004B93E7 . 66:52 PUSH DX
004B93E9 . 9C PUSHFD
004B93EA . E9 AB000000 JMP 12tuo.004B949A
004B93EF . 66:58 POP AX
004B93F1 . 66:59 POP CX
004B93F3 . D2E8 SHR AL,CL
004B93F5 . 66:50 PUSH AX
004B93F7 . 9C PUSHFD
004B93F8 . E9 9D000000 JMP 12tuo.004B949A
004B93FD . 5A POP EDX
004B93FE . 8A02 MOV AL,BYTE PTR DS:[EDX]
004B9400 . 66:50 PUSH AX
004B9402 . E9 93000000 JMP 12tuo.004B949A
004B9407 . 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B940A . 46 INC ESI
004B940B . 30D8 XOR AL,BL
004B940D . FEC0 INC AL
004B940F . 34 63 XOR AL,63
004B9411 . C0C0 03 ROL AL,3
004B9414 . FEC0 INC AL
004B9416 . C0C0 02 ROL AL,2
004B9419 . 30C3 XOR BL,AL
004B941B . 66:59 POP CX
004B941D . 880C07 MOV BYTE PTR DS:[EDI+EAX],CL
004B9420 . E9 75000000 JMP 12tuo.004B949A
004B9425 . 58 POP EAX
004B9426 . 66:59 POP CX
004B9428 . D3E0 SHL EAX,CL
004B942A . 50 PUSH EAX
004B942B . 9C PUSHFD
004B942C . E9 69000000 JMP 12tuo.004B949A
004B9431 . 80E0 3C AND AL,3C
004B9434 . 8F0407 POP DWORD PTR DS:[EDI+EAX]
004B9437 . E9 5E000000 JMP 12tuo.004B949A
004B943C . 5A POP EDX
004B943D . 36:FF32 PUSH DWORD PTR SS:[EDX]
004B9440 . E9 55000000 JMP 12tuo.004B949A
004B9445 . 5A POP EDX
004B9446 . 66:FF32 PUSH WORD PTR DS:[EDX]
004B9449 . E9 4C000000 JMP 12tuo.004B949A
004B944E > 9C PUSHFD
004B944F . 57 PUSH EDI
004B9450 . 52 PUSH EDX
004B9451 . 56 PUSH ESI
004B9452 . 50 PUSH EAX
004B9453 . 51 PUSH ECX
004B9454 . 55 PUSH EBP
004B9455 . 53 PUSH EBX
004B9456 . 51 PUSH ECX
004B9457 . 68 00000000 PUSH 0
004B945C . 8B7424 28 MOV ESI,DWORD PTR SS:[ESP+28]
004B9460 . BA 00604C00 MOV EDX,12tuo.004C6000
004B9465 . FF15 BC114C00 CALL DWORD PTR DS:[<&kernel32.GetCurrent>; [GetCurrentThreadId
004B946B . 89C3 MOV EBX,EAX
004B946D . B9 00010000 MOV ECX,100
004B9472 . 89D7 MOV EDI,EDX
004B9474 . 9C PUSHFD
004B9475 . FC CLD
004B9476 . F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9478 . 74 0D JE SHORT 12tuo.004B9487
004B947A . B8 00010000 MOV EAX,100
004B947F . 91 XCHG EAX,ECX
004B9480 . 89D7 MOV EDI,EDX
004B9482 . F2:AF REPNE SCAS DWORD PTR ES:[EDI]
004B9484 . 895F FC MOV DWORD PTR DS:[EDI-4],EBX
004B9487 > 89FD MOV EBP,EDI
004B9489 . 29D7 SUB EDI,EDX
004B948B . D1E7 SHL EDI,1
004B948D . 8DBCFA C00300>LEA EDI,DWORD PTR DS:[EDX+EDI*8+3C0]
004B9494 . 9D POPFD
004B9495 > 89F3 MOV EBX,ESI
004B9497 . 033424 ADD ESI,DWORD PTR SS:[ESP]
004B949A > 8A06 MOV AL,BYTE PTR DS:[ESI]
004B949C . 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B949F . 30D8 XOR AL,BL
004B94A1 . C0C0 04 ROL AL,4
004B94A4 . FEC0 INC AL
004B94A6 . C0C8 04 ROR AL,4
004B94A9 . F6D0 NOT AL
004B94AB . 30C3 XOR BL,AL
004B94AD . 0FB6C0 MOVZX EAX,AL
004B94B0 . FF3485 F6774B>PUSH DWORD PTR DS:[EAX*4+4B77F6]
004B94B7 . C3 RETN
004B94B8 . 89E1 MOV ECX,ESP
004B94BA . 51 PUSH ECX
004B94BB .^ E9 DAFFFFFF JMP 12tuo.004B949A
004B94C0 . 5A POP EDX
004B94C1 . 66:58 POP AX
004B94C3 . 36:8802 MOV BYTE PTR SS:[EDX],AL
004B94C6 .^ E9 CFFFFFFF JMP 12tuo.004B949A
004B94CB . 58 POP EAX
004B94CC . 64:8F00 POP DWORD PTR FS:[EAX]
004B94CF .^ E9 C6FFFFFF JMP 12tuo.004B949A
004B94D4 . 66:58 POP AX
004B94D6 . 66:010424 ADD WORD PTR SS:[ESP],AX
004B94DA . 9C PUSHFD
004B94DB .^ E9 BAFFFFFF JMP 12tuo.004B949A
004B94E0 . 58 POP EAX
004B94E1 . 5A POP EDX
004B94E2 . 66:59 POP CX
004B94E4 . 0FA5D0 SHLD EAX,EDX,CL
004B94E7 . 50 PUSH EAX
004B94E8 . 9C PUSHFD
004B94E9 .^ E9 ACFFFFFF JMP 12tuo.004B949A
004B94EE . 5E POP ESI
004B94EF .^ E9 A1FFFFFF JMP 12tuo.004B9495
004B94F4 . 8A06 MOV AL,BYTE PTR DS:[ESI]
004B94F6 . 28D8 SUB AL,BL
004B94F8 . C0C0 07 ROL AL,7
004B94FB . F6D0 NOT AL
004B94FD . 83C6 01 ADD ESI,1
004B9500 . FEC0 INC AL
004B9502 . C0C8 05 ROR AL,5
004B9505 . 04 54 ADD AL,54
004B9507 . 28C3 SUB BL,AL
004B9509 . 66:FF3407 PUSH WORD PTR DS:[EDI+EAX]
004B950D .^ E9 88FFFFFF JMP 12tuo.004B949A
004B9512 . 80E0 3C AND AL,3C
004B9515 . FF3407 PUSH DWORD PTR DS:[EDI+EAX]
004B9518 .^ E9 7DFFFFFF JMP 12tuo.004B949A
004B951D . 59 POP ECX
004B951E . 010C24 ADD DWORD PTR SS:[ESP],ECX
004B9521 . 9C PUSHFD
004B9522 .^ E9 73FFFFFF JMP 12tuo.004B949A
004B9527 . 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B952A . 30D8 XOR AL,BL
004B952C . FEC0 INC AL
004B952E . 34 63 XOR AL,63
004B9530 . C0C0 03 ROL AL,3
004B9533 . 83C6 01 ADD ESI,1
004B9536 . FEC0 INC AL
004B9538 . C0C0 02 ROL AL,2
004B953B . 30C3 XOR BL,AL
004B953D . 8A0407 MOV AL,BYTE PTR DS:[EDI+EAX]
004B9540 . 66:50 PUSH AX
004B9542 .^ E9 53FFFFFF JMP 12tuo.004B949A
004B9547 . 0FB606 MOVZX EAX,BYTE PTR DS:[ESI]
004B954A . 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B954D . 28D8 SUB AL,BL
004B954F . C0C0 07 ROL AL,7
004B9552 . F6D0 NOT AL
004B9554 . FEC0 INC AL
004B9556 . C0C8 05 ROR AL,5
004B9559 . 04 54 ADD AL,54
004B955B . 28C3 SUB BL,AL
004B955D . 66:8F0407 POP WORD PTR DS:[EDI+EAX]
004B9561 .^ E9 34FFFFFF JMP 12tuo.004B949A
004B9566 . 58 POP EAX
004B9567 . 66:59 POP CX
004B9569 . D3E8 SHR EAX,CL
004B956B . 50 PUSH EAX
004B956C . 9C PUSHFD
004B956D .^ E9 28FFFFFF JMP 12tuo.004B949A
004B9572 . C745 FC 00000>MOV DWORD PTR SS:[EBP-4],0
004B9579 . 5A POP EDX
004B957A . 5E POP ESI
004B957B . 5B POP EBX
004B957C . 5D POP EBP
004B957D . 59 POP ECX
004B957E . 58 POP EAX
004B957F . 5E POP ESI
004B9580 . 5A POP EDX
004B9581 . 5F POP EDI
004B9582 . 9D POPFD
004B9583 . C3 RETN
004B9584 . 0FB60E MOVZX ECX,BYTE PTR DS:[ESI]
004B9587 . 00D9 ADD CL,BL
004B9589 . 80E9 01 SUB CL,1
004B958C . 80F1 37 XOR CL,37
004B958F . 46 INC ESI
004B9590 . F6D1 NOT CL
004B9592 . C0C1 05 ROL CL,5
004B9595 . 00CB ADD BL,CL
004B9597 . 91 XCHG EAX,ECX
004B9598 . 66:98 CBW
004B959A . 98 CWDE
004B959B . 50 PUSH EAX
004B959C .^ E9 F9FEFFFF JMP 12tuo.004B949A
004B95A1 . 66:54 PUSH SP
004B95A3 .^ E9 F2FEFFFF JMP 12tuo.004B949A
004B95A8 . 59 POP ECX
004B95A9 . 66:58 POP AX
004B95AB . 8801 MOV BYTE PTR DS:[ECX],AL
004B95AD .^ E9 E8FEFFFF JMP 12tuo.004B949A
004B95B2 . 5A POP EDX
004B95B3 . 36:8F02 POP DWORD PTR SS:[EDX]
004B95B6 .^ E9 DFFEFFFF JMP 12tuo.004B949A
004B95BB . 8B16 MOV EDX,DWORD PTR DS:[ESI]
004B95BD . 8D76 04 LEA ESI,DWORD PTR DS:[ESI+4]
004B95C0 . 29DA SUB EDX,EBX
004B95C2 . F7DA NEG EDX
004B95C4 . 81EA B2529993 SUB EDX,939952B2
004B95CA . 81F2 808F8C43 XOR EDX,438C8F80
004B95D0 . C1C2 02 ROL EDX,2
004B95D3 . 29D3 SUB EBX,EDX
004B95D5 . 52 PUSH EDX
004B95D6 .^ E9 BFFEFFFF JMP 12tuo.004B949A
004B95DB . 5A POP EDX
004B95DC . 66:36:FF32 PUSH WORD PTR SS:[EDX]
004B95E0 .^ E9 B5FEFFFF JMP 12tuo.004B949A
004B95E5 . 66:5A POP DX
004B95E7 . 66:59 POP CX
004B95E9 . 66:D3E2 SHL DX,CL
004B95EC . 66:52 PUSH DX
004B95EE . 9C PUSHFD
004B95EF .^ E9 A6FEFFFF JMP 12tuo.004B949A
004B95F4 . F71424 NOT DWORD PTR SS:[ESP]
004B95F7 . 66:58 POP AX
004B95F9 . 66:210424 AND WORD PTR SS:[ESP],AX
004B95FD . 9C PUSHFD
004B95FE .^ E9 97FEFFFF JMP 12tuo.004B949A
004B9603 . 5A POP EDX
004B9604 . FF32 PUSH DWORD PTR DS:[EDX]
004B9606 .^ E9 8FFEFFFF JMP 12tuo.004B949A
004B960B . 58 POP EAX
004B960C . 64:FF30 PUSH DWORD PTR FS:[EAX]
004B960F .^ E9 86FEFFFF JMP 12tuo.004B949A
004B9614 . 5A POP EDX
004B9615 . 89D4 MOV ESP,EDX
004B9617 .^ E9 7EFEFFFF JMP 12tuo.004B949A
004B961C . 66:58 POP AX
004B961E . 66:5A POP DX
004B9620 . F6D0 NOT AL
004B9622 . F6D2 NOT DL
004B9624 . 20D0 AND AL,DL
004B9626 . 66:50 PUSH AX
004B9628 . 9C PUSHFD
004B9629 .^ E9 6CFEFFFF JMP 12tuo.004B949A
004B962E . 66:5A POP DX
004B9630 . 66:89D4 MOV SP,DX
004B9633 .^ E9 62FEFFFF JMP 12tuo.004B949A
004B9638 . 59 POP ECX
004B9639 . 66:8F01 POP WORD PTR DS:[ECX]
004B963C .^ E9 59FEFFFF JMP 12tuo.004B949A
004B9641 . 59 POP ECX
004B9642 . F7D1 NOT ECX
004B9644 . F71424 NOT DWORD PTR SS:[ESP]
004B9647 . 210C24 AND DWORD PTR SS:[ESP],ECX
004B964A . 9C PUSHFD
004B964B .^ E9 4AFEFFFF JMP 12tuo.004B949A
004B9650 . 8A06 MOV AL,BYTE PTR DS:[ESI]
004B9652 . 00D8 ADD AL,BL
004B9654 . 2C 01 SUB AL,1
004B9656 . 34 37 XOR AL,37
004B9658 . F6D0 NOT AL
004B965A . C0C0 05 ROL AL,5
004B965D . 8D76 01 LEA ESI,DWORD PTR DS:[ESI+1]
004B9660 . 00C3 ADD BL,AL
004B9662 . 66:50 PUSH AX
004B9664 .^ E9 31FEFFFF JMP 12tuo.004B949A
004B9669 . 66:5A POP DX
004B966B . 66:59 POP CX
004B966D . 66:D3EA SHR DX,CL
004B9670 . 66:52 PUSH DX
004B9672 . 9C PUSHFD
004B9673 .^ E9 22FEFFFF JMP 12tuo.004B949A
004B9678 . 59 POP ECX
004B9679 . 66:36:8F01 POP WORD PTR SS:[ECX]
004B967D .^ E9 18FEFFFF JMP 12tuo.004B949A
004B9682 . 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B9685 . 66:01D9 ADD CX,BX
004B9688 . 66:81F1 2034 XOR CX,3420
004B968D . 8D76 02 LEA ESI,DWORD PTR DS:[ESI+2]
004B9690 . 66:F7D1 NOT CX
004B9693 . 66:C1C9 06 ROR CX,6
004B9697 . 66:81F1 D6B2 XOR CX,0B2D6
004B969C . 66:01CB ADD BX,CX
004B969F . 66:51 PUSH CX
004B96A1 .^ E9 F4FDFFFF JMP 12tuo.004B949A
004B96A6 . 58 POP EAX
004B96A7 . 66:36:0FB608 MOVZX CX,BYTE PTR SS:[EAX]
004B96AC . 66:51 PUSH CX
004B96AE .^ E9 E7FDFFFF JMP 12tuo.004B949A
004B96B3 . 66:58 POP AX
004B96B5 . 000424 ADD BYTE PTR SS:[ESP],AL
004B96B8 . 9C PUSHFD
004B96B9 .^ E9 DCFDFFFF JMP 12tuo.004B949A
004B96BE . 5A POP EDX
004B96BF . 8F02 POP DWORD PTR DS:[EDX]
004B96C1 .^ E9 D4FDFFFF JMP 12tuo.004B949A
004B96C6 . 0FB70E MOVZX ECX,WORD PTR DS:[ESI]
004B96C9 . 66:01D9 ADD CX,BX
004B96CC . 66:81F1 2034 XOR CX,3420
004B96D1 . 66:F7D1 NOT CX
004B96D4 . 66:C1C9 06 ROR CX,6
004B96D8 . 66:81F1 D6B2 XOR CX,0B2D6
004B96DD . 83C6 02 ADD ESI,2
004B96E0 . 66:01CB ADD BX,CX
004B96E3 . 91 XCHG EAX,ECX
004B96E4 . 98 CWDE
004B96E5 . 50 PUSH EAX
004B96E6 .^ E9 AFFDFFFF JMP 12tuo.004B949A
004B96EB . 58 POP EAX
004B96EC . 5A POP EDX
004B96ED . 66:59 POP CX
004B96EF . 0FADD0 SHRD EAX,EDX,CL
004B96F2 . 50 PUSH EAX
004B96F3 . 9C PUSHFD
004B96F4 .^ E9 A1FDFFFF JMP 12tuo.004B949A
一直在这区里跳
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
