彩虹天地狗 读狗的花指令,怎么才能去掉?? 谢谢
00401038 $ 55 push ebp
00401039 . 8BEC mov ebp,esp
0040103B . 81EC 3C020000 sub esp,23C
00401041 . 53 push ebx
00401042 . 56 push esi
00401043 . 57 push edi
00401044 . 60 pushad
00401045 . EB 39 jmp short new4.00401080
00401047 E8 db E8
00401048 B9 db B9
00401049 11 db 11
0040104A 00 db 00
0040104B 00 db 00
0040104C 00 db 00
0040104D EB db EB
0040104E 01 db 01
0040104F BE db BE
00401050 68 db 68 ; CHAR 'h'
00401051 66104000 dd new4.00401066
00401055 72 db 72 ; CHAR 'r'
00401056 03 db 03
00401057 73 db 73 ; CHAR 's'
00401058 01 db 01
00401059 15 db 15
0040105A . C3 retn
0040105B 0B db 0B
0040105C 03 db 03
0040105D 00 db 00
0040105E 01 db 01
0040105F 02 db 02
00401060 03 db 03
00401061 04 db 04
00401062 05 db 05
00401063 06 db 06
00401064 07 db 07
00401065 08 db 08
00401066 EB db EB
00401067 01 db 01
00401068 13 db 13
00401069 49 db 49 ; CHAR 'I'
0040106A 7A db 7A ; CHAR 'z'
0040106B 03 db 03
0040106C 7B db 7B ; CHAR '{'
0040106D 01 db 01
0040106E 8B db 8B
0040106F 67 db 67 ; CHAR 'g'
00401070 E3 db E3
00401071 07 db 07
00401072 75 db 75 ; CHAR 'u'
00401073 03 db 03
00401074 74 db 74 ; CHAR 't'
00401075 01 db 01
00401076 81 db 81
00401077 EB db EB
00401078 . D4 E8 aam 0E8
0040107A $ E8 2E330000 call new4.004043AD
0040107F . E8 B9190000 call new4.00402A3D
00401084 . 00EB add bl,ch
00401086 . 01BE 689E1040 add dword ptr ds:[esi+40109E68],edi
0040108C . 0072 03 add byte ptr ds:[edx+3],dh
0040108F . 73 01 jnb short new4.00401092
00401091 15 db 15
00401092 . C3 retn
00401093 ? 0B03 or eax,dword ptr ds:[ebx]
00401095 ? 0001 add byte ptr ds:[ecx],al
00401097 ? 0203 add al,byte ptr ds:[ebx]
00401099 ? 04 05 add al,5
0040109B ? 06 push es
0040109C ? 07 pop es
0040109D ? 08EB or bl,ch
0040109F . 0113 add dword ptr ds:[ebx],edx
004010A1 . 49 dec ecx
004010A2 . 7A 03 jpe short new4.004010A7
004010A4 . 7B 01 jpo short new4.004010A7
004010A6 8B db 8B
004010A7 . 67:E3 08 jcxz short new4.004010B2
004010AA . 75 03 jnz short new4.004010AF
004010AC . 74 01 je short new4.004010AF
004010AE 81 db 81
004010AF >^ EB D4 jmp short new4.00401085
004010B1 ? E8 EB0180E8 call E8C012A1
004010B6 ? 9B wait
004010B7 . 64:0000 add byte ptr fs:[eax],al
004010BA . 8985 E8FEFFFF mov dword ptr ss:[ebp-118],eax
004010C0 . 70 03 jo short new4.004010C5
004010C2 . 71 01 jno short new4.004010C5
004010C4 81 db 81
004010C5 . 66:C745 D4 0A00 mov word ptr ss:[ebp-2C],0A
004010CB . 72 03 jb short new4.004010D0
004010CD . 73 01 jnb short new4.004010D0
004010CF 82 db 82
004010D0 . 79 03 jns short new4.004010D5
004010D2 . 78 01 js short new4.004010D5
004010D4 83 db 83
004010D5 . 68 16194000 push new4.00401916
004010DA . EB 01 jmp short new4.004010DD
004010DC ? E8 C3790378 call 78438AA4
004010E1 . 01B4E9 122E0000 add dword ptr ds:[ecx+ebp*8+2E12],esi
004010E8 > 7E 03 jle short new4.004010ED
004010EA . 7F 01 jg short new4.004010ED
004010EC 20 db 20 ; CHAR ' '
004010ED . E9 C31D0000 jmp new4.00402EB5
004010F2 > EB 01 jmp short new4.004010F5
004010F4 30 db 30 ; CHAR '0'
004010F5 >^ EB F1 jmp short new4.004010E8
004010F7 > 51 push ecx
004010F8 . 31C9 xor ecx,ecx
004010FA . E3 01 jecxz short new4.004010FD
004010FC 71 db 71 ; CHAR 'q'
004010FD . 59 pop ecx
004010FE . E9 C3150000 jmp new4.004026C6
00401103 > EB 01 jmp short new4.00401106
00401105 C7 db C7
00401106 > 83BD A0FEFFFF 04 cmp dword ptr ss:[ebp-160],4
0040110D . 75 32 jnz short new4.00401141
0040110F . 70 03 jo short new4.00401114
00401111 . 71 01 jno short new4.00401114
00401113 E8 db E8
00401114 > 8B85 1CFFFFFF mov eax,dword ptr ss:[ebp-E4]
0040111A . 8A40 02 mov al,byte ptr ds:[eax+2]
0040111D . 2C 49 sub al,49
0040111F . 8B8D 1CFFFFFF mov ecx,dword ptr ss:[ebp-E4]
00401125 . 8841 02 mov byte ptr ds:[ecx+2],al
00401128 . 70 03 jo short new4.0040112D
0040112A . 71 01 jno short new4.0040112D
0040112C E8 db E8
0040112D > 8B85 1CFFFFFF mov eax,dword ptr ss:[ebp-E4]
00401133 . 8A40 01 mov al,byte ptr ds:[eax+1]
00401136 . 2C 45 sub al,45
00401138 . 8B8D 1CFFFFFF mov ecx,dword ptr ss:[ebp-E4]
0040113E . 8841 01 mov byte ptr ds:[ecx+1],al
00401141 > 70 03 jo short new4.00401146
00401143 . 71 01 jno short new4.00401146
00401145 81 db 81
00401146 . 83BD A0FEFFFF 02 cmp dword ptr ss:[ebp-160],2
0040114D . 75 2C jnz short new4.0040117B
0040114F . 7A 03 jpe short new4.00401154
00401151 . 7B 01 jpo short new4.00401154
00401153 83 db 83
00401154 . FF75 AC push dword ptr ss:[ebp-54]
00401157 > 76 03 jbe short new4.0040115C
00401159 . 77 01 ja short new4.0040115C
0040115B 80 db 80
0040115C . B8 EE484000 mov eax,new4.004048EE
00401161 . 79 03 jns short new4.00401166
00401163 . 78 01 js short new4.00401166
00401165 C7 db C7
00401166 > 3345 E0 xor eax,dword ptr ss:[ebp-20]
00401169 . 75 03 jnz short new4.0040116E
0040116B . 74 01 je short new4.0040116E
0040116D E8 db E8
0040116E > 8985 40FFFFFF mov dword ptr ss:[ebp-C0],eax
00401174 . 72 03 jb short new4.00401179
00401176 . 73 01 jnb short new4.00401179
00401178 E8 db E8
00401179 > 6A 23 push 23
0040117B > EB 01 jmp short new4.0040117E
0040117D BD db BD
0040117E > 68 BE324000 push new4.004032BE
00401183 . EB 01 jmp short new4.00401186
00401185 66 db 66 ; CHAR 'f'
00401186 > C3 retn
00401187 > 7E 03 jle short new4.0040118C
00401189 . 7F 01 jg short new4.0040118C
0040118B 20 db 20 ; CHAR ' '
0040118C . E9 C52A0000 jmp new4.00403C56
00401191 > EB 01 jmp short new4.00401194
00401193 30 db 30 ; CHAR '0'
00401194 >^ EB F1 jmp short new4.00401187
00401196 > 51 push ecx
00401197 . 31C9 xor ecx,ecx
00401199 . E3 01 jecxz short new4.0040119C
0040119B 71 db 71 ; CHAR 'q'
0040119C . 59 pop ecx
0040119D . E9 39280000 jmp new4.004039DB
004011A2 > EB 01 jmp short new4.004011A5
004011A4 BD db BD
004011A5 > E9 502D0000 jmp new4.00403EFA
004011AA > EB 01 jmp short new4.004011AD
004011AC C7 db C7
004011AD > 83BD A0FEFFFF 04 cmp dword ptr ss:[ebp-160],4
004011B4 . 75 10 jnz short new4.004011C6
004011B6 . 70 03 jo short new4.004011BB
004011B8 . 71 01 jno short new4.004011BB
004011BA E8 db E8
004011BB > 8B45 B8 mov eax,dword ptr ss:[ebp-48]
004011BE . 35 41494A4D xor eax,4D4A4941
004011C3 . 8945 B8 mov dword ptr ss:[ebp-48],eax
004011C6 > 70 03 jo short new4.004011CB
004011C8 . 71 01 jno short new4.004011CB
004011CA C7 db C7
004011CB . 83BD A0FEFFFF 02 cmp dword ptr ss:[ebp-160],2
004011D2 . 75 2C jnz short new4.00401200
004011D4 . 72 03 jb short new4.004011D9
004011D6 . 73 01 jnb short new4.004011D9
004011D8 C7 db C7
004011D9 > FF75 AC push dword ptr ss:[ebp-54]
004011DC . 75 03 jnz short new4.004011E1
004011DE . 74 01 je short new4.004011E1
004011E0 80 db 80
004011E1 . B8 15494000 mov eax,new4.00404915
004011E6 . 79 03 jns short new4.004011EB
004011E8 . 78 01 js short new4.004011EB
004011EA . E8 3345E076 call comctl_1.77205722
004011EF . 0377 01 add esi,dword ptr ds:[edi+1]
004011F2 . 8189 8540FFFF FF7A037B or dword ptr ds:[ecx+FFFF4085],7B037AFF
004011FC . 01C6 add esi,eax
004011FE . 6A 13 push 13
00401200 > 72 03 jb short new4.00401205
00401202 . 73 01 jnb short new4.00401205
00401204 73 db 73 ; CHAR 's'
00401205 . 68 BE324000 push new4.004032BE
0040120A . EB 01 jmp short new4.0040120D
0040120C ? 81C3 5131C9E3 add ebx,E3C93151
00401212 ? 0171 59 add dword ptr ds:[ecx+59],esi
00401215 . E9 9B1C0000 jmp new4.00402EB5
0040121A > EB 01 jmp short new4.0040121D
0040121C 81 db 81
0040121D > E9 88020000 jmp new4.004014AA
00401222 > 70 03 jo short new4.00401227
00401224 . 71 01 jno short new4.00401227
00401226 77 db 77 ; CHAR 'w'
00401227 . E9 9A140000 jmp new4.004026C6
0040122C > EB 01 jmp short new4.0040122F
0040122E 21 db 21 ; CHAR '!'
0040122F > E9 050B0000 jmp new4.00401D39
00401234 > 75 03 jnz short new4.00401239
00401236 . 74 01 je short new4.00401239
00401238 31 db 31 ; CHAR '1'
00401239 . E9 090C0000 jmp new4.00401E47
0040123E > EB 01 jmp short new4.00401241
00401240 76 db 76 ; CHAR 'v'
00401241 > E9 D8270000 jmp new4.00403A1E
00401246 > EB 01 jmp short new4.00401249
00401248 D2 db D2
00401249 > 66:8365 B4 00 and word ptr ss:[ebp-4C],0
0040124E . EB 0C jmp short new4.0040125C
00401250 > 66:8B45 B4 mov ax,word ptr ss:[ebp-4C]
00401254 . 66:83C0 01 add ax,1
00401258 . 66:8945 B4 mov word ptr ss:[ebp-4C],ax
0040125C > 0FB745 B4 movzx eax,word ptr ss:[ebp-4C]
00401260 . 83F8 08 cmp eax,8
00401263 . 0F8D 41020000 jge new4.004014AA
00401269 . 70 03 jo short new4.0040126E
0040126B . 71 01 jno short new4.0040126E
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
