS:[EDI+EAX]
004B9561 ^ E9 34FFFFFF JMP tuo.004B949A
004B9566 58 POP EAX
004B9567 66:59 POP CX
004B9569 D3E8 SHR EAX,CL
004B956B 50 PUSH EAX
004B956C 9C PUSHFD
004B956D ^ E9 28FFFFFF JMP tuo.004B949A
004B9572 C745 FC 00000>MOV DWORD PTR SS:[EBP-4],0
004B9579 5A POP EDX
004B957A 5E POP ESI
004B957B 5B POP EBX
004B957C 5D POP EBP
004B957D 59 POP ECX
004B957E 58 POP EAX
004B957F 5E POP ESI
004B9580 5A POP EDX
004B9581 5F POP EDI
004B9582 9D POPFD
004B9583 C3 RETN
004B9584 0FB60E MOVZX ECX,BYTE PTR DS:[ESI]
004B9587 00D9 ADD CL,BL
004B9589 80E9 01 SUB CL,1
004B958C 80F1 37 XOR CL,37
004B958F 46 INC ESI
004B9590 F6D1 NOT CL
004B9592 C0C1 05 ROL CL,5
004B9595 00CB ADD BL,CL
004B9597 91 XCHG EAX,ECX
004B9598 66:98 CBW
004B959A 98 CWDE
004B959B 50 PUSH EAX
004B959C ^ E9 F9FEFFFF JMP tuo.004B949A
004B95A1 66:54 PUSH SP ;
004B95A3 ^ E9 F2FEFFFF JMP tuo.004B949A
004B95A8 59 POP ECX
004B95A9 66:58 POP AX
004B95AB 8801 MOV BYTE PTR DS:[ECX],AL
004B95AD ^ E9 E8FEFFFF JMP tuo.004B949A
004B95B2 5A POP EDX
004B95B3 36:8F02 POP DWORD PTR SS:[EDX]
004B95B6 ^ E9 DFFEFFFF JMP tuo.004B949A
004B95BB 8B16 MOV EDX,DWORD PTR DS:[ESI]
004B95BD 8D76 04 LEA ESI,DWORD PTR DS:[ESI+4]
004B95C0 29DA SUB EDX,EBX
004B95C2 F7DA NEG EDX
004B95C4 81EA B2529993 SUB EDX,939952B2
004B95CA 81F2 808F8C43 XOR EDX,438C8F80
004B95D0 C1C2 02 ROL EDX,2
004B95D3 29D3 SUB EBX,EDX
004B95D5 52 PUSH EDX
004B95D6 ^ E9 BFFEFFFF JMP tuo.004B949A
004B95DB 5A POP EDX
004B95DC 66:36:FF32 PUSH WORD PTR SS:[EDX]
004B95E0 ^ E9 B5FEFFFF JMP tuo.004B949A
004B95E5 66:5A POP DX
004B95E7 66:59 POP CX
004B95E9 66:D3E2 SHL DX,CL
004B95EC 66:52 PUSH DX
004B95EE 9C PUSHFD
004B95EF ^ E9 A6FEFFFF JMP tuo.004B949A
004B95F4 F71424 NOT DWORD PTR SS:[ESP]
004B95F7 66:58 POP AX
004B95F9 66:210424 AND WORD PTR SS:[ESP],AX
004B95FD 9C PUSHFD
004B95FE ^ E9 97FEFFFF JMP tuo.004B949A
004B9603 5A POP EDX
004B9604 FF32 PUSH DWORD PTR DS:[EDX]
004B9606 ^ E9 8FFEFFFF JMP tuo.004B949A
004B960B 58 POP EAX
004B960C 64:FF30 PUSH DWORD PTR FS:[EAX]
004B960F ^ E9 86FEFFFF JMP tuo.004B949A
004B9614 5A POP EDX
004B9615 89D4 MOV ESP,EDX
004B9617 ^ E9 7EFEFFFF JMP tuo.004B949A
004B961C 66:58 POP AX
004B961E 66:5A POP DX
004B9620 F6D0 NOT AL
004B9622 F6D2 NOT DL
004B9624 20D0 AND AL,DL
004B9626 66:50 PUSH AX
004B9628 9C PUSHFD
004B9629 ^ E9 6CFEFFFF JMP tuo.004B949A
004B962E 66:5A POP DX
004B9630 66:89D4 MOV SP,DX
004B9633 ^ E9 62FEFFFF JMP tuo.004B949A
004B9638 59 POP ECX
004B9639 66:8F01 POP WORD PTR DS:[ECX]
004B963C ^ E9 59FEFFFF JMP tuo.004B949A
004B9641 59 POP ECX
004B9642 F7D1 NOT ECX
004B9644 F71424 NOT DWORD PTR SS:[ESP]
004B9647 210C24 AND DWORD PTR SS:[ESP],ECX
004B964A 9C PUSHFD
004B964B ^ E9 4AFEFFFF JMP tuo.004B949A
004B9650 8A06 MOV AL,BYTE PTR DS:[ESI]
004B9652 00D8 ADD AL,BL
004B9654 2C 01 SUB AL,1
004B9656 34 37 XOR AL,37
004B9658 F6D0 NOT AL
004B965A C0C0 05 ROL AL,5
004B965D 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B9660 00C3 ADD BL,AL
004B9662 66:50 PUSH AX
004B9664 ^ E9 31FEFFFF JMP tuo.004B949A
004B9669 66:5A POP DX
004B966B 66:59 POP CX
004B966D 66:D3EA SHR DX,CL
004B9670 66:52 PUSH DX
004B9672 9C PUSHFD
004B9673 ^ E9 22FEFFFF JMP tuo.004B949A
004B9678 59 POP ECX
004B9679 66:36:8F01 POP WORD PTR SS:[ECX]
004B967D ^ E9 18FEFFFF JMP tuo.004B949A
004B9682 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B9685 66:01D9 ADD CX,BX
004B9688 66:81F1 2034 XOR CX,3420
004B968D 8D76 02 LEA ESI,DWORD PTR DS:[ESI+2]
004B9690 66:F7D1 NOT CX
004B9693 66:C1C9 06 ROR CX,6
004B9697 66:81F1 D6B2 XOR CX,0B2D6
004B969C 66:01CB ADD BX,CX
004B969F 66:51 PUSH CX
004B96A1 ^ E9 F4FDFFFF JMP tuo.004B949A
004B96A6 58 POP EAX
004B96A7 66:36:0FB608 MOVZX CX,BYTE PTR SS:[EAX]
004B96AC 66:51 PUSH CX
004B96AE ^ E9 E7FDFFFF JMP tuo.004B949A
004B96B3 66:58 POP AX
004B96B5 000424 ADD BYTE PTR SS:[ESP],AL
004B96B8 9C PUSHFD
004B96B9 ^ E9 DCFDFFFF JMP tuo.004B949A
004B96BE 5A POP EDX
004B96BF 8F02 POP DWORD PTR DS:[EDX]
004B96C1 ^ E9 D4FDFFFF JMP tuo.004B949A
004B96C6 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B96C9 66:01D9 ADD CX,BX
004B96CC 66:81F1 2034 XOR CX,3420
004B96D1 66:F7D1 NOT CX
004B96D4 66:C1C9 06 ROR CX,6
004B96D8 66:81F1 D6B2 XOR CX,0B2D6
004B96DD 83C6 02 ADD ESI,2
004B96E0 66:01CB ADD BX,CX
004B96E3 91 XCHG EAX,ECX
004B96E4 98 CWDE
004B96E5 50 PUSH EAX
004B96E6 ^ E9 AFFDFFFF JMP tuo.004B949A
004B96EB 58 POP EAX
004B96EC 5A POP EDX
004B96ED 66:59 POP CX
004B96EF 0FADD0 SHRD EAX,EDX,CL
004B96F2 50 PUSH EAX
004B96F3 9C PUSHFD
004B96F4 ^ E9 A1FDFFFF JMP tuo.004B949A
004B96F9 4E DEC ESI
004B96FA 0A5E 36 OR BL,BYTE PTR DS:[ESI+36]
004B96FD 36:1E PUSH DS ; 多余的前缀
004B96FF 2E:52 PUSH EDX ; 多余的前缀
004B9701 121E ADC BL,BYTE PTR DS:[ESI]
004B9703 4E DEC ESI
004B9704 46 INC ESI
004B9705 5F POP EDI
004B9706 92 XCHG EAX,EDX
004B9707 50 PUSH EAX
004B9708 ^ 70 BB JO SHORT tuo.004B96C5
004B970A ^ 73 C0 JNB SHORT tuo.004B96CC
004B970C 14 05 ADC AL,5
004B970E 122E ADC CH,BYTE PTR DS:[ESI]
004B9710 54 PUSH ESP
004B9711 35 0927055B XOR EAX,5B052709
004B9716 0903 OR DWORD PTR DS:[EBX],EAX
004B9718 010B ADD DWORD PTR DS:[EBX],ECX
004B971A 5D POP EBP
004B971B 1B41 45 SBB EAX,DWORD PTR DS:[ECX+45]
004B971E 68 38974B00 PUSH tuo.004B9738
004B9723 ^ E9 26FDFFFF JMP tuo.004B944E
004B9728 8C25 E251BD16 MOV WORD PTR DS:[16BD51E2],FS
004B972E 51 PUSH ECX
004B972F 5F POP EDI
004B9730 FA CLI
004B9731 D32D E8A8A4F4 SHR DWORD PTR DS:[F4A4A8E8],CL
004B9737 FF83 EFB7EFF3 INC DWORD PTR DS:[EBX+F3EFB7EF]
004B973D FFDF CALL FAR EDI ; 非法使用寄存器
004B973F DBEB FUCOMI ST,ST(3)
004B9741 97 XCHG EAX,EDI
004B9742 A7 CMPS DWORD PTR DS:[ESI],DWORD PTR ES:[ED>
004B9743 AF SCAS DWORD PTR ES:[EDI]
004B9744 CE INTO
004B9745 E7 1F OUT 1F,EAX ; I/O 命令
004B9747 DB92 9A466D6E FIST DWORD PTR DS:[EDX+6E6D469A]
004B974D 6E OUTS DX,BYTE PTR ES:[EDI] ; I/O 命令
004B974E 06 PUSH ES
004B974F ^ 76 92 JBE SHORT tuo.004B96E3
004B9751 A2 600D2511 MOV BYTE PTR DS:[11250D60],AL
004B9756 07 POP ES ; 段寄存器更改
004B9757 88C3 MOV BL,AL
004B9759 C49408 E5DBC3>LES EDX,FWORD PTR DS:[EAX+ECX+95C3DBE5] ; 段寄存器更改
004B9760 E8 CC307ED0 CALL D0C9C831
004B9765 D27B 1A SAR BYTE PTR DS:[EBX+1A],CL
004B9768 3931 CMP DWORD PTR DS:[ECX],ESI
004B976A 36: PREFIX SS: ; 多余的前缀
004B976B 3E:0ABF 11687>OR BH,BYTE PTR DS:[EDI+C67E6811]
004B9772 ^ 76 CA JBE SHORT tuo.004B973E
004B9774 E1 14 LOOPDE SHORT tuo.004B978A
004B9776 1C 28 SBB AL,28
004B9778 27 DAA
004B9779 49 DEC ECX
004B977A 3A2C94 CMP CH,BYTE PTR SS:[ESP+EDX*4]
004B977D 5C POP ESP
004B977E 68 7EF1BAB9 PUSH B9BAF17E
004B9783 B9 45F24FAF MOV ECX,AF4FF245
004B9788 72 03 JB SHORT tuo.004B978D
004B978A 0B18 OR EBX,DWORD PTR DS:[EAX]
004B978C 4B DEC EBX
004B978D 8D39 LEA EDI,DWORD PTR DS:[ECX]
004B978F 0A6B 48 OR CH,BYTE PTR DS:[EBX+48]
004B9792 60 PUSHAD
004B9793 2878 2C SUB BYTE PTR DS:[EAX+2C],BH
004B9796 2E:70 22 JO SHORT tuo.004B97BB ; 多余的前缀
004B9799 04 26 ADD AL,26
004B979B 0836 OR BYTE PTR DS:[ESI],DH
004B979D 2C 56 SUB AL,56
004B979F 386E 38 CMP BYTE PTR DS:[ESI+38],CH
004B97A2 35 4C10404C XOR EAX,4C40104C
004B97A7 48 DEC EAX
004B97A8 1870 50 SBB BYTE PTR DS:[EAX+50],DH
004B97AB 64:7C 60 JL SHORT tuo.004B980E ; 多余的前缀
004B97AE BC A783ABAE MOV ESP,AEAB83A7
004B97B3 8F ??? ; 未知命令
004B97B4 91 XCHG EAX,ECX
004B97B5 5E POP ESI
004B97B6 27 DAA
004B97B7 3A17 CMP DL,BYTE PTR DS:[EDI]
004B97B9 AF SCAS DWORD PTR ES:[EDI]
004B97BA 25 19C905A0 AND EAX,A005C919
004B97BF 7C 15 JL SHORT tuo.004B97D6
004B97C1 ^ 7D D4 JGE SHORT tuo.004B9797
004B97C3 64:4C DEC ESP ; 多余的前缀
004B97C5 9F LAHF
004B97C6 52 PUSH EDX
004B97C7 47 INC EDI
004B97C8 017E 26 ADD DWORD PTR DS:[ESI+26],EDI
004B97CB 0C 65 OR AL,65
004B97CD 5D POP EBP
004B97CE A4 MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]
004B97CF 38AB F39190B4 CMP BYTE PTR DS:[EBX+B49091F3],CH
004B97D5 F63C30 IDIV BYTE PTR DS:[EAX+ESI]
004B97D8 CC INT3
004B97D9 4E DEC ESI
004B97DA FD STD
004B97DB D7 XLAT BYTE PTR DS:[EBX+AL]
004B97DC C534E6 LDS ESI,FWORD PTR DS:[ESI] ; 段寄存器更改
004B97DF 5B POP EBX
004B97E0 B9 74B402D0 MOV ECX,D002B474
004B97E5 A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B97E6 EE OUT DX,AL ; I/O 命令
004B97E7 D02B SHR BYTE PTR DS:[EBX],1
004B97E9 CE INTO
004B97EA 26:F8 CLC ; 多余的前缀
004B97EC 6346 2E ARPL WORD PTR DS:[ESI+2E],AX
004B97EF ^ 78 F5 JS SHORT tuo.004B97E6
004B97F1 7F 08 JG SHORT tuo.004B97FB
004B97F3 0921 OR DWORD PTR DS:[ECX],ESP
004B97F5 24 8B AND AL,8B
004B97F7 44 INC ESP
004B97F8 16 PUSH SS
004B97F9 237B 46 AND EDI,DWORD PTR DS:[EBX+46]
004B97FC FA CLI
004B97FD F7C2 DA4873FC TEST EDX,FC7348DA
004B9803 A8 CA TEST AL,0CA
004B9805 CB RETF ; 远返回
004B9806 F75B 59 NEG DWORD PTR DS:[EBX+59]
004B9809 F6BD BE9AEFA1 IDIV BYTE PTR SS:[EBP+A1EF9ABE]
004B980F CF IRETD
004B9810 E7 E6 OUT 0E6,EAX ; I/O 命令
004B9812 EA AA96E2D8 B>JMP FAR 80B2:D8E296AA ; 远跳转
004B9819 F2: PREFIX REPNE: ; 多余的前缀
004B981A A8 A6 TEST AL,0A6
004B981C 90 NOP
004B981D 92 XCHG EAX,EDX
004B981E 94 XCHG EAX,ESP
004B981F A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B9820 84D2 TEST DL,DL
004B9822 91 XCHG EAX,ECX
004B9823 CC INT3
004B9824 98 CWDE
004B9825 C8 C4C090 ENTER 0C0C4,90
004B9829 F8 CLC
004B982A D8EC FSUBR ST,ST(4)
004B982C F4 HLT ; 特权命令
004B982D FC CLD
004B982E F0:DF59 5A LOCK FISTP WORD PTR DS:[ECX+5A] ; 不允许锁定前缀
004B9832 08C5 OR CH,AL
004B9834 ^ 7D A6 JGE SHORT tuo.004B97DC
004B9836 9E SAHF
004B9837 D14B ED ROR DWORD PTR DS:[EBX-13],1
004B983A D5 5D AAD 5D
004B983C 8512 TEST DWORD PTR DS:[EDX],EDX
004B983E 2A20 SUB AH,BYTE PTR DS:[EAX]
004B9840 9B WAIT
004B9841 94 XCHG EAX,ESP
004B9842 819B FDA55BB7>SBB DWORD PTR DS:[EBX+B75BA5FD],79329D93
004B984C 7A 52 JPE SHORT tuo.004B98A0
004B984E 9D POPFD
004B984F 4F DEC EDI
004B9850 9D POPFD
004B9851 C10E 45 ROR DWORD PTR DS:[ESI],45 ; 移位常量超出 1..31 的范围
004B9854 46 INC ESI
004B9855 1A12 SBB DL,BYTE PTR DS:[EDX]
004B9857 81BD 64417B53>CMP DWORD PTR SS:[EBP+537B4164],9EB6918F
004B9861 0C BE OR AL,0BE
004B9863 EA CEC2CC63 2>JMP FAR 2B28:63CCC2CE ; 远跳转
004B986A 0F1C ??? ; 未知命令
004B986C DCC3 FADD ST(3),ST
004B986E 99 CDQ
004B986F 34 B1 XOR AL,0B1
004B9871 ED IN EAX,DX ; I/O 命令
004B9872 837F 83 E0 CMP DWORD PTR DS:[EDI-7D],-20
004B9876 5E POP ESI
004B9877 04 DE ADD AL,0DE
004B9879 A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B987A C1E5 90 SHL EBP,90 ; 移位常量超出 1..31 的范围
004B987D 62CF BOUND ECX,EDI ; 非法使用寄存器
004B987F F3: PREFIX REP: ; 多余的前缀
004B9880 DFE5 FBLD EBP ; 非法使用寄存器
004B9882 FFE9 JMP FAR ECX ; 非法使用寄存器
004B9884 ^ EB E1 JMP SHORT tuo.004B9867
004B9426 . 66:59 POP CX
004B9428 . D3E0 SHL EAX,CL
004B942A . 50 PUSH EAX
004B942B . 9C PUSHFD
004B942C . E9 69000000 JMP tuo.004B949A
004B9431 . 80E0 3C AND AL,3C
004B9434 . 8F0407 POP DWORD PTR DS:[EDI+EAX]
004B9437 . E9 5E000000 JMP tuo.004B949A
004B943C . 5A POP EDX
004B943D . 36:FF32 PUSH DWORD PTR SS:[EDX]
004B9440 . E9 55000000 JMP tuo.004B949A
004B9445 . 5A POP EDX
004B9446 . 66:FF32 PUSH WORD PTR DS:[EDX]
004B9449 . E9 4C000000 JMP tuo.004B949A
004B944E > 9C PUSHFD
004B944F 57 PUSH EDI
004B9450 52 PUSH EDX
004B9451 56 PUSH ESI
004B9452 50 PUSH EAX
004B9453 51 PUSH ECX
004B9454 55 PUSH EBP
004B9455 53 PUSH EBX
004B9456 51 PUSH ECX
004B9457 68 00000000 PUSH 0
004B945C 8B7424 28 MOV ESI,DWORD PTR SS:[ESP+28]
004B9460 BA 00604C00 MOV EDX,tuo.004C6000
004B9465 FF15 BC114C00 CALL DWORD PTR DS:[<&kernel32.GetCurrent>; [GetCurrentThreadId
004B946B 89C3 MOV EBX,EAX
004B946D B9 00010000 MOV ECX,100
004B9472 89D7 MOV EDI,EDX
004B9474 9C PUSHFD
004B9475 FC CLD
004B9476 F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9478 74 0D JE SHORT tuo.004B9487
004B947A B8 00010000 MOV EAX,100
004B947F 91 XCHG EAX,ECX
004B9480 89D7 MOV EDI,EDX
004B9482 F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9484 895F FC MOV DWORD PTR DS:[EDI-4],EBX
004B9487 89FD MOV EBP,EDI
004B9489 29D7 SUB EDI,EDX
004B948B D1E7 SHL EDI,1
004B948D 8DBCFA C00300>LEA EDI,DWORD PTR DS:[EDX+EDI*8+3C0]
004B9494 9D POPFD
004B9495 89F3 MOV EBX,ESI
004B9497 033424 ADD ESI,DWORD PTR SS:[ESP]
004B949A 8A06 MOV AL,BYTE PTR DS:[ESI]
004B949C 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B949F 30D8 XOR AL,BL
004B94A1 C0C0 04 ROL AL,4
004B94A4 FEC0 INC AL
004B94A6 C0C8 04 ROR AL,4
004B94A9 F6D0 NOT AL
004B94AB 30C3 XOR BL,AL
004B94AD 0FB6C0 MOVZX EAX,AL
004B94B0 FF3485 F6774B>PUSH DWORD PTR DS:[EAX*4+4B77F6]
004B94B7 C3 RETN
004B94B8 89E1 MOV ECX,ESP
004B94BA 51 PUSH ECX
004B94BB ^ E9 DAFFFFFF JMP tuo.004B949A
004B94C0 5A POP EDX
004B94C1 66:58 POP AX
004B94C3 36:8802 MOV BYTE PTR SS:[EDX],AL
004B94C6 ^ E9 CFFFFFFF JMP tuo.004B949A
004B94CB 58 POP EAX
004B94CC 64:8F00 POP DWORD PTR FS:[EAX]
004B94CF ^ E9 C6FFFFFF JMP tuo.004B949A
004B94D4 66:58 POP AX
004B94D6 66:010424 ADD WORD PTR SS:[ESP],AX
004B94DA 9C PUSHFD
004B94DB ^ E9 BAFFFFFF JMP tuo.004B949A
004B94E0 58 POP EAX
004B94E1 5A POP EDX
004B94E2 66:59 POP CX
004B94E4 0FA5D0 SHLD EAX,EDX,CL
004B94E7 50 PUSH EAX
004B94E8 9C PUSHFD
004B94E9 ^ E9 ACFFFFFF JMP tuo.004B949A
004B94EE 5E POP ESI
004B94EF ^ E9 A1FFFFFF JMP tuo.004B9495
004B94F4 8A06 MOV AL,BYTE PTR DS:[ESI]
004B94F6 28D8 SUB AL,BL
004B94F8 C0C0 07 ROL AL,7
004B94FB F6D0 NOT AL
004B94FD 83C6 01 ADD ESI,1
004B9500 FEC0 INC AL
004B9502 C0C8 05 ROR AL,5
004B9505 04 54 ADD AL,54
004B9507 28C3 SUB BL,AL
004B9509 66:FF3407 PUSH WORD PTR DS:[EDI+EAX]
004B950D ^ E9 88FFFFFF JMP tuo.004B949A
004B9512 80E0 3C AND AL,3C
004B9515 FF3407 PUSH DWORD PTR DS:[EDI+EAX]
004B9518 ^ E9 7DFFFFFF JMP tuo.004B949A
004B951D 59 POP ECX
004B951E 010C24 ADD DWORD PTR SS:[ESP],ECX
004B9521 9C PUSHFD
004B9522 ^ E9 73FFFFFF JMP tuo.004B949A
004B9527 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B952A 30D8 XOR AL,BL
004B952C FEC0 INC AL
004B952E 34 63 XOR AL,63
004B9530 C0C0 03 ROL AL,3
004B9533 83C6 01 ADD ESI,1
004B9536 FEC0 INC AL
004B9538 C0C0 02 ROL AL,2
004B953B 30C3 XOR BL,AL
004B953D 8A0407 MOV AL,BYTE PTR DS:[EDI+EAX]
004B9540 66:50 PUSH AX
004B9542 ^ E9 53FFFFFF JMP tuo.004B949A
004B9547 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B954A 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B954D 28D8 SUB AL,BL
004B954F C0C0 07 ROL AL,7
004B9552 F6D0 NOT AL
004B9554 FEC0 INC AL
004B9556 C0C8 05 ROR AL,5
004B9559 04 54 ADD AL,54
004B955B 28C3 SUB BL,AL
004B955D 66:8F0407 POP WORD PTR DS:[EDI+EAX]
004B9561 ^ E9 34FFFFFF JMP tuo.004B949A
004B9566 58 POP EAX
004B9567 66:59 POP CX
004B9569 D3E8 SHR EAX,CL
004B956B 50 PUSH EAX
004B956C 9C PUSHFD
004B956D ^ E9 28FFFFFF JMP tuo.004B949A
004B9572 C745 FC 00000>MOV DWORD PTR SS:[EBP-4],0
004B9579 5A POP EDX
004B957A 5E POP ESI
004B957B 5B POP EBX
004B957C 5D POP EBP
004B957D 59 POP ECX
004B957E 58 POP EAX
004B957F 5E POP ESI
004B9580 5A POP EDX
004B9581 5F POP EDI
004B9582 9D POPFD
004B9583 C3 RETN
004B9584 0FB60E MOVZX ECX,BYTE PTR DS:[ESI]
004B9587 00D9 ADD CL,BL
004B9589 80E9 01 SUB CL,1
004B958C 80F1 37 XOR CL,37
004B958F 46 INC ESI
004B9590 F6D1 NOT CL
004B9592 C0C1 05 ROL CL,5
004B9595 00CB ADD BL,CL
004B9597 91 XCHG EAX,ECX
004B9598 66:98 CBW
004B959A 98 CWDE
004B959B 50 PUSH EAX
004B959C ^ E9 F9FEFFFF JMP tuo.004B949A
004B95A1 66:54 PUSH SP ;
004B95A3 ^ E9 F2FEFFFF JMP tuo.004B949A
004B95A8 59 POP ECX
004B95A9 66:58 POP AX
004B95AB 8801 MOV BYTE PTR DS:[ECX],AL
004B95AD ^ E9 E8FEFFFF JMP tuo.004B949A
004B95B2 5A POP EDX
004B95B3 36:8F02 POP DWORD PTR SS:[EDX]
004B95B6 ^ E9 DFFEFFFF JMP tuo.004B949A
004B95BB 8B16 MOV EDX,DWORD PTR DS:[ESI]
004B95BD 8D76 04 LEA ESI,DWORD PTR DS:[ESI+4]
004B95C0 29DA SUB EDX,EBX
004B95C2 F7DA NEG EDX
004B95C4 81EA B2529993 SUB EDX,939952B2
004B95CA 81F2 808F8C43 XOR EDX,438C8F80
004B95D0 C1C2 02 ROL EDX,2
004B95D3 29D3 SUB EBX,EDX
004B95D5 52 PUSH EDX
004B95D6 ^ E9 BFFEFFFF JMP tuo.004B949A
004B95DB 5A POP EDX
004B95DC 66:36:FF32 PUSH WORD PTR SS:[EDX]
004B95E0 ^ E9 B5FEFFFF JMP tuo.004B949A
004B95E5 66:5A POP DX
004B95E7 66:59 POP CX
004B95E9 66:D3E2 SHL DX,CL
004B95EC 66:52 PUSH DX
004B95EE 9C PUSHFD
004B95EF ^ E9 A6FEFFFF JMP tuo.004B949A
004B95F4 F71424 NOT DWORD PTR SS:[ESP]
004B95F7 66:58 POP AX
004B95F9 66:210424 AND WORD PTR SS:[ESP],AX
004B95FD 9C PUSHFD
004B95FE ^ E9 97FEFFFF JMP tuo.004B949A
004B9603 5A POP EDX
004B9604 FF32 PUSH DWORD PTR DS:[EDX]
004B9606 ^ E9 8FFEFFFF JMP tuo.004B949A
004B960B 58 POP EAX
004B960C 64:FF30 PUSH DWORD PTR FS:[EAX]
004B960F ^ E9 86FEFFFF JMP tuo.004B949A
004B9614 5A POP EDX
004B9615 89D4 MOV ESP,EDX
004B9617 ^ E9 7EFEFFFF JMP tuo.004B949A
004B961C 66:58 POP AX
004B961E 66:5A POP DX
004B9620 F6D0 NOT AL
004B9622 F6D2 NOT DL
004B9624 20D0 AND AL,DL
004B9626 66:50 PUSH AX
004B9628 9C PUSHFD
004B9629 ^ E9 6CFEFFFF JMP tuo.004B949A
004B962E 66:5A POP DX
004B9630 66:89D4 MOV SP,DX
004B9633 ^ E9 62FEFFFF JMP tuo.004B949A
004B9638 59 POP ECX
004B9639 66:8F01 POP WORD PTR DS:[ECX]
004B963C ^ E9 59FEFFFF JMP tuo.004B949A
004B9641 59 POP ECX
004B9642 F7D1 NOT ECX
004B9644 F71424 NOT DWORD PTR SS:[ESP]
004B9647 210C24 AND DWORD PTR SS:[ESP],ECX
004B964A 9C PUSHFD
004B964B ^ E9 4AFEFFFF JMP tuo.004B949A
004B9650 8A06 MOV AL,BYTE PTR DS:[ESI]
004B9652 00D8 ADD AL,BL
004B9654 2C 01 SUB AL,1
004B9656 34 37 XOR AL,37
004B9658 F6D0 NOT AL
004B965A C0C0 05 ROL AL,5
004B965D 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B9660 00C3 ADD BL,AL
004B9662 66:50 PUSH AX
004B9664 ^ E9 31FEFFFF JMP tuo.004B949A
004B9669 66:5A POP DX
004B966B 66:59 POP CX
004B966D 66:D3EA SHR DX,CL
004B9670 66:52 PUSH DX
004B9672 9C PUSHFD
004B9673 ^ E9 22FEFFFF JMP tuo.004B949A
004B9678 59 POP ECX
004B9679 66:36:8F01 POP WORD PTR SS:[ECX]
004B967D ^ E9 18FEFFFF JMP tuo.004B949A
004B9682 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B9685 66:01D9 ADD CX,BX
004B9688 66:81F1 2034 XOR CX,3420
004B968D 8D76 02 LEA ESI,DWORD PTR DS:[ESI+2]
004B9690 66:F7D1 NOT CX
004B9693 66:C1C9 06 ROR CX,6
004B9697 66:81F1 D6B2 XOR CX,0B2D6
004B969C 66:01CB ADD BX,CX
004B969F 66:51 PUSH CX
004B96A1 ^ E9 F4FDFFFF JMP tuo.004B949A
004B96A6 58 POP EAX
004B96A7 66:36:0FB608 MOVZX CX,BYTE PTR SS:[EAX]
004B96AC 66:51 PUSH CX
004B96AE ^ E9 E7FDFFFF JMP tuo.004B949A
004B96B3 66:58 POP AX
004B96B5 000424 ADD BYTE PTR SS:[ESP],AL
004B96B8 9C PUSHFD
004B96B9 ^ E9 DCFDFFFF JMP tuo.004B949A
004B96BE 5A POP EDX
004B96BF 8F02 POP DWORD PTR DS:[EDX]
004B96C1 ^ E9 D4FDFFFF JMP tuo.004B949A
004B96C6 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B96C9 66:01D9 ADD CX,BX
004B96CC 66:81F1 2034 XOR CX,3420
004B96D1 66:F7D1 NOT CX
004B96D4 66:C1C9 06 ROR CX,6
004B96D8 66:81F1 D6B2 XOR CX,0B2D6
004B96DD 83C6 02 ADD ESI,2
004B96E0 66:01CB ADD BX,CX
004B96E3 91 XCHG EAX,ECX
004B96E4 98 CWDE
004B96E5 50 PUSH EAX
004B96E6 ^ E9 AFFDFFFF JMP tuo.004B949A
004B96EB 58 POP EAX
004B96EC 5A POP EDX
004B96ED 66:59 POP CX
004B96EF 0FADD0 SHRD EAX,EDX,CL
004B96F2 50 PUSH EAX
004B96F3 9C PUSHFD
004B96F4 ^ E9 A1FDFFFF JMP tuo.004B949A
004B96F9 4E DEC ESI
004B96FA 0A5E 36 OR BL,BYTE PTR DS:[ESI+36]
004B96FD 36:1E PUSH DS ; 多余的前缀
004B96FF 2E:52 PUSH EDX ; 多余的前缀
004B9701 121E ADC BL,BYTE PTR DS:[ESI]
004B9703 4E DEC ESI
004B9704 46 INC ESI
004B9705 5F POP EDI
004B9706 92 XCHG EAX,EDX
004B9707 50 PUSH EAX
004B9708 ^ 70 BB JO SHORT tuo.004B96C5
004B970A ^ 73 C0 JNB SHORT tuo.004B96CC
004B970C 14 05 ADC AL,5
004B970E 122E ADC CH,BYTE PTR DS:[ESI]
004B9710 54 PUSH ESP
004B9711 35 0927055B XOR EAX,5B052709
004B9716 0903 OR DWORD PTR DS:[EBX],EAX
004B9718 010B ADD DWORD PTR DS:[EBX],ECX
004B971A 5D POP EBP
004B971B 1B41 45 SBB EAX,DWORD PTR DS:[ECX+45]
004B971E 68 38974B00 PUSH tuo.004B9738
004B9723 ^ E9 26FDFFFF JMP tuo.004B944E
004B9728 8C25 E251BD16 MOV WORD PTR DS:[16BD51E2],FS
004B972E 51 PUSH ECX
004B972F 5F POP EDI
004B9730 FA CLI
004B9731 D32D E8A8A4F4 SHR DWORD PTR DS:[F4A4A8E8],CL
004B9737 FF83 EFB7EFF3 INC DWORD PTR DS:[EBX+F3EFB7EF]
004B973D FFDF CALL FAR EDI ; 非法使用寄存器
004B973F DBEB FUCOMI ST,ST(3)
004B9741 97 XCHG EAX,EDI
004B9742 A7 CMPS DWORD PTR DS:[ESI],DWORD PTR ES:[ED>
004B9743 AF SCAS DWORD PTR ES:[EDI]
004B9744 CE INTO
004B9745 E7 1F OUT 1F,EAX ; I/O 命令
004B9747 DB92 9A466D6E FIST DWORD PTR DS:[EDX+6E6D469A]
004B974D 6E OUTS DX,BYTE PTR ES:[EDI] ; I/O 命令
004B974E 06 PUSH ES
004B974F ^ 76 92 JBE SHORT tuo.004B96E3
004B9751 A2 600D2511 MOV BYTE PTR DS:[11250D60],AL
004B9756 07 POP ES ; 段寄存器更改
004B9757 88C3 MOV BL,AL
004B9759 C49408 E5DBC3>LES EDX,FWORD PTR DS:[EAX+ECX+95C3DBE5] ; 段寄存器更改
004B9760 E8 CC307ED0 CALL D0C9C831
004B9765 D27B 1A SAR BYTE PTR DS:[EBX+1A],CL
004B9768 3931 CMP DWORD PTR DS:[ECX],ESI
004B976A 36: PREFIX SS: ; 多余的前缀
004B976B 3E:0ABF 11687>OR BH,BYTE PTR DS:[EDI+C67E6811]
004B9772 ^ 76 CA JBE SHORT tuo.004B973E
004B9774 E1 14 LOOPDE SHORT tuo.004B978A
004B9776 1C 28 SBB AL,28
004B9778 27 DAA
004B9779 49 DEC ECX
004B977A 3A2C94 CMP CH,BYTE PTR SS:[ESP+EDX*4]
004B977D 5C POP ESP
004B977E 68 7EF1BAB9 PUSH B9BAF17E
004B9783 B9 45F24FAF MOV ECX,AF4FF245
004B9788 72 03 JB SHORT tuo.004B978D
004B978A 0B18 OR EBX,DWORD PTR DS:[EAX]
004B978C 4B DEC EBX
004B978D 8D39 LEA EDI,DWORD PTR DS:[ECX]
004B978F 0A6B 48 OR CH,BYTE PTR DS:[EBX+48]
004B9792 60 PUSHAD
004B9793 2878 2C SUB BYTE PTR DS:[EAX+2C],BH
004B9796 2E:70 22 JO SHORT tuo.004B97BB ; 多余的前缀
004B9799 04 26 ADD AL,26
004B979B 0836 OR BYTE PTR DS:[ESI],DH
004B979D 2C 56 SUB AL,56
004B979F 386E 38 CMP BYTE PTR DS:[ESI+38],CH
004B97A2 35 4C10404C XOR EAX,4C40104C
004B97A7 48 DEC EAX
004B97A8 1870 50 SBB BYTE PTR DS:[EAX+50],DH
004B97AB 64:7C 60 JL SHORT tuo.004B980E ; 多余的前缀
004B97AE BC A783ABAE MOV ESP,AEAB83A7
004B97B3 8F ??? ; 未知命令
004B97B4 91 XCHG EAX,ECX
004B97B5 5E POP ESI
004B97B6 27 DAA
004B97B7 3A17 CMP DL,BYTE PTR DS:[EDI]
004B97B9 AF SCAS DWORD PTR ES:[EDI]
004B97BA 25 19C905A0 AND EAX,A005C919
004B97BF 7C 15 JL SHORT tuo.004B97D6
004B97C1 ^ 7D D4 JGE SHORT tuo.004B9797
004B97C3 64:4C DEC ESP ; 多余的前缀
004B97C5 9F LAHF
004B97C6 52 PUSH EDX
004B97C7 47 INC EDI
004B97C8 017E 26 ADD DWORD PTR DS:[ESI+26],EDI
004B97CB 0C 65 OR AL,65
004B97CD 5D POP EBP
004B97CE A4 MOVS BYTE PTR ES:[EDI],BYTE PTR DS:[ESI]
004B97CF 38AB F39190B4 CMP BYTE PTR DS:[EBX+B49091F3],CH
004B97D5 F63C30 IDIV BYTE PTR DS:[EAX+ESI]
004B97D8 CC INT3
004B97D9 4E DEC ESI
004B97DA FD STD
004B97DB D7 XLAT BYTE PTR DS:[EBX+AL]
004B97DC C534E6 LDS ESI,FWORD PTR DS:[ESI] ; 段寄存器更改
004B97DF 5B POP EBX
004B97E0 B9 74B402D0 MOV ECX,D002B474
004B97E5 A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B97E6 EE OUT DX,AL ; I/O 命令
004B97E7 D02B SHR BYTE PTR DS:[EBX],1
004B97E9 CE INTO
004B97EA 26:F8 CLC ; 多余的前缀
004B97EC 6346 2E ARPL WORD PTR DS:[ESI+2E],AX
004B97EF ^ 78 F5 JS SHORT tuo.004B97E6
004B97F1 7F 08 JG SHORT tuo.004B97FB
004B97F3 0921 OR DWORD PTR DS:[ECX],ESP
004B97F5 24 8B AND AL,8B
004B97F7 44 INC ESP
004B97F8 16 PUSH SS
004B97F9 237B 46 AND EDI,DWORD PTR DS:[EBX+46]
004B97FC FA CLI
004B97FD F7C2 DA4873FC TEST EDX,FC7348DA
004B9803 A8 CA TEST AL,0CA
004B9805 CB RETF ; 远返回
004B9806 F75B 59 NEG DWORD PTR DS:[EBX+59]
004B9809 F6BD BE9AEFA1 IDIV BYTE PTR SS:[EBP+A1EF9ABE]
004B980F CF IRETD
004B9810 E7 E6 OUT 0E6,EAX ; I/O 命令
004B9812 EA AA96E2D8 B>JMP FAR 80B2:D8E296AA ; 远跳转
004B9819 F2: PREFIX REPNE: ; 多余的前缀
004B981A A8 A6 TEST AL,0A6
004B981C 90 NOP
004B981D 92 XCHG EAX,EDX
004B981E 94 XCHG EAX,ESP
004B981F A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B9820 84D2 TEST DL,DL
004B9822 91 XCHG EAX,ECX
004B9823 CC INT3
004B9824 98 CWDE
004B9825 C8 C4C090 ENTER 0C0C4,90
004B9829 F8 CLC
004B982A D8EC FSUBR ST,ST(4)
004B982C F4 HLT ; 特权命令
004B982D FC CLD
004B982E F0:DF59 5A LOCK FISTP WORD PTR DS:[ECX+5A] ; 不允许锁定前缀
004B9832 08C5 OR CH,AL
004B9834 ^ 7D A6 JGE SHORT tuo.004B97DC
004B9836 9E SAHF
004B9837 D14B ED ROR DWORD PTR DS:[EBX-13],1
004B983A D5 5D AAD 5D
004B983C 8512 TEST DWORD PTR DS:[EDX],EDX
004B983E 2A20 SUB AH,BYTE PTR DS:[EAX]
004B9840 9B WAIT
004B9841 94 XCHG EAX,ESP
004B9842 819B FDA55BB7>SBB DWORD PTR DS:[EBX+B75BA5FD],79329D93
004B984C 7A 52 JPE SHORT tuo.004B98A0
004B984E 9D POPFD
004B984F 4F DEC EDI
004B9850 9D POPFD
004B9851 C10E 45 ROR DWORD PTR DS:[ESI],45 ; 移位常量超出 1..31 的范围
004B9854 46 INC ESI
004B9855 1A12 SBB DL,BYTE PTR DS:[EDX]
004B9857 81BD 64417B53>CMP DWORD PTR SS:[EBP+537B4164],9EB6918F
004B9861 0C BE OR AL,0BE
004B9863 EA CEC2CC63 2>JMP FAR 2B28:63CCC2CE ; 远跳转
004B986A 0F1C ??? ; 未知命令
004B986C DCC3 FADD ST(3),ST
004B986E 99 CDQ
004B986F 34 B1 XOR AL,0B1
004B9871 ED IN EAX,DX ; I/O 命令
004B9872 837F 83 E0 CMP DWORD PTR DS:[EDI-7D],-20
004B9876 5E POP ESI
004B9877 04 DE ADD AL,0DE
004B9879 A6 CMPS BYTE PTR DS:[ESI],BYTE PTR ES:[EDI]
004B987A C1E5 90 SHL EBP,90 ; 移位常量超出 1..31 的范围
004B987D 62CF BOUND ECX,EDI ; 非法使用寄存器
004B987F F3: PREFIX REP: ; 多余的前缀
004B9880 DFE5 FBLD EBP ; 非法使用寄存器
004B9882 FFE9 JMP FAR ECX ; 非法使用寄存器
004B9884 ^ EB E1 JMP SHORT tuo.004B9867
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
赞赏
|
|
|---|---|
|
|
他的文章
赞赏
雪币:
留言:
