Skip to content

2025 AIS3-pre-exam Reverse

這次主要做Reverse的題目

dashboard

AIS3 Tiny Server - Reverse

ida反編譯後用strings 看一下

tiny1

有明顯的 flag correct 的字串以及Wrong Flag的樣式,追過去看會來到sub_2110

tiny2

主要是這段,當將p_s丟進sub_1E20時回傳值會決定是對的還是錯的,因此可以確定sub_1E20是一個flag checker

_BOOL4 __cdecl sub_1E20(int a1)
{
  unsigned int v1; // ecx
  char v2; // si
  char v3; // al
  int i; // eax
  char v5; // dl
  _BYTE v7[10]; // [esp+7h] [ebp-49h] BYREF
  _DWORD v8[11]; // [esp+12h] [ebp-3Eh]
  __int16 v9; // [esp+3Eh] [ebp-12h]

  v1 = 0;
  v2 = 51;
  v9 = 20;
  v3 = 114;
  v8[0] = 1480073267;
  v8[1] = 1197221906;
  v8[2] = 254628393;
  v8[3] = 920154;
  v8[4] = 1343445007;
  v8[5] = 874076697;
  v8[6] = 1127428440;
  v8[7] = 1510228243;
  v8[8] = 743978009;
  v8[9] = 54940467;
  v8[10] = 1246382110;
  qmemcpy(v7, "rikki_l0v3", sizeof(v7));
  while ( 1 )
  {
    *((_BYTE *)v8 + v1++) = v2 ^ v3;
    if ( v1 == 45 )
      break;
    v2 = *((_BYTE *)v8 + v1);
    v3 = v7[v1 % 0xA];
  }
  for ( i = 0; i != 45; ++i )
  {
    v5 = *(_BYTE *)(a1 + i);
    if ( !v5 || v5 != *((_BYTE *)v8 + i) )
      return 0;
  }
  return *(_BYTE *)(a1 + 45) == 0;
}

xor加密可以寫出下面的解密script解出他想要的flag

def decrypt_sub_1E20():
    v8_ints = [
        1480073267,
        1197221906,
        254628393,
        920154,
        1343445007,
        874076697,
        1127428440,
        1510228243,
        743978009,
        54940467,
        1246382110
    ]

    orig = bytearray(45)
    idx = 0
    for val in v8_ints:
        orig[idx:idx+4] = val.to_bytes(4, byteorder='little')
        idx += 4
    orig[44] = 20

    key = b"rikki_l0v3" 

    result = bytearray(45)
    v2 = 51   
    v3 = 114  
    for i in range(45):
        result[i] = v2 ^ v3
        if i == 44:
            break
        v2 = orig[i+1]
        v3 = key[(i+1) % len(key)]

    try:
        return result.decode('ascii')
    except UnicodeDecodeError:
        return result.hex()

if __name__ == "__main__":
    plaintext = decrypt_sub_1E20()
    print(plaintext)

tiny3

🎏AIS3{w0w_a_f1ag_check3r_1n_serv3r_1s_c00l!!!}


web flag checker

F12 看一下原始碼

web1

這段出現了flag checker 的邏輯

接下來在index.wsam中有flag checker的函式內容

WASM Flag Checker函式
(func $flagchecker (;9;) (export "flagchecker") (param $var0 i32) (result i32)
(local $var1 i32)
(local $var2 i32)
(local $var3 i32)
(local $var4 i32)
(local $var5 i32)
(local $var6 i32)
(local $var7 i64)
(local $var8 i32)
(local $var9 i32)
(local $var10 i32)
(local $var11 i32)
(local $var12 i64)
(local $var13 i64)
(local $var14 i64)
(local $var15 i64)
(local $var16 i64)
(local $var17 i32)
(local $var18 i32)
(local $var19 i32)
(local $var20 i32)
(local $var21 i32)
(local $var22 i32)
(local $var23 i32)
(local $var24 i32)
(local $var25 i32)
(local $var26 i32)
(local $var27 i32)
(local $var28 i32)
(local $var29 i32)
(local $var30 i32)
(local $var31 i32)
(local $var32 i32)
(local $var33 i32)
(local $var34 i32)
(local $var35 i32)
(local $var36 i32)
(local $var37 i32)
(local $var38 i32)
(local $var39 i32)
(local $var40 i32)
(local $var41 i64)
(local $var42 i32)
(local $var43 i32)
(local $var44 i32)
(local $var45 i32)
(local $var46 i32)
(local $var47 i32)
(local $var48 i32)
(local $var49 i64)
(local $var50 i32)
(local $var51 i64)
(local $var52 i32)
(local $var53 i32)
(local $var54 i32)
(local $var55 i32)
(local $var56 i32)
(local $var57 i32)
(local $var58 i32)
(local $var59 i64)
(local $var60 i32)
(local $var61 i32)
(local $var62 i32)
(local $var63 i32)
(local $var64 i32)
(local $var65 i32)
(local $var66 i32)
(local $var67 i32)
(local $var68 i32)
(local $var69 i32)
(local $var70 i32)
global.get $global0
local.set $var1
i32.const 96
local.set $var2
local.get $var1
local.get $var2
i32.sub
local.set $var3
local.get $var3
global.set $global0
local.get $var3
local.get $var0
i32.store offset=88
i32.const -39934163
local.set $var4
local.get $var3
local.get $var4
i32.store offset=84
i32.const 64
local.set $var5
local.get $var3
local.get $var5
i32.add
local.set $var6
i64.const 0
local.set $var7
local.get $var6
local.get $var7
i64.store
i32.const 56
local.set $var8
local.get $var3
local.get $var8
i32.add
local.set $var9
local.get $var9
local.get $var7
i64.store
i32.const 48
local.set $var10
local.get $var3
local.get $var10
i32.add
local.set $var11
local.get $var11
local.get $var7
i64.store
local.get $var3
local.get $var7
i64.store offset=40
local.get $var3
local.get $var7
i64.store offset=32
i64.const 7577352992956835434
local.set $var12
local.get $var3
local.get $var12
i64.store offset=32
i64.const 7148661717033493303
local.set $var13
local.get $var3
local.get $var13
i64.store offset=40
i64.const -7081446828746089091
local.set $var14
local.get $var3
local.get $var14
i64.store offset=48
i64.const -7479441386887439825
local.set $var15
local.get $var3
local.get $var15
i64.store offset=56
i64.const 8046961146294847270
local.set $var16
local.get $var3
local.get $var16
i64.store offset=64
local.get $var3
i32.load offset=88
local.set $var17
i32.const 0
local.set $var18
local.get $var17
local.get $var18
i32.ne
local.set $var19
i32.const 1
local.set $var20
local.get $var19
local.get $var20
i32.and
local.set $var21
block $label2
  block $label1
    block $label0
      local.get $var21
      i32.eqz
      br_if $label0
      local.get $var3
      i32.load offset=88
      local.set $var22
      local.get $var22
      call $func13
      local.set $var23
      i32.const 40
      local.set $var24
      local.get $var23
      local.get $var24
      i32.ne
      local.set $var25
      i32.const 1
      local.set $var26
      local.get $var25
      local.get $var26
      i32.and
      local.set $var27
      local.get $var27
      i32.eqz
      br_if $label1
    end $label0
    i32.const 0
    local.set $var28
    local.get $var3
    local.get $var28
    i32.store offset=92
    br $label2
  end $label1
  local.get $var3
  i32.load offset=88
  local.set $var29
  local.get $var3
  local.get $var29
  i32.store offset=28
  i32.const 0
  local.set $var30
  local.get $var3
  local.get $var30
  i32.store offset=24
  block $label3
    loop $label5
      local.get $var3
      i32.load offset=24
      local.set $var31
      i32.const 5
      local.set $var32
      local.get $var31
      local.get $var32
      i32.lt_s
      local.set $var33
      i32.const 1
      local.set $var34
      local.get $var33
      local.get $var34
      i32.and
      local.set $var35
      local.get $var35
      i32.eqz
      br_if $label3
      local.get $var3
      i32.load offset=28
      local.set $var36
      local.get $var3
      i32.load offset=24
      local.set $var37
      i32.const 3
      local.set $var38
      local.get $var37
      local.get $var38
      i32.shl
      local.set $var39
      local.get $var36
      local.get $var39
      i32.add
      local.set $var40
      local.get $var40
      i64.load
      local.set $var41
      local.get $var3
      local.get $var41
      i64.store offset=16
      local.get $var3
      i32.load offset=24
      local.set $var42
      i32.const 6
      local.set $var43
      local.get $var42
      local.get $var43
      i32.mul
      local.set $var44
      i32.const -39934163
      local.set $var45
      local.get $var45
      local.get $var44
      i32.shr_u
      local.set $var46
      i32.const 63
      local.set $var47
      local.get $var46
      local.get $var47
      i32.and
      local.set $var48
      local.get $var3
      local.get $var48
      i32.store offset=12
      local.get $var3
      i64.load offset=16
      local.set $var49
      local.get $var3
      i32.load offset=12
      local.set $var50
      local.get $var49
      local.get $var50
      call $func8
      local.set $var51
      local.get $var3
      i32.load offset=24
      local.set $var52
      i32.const 32
      local.set $var53
      local.get $var3
      local.get $var53
      i32.add
      local.set $var54
      local.get $var54
      local.set $var55
      i32.const 3
      local.set $var56
      local.get $var52
      local.get $var56
      i32.shl
      local.set $var57
      local.get $var55
      local.get $var57
      i32.add
      local.set $var58
      local.get $var58
      i64.load
      local.set $var59
      local.get $var51
      local.get $var59
      i64.ne
      local.set $var60
      i32.const 1
      local.set $var61
      local.get $var60
      local.get $var61
      i32.and
      local.set $var62
      block $label4
        local.get $var62
        i32.eqz
        br_if $label4
        i32.const 0
        local.set $var63
        local.get $var3
        local.get $var63
        i32.store offset=92
        br $label2
      end $label4
      local.get $var3
      i32.load offset=24
      local.set $var64
      i32.const 1
      local.set $var65
      local.get $var64
      local.get $var65
      i32.add
      local.set $var66
      local.get $var3
      local.get $var66
      i32.store offset=24
      br $label5
    end $label5
  end $label3
  i32.const 1
  local.set $var67
  local.get $var3
  local.get $var67
  i32.store offset=92
end $label2
local.get $var3
i32.load offset=92
local.set $var68
i32.const 96
local.set $var69
local.get $var3
local.get $var69
i32.add
local.set $var70
local.get $var70
global.set $global0
local.get $var68
return
)

給chatgpt整理分析以上的加密方式為

  • magic = 0xFD9EA72D 計算旋轉位數

  • expected[0] = 0x69282A668AEF666A; expected[1] = 0x633525F4D7372337; expected[2] = 0x9DB9A5A0DCC5DD7D; expected[3] = 0x9833AFAFB8381A2F; expected[4] = 0x6FAC8C8726464726; 是經過旋轉之後預期的flag

  • 接下來把使用者輸入的每一個chunk取出來進行rot

for (int i = 0; i < 5; i++) {
    uint64_t chunk = *(uint64_t*)(input + i*8);

    uint32_t r = (magic >> (i*6)) & 63;

    uint64_t rot = (chunk << r) | (chunk >> (64 - r));

    if (rot != expected[i]) {
        result = 0;
        goto done;
    }
}
result = 1;

總結可以寫出解密的script

expected = [
    0x69282A668AEF666A,
    0x633525F4D7372337,
    0x9DB9A5A0DCC5DD7D,
    0x9833AFAFB8381A2F,
    0x6FAC8C8726464726
]
magic = 0xFD9EA72D 

mask64 = (1 << 64) - 1

def rotr(x, r):
    return ((x >> r) | ((x << (64 - r)) & mask64)) & mask64

flag_bytes = []
for i, exp in enumerate(expected):
    r = (magic >> (6 * i)) & 0x3F
    chunk = rotr(exp, r)
    for j in range(8):
        flag_bytes.append((chunk >> (8 * j)) & 0xFF)

flag = bytes(flag_bytes).decode('ascii')

print(flag)
web2

🎏AIS3{W4SM_R3v3rsing_w17h_g0_4pp_39229dd}


A_simple_snake_game

是一個貪吃蛇遊戲,用ida 反編譯後找一下主要加密函式,找到了draw_text函式

void __userpurge SnakeGame::Screen::drawText(_DWORD *a1@<ecx>, #220 *this, int a3, int a4)
{
  unsigned int v4; // eax
  int v5; // eax
  int v6; // eax
  int Error; // eax
  int v8; // eax
  char v9; // [esp+23h] [ebp-F5h]
  char lpuexcpt; // [esp+24h] [ebp-F4h]
  struct _Unwind_Exception *lpuexcpta; // [esp+24h] [ebp-F4h]
  struct _Unwind_Exception *lpuexcptb; // [esp+24h] [ebp-F4h]
  _DWORD v14[10]; // [esp+6Dh] [ebp-ABh] BYREF
  __int16 v15; // [esp+95h] [ebp-83h]
  char v16; // [esp+97h] [ebp-81h]
  int v17; // [esp+98h] [ebp-80h]
  int v18; // [esp+9Ch] [ebp-7Ch]
  int v19; // [esp+A0h] [ebp-78h]
  int v20; // [esp+A4h] [ebp-74h]
  int v21; // [esp+A8h] [ebp-70h]
  _BYTE v22[24]; // [esp+ACh] [ebp-6Ch] BYREF
  int v23; // [esp+C4h] [ebp-54h]
  int v24; // [esp+C8h] [ebp-50h]
  int v25; // [esp+CCh] [ebp-4Ch]
  int v26; // [esp+D0h] [ebp-48h]
  int v27; // [esp+D4h] [ebp-44h]
  _BYTE v28[27]; // [esp+D8h] [ebp-40h] BYREF
  char v29; // [esp+F3h] [ebp-25h] BYREF
  int TextureFromSurface; // [esp+F4h] [ebp-24h]
  int v31; // [esp+F8h] [ebp-20h]
  unsigned int i; // [esp+FCh] [ebp-1Ch]

  if ( (int)this <= 11451419 || a3 <= 19810 )
  {
    SnakeGame::Screen::createText[abi:cxx11](a1, this, a3);
    v27 = 0xFFFFFF;
    v8 = std::string::c_str(v28);
    a1[3] = TTF_RenderText_Solid(a1[5], v8, 0xFFFFFF);
    a1[4] = SDL_CreateTextureFromSurface(a1[1], a1[3]);
    v23 = 400;
    v24 = 565;
    v25 = 320;
    v26 = 30;
    SDL_RenderCopy(a1[1], a1[4]);
    std::string::~string(v28);
  }
  else
  {
    v14[0] = -831958911;
    v14[1] = -1047254091;
    v14[2] = -1014295699;
    v14[3] = -620220219;
    v14[4] = 2001515017;
    v14[5] = -317711271;
    v14[6] = 1223368792;
    v14[7] = 1697251023;
    v14[8] = 496855031;
    v14[9] = -569364828;
    v15 = 26365;
    v16 = 40;
    std::allocator<char>::allocator(&v29);
    std::string::basic_string(v14, 43, &v29);
    std::allocator<char>::~allocator(&v29);
    for ( i = 0; ; ++i )
    {
      v4 = std::string::length(v22);
      if ( i >= v4 )
        break;
      lpuexcpt = *(_BYTE *)std::string::operator[](i);
      v9 = SnakeGame::hex_array1[i];
      *(_BYTE *)std::string::operator[](i) = v9 ^ lpuexcpt;
    }
    v21 = 0xFFFFFF;
    v5 = std::string::c_str(v22);
    v31 = TTF_RenderText_Solid(a1[5], v5, v21);
    if ( v31 )
    {
      TextureFromSurface = SDL_CreateTextureFromSurface(a1[1], v31);
      if ( TextureFromSurface )
      {
        v17 = 200;
        v18 = 565;
        v19 = 590;
        v20 = 30;
        SDL_RenderCopy(a1[1], TextureFromSurface);
        SDL_FreeSurface(v31);
        SDL_DestroyTexture(TextureFromSurface);
      }
      else
      {
        lpuexcptb = (struct _Unwind_Exception *)std::operator<<<std::char_traits<char>>(
                                                  &std::cerr,
                                                  "SDL_CreateTextureFromSurface: ");
        Error = SDL_GetError();
        std::operator<<<std::char_traits<char>>(lpuexcptb, Error);
        std::ostream::operator<<(std::endl<char,std::char_traits<char>>);
        SDL_FreeSurface(v31);
      }
    }
    else
    {
      lpuexcpta = (struct _Unwind_Exception *)std::operator<<<std::char_traits<char>>(
                                                &std::cerr,
                                                "TTF_RenderText_Solid: ");
      v6 = SDL_GetError();
      std::operator<<<std::char_traits<char>>(lpuexcpta, v6);
      std::ostream::operator<<(std::endl<char,std::char_traits<char>>);
    }
    std::string::~string(v22);
  }
}

看起來是進到else條件後會出現flag文字,並且是用XOR加解密

可以寫出下面的解密script

import struct

v14 = [
    -831958911, -1047254091, -1014295699, -620220219,
    2001515017, -317711271, 1223368792, 1697251023,
    496855031, -569364828
]

raw_bytes = b''.join(struct.pack('<I', x & 0xFFFFFFFF) for x in v14)
raw_bytes += struct.pack('<H', 26365)
raw_bytes += struct.pack('B', 40)

key = bytes([
    0x0C, 0x19, 0x3A, 0xFD, 0xCE, 0x68, 0xDC, 0xF2, 0x0C, 0x47,
    0xD4, 0x86, 0xAB, 0x57, 0x39, 0xB5, 0x3A, 0x8D, 0x13, 0x47,
    0x3F, 0x7F, 0x71, 0x98, 0x6D, 0x13, 0xB4, 0x01, 0x90, 0x9C,
    0x46, 0x3A, 0xC6, 0x33, 0xC2, 0x7F, 0xDD, 0x71, 0x78, 0x9F,
    0x93, 0x22, 0x55, 0x15
])

decrypted = bytes(raw_bytes[i] ^ key[i] for i in range(43))

print("flag:", decrypted)

🎏AIS3{CH3aT_Eng1n3?_0fcau53_I_bo_1T_by_hAnD}


verysafe_image_encrypter

ida 反編譯之後無法辨識,用DIE看一下

pic1

發現有加了壓縮殼,並且看起來是自製的殼,因此先利用x64dbg去看哪裡是OEP 並用scylla dump 出脫殼程式

在找OEP之前可以先用CFF explore 把ASLR關掉

pic2

F9執行到這邊後會執行到popad 的下一行jmp dword ptr ss:[esp-24]

jmp之後跳到這邊

pic3

在經過一次jmp之後會到這邊

pic4

這邊看起來非常像原本程式的OEP,因此401170可以先猜測為OEP

使用scylla dump 出來 參考:https://feifeitan.cn/index.php/archives/216/

將dump 出來的用ida反編譯後會得到原本的程式碼

經過分析後主要圖片加密功能會sub_4018EA中的sub_401520

int __cdecl sub_4018EA(char a1)
{
  int v1; // eax
  int v3; // [esp+0h] [ebp-88h] BYREF
  int v4; // [esp+18h] [ebp-70h]
  char v5[4]; // [esp+1Ch] [ebp-6Ch] BYREF
  int v6; // [esp+20h] [ebp-68h]
  int (__cdecl *v7)(int, int, int, int, int, int); // [esp+34h] [ebp-54h]
  int *v8; // [esp+38h] [ebp-50h]
  int *v9; // [esp+3Ch] [ebp-4Ch]
  void *v10; // [esp+40h] [ebp-48h]
  int *v11; // [esp+44h] [ebp-44h]
  char v12[16]; // [esp+58h] [ebp-30h] BYREF
  char *v13; // [esp+68h] [ebp-20h]
  char *v14; // [esp+6Ch] [ebp-1Ch]
  char *v15; // [esp+78h] [ebp-10h]
  int savedregs; // [esp+88h] [ebp+0h] BYREF

  v15 = &a1;
  v7 = sub_4CCCF0;
  v8 = &dword_4CE4D4;
  v9 = &savedregs;
  v10 = &loc_4019D0;
  v11 = &v3;
  sub_40C590(v5);
  sub_40A8B0();
  v14 = aInputImagePng;
  v13 = aEncryptedImage;
  v6 = -1;
  sub_401580(v12, aInputImagePng);
  v12[15] = 114;
  sub_401520(v12, 114);
  v6 = 1;
  sub_40177D(v13, v12);
  v1 = sub_4C87B0(&dword_4D27C0, (char *)dword_4D303C);
  sub_4C87B0(v1, v13);
  sub_47DFC0(sub_4C6890);
  v4 = 0;
  sub_4B0FB8(v12);
  sub_40C860(v5);
  return v4;
}
bool __cdecl sub_401520(int a1, char a2)
{
  bool result; // al
  _BYTE *v3; // eax
  _BYTE *v4; // eax
  unsigned int i; // [esp+2Ch] [ebp-Ch]

  for ( i = 0; ; ++i )
  {
    result = i < sub_4315C4(a1);
    if ( !result )
      break;
    v3 = (_BYTE *)sub_4B1020(i);
    *v3 ^= a2;
    v4 = (_BYTE *)sub_4B1020(i);
    *v4 += 4;
  }
  return result;
}

很簡單可以看出來他將圖片的每個byte經過0x72的xor之後+4 因此可以用以下的script解密出來

def decrypt(data: bytes, key: int) -> bytes:
    return bytes(((c - 4) & 0xFF) ^ key for c in data)

if __name__ == "__main__":
    key = ord('r')
    with open('./encrypted_image.png', 'rb') as f:
        cipher = f.read()
        plain = decrypt(cipher, key)
        print(''.join(f'{b:02x}' for b in plain))

將解密出來的16進位丟到cyberchef之後就會得到下面的照片

pic5

🎏AIS3​{rwx_53gm3nttt_s0_5AS}


BabyUnicorn

顯示用pwntools 的disassembly 看一下 shellcode

BabyUnicorn Shellcode Assembly
  0:       83 fe 20                cmp    esi, 0x20
  3:       0f 84 a3 03 00 00       je     0x3ac
  9:       83 fe 0d                cmp    esi, 0xd
  c:       0f 84 13 04 00 00       je     0x425
  12:       83 fe 15                cmp    esi, 0x15
  15:       0f 84 49 04 00 00       je     0x464
  1b:       83 fe 5a                cmp    esi, 0x5a
  1e:       0f 84 c1 04 00 00       je     0x4e5
  24:       83 fe 3d                cmp    esi, 0x3d
  27:       0f 84 e7 04 00 00       je     0x514
  2d:       83 fe 36                cmp    esi, 0x36
  30:       0f 84 70 04 00 00       je     0x4a6
  36:       83 fe 31                cmp    esi, 0x31
  39:       0f 84 46 05 00 00       je     0x585
  3f:       83 fe 0f                cmp    esi, 0xf
  42:       0f 84 7f 05 00 00       je     0x5c7
  48:       83 fe 50                cmp    esi, 0x50
  4b:       0f 84 a4 05 00 00       je     0x5f5
  51:       83 fe 59                cmp    esi, 0x59
  54:       0f 84 fc 04 00 00       je     0x556
  5a:       83 fe 4a                cmp    esi, 0x4a
  5d:       0f 84 c1 05 00 00       je     0x624
  63:       83 fe 06                cmp    esi, 0x6
  66:       0f 84 e4 05 00 00       je     0x650
  6c:       83 fe 0c                cmp    esi, 0xc
  6f:       0f 84 39 06 00 00       je     0x6ae
  75:       83 fe 16                cmp    esi, 0x16
  78:       0f 84 01 06 00 00       je     0x67f
  7e:       83 fe 2b                cmp    esi, 0x2b
  81:       0f 84 56 06 00 00       je     0x6dd
  87:       83 fe 34                cmp    esi, 0x34
  8a:       0f 84 7c 06 00 00       je     0x70c
  90:       83 fe 55                cmp    esi, 0x55
  93:       0f 84 ce 06 00 00       je     0x767
  99:       83 fe 17                cmp    esi, 0x17
  9c:       0f 84 96 06 00 00       je     0x738
  a2:       83 fe 0e                cmp    esi, 0xe
  a5:       0f 84 ac 0c 00 00       je     0xd57
  ab:       83 fe 11                cmp    esi, 0x11
  ae:       0f 84 79 0c 00 00       je     0xd2d
  b4:       83 fe 4f                cmp    esi, 0x4f
  b7:       0f 84 44 0c 00 00       je     0xd01
  bd:       83 fe 47                cmp    esi, 0x47
  c0:       0f 84 0c 0c 00 00       je     0xcd2
  c6:       83 fe 2f                cmp    esi, 0x2f
  c9:       0f 84 d4 0b 00 00       je     0xca3
  cf:       83 fe 30                cmp    esi, 0x30
  d2:       0f 84 9c 0b 00 00       je     0xc74
  d8:       83 fe 04                cmp    esi, 0x4
  db:       0f 84 67 0b 00 00       je     0xc48
  e1:       83 fe 2c                cmp    esi, 0x2c
  e4:       0f 84 2f 0b 00 00       je     0xc19
  ea:       83 fe 40                cmp    esi, 0x40
  ed:       0f 84 5b 0f 00 00       je     0x104e
  f3:       83 fe 1a                cmp    esi, 0x1a
  f6:       0f 84 23 0f 00 00       je     0x101f
  fc:       83 fe 38                cmp    esi, 0x38
  ff:       0f 84 eb 0e 00 00       je     0xff0
  105:       83 fe 32                cmp    esi, 0x32
  108:       0f 84 b3 0e 00 00       je     0xfc1
  10e:       83 fe 46                cmp    esi, 0x46
  111:       0f 84 7b 0e 00 00       je     0xf92
  117:       83 fe 43                cmp    esi, 0x43
  11a:       0f 84 46 0e 00 00       je     0xf66
  120:       83 fe 39                cmp    esi, 0x39
  123:       0f 84 0e 0e 00 00       je     0xf37
  129:       83 fe 53                cmp    esi, 0x53
  12c:       0f 84 d6 0d 00 00       je     0xf08
  132:       83 fe 23                cmp    esi, 0x23
  135:       0f 84 9e 0d 00 00       je     0xed9
  13b:       83 fe 37                cmp    esi, 0x37
  13e:       0f 84 66 0d 00 00       je     0xeaa
  144:       83 fe 2a                cmp    esi, 0x2a
  147:       0f 84 2e 0d 00 00       je     0xe7b
  14d:       83 fe 29                cmp    esi, 0x29
  150:       0f 84 f6 0c 00 00       je     0xe4c
  156:       83 fe 1e                cmp    esi, 0x1e
  159:       0f 84 b4 0c 00 00       je     0xe13
  15f:       83 fe 51                cmp    esi, 0x51
  162:       0f 84 7c 0c 00 00       je     0xde4
  168:       83 fe 27                cmp    esi, 0x27
  16b:       0f 84 44 0c 00 00       je     0xdb5
  171:       83 fe 63                cmp    esi, 0x63
  174:       0f 84 0c 0c 00 00       je     0xd86
  17a:       83 fe 52                cmp    esi, 0x52
  17d:       0f 84 9e 14 00 00       je     0x1621
  183:       83 fe 60                cmp    esi, 0x60
  186:       0f 84 66 14 00 00       je     0x15f2
  18c:       83 fe 44                cmp    esi, 0x44
  18f:       0f 84 2e 14 00 00       je     0x15c3
  195:       83 fe 2e                cmp    esi, 0x2e
  198:       0f 84 f9 13 00 00       je     0x1597
  19e:       83 fe 07                cmp    esi, 0x7
  1a1:       0f 84 c4 13 00 00       je     0x156b
  1a7:       83 fe 21                cmp    esi, 0x21
  1aa:       0f 84 8c 13 00 00       je     0x153c
  1b0:       83 fe 45                cmp    esi, 0x45
  1b3:       0f 84 54 13 00 00       je     0x150d
  1b9:       83 fe 33                cmp    esi, 0x33
  1bc:       0f 84 1c 13 00 00       je     0x14de
  1c2:       83 fe 5e                cmp    esi, 0x5e
  1c5:       0f 84 e7 12 00 00       je     0x14b2
  1cb:       83 fe 2d                cmp    esi, 0x2d
  1ce:       0f 84 af 12 00 00       je     0x1483
  1d4:       83 fe 08                cmp    esi, 0x8
  1d7:       0f 84 77 12 00 00       je     0x1454
  1dd:       83 fe 61                cmp    esi, 0x61
  1e0:       0f 84 41 12 00 00       je     0x1427
  1e6:       83 fe 02                cmp    esi, 0x2
  1e9:       0f 84 09 12 00 00       je     0x13f8
  1ef:       83 fe 4b                cmp    esi, 0x4b
  1f2:       0f 84 d1 11 00 00       je     0x13c9
  1f8:       83 fe 22                cmp    esi, 0x22
  1fb:       0f 84 99 11 00 00       je     0x139a
  201:       83 fe 3b                cmp    esi, 0x3b
  204:       0f 84 61 11 00 00       je     0x136b
  20a:       83 fe 3c                cmp    esi, 0x3c
  20d:       0f 84 29 11 00 00       je     0x133c
  213:       83 fe 25                cmp    esi, 0x25
  216:       0f 84 f1 10 00 00       je     0x130d
  21c:       83 fe 4c                cmp    esi, 0x4c
  21f:       0f 84 bb 10 00 00       je     0x12e0
  225:       83 fe 19                cmp    esi, 0x19
  228:       0f 84 83 10 00 00       je     0x12b1
  22e:       83 fe 12                cmp    esi, 0x12
  231:       0f 84 4b 10 00 00       je     0x1282
  237:       83 fe 1c                cmp    esi, 0x1c
  23a:       0f 84 13 10 00 00       je     0x1253
  240:       83 fe 5c                cmp    esi, 0x5c
  243:       0f 84 db 0f 00 00       je     0x1224
  249:       83 fe 03                cmp    esi, 0x3
  24c:       0f 84 a3 0f 00 00       je     0x11f5
  252:       83 fe 62                cmp    esi, 0x62
  255:       0f 84 6b 0f 00 00       je     0x11c6
  25b:       83 fe 4e                cmp    esi, 0x4e
  25e:       0f 84 33 0f 00 00       je     0x1197
  264:       83 fe 4d                cmp    esi, 0x4d
  267:       0f 84 fb 0e 00 00       je     0x1168
  26d:       83 fe 42                cmp    esi, 0x42
  270:       0f 84 c3 0e 00 00       je     0x1139
  276:       83 fe 3f                cmp    esi, 0x3f
  279:       0f 84 8b 0e 00 00       je     0x110a
  27f:       83 fe 58                cmp    esi, 0x58
  282:       0f 84 53 0e 00 00       je     0x10db
  288:       83 fe 54                cmp    esi, 0x54
  28b:       0f 84 1b 0e 00 00       je     0x10ac
  291:       83 fe 05                cmp    esi, 0x5
  294:       0f 84 e3 0d 00 00       je     0x107d
  29a:       83 fe 10                cmp    esi, 0x10
  29d:       0f 84 d8 07 00 00       je     0xa7b
  2a3:       83 fe 64                cmp    esi, 0x64
  2a6:       0f 84 a0 07 00 00       je     0xa4c
  2ac:       83 fe 1d                cmp    esi, 0x1d
  2af:       0f 84 68 07 00 00       je     0xa1d
  2b5:       83 fe 13                cmp    esi, 0x13
  2b8:       0f 84 30 07 00 00       je     0x9ee
  2be:       83 fe 0b                cmp    esi, 0xb
  2c1:       0f 84 f8 06 00 00       je     0x9bf
  2c7:       83 fe 01                cmp    esi, 0x1
  2ca:       0f 84 c0 06 00 00       je     0x990
  2d0:       83 fe 3a                cmp    esi, 0x3a
  2d3:       0f 84 88 06 00 00       je     0x961
  2d9:       83 fe 48                cmp    esi, 0x48
  2dc:       0f 84 50 06 00 00       je     0x932
  2e2:       83 fe 49                cmp    esi, 0x49
  2e5:       0f 84 18 06 00 00       je     0x903
  2eb:       83 fe 1b                cmp    esi, 0x1b
  2ee:       0f 84 e0 05 00 00       je     0x8d4
  2f4:       83 fe 56                cmp    esi, 0x56
  2f7:       0f 84 a8 05 00 00       je     0x8a5
  2fd:       83 fe 26                cmp    esi, 0x26
  300:       0f 84 70 05 00 00       je     0x876
  306:       83 fe 14                cmp    esi, 0x14
  309:       0f 84 38 05 00 00       je     0x847
  30f:       83 fe 0a                cmp    esi, 0xa
  312:       0f 84 03 05 00 00       je     0x81b
  318:       83 fe 09                cmp    esi, 0x9
  31b:       0f 84 ce 04 00 00       je     0x7ef
  321:       83 fe 1f                cmp    esi, 0x1f
  324:       0f 84 96 04 00 00       je     0x7c0
  32a:       83 fe 3e                cmp    esi, 0x3e
  32d:       0f 84 ba 08 00 00       je     0xbed
  333:       83 fe 5b                cmp    esi, 0x5b
  336:       0f 84 82 08 00 00       je     0xbbe
  33c:       83 fe 5d                cmp    esi, 0x5d
  33f:       0f 84 4a 08 00 00       je     0xb8f
  345:       83 fe 28                cmp    esi, 0x28
  348:       0f 84 12 08 00 00       je     0xb60
  34e:       83 fe 35                cmp    esi, 0x35
  351:       0f 84 da 07 00 00       je     0xb31
  357:       83 fe 41                cmp    esi, 0x41
  35a:       0f 84 a5 07 00 00       je     0xb05
  360:       83 fe 57                cmp    esi, 0x57
  363:       0f 84 6d 07 00 00       je     0xad6
  369:       83 fe 5f                cmp    esi, 0x5f
  36c:       0f 84 38 07 00 00       je     0xaaa
  372:       83 fe 18                cmp    esi, 0x18
  375:       0f 84 1b 04 00 00       je     0x796
  37b:       83 fe 24                cmp    esi, 0x24
  37e:       75 6d                   jne    0x3ed
  380:       8d 74 24 fa             lea    esi, [esp-0x6]
  384:       b9 26 00 00 00          mov    ecx, 0x26
  389:       bf 2f 00 00 00          mov    edi, 0x2f
  38e:       89 c8                   mov    eax, ecx
  390:       99                      cdq
  391:       f7 ff                   idiv   edi
  393:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  398:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  39b:       83 c1 01                add    ecx, 0x1
  39e:       83 f9 4d                cmp    ecx, 0x4d
  3a1:       75 eb                   jne    0x38e
  3a3:       cd 51                   int    0x51
  3a5:       be 1b 00 00 00          mov    esi, 0x1b
  3aa:       eb 41                   jmp    0x3ed
  3ac:       8d 74 24 15             lea    esi, [esp+0x15]
  3b0:       b9 0b 00 00 00          mov    ecx, 0xb
  3b5:       bf 5d 41 4c ae          mov    edi, 0xae4c415d
  3ba:       8d 74 26 00             lea    esi, [esi+eiz*1+0x0]
  3be:       89 c8                   mov    eax, ecx
  3c0:       f7 ef                   imul   edi
  3c2:       8d 04 0a                lea    eax, [edx+ecx*1]
  3c5:       89 ca                   mov    edx, ecx
  3c7:       c1 fa 1f                sar    edx, 0x1f
  3ca:       c1 f8 05                sar    eax, 0x5
  3cd:       29 d0                   sub    eax, edx
  3cf:       89 ca                   mov    edx, ecx
  3d1:       6b c0 2f                imul   eax, eax, 0x2f
  3d4:       29 c2                   sub    edx, eax
  3d6:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  3db:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  3de:       83 c1 01                add    ecx, 0x1
  3e1:       83 f9 17                cmp    ecx, 0x17
  3e4:       75 d8                   jne    0x3be
  3e6:       cd 2b                   int    0x2b
  3e8:       be 64 00 00 00          mov    esi, 0x64
  3ed:       89 74 24 04             mov    DWORD PTR [esp+0x4], esi
  3f1:       8d 74 24 20             lea    esi, [esp+0x20]
  3f5:       c7 04 24 68 70 40 00    mov    DWORD PTR [esp], 0x407068
  3fc:       e8 e5 f9 ff ff          call   0xfffffde6
  401:       0f be 06                movsx  eax, BYTE PTR [esi]
  404:       c7 04 24 6c 70 40 00    mov    DWORD PTR [esp], 0x40706c
  40b:       83 c6 01                add    esi, 0x1
  40e:       89 44 24 04             mov    DWORD PTR [esp+0x4], eax
  412:       e8 cf f9 ff ff          call   0xfffffde6
  417:       39 f3                   cmp    ebx, esi
  419:       75 e6                   jne    0x401
  41b:       8d 65 f4                lea    esp, [ebp-0xc]
  41e:       31 c0                   xor    eax, eax
  420:       5b                      pop    ebx
  421:       5e                      pop    esi
  422:       5f                      pop    edi
  423:       5d                      pop    ebp
  424:       c3                      ret
  425:       8d 74 24 0d             lea    esi, [esp+0xd]
  429:       b9 13 00 00 00          mov    ecx, 0x13
  42e:       bf 5d 41 4c ae          mov    edi, 0xae4c415d
  433:       89 c8                   mov    eax, ecx
  435:       f7 ef                   imul   edi
  437:       8d 04 0a                lea    eax, [edx+ecx*1]
  43a:       89 ca                   mov    edx, ecx
  43c:       c1 fa 1f                sar    edx, 0x1f
  43f:       c1 f8 05                sar    eax, 0x5
  442:       29 d0                   sub    eax, edx
  444:       89 ca                   mov    edx, ecx
  446:       6b c0 2f                imul   eax, eax, 0x2f
  449:       29 c2                   sub    edx, eax
  44b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  450:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  453:       83 c1 01                add    ecx, 0x1
  456:       83 f9 27                cmp    ecx, 0x27
  459:       75 d8                   jne    0x433
  45b:       cd 23                   int    0x23
  45d:       be 50 00 00 00          mov    esi, 0x50
  462:       eb 89                   jmp    0x3ed
  464:       8d 74 24 14             lea    esi, [esp+0x14]
  468:       b9 0c 00 00 00          mov    ecx, 0xc
  46d:       bf 5d 41 4c ae          mov    edi, 0xae4c415d
  472:       89 c8                   mov    eax, ecx
  474:       f7 ef                   imul   edi
  476:       8d 04 0a                lea    eax, [edx+ecx*1]
  479:       89 ca                   mov    edx, ecx
  47b:       c1 fa 1f                sar    edx, 0x1f
  47e:       c1 f8 05                sar    eax, 0x5
  481:       29 d0                   sub    eax, edx
  483:       89 ca                   mov    edx, ecx
  485:       6b c0 2f                imul   eax, eax, 0x2f
  488:       29 c2                   sub    edx, eax
  48a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  48f:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  492:       83 c1 01                add    ecx, 0x1
  495:       83 f9 19                cmp    ecx, 0x19
  498:       75 d8                   jne    0x472
  49a:       cd 08                   int    0x8
  49c:       be 47 00 00 00          mov    esi, 0x47
  4a1:       e9 47 ff ff ff          jmp    0x3ed
  4a6:       b9 1f 00 00 00          mov    ecx, 0x1f
  4ab:       be 5d 41 4c ae          mov    esi, 0xae4c415d
  4b0:       89 c8                   mov    eax, ecx
  4b2:       89 cf                   mov    edi, ecx
  4b4:       f7 ee                   imul   esi
  4b6:       8d 04 0a                lea    eax, [edx+ecx*1]
  4b9:       89 ca                   mov    edx, ecx
  4bb:       c1 fa 1f                sar    edx, 0x1f
  4be:       c1 f8 05                sar    eax, 0x5
  4c1:       29 d0                   sub    eax, edx
  4c3:       6b c0 2f                imul   eax, eax, 0x2f
  4c6:       29 c7                   sub    edi, eax
  4c8:       0f b6 44 3c 20          movzx  eax, BYTE PTR [esp+edi*1+0x20]
  4cd:       30 44 0c 01             xor    BYTE PTR [esp+ecx*1+0x1], al
  4d1:       83 c1 01                add    ecx, 0x1
  4d4:       83 f9 3f                cmp    ecx, 0x3f
  4d7:       75 d7                   jne    0x4b0
  4d9:       cd 12                   int    0x12
  4db:       be 21 00 00 00          mov    esi, 0x21
  4e0:       e9 08 ff ff ff          jmp    0x3ed
  4e5:       8d 74 24 1c             lea    esi, [esp+0x1c]
  4e9:       b9 04 00 00 00          mov    ecx, 0x4
  4ee:       bf 2f 00 00 00          mov    edi, 0x2f
  4f3:       89 c8                   mov    eax, ecx
  4f5:       99                      cdq
  4f6:       f7 ff                   idiv   edi
  4f8:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  4fd:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  500:       83 c1 01                add    ecx, 0x1
  503:       83 f9 09                cmp    ecx, 0x9
  506:       75 eb                   jne    0x4f3
  508:       cd 3a                   int    0x3a
  50a:       be 1d 00 00 00          mov    esi, 0x1d
  50f:       e9 d9 fe ff ff          jmp    0x3ed
  514:       8d 74 24 06             lea    esi, [esp+0x6]
  518:       b9 1a 00 00 00          mov    ecx, 0x1a
  51d:       bf 5d 41 4c ae          mov    edi, 0xae4c415d
  522:       89 c8                   mov    eax, ecx
  524:       f7 ef                   imul   edi
  526:       8d 04 0a                lea    eax, [edx+ecx*1]
  529:       89 ca                   mov    edx, ecx
  52b:       c1 fa 1f                sar    edx, 0x1f
  52e:       c1 f8 05                sar    eax, 0x5
  531:       29 d0                   sub    eax, edx
  533:       89 ca                   mov    edx, ecx
  535:       6b c0 2f                imul   eax, eax, 0x2f
  538:       29 c2                   sub    edx, eax
  53a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  53f:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  542:       83 c1 01                add    ecx, 0x1
  545:       83 f9 35                cmp    ecx, 0x35
  548:       75 d8                   jne    0x522
  54a:       cd 4f                   int    0x4f
  54c:       be 60 00 00 00          mov    esi, 0x60
  551:       e9 97 fe ff ff          jmp    0x3ed
  556:       8d 74 24 19             lea    esi, [esp+0x19]
  55a:       b9 07 00 00 00          mov    ecx, 0x7
  55f:       bf 2f 00 00 00          mov    edi, 0x2f
  564:       89 c8                   mov    eax, ecx
  566:       99                      cdq
  567:       f7 ff                   idiv   edi
  569:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  56e:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  571:       83 c1 01                add    ecx, 0x1
  574:       83 f9 0f                cmp    ecx, 0xf
  577:       75 eb                   jne    0x564
  579:       cd 5d                   int    0x5d
  57b:       be 3d 00 00 00          mov    esi, 0x3d
  580:       e9 68 fe ff ff          jmp    0x3ed
  585:       8d 74 24 0e             lea    esi, [esp+0xe]
  589:       b9 12 00 00 00          mov    ecx, 0x12
  58e:       bf 5d 41 4c ae          mov    edi, 0xae4c415d
  593:       89 c8                   mov    eax, ecx
  595:       f7 ef                   imul   edi
  597:       8d 04 0a                lea    eax, [edx+ecx*1]
  59a:       89 ca                   mov    edx, ecx
  59c:       c1 fa 1f                sar    edx, 0x1f
  59f:       c1 f8 05                sar    eax, 0x5
  5a2:       29 d0                   sub    eax, edx
  5a4:       89 ca                   mov    edx, ecx
  5a6:       6b c0 2f                imul   eax, eax, 0x2f
  5a9:       29 c2                   sub    edx, eax
  5ab:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  5b0:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  5b3:       83 c1 01                add    ecx, 0x1
  5b6:       83 f9 25                cmp    ecx, 0x25
  5b9:       75 d8                   jne    0x593
  5bb:       cd 13                   int    0x13
  5bd:       be 09 00 00 00          mov    esi, 0x9
  5c2:       e9 26 fe ff ff          jmp    0x3ed
  5c7:       8d 74 24 15             lea    esi, [esp+0x15]
  5cb:       b9 0b 00 00 00          mov    ecx, 0xb
  5d0:       bf 2f 00 00 00          mov    edi, 0x2f
  5d5:       89 c8                   mov    eax, ecx
  5d7:       99                      cdq
  5d8:       f7 ff                   idiv   edi
  5da:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  5df:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  5e2:       83 c1 01                add    ecx, 0x1
  5e5:       83 f9 17                cmp    ecx, 0x17
  5e8:       75 eb                   jne    0x5d5
  5ea:       cc                      int3
  5eb:       be 3a 00 00 00          mov    esi, 0x3a
  5f0:       e9 f8 fd ff ff          jmp    0x3ed
  5f5:       8d 74 24 0e             lea    esi, [esp+0xe]
  5f9:       b9 12 00 00 00          mov    ecx, 0x12
  5fe:       bf 2f 00 00 00          mov    edi, 0x2f
  603:       89 c8                   mov    eax, ecx
  605:       99                      cdq
  606:       f7 ff                   idiv   edi
  608:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  60d:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  610:       83 c1 01                add    ecx, 0x1
  613:       83 f9 25                cmp    ecx, 0x25
  616:       75 eb                   jne    0x603
  618:       cd 44                   int    0x44
  61a:       be 26 00 00 00          mov    esi, 0x26
  61f:       e9 c9 fd ff ff          jmp    0x3ed
  624:       b9 1b 00 00 00          mov    ecx, 0x1b
  629:       be 2f 00 00 00          mov    esi, 0x2f
  62e:       89 c8                   mov    eax, ecx
  630:       99                      cdq
  631:       f7 fe                   idiv   esi
  633:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  638:       30 44 0c 05             xor    BYTE PTR [esp+ecx*1+0x5], al
  63c:       83 c1 01                add    ecx, 0x1
  63f:       83 f9 37                cmp    ecx, 0x37
  642:       75 ea                   jne    0x62e
  644:       cd 0b                   int    0xb
  646:       be 33 00 00 00          mov    esi, 0x33
  64b:       e9 9d fd ff ff          jmp    0x3ed
  650:       8d 74 24 03             lea    esi, [esp+0x3]
  654:       b9 1d 00 00 00          mov    ecx, 0x1d
  659:       bf 2f 00 00 00          mov    edi, 0x2f
  65e:       89 c8                   mov    eax, ecx
  660:       99                      cdq
  661:       f7 ff                   idiv   edi
  663:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  668:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  66b:       83 c1 01                add    ecx, 0x1
  66e:       83 f9 3b                cmp    ecx, 0x3b
  671:       75 eb                   jne    0x65e
  673:       cd 2d                   int    0x2d
  675:       be 11 00 00 00          mov    esi, 0x11
  67a:       e9 6e fd ff ff          jmp    0x3ed
  67f:       8d 74 24 f5             lea    esi, [esp-0xb]
  683:       b9 2b 00 00 00          mov    ecx, 0x2b
  688:       bf 2f 00 00 00          mov    edi, 0x2f
  68d:       89 c8                   mov    eax, ecx
  68f:       99                      cdq
  690:       f7 ff                   idiv   edi
  692:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  697:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  69a:       83 c1 01                add    ecx, 0x1
  69d:       83 f9 57                cmp    ecx, 0x57
  6a0:       75 eb                   jne    0x68d
  6a2:       cd 4c                   int    0x4c
  6a4:       be 13 00 00 00          mov    esi, 0x13
  6a9:       e9 3f fd ff ff          jmp    0x3ed
  6ae:       8d 74 24 fc             lea    esi, [esp-0x4]
  6b2:       b9 24 00 00 00          mov    ecx, 0x24
  6b7:       bf 2f 00 00 00          mov    edi, 0x2f
  6bc:       89 c8                   mov    eax, ecx
  6be:       99                      cdq
  6bf:       f7 ff                   idiv   edi
  6c1:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  6c6:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  6c9:       83 c1 01                add    ecx, 0x1
  6cc:       83 f9 49                cmp    ecx, 0x49
  6cf:       75 eb                   jne    0x6bc
  6d1:       cd 5b                   int    0x5b
  6d3:       be 0d 00 00 00          mov    esi, 0xd
  6d8:       e9 10 fd ff ff          jmp    0x3ed
  6dd:       8d 4c 24 13             lea    ecx, [esp+0x13]
  6e1:       be 0d 00 00 00          mov    esi, 0xd
  6e6:       bf 2f 00 00 00          mov    edi, 0x2f
  6eb:       89 f0                   mov    eax, esi
  6ed:       99                      cdq
  6ee:       f7 ff                   idiv   edi
  6f0:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  6f5:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  6f8:       83 c6 01                add    esi, 0x1
  6fb:       83 fe 1b                cmp    esi, 0x1b
  6fe:       75 eb                   jne    0x6eb
  700:       cd 50                   int    0x50
  702:       be 3b 00 00 00          mov    esi, 0x3b
  707:       e9 e1 fc ff ff          jmp    0x3ed
  70c:       b9 2d 00 00 00          mov    ecx, 0x2d
  711:       be 2f 00 00 00          mov    esi, 0x2f
  716:       89 c8                   mov    eax, ecx
  718:       99                      cdq
  719:       f7 fe                   idiv   esi
  71b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  720:       30 44 0c f3             xor    BYTE PTR [esp+ecx*1-0xd], al
  724:       83 c1 01                add    ecx, 0x1
  727:       83 f9 5b                cmp    ecx, 0x5b
  72a:       75 ea                   jne    0x716
  72c:       cd 49                   int    0x49
  72e:       be 29 00 00 00          mov    esi, 0x29
  733:       e9 b5 fc ff ff          jmp    0x3ed
  738:       8d 4c 24 0f             lea    ecx, [esp+0xf]
  73c:       be 11 00 00 00          mov    esi, 0x11
  741:       bf 2f 00 00 00          mov    edi, 0x2f
  746:       89 f0                   mov    eax, esi
  748:       99                      cdq
  749:       f7 ff                   idiv   edi
  74b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  750:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  753:       83 c6 01                add    esi, 0x1
  756:       83 fe 23                cmp    esi, 0x23
  759:       75 eb                   jne    0x746
  75b:       cd 01                   int    0x1
  75d:       be 30 00 00 00          mov    esi, 0x30
  762:       e9 86 fc ff ff          jmp    0x3ed
  767:       8d 74 24 03             lea    esi, [esp+0x3]
  76b:       b9 1d 00 00 00          mov    ecx, 0x1d
  770:       bf 2f 00 00 00          mov    edi, 0x2f
  775:       89 c8                   mov    eax, ecx
  777:       99                      cdq
  778:       f7 ff                   idiv   edi
  77a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  77f:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  782:       83 c1 01                add    ecx, 0x1
  785:       83 f9 3b                cmp    ecx, 0x3b
  788:       75 eb                   jne    0x775
  78a:       cd 48                   int    0x48
  78c:       be 14 00 00 00          mov    esi, 0x14
  791:       e9 57 fc ff ff          jmp    0x3ed
  796:       8d 4c 24 08             lea    ecx, [esp+0x8]
  79a:       bf 2f 00 00 00          mov    edi, 0x2f
  79f:       89 f0                   mov    eax, esi
  7a1:       99                      cdq
  7a2:       f7 ff                   idiv   edi
  7a4:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  7a9:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  7ac:       83 c6 01                add    esi, 0x1
  7af:       83 fe 31                cmp    esi, 0x31
  7b2:       75 eb                   jne    0x79f
  7b4:       cd 58                   int    0x58
  7b6:       be 4e 00 00 00          mov    esi, 0x4e
  7bb:       e9 2d fc ff ff          jmp    0x3ed
  7c0:       8d 74 24 03             lea    esi, [esp+0x3]
  7c4:       b9 1d 00 00 00          mov    ecx, 0x1d
  7c9:       bf 2f 00 00 00          mov    edi, 0x2f
  7ce:       89 c8                   mov    eax, ecx
  7d0:       99                      cdq
  7d1:       f7 ff                   idiv   edi
  7d3:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  7d8:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  7db:       83 c1 01                add    ecx, 0x1
  7de:       83 f9 3b                cmp    ecx, 0x3b
  7e1:       75 eb                   jne    0x7ce
  7e3:       cd 31                   int    0x31
  7e5:       be 4b 00 00 00          mov    esi, 0x4b
  7ea:       e9 fe fb ff ff          jmp    0x3ed
  7ef:       b9 2e 00 00 00          mov    ecx, 0x2e
  7f4:       be 2f 00 00 00          mov    esi, 0x2f
  7f9:       89 c8                   mov    eax, ecx
  7fb:       99                      cdq
  7fc:       f7 fe                   idiv   esi
  7fe:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  803:       30 44 0c f2             xor    BYTE PTR [esp+ecx*1-0xe], al
  807:       83 c1 01                add    ecx, 0x1
  80a:       83 f9 5d                cmp    ecx, 0x5d
  80d:       75 ea                   jne    0x7f9
  80f:       cd 3c                   int    0x3c
  811:       be 52 00 00 00          mov    esi, 0x52
  816:       e9 d2 fb ff ff          jmp    0x3ed
  81b:       b9 03 00 00 00          mov    ecx, 0x3
  820:       be 2f 00 00 00          mov    esi, 0x2f
  825:       89 c8                   mov    eax, ecx
  827:       99                      cdq
  828:       f7 fe                   idiv   esi
  82a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  82f:       30 44 0c 1d             xor    BYTE PTR [esp+ecx*1+0x1d], al
  833:       83 c1 01                add    ecx, 0x1
  836:       83 f9 07                cmp    ecx, 0x7
  839:       75 ea                   jne    0x825
  83b:       cd 1c                   int    0x1c
  83d:       be 4d 00 00 00          mov    esi, 0x4d
  842:       e9 a6 fb ff ff          jmp    0x3ed
  847:       8d 4c 24 f7             lea    ecx, [esp-0x9]
  84b:       be 29 00 00 00          mov    esi, 0x29
  850:       bf 2f 00 00 00          mov    edi, 0x2f
  855:       89 f0                   mov    eax, esi
  857:       99                      cdq
  858:       f7 ff                   idiv   edi
  85a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  85f:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  862:       83 c6 01                add    esi, 0x1
  865:       83 fe 53                cmp    esi, 0x53
  868:       75 eb                   jne    0x855
  86a:       cd 06                   int    0x6
  86c:       be 2a 00 00 00          mov    esi, 0x2a
  871:       e9 77 fb ff ff          jmp    0x3ed
  876:       8d 74 24 17             lea    esi, [esp+0x17]
  87a:       b9 09 00 00 00          mov    ecx, 0x9
  87f:       bf 2f 00 00 00          mov    edi, 0x2f
  884:       89 c8                   mov    eax, ecx
  886:       99                      cdq
  887:       f7 ff                   idiv   edi
  889:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  88e:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  891:       83 c1 01                add    ecx, 0x1
  894:       83 f9 13                cmp    ecx, 0x13
  897:       75 eb                   jne    0x884
  899:       cd 35                   int    0x35
  89b:       be 4a 00 00 00          mov    esi, 0x4a
  8a0:       e9 48 fb ff ff          jmp    0x3ed
  8a5:       8d 74 24 fc             lea    esi, [esp-0x4]
  8a9:       b9 24 00 00 00          mov    ecx, 0x24
  8ae:       bf 2f 00 00 00          mov    edi, 0x2f
  8b3:       89 c8                   mov    eax, ecx
  8b5:       99                      cdq
  8b6:       f7 ff                   idiv   edi
  8b8:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  8bd:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  8c0:       83 c1 01                add    ecx, 0x1
  8c3:       83 f9 49                cmp    ecx, 0x49
  8c6:       75 eb                   jne    0x8b3
  8c8:       cd 54                   int    0x54
  8ca:       be 38 00 00 00          mov    esi, 0x38
  8cf:       e9 19 fb ff ff          jmp    0x3ed
  8d4:       8d 4c 24 18             lea    ecx, [esp+0x18]
  8d8:       be 08 00 00 00          mov    esi, 0x8
  8dd:       bf 2f 00 00 00          mov    edi, 0x2f
  8e2:       89 f0                   mov    eax, esi
  8e4:       99                      cdq
  8e5:       f7 ff                   idiv   edi
  8e7:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  8ec:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  8ef:       83 c6 01                add    esi, 0x1
  8f2:       83 fe 11                cmp    esi, 0x11
  8f5:       75 eb                   jne    0x8e2
  8f7:       cd 2f                   int    0x2f
  8f9:       be 0f 00 00 00          mov    esi, 0xf
  8fe:       e9 ea fa ff ff          jmp    0x3ed
  903:       8d 74 24 fc             lea    esi, [esp-0x4]
  907:       b9 24 00 00 00          mov    ecx, 0x24
  90c:       bf 2f 00 00 00          mov    edi, 0x2f
  911:       89 c8                   mov    eax, ecx
  913:       99                      cdq
  914:       f7 ff                   idiv   edi
  916:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  91b:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  91e:       83 c1 01                add    ecx, 0x1
  921:       83 f9 49                cmp    ecx, 0x49
  924:       75 eb                   jne    0x911
  926:       cd 43                   int    0x43
  928:       be 43 00 00 00          mov    esi, 0x43
  92d:       e9 bb fa ff ff          jmp    0x3ed
  932:       8d 4c 24 12             lea    ecx, [esp+0x12]
  936:       be 0e 00 00 00          mov    esi, 0xe
  93b:       bf 2f 00 00 00          mov    edi, 0x2f
  940:       89 f0                   mov    eax, esi
  942:       99                      cdq
  943:       f7 ff                   idiv   edi
  945:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  94a:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  94d:       83 c6 01                add    esi, 0x1
  950:       83 fe 1d                cmp    esi, 0x1d
  953:       75 eb                   jne    0x940
  955:       cd 0a                   int    0xa
  957:       be 57 00 00 00          mov    esi, 0x57
  95c:       e9 8c fa ff ff          jmp    0x3ed
  961:       8d 4c 24 1e             lea    ecx, [esp+0x1e]
  965:       be 02 00 00 00          mov    esi, 0x2
  96a:       bf 2f 00 00 00          mov    edi, 0x2f
  96f:       89 f0                   mov    eax, esi
  971:       99                      cdq
  972:       f7 ff                   idiv   edi
  974:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  979:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  97c:       83 c6 01                add    esi, 0x1
  97f:       83 fe 05                cmp    esi, 0x5
  982:       75 eb                   jne    0x96f
  984:       cd 04                   int    0x4
  986:       be 28 00 00 00          mov    esi, 0x28
  98b:       e9 5d fa ff ff          jmp    0x3ed
  990:       8d 74 24 1c             lea    esi, [esp+0x1c]
  994:       b9 04 00 00 00          mov    ecx, 0x4
  999:       bf 2f 00 00 00          mov    edi, 0x2f
  99e:       89 c8                   mov    eax, ecx
  9a0:       99                      cdq
  9a1:       f7 ff                   idiv   edi
  9a3:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  9a8:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  9ab:       83 c1 01                add    ecx, 0x1
  9ae:       83 f9 09                cmp    ecx, 0x9
  9b1:       75 eb                   jne    0x99e
  9b3:       cd 52                   int    0x52
  9b5:       be 44 00 00 00          mov    esi, 0x44
  9ba:       e9 2e fa ff ff          jmp    0x3ed
  9bf:       8d 4c 24 18             lea    ecx, [esp+0x18]
  9c3:       be 08 00 00 00          mov    esi, 0x8
  9c8:       bf 2f 00 00 00          mov    edi, 0x2f
  9cd:       89 f0                   mov    eax, esi
  9cf:       99                      cdq
  9d0:       f7 ff                   idiv   edi
  9d2:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  9d7:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  9da:       83 c6 01                add    esi, 0x1
  9dd:       83 fe 11                cmp    esi, 0x11
  9e0:       75 eb                   jne    0x9cd
  9e2:       cd 4b                   int    0x4b
  9e4:       be 10 00 00 00          mov    esi, 0x10
  9e9:       e9 ff f9 ff ff          jmp    0x3ed
  9ee:       8d 4c 24 13             lea    ecx, [esp+0x13]
  9f2:       be 0d 00 00 00          mov    esi, 0xd
  9f7:       bf 2f 00 00 00          mov    edi, 0x2f
  9fc:       89 f0                   mov    eax, esi
  9fe:       99                      cdq
  9ff:       f7 ff                   idiv   edi
  a01:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  a06:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  a09:       83 c6 01                add    esi, 0x1
  a0c:       83 fe 1b                cmp    esi, 0x1b
  a0f:       75 eb                   jne    0x9fc
  a11:       cd 56                   int    0x56
  a13:       be 51 00 00 00          mov    esi, 0x51
  a18:       e9 d0 f9 ff ff          jmp    0x3ed
  a1d:       8d 4c 24 1e             lea    ecx, [esp+0x1e]
  a21:       be 02 00 00 00          mov    esi, 0x2
  a26:       bf 2f 00 00 00          mov    edi, 0x2f
  a2b:       89 f0                   mov    eax, esi
  a2d:       99                      cdq
  a2e:       f7 ff                   idiv   edi
  a30:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  a35:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  a38:       83 c6 01                add    esi, 0x1
  a3b:       83 fe 05                cmp    esi, 0x5
  a3e:       75 eb                   jne    0xa2b
  a40:       cd 5e                   int    0x5e
  a42:       be 2f 00 00 00          mov    esi, 0x2f
  a47:       e9 a1 f9 ff ff          jmp    0x3ed
  a4c:       8d 4c 24 0a             lea    ecx, [esp+0xa]
  a50:       be 16 00 00 00          mov    esi, 0x16
  a55:       bf 2f 00 00 00          mov    edi, 0x2f
  a5a:       89 f0                   mov    eax, esi
  a5c:       99                      cdq
  a5d:       f7 ff                   idiv   edi
  a5f:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  a64:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  a67:       83 c6 01                add    esi, 0x1
  a6a:       83 fe 2d                cmp    esi, 0x2d
  a6d:       75 eb                   jne    0xa5a
  a6f:       cd 5a                   int    0x5a
  a71:       be 5a 00 00 00          mov    esi, 0x5a
  a76:       e9 72 f9 ff ff          jmp    0x3ed
  a7b:       8d 4c 24 08             lea    ecx, [esp+0x8]
  a7f:       be 18 00 00 00          mov    esi, 0x18
  a84:       bf 2f 00 00 00          mov    edi, 0x2f
  a89:       89 f0                   mov    eax, esi
  a8b:       99                      cdq
  a8c:       f7 ff                   idiv   edi
  a8e:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  a93:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  a96:       83 c6 01                add    esi, 0x1
  a99:       83 fe 31                cmp    esi, 0x31
  a9c:       75 eb                   jne    0xa89
  a9e:       cd 37                   int    0x37
  aa0:       be 18 00 00 00          mov    esi, 0x18
  aa5:       e9 43 f9 ff ff          jmp    0x3ed
  aaa:       b9 27 00 00 00          mov    ecx, 0x27
  aaf:       be 2f 00 00 00          mov    esi, 0x2f
  ab4:       89 c8                   mov    eax, ecx
  ab6:       99                      cdq
  ab7:       f7 fe                   idiv   esi
  ab9:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  abe:       30 44 0c f9             xor    BYTE PTR [esp+ecx*1-0x7], al
  ac2:       83 c1 01                add    ecx, 0x1
  ac5:       83 f9 4f                cmp    ecx, 0x4f
  ac8:       75 ea                   jne    0xab4
  aca:       cd 25                   int    0x25
  acc:       be 3c 00 00 00          mov    esi, 0x3c
  ad1:       e9 17 f9 ff ff          jmp    0x3ed
  ad6:       8d 4c 24 f7             lea    ecx, [esp-0x9]
  ada:       be 29 00 00 00          mov    esi, 0x29
  adf:       bf 2f 00 00 00          mov    edi, 0x2f
  ae4:       89 f0                   mov    eax, esi
  ae6:       99                      cdq
  ae7:       f7 ff                   idiv   edi
  ae9:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  aee:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  af1:       83 c6 01                add    esi, 0x1
  af4:       83 fe 53                cmp    esi, 0x53
  af7:       75 eb                   jne    0xae4
  af9:       cd 57                   int    0x57
  afb:       be 02 00 00 00          mov    esi, 0x2
  b00:       e9 e8 f8 ff ff          jmp    0x3ed
  b05:       b9 21 00 00 00          mov    ecx, 0x21
  b0a:       be 2f 00 00 00          mov    esi, 0x2f
  b0f:       89 c8                   mov    eax, ecx
  b11:       99                      cdq
  b12:       f7 fe                   idiv   esi
  b14:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  b19:       30 44 0c ff             xor    BYTE PTR [esp+ecx*1-0x1], al
  b1d:       83 c1 01                add    ecx, 0x1
  b20:       83 f9 43                cmp    ecx, 0x43
  b23:       75 ea                   jne    0xb0f
  b25:       cd 53                   int    0x53
  b27:       be 59 00 00 00          mov    esi, 0x59
  b2c:       e9 bc f8 ff ff          jmp    0x3ed
  b31:       8d 74 24 fc             lea    esi, [esp-0x4]
  b35:       b9 24 00 00 00          mov    ecx, 0x24
  b3a:       bf 2f 00 00 00          mov    edi, 0x2f
  b3f:       89 c8                   mov    eax, ecx
  b41:       99                      cdq
  b42:       f7 ff                   idiv   edi
  b44:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  b49:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  b4c:       83 c1 01                add    ecx, 0x1
  b4f:       83 f9 49                cmp    ecx, 0x49
  b52:       75 eb                   jne    0xb3f
  b54:       cd 46                   int    0x46
  b56:       be 24 00 00 00          mov    esi, 0x24
  b5b:       e9 8d f8 ff ff          jmp    0x3ed
  b60:       8d 4c 24 0a             lea    ecx, [esp+0xa]
  b64:       be 16 00 00 00          mov    esi, 0x16
  b69:       bf 2f 00 00 00          mov    edi, 0x2f
  b6e:       89 f0                   mov    eax, esi
  b70:       99                      cdq
  b71:       f7 ff                   idiv   edi
  b73:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  b78:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  b7b:       83 c6 01                add    esi, 0x1
  b7e:       83 fe 2d                cmp    esi, 0x2d
  b81:       75 eb                   jne    0xb6e
  b83:       cd 30                   int    0x30
  b85:       be 40 00 00 00          mov    esi, 0x40
  b8a:       e9 5e f8 ff ff          jmp    0x3ed
  b8f:       8d 74 24 14             lea    esi, [esp+0x14]
  b93:       b9 0c 00 00 00          mov    ecx, 0xc
  b98:       bf 2f 00 00 00          mov    edi, 0x2f
  b9d:       89 c8                   mov    eax, ecx
  b9f:       99                      cdq
  ba0:       f7 ff                   idiv   edi
  ba2:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  ba7:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  baa:       83 c1 01                add    ecx, 0x1
  bad:       83 f9 19                cmp    ecx, 0x19
  bb0:       75 eb                   jne    0xb9d
  bb2:       cd 62                   int    0x62
  bb4:       be 41 00 00 00          mov    esi, 0x41
  bb9:       e9 2f f8 ff ff          jmp    0x3ed
  bbe:       8d 74 24 fc             lea    esi, [esp-0x4]
  bc2:       b9 24 00 00 00          mov    ecx, 0x24
  bc7:       bf 2f 00 00 00          mov    edi, 0x2f
  bcc:       89 c8                   mov    eax, ecx
  bce:       99                      cdq
  bcf:       f7 ff                   idiv   edi
  bd1:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  bd6:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  bd9:       83 c1 01                add    ecx, 0x1
  bdc:       83 f9 49                cmp    ecx, 0x49
  bdf:       75 eb                   jne    0xbcc
  be1:       cd 63                   int    0x63
  be3:       be 12 00 00 00          mov    esi, 0x12
  be8:       e9 00 f8 ff ff          jmp    0x3ed
  bed:       b9 22 00 00 00          mov    ecx, 0x22
  bf2:       be 2f 00 00 00          mov    esi, 0x2f
  bf7:       89 c8                   mov    eax, ecx
  bf9:       99                      cdq
  bfa:       f7 fe                   idiv   esi
  bfc:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  c01:       30 44 0c fe             xor    BYTE PTR [esp+ecx*1-0x2], al
  c05:       83 c1 01                add    ecx, 0x1
  c08:       83 f9 45                cmp    ecx, 0x45
  c0b:       75 ea                   jne    0xbf7
  c0d:       cd 45                   int    0x45
  c0f:       be 2c 00 00 00          mov    esi, 0x2c
  c14:       e9 d4 f7 ff ff          jmp    0x3ed
  c19:       8d 74 24 0d             lea    esi, [esp+0xd]
  c1d:       b9 13 00 00 00          mov    ecx, 0x13
  c22:       bf 2f 00 00 00          mov    edi, 0x2f
  c27:       89 c8                   mov    eax, ecx
  c29:       99                      cdq
  c2a:       f7 ff                   idiv   edi
  c2c:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  c31:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  c34:       83 c1 01                add    ecx, 0x1
  c37:       83 f9 27                cmp    ecx, 0x27
  c3a:       75 eb                   jne    0xc27
  c3c:       cd 09                   int    0x9
  c3e:       be 63 00 00 00          mov    esi, 0x63
  c43:       e9 a5 f7 ff ff          jmp    0x3ed
  c48:       b9 0a 00 00 00          mov    ecx, 0xa
  c4d:       be 2f 00 00 00          mov    esi, 0x2f
  c52:       89 c8                   mov    eax, ecx
  c54:       99                      cdq
  c55:       f7 fe                   idiv   esi
  c57:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  c5c:       30 44 0c 16             xor    BYTE PTR [esp+ecx*1+0x16], al
  c60:       83 c1 01                add    ecx, 0x1
  c63:       83 f9 15                cmp    ecx, 0x15
  c66:       75 ea                   jne    0xc52
  c68:       cd 26                   int    0x26
  c6a:       be 53 00 00 00          mov    esi, 0x53
  c6f:       e9 79 f7 ff ff          jmp    0x3ed
  c74:       8d 74 24 f5             lea    esi, [esp-0xb]
  c78:       b9 2b 00 00 00          mov    ecx, 0x2b
  c7d:       bf 2f 00 00 00          mov    edi, 0x2f
  c82:       89 c8                   mov    eax, ecx
  c84:       99                      cdq
  c85:       f7 ff                   idiv   edi
  c87:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  c8c:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  c8f:       83 c1 01                add    ecx, 0x1
  c92:       83 f9 57                cmp    ecx, 0x57
  c95:       75 eb                   jne    0xc82
  c97:       cd 33                   int    0x33
  c99:       be 20 00 00 00          mov    esi, 0x20
  c9e:       e9 4a f7 ff ff          jmp    0x3ed
  ca3:       8d 4c 24 18             lea    ecx, [esp+0x18]
  ca7:       be 08 00 00 00          mov    esi, 0x8
  cac:       bf 2f 00 00 00          mov    edi, 0x2f
  cb1:       89 f0                   mov    eax, esi
  cb3:       99                      cdq
  cb4:       f7 ff                   idiv   edi
  cb6:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  cbb:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  cbe:       83 c6 01                add    esi, 0x1
  cc1:       83 fe 11                cmp    esi, 0x11
  cc4:       75 eb                   jne    0xcb1
  cc6:       cd 5c                   int    0x5c
  cc8:       be 54 00 00 00          mov    esi, 0x54
  ccd:       e9 1b f7 ff ff          jmp    0x3ed
  cd2:       8d 4c 24 f8             lea    ecx, [esp-0x8]
  cd6:       be 28 00 00 00          mov    esi, 0x28
  cdb:       bf 2f 00 00 00          mov    edi, 0x2f
  ce0:       89 f0                   mov    eax, esi
  ce2:       99                      cdq
  ce3:       f7 ff                   idiv   edi
  ce5:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  cea:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  ced:       83 c6 01                add    esi, 0x1
  cf0:       83 fe 51                cmp    esi, 0x51
  cf3:       75 eb                   jne    0xce0
  cf5:       cd 17                   int    0x17
  cf7:       be 05 00 00 00          mov    esi, 0x5
  cfc:       e9 ec f6 ff ff          jmp    0x3ed
  d01:       b9 05 00 00 00          mov    ecx, 0x5
  d06:       be 2f 00 00 00          mov    esi, 0x2f
  d0b:       89 c8                   mov    eax, ecx
  d0d:       99                      cdq
  d0e:       f7 fe                   idiv   esi
  d10:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  d15:       30 44 0c 1b             xor    BYTE PTR [esp+ecx*1+0x1b], al
  d19:       83 c1 01                add    ecx, 0x1
  d1c:       83 f9 0b                cmp    ecx, 0xb
  d1f:       75 ea                   jne    0xd0b
  d21:       cd 1a                   int    0x1a
  d23:       be 0c 00 00 00          mov    esi, 0xc
  d28:       e9 c0 f6 ff ff          jmp    0x3ed
  d2d:       8d 4c 24 0f             lea    ecx, [esp+0xf]
  d31:       bf 2f 00 00 00          mov    edi, 0x2f
  d36:       89 f0                   mov    eax, esi
  d38:       99                      cdq
  d39:       f7 ff                   idiv   edi
  d3b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  d40:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  d43:       83 c6 01                add    esi, 0x1
  d46:       83 fe 23                cmp    esi, 0x23
  d49:       75 eb                   jne    0xd36
  d4b:       cd 07                   int    0x7
  d4d:       be 0b 00 00 00          mov    esi, 0xb
  d52:       e9 96 f6 ff ff          jmp    0x3ed
  d57:       8d 74 24 f6             lea    esi, [esp-0xa]
  d5b:       b9 2a 00 00 00          mov    ecx, 0x2a
  d60:       bf 2f 00 00 00          mov    edi, 0x2f
  d65:       89 c8                   mov    eax, ecx
  d67:       99                      cdq
  d68:       f7 ff                   idiv   edi
  d6a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  d6f:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  d72:       83 c1 01                add    ecx, 0x1
  d75:       83 f9 55                cmp    ecx, 0x55
  d78:       75 eb                   jne    0xd65
  d7a:       cd 39                   int    0x39
  d7c:       be 46 00 00 00          mov    esi, 0x46
  d81:       e9 67 f6 ff ff          jmp    0x3ed
  d86:       8d 4c 24 f8             lea    ecx, [esp-0x8]
  d8a:       be 28 00 00 00          mov    esi, 0x28
  d8f:       bf 2f 00 00 00          mov    edi, 0x2f
  d94:       89 f0                   mov    eax, esi
  d96:       99                      cdq
  d97:       f7 ff                   idiv   edi
  d99:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  d9e:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  da1:       83 c6 01                add    esi, 0x1
  da4:       83 fe 51                cmp    esi, 0x51
  da7:       75 eb                   jne    0xd94
  da9:       cd 05                   int    0x5
  dab:       be 4c 00 00 00          mov    esi, 0x4c
  db0:       e9 38 f6 ff ff          jmp    0x3ed
  db5:       8d 74 24 06             lea    esi, [esp+0x6]
  db9:       b9 1a 00 00 00          mov    ecx, 0x1a
  dbe:       bf 2f 00 00 00          mov    edi, 0x2f
  dc3:       89 c8                   mov    eax, ecx
  dc5:       99                      cdq
  dc6:       f7 ff                   idiv   edi
  dc8:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  dcd:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  dd0:       83 c1 01                add    ecx, 0x1
  dd3:       83 f9 35                cmp    ecx, 0x35
  dd6:       75 eb                   jne    0xdc3
  dd8:       cd 18                   int    0x18
  dda:       be 5b 00 00 00          mov    esi, 0x5b
  ddf:       e9 09 f6 ff ff          jmp    0x3ed
  de4:       8d 4c 24 0b             lea    ecx, [esp+0xb]
  de8:       be 15 00 00 00          mov    esi, 0x15
  ded:       bf 2f 00 00 00          mov    edi, 0x2f
  df2:       89 f0                   mov    eax, esi
  df4:       99                      cdq
  df5:       f7 ff                   idiv   edi
  df7:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  dfc:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  dff:       83 c6 01                add    esi, 0x1
  e02:       83 fe 2b                cmp    esi, 0x2b
  e05:       75 eb                   jne    0xdf2
  e07:       cd 4d                   int    0x4d
  e09:       be 0a 00 00 00          mov    esi, 0xa
  e0e:       e9 da f5 ff ff          jmp    0x3ed
  e13:       8d 4c 24 13             lea    ecx, [esp+0x13]
  e17:       c7 44 24 1c 0d 00 00 00         mov    DWORD PTR [esp+0x1c], 0xd
  e1f:       8b 44 24 1c             mov    eax, DWORD PTR [esp+0x1c]
  e23:       bf 2f 00 00 00          mov    edi, 0x2f
  e28:       99                      cdq
  e29:       f7 ff                   idiv   edi
  e2b:       8b 7c 24 1c             mov    edi, DWORD PTR [esp+0x1c]
  e2f:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  e34:       30 04 39                xor    BYTE PTR [ecx+edi*1], al
  e37:       89 f8                   mov    eax, edi
  e39:       83 c0 01                add    eax, 0x1
  e3c:       83 f8 1b                cmp    eax, 0x1b
  e3f:       89 44 24 1c             mov    DWORD PTR [esp+0x1c], eax
  e43:       75 da                   jne    0xe1f
  e45:       cd 14                   int    0x14
  e47:       e9 a1 f5 ff ff          jmp    0x3ed
  e4c:       8d 4c 24 08             lea    ecx, [esp+0x8]
  e50:       be 18 00 00 00          mov    esi, 0x18
  e55:       bf 2f 00 00 00          mov    edi, 0x2f
  e5a:       89 f0                   mov    eax, esi
  e5c:       99                      cdq
  e5d:       f7 ff                   idiv   edi
  e5f:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  e64:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
  e67:       83 c6 01                add    esi, 0x1
  e6a:       83 fe 31                cmp    esi, 0x31
  e6d:       75 eb                   jne    0xe5a
  e6f:       cd 3d                   int    0x3d
  e71:       be 07 00 00 00          mov    esi, 0x7
  e76:       e9 72 f5 ff ff          jmp    0x3ed
  e7b:       8d 74 24 0c             lea    esi, [esp+0xc]
  e7f:       b9 14 00 00 00          mov    ecx, 0x14
  e84:       bf 2f 00 00 00          mov    edi, 0x2f
  e89:       89 c8                   mov    eax, ecx
  e8b:       99                      cdq
  e8c:       f7 ff                   idiv   edi
  e8e:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  e93:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  e96:       83 c1 01                add    ecx, 0x1
  e99:       83 f9 29                cmp    ecx, 0x29
  e9c:       75 eb                   jne    0xe89
  e9e:       cd 19                   int    0x19
  ea0:       be 36 00 00 00          mov    esi, 0x36
  ea5:       e9 43 f5 ff ff          jmp    0x3ed
  eaa:       8d 74 24 fc             lea    esi, [esp-0x4]
  eae:       b9 24 00 00 00          mov    ecx, 0x24
  eb3:       bf 2f 00 00 00          mov    edi, 0x2f
  eb8:       89 c8                   mov    eax, ecx
  eba:       99                      cdq
  ebb:       f7 ff                   idiv   edi
  ebd:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  ec2:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  ec5:       83 c1 01                add    ecx, 0x1
  ec8:       83 f9 49                cmp    ecx, 0x49
  ecb:       75 eb                   jne    0xeb8
  ecd:       cd 1f                   int    0x1f
  ecf:       be 0e 00 00 00          mov    esi, 0xe
  ed4:       e9 14 f5 ff ff          jmp    0x3ed
  ed9:       8d 74 24 14             lea    esi, [esp+0x14]
  edd:       b9 0c 00 00 00          mov    ecx, 0xc
  ee2:       bf 2f 00 00 00          mov    edi, 0x2f
  ee7:       89 c8                   mov    eax, ecx
  ee9:       99                      cdq
  eea:       f7 ff                   idiv   edi
  eec:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  ef1:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  ef4:       83 c1 01                add    ecx, 0x1
  ef7:       83 f9 19                cmp    ecx, 0x19
  efa:       75 eb                   jne    0xee7
  efc:       cd 34                   int    0x34
  efe:       be 01 00 00 00          mov    esi, 0x1
  f03:       e9 e5 f4 ff ff          jmp    0x3ed
  f08:       8d 74 24 f6             lea    esi, [esp-0xa]
  f0c:       b9 2a 00 00 00          mov    ecx, 0x2a
  f11:       bf 2f 00 00 00          mov    edi, 0x2f
  f16:       89 c8                   mov    eax, ecx
  f18:       99                      cdq
  f19:       f7 ff                   idiv   edi
  f1b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  f20:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  f23:       83 c1 01                add    ecx, 0x1
  f26:       83 f9 55                cmp    ecx, 0x55
  f29:       75 eb                   jne    0xf16
  f2b:       cd 2c                   int    0x2c
  f2d:       be 1a 00 00 00          mov    esi, 0x1a
  f32:       e9 b6 f4 ff ff          jmp    0x3ed
  f37:       8d 74 24 0c             lea    esi, [esp+0xc]
  f3b:       b9 14 00 00 00          mov    ecx, 0x14
  f40:       bf 2f 00 00 00          mov    edi, 0x2f
  f45:       89 c8                   mov    eax, ecx
  f47:       99                      cdq
  f48:       f7 ff                   idiv   edi
  f4a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  f4f:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  f52:       83 c1 01                add    ecx, 0x1
  f55:       83 f9 29                cmp    ecx, 0x29
  f58:       75 eb                   jne    0xf45
  f5a:       cd 0f                   int    0xf
  f5c:       be 04 00 00 00          mov    esi, 0x4
  f61:       e9 87 f4 ff ff          jmp    0x3ed
  f66:       b9 23 00 00 00          mov    ecx, 0x23
  f6b:       be 2f 00 00 00          mov    esi, 0x2f
  f70:       89 c8                   mov    eax, ecx
  f72:       99                      cdq
  f73:       f7 fe                   idiv   esi
  f75:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  f7a:       30 44 0c fd             xor    BYTE PTR [esp+ecx*1-0x3], al
  f7e:       83 c1 01                add    ecx, 0x1
  f81:       83 f9 47                cmp    ecx, 0x47
  f84:       75 ea                   jne    0xf70
  f86:       cd 28                   int    0x28
  f88:       be 49 00 00 00          mov    esi, 0x49
  f8d:       e9 5b f4 ff ff          jmp    0x3ed
  f92:       8d 74 24 f4             lea    esi, [esp-0xc]
  f96:       b9 2c 00 00 00          mov    ecx, 0x2c
  f9b:       bf 2f 00 00 00          mov    edi, 0x2f
  fa0:       89 c8                   mov    eax, ecx
  fa2:       99                      cdq
  fa3:       f7 ff                   idiv   edi
  fa5:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  faa:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  fad:       83 c1 01                add    ecx, 0x1
  fb0:       83 f9 59                cmp    ecx, 0x59
  fb3:       75 eb                   jne    0xfa0
  fb5:       cd 60                   int    0x60
  fb7:       be 45 00 00 00          mov    esi, 0x45
  fbc:       e9 2c f4 ff ff          jmp    0x3ed
  fc1:       8d 74 24 0d             lea    esi, [esp+0xd]
  fc5:       b9 13 00 00 00          mov    ecx, 0x13
  fca:       bf 2f 00 00 00          mov    edi, 0x2f
  fcf:       89 c8                   mov    eax, ecx
  fd1:       99                      cdq
  fd2:       f7 ff                   idiv   edi
  fd4:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
  fd9:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
  fdc:       83 c1 01                add    ecx, 0x1
  fdf:       83 f9 27                cmp    ecx, 0x27
  fe2:       75 eb                   jne    0xfcf
  fe4:       cd 24                   int    0x24
  fe6:       be 3f 00 00 00          mov    esi, 0x3f
  feb:       e9 fd f3 ff ff          jmp    0x3ed
  ff0:       8d 4c 24 0b             lea    ecx, [esp+0xb]
  ff4:       be 15 00 00 00          mov    esi, 0x15
  ff9:       bf 2f 00 00 00          mov    edi, 0x2f
  ffe:       89 f0                   mov    eax, esi
1000:       99                      cdq
1001:       f7 ff                   idiv   edi
1003:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1008:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
100b:       83 c6 01                add    esi, 0x1
100e:       83 fe 2b                cmp    esi, 0x2b
1011:       75 eb                   jne    0xffe
1013:       cd 15                   int    0x15
1015:       be 5c 00 00 00          mov    esi, 0x5c
101a:       e9 ce f3 ff ff          jmp    0x3ed
101f:       8d 4c 24 f8             lea    ecx, [esp-0x8]
1023:       be 28 00 00 00          mov    esi, 0x28
1028:       bf 2f 00 00 00          mov    edi, 0x2f
102d:       89 f0                   mov    eax, esi
102f:       99                      cdq
1030:       f7 ff                   idiv   edi
1032:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1037:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
103a:       83 c6 01                add    esi, 0x1
103d:       83 fe 51                cmp    esi, 0x51
1040:       75 eb                   jne    0x102d
1042:       cd 59                   int    0x59
1044:       be 5e 00 00 00          mov    esi, 0x5e
1049:       e9 9f f3 ff ff          jmp    0x3ed
104e:       8d 4c 24 12             lea    ecx, [esp+0x12]
1052:       be 0e 00 00 00          mov    esi, 0xe
1057:       bf 2f 00 00 00          mov    edi, 0x2f
105c:       89 f0                   mov    eax, esi
105e:       99                      cdq
105f:       f7 ff                   idiv   edi
1061:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1066:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1069:       83 c6 01                add    esi, 0x1
106c:       83 fe 1d                cmp    esi, 0x1d
106f:       75 eb                   jne    0x105c
1071:       cd 0e                   int    0xe
1073:       be 16 00 00 00          mov    esi, 0x16
1078:       e9 70 f3 ff ff          jmp    0x3ed
107d:       8d 74 24 19             lea    esi, [esp+0x19]
1081:       b9 07 00 00 00          mov    ecx, 0x7
1086:       bf 2f 00 00 00          mov    edi, 0x2f
108b:       89 c8                   mov    eax, ecx
108d:       99                      cdq
108e:       f7 ff                   idiv   edi
1090:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1095:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1098:       83 c1 01                add    ecx, 0x1
109b:       83 f9 0f                cmp    ecx, 0xf
109e:       75 eb                   jne    0x108b
10a0:       cd 42                   int    0x42
10a2:       be 37 00 00 00          mov    esi, 0x37
10a7:       e9 41 f3 ff ff          jmp    0x3ed
10ac:       8d 74 24 15             lea    esi, [esp+0x15]
10b0:       b9 0b 00 00 00          mov    ecx, 0xb
10b5:       bf 2f 00 00 00          mov    edi, 0x2f
10ba:       89 c8                   mov    eax, ecx
10bc:       99                      cdq
10bd:       f7 ff                   idiv   edi
10bf:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
10c4:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
10c7:       83 c1 01                add    ecx, 0x1
10ca:       83 f9 17                cmp    ecx, 0x17:q

10cd:       75 eb                   jne    0x10ba
10cf:       0f a2                   cpuid
10d1:       be 2e 00 00 00          mov    esi, 0x2e
10d6:       e9 12 f3 ff ff          jmp    0x3ed
10db:       8d 4c 24 08             lea    ecx, [esp+0x8]
10df:       be 18 00 00 00          mov    esi, 0x18
10e4:       bf 2f 00 00 00          mov    edi, 0x2f
10e9:       89 f0                   mov    eax, esi
10eb:       99                      cdq
10ec:       f7 ff                   idiv   edi
10ee:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
10f3:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
10f6:       83 c6 01                add    esi, 0x1
10f9:       83 fe 31                cmp    esi, 0x31
10fc:       75 eb                   jne    0x10e9
10fe:       cd 3b                   int    0x3b
1100:       be 1f 00 00 00          mov    esi, 0x1f
1105:       e9 e3 f2 ff ff          jmp    0x3ed
110a:       8d 4c 24 0a             lea    ecx, [esp+0xa]
110e:       be 16 00 00 00          mov    esi, 0x16
1113:       bf 2f 00 00 00          mov    edi, 0x2f
1118:       89 f0                   mov    eax, esi
111a:       99                      cdq
111b:       f7 ff                   idiv   edi
111d:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1122:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1125:       83 c6 01                add    esi, 0x1
1128:       83 fe 2d                cmp    esi, 0x2d
112b:       75 eb                   jne    0x1118
112d:       cd 16                   int    0x16
112f:       be 25 00 00 00          mov    esi, 0x25
1134:       e9 b4 f2 ff ff          jmp    0x3ed
1139:       8d 74 24 f4             lea    esi, [esp-0xc]
113d:       b9 2c 00 00 00          mov    ecx, 0x2c
1142:       bf 2f 00 00 00          mov    edi, 0x2f
1147:       89 c8                   mov    eax, ecx
1149:       99                      cdq
114a:       f7 ff                   idiv   edi
114c:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1151:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1154:       83 c1 01                add    ecx, 0x1
1157:       83 f9 59                cmp    ecx, 0x59
115a:       75 eb                   jne    0x1147
115c:       cd 0c                   int    0xc
115e:       be 48 00 00 00          mov    esi, 0x48
1163:       e9 85 f2 ff ff          jmp    0x3ed
1168:       8d 74 24 03             lea    esi, [esp+0x3]
116c:       b9 1d 00 00 00          mov    ecx, 0x1d
1171:       bf 2f 00 00 00          mov    edi, 0x2f
1176:       89 c8                   mov    eax, ecx
1178:       99                      cdq
1179:       f7 ff                   idiv   edi
117b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1180:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1183:       83 c1 01                add    ecx, 0x1
1186:       83 f9 3b                cmp    ecx, 0x3b
1189:       75 eb                   jne    0x1176
118b:       cd 64                   int    0x64
118d:       be 17 00 00 00          mov    esi, 0x17
1192:       e9 56 f2 ff ff          jmp    0x3ed
1197:       8d 74 24 fa             lea    esi, [esp-0x6]
119b:       b9 26 00 00 00          mov    ecx, 0x26
11a0:       bf 2f 00 00 00          mov    edi, 0x2f
11a5:       89 c8                   mov    eax, ecx
11a7:       99                      cdq
11a8:       f7 ff                   idiv   edi
11aa:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
11af:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
11b2:       83 c1 01                add    ecx, 0x1
11b5:       83 f9 4d                cmp    ecx, 0x4d
11b8:       75 eb                   jne    0x11a5
11ba:       cd 22                   int    0x22
11bc:       be 3e 00 00 00          mov    esi, 0x3e
11c1:       e9 27 f2 ff ff          jmp    0x3ed
11c6:       8d 4c 24 0f             lea    ecx, [esp+0xf]
11ca:       be 11 00 00 00          mov    esi, 0x11
11cf:       bf 2f 00 00 00          mov    edi, 0x2f
11d4:       89 f0                   mov    eax, esi
11d6:       99                      cdq
11d7:       f7 ff                   idiv   edi
11d9:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
11de:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
11e1:       83 c6 01                add    esi, 0x1
11e4:       83 fe 23                cmp    esi, 0x23
11e7:       75 eb                   jne    0x11d4
11e9:       cd 29                   int    0x29
11eb:       be 58 00 00 00          mov    esi, 0x58
11f0:       e9 f8 f1 ff ff          jmp    0x3ed
11f5:       8d 74 24 1a             lea    esi, [esp+0x1a]
11f9:       b9 06 00 00 00          mov    ecx, 0x6
11fe:       bf 2f 00 00 00          mov    edi, 0x2f
1203:       89 c8                   mov    eax, ecx
1205:       99                      cdq
1206:       f7 ff                   idiv   edi
1208:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
120d:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1210:       83 c1 01                add    ecx, 0x1
1213:       83 f9 0d                cmp    ecx, 0xd
1216:       75 eb                   jne    0x1203
1218:       cd 27                   int    0x27
121a:       be 56 00 00 00          mov    esi, 0x56
121f:       e9 c9 f1 ff ff          jmp    0x3ed
1224:       8d 4c 24 f7             lea    ecx, [esp-0x9]
1228:       be 29 00 00 00          mov    esi, 0x29
122d:       bf 2f 00 00 00          mov    edi, 0x2f
1232:       89 f0                   mov    eax, esi
1234:       99                      cdq
1235:       f7 ff                   idiv   edi
1237:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
123c:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
123f:       83 c6 01                add    esi, 0x1
1242:       83 fe 53                cmp    esi, 0x53
1245:       75 eb                   jne    0x1232
1247:       cd 20                   int    0x20
1249:       be 55 00 00 00          mov    esi, 0x55
124e:       e9 9a f1 ff ff          jmp    0x3ed
1253:       8d 4c 24 08             lea    ecx, [esp+0x8]
1257:       be 18 00 00 00          mov    esi, 0x18
125c:       bf 2f 00 00 00          mov    edi, 0x2f
1261:       89 f0                   mov    eax, esi
1263:       99                      cdq
1264:       f7 ff                   idiv   edi
1266:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
126b:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
126e:       83 c6 01                add    esi, 0x1
1271:       83 fe 31                cmp    esi, 0x31
1274:       75 eb                   jne    0x1261
1276:       cd 1b                   int    0x1b
1278:       be 62 00 00 00          mov    esi, 0x62
127d:       e9 6b f1 ff ff          jmp    0x3ed
1282:       8d 4c 24 0b             lea    ecx, [esp+0xb]
1286:       be 15 00 00 00          mov    esi, 0x15
128b:       bf 2f 00 00 00          mov    edi, 0x2f
1290:       89 f0                   mov    eax, esi
1292:       99                      cdq
1293:       f7 ff                   idiv   edi
1295:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
129a:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
129d:       83 c6 01                add    esi, 0x1
12a0:       83 fe 2b                cmp    esi, 0x2b
12a3:       75 eb                   jne    0x1290
12a5:       cd 40                   int    0x40
12a7:       be 2d 00 00 00          mov    esi, 0x2d
12ac:       e9 3c f1 ff ff          jmp    0x3ed
12b1:       8d 4c 24 13             lea    ecx, [esp+0x13]
12b5:       be 0d 00 00 00          mov    esi, 0xd
12ba:       bf 2f 00 00 00          mov    edi, 0x2f
12bf:       89 f0                   mov    eax, esi
12c1:       99                      cdq
12c2:       f7 ff                   idiv   edi
12c4:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
12c9:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
12cc:       83 c6 01                add    esi, 0x1
12cf:       83 fe 1b                cmp    esi, 0x1b
12d2:       75 eb                   jne    0x12bf
12d4:       cd 4e                   int    0x4e
12d6:       be 35 00 00 00          mov    esi, 0x35
12db:       e9 0d f1 ff ff          jmp    0x3ed
12e0:       b9 20 00 00 00          mov    ecx, 0x20
12e5:       89 e6                   mov    esi, esp
12e7:       bf 2f 00 00 00          mov    edi, 0x2f
12ec:       89 c8                   mov    eax, ecx
12ee:       99                      cdq
12ef:       f7 ff                   idiv   edi
12f1:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
12f6:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
12f9:       83 c1 01                add    ecx, 0x1
12fc:       83 f9 41                cmp    ecx, 0x41
12ff:       75 eb                   jne    0x12ec
1301:       cd 0d                   int    0xd
1303:       be 39 00 00 00          mov    esi, 0x39
1308:       e9 e0 f0 ff ff          jmp    0x3ed
130d:       8d 74 24 06             lea    esi, [esp+0x6]
1311:       b9 1a 00 00 00          mov    ecx, 0x1a
1316:       bf 2f 00 00 00          mov    edi, 0x2f
131b:       89 c8                   mov    eax, ecx
131d:       99                      cdq
131e:       f7 ff                   idiv   edi
1320:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1325:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1328:       83 c1 01                add    ecx, 0x1
132b:       83 f9 35                cmp    ecx, 0x35
132e:       75 eb                   jne    0x131b
1330:       cd 41                   int    0x41
1332:       be 5f 00 00 00          mov    esi, 0x5f
1337:       e9 b1 f0 ff ff          jmp    0x3ed
133c:       8d 4c 24 08             lea    ecx, [esp+0x8]
1340:       be 18 00 00 00          mov    esi, 0x18
1345:       bf 2f 00 00 00          mov    edi, 0x2f
134a:       89 f0                   mov    eax, esi
134c:       99                      cdq
134d:       f7 ff                   idiv   edi
134f:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1354:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1357:       83 c6 01                add    esi, 0x1
135a:       83 fe 31                cmp    esi, 0x31
135d:       75 eb                   jne    0x134a
135f:       cd 1e                   int    0x1e
1361:       be 42 00 00 00          mov    esi, 0x42
1366:       e9 82 f0 ff ff          jmp    0x3ed
136b:       8d 74 24 03             lea    esi, [esp+0x3]
136f:       b9 1d 00 00 00          mov    ecx, 0x1d
1374:       bf 2f 00 00 00          mov    edi, 0x2f
1379:       89 c8                   mov    eax, ecx
137b:       99                      cdq
137c:       f7 ff                   idiv   edi
137e:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1383:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1386:       83 c1 01                add    ecx, 0x1
1389:       83 f9 3b                cmp    ecx, 0x3b
138c:       75 eb                   jne    0x1379
138e:       cd 55                   int    0x55
1390:       be 32 00 00 00          mov    esi, 0x32
1395:       e9 53 f0 ff ff          jmp    0x3ed
139a:       8d 74 24 17             lea    esi, [esp+0x17]
139e:       b9 09 00 00 00          mov    ecx, 0x9
13a3:       bf 2f 00 00 00          mov    edi, 0x2f
13a8:       89 c8                   mov    eax, ecx
13aa:       99                      cdq
13ab:       f7 ff                   idiv   edi
13ad:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
13b2:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
13b5:       83 c1 01                add    ecx, 0x1
13b8:       83 f9 13                cmp    ecx, 0x13
13bb:       75 eb                   jne    0x13a8
13bd:       cd 5f                   int    0x5f
13bf:       be 2b 00 00 00          mov    esi, 0x2b
13c4:       e9 24 f0 ff ff          jmp    0x3ed
13c9:       8d 74 24 1a             lea    esi, [esp+0x1a]
13cd:       b9 06 00 00 00          mov    ecx, 0x6
13d2:       bf 2f 00 00 00          mov    edi, 0x2f
13d7:       89 c8                   mov    eax, ecx
13d9:       99                      cdq
13da:       f7 ff                   idiv   edi
13dc:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
13e1:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
13e4:       83 c1 01                add    ecx, 0x1
13e7:       83 f9 0d                cmp    ecx, 0xd
13ea:       75 eb                   jne    0x13d7
13ec:       cd 32                   int    0x32
13ee:       be 06 00 00 00          mov    esi, 0x6
13f3:       e9 f5 ef ff ff          jmp    0x3ed
13f8:       8d 4c 24 f8             lea    ecx, [esp-0x8]
13fc:       be 28 00 00 00          mov    esi, 0x28
1401:       bf 2f 00 00 00          mov    edi, 0x2f
1406:       89 f0                   mov    eax, esi
1408:       99                      cdq
1409:       f7 ff                   idiv   edi
140b:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1410:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1413:       83 c6 01                add    esi, 0x1
1416:       83 fe 51                cmp    esi, 0x51
1419:       75 eb                   jne    0x1406
141b:       cd 61                   int    0x61
141d:       be 27 00 00 00          mov    esi, 0x27
1422:       e9 c6 ef ff ff          jmp    0x3ed
1427:       b9 20 00 00 00          mov    ecx, 0x20
142c:       89 e6                   mov    esi, esp
142e:       bf 2f 00 00 00          mov    edi, 0x2f
1433:       89 c8                   mov    eax, ecx
1435:       99                      cdq
1436:       f7 ff                   idiv   edi
1438:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
143d:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
1440:       83 c1 01                add    ecx, 0x1
1443:       83 f9 41                cmp    ecx, 0x41
1446:       75 eb                   jne    0x1433
1448:       cd 10                   int    0x10
144a:       be 5d 00 00 00          mov    esi, 0x5d
144f:       e9 99 ef ff ff          jmp    0x3ed
1454:       8d 74 24 f5             lea    esi, [esp-0xb]
1458:       b9 2b 00 00 00          mov    ecx, 0x2b
145d:       bf 2f 00 00 00          mov    edi, 0x2f
1462:       89 c8                   mov    eax, ecx
1464:       99                      cdq
1465:       f7 ff                   idiv   edi
1467:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
146c:       30 04 0e                xor    BYTE PTR [esi+ecx*1], al
146f:       83 c1 01                add    ecx, 0x1
1472:       83 f9 57                cmp    ecx, 0x57
1475:       75 eb                   jne    0x1462
1477:       cd 38                   int    0x38
1479:       be 31 00 00 00          mov    esi, 0x31
147e:       e9 6a ef ff ff          jmp    0x3ed
1483:       8d 4c 24 08             lea    ecx, [esp+0x8]
1487:       be 18 00 00 00          mov    esi, 0x18
148c:       bf 2f 00 00 00          mov    edi, 0x2f
1491:       89 f0                   mov    eax, esi
1493:       99                      cdq
1494:       f7 ff                   idiv   edi
1496:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
149b:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
149e:       83 c6 01                add    esi, 0x1
14a1:       83 fe 31                cmp    esi, 0x31
14a4:       75 eb                   jne    0x1491
14a6:       cd 36                   int    0x36
14a8:       be 23 00 00 00          mov    esi, 0x23
14ad:       e9 3b ef ff ff          jmp    0x3ed
14b2:       b9 17 00 00 00          mov    ecx, 0x17
14b7:       be 2f 00 00 00          mov    esi, 0x2f
14bc:       89 c8                   mov    eax, ecx
14be:       99                      cdq
14bf:       f7 fe                   idiv   esi
14c1:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
14c6:       30 44 0c 09             xor    BYTE PTR [esp+ecx*1+0x9], al
14ca:       83 c1 01                add    ecx, 0x1
14cd:       83 f9 2f                cmp    ecx, 0x2f
14d0:       75 ea                   jne    0x14bc
14d2:       cd 21                   int    0x21
14d4:       be 4f 00 00 00          mov    esi, 0x4f
14d9:       e9 0f ef ff ff          jmp    0x3ed
14de:       8d 4c 24 08             lea    ecx, [esp+0x8]
14e2:       be 18 00 00 00          mov    esi, 0x18
14e7:       bf 2f 00 00 00          mov    edi, 0x2f
14ec:       89 f0                   mov    eax, esi
14ee:       99                      cdq
14ef:       f7 ff                   idiv   edi
14f1:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
14f6:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
14f9:       83 c6 01                add    esi, 0x1
14fc:       83 fe 31                cmp    esi, 0x31
14ff:       75 eb                   jne    0x14ec
1501:       cd 4a                   int    0x4a
1503:       be 34 00 00 00          mov    esi, 0x34
1508:       e9 e0 ee ff ff          jmp    0x3ed
150d:       8d 4c 24 1e             lea    ecx, [esp+0x1e]
1511:       be 02 00 00 00          mov    esi, 0x2
1516:       bf 2f 00 00 00          mov    edi, 0x2f
151b:       89 f0                   mov    eax, esi
151d:       99                      cdq
151e:       f7 ff                   idiv   edi
1520:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1525:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1528:       83 c6 01                add    esi, 0x1
152b:       83 fe 05                cmp    esi, 0x5
152e:       75 eb                   jne    0x151b
1530:       cd 2a                   int    0x2a
1532:       be 19 00 00 00          mov    esi, 0x19
1537:       e9 b1 ee ff ff          jmp    0x3ed
153c:       8d 4c 24 0f             lea    ecx, [esp+0xf]
1540:       be 11 00 00 00          mov    esi, 0x11
1545:       bf 2f 00 00 00          mov    edi, 0x2f
154a:       89 f0                   mov    eax, esi
154c:       99                      cdq
154d:       f7 ff                   idiv   edi
154f:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1554:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
1557:       83 c6 01                add    esi, 0x1
155a:       83 fe 23                cmp    esi, 0x23
155d:       75 eb                   jne    0x154a
155f:       cd 47                   int    0x47
1561:       be 08 00 00 00          mov    esi, 0x8
1566:       e9 82 ee ff ff          jmp    0x3ed
156b:       b9 0f 00 00 00          mov    ecx, 0xf
1570:       be 2f 00 00 00          mov    esi, 0x2f
1575:       89 c8                   mov    eax, ecx
1577:       99                      cdq
1578:       f7 fe                   idiv   esi
157a:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
157f:       30 44 0c 11             xor    BYTE PTR [esp+ecx*1+0x11], al
1583:       83 c1 01                add    ecx, 0x1
1586:       83 f9 1f                cmp    ecx, 0x1f
1589:       75 ea                   jne    0x1575
158b:       cd 3e                   int    0x3e
158d:       be 15 00 00 00          mov    esi, 0x15
1592:       e9 56 ee ff ff          jmp    0x3ed
1597:       b9 19 00 00 00          mov    ecx, 0x19
159c:       be 2f 00 00 00          mov    esi, 0x2f
15a1:       89 c8                   mov    eax, ecx
15a3:       99                      cdq
15a4:       f7 fe                   idiv   esi
15a6:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
15ab:       30 44 0c 07             xor    BYTE PTR [esp+ecx*1+0x7], al
15af:       83 c1 01                add    ecx, 0x1
15b2:       83 f9 33                cmp    ecx, 0x33
15b5:       75 ea                   jne    0x15a1
15b7:       cd 1d                   int    0x1d
15b9:       be 03 00 00 00          mov    esi, 0x3
15be:       e9 2a ee ff ff          jmp    0x3ed
15c3:       8d 4c 24 12             lea    ecx, [esp+0x12]
15c7:       be 0e 00 00 00          mov    esi, 0xe
15cc:       bf 2f 00 00 00          mov    edi, 0x2f
15d1:       89 f0                   mov    eax, esi
15d3:       99                      cdq
15d4:       f7 ff                   idiv   edi
15d6:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
15db:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
15de:       83 c6 01                add    esi, 0x1
15e1:       83 fe 1d                cmp    esi, 0x1d
15e4:       75 eb                   jne    0x15d1
15e6:       cd 2e                   int    0x2e
15e8:       be 61 00 00 00          mov    esi, 0x61
15ed:       e9 fb ed ff ff          jmp    0x3ed
15f2:       8d 4c 24 1e             lea    ecx, [esp+0x1e]
15f6:       be 02 00 00 00          mov    esi, 0x2
15fb:       bf 2f 00 00 00          mov    edi, 0x2f
1600:       89 f0                   mov    eax, esi
1602:       99                      cdq
1603:       f7 ff                   idiv   edi
1605:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
160a:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
160d:       83 c6 01                add    esi, 0x1
1610:       83 fe 05                cmp    esi, 0x5
1613:       75 eb                   jne    0x1600
1615:       cd 11                   int    0x11
1617:       be 1c 00 00 00          mov    esi, 0x1c
161c:       e9 cc ed ff ff          jmp    0x3ed
1621:       8d 4c 24 0b             lea    ecx, [esp+0xb]
1625:       be 15 00 00 00          mov    esi, 0x15
162a:       bf 2f 00 00 00          mov    edi, 0x2f
162f:       89 f0                   mov    eax, esi
1631:       99                      cdq
1632:       f7 ff                   idiv   edi
1634:       0f b6 44 14 20          movzx  eax, BYTE PTR [esp+edx*1+0x20]
1639:       30 04 31                xor    BYTE PTR [ecx+esi*1], al
163c:       83 c6 01                add    esi, 0x1
163f:       83 fe 2b                cmp    esi, 0x2b
1642:       75 eb                   jne    0x162f
1644:       cd 3f                   int    0x3f
1646:       be 22 00 00 00          mov    esi, 0x22
164b:       e9                      .byte 0xe9

主要可以知道的是shellcode 會根據ESI的狀態跳到對應的地方並且進行區間跟自己的xor

因此我們需要先抓所有eip所變化的所有狀態

def hook_exception(uc, exception_type, user_data):
    global ck,cmp_collet
    if ck == 1 and exception_type == 0x2d:
        #uc.emu_stop()
        return 0
    if exception_type == 0x2d:
        ck = 1

    EIP = ADDRESS_CODE
    ESI = exception_type
    print(f"[STATE] ESI ← 0x{exception_type:02X}")
    cmp_collet=False
    uc.reg_write(UC_X86_REG_EIP, EIP)
    uc.reg_write(UC_X86_REG_ESI, ESI)
    return 0

先把ESI的每個狀態輸出出來

Unicorn esi
[STATE] ESI ← 0x61
[STATE] ESI ← 0x10
[STATE] ESI ← 0x37
[STATE] ESI ← 0x1F
[STATE] ESI ← 0x31
[STATE] ESI ← 0x13
[STATE] ESI ← 0x56
[STATE] ESI ← 0x54
[STATE] ESI ← 0x2D
[STATE] ESI ← 0x36
[STATE] ESI ← 0x12
[STATE] ESI ← 0x40
[STATE] ESI ← 0x0E
[STATE] ESI ← 0x39
[STATE] ESI ← 0x0F
[STATE] ESI ← 0x03
[STATE] ESI ← 0x27
[STATE] ESI ← 0x18
[STATE] ESI ← 0x58
[STATE] ESI ← 0x3B
[STATE] ESI ← 0x55
[STATE] ESI ← 0x48
[STATE] ESI ← 0x0A
[STATE] ESI ← 0x1C
[STATE] ESI ← 0x1B
[STATE] ESI ← 0x2F
[STATE] ESI ← 0x5C
[STATE] ESI ← 0x20
[STATE] ESI ← 0x2B
[STATE] ESI ← 0x50
[STATE] ESI ← 0x44
[STATE] ESI ← 0x2E
[STATE] ESI ← 0x1D
[STATE] ESI ← 0x5E
[STATE] ESI ← 0x21
[STATE] ESI ← 0x47
[STATE] ESI ← 0x17
[STATE] ESI ← 0x01
[STATE] ESI ← 0x52
[STATE] ESI ← 0x3F
[STATE] ESI ← 0x16
[STATE] ESI ← 0x4C
[STATE] ESI ← 0x0D
[STATE] ESI ← 0x23
[STATE] ESI ← 0x34
[STATE] ESI ← 0x49
[STATE] ESI ← 0x43
[STATE] ESI ← 0x28
[STATE] ESI ← 0x30
[STATE] ESI ← 0x33
[STATE] ESI ← 0x4A
[STATE] ESI ← 0x0B
[STATE] ESI ← 0x4B
[STATE] ESI ← 0x32
[STATE] ESI ← 0x24
[STATE] ESI ← 0x51
[STATE] ESI ← 0x4D
[STATE] ESI ← 0x64
[STATE] ESI ← 0x5A
[STATE] ESI ← 0x3A
[STATE] ESI ← 0x04
[STATE] ESI ← 0x26
[STATE] ESI ← 0x35
[STATE] ESI ← 0x46
[STATE] ESI ← 0x60
[STATE] ESI ← 0x11
[STATE] ESI ← 0x07
[STATE] ESI ← 0x3E
[STATE] ESI ← 0x45
[STATE] ESI ← 0x2A
[STATE] ESI ← 0x19
[STATE] ESI ← 0x4E
[STATE] ESI ← 0x22
[STATE] ESI ← 0x5F
[STATE] ESI ← 0x25
[STATE] ESI ← 0x41
[STATE] ESI ← 0x53
[STATE] ESI ← 0x2C
[STATE] ESI ← 0x09
[STATE] ESI ← 0x3C
[STATE] ESI ← 0x1E
[STATE] ESI ← 0x14

接下來要取得xor會從哪裡到哪裡,在shellcode中是使用mov esi XXX 以及cmp ecx YYY ,代表XXX 到YYY 進行xor

def hook_mov_esi(uc, address, size, user_data):
    # 读出当前指令的机器码
    global cmp_collet
    mc = uc.mem_read(address, size)
    # 机器码前 1 字节是 0xBE (mov esi, imm32),后面 4 字节是 little-endian 的 imm32
    if mc[0] == 0xBE:
        imm = int.from_bytes(mc[1:5], 'little')
        print(f"[HOOK MOV] @0x{address:08x}: mov esi, {hex(imm)}")
        cmp_collet = False
    if mc[0] == 0xB9:
        imm = int.from_bytes(mc[1:5], 'little')
        print(f"[HOOK MOV] @0x{address:08x}: mov esi, {hex(imm)}")
        cmp_collet = False
    if mc[0] == 0xBF:
        imm = int.from_bytes(mc[1:5], 'little')
        if(imm != 0x2f):
            print(f"[HOOK MOV] @0x{address:08x}: mov esi, {hex(imm)}")
            cmp_collet = False

def hook_cmp_esi(uc, address, size, user_data):
    global cmp_collet
    mc = uc.mem_read(address, size)
    if(cmp_collet == True):
        return 0
    # cmp esi, imm8 的编码是 0x83 0xFE imm8
    if mc[0] == 0x83 and mc[1] == 0xFE:
        imm8 = mc[2]
        print(f"[HOOK CMP] @0x{address:08x}: cmp esi, {hex(imm8)}")
        cmp_collet = True
        return 0
    if mc[0] == 0x83 and mc[1] == 0xf9:
        imm8 = mc[2]
        print(f"[HOOK CMP] @0x{address:08x}: cmp esi, {hex(imm8)}")
        cmp_collet = True
        return 0

mu.hook_add(UC_HOOK_CODE, hook_mov_esi, None, 1, 0, UC_X86_INS_CPUID)
mu.hook_add(UC_HOOK_CODE, hook_cmp_esi, None, 0x1000380, ADDRESS_CODE + CODE_SIZE, UC_X86_INS_CPUID)
Unicorn cmp mov
[HOOK MOV] @0x010013fc: mov esi, 0x28
[HOOK CMP] @0x01001416: cmp esi, 0x51
[STATE] ESI  0x61
[HOOK MOV] @0x01001427: mov esi, 0x20
[HOOK CMP] @0x01001443: cmp esi, 0x41
[STATE] ESI  0x10
[HOOK MOV] @0x01000a7f: mov esi, 0x18
[HOOK CMP] @0x01000a99: cmp esi, 0x31
[STATE] ESI  0x37
[HOOK MOV] @0x01000eae: mov esi, 0x24
[HOOK CMP] @0x01000ec8: cmp esi, 0x49
[STATE] ESI  0x1F
[HOOK MOV] @0x010007c4: mov esi, 0x1d
[HOOK CMP] @0x010007de: cmp esi, 0x3b
[STATE] ESI  0x31
[HOOK MOV] @0x01000589: mov esi, 0x12
[HOOK MOV] @0x0100058e: mov esi, 0xae4c415d
[HOOK CMP] @0x010005b6: cmp esi, 0x25
[STATE] ESI  0x13
[HOOK MOV] @0x010009f2: mov esi, 0xd
[HOOK CMP] @0x01000a0c: cmp esi, 0x1b
[STATE] ESI  0x56
[HOOK MOV] @0x010008a9: mov esi, 0x24
[HOOK CMP] @0x010008c3: cmp esi, 0x49
[STATE] ESI  0x54
[HOOK MOV] @0x010010b0: mov esi, 0xb
[HOOK CMP] @0x010010ca: cmp esi, 0x17
[HOOK MOV] @0x010010d1: mov esi, 0x2e
[HOOK MOV] @0x01000654: mov esi, 0x1d
[HOOK CMP] @0x0100066e: cmp esi, 0x3b
[STATE] ESI  0x2D
[HOOK MOV] @0x01001487: mov esi, 0x18
[HOOK CMP] @0x010014a1: cmp esi, 0x31
[STATE] ESI  0x36
[HOOK MOV] @0x010004a6: mov esi, 0x1f
[HOOK MOV] @0x010004ab: mov esi, 0xae4c415d
[HOOK CMP] @0x010004d4: cmp esi, 0x3f
[STATE] ESI  0x12
[HOOK MOV] @0x01001286: mov esi, 0x15
[HOOK CMP] @0x010012a0: cmp esi, 0x2b
[STATE] ESI  0x40
[HOOK MOV] @0x01001052: mov esi, 0xe
[HOOK CMP] @0x0100106c: cmp esi, 0x1d
[STATE] ESI  0x0E
[HOOK MOV] @0x01000d5b: mov esi, 0x2a
[HOOK CMP] @0x01000d75: cmp esi, 0x55
[STATE] ESI  0x39
[HOOK MOV] @0x01000f3b: mov esi, 0x14
[HOOK CMP] @0x01000f55: cmp esi, 0x29
[STATE] ESI  0x0F
[HOOK MOV] @0x010005cb: mov esi, 0xb
[HOOK CMP] @0x010005e5: cmp esi, 0x17
[STATE] ESI  0x03
[HOOK MOV] @0x010011f9: mov esi, 0x6
[HOOK CMP] @0x01001213: cmp esi, 0xd
[STATE] ESI  0x27
[HOOK MOV] @0x01000db9: mov esi, 0x1a
[HOOK CMP] @0x01000dd3: cmp esi, 0x35
[STATE] ESI  0x18
[HOOK CMP] @0x010007af: cmp esi, 0x31
[STATE] ESI  0x58
[HOOK MOV] @0x010010df: mov esi, 0x18
[HOOK CMP] @0x010010f9: cmp esi, 0x31
[STATE] ESI  0x3B
[HOOK MOV] @0x0100136f: mov esi, 0x1d
[HOOK CMP] @0x01001389: cmp esi, 0x3b
[STATE] ESI  0x55
[HOOK MOV] @0x0100076b: mov esi, 0x1d
[HOOK CMP] @0x01000785: cmp esi, 0x3b
[STATE] ESI  0x48
[HOOK MOV] @0x01000936: mov esi, 0xe
[HOOK CMP] @0x01000950: cmp esi, 0x1d
[STATE] ESI  0x0A
[HOOK MOV] @0x0100081b: mov esi, 0x3
[HOOK MOV] @0x01000820: mov esi, 0x2f
[HOOK CMP] @0x01000836: cmp esi, 0x7
[STATE] ESI  0x1C
[HOOK MOV] @0x01001257: mov esi, 0x18
[HOOK CMP] @0x01001271: cmp esi, 0x31
[STATE] ESI  0x1B
[HOOK MOV] @0x010008d8: mov esi, 0x8
[HOOK CMP] @0x010008f2: cmp esi, 0x11
[STATE] ESI  0x2F
[HOOK MOV] @0x01000ca7: mov esi, 0x8
[HOOK CMP] @0x01000cc1: cmp esi, 0x11
[STATE] ESI  0x5C
[HOOK MOV] @0x01001228: mov esi, 0x29
[HOOK CMP] @0x01001242: cmp esi, 0x53
[STATE] ESI  0x20
[HOOK MOV] @0x010003b0: mov esi, 0xb
[HOOK MOV] @0x010003b5: mov esi, 0xae4c415d
[HOOK CMP] @0x010003e1: cmp esi, 0x17
[STATE] ESI  0x2B
[HOOK MOV] @0x010006e1: mov esi, 0xd
[HOOK CMP] @0x010006fb: cmp esi, 0x1b
[STATE] ESI  0x50
[HOOK MOV] @0x010005f9: mov esi, 0x12
[HOOK CMP] @0x01000613: cmp esi, 0x25
[STATE] ESI  0x44
[HOOK MOV] @0x010015c7: mov esi, 0xe
[HOOK CMP] @0x010015e1: cmp esi, 0x1d
[STATE] ESI  0x2E
[HOOK MOV] @0x01001597: mov esi, 0x19
[HOOK MOV] @0x0100159c: mov esi, 0x2f
[HOOK CMP] @0x010015b2: cmp esi, 0x33
[STATE] ESI  0x1D
[HOOK MOV] @0x01000a21: mov esi, 0x2
[HOOK CMP] @0x01000a3b: cmp esi, 0x5
[STATE] ESI  0x5E
[HOOK MOV] @0x010014b2: mov esi, 0x17
[HOOK MOV] @0x010014b7: mov esi, 0x2f
[HOOK CMP] @0x010014cd: cmp esi, 0x2f
[STATE] ESI  0x21
[HOOK MOV] @0x01001540: mov esi, 0x11
[HOOK CMP] @0x0100155a: cmp esi, 0x23
[STATE] ESI  0x47
[HOOK MOV] @0x01000cd6: mov esi, 0x28
[HOOK CMP] @0x01000cf0: cmp esi, 0x51
[STATE] ESI  0x17
[HOOK MOV] @0x0100073c: mov esi, 0x11
[HOOK CMP] @0x01000756: cmp esi, 0x23
[STATE] ESI  0x01
[HOOK MOV] @0x01000994: mov esi, 0x4
[HOOK CMP] @0x010009ae: cmp esi, 0x9
[STATE] ESI  0x52
[HOOK MOV] @0x01001625: mov esi, 0x15
[HOOK CMP] @0x0100163f: cmp esi, 0x2b
[STATE] ESI  0x3F
[HOOK MOV] @0x0100110e: mov esi, 0x16
[HOOK CMP] @0x01001128: cmp esi, 0x2d
[STATE] ESI  0x16
[HOOK MOV] @0x01000683: mov esi, 0x2b
[HOOK CMP] @0x0100069d: cmp esi, 0x57
[STATE] ESI  0x4C
[HOOK MOV] @0x010012e0: mov esi, 0x20
[HOOK CMP] @0x010012fc: cmp esi, 0x41
[STATE] ESI  0x0D
[HOOK MOV] @0x01000429: mov esi, 0x13
[HOOK MOV] @0x0100042e: mov esi, 0xae4c415d
[HOOK CMP] @0x01000456: cmp esi, 0x27
[STATE] ESI  0x23
[HOOK MOV] @0x01000edd: mov esi, 0xc
[HOOK CMP] @0x01000ef7: cmp esi, 0x19
[STATE] ESI  0x34
[HOOK MOV] @0x0100070c: mov esi, 0x2d
[HOOK MOV] @0x01000711: mov esi, 0x2f
[HOOK CMP] @0x01000727: cmp esi, 0x5b
[STATE] ESI  0x49
[HOOK MOV] @0x01000907: mov esi, 0x24
[HOOK CMP] @0x01000921: cmp esi, 0x49
[STATE] ESI  0x43
[HOOK MOV] @0x01000f66: mov esi, 0x23
[HOOK MOV] @0x01000f6b: mov esi, 0x2f
[HOOK CMP] @0x01000f81: cmp esi, 0x47
[STATE] ESI  0x28
[HOOK MOV] @0x01000b64: mov esi, 0x16
[HOOK CMP] @0x01000b7e: cmp esi, 0x2d
[STATE] ESI  0x30
[HOOK MOV] @0x01000c78: mov esi, 0x2b
[HOOK CMP] @0x01000c92: cmp esi, 0x57
[STATE] ESI  0x33
[HOOK MOV] @0x010014e2: mov esi, 0x18
[HOOK CMP] @0x010014fc: cmp esi, 0x31
[STATE] ESI  0x4A
[HOOK MOV] @0x01000624: mov esi, 0x1b
[HOOK MOV] @0x01000629: mov esi, 0x2f
[HOOK CMP] @0x0100063f: cmp esi, 0x37
[STATE] ESI  0x0B
[HOOK MOV] @0x010009c3: mov esi, 0x8
[HOOK CMP] @0x010009dd: cmp esi, 0x11
[STATE] ESI  0x4B
[HOOK MOV] @0x010013cd: mov esi, 0x6
[HOOK CMP] @0x010013e7: cmp esi, 0xd
[STATE] ESI  0x32
[HOOK MOV] @0x01000fc5: mov esi, 0x13
[HOOK CMP] @0x01000fdf: cmp esi, 0x27
[STATE] ESI  0x24
[HOOK MOV] @0x01000384: mov esi, 0x26
[HOOK CMP] @0x0100039e: cmp esi, 0x4d
[STATE] ESI  0x51
[HOOK MOV] @0x01000de8: mov esi, 0x15
[HOOK CMP] @0x01000e02: cmp esi, 0x2b
[STATE] ESI  0x4D
[HOOK MOV] @0x0100116c: mov esi, 0x1d
[HOOK CMP] @0x01001186: cmp esi, 0x3b
[STATE] ESI  0x64
[HOOK MOV] @0x01000a50: mov esi, 0x16
[HOOK CMP] @0x01000a6a: cmp esi, 0x2d
[STATE] ESI  0x5A
[HOOK MOV] @0x010004e9: mov esi, 0x4
[HOOK CMP] @0x01000503: cmp esi, 0x9
[STATE] ESI  0x3A
[HOOK MOV] @0x01000965: mov esi, 0x2
[HOOK CMP] @0x0100097f: cmp esi, 0x5
[STATE] ESI  0x04
[HOOK MOV] @0x01000c48: mov esi, 0xa
[HOOK MOV] @0x01000c4d: mov esi, 0x2f
[HOOK CMP] @0x01000c63: cmp esi, 0x15
[STATE] ESI  0x26
[HOOK MOV] @0x0100087a: mov esi, 0x9
[HOOK CMP] @0x01000894: cmp esi, 0x13
[STATE] ESI  0x35
[HOOK MOV] @0x01000b35: mov esi, 0x24
[HOOK CMP] @0x01000b4f: cmp esi, 0x49
[STATE] ESI  0x46
[HOOK MOV] @0x01000f96: mov esi, 0x2c
[HOOK CMP] @0x01000fb0: cmp esi, 0x59
[STATE] ESI  0x60
[HOOK MOV] @0x010015f6: mov esi, 0x2
[HOOK CMP] @0x01001610: cmp esi, 0x5
[STATE] ESI  0x11
[HOOK CMP] @0x01000d46: cmp esi, 0x23
[STATE] ESI  0x07
[HOOK MOV] @0x0100156b: mov esi, 0xf
[HOOK MOV] @0x01001570: mov esi, 0x2f
[HOOK CMP] @0x01001586: cmp esi, 0x1f
[STATE] ESI  0x3E
[HOOK MOV] @0x01000bed: mov esi, 0x22
[HOOK MOV] @0x01000bf2: mov esi, 0x2f
[HOOK CMP] @0x01000c08: cmp esi, 0x45
[STATE] ESI  0x45
[HOOK MOV] @0x01001511: mov esi, 0x2
[HOOK CMP] @0x0100152b: cmp esi, 0x5
[STATE] ESI  0x2A
[HOOK MOV] @0x01000e7f: mov esi, 0x14
[HOOK CMP] @0x01000e99: cmp esi, 0x29
[STATE] ESI  0x19
[HOOK MOV] @0x010012b5: mov esi, 0xd
[HOOK CMP] @0x010012cf: cmp esi, 0x1b
[STATE] ESI  0x4E
[HOOK MOV] @0x0100119b: mov esi, 0x26
[HOOK CMP] @0x010011b5: cmp esi, 0x4d
[STATE] ESI  0x22
[HOOK MOV] @0x0100139e: mov esi, 0x9
[HOOK CMP] @0x010013b8: cmp esi, 0x13
[STATE] ESI  0x5F
[HOOK MOV] @0x01000aaa: mov esi, 0x27
[HOOK MOV] @0x01000aaf: mov esi, 0x2f
[HOOK CMP] @0x01000ac5: cmp esi, 0x4f
[STATE] ESI  0x25
[HOOK MOV] @0x01001311: mov esi, 0x1a
[HOOK CMP] @0x0100132b: cmp esi, 0x35
[STATE] ESI  0x41
[HOOK MOV] @0x01000b05: mov esi, 0x21
[HOOK MOV] @0x01000b0a: mov esi, 0x2f
[HOOK CMP] @0x01000b20: cmp esi, 0x43
[STATE] ESI  0x53
[HOOK MOV] @0x01000f0c: mov esi, 0x2a
[HOOK CMP] @0x01000f26: cmp esi, 0x55
[STATE] ESI  0x2C
[HOOK MOV] @0x01000c1d: mov esi, 0x13
[HOOK CMP] @0x01000c37: cmp esi, 0x27
[STATE] ESI  0x09
[HOOK MOV] @0x010007ef: mov esi, 0x2e
[HOOK MOV] @0x010007f4: mov esi, 0x2f
[HOOK CMP] @0x0100080a: cmp esi, 0x5d
[STATE] ESI  0x3C
[HOOK MOV] @0x01001340: mov esi, 0x18
[HOOK CMP] @0x0100135a: cmp esi, 0x31
[STATE] ESI  0x1E
[STATE] ESI  0x14
[HOOK MOV] @0x0100084b: mov esi, 0x29
[HOOK CMP] @0x01000865: cmp esi, 0x53
[HOOK MOV] @0x01000654: mov esi, 0x1d
[HOOK CMP] @0x0100066e: cmp esi, 0x3b
[HOOK MOV] @0x01000675: mov esi, 0x11

再來要知道他是怎麼進行XOR加密的

def hook_xor_insn(uc, address, size, user_data):
    mc = uc.mem_read(address, size)
    if mc.startswith(b'\x30\x04'):
        eip = address
        ecx = uc.reg_read(UC_X86_REG_ECX)
        esi = uc.reg_read(UC_X86_REG_ESI)
        dest = ecx + esi
        old = uc.mem_read(dest, 1)[0]
        al = uc.reg_read(UC_X86_REG_EAX) & 0xff
        result = old ^ al

        print(f"[XOR @0x{eip:x}] MEM[0x{dest:x}] 0x{old:02x} ^ AL(0x{al:02x}) → 0x{result:02x}")
        after = uc.mem_read(dest,1)[0]
        print(f" 寫入後 MEM = 0x{after:02x}")

def hook_mem_write(uc, access, addr, size, value, user_data):
    print(f"[WRITE] @0x{addr:x} ← 0x{value:02x}")

mu.hook_add(UC_HOOK_CODE, hook_xor_insn,None , 1,0,UC_X86_INS_CPUID)
mu.hook_add(UC_HOOK_MEM_WRITE, hook_mem_write)
Unicorn XOE dump
Unicorn CHAL By:ShallowFeather
Enter the flag: --- Starting emulation ---
[HOOK MOV] @0x010013fc: mov esi, 0x28
[XOR @0x1001410] MEM[0x2003f20] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01001416: cmp esi, 0x51
[XOR @0x1001410] MEM[0x2003f21] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1001410] MEM[0x2003f22] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x33
[XOR @0x1001410] MEM[0x2003f23] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1001410] MEM[0x2003f24] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1001410] MEM[0x2003f25] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x33
[XOR @0x1001410] MEM[0x2003f26] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1001410] MEM[0x2003f27] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1001410] MEM[0x2003f28] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1001410] MEM[0x2003f29] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1001410] MEM[0x2003f2a] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x03
[XOR @0x1001410] MEM[0x2003f2b] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2b ← 0x01
[XOR @0x1001410] MEM[0x2003f2c] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1001410] MEM[0x2003f2d] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2d ← 0x03
[XOR @0x1001410] MEM[0x2003f2e] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1001410] MEM[0x2003f2f] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1001410] MEM[0x2003f30] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x30
[XOR @0x1001410] MEM[0x2003f31] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x30
[XOR @0x1001410] MEM[0x2003f32] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x30
[XOR @0x1001410] MEM[0x2003f33] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x30
[XOR @0x1001410] MEM[0x2003f34] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x30
[XOR @0x1001410] MEM[0x2003f35] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f35 ← 0x30
[XOR @0x1001410] MEM[0x2003f36] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x30
[XOR @0x1001410] MEM[0x2003f37] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x30
[XOR @0x1001410] MEM[0x2003f38] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f38 ← 0x30
[XOR @0x1001410] MEM[0x2003f39] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f39 ← 0x30
[XOR @0x1001410] MEM[0x2003f3a] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3a ← 0x30
[XOR @0x1001410] MEM[0x2003f3b] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3b ← 0x30
[XOR @0x1001410] MEM[0x2003f3c] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1001410] MEM[0x2003f3d] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3d ← 0x30
[XOR @0x1001410] MEM[0x2003f3e] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x30
[XOR @0x1001410] MEM[0x2003f3f] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3f ← 0x30
[XOR @0x1001410] MEM[0x2003f40] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f40 ← 0x30
[XOR @0x1001410] MEM[0x2003f41] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f41 ← 0x30
[XOR @0x1001410] MEM[0x2003f42] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f42 ← 0x30
[XOR @0x1001410] MEM[0x2003f43] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f43 ← 0x30
[XOR @0x1001410] MEM[0x2003f44] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f44 ← 0x30
[XOR @0x1001410] MEM[0x2003f45] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f45 ← 0x30
[XOR @0x1001410] MEM[0x2003f46] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f46 ← 0x30
[XOR @0x1001410] MEM[0x2003f47] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f47 ← 0x30
[XOR @0x1001410] MEM[0x2003f48] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f48 ← 0x30
[STATE] ESI ← 0x61
[HOOK MOV] @0x01001427: mov esi, 0x20
[XOR @0x100143d] MEM[0x2003f20] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x01001443: cmp esi, 0x41
[XOR @0x100143d] MEM[0x2003f21] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x02
[XOR @0x100143d] MEM[0x2003f22] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x03
[XOR @0x100143d] MEM[0x2003f23] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x01
[XOR @0x100143d] MEM[0x2003f24] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x02
[XOR @0x100143d] MEM[0x2003f25] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100143d] MEM[0x2003f26] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x01
[XOR @0x100143d] MEM[0x2003f27] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x33
[XOR @0x100143d] MEM[0x2003f28] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x31
[XOR @0x100143d] MEM[0x2003f29] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x02
[XOR @0x100143d] MEM[0x2003f2a] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x03
[XOR @0x100143d] MEM[0x2003f2b] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x01
[XOR @0x100143d] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x100143d] MEM[0x2003f2d] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x03
[XOR @0x100143d] MEM[0x2003f2e] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x30
[XOR @0x100143d] MEM[0x2003f2f] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x31
[XOR @0x100143d] MEM[0x2003f30] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x32
[XOR @0x100143d] MEM[0x2003f31] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f31 ← 0x33
[XOR @0x100143d] MEM[0x2003f32] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f32 ← 0x31
[XOR @0x100143d] MEM[0x2003f33] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x32
[XOR @0x100143d] MEM[0x2003f34] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f34 ← 0x33
[XOR @0x100143d] MEM[0x2003f35] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x31
[XOR @0x100143d] MEM[0x2003f36] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f36 ← 0x03
[XOR @0x100143d] MEM[0x2003f37] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f37 ← 0x01
[XOR @0x100143d] MEM[0x2003f38] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f38 ← 0x32
[XOR @0x100143d] MEM[0x2003f39] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f39 ← 0x33
[XOR @0x100143d] MEM[0x2003f3a] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f3a ← 0x31
[XOR @0x100143d] MEM[0x2003f3b] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f3b ← 0x32
[XOR @0x100143d] MEM[0x2003f3c] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f3c ← 0x33
[XOR @0x100143d] MEM[0x2003f3d] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f3d ← 0x00
[XOR @0x100143d] MEM[0x2003f3e] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f3e ← 0x01
[XOR @0x100143d] MEM[0x2003f3f] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f3f ← 0x02
[XOR @0x100143d] MEM[0x2003f40] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f40 ← 0x03
[STATE] ESI ← 0x10
[HOOK MOV] @0x01000a7f: mov esi, 0x18
[XOR @0x1000a93] MEM[0x2003f20] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x01000a99: cmp esi, 0x31
[XOR @0x1000a93] MEM[0x2003f21] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1000a93] MEM[0x2003f22] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f22 ← 0x32
[XOR @0x1000a93] MEM[0x2003f23] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x33
[XOR @0x1000a93] MEM[0x2003f24] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x31
[XOR @0x1000a93] MEM[0x2003f25] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1000a93] MEM[0x2003f26] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1000a93] MEM[0x2003f27] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x31
[XOR @0x1000a93] MEM[0x2003f28] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x32
[XOR @0x1000a93] MEM[0x2003f29] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1000a93] MEM[0x2003f2a] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000a93] MEM[0x2003f2b] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x31
[XOR @0x1000a93] MEM[0x2003f2c] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1000a93] MEM[0x2003f2d] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1000a93] MEM[0x2003f2e] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x00
[XOR @0x1000a93] MEM[0x2003f2f] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x01
[XOR @0x1000a93] MEM[0x2003f30] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x02
[XOR @0x1000a93] MEM[0x2003f31] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x33
[XOR @0x1000a93] MEM[0x2003f32] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x31
[XOR @0x1000a93] MEM[0x2003f33] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x32
[XOR @0x1000a93] MEM[0x2003f34] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x33
[XOR @0x1000a93] MEM[0x2003f35] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x31
[XOR @0x1000a93] MEM[0x2003f36] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x03
[XOR @0x1000a93] MEM[0x2003f37] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f37 ← 0x32
[XOR @0x1000a93] MEM[0x2003f38] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f38 ← 0x03
[STATE] ESI ← 0x37
[HOOK MOV] @0x01000eae: mov esi, 0x24
[XOR @0x1000ec2] MEM[0x2003f20] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01000ec8: cmp esi, 0x49
[XOR @0x1000ec2] MEM[0x2003f21] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f22] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000ec2] MEM[0x2003f23] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f23 ← 0x03
[XOR @0x1000ec2] MEM[0x2003f24] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f25] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1000ec2] MEM[0x2003f26] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1000ec2] MEM[0x2003f27] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x31
[XOR @0x1000ec2] MEM[0x2003f28] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x32
[XOR @0x1000ec2] MEM[0x2003f29] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1000ec2] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000ec2] MEM[0x2003f2b] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000ec2] MEM[0x2003f2c] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1000ec2] MEM[0x2003f2d] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x31
[XOR @0x1000ec2] MEM[0x2003f2e] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1000ec2] MEM[0x2003f2f] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x00
[XOR @0x1000ec2] MEM[0x2003f30] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f31] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x33
[XOR @0x1000ec2] MEM[0x2003f32] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x00
[XOR @0x1000ec2] MEM[0x2003f33] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x00
[XOR @0x1000ec2] MEM[0x2003f34] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f35] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x02
[XOR @0x1000ec2] MEM[0x2003f36] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x31
[XOR @0x1000ec2] MEM[0x2003f37] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f38] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f38 ← 0x32
[XOR @0x1000ec2] MEM[0x2003f39] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f39 ← 0x30
[XOR @0x1000ec2] MEM[0x2003f3a] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f3a ← 0x31
[XOR @0x1000ec2] MEM[0x2003f3b] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000ec2] MEM[0x2003f3c] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f3c ← 0x00
[XOR @0x1000ec2] MEM[0x2003f3d] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f3d ← 0x00
[XOR @0x1000ec2] MEM[0x2003f3e] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f3e ← 0x01
[XOR @0x1000ec2] MEM[0x2003f3f] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f3f ← 0x03
[XOR @0x1000ec2] MEM[0x2003f40] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f40 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f41] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f41 ← 0x01
[XOR @0x1000ec2] MEM[0x2003f42] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f42 ← 0x31
[XOR @0x1000ec2] MEM[0x2003f43] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f43 ← 0x02
[XOR @0x1000ec2] MEM[0x2003f44] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f44 ← 0x00
[STATE] ESI ← 0x1F
[HOOK MOV] @0x010007c4: mov esi, 0x1d
[XOR @0x10007d8] MEM[0x2003f20] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x010007de: cmp esi, 0x3b
[XOR @0x10007d8] MEM[0x2003f21] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x00
[XOR @0x10007d8] MEM[0x2003f22] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x01
[XOR @0x10007d8] MEM[0x2003f23] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10007d8] MEM[0x2003f24] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x00
[XOR @0x10007d8] MEM[0x2003f25] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x32
[XOR @0x10007d8] MEM[0x2003f26] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x02
[XOR @0x10007d8] MEM[0x2003f27] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x31
[XOR @0x10007d8] MEM[0x2003f28] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x02
[XOR @0x10007d8] MEM[0x2003f29] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x02
[XOR @0x10007d8] MEM[0x2003f2a] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x03
[XOR @0x10007d8] MEM[0x2003f2b] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x02
[XOR @0x10007d8] MEM[0x2003f2c] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x33
[XOR @0x10007d8] MEM[0x2003f2d] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x31
[XOR @0x10007d8] MEM[0x2003f2e] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x03
[XOR @0x10007d8] MEM[0x2003f2f] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x00
[XOR @0x10007d8] MEM[0x2003f30] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x01
[XOR @0x10007d8] MEM[0x2003f31] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x33
[XOR @0x10007d8] MEM[0x2003f32] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x03
[XOR @0x10007d8] MEM[0x2003f33] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x00
[XOR @0x10007d8] MEM[0x2003f34] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x00
[XOR @0x10007d8] MEM[0x2003f35] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f35 ← 0x00
[XOR @0x10007d8] MEM[0x2003f36] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f36 ← 0x31
[XOR @0x10007d8] MEM[0x2003f37] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f37 ← 0x33
[XOR @0x10007d8] MEM[0x2003f38] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f38 ← 0x30
[XOR @0x10007d8] MEM[0x2003f39] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f39 ← 0x01
[XOR @0x10007d8] MEM[0x2003f3a] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3a ← 0x33
[XOR @0x10007d8] MEM[0x2003f3b] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f3b ← 0x31
[XOR @0x10007d8] MEM[0x2003f3c] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x03
[XOR @0x10007d8] MEM[0x2003f3d] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f3d ← 0x02
[STATE] ESI ← 0x31
[HOOK MOV] @0x01000589: mov esi, 0x12
[HOOK MOV] @0x0100058e: mov esi, 0xae4c415d
[XOR @0x10005b0] MEM[0x2003f20] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x010005b6: cmp esi, 0x25
[XOR @0x10005b0] MEM[0x2003f21] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x00
[XOR @0x10005b0] MEM[0x2003f22] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x01
[XOR @0x10005b0] MEM[0x2003f23] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10005b0] MEM[0x2003f24] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x31
[XOR @0x10005b0] MEM[0x2003f25] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x01
[XOR @0x10005b0] MEM[0x2003f26] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f26 ← 0x32
[XOR @0x10005b0] MEM[0x2003f27] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10005b0] MEM[0x2003f28] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10005b0] MEM[0x2003f29] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x33
[XOR @0x10005b0] MEM[0x2003f2a] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x00
[XOR @0x10005b0] MEM[0x2003f2b] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x00
[XOR @0x10005b0] MEM[0x2003f2c] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x32
[XOR @0x10005b0] MEM[0x2003f2d] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x32
[XOR @0x10005b0] MEM[0x2003f2e] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x02
[XOR @0x10005b0] MEM[0x2003f2f] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x01
[XOR @0x10005b0] MEM[0x2003f30] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x30
[XOR @0x10005b0] MEM[0x2003f31] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x31
[XOR @0x10005b0] MEM[0x2003f32] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f32 ← 0x03
[STATE] ESI ← 0x13
[HOOK MOV] @0x010009f2: mov esi, 0xd
[XOR @0x1000a06] MEM[0x2003f20] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x01000a0c: cmp esi, 0x1b
[XOR @0x1000a06] MEM[0x2003f21] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x02
[XOR @0x1000a06] MEM[0x2003f22] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x00
[XOR @0x1000a06] MEM[0x2003f23] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x32
[XOR @0x1000a06] MEM[0x2003f24] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x00
[XOR @0x1000a06] MEM[0x2003f25] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x02
[XOR @0x1000a06] MEM[0x2003f26] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x32
[XOR @0x1000a06] MEM[0x2003f27] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000a06] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1000a06] MEM[0x2003f29] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1000a06] MEM[0x2003f2a] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000a06] MEM[0x2003f2b] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x30
[XOR @0x1000a06] MEM[0x2003f2c] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1000a06] MEM[0x2003f2d] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f2d ← 0x01
[STATE] ESI ← 0x56
[HOOK MOV] @0x010008a9: mov esi, 0x24
[XOR @0x10008bd] MEM[0x2003f20] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x010008c3: cmp esi, 0x49
[XOR @0x10008bd] MEM[0x2003f21] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x32
[XOR @0x10008bd] MEM[0x2003f22] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x30
[XOR @0x10008bd] MEM[0x2003f23] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10008bd] MEM[0x2003f24] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x30
[XOR @0x10008bd] MEM[0x2003f25] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x02
[XOR @0x10008bd] MEM[0x2003f26] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x32
[XOR @0x10008bd] MEM[0x2003f27] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10008bd] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10008bd] MEM[0x2003f29] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x02
[XOR @0x10008bd] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x10008bd] MEM[0x2003f2b] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2b ← 0x02
[XOR @0x10008bd] MEM[0x2003f2c] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x01
[XOR @0x10008bd] MEM[0x2003f2d] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x31
[XOR @0x10008bd] MEM[0x2003f2e] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f2e ← 0x00
[XOR @0x10008bd] MEM[0x2003f2f] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x31
[XOR @0x10008bd] MEM[0x2003f30] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x32
[XOR @0x10008bd] MEM[0x2003f31] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x03
[XOR @0x10008bd] MEM[0x2003f32] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f32 ← 0x33
[XOR @0x10008bd] MEM[0x2003f33] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x31
[XOR @0x10008bd] MEM[0x2003f34] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f34 ← 0x02
[XOR @0x10008bd] MEM[0x2003f35] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f35 ← 0x33
[XOR @0x10008bd] MEM[0x2003f36] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f36 ← 0x33
[XOR @0x10008bd] MEM[0x2003f37] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f37 ← 0x32
[XOR @0x10008bd] MEM[0x2003f38] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f38 ← 0x01
[XOR @0x10008bd] MEM[0x2003f39] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x01
[XOR @0x10008bd] MEM[0x2003f3a] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f3a ← 0x02
[XOR @0x10008bd] MEM[0x2003f3b] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f3b ← 0x03
[XOR @0x10008bd] MEM[0x2003f3c] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f3c ← 0x00
[XOR @0x10008bd] MEM[0x2003f3d] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f3d ← 0x31
[XOR @0x10008bd] MEM[0x2003f3e] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f3e ← 0x30
[XOR @0x10008bd] MEM[0x2003f3f] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f3f ← 0x01
[XOR @0x10008bd] MEM[0x2003f40] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f40 ← 0x32
[XOR @0x10008bd] MEM[0x2003f41] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f41 ← 0x32
[XOR @0x10008bd] MEM[0x2003f42] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f42 ← 0x03
[XOR @0x10008bd] MEM[0x2003f43] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f43 ← 0x03
[XOR @0x10008bd] MEM[0x2003f44] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f44 ← 0x01
[STATE] ESI ← 0x54
[HOOK MOV] @0x010010b0: mov esi, 0xb
[XOR @0x10010c4] MEM[0x2003f20] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x010010ca: cmp esi, 0x17
[XOR @0x10010c4] MEM[0x2003f21] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x33
[XOR @0x10010c4] MEM[0x2003f22] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x01
[XOR @0x10010c4] MEM[0x2003f23] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10010c4] MEM[0x2003f24] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x01
[XOR @0x10010c4] MEM[0x2003f25] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x30
[XOR @0x10010c4] MEM[0x2003f26] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x31
[XOR @0x10010c4] MEM[0x2003f27] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x03
[XOR @0x10010c4] MEM[0x2003f28] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x00
[XOR @0x10010c4] MEM[0x2003f29] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x00
[XOR @0x10010c4] MEM[0x2003f2a] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x00
[XOR @0x10010c4] MEM[0x2003f2b] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x31
[HOOK MOV] @0x010010d1: mov esi, 0x2e
[HOOK MOV] @0x01000654: mov esi, 0x1d
[XOR @0x1000668] MEM[0x2003f20] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x0100066e: cmp esi, 0x3b
[XOR @0x1000668] MEM[0x2003f21] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f21 ← 0x03
[XOR @0x1000668] MEM[0x2003f22] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x00
[XOR @0x1000668] MEM[0x2003f23] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x30
[XOR @0x1000668] MEM[0x2003f24] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1000668] MEM[0x2003f25] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x33
[XOR @0x1000668] MEM[0x2003f26] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x32
[XOR @0x1000668] MEM[0x2003f27] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x02
[XOR @0x1000668] MEM[0x2003f28] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x30
[XOR @0x1000668] MEM[0x2003f29] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f29 ← 0x30
[XOR @0x1000668] MEM[0x2003f2a] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x30
[XOR @0x1000668] MEM[0x2003f2b] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x01
[XOR @0x1000668] MEM[0x2003f2c] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2c ← 0x01
[XOR @0x1000668] MEM[0x2003f2d] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x31
[XOR @0x1000668] MEM[0x2003f2e] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x00
[XOR @0x1000668] MEM[0x2003f2f] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x31
[XOR @0x1000668] MEM[0x2003f30] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000668] MEM[0x2003f31] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f31 ← 0x03
[XOR @0x1000668] MEM[0x2003f32] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f32 ← 0x32
[XOR @0x1000668] MEM[0x2003f33] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f33 ← 0x32
[XOR @0x1000668] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x1000668] MEM[0x2003f35] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x03
[XOR @0x1000668] MEM[0x2003f36] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f36 ← 0x00
[XOR @0x1000668] MEM[0x2003f37] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x01
[XOR @0x1000668] MEM[0x2003f38] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f38 ← 0x33
[XOR @0x1000668] MEM[0x2003f39] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x03
[XOR @0x1000668] MEM[0x2003f3a] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f3a ← 0x32
[XOR @0x1000668] MEM[0x2003f3b] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000668] MEM[0x2003f3c] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1000668] MEM[0x2003f3d] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f3d ← 0x30
[STATE] ESI ← 0x2D
[HOOK MOV] @0x01001487: mov esi, 0x18
[XOR @0x100149b] MEM[0x2003f20] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x010014a1: cmp esi, 0x31
[XOR @0x100149b] MEM[0x2003f21] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x00
[XOR @0x100149b] MEM[0x2003f22] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x32
[XOR @0x100149b] MEM[0x2003f23] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x03
[XOR @0x100149b] MEM[0x2003f24] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x03
[XOR @0x100149b] MEM[0x2003f25] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100149b] MEM[0x2003f26] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x02
[XOR @0x100149b] MEM[0x2003f27] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f27 ← 0x03
[XOR @0x100149b] MEM[0x2003f28] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f28 ← 0x02
[XOR @0x100149b] MEM[0x2003f29] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f29 ← 0x02
[XOR @0x100149b] MEM[0x2003f2a] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2a ← 0x33
[XOR @0x100149b] MEM[0x2003f2b] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x02
[XOR @0x100149b] MEM[0x2003f2c] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2c ← 0x00
[XOR @0x100149b] MEM[0x2003f2d] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x01
[XOR @0x100149b] MEM[0x2003f2e] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x30
[XOR @0x100149b] MEM[0x2003f2f] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x01
[XOR @0x100149b] MEM[0x2003f30] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x02
[XOR @0x100149b] MEM[0x2003f31] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f31 ← 0x03
[XOR @0x100149b] MEM[0x2003f32] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x32
[XOR @0x100149b] MEM[0x2003f33] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x32
[XOR @0x100149b] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x100149b] MEM[0x2003f35] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f35 ← 0x03
[XOR @0x100149b] MEM[0x2003f36] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x00
[XOR @0x100149b] MEM[0x2003f37] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f37 ← 0x33
[XOR @0x100149b] MEM[0x2003f38] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f38 ← 0x33
[STATE] ESI ← 0x36
[HOOK MOV] @0x010004a6: mov esi, 0x1f
[HOOK MOV] @0x010004ab: mov esi, 0xae4c415d
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x010004d4: cmp esi, 0x3f
[WRITE] @0x2003f21 ← 0x32
[WRITE] @0x2003f22 ← 0x00
[WRITE] @0x2003f23 ← 0x00
[WRITE] @0x2003f24 ← 0x00
[WRITE] @0x2003f25 ← 0x02
[WRITE] @0x2003f26 ← 0x32
[WRITE] @0x2003f27 ← 0x33
[WRITE] @0x2003f28 ← 0x32
[WRITE] @0x2003f29 ← 0x32
[WRITE] @0x2003f2a ← 0x33
[WRITE] @0x2003f2b ← 0x02
[WRITE] @0x2003f2c ← 0x00
[WRITE] @0x2003f2d ← 0x01
[WRITE] @0x2003f2e ← 0x30
[WRITE] @0x2003f2f ← 0x01
[WRITE] @0x2003f30 ← 0x31
[WRITE] @0x2003f31 ← 0x31
[WRITE] @0x2003f32 ← 0x32
[WRITE] @0x2003f33 ← 0x32
[WRITE] @0x2003f34 ← 0x02
[WRITE] @0x2003f35 ← 0x01
[WRITE] @0x2003f36 ← 0x32
[WRITE] @0x2003f37 ← 0x00
[WRITE] @0x2003f38 ← 0x01
[WRITE] @0x2003f39 ← 0x31
[WRITE] @0x2003f3a ← 0x01
[WRITE] @0x2003f3b ← 0x31
[WRITE] @0x2003f3c ← 0x30
[WRITE] @0x2003f3d ← 0x31
[WRITE] @0x2003f3e ← 0x00
[WRITE] @0x2003f3f ← 0x00
[STATE] ESI ← 0x12
[HOOK MOV] @0x01001286: mov esi, 0x15
[XOR @0x100129a] MEM[0x2003f20] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x010012a0: cmp esi, 0x2b
[XOR @0x100129a] MEM[0x2003f21] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x00
[XOR @0x100129a] MEM[0x2003f22] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x00
[XOR @0x100129a] MEM[0x2003f23] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x01
[XOR @0x100129a] MEM[0x2003f24] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x31
[XOR @0x100129a] MEM[0x2003f25] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100129a] MEM[0x2003f26] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x03
[XOR @0x100129a] MEM[0x2003f27] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x03
[XOR @0x100129a] MEM[0x2003f28] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x03
[XOR @0x100129a] MEM[0x2003f29] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x32
[XOR @0x100129a] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x100129a] MEM[0x2003f2b] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x30
[XOR @0x100129a] MEM[0x2003f2c] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f2c ← 0x32
[XOR @0x100129a] MEM[0x2003f2d] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x02
[XOR @0x100129a] MEM[0x2003f2e] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x33
[XOR @0x100129a] MEM[0x2003f2f] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x00
[XOR @0x100129a] MEM[0x2003f30] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x01
[XOR @0x100129a] MEM[0x2003f31] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x01
[XOR @0x100129a] MEM[0x2003f32] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x02
[XOR @0x100129a] MEM[0x2003f33] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x02
[XOR @0x100129a] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x100129a] MEM[0x2003f35] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f35 ← 0x01
[STATE] ESI ← 0x40
[HOOK MOV] @0x01001052: mov esi, 0xe
[XOR @0x1001066] MEM[0x2003f20] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x0100106c: cmp esi, 0x1d
[XOR @0x1001066] MEM[0x2003f21] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1001066] MEM[0x2003f22] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x01
[XOR @0x1001066] MEM[0x2003f23] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1001066] MEM[0x2003f24] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1001066] MEM[0x2003f25] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1001066] MEM[0x2003f26] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1001066] MEM[0x2003f27] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x02
[XOR @0x1001066] MEM[0x2003f28] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1001066] MEM[0x2003f29] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1001066] MEM[0x2003f2a] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x32
[XOR @0x1001066] MEM[0x2003f2b] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f2b ← 0x01
[XOR @0x1001066] MEM[0x2003f2c] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1001066] MEM[0x2003f2d] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1001066] MEM[0x2003f2e] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x03
[STATE] ESI ← 0x0E
[HOOK MOV] @0x01000d5b: mov esi, 0x2a
[XOR @0x1000d6f] MEM[0x2003f20] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x01000d75: cmp esi, 0x55
[XOR @0x1000d6f] MEM[0x2003f21] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f22] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f23] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f24] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1000d6f] MEM[0x2003f25] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f26] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f27] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1000d6f] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1000d6f] MEM[0x2003f29] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f2a] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x32
[XOR @0x1000d6f] MEM[0x2003f2b] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x00
[XOR @0x1000d6f] MEM[0x2003f2c] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x30
[XOR @0x1000d6f] MEM[0x2003f2d] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x02
[XOR @0x1000d6f] MEM[0x2003f2e] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x02
[XOR @0x1000d6f] MEM[0x2003f2f] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x32
[XOR @0x1000d6f] MEM[0x2003f30] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f31] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1000d6f] MEM[0x2003f32] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f33] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f33 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f34] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x30
[XOR @0x1000d6f] MEM[0x2003f35] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f35 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f36] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f36 ← 0x03
[XOR @0x1000d6f] MEM[0x2003f37] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f38] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f38 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f39] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f39 ← 0x01
[XOR @0x1000d6f] MEM[0x2003f3a] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x01
[XOR @0x1000d6f] MEM[0x2003f3b] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f3b ← 0x32
[XOR @0x1000d6f] MEM[0x2003f3c] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1000d6f] MEM[0x2003f3d] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f3d ← 0x30
[XOR @0x1000d6f] MEM[0x2003f3e] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x01
[XOR @0x1000d6f] MEM[0x2003f3f] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f3f ← 0x01
[XOR @0x1000d6f] MEM[0x2003f40] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f40 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f41] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f41 ← 0x02
[XOR @0x1000d6f] MEM[0x2003f42] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f42 ← 0x33
[XOR @0x1000d6f] MEM[0x2003f43] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f43 ← 0x02
[XOR @0x1000d6f] MEM[0x2003f44] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f44 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f45] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f45 ← 0x30
[XOR @0x1000d6f] MEM[0x2003f46] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f46 ← 0x32
[XOR @0x1000d6f] MEM[0x2003f47] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f47 ← 0x03
[XOR @0x1000d6f] MEM[0x2003f48] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f48 ← 0x32
[XOR @0x1000d6f] MEM[0x2003f49] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f49 ← 0x00
[XOR @0x1000d6f] MEM[0x2003f4a] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f4a ← 0x30
[STATE] ESI ← 0x39
[HOOK MOV] @0x01000f3b: mov esi, 0x14
[XOR @0x1000f4f] MEM[0x2003f20] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01000f55: cmp esi, 0x29
[XOR @0x1000f4f] MEM[0x2003f21] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000f4f] MEM[0x2003f22] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000f4f] MEM[0x2003f23] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000f4f] MEM[0x2003f24] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1000f4f] MEM[0x2003f25] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1000f4f] MEM[0x2003f26] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1000f4f] MEM[0x2003f27] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x31
[XOR @0x1000f4f] MEM[0x2003f28] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1000f4f] MEM[0x2003f29] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x31
[XOR @0x1000f4f] MEM[0x2003f2a] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000f4f] MEM[0x2003f2b] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x01
[XOR @0x1000f4f] MEM[0x2003f2c] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x30
[XOR @0x1000f4f] MEM[0x2003f2d] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x00
[XOR @0x1000f4f] MEM[0x2003f2e] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2e ← 0x31
[XOR @0x1000f4f] MEM[0x2003f2f] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1000f4f] MEM[0x2003f30] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1000f4f] MEM[0x2003f31] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000f4f] MEM[0x2003f32] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x32
[XOR @0x1000f4f] MEM[0x2003f33] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x03
[XOR @0x1000f4f] MEM[0x2003f34] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f34 ← 0x02
[STATE] ESI ← 0x0F
[HOOK MOV] @0x010005cb: mov esi, 0xb
[XOR @0x10005df] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x010005e5: cmp esi, 0x17
[XOR @0x10005df] MEM[0x2003f21] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x30
[XOR @0x10005df] MEM[0x2003f22] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x02
[XOR @0x10005df] MEM[0x2003f23] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x31
[XOR @0x10005df] MEM[0x2003f24] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x02
[XOR @0x10005df] MEM[0x2003f25] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x00
[XOR @0x10005df] MEM[0x2003f26] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x01
[XOR @0x10005df] MEM[0x2003f27] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x03
[XOR @0x10005df] MEM[0x2003f28] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x02
[XOR @0x10005df] MEM[0x2003f29] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x33
[XOR @0x10005df] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x10005df] MEM[0x2003f2b] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x02
[STATE] ESI ← 0x03
[HOOK MOV] @0x010011f9: mov esi, 0x6
[XOR @0x100120d] MEM[0x2003f20] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01001213: cmp esi, 0xd
[XOR @0x100120d] MEM[0x2003f21] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x33
[XOR @0x100120d] MEM[0x2003f22] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x00
[XOR @0x100120d] MEM[0x2003f23] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x02
[XOR @0x100120d] MEM[0x2003f24] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x31
[XOR @0x100120d] MEM[0x2003f25] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x02
[XOR @0x100120d] MEM[0x2003f26] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x31
[STATE] ESI ← 0x27
[HOOK MOV] @0x01000db9: mov esi, 0x1a
[XOR @0x1000dcd] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000dd3: cmp esi, 0x35
[XOR @0x1000dcd] MEM[0x2003f21] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f21 ← 0x01
[XOR @0x1000dcd] MEM[0x2003f22] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x30
[XOR @0x1000dcd] MEM[0x2003f23] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x32
[XOR @0x1000dcd] MEM[0x2003f24] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x30
[XOR @0x1000dcd] MEM[0x2003f25] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1000dcd] MEM[0x2003f26] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1000dcd] MEM[0x2003f27] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1000dcd] MEM[0x2003f28] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1000dcd] MEM[0x2003f29] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x31
[XOR @0x1000dcd] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000dcd] MEM[0x2003f2b] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000dcd] MEM[0x2003f2c] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000dcd] MEM[0x2003f2d] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f2d ← 0x03
[XOR @0x1000dcd] MEM[0x2003f2e] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1000dcd] MEM[0x2003f2f] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1000dcd] MEM[0x2003f30] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1000dcd] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000dcd] MEM[0x2003f32] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x32
[XOR @0x1000dcd] MEM[0x2003f33] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x03
[XOR @0x1000dcd] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x1000dcd] MEM[0x2003f35] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f35 ← 0x30
[XOR @0x1000dcd] MEM[0x2003f36] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x02
[XOR @0x1000dcd] MEM[0x2003f37] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x30
[XOR @0x1000dcd] MEM[0x2003f38] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f38 ← 0x33
[XOR @0x1000dcd] MEM[0x2003f39] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x31
[XOR @0x1000dcd] MEM[0x2003f3a] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x02
[STATE] ESI ← 0x18
[XOR @0x10007a9] MEM[0x2003f20] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x010007af: cmp esi, 0x31
[XOR @0x10007a9] MEM[0x2003f21] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x30
[XOR @0x10007a9] MEM[0x2003f22] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x32
[XOR @0x10007a9] MEM[0x2003f23] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x00
[XOR @0x10007a9] MEM[0x2003f24] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x00
[XOR @0x10007a9] MEM[0x2003f25] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x33
[XOR @0x10007a9] MEM[0x2003f26] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x30
[XOR @0x10007a9] MEM[0x2003f27] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x00
[XOR @0x10007a9] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10007a9] MEM[0x2003f29] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x33
[XOR @0x10007a9] MEM[0x2003f2a] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x00
[XOR @0x10007a9] MEM[0x2003f2b] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x30
[XOR @0x10007a9] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x10007a9] MEM[0x2003f2d] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x33
[XOR @0x10007a9] MEM[0x2003f2e] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x31
[XOR @0x10007a9] MEM[0x2003f2f] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x33
[XOR @0x10007a9] MEM[0x2003f30] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x03
[XOR @0x10007a9] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x10007a9] MEM[0x2003f32] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x02
[XOR @0x10007a9] MEM[0x2003f33] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x03
[XOR @0x10007a9] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x10007a9] MEM[0x2003f35] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x30
[XOR @0x10007a9] MEM[0x2003f36] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x02
[XOR @0x10007a9] MEM[0x2003f37] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f37 ← 0x33
[XOR @0x10007a9] MEM[0x2003f38] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f38 ← 0x03
[STATE] ESI ← 0x58
[HOOK MOV] @0x010010df: mov esi, 0x18
[XOR @0x10010f3] MEM[0x2003f20] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x010010f9: cmp esi, 0x31
[XOR @0x10010f3] MEM[0x2003f21] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x01
[XOR @0x10010f3] MEM[0x2003f22] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x30
[XOR @0x10010f3] MEM[0x2003f23] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x32
[XOR @0x10010f3] MEM[0x2003f24] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x30
[XOR @0x10010f3] MEM[0x2003f25] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x03
[XOR @0x10010f3] MEM[0x2003f26] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x31
[XOR @0x10010f3] MEM[0x2003f27] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f27 ← 0x01
[XOR @0x10010f3] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10010f3] MEM[0x2003f29] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x31
[XOR @0x10010f3] MEM[0x2003f2a] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x33
[XOR @0x10010f3] MEM[0x2003f2b] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f2b ← 0x32
[XOR @0x10010f3] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x10010f3] MEM[0x2003f2d] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x03
[XOR @0x10010f3] MEM[0x2003f2e] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x03
[XOR @0x10010f3] MEM[0x2003f2f] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x30
[XOR @0x10010f3] MEM[0x2003f30] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f30 ← 0x31
[XOR @0x10010f3] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x10010f3] MEM[0x2003f32] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x32
[XOR @0x10010f3] MEM[0x2003f33] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x03
[XOR @0x10010f3] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x10010f3] MEM[0x2003f35] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x30
[XOR @0x10010f3] MEM[0x2003f36] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x02
[XOR @0x10010f3] MEM[0x2003f37] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f37 ← 0x33
[XOR @0x10010f3] MEM[0x2003f38] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f38 ← 0x02
[STATE] ESI ← 0x3B
[HOOK MOV] @0x0100136f: mov esi, 0x1d
[XOR @0x1001383] MEM[0x2003f20] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01001389: cmp esi, 0x3b
[XOR @0x1001383] MEM[0x2003f21] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1001383] MEM[0x2003f22] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x31
[XOR @0x1001383] MEM[0x2003f23] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x32
[XOR @0x1001383] MEM[0x2003f24] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1001383] MEM[0x2003f25] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x30
[XOR @0x1001383] MEM[0x2003f26] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x33
[XOR @0x1001383] MEM[0x2003f27] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1001383] MEM[0x2003f28] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1001383] MEM[0x2003f29] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x03
[XOR @0x1001383] MEM[0x2003f2a] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x30
[XOR @0x1001383] MEM[0x2003f2b] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x00
[XOR @0x1001383] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1001383] MEM[0x2003f2d] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1001383] MEM[0x2003f2e] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1001383] MEM[0x2003f2f] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1001383] MEM[0x2003f30] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1001383] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1001383] MEM[0x2003f32] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x02
[XOR @0x1001383] MEM[0x2003f33] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x03
[XOR @0x1001383] MEM[0x2003f34] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x33
[XOR @0x1001383] MEM[0x2003f35] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x02
[XOR @0x1001383] MEM[0x2003f36] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x30
[XOR @0x1001383] MEM[0x2003f37] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f37 ← 0x03
[XOR @0x1001383] MEM[0x2003f38] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f38 ← 0x31
[XOR @0x1001383] MEM[0x2003f39] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f39 ← 0x30
[XOR @0x1001383] MEM[0x2003f3a] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f3a ← 0x03
[XOR @0x1001383] MEM[0x2003f3b] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f3b ← 0x31
[XOR @0x1001383] MEM[0x2003f3c] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f3c ← 0x00
[XOR @0x1001383] MEM[0x2003f3d] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f3d ← 0x30
[STATE] ESI ← 0x55
[HOOK MOV] @0x0100076b: mov esi, 0x1d
[XOR @0x100077f] MEM[0x2003f20] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01000785: cmp esi, 0x3b
[XOR @0x100077f] MEM[0x2003f21] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x01
[XOR @0x100077f] MEM[0x2003f22] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x30
[XOR @0x100077f] MEM[0x2003f23] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x32
[XOR @0x100077f] MEM[0x2003f24] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x30
[XOR @0x100077f] MEM[0x2003f25] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100077f] MEM[0x2003f26] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x31
[XOR @0x100077f] MEM[0x2003f27] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x01
[XOR @0x100077f] MEM[0x2003f28] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x31
[XOR @0x100077f] MEM[0x2003f29] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x31
[XOR @0x100077f] MEM[0x2003f2a] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2a ← 0x33
[XOR @0x100077f] MEM[0x2003f2b] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x32
[XOR @0x100077f] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x100077f] MEM[0x2003f2d] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x03
[XOR @0x100077f] MEM[0x2003f2e] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x03
[XOR @0x100077f] MEM[0x2003f2f] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x30
[XOR @0x100077f] MEM[0x2003f30] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x31
[XOR @0x100077f] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x100077f] MEM[0x2003f32] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x02
[XOR @0x100077f] MEM[0x2003f33] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x02
[XOR @0x100077f] MEM[0x2003f34] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x03
[XOR @0x100077f] MEM[0x2003f35] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f35 ← 0x30
[XOR @0x100077f] MEM[0x2003f36] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f36 ← 0x00
[XOR @0x100077f] MEM[0x2003f37] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f37 ← 0x00
[XOR @0x100077f] MEM[0x2003f38] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f38 ← 0x00
[XOR @0x100077f] MEM[0x2003f39] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f39 ← 0x31
[XOR @0x100077f] MEM[0x2003f3a] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f3a ← 0x32
[XOR @0x100077f] MEM[0x2003f3b] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f3b ← 0x00
[XOR @0x100077f] MEM[0x2003f3c] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x33
[XOR @0x100077f] MEM[0x2003f3d] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f3d ← 0x02
[STATE] ESI ← 0x48
[HOOK MOV] @0x01000936: mov esi, 0xe
[XOR @0x100094a] MEM[0x2003f20] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01000950: cmp esi, 0x1d
[XOR @0x100094a] MEM[0x2003f21] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x31
[XOR @0x100094a] MEM[0x2003f22] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x01
[XOR @0x100094a] MEM[0x2003f23] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x33
[XOR @0x100094a] MEM[0x2003f24] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x32
[XOR @0x100094a] MEM[0x2003f25] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x01
[XOR @0x100094a] MEM[0x2003f26] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x32
[XOR @0x100094a] MEM[0x2003f27] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x31
[XOR @0x100094a] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x100094a] MEM[0x2003f29] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x31
[XOR @0x100094a] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x100094a] MEM[0x2003f2b] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x03
[XOR @0x100094a] MEM[0x2003f2c] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x30
[XOR @0x100094a] MEM[0x2003f2d] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x03
[XOR @0x100094a] MEM[0x2003f2e] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x30
[STATE] ESI ← 0x0A
[HOOK MOV] @0x0100081b: mov esi, 0x3
[HOOK MOV] @0x01000820: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000836: cmp esi, 0x7
[WRITE] @0x2003f21 ← 0x03
[WRITE] @0x2003f22 ← 0x00
[WRITE] @0x2003f23 ← 0x01
[STATE] ESI ← 0x1C
[HOOK MOV] @0x01001257: mov esi, 0x18
[XOR @0x100126b] MEM[0x2003f20] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01001271: cmp esi, 0x31
[XOR @0x100126b] MEM[0x2003f21] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x32
[XOR @0x100126b] MEM[0x2003f22] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x32
[XOR @0x100126b] MEM[0x2003f23] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x01
[XOR @0x100126b] MEM[0x2003f24] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x01
[XOR @0x100126b] MEM[0x2003f25] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100126b] MEM[0x2003f26] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x33
[XOR @0x100126b] MEM[0x2003f27] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x30
[XOR @0x100126b] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x100126b] MEM[0x2003f29] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x33
[XOR @0x100126b] MEM[0x2003f2a] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x00
[XOR @0x100126b] MEM[0x2003f2b] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x01
[XOR @0x100126b] MEM[0x2003f2c] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x30
[XOR @0x100126b] MEM[0x2003f2d] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x33
[XOR @0x100126b] MEM[0x2003f2e] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x02
[XOR @0x100126b] MEM[0x2003f2f] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x33
[XOR @0x100126b] MEM[0x2003f30] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x03
[XOR @0x100126b] MEM[0x2003f31] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x01
[XOR @0x100126b] MEM[0x2003f32] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x32
[XOR @0x100126b] MEM[0x2003f33] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f33 ← 0x02
[XOR @0x100126b] MEM[0x2003f34] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f34 ← 0x03
[XOR @0x100126b] MEM[0x2003f35] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x30
[XOR @0x100126b] MEM[0x2003f36] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x00
[XOR @0x100126b] MEM[0x2003f37] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x30
[XOR @0x100126b] MEM[0x2003f38] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f38 ← 0x32
[STATE] ESI ← 0x1B
[HOOK MOV] @0x010008d8: mov esi, 0x8
[XOR @0x10008ec] MEM[0x2003f20] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x010008f2: cmp esi, 0x11
[XOR @0x10008ec] MEM[0x2003f21] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x01
[XOR @0x10008ec] MEM[0x2003f22] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x32
[XOR @0x10008ec] MEM[0x2003f23] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x00
[XOR @0x10008ec] MEM[0x2003f24] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x31
[XOR @0x10008ec] MEM[0x2003f25] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x30
[XOR @0x10008ec] MEM[0x2003f26] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x31
[XOR @0x10008ec] MEM[0x2003f27] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x03
[XOR @0x10008ec] MEM[0x2003f28] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x32
[STATE] ESI ← 0x2F
[HOOK MOV] @0x01000ca7: mov esi, 0x8
[XOR @0x1000cbb] MEM[0x2003f20] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x01000cc1: cmp esi, 0x11
[XOR @0x1000cbb] MEM[0x2003f21] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1000cbb] MEM[0x2003f22] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x32
[XOR @0x1000cbb] MEM[0x2003f23] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x01
[XOR @0x1000cbb] MEM[0x2003f24] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x01
[XOR @0x1000cbb] MEM[0x2003f25] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1000cbb] MEM[0x2003f26] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x33
[XOR @0x1000cbb] MEM[0x2003f27] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000cbb] MEM[0x2003f28] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x31
[STATE] ESI ← 0x5C
[HOOK MOV] @0x01001228: mov esi, 0x29
[XOR @0x100123c] MEM[0x2003f20] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x01001242: cmp esi, 0x53
[XOR @0x100123c] MEM[0x2003f21] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x02
[XOR @0x100123c] MEM[0x2003f22] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x32
[XOR @0x100123c] MEM[0x2003f23] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x01
[XOR @0x100123c] MEM[0x2003f24] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x01
[XOR @0x100123c] MEM[0x2003f25] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x03
[XOR @0x100123c] MEM[0x2003f26] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x00
[XOR @0x100123c] MEM[0x2003f27] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x32
[XOR @0x100123c] MEM[0x2003f28] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x03
[XOR @0x100123c] MEM[0x2003f29] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x32
[XOR @0x100123c] MEM[0x2003f2a] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x01
[XOR @0x100123c] MEM[0x2003f2b] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x02
[XOR @0x100123c] MEM[0x2003f2c] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x30
[XOR @0x100123c] MEM[0x2003f2d] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x01
[XOR @0x100123c] MEM[0x2003f2e] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2e ← 0x01
[XOR @0x100123c] MEM[0x2003f2f] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x01
[XOR @0x100123c] MEM[0x2003f30] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f30 ← 0x02
[XOR @0x100123c] MEM[0x2003f31] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x03
[XOR @0x100123c] MEM[0x2003f32] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x02
[XOR @0x100123c] MEM[0x2003f33] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f33 ← 0x03
[XOR @0x100123c] MEM[0x2003f34] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f34 ← 0x02
[XOR @0x100123c] MEM[0x2003f35] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f35 ← 0x31
[XOR @0x100123c] MEM[0x2003f36] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x02
[XOR @0x100123c] MEM[0x2003f37] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f37 ← 0x33
[XOR @0x100123c] MEM[0x2003f38] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f38 ← 0x30
[XOR @0x100123c] MEM[0x2003f39] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f39 ← 0x32
[XOR @0x100123c] MEM[0x2003f3a] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f3a ← 0x30
[XOR @0x100123c] MEM[0x2003f3b] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f3b ← 0x31
[XOR @0x100123c] MEM[0x2003f3c] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f3c ← 0x31
[XOR @0x100123c] MEM[0x2003f3d] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f3d ← 0x31
[XOR @0x100123c] MEM[0x2003f3e] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f3e ← 0x31
[XOR @0x100123c] MEM[0x2003f3f] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f3f ← 0x33
[XOR @0x100123c] MEM[0x2003f40] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f40 ← 0x30
[XOR @0x100123c] MEM[0x2003f41] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f41 ← 0x33
[XOR @0x100123c] MEM[0x2003f42] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f42 ← 0x02
[XOR @0x100123c] MEM[0x2003f43] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f43 ← 0x33
[XOR @0x100123c] MEM[0x2003f44] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f44 ← 0x31
[XOR @0x100123c] MEM[0x2003f45] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f45 ← 0x03
[XOR @0x100123c] MEM[0x2003f46] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f46 ← 0x02
[XOR @0x100123c] MEM[0x2003f47] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f47 ← 0x30
[XOR @0x100123c] MEM[0x2003f48] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f48 ← 0x30
[XOR @0x100123c] MEM[0x2003f49] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f49 ← 0x33
[STATE] ESI ← 0x20
[HOOK MOV] @0x010003b0: mov esi, 0xb
[HOOK MOV] @0x010003b5: mov esi, 0xae4c415d
[XOR @0x10003db] MEM[0x2003f20] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x010003e1: cmp esi, 0x17
[XOR @0x10003db] MEM[0x2003f21] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x32
[XOR @0x10003db] MEM[0x2003f22] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x33
[XOR @0x10003db] MEM[0x2003f23] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x00
[XOR @0x10003db] MEM[0x2003f24] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x00
[XOR @0x10003db] MEM[0x2003f25] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x01
[XOR @0x10003db] MEM[0x2003f26] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x03
[XOR @0x10003db] MEM[0x2003f27] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10003db] MEM[0x2003f28] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x00
[XOR @0x10003db] MEM[0x2003f29] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x30
[XOR @0x10003db] MEM[0x2003f2a] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x30
[XOR @0x10003db] MEM[0x2003f2b] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x00
[STATE] ESI ← 0x2B
[HOOK MOV] @0x010006e1: mov esi, 0xd
[XOR @0x10006f5] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x010006fb: cmp esi, 0x1b
[XOR @0x10006f5] MEM[0x2003f21] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x33
[XOR @0x10006f5] MEM[0x2003f22] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x32
[XOR @0x10006f5] MEM[0x2003f23] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10006f5] MEM[0x2003f24] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x03
[XOR @0x10006f5] MEM[0x2003f25] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x03
[XOR @0x10006f5] MEM[0x2003f26] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f26 ← 0x00
[XOR @0x10006f5] MEM[0x2003f27] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x32
[XOR @0x10006f5] MEM[0x2003f28] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10006f5] MEM[0x2003f29] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f29 ← 0x32
[XOR @0x10006f5] MEM[0x2003f2a] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f2a ← 0x03
[XOR @0x10006f5] MEM[0x2003f2b] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x30
[XOR @0x10006f5] MEM[0x2003f2c] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x02
[XOR @0x10006f5] MEM[0x2003f2d] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x31
[STATE] ESI ← 0x50
[HOOK MOV] @0x010005f9: mov esi, 0x12
[XOR @0x100060d] MEM[0x2003f20] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x01000613: cmp esi, 0x25
[XOR @0x100060d] MEM[0x2003f21] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f21 ← 0x30
[XOR @0x100060d] MEM[0x2003f22] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x30
[XOR @0x100060d] MEM[0x2003f23] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x33
[XOR @0x100060d] MEM[0x2003f24] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f24 ← 0x01
[XOR @0x100060d] MEM[0x2003f25] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x30
[XOR @0x100060d] MEM[0x2003f26] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x30
[XOR @0x100060d] MEM[0x2003f27] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f27 ← 0x00
[XOR @0x100060d] MEM[0x2003f28] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x01
[XOR @0x100060d] MEM[0x2003f29] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x03
[XOR @0x100060d] MEM[0x2003f2a] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x32
[XOR @0x100060d] MEM[0x2003f2b] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f2b ← 0x01
[XOR @0x100060d] MEM[0x2003f2c] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x33
[XOR @0x100060d] MEM[0x2003f2d] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x02
[XOR @0x100060d] MEM[0x2003f2e] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2e ← 0x31
[XOR @0x100060d] MEM[0x2003f2f] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x32
[XOR @0x100060d] MEM[0x2003f30] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f30 ← 0x00
[XOR @0x100060d] MEM[0x2003f31] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f31 ← 0x30
[XOR @0x100060d] MEM[0x2003f32] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x33
[STATE] ESI ← 0x44
[HOOK MOV] @0x010015c7: mov esi, 0xe
[XOR @0x10015db] MEM[0x2003f20] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x010015e1: cmp esi, 0x1d
[XOR @0x10015db] MEM[0x2003f21] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x02
[XOR @0x10015db] MEM[0x2003f22] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x30
[XOR @0x10015db] MEM[0x2003f23] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f23 ← 0x03
[XOR @0x10015db] MEM[0x2003f24] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x32
[XOR @0x10015db] MEM[0x2003f25] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x33
[XOR @0x10015db] MEM[0x2003f26] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x32
[XOR @0x10015db] MEM[0x2003f27] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f27 ← 0x31
[XOR @0x10015db] MEM[0x2003f28] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x03
[XOR @0x10015db] MEM[0x2003f29] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x30
[XOR @0x10015db] MEM[0x2003f2a] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x02
[XOR @0x10015db] MEM[0x2003f2b] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x33
[XOR @0x10015db] MEM[0x2003f2c] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x03
[XOR @0x10015db] MEM[0x2003f2d] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x33
[XOR @0x10015db] MEM[0x2003f2e] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x00
[STATE] ESI ← 0x2E
[HOOK MOV] @0x01001597: mov esi, 0x19
[HOOK MOV] @0x0100159c: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x010015b2: cmp esi, 0x33
[WRITE] @0x2003f21 ← 0x32
[WRITE] @0x2003f22 ← 0x01
[WRITE] @0x2003f23 ← 0x32
[WRITE] @0x2003f24 ← 0x03
[WRITE] @0x2003f25 ← 0x02
[WRITE] @0x2003f26 ← 0x01
[WRITE] @0x2003f27 ← 0x01
[WRITE] @0x2003f28 ← 0x30
[WRITE] @0x2003f29 ← 0x32
[WRITE] @0x2003f2a ← 0x31
[WRITE] @0x2003f2b ← 0x02
[WRITE] @0x2003f2c ← 0x00
[WRITE] @0x2003f2d ← 0x31
[WRITE] @0x2003f2e ← 0x30
[WRITE] @0x2003f2f ← 0x02
[WRITE] @0x2003f30 ← 0x33
[WRITE] @0x2003f31 ← 0x00
[WRITE] @0x2003f32 ← 0x33
[WRITE] @0x2003f33 ← 0x03
[WRITE] @0x2003f34 ← 0x02
[WRITE] @0x2003f35 ← 0x31
[WRITE] @0x2003f36 ← 0x33
[WRITE] @0x2003f37 ← 0x01
[WRITE] @0x2003f38 ← 0x31
[WRITE] @0x2003f39 ← 0x00
[STATE] ESI ← 0x1D
[HOOK MOV] @0x01000a21: mov esi, 0x2
[XOR @0x1000a35] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000a3b: cmp esi, 0x5
[XOR @0x1000a35] MEM[0x2003f21] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000a35] MEM[0x2003f22] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x02
[STATE] ESI ← 0x5E
[HOOK MOV] @0x010014b2: mov esi, 0x17
[HOOK MOV] @0x010014b7: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x010014cd: cmp esi, 0x2f
[WRITE] @0x2003f21 ← 0x31
[WRITE] @0x2003f22 ← 0x02
[WRITE] @0x2003f23 ← 0x02
[WRITE] @0x2003f24 ← 0x32
[WRITE] @0x2003f25 ← 0x33
[WRITE] @0x2003f26 ← 0x30
[WRITE] @0x2003f27 ← 0x30
[WRITE] @0x2003f28 ← 0x03
[WRITE] @0x2003f29 ← 0x02
[WRITE] @0x2003f2a ← 0x02
[WRITE] @0x2003f2b ← 0x00
[WRITE] @0x2003f2c ← 0x33
[WRITE] @0x2003f2d ← 0x00
[WRITE] @0x2003f2e ← 0x33
[WRITE] @0x2003f2f ← 0x00
[WRITE] @0x2003f30 ← 0x03
[WRITE] @0x2003f31 ← 0x30
[WRITE] @0x2003f32 ← 0x00
[WRITE] @0x2003f33 ← 0x33
[WRITE] @0x2003f34 ← 0x02
[WRITE] @0x2003f35 ← 0x31
[WRITE] @0x2003f36 ← 0x33
[WRITE] @0x2003f37 ← 0x01
[STATE] ESI ← 0x21
[HOOK MOV] @0x01001540: mov esi, 0x11
[XOR @0x1001554] MEM[0x2003f20] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x0100155a: cmp esi, 0x23
[XOR @0x1001554] MEM[0x2003f21] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1001554] MEM[0x2003f22] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x31
[XOR @0x1001554] MEM[0x2003f23] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1001554] MEM[0x2003f24] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x03
[XOR @0x1001554] MEM[0x2003f25] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1001554] MEM[0x2003f26] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1001554] MEM[0x2003f27] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1001554] MEM[0x2003f28] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x03
[XOR @0x1001554] MEM[0x2003f29] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1001554] MEM[0x2003f2a] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1001554] MEM[0x2003f2b] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x31
[XOR @0x1001554] MEM[0x2003f2c] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1001554] MEM[0x2003f2d] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2d ← 0x31
[XOR @0x1001554] MEM[0x2003f2e] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x00
[XOR @0x1001554] MEM[0x2003f2f] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1001554] MEM[0x2003f30] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f30 ← 0x30
[XOR @0x1001554] MEM[0x2003f31] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f31 ← 0x32
[STATE] ESI ← 0x47
[HOOK MOV] @0x01000cd6: mov esi, 0x28
[XOR @0x1000cea] MEM[0x2003f20] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01000cf0: cmp esi, 0x51
[XOR @0x1000cea] MEM[0x2003f21] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x02
[XOR @0x1000cea] MEM[0x2003f22] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x01
[XOR @0x1000cea] MEM[0x2003f23] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000cea] MEM[0x2003f24] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f24 ← 0x03
[XOR @0x1000cea] MEM[0x2003f25] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1000cea] MEM[0x2003f26] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1000cea] MEM[0x2003f27] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000cea] MEM[0x2003f28] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1000cea] MEM[0x2003f29] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x33
[XOR @0x1000cea] MEM[0x2003f2a] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x33
[XOR @0x1000cea] MEM[0x2003f2b] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000cea] MEM[0x2003f2c] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000cea] MEM[0x2003f2d] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x00
[XOR @0x1000cea] MEM[0x2003f2e] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1000cea] MEM[0x2003f2f] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x31
[XOR @0x1000cea] MEM[0x2003f30] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x03
[XOR @0x1000cea] MEM[0x2003f31] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000cea] MEM[0x2003f32] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x32
[XOR @0x1000cea] MEM[0x2003f33] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f33 ← 0x31
[XOR @0x1000cea] MEM[0x2003f34] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x02
[XOR @0x1000cea] MEM[0x2003f35] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x01
[XOR @0x1000cea] MEM[0x2003f36] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f36 ← 0x02
[XOR @0x1000cea] MEM[0x2003f37] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f37 ← 0x02
[XOR @0x1000cea] MEM[0x2003f38] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f38 ← 0x30
[XOR @0x1000cea] MEM[0x2003f39] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f39 ← 0x32
[XOR @0x1000cea] MEM[0x2003f3a] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f3a ← 0x01
[XOR @0x1000cea] MEM[0x2003f3b] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000cea] MEM[0x2003f3c] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1000cea] MEM[0x2003f3d] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3d ← 0x33
[XOR @0x1000cea] MEM[0x2003f3e] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3e ← 0x33
[XOR @0x1000cea] MEM[0x2003f3f] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f3f ← 0x03
[XOR @0x1000cea] MEM[0x2003f40] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f40 ← 0x02
[XOR @0x1000cea] MEM[0x2003f41] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f41 ← 0x32
[XOR @0x1000cea] MEM[0x2003f42] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f42 ← 0x31
[XOR @0x1000cea] MEM[0x2003f43] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f43 ← 0x03
[XOR @0x1000cea] MEM[0x2003f44] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f44 ← 0x02
[XOR @0x1000cea] MEM[0x2003f45] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f45 ← 0x30
[XOR @0x1000cea] MEM[0x2003f46] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f46 ← 0x01
[XOR @0x1000cea] MEM[0x2003f47] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f47 ← 0x32
[XOR @0x1000cea] MEM[0x2003f48] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f48 ← 0x02
[STATE] ESI ← 0x17
[HOOK MOV] @0x0100073c: mov esi, 0x11
[XOR @0x1000750] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000756: cmp esi, 0x23
[XOR @0x1000750] MEM[0x2003f21] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x30
[XOR @0x1000750] MEM[0x2003f22] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x30
[XOR @0x1000750] MEM[0x2003f23] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x02
[XOR @0x1000750] MEM[0x2003f24] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f24 ← 0x02
[XOR @0x1000750] MEM[0x2003f25] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x02
[XOR @0x1000750] MEM[0x2003f26] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x33
[XOR @0x1000750] MEM[0x2003f27] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x00
[XOR @0x1000750] MEM[0x2003f28] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x33
[XOR @0x1000750] MEM[0x2003f29] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1000750] MEM[0x2003f2a] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000750] MEM[0x2003f2b] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x02
[XOR @0x1000750] MEM[0x2003f2c] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x31
[XOR @0x1000750] MEM[0x2003f2d] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1000750] MEM[0x2003f2e] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x33
[XOR @0x1000750] MEM[0x2003f2f] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1000750] MEM[0x2003f30] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1000750] MEM[0x2003f31] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x30
[STATE] ESI ← 0x01
[HOOK MOV] @0x01000994: mov esi, 0x4
[XOR @0x10009a8] MEM[0x2003f20] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x010009ae: cmp esi, 0x9
[XOR @0x10009a8] MEM[0x2003f21] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x32
[XOR @0x10009a8] MEM[0x2003f22] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x03
[XOR @0x10009a8] MEM[0x2003f23] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10009a8] MEM[0x2003f24] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x31
[STATE] ESI ← 0x52
[HOOK MOV] @0x01001625: mov esi, 0x15
[XOR @0x1001639] MEM[0x2003f20] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x0100163f: cmp esi, 0x2b
[XOR @0x1001639] MEM[0x2003f21] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x30
[XOR @0x1001639] MEM[0x2003f22] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f22 ← 0x01
[XOR @0x1001639] MEM[0x2003f23] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x32
[XOR @0x1001639] MEM[0x2003f24] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x03
[XOR @0x1001639] MEM[0x2003f25] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1001639] MEM[0x2003f26] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1001639] MEM[0x2003f27] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1001639] MEM[0x2003f28] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x00
[XOR @0x1001639] MEM[0x2003f29] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x01
[XOR @0x1001639] MEM[0x2003f2a] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x03
[XOR @0x1001639] MEM[0x2003f2b] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x00
[XOR @0x1001639] MEM[0x2003f2c] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2c ← 0x03
[XOR @0x1001639] MEM[0x2003f2d] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x02
[XOR @0x1001639] MEM[0x2003f2e] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1001639] MEM[0x2003f2f] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x31
[XOR @0x1001639] MEM[0x2003f30] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1001639] MEM[0x2003f31] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1001639] MEM[0x2003f32] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x00
[XOR @0x1001639] MEM[0x2003f33] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f33 ← 0x33
[XOR @0x1001639] MEM[0x2003f34] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x31
[XOR @0x1001639] MEM[0x2003f35] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f35 ← 0x31
[STATE] ESI ← 0x3F
[HOOK MOV] @0x0100110e: mov esi, 0x16
[XOR @0x1001122] MEM[0x2003f20] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01001128: cmp esi, 0x2d
[XOR @0x1001122] MEM[0x2003f21] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1001122] MEM[0x2003f22] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x31
[XOR @0x1001122] MEM[0x2003f23] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1001122] MEM[0x2003f24] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f24 ← 0x02
[XOR @0x1001122] MEM[0x2003f25] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x30
[XOR @0x1001122] MEM[0x2003f26] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x30
[XOR @0x1001122] MEM[0x2003f27] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1001122] MEM[0x2003f28] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x33
[XOR @0x1001122] MEM[0x2003f29] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1001122] MEM[0x2003f2a] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x01
[XOR @0x1001122] MEM[0x2003f2b] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1001122] MEM[0x2003f2c] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1001122] MEM[0x2003f2d] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1001122] MEM[0x2003f2e] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x32
[XOR @0x1001122] MEM[0x2003f2f] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x01
[XOR @0x1001122] MEM[0x2003f30] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x00
[XOR @0x1001122] MEM[0x2003f31] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x03
[XOR @0x1001122] MEM[0x2003f32] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x02
[XOR @0x1001122] MEM[0x2003f33] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f33 ← 0x00
[XOR @0x1001122] MEM[0x2003f34] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1001122] MEM[0x2003f35] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x31
[XOR @0x1001122] MEM[0x2003f36] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x02
[STATE] ESI ← 0x16
[HOOK MOV] @0x01000683: mov esi, 0x2b
[XOR @0x1000697] MEM[0x2003f20] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x0100069d: cmp esi, 0x57
[XOR @0x1000697] MEM[0x2003f21] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1000697] MEM[0x2003f22] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x31
[XOR @0x1000697] MEM[0x2003f23] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000697] MEM[0x2003f24] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1000697] MEM[0x2003f25] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x02
[XOR @0x1000697] MEM[0x2003f26] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1000697] MEM[0x2003f27] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1000697] MEM[0x2003f28] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x00
[XOR @0x1000697] MEM[0x2003f29] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x00
[XOR @0x1000697] MEM[0x2003f2a] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000697] MEM[0x2003f2b] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x31
[XOR @0x1000697] MEM[0x2003f2c] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1000697] MEM[0x2003f2d] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000697] MEM[0x2003f2e] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2e ← 0x32
[XOR @0x1000697] MEM[0x2003f2f] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1000697] MEM[0x2003f30] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000697] MEM[0x2003f31] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f31 ← 0x02
[XOR @0x1000697] MEM[0x2003f32] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x30
[XOR @0x1000697] MEM[0x2003f33] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x30
[XOR @0x1000697] MEM[0x2003f34] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x33
[XOR @0x1000697] MEM[0x2003f35] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x33
[XOR @0x1000697] MEM[0x2003f36] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x32
[XOR @0x1000697] MEM[0x2003f37] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f37 ← 0x32
[XOR @0x1000697] MEM[0x2003f38] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f38 ← 0x03
[XOR @0x1000697] MEM[0x2003f39] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f39 ← 0x01
[XOR @0x1000697] MEM[0x2003f3a] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x33
[XOR @0x1000697] MEM[0x2003f3b] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f3b ← 0x01
[XOR @0x1000697] MEM[0x2003f3c] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f3c ← 0x33
[XOR @0x1000697] MEM[0x2003f3d] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f3d ← 0x32
[XOR @0x1000697] MEM[0x2003f3e] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f3e ← 0x00
[XOR @0x1000697] MEM[0x2003f3f] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f3f ← 0x02
[XOR @0x1000697] MEM[0x2003f40] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f40 ← 0x31
[XOR @0x1000697] MEM[0x2003f41] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f41 ← 0x00
[XOR @0x1000697] MEM[0x2003f42] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f42 ← 0x31
[XOR @0x1000697] MEM[0x2003f43] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f43 ← 0x01
[XOR @0x1000697] MEM[0x2003f44] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f44 ← 0x33
[XOR @0x1000697] MEM[0x2003f45] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f45 ← 0x30
[XOR @0x1000697] MEM[0x2003f46] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f46 ← 0x30
[XOR @0x1000697] MEM[0x2003f47] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f47 ← 0x33
[XOR @0x1000697] MEM[0x2003f48] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f48 ← 0x31
[XOR @0x1000697] MEM[0x2003f49] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f49 ← 0x03
[XOR @0x1000697] MEM[0x2003f4a] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f4a ← 0x00
[XOR @0x1000697] MEM[0x2003f4b] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f4b ← 0x33
[STATE] ESI ← 0x4C
[HOOK MOV] @0x010012e0: mov esi, 0x20
[XOR @0x10012f6] MEM[0x2003f20] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x010012fc: cmp esi, 0x41
[XOR @0x10012f6] MEM[0x2003f21] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x32
[XOR @0x10012f6] MEM[0x2003f22] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x00
[XOR @0x10012f6] MEM[0x2003f23] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x01
[XOR @0x10012f6] MEM[0x2003f24] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x00
[XOR @0x10012f6] MEM[0x2003f25] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x32
[XOR @0x10012f6] MEM[0x2003f26] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x31
[XOR @0x10012f6] MEM[0x2003f27] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10012f6] MEM[0x2003f28] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10012f6] MEM[0x2003f29] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f29 ← 0x03
[XOR @0x10012f6] MEM[0x2003f2a] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x00
[XOR @0x10012f6] MEM[0x2003f2b] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x02
[XOR @0x10012f6] MEM[0x2003f2c] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x32
[XOR @0x10012f6] MEM[0x2003f2d] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x01
[XOR @0x10012f6] MEM[0x2003f2e] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2e ← 0x32
[XOR @0x10012f6] MEM[0x2003f2f] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x30
[XOR @0x10012f6] MEM[0x2003f30] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x00
[XOR @0x10012f6] MEM[0x2003f31] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f31 ← 0x02
[XOR @0x10012f6] MEM[0x2003f32] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f32 ← 0x31
[XOR @0x10012f6] MEM[0x2003f33] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x30
[XOR @0x10012f6] MEM[0x2003f34] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x01
[XOR @0x10012f6] MEM[0x2003f35] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x02
[XOR @0x10012f6] MEM[0x2003f36] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f36 ← 0x02
[XOR @0x10012f6] MEM[0x2003f37] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x03
[XOR @0x10012f6] MEM[0x2003f38] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f38 ← 0x00
[XOR @0x10012f6] MEM[0x2003f39] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x01
[XOR @0x10012f6] MEM[0x2003f3a] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f3a ← 0x31
[XOR @0x10012f6] MEM[0x2003f3b] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f3b ← 0x33
[XOR @0x10012f6] MEM[0x2003f3c] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f3c ← 0x32
[XOR @0x10012f6] MEM[0x2003f3d] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f3d ← 0x00
[XOR @0x10012f6] MEM[0x2003f3e] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x30
[XOR @0x10012f6] MEM[0x2003f3f] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f3f ← 0x02
[XOR @0x10012f6] MEM[0x2003f40] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f40 ← 0x33
[STATE] ESI ← 0x0D
[HOOK MOV] @0x01000429: mov esi, 0x13
[HOOK MOV] @0x0100042e: mov esi, 0xae4c415d
[XOR @0x1000450] MEM[0x2003f20] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000456: cmp esi, 0x27
[XOR @0x1000450] MEM[0x2003f21] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x33
[XOR @0x1000450] MEM[0x2003f22] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000450] MEM[0x2003f23] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x03
[XOR @0x1000450] MEM[0x2003f24] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x03
[XOR @0x1000450] MEM[0x2003f25] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x32
[XOR @0x1000450] MEM[0x2003f26] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x30
[XOR @0x1000450] MEM[0x2003f27] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1000450] MEM[0x2003f28] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x02
[XOR @0x1000450] MEM[0x2003f29] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x31
[XOR @0x1000450] MEM[0x2003f2a] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000450] MEM[0x2003f2b] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000450] MEM[0x2003f2c] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x30
[XOR @0x1000450] MEM[0x2003f2d] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x32
[XOR @0x1000450] MEM[0x2003f2e] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2e ← 0x32
[XOR @0x1000450] MEM[0x2003f2f] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x01
[XOR @0x1000450] MEM[0x2003f30] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1000450] MEM[0x2003f31] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1000450] MEM[0x2003f32] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x01
[XOR @0x1000450] MEM[0x2003f33] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x00
[STATE] ESI ← 0x23
[HOOK MOV] @0x01000edd: mov esi, 0xc
[XOR @0x1000ef1] MEM[0x2003f20] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01000ef7: cmp esi, 0x19
[XOR @0x1000ef1] MEM[0x2003f21] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f21 ← 0x01
[XOR @0x1000ef1] MEM[0x2003f22] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x30
[XOR @0x1000ef1] MEM[0x2003f23] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f23 ← 0x02
[XOR @0x1000ef1] MEM[0x2003f24] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f24 ← 0x02
[XOR @0x1000ef1] MEM[0x2003f25] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1000ef1] MEM[0x2003f26] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1000ef1] MEM[0x2003f27] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1000ef1] MEM[0x2003f28] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x03
[XOR @0x1000ef1] MEM[0x2003f29] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x33
[XOR @0x1000ef1] MEM[0x2003f2a] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x02
[XOR @0x1000ef1] MEM[0x2003f2b] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x31
[XOR @0x1000ef1] MEM[0x2003f2c] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x30
[STATE] ESI ← 0x34
[HOOK MOV] @0x0100070c: mov esi, 0x2d
[HOOK MOV] @0x01000711: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01000727: cmp esi, 0x5b
[WRITE] @0x2003f21 ← 0x01
[WRITE] @0x2003f22 ← 0x30
[WRITE] @0x2003f23 ← 0x03
[WRITE] @0x2003f24 ← 0x32
[WRITE] @0x2003f25 ← 0x00
[WRITE] @0x2003f26 ← 0x03
[WRITE] @0x2003f27 ← 0x01
[WRITE] @0x2003f28 ← 0x00
[WRITE] @0x2003f29 ← 0x32
[WRITE] @0x2003f2a ← 0x02
[WRITE] @0x2003f2b ← 0x03
[WRITE] @0x2003f2c ← 0x32
[WRITE] @0x2003f2d ← 0x31
[WRITE] @0x2003f2e ← 0x00
[WRITE] @0x2003f2f ← 0x30
[WRITE] @0x2003f30 ← 0x01
[WRITE] @0x2003f31 ← 0x01
[WRITE] @0x2003f32 ← 0x00
[WRITE] @0x2003f33 ← 0x01
[WRITE] @0x2003f34 ← 0x01
[WRITE] @0x2003f35 ← 0x03
[WRITE] @0x2003f36 ← 0x03
[WRITE] @0x2003f37 ← 0x00
[WRITE] @0x2003f38 ← 0x03
[WRITE] @0x2003f39 ← 0x01
[WRITE] @0x2003f3a ← 0x32
[WRITE] @0x2003f3b ← 0x32
[WRITE] @0x2003f3c ← 0x00
[WRITE] @0x2003f3d ← 0x32
[WRITE] @0x2003f3e ← 0x30
[WRITE] @0x2003f3f ← 0x30
[WRITE] @0x2003f40 ← 0x03
[WRITE] @0x2003f41 ← 0x30
[WRITE] @0x2003f42 ← 0x32
[WRITE] @0x2003f43 ← 0x31
[WRITE] @0x2003f44 ← 0x01
[WRITE] @0x2003f45 ← 0x01
[WRITE] @0x2003f46 ← 0x31
[WRITE] @0x2003f47 ← 0x32
[WRITE] @0x2003f48 ← 0x00
[WRITE] @0x2003f49 ← 0x31
[WRITE] @0x2003f4a ← 0x00
[WRITE] @0x2003f4b ← 0x02
[WRITE] @0x2003f4c ← 0x00
[WRITE] @0x2003f4d ← 0x02
[STATE] ESI ← 0x49
[HOOK MOV] @0x01000907: mov esi, 0x24
[XOR @0x100091b] MEM[0x2003f20] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x01000921: cmp esi, 0x49
[XOR @0x100091b] MEM[0x2003f21] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x00
[XOR @0x100091b] MEM[0x2003f22] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f22 ← 0x01
[XOR @0x100091b] MEM[0x2003f23] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f23 ← 0x31
[XOR @0x100091b] MEM[0x2003f24] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x32
[XOR @0x100091b] MEM[0x2003f25] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x31
[XOR @0x100091b] MEM[0x2003f26] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f26 ← 0x03
[XOR @0x100091b] MEM[0x2003f27] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x03
[XOR @0x100091b] MEM[0x2003f28] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x00
[XOR @0x100091b] MEM[0x2003f29] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x30
[XOR @0x100091b] MEM[0x2003f2a] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2a ← 0x02
[XOR @0x100091b] MEM[0x2003f2b] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x02
[XOR @0x100091b] MEM[0x2003f2c] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x32
[XOR @0x100091b] MEM[0x2003f2d] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x30
[XOR @0x100091b] MEM[0x2003f2e] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x31
[XOR @0x100091b] MEM[0x2003f2f] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x02
[XOR @0x100091b] MEM[0x2003f30] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x30
[XOR @0x100091b] MEM[0x2003f31] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x02
[XOR @0x100091b] MEM[0x2003f32] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x03
[XOR @0x100091b] MEM[0x2003f33] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x01
[XOR @0x100091b] MEM[0x2003f34] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x31
[XOR @0x100091b] MEM[0x2003f35] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f35 ← 0x01
[XOR @0x100091b] MEM[0x2003f36] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x01
[XOR @0x100091b] MEM[0x2003f37] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x32
[XOR @0x100091b] MEM[0x2003f38] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f38 ← 0x33
[XOR @0x100091b] MEM[0x2003f39] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x30
[XOR @0x100091b] MEM[0x2003f3a] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f3a ← 0x30
[XOR @0x100091b] MEM[0x2003f3b] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f3b ← 0x02
[XOR @0x100091b] MEM[0x2003f3c] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x02
[XOR @0x100091b] MEM[0x2003f3d] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f3d ← 0x31
[XOR @0x100091b] MEM[0x2003f3e] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f3e ← 0x31
[XOR @0x100091b] MEM[0x2003f3f] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f3f ← 0x01
[XOR @0x100091b] MEM[0x2003f40] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f40 ← 0x02
[XOR @0x100091b] MEM[0x2003f41] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f41 ← 0x31
[XOR @0x100091b] MEM[0x2003f42] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f42 ← 0x00
[XOR @0x100091b] MEM[0x2003f43] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f43 ← 0x02
[XOR @0x100091b] MEM[0x2003f44] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f44 ← 0x31
[STATE] ESI ← 0x43
[HOOK MOV] @0x01000f66: mov esi, 0x23
[HOOK MOV] @0x01000f6b: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01000f81: cmp esi, 0x47
[WRITE] @0x2003f21 ← 0x31
[WRITE] @0x2003f22 ← 0x00
[WRITE] @0x2003f23 ← 0x00
[WRITE] @0x2003f24 ← 0x00
[WRITE] @0x2003f25 ← 0x31
[WRITE] @0x2003f26 ← 0x32
[WRITE] @0x2003f27 ← 0x03
[WRITE] @0x2003f28 ← 0x02
[WRITE] @0x2003f29 ← 0x30
[WRITE] @0x2003f2a ← 0x00
[WRITE] @0x2003f2b ← 0x02
[WRITE] @0x2003f2c ← 0x31
[WRITE] @0x2003f2d ← 0x01
[WRITE] @0x2003f2e ← 0x31
[WRITE] @0x2003f2f ← 0x02
[WRITE] @0x2003f30 ← 0x30
[WRITE] @0x2003f31 ← 0x33
[WRITE] @0x2003f32 ← 0x31
[WRITE] @0x2003f33 ← 0x02
[WRITE] @0x2003f34 ← 0x33
[WRITE] @0x2003f35 ← 0x31
[WRITE] @0x2003f36 ← 0x01
[WRITE] @0x2003f37 ← 0x30
[WRITE] @0x2003f38 ← 0x02
[WRITE] @0x2003f39 ← 0x31
[WRITE] @0x2003f3a ← 0x01
[WRITE] @0x2003f3b ← 0x00
[WRITE] @0x2003f3c ← 0x32
[WRITE] @0x2003f3d ← 0x02
[WRITE] @0x2003f3e ← 0x00
[WRITE] @0x2003f3f ← 0x03
[WRITE] @0x2003f40 ← 0x31
[WRITE] @0x2003f41 ← 0x00
[WRITE] @0x2003f42 ← 0x01
[WRITE] @0x2003f43 ← 0x32
[STATE] ESI ← 0x28
[HOOK MOV] @0x01000b64: mov esi, 0x16
[XOR @0x1000b78] MEM[0x2003f20] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x02
[HOOK CMP] @0x01000b7e: cmp esi, 0x2d
[XOR @0x1000b78] MEM[0x2003f21] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x01
[XOR @0x1000b78] MEM[0x2003f22] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000b78] MEM[0x2003f23] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1000b78] MEM[0x2003f24] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x01
[XOR @0x1000b78] MEM[0x2003f25] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f25 ← 0x31
[XOR @0x1000b78] MEM[0x2003f26] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1000b78] MEM[0x2003f27] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1000b78] MEM[0x2003f28] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x02
[XOR @0x1000b78] MEM[0x2003f29] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f29 ← 0x33
[XOR @0x1000b78] MEM[0x2003f2a] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1000b78] MEM[0x2003f2b] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x02
[XOR @0x1000b78] MEM[0x2003f2c] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f2c ← 0x30
[XOR @0x1000b78] MEM[0x2003f2d] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1000b78] MEM[0x2003f2e] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x00
[XOR @0x1000b78] MEM[0x2003f2f] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f2f ← 0x03
[XOR @0x1000b78] MEM[0x2003f30] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1000b78] MEM[0x2003f31] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000b78] MEM[0x2003f32] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x31
[XOR @0x1000b78] MEM[0x2003f33] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f33 ← 0x33
[XOR @0x1000b78] MEM[0x2003f34] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x33
[XOR @0x1000b78] MEM[0x2003f35] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x33
[XOR @0x1000b78] MEM[0x2003f36] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x01
[STATE] ESI ← 0x30
[HOOK MOV] @0x01000c78: mov esi, 0x2b
[XOR @0x1000c8c] MEM[0x2003f20] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01000c92: cmp esi, 0x57
[XOR @0x1000c8c] MEM[0x2003f21] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f22] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x00
[XOR @0x1000c8c] MEM[0x2003f23] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f24] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f25] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f25 ← 0x30
[XOR @0x1000c8c] MEM[0x2003f26] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x00
[XOR @0x1000c8c] MEM[0x2003f27] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000c8c] MEM[0x2003f28] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x03
[XOR @0x1000c8c] MEM[0x2003f29] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x03
[XOR @0x1000c8c] MEM[0x2003f2a] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1000c8c] MEM[0x2003f2b] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000c8c] MEM[0x2003f2c] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1000c8c] MEM[0x2003f2d] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x30
[XOR @0x1000c8c] MEM[0x2003f2e] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x31
[XOR @0x1000c8c] MEM[0x2003f2f] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f2f ← 0x31
[XOR @0x1000c8c] MEM[0x2003f30] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000c8c] MEM[0x2003f31] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f32] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x00
[XOR @0x1000c8c] MEM[0x2003f33] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f33 ← 0x02
[XOR @0x1000c8c] MEM[0x2003f34] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f35] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x02
[XOR @0x1000c8c] MEM[0x2003f36] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f37] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f37 ← 0x32
[XOR @0x1000c8c] MEM[0x2003f38] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f38 ← 0x03
[XOR @0x1000c8c] MEM[0x2003f39] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f39 ← 0x33
[XOR @0x1000c8c] MEM[0x2003f3a] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x00
[XOR @0x1000c8c] MEM[0x2003f3b] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f3b ← 0x32
[XOR @0x1000c8c] MEM[0x2003f3c] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f3c ← 0x31
[XOR @0x1000c8c] MEM[0x2003f3d] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f3d ← 0x31
[XOR @0x1000c8c] MEM[0x2003f3e] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x00
[XOR @0x1000c8c] MEM[0x2003f3f] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f3f ← 0x31
[XOR @0x1000c8c] MEM[0x2003f40] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f40 ← 0x00
[XOR @0x1000c8c] MEM[0x2003f41] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f41 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f42] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f42 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f43] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f43 ← 0x03
[XOR @0x1000c8c] MEM[0x2003f44] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f44 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f45] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f45 ← 0x30
[XOR @0x1000c8c] MEM[0x2003f46] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f46 ← 0x30
[XOR @0x1000c8c] MEM[0x2003f47] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f47 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f48] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f48 ← 0x31
[XOR @0x1000c8c] MEM[0x2003f49] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f49 ← 0x01
[XOR @0x1000c8c] MEM[0x2003f4a] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f4a ← 0x30
[XOR @0x1000c8c] MEM[0x2003f4b] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f4b ← 0x33
[STATE] ESI ← 0x33
[HOOK MOV] @0x010014e2: mov esi, 0x18
[XOR @0x10014f6] MEM[0x2003f20] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x010014fc: cmp esi, 0x31
[XOR @0x10014f6] MEM[0x2003f21] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x32
[XOR @0x10014f6] MEM[0x2003f22] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x00
[XOR @0x10014f6] MEM[0x2003f23] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x03
[XOR @0x10014f6] MEM[0x2003f24] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x30
[XOR @0x10014f6] MEM[0x2003f25] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x01
[XOR @0x10014f6] MEM[0x2003f26] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x00
[XOR @0x10014f6] MEM[0x2003f27] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x01
[XOR @0x10014f6] MEM[0x2003f28] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x03
[XOR @0x10014f6] MEM[0x2003f29] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x32
[XOR @0x10014f6] MEM[0x2003f2a] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x30
[XOR @0x10014f6] MEM[0x2003f2b] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x31
[XOR @0x10014f6] MEM[0x2003f2c] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x02
[XOR @0x10014f6] MEM[0x2003f2d] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f2d ← 0x00
[XOR @0x10014f6] MEM[0x2003f2e] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x01
[XOR @0x10014f6] MEM[0x2003f2f] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x00
[XOR @0x10014f6] MEM[0x2003f30] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x03
[XOR @0x10014f6] MEM[0x2003f31] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x30
[XOR @0x10014f6] MEM[0x2003f32] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x30
[XOR @0x10014f6] MEM[0x2003f33] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f33 ← 0x31
[XOR @0x10014f6] MEM[0x2003f34] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x01
[XOR @0x10014f6] MEM[0x2003f35] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f35 ← 0x00
[XOR @0x10014f6] MEM[0x2003f36] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x01
[XOR @0x10014f6] MEM[0x2003f37] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x31
[XOR @0x10014f6] MEM[0x2003f38] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f38 ← 0x31
[STATE] ESI ← 0x4A
[HOOK MOV] @0x01000624: mov esi, 0x1b
[HOOK MOV] @0x01000629: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x0100063f: cmp esi, 0x37
[WRITE] @0x2003f21 ← 0x03
[WRITE] @0x2003f22 ← 0x31
[WRITE] @0x2003f23 ← 0x03
[WRITE] @0x2003f24 ← 0x01
[WRITE] @0x2003f25 ← 0x01
[WRITE] @0x2003f26 ← 0x31
[WRITE] @0x2003f27 ← 0x00
[WRITE] @0x2003f28 ← 0x00
[WRITE] @0x2003f29 ← 0x03
[WRITE] @0x2003f2a ← 0x00
[WRITE] @0x2003f2b ← 0x01
[WRITE] @0x2003f2c ← 0x33
[WRITE] @0x2003f2d ← 0x31
[WRITE] @0x2003f2e ← 0x00
[WRITE] @0x2003f2f ← 0x30
[WRITE] @0x2003f30 ← 0x30
[WRITE] @0x2003f31 ← 0x30
[WRITE] @0x2003f32 ← 0x32
[WRITE] @0x2003f33 ← 0x31
[WRITE] @0x2003f34 ← 0x30
[WRITE] @0x2003f35 ← 0x03
[WRITE] @0x2003f36 ← 0x30
[WRITE] @0x2003f37 ← 0x32
[WRITE] @0x2003f38 ← 0x30
[WRITE] @0x2003f39 ← 0x32
[WRITE] @0x2003f3a ← 0x31
[WRITE] @0x2003f3b ← 0x32
[STATE] ESI ← 0x0B
[HOOK MOV] @0x010009c3: mov esi, 0x8
[XOR @0x10009d7] MEM[0x2003f20] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x010009dd: cmp esi, 0x11
[XOR @0x10009d7] MEM[0x2003f21] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x00
[XOR @0x10009d7] MEM[0x2003f22] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x31
[XOR @0x10009d7] MEM[0x2003f23] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10009d7] MEM[0x2003f24] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x32
[XOR @0x10009d7] MEM[0x2003f25] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x30
[XOR @0x10009d7] MEM[0x2003f26] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x31
[XOR @0x10009d7] MEM[0x2003f27] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10009d7] MEM[0x2003f28] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f28 ← 0x30
[STATE] ESI ← 0x4B
[HOOK MOV] @0x010013cd: mov esi, 0x6
[XOR @0x10013e1] MEM[0x2003f20] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x010013e7: cmp esi, 0xd
[XOR @0x10013e1] MEM[0x2003f21] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x30
[XOR @0x10013e1] MEM[0x2003f22] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x01
[XOR @0x10013e1] MEM[0x2003f23] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x01
[XOR @0x10013e1] MEM[0x2003f24] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x32
[XOR @0x10013e1] MEM[0x2003f25] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f25 ← 0x31
[XOR @0x10013e1] MEM[0x2003f26] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x02
[STATE] ESI ← 0x32
[HOOK MOV] @0x01000fc5: mov esi, 0x13
[XOR @0x1000fd9] MEM[0x2003f20] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01000fdf: cmp esi, 0x27
[XOR @0x1000fd9] MEM[0x2003f21] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000fd9] MEM[0x2003f22] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000fd9] MEM[0x2003f23] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1000fd9] MEM[0x2003f24] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x00
[XOR @0x1000fd9] MEM[0x2003f25] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1000fd9] MEM[0x2003f26] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f26 ← 0x30
[XOR @0x1000fd9] MEM[0x2003f27] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1000fd9] MEM[0x2003f28] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f28 ← 0x02
[XOR @0x1000fd9] MEM[0x2003f29] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x32
[XOR @0x1000fd9] MEM[0x2003f2a] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1000fd9] MEM[0x2003f2b] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x01
[XOR @0x1000fd9] MEM[0x2003f2c] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000fd9] MEM[0x2003f2d] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x31
[XOR @0x1000fd9] MEM[0x2003f2e] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2e ← 0x31
[XOR @0x1000fd9] MEM[0x2003f2f] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x31
[XOR @0x1000fd9] MEM[0x2003f30] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x33
[XOR @0x1000fd9] MEM[0x2003f31] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000fd9] MEM[0x2003f32] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x02
[XOR @0x1000fd9] MEM[0x2003f33] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f33 ← 0x01
[STATE] ESI ← 0x24
[HOOK MOV] @0x01000384: mov esi, 0x26
[XOR @0x1000398] MEM[0x2003f20] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x0100039e: cmp esi, 0x4d
[XOR @0x1000398] MEM[0x2003f21] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1000398] MEM[0x2003f22] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x33
[XOR @0x1000398] MEM[0x2003f23] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x30
[XOR @0x1000398] MEM[0x2003f24] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x30
[XOR @0x1000398] MEM[0x2003f25] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x32
[XOR @0x1000398] MEM[0x2003f26] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x30
[XOR @0x1000398] MEM[0x2003f27] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1000398] MEM[0x2003f28] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x02
[XOR @0x1000398] MEM[0x2003f29] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x33
[XOR @0x1000398] MEM[0x2003f2a] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000398] MEM[0x2003f2b] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000398] MEM[0x2003f2c] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1000398] MEM[0x2003f2d] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000398] MEM[0x2003f2e] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1000398] MEM[0x2003f2f] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2f ← 0x01
[XOR @0x1000398] MEM[0x2003f30] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f30 ← 0x30
[XOR @0x1000398] MEM[0x2003f31] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x03
[XOR @0x1000398] MEM[0x2003f32] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x31
[XOR @0x1000398] MEM[0x2003f33] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x01
[XOR @0x1000398] MEM[0x2003f34] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f34 ← 0x02
[XOR @0x1000398] MEM[0x2003f35] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f35 ← 0x31
[XOR @0x1000398] MEM[0x2003f36] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f36 ← 0x31
[XOR @0x1000398] MEM[0x2003f37] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x31
[XOR @0x1000398] MEM[0x2003f38] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f38 ← 0x31
[XOR @0x1000398] MEM[0x2003f39] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f39 ← 0x02
[XOR @0x1000398] MEM[0x2003f3a] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f3a ← 0x32
[XOR @0x1000398] MEM[0x2003f3b] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f3b ← 0x03
[XOR @0x1000398] MEM[0x2003f3c] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1000398] MEM[0x2003f3d] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3d ← 0x33
[XOR @0x1000398] MEM[0x2003f3e] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x31
[XOR @0x1000398] MEM[0x2003f3f] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f3f ← 0x00
[XOR @0x1000398] MEM[0x2003f40] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f40 ← 0x31
[XOR @0x1000398] MEM[0x2003f41] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f41 ← 0x00
[XOR @0x1000398] MEM[0x2003f42] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f42 ← 0x03
[XOR @0x1000398] MEM[0x2003f43] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f43 ← 0x31
[XOR @0x1000398] MEM[0x2003f44] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f44 ← 0x32
[XOR @0x1000398] MEM[0x2003f45] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f45 ← 0x00
[XOR @0x1000398] MEM[0x2003f46] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f46 ← 0x03
[STATE] ESI ← 0x51
[HOOK MOV] @0x01000de8: mov esi, 0x15
[XOR @0x1000dfc] MEM[0x2003f20] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000e02: cmp esi, 0x2b
[XOR @0x1000dfc] MEM[0x2003f21] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000dfc] MEM[0x2003f22] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000dfc] MEM[0x2003f23] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x01
[XOR @0x1000dfc] MEM[0x2003f24] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1000dfc] MEM[0x2003f25] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1000dfc] MEM[0x2003f26] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x33
[XOR @0x1000dfc] MEM[0x2003f27] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x33
[XOR @0x1000dfc] MEM[0x2003f28] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1000dfc] MEM[0x2003f29] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1000dfc] MEM[0x2003f2a] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000dfc] MEM[0x2003f2b] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x03
[XOR @0x1000dfc] MEM[0x2003f2c] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1000dfc] MEM[0x2003f2d] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x02
[XOR @0x1000dfc] MEM[0x2003f2e] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2e ← 0x32
[XOR @0x1000dfc] MEM[0x2003f2f] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1000dfc] MEM[0x2003f30] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x30
[XOR @0x1000dfc] MEM[0x2003f31] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f31 ← 0x00
[XOR @0x1000dfc] MEM[0x2003f32] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x00
[XOR @0x1000dfc] MEM[0x2003f33] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x30
[XOR @0x1000dfc] MEM[0x2003f34] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x03
[XOR @0x1000dfc] MEM[0x2003f35] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x01
[STATE] ESI ← 0x4D
[HOOK MOV] @0x0100116c: mov esi, 0x1d
[XOR @0x1001180] MEM[0x2003f20] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01001186: cmp esi, 0x3b
[XOR @0x1001180] MEM[0x2003f21] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1001180] MEM[0x2003f22] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1001180] MEM[0x2003f23] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x30
[XOR @0x1001180] MEM[0x2003f24] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1001180] MEM[0x2003f25] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1001180] MEM[0x2003f26] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x02
[XOR @0x1001180] MEM[0x2003f27] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1001180] MEM[0x2003f28] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1001180] MEM[0x2003f29] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f29 ← 0x01
[XOR @0x1001180] MEM[0x2003f2a] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1001180] MEM[0x2003f2b] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1001180] MEM[0x2003f2c] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1001180] MEM[0x2003f2d] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x32
[XOR @0x1001180] MEM[0x2003f2e] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f2e ← 0x01
[XOR @0x1001180] MEM[0x2003f2f] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1001180] MEM[0x2003f30] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1001180] MEM[0x2003f31] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f31 ← 0x00
[XOR @0x1001180] MEM[0x2003f32] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f32 ← 0x03
[XOR @0x1001180] MEM[0x2003f33] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x01
[XOR @0x1001180] MEM[0x2003f34] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1001180] MEM[0x2003f35] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f35 ← 0x31
[XOR @0x1001180] MEM[0x2003f36] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f36 ← 0x03
[XOR @0x1001180] MEM[0x2003f37] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f37 ← 0x32
[XOR @0x1001180] MEM[0x2003f38] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f38 ← 0x33
[XOR @0x1001180] MEM[0x2003f39] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f39 ← 0x03
[XOR @0x1001180] MEM[0x2003f3a] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f3a ← 0x03
[XOR @0x1001180] MEM[0x2003f3b] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f3b ← 0x02
[XOR @0x1001180] MEM[0x2003f3c] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f3c ← 0x01
[XOR @0x1001180] MEM[0x2003f3d] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f3d ← 0x01
[STATE] ESI ← 0x64
[HOOK MOV] @0x01000a50: mov esi, 0x16
[XOR @0x1000a64] MEM[0x2003f20] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01000a6a: cmp esi, 0x2d
[XOR @0x1000a64] MEM[0x2003f21] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x03
[XOR @0x1000a64] MEM[0x2003f22] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x31
[XOR @0x1000a64] MEM[0x2003f23] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x33
[XOR @0x1000a64] MEM[0x2003f24] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x31
[XOR @0x1000a64] MEM[0x2003f25] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1000a64] MEM[0x2003f26] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f26 ← 0x03
[XOR @0x1000a64] MEM[0x2003f27] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x00
[XOR @0x1000a64] MEM[0x2003f28] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x00
[XOR @0x1000a64] MEM[0x2003f29] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x01
[XOR @0x1000a64] MEM[0x2003f2a] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x00
[XOR @0x1000a64] MEM[0x2003f2b] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x32
[XOR @0x1000a64] MEM[0x2003f2c] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x30
[XOR @0x1000a64] MEM[0x2003f2d] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2d ← 0x03
[XOR @0x1000a64] MEM[0x2003f2e] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f2e ← 0x33
[XOR @0x1000a64] MEM[0x2003f2f] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1000a64] MEM[0x2003f30] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1000a64] MEM[0x2003f31] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1000a64] MEM[0x2003f32] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f32 ← 0x32
[XOR @0x1000a64] MEM[0x2003f33] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x00
[XOR @0x1000a64] MEM[0x2003f34] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x31
[XOR @0x1000a64] MEM[0x2003f35] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f35 ← 0x02
[XOR @0x1000a64] MEM[0x2003f36] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x03
[STATE] ESI ← 0x5A
[HOOK MOV] @0x010004e9: mov esi, 0x4
[XOR @0x10004fd] MEM[0x2003f20] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01000503: cmp esi, 0x9
[XOR @0x10004fd] MEM[0x2003f21] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x02
[XOR @0x10004fd] MEM[0x2003f22] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x32
[XOR @0x10004fd] MEM[0x2003f23] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f23 ← 0x33
[XOR @0x10004fd] MEM[0x2003f24] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x31
[STATE] ESI ← 0x3A
[HOOK MOV] @0x01000965: mov esi, 0x2
[XOR @0x1000979] MEM[0x2003f20] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x0100097f: cmp esi, 0x5
[XOR @0x1000979] MEM[0x2003f21] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1000979] MEM[0x2003f22] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x03
[STATE] ESI ← 0x04
[HOOK MOV] @0x01000c48: mov esi, 0xa
[HOOK MOV] @0x01000c4d: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01000c63: cmp esi, 0x15
[WRITE] @0x2003f21 ← 0x03
[WRITE] @0x2003f22 ← 0x33
[WRITE] @0x2003f23 ← 0x30
[WRITE] @0x2003f24 ← 0x02
[WRITE] @0x2003f25 ← 0x32
[WRITE] @0x2003f26 ← 0x32
[WRITE] @0x2003f27 ← 0x31
[WRITE] @0x2003f28 ← 0x32
[WRITE] @0x2003f29 ← 0x01
[WRITE] @0x2003f2a ← 0x31
[STATE] ESI ← 0x26
[HOOK MOV] @0x0100087a: mov esi, 0x9
[XOR @0x100088e] MEM[0x2003f20] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x02
[HOOK CMP] @0x01000894: cmp esi, 0x13
[XOR @0x100088e] MEM[0x2003f21] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x32
[XOR @0x100088e] MEM[0x2003f22] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x01
[XOR @0x100088e] MEM[0x2003f23] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x00
[XOR @0x100088e] MEM[0x2003f24] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x01
[XOR @0x100088e] MEM[0x2003f25] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x01
[XOR @0x100088e] MEM[0x2003f26] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x01
[XOR @0x100088e] MEM[0x2003f27] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x00
[XOR @0x100088e] MEM[0x2003f28] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x03
[XOR @0x100088e] MEM[0x2003f29] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x33
[STATE] ESI ← 0x35
[HOOK MOV] @0x01000b35: mov esi, 0x24
[XOR @0x1000b49] MEM[0x2003f20] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000b4f: cmp esi, 0x49
[XOR @0x1000b49] MEM[0x2003f21] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1000b49] MEM[0x2003f22] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000b49] MEM[0x2003f23] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1000b49] MEM[0x2003f24] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x30
[XOR @0x1000b49] MEM[0x2003f25] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1000b49] MEM[0x2003f26] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1000b49] MEM[0x2003f27] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f27 ← 0x33
[XOR @0x1000b49] MEM[0x2003f28] 0x03 ^ AL(0x00) → 0x03
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x03
[XOR @0x1000b49] MEM[0x2003f29] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x31
[XOR @0x1000b49] MEM[0x2003f2a] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1000b49] MEM[0x2003f2b] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x02
[XOR @0x1000b49] MEM[0x2003f2c] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000b49] MEM[0x2003f2d] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000b49] MEM[0x2003f2e] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x02
[XOR @0x1000b49] MEM[0x2003f2f] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x03
[XOR @0x1000b49] MEM[0x2003f30] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1000b49] MEM[0x2003f31] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x00
[XOR @0x1000b49] MEM[0x2003f32] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f32 ← 0x01
[XOR @0x1000b49] MEM[0x2003f33] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x03
[XOR @0x1000b49] MEM[0x2003f34] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f34 ← 0x00
[XOR @0x1000b49] MEM[0x2003f35] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f35 ← 0x33
[XOR @0x1000b49] MEM[0x2003f36] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f36 ← 0x01
[XOR @0x1000b49] MEM[0x2003f37] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x30
[XOR @0x1000b49] MEM[0x2003f38] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f38 ← 0x32
[XOR @0x1000b49] MEM[0x2003f39] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f39 ← 0x01
[XOR @0x1000b49] MEM[0x2003f3a] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f3a ← 0x00
[XOR @0x1000b49] MEM[0x2003f3b] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000b49] MEM[0x2003f3c] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f3c ← 0x01
[XOR @0x1000b49] MEM[0x2003f3d] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f3d ← 0x00
[XOR @0x1000b49] MEM[0x2003f3e] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f3e ← 0x32
[XOR @0x1000b49] MEM[0x2003f3f] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f3f ← 0x00
[XOR @0x1000b49] MEM[0x2003f40] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f40 ← 0x02
[XOR @0x1000b49] MEM[0x2003f41] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f41 ← 0x01
[XOR @0x1000b49] MEM[0x2003f42] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f42 ← 0x33
[XOR @0x1000b49] MEM[0x2003f43] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f43 ← 0x03
[XOR @0x1000b49] MEM[0x2003f44] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f44 ← 0x33
[STATE] ESI ← 0x46
[HOOK MOV] @0x01000f96: mov esi, 0x2c
[XOR @0x1000faa] MEM[0x2003f20] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000fb0: cmp esi, 0x59
[XOR @0x1000faa] MEM[0x2003f21] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x30
[XOR @0x1000faa] MEM[0x2003f22] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1000faa] MEM[0x2003f23] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x01
[XOR @0x1000faa] MEM[0x2003f24] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x00
[XOR @0x1000faa] MEM[0x2003f25] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x02
[XOR @0x1000faa] MEM[0x2003f26] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x30
[XOR @0x1000faa] MEM[0x2003f27] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x33
[XOR @0x1000faa] MEM[0x2003f28] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1000faa] MEM[0x2003f29] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x01
[XOR @0x1000faa] MEM[0x2003f2a] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x02
[XOR @0x1000faa] MEM[0x2003f2b] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f2b ← 0x03
[XOR @0x1000faa] MEM[0x2003f2c] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x03
[XOR @0x1000faa] MEM[0x2003f2d] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x03
[XOR @0x1000faa] MEM[0x2003f2e] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2e ← 0x01
[XOR @0x1000faa] MEM[0x2003f2f] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f2f ← 0x00
[XOR @0x1000faa] MEM[0x2003f30] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000faa] MEM[0x2003f31] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000faa] MEM[0x2003f32] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f32 ← 0x01
[XOR @0x1000faa] MEM[0x2003f33] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f33 ← 0x31
[XOR @0x1000faa] MEM[0x2003f34] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1000faa] MEM[0x2003f35] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x32
[XOR @0x1000faa] MEM[0x2003f36] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x30
[XOR @0x1000faa] MEM[0x2003f37] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f37 ← 0x31
[XOR @0x1000faa] MEM[0x2003f38] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f38 ← 0x00
[XOR @0x1000faa] MEM[0x2003f39] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f39 ← 0x31
[XOR @0x1000faa] MEM[0x2003f3a] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f3a ← 0x31
[XOR @0x1000faa] MEM[0x2003f3b] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000faa] MEM[0x2003f3c] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f3c ← 0x30
[XOR @0x1000faa] MEM[0x2003f3d] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f3d ← 0x31
[XOR @0x1000faa] MEM[0x2003f3e] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f3e ← 0x01
[XOR @0x1000faa] MEM[0x2003f3f] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f3f ← 0x30
[XOR @0x1000faa] MEM[0x2003f40] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f40 ← 0x33
[XOR @0x1000faa] MEM[0x2003f41] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f41 ← 0x00
[XOR @0x1000faa] MEM[0x2003f42] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f42 ← 0x03
[XOR @0x1000faa] MEM[0x2003f43] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f43 ← 0x30
[XOR @0x1000faa] MEM[0x2003f44] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f44 ← 0x33
[XOR @0x1000faa] MEM[0x2003f45] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f45 ← 0x03
[XOR @0x1000faa] MEM[0x2003f46] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f46 ← 0x33
[XOR @0x1000faa] MEM[0x2003f47] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f47 ← 0x02
[XOR @0x1000faa] MEM[0x2003f48] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f48 ← 0x32
[XOR @0x1000faa] MEM[0x2003f49] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f49 ← 0x32
[XOR @0x1000faa] MEM[0x2003f4a] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f4a ← 0x32
[XOR @0x1000faa] MEM[0x2003f4b] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f4b ← 0x01
[XOR @0x1000faa] MEM[0x2003f4c] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f4c ← 0x32
[STATE] ESI ← 0x60
[HOOK MOV] @0x010015f6: mov esi, 0x2
[XOR @0x100160a] MEM[0x2003f20] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x01001610: cmp esi, 0x5
[XOR @0x100160a] MEM[0x2003f21] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x31
[XOR @0x100160a] MEM[0x2003f22] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x02
[STATE] ESI ← 0x11
[XOR @0x1000d40] MEM[0x2003f20] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x01000d46: cmp esi, 0x23
[XOR @0x1000d40] MEM[0x2003f21] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x30
[XOR @0x1000d40] MEM[0x2003f22] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x33
[XOR @0x1000d40] MEM[0x2003f23] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000d40] MEM[0x2003f24] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1000d40] MEM[0x2003f25] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x32
[XOR @0x1000d40] MEM[0x2003f26] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1000d40] MEM[0x2003f27] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x33
[XOR @0x1000d40] MEM[0x2003f28] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f28 ← 0x30
[XOR @0x1000d40] MEM[0x2003f29] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x30
[XOR @0x1000d40] MEM[0x2003f2a] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2a ← 0x31
[XOR @0x1000d40] MEM[0x2003f2b] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x33
[XOR @0x1000d40] MEM[0x2003f2c] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2c ← 0x32
[XOR @0x1000d40] MEM[0x2003f2d] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f2d ← 0x02
[XOR @0x1000d40] MEM[0x2003f2e] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f2e ← 0x31
[XOR @0x1000d40] MEM[0x2003f2f] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1000d40] MEM[0x2003f30] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000d40] MEM[0x2003f31] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x02
[STATE] ESI ← 0x07
[HOOK MOV] @0x0100156b: mov esi, 0xf
[HOOK MOV] @0x01001570: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x01001586: cmp esi, 0x1f
[WRITE] @0x2003f21 ← 0x02
[WRITE] @0x2003f22 ← 0x31
[WRITE] @0x2003f23 ← 0x01
[WRITE] @0x2003f24 ← 0x03
[WRITE] @0x2003f25 ← 0x33
[WRITE] @0x2003f26 ← 0x33
[WRITE] @0x2003f27 ← 0x03
[WRITE] @0x2003f28 ← 0x01
[WRITE] @0x2003f29 ← 0x30
[WRITE] @0x2003f2a ← 0x00
[WRITE] @0x2003f2b ← 0x02
[WRITE] @0x2003f2c ← 0x01
[WRITE] @0x2003f2d ← 0x32
[WRITE] @0x2003f2e ← 0x00
[WRITE] @0x2003f2f ← 0x32
[STATE] ESI ← 0x3E
[HOOK MOV] @0x01000bed: mov esi, 0x22
[HOOK MOV] @0x01000bf2: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x01000c08: cmp esi, 0x45
[WRITE] @0x2003f21 ← 0x32
[WRITE] @0x2003f22 ← 0x02
[WRITE] @0x2003f23 ← 0x02
[WRITE] @0x2003f24 ← 0x30
[WRITE] @0x2003f25 ← 0x31
[WRITE] @0x2003f26 ← 0x01
[WRITE] @0x2003f27 ← 0x31
[WRITE] @0x2003f28 ← 0x33
[WRITE] @0x2003f29 ← 0x31
[WRITE] @0x2003f2a ← 0x32
[WRITE] @0x2003f2b ← 0x00
[WRITE] @0x2003f2c ← 0x01
[WRITE] @0x2003f2d ← 0x31
[WRITE] @0x2003f2e ← 0x32
[WRITE] @0x2003f2f ← 0x30
[WRITE] @0x2003f30 ← 0x30
[WRITE] @0x2003f31 ← 0x32
[WRITE] @0x2003f32 ← 0x30
[WRITE] @0x2003f33 ← 0x30
[WRITE] @0x2003f34 ← 0x30
[WRITE] @0x2003f35 ← 0x01
[WRITE] @0x2003f36 ← 0x01
[WRITE] @0x2003f37 ← 0x03
[WRITE] @0x2003f38 ← 0x00
[WRITE] @0x2003f39 ← 0x30
[WRITE] @0x2003f3a ← 0x00
[WRITE] @0x2003f3b ← 0x01
[WRITE] @0x2003f3c ← 0x00
[WRITE] @0x2003f3d ← 0x01
[WRITE] @0x2003f3e ← 0x33
[WRITE] @0x2003f3f ← 0x00
[WRITE] @0x2003f40 ← 0x03
[WRITE] @0x2003f41 ← 0x30
[WRITE] @0x2003f42 ← 0x02
[STATE] ESI ← 0x45
[HOOK MOV] @0x01001511: mov esi, 0x2
[XOR @0x1001525] MEM[0x2003f20] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x0100152b: cmp esi, 0x5
[XOR @0x1001525] MEM[0x2003f21] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x30
[XOR @0x1001525] MEM[0x2003f22] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f22 ← 0x32
[STATE] ESI ← 0x2A
[HOOK MOV] @0x01000e7f: mov esi, 0x14
[XOR @0x1000e93] MEM[0x2003f20] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x01000e99: cmp esi, 0x29
[XOR @0x1000e93] MEM[0x2003f21] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x31
[XOR @0x1000e93] MEM[0x2003f22] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x33
[XOR @0x1000e93] MEM[0x2003f23] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x01
[XOR @0x1000e93] MEM[0x2003f24] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x30
[XOR @0x1000e93] MEM[0x2003f25] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1000e93] MEM[0x2003f26] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1000e93] MEM[0x2003f27] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000e93] MEM[0x2003f28] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x33
[XOR @0x1000e93] MEM[0x2003f29] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x30
[XOR @0x1000e93] MEM[0x2003f2a] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x01
[XOR @0x1000e93] MEM[0x2003f2b] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x00
[XOR @0x1000e93] MEM[0x2003f2c] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000e93] MEM[0x2003f2d] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000e93] MEM[0x2003f2e] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1000e93] MEM[0x2003f2f] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x00
[XOR @0x1000e93] MEM[0x2003f30] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f30 ← 0x03
[XOR @0x1000e93] MEM[0x2003f31] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1000e93] MEM[0x2003f32] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f32 ← 0x03
[XOR @0x1000e93] MEM[0x2003f33] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x32
[XOR @0x1000e93] MEM[0x2003f34] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f34 ← 0x02
[STATE] ESI ← 0x19
[HOOK MOV] @0x010012b5: mov esi, 0xd
[XOR @0x10012c9] MEM[0x2003f20] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x010012cf: cmp esi, 0x1b
[XOR @0x10012c9] MEM[0x2003f21] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x01
[XOR @0x10012c9] MEM[0x2003f22] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x33
[XOR @0x10012c9] MEM[0x2003f23] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f23 ← 0x02
[XOR @0x10012c9] MEM[0x2003f24] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f24 ← 0x01
[XOR @0x10012c9] MEM[0x2003f25] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f25 ← 0x02
[XOR @0x10012c9] MEM[0x2003f26] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x33
[XOR @0x10012c9] MEM[0x2003f27] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x32
[XOR @0x10012c9] MEM[0x2003f28] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x32
[XOR @0x10012c9] MEM[0x2003f29] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f29 ← 0x31
[XOR @0x10012c9] MEM[0x2003f2a] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x02
[XOR @0x10012c9] MEM[0x2003f2b] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x00
[XOR @0x10012c9] MEM[0x2003f2c] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x32
[XOR @0x10012c9] MEM[0x2003f2d] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x01
[STATE] ESI ← 0x4E
[HOOK MOV] @0x0100119b: mov esi, 0x26
[XOR @0x10011af] MEM[0x2003f20] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x010011b5: cmp esi, 0x4d
[XOR @0x10011af] MEM[0x2003f21] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f21 ← 0x03
[XOR @0x10011af] MEM[0x2003f22] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f22 ← 0x01
[XOR @0x10011af] MEM[0x2003f23] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x30
[XOR @0x10011af] MEM[0x2003f24] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f24 ← 0x33
[XOR @0x10011af] MEM[0x2003f25] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x03
[XOR @0x10011af] MEM[0x2003f26] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x01
[XOR @0x10011af] MEM[0x2003f27] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f27 ← 0x30
[XOR @0x10011af] MEM[0x2003f28] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x32
[XOR @0x10011af] MEM[0x2003f29] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x32
[XOR @0x10011af] MEM[0x2003f2a] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2a ← 0x01
[XOR @0x10011af] MEM[0x2003f2b] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f2b ← 0x01
[XOR @0x10011af] MEM[0x2003f2c] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x02
[XOR @0x10011af] MEM[0x2003f2d] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x32
[XOR @0x10011af] MEM[0x2003f2e] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x33
[XOR @0x10011af] MEM[0x2003f2f] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f2f ← 0x01
[XOR @0x10011af] MEM[0x2003f30] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f30 ← 0x33
[XOR @0x10011af] MEM[0x2003f31] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x03
[XOR @0x10011af] MEM[0x2003f32] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f32 ← 0x31
[XOR @0x10011af] MEM[0x2003f33] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x33
[XOR @0x10011af] MEM[0x2003f34] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x03
[XOR @0x10011af] MEM[0x2003f35] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f35 ← 0x03
[XOR @0x10011af] MEM[0x2003f36] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x33
[XOR @0x10011af] MEM[0x2003f37] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f37 ← 0x30
[XOR @0x10011af] MEM[0x2003f38] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f38 ← 0x01
[XOR @0x10011af] MEM[0x2003f39] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f39 ← 0x03
[XOR @0x10011af] MEM[0x2003f3a] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f3a ← 0x03
[XOR @0x10011af] MEM[0x2003f3b] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f3b ← 0x30
[XOR @0x10011af] MEM[0x2003f3c] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f3c ← 0x33
[XOR @0x10011af] MEM[0x2003f3d] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f3d ← 0x02
[XOR @0x10011af] MEM[0x2003f3e] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f3e ← 0x30
[XOR @0x10011af] MEM[0x2003f3f] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f3f ← 0x33
[XOR @0x10011af] MEM[0x2003f40] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f40 ← 0x33
[XOR @0x10011af] MEM[0x2003f41] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f41 ← 0x31
[XOR @0x10011af] MEM[0x2003f42] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f42 ← 0x01
[XOR @0x10011af] MEM[0x2003f43] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f43 ← 0x33
[XOR @0x10011af] MEM[0x2003f44] 0x33 ^ AL(0x30) → 0x03
寫入後 MEM = 0x33
[WRITE] @0x2003f44 ← 0x03
[XOR @0x10011af] MEM[0x2003f45] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f45 ← 0x30
[XOR @0x10011af] MEM[0x2003f46] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f46 ← 0x31
[STATE] ESI ← 0x22
[HOOK MOV] @0x0100139e: mov esi, 0x9
[XOR @0x10013b2] MEM[0x2003f20] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f20 ← 0x31
[HOOK CMP] @0x010013b8: cmp esi, 0x13
[XOR @0x10013b2] MEM[0x2003f21] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f21 ← 0x02
[XOR @0x10013b2] MEM[0x2003f22] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f22 ← 0x00
[XOR @0x10013b2] MEM[0x2003f23] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x32
[XOR @0x10013b2] MEM[0x2003f24] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x01
[XOR @0x10013b2] MEM[0x2003f25] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f25 ← 0x30
[XOR @0x10013b2] MEM[0x2003f26] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f26 ← 0x00
[XOR @0x10013b2] MEM[0x2003f27] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x03
[XOR @0x10013b2] MEM[0x2003f28] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x31
[XOR @0x10013b2] MEM[0x2003f29] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x03
[STATE] ESI ← 0x5F
[HOOK MOV] @0x01000aaa: mov esi, 0x27
[HOOK MOV] @0x01000aaf: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x33
[HOOK CMP] @0x01000ac5: cmp esi, 0x4f
[WRITE] @0x2003f21 ← 0x30
[WRITE] @0x2003f22 ← 0x32
[WRITE] @0x2003f23 ← 0x00
[WRITE] @0x2003f24 ← 0x00
[WRITE] @0x2003f25 ← 0x02
[WRITE] @0x2003f26 ← 0x02
[WRITE] @0x2003f27 ← 0x03
[WRITE] @0x2003f28 ← 0x02
[WRITE] @0x2003f29 ← 0x33
[WRITE] @0x2003f2a ← 0x33
[WRITE] @0x2003f2b ← 0x01
[WRITE] @0x2003f2c ← 0x02
[WRITE] @0x2003f2d ← 0x30
[WRITE] @0x2003f2e ← 0x31
[WRITE] @0x2003f2f ← 0x02
[WRITE] @0x2003f30 ← 0x31
[WRITE] @0x2003f31 ← 0x30
[WRITE] @0x2003f32 ← 0x02
[WRITE] @0x2003f33 ← 0x32
[WRITE] @0x2003f34 ← 0x01
[WRITE] @0x2003f35 ← 0x33
[WRITE] @0x2003f36 ← 0x02
[WRITE] @0x2003f37 ← 0x32
[WRITE] @0x2003f38 ← 0x30
[WRITE] @0x2003f39 ← 0x33
[WRITE] @0x2003f3a ← 0x01
[WRITE] @0x2003f3b ← 0x02
[WRITE] @0x2003f3c ← 0x32
[WRITE] @0x2003f3d ← 0x31
[WRITE] @0x2003f3e ← 0x32
[WRITE] @0x2003f3f ← 0x01
[WRITE] @0x2003f40 ← 0x03
[WRITE] @0x2003f41 ← 0x02
[WRITE] @0x2003f42 ← 0x00
[WRITE] @0x2003f43 ← 0x31
[WRITE] @0x2003f44 ← 0x31
[WRITE] @0x2003f45 ← 0x01
[WRITE] @0x2003f46 ← 0x03
[WRITE] @0x2003f47 ← 0x03
[STATE] ESI ← 0x25
[HOOK MOV] @0x01001311: mov esi, 0x1a
[XOR @0x1001325] MEM[0x2003f20] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f20 ← 0x32
[HOOK CMP] @0x0100132b: cmp esi, 0x35
[XOR @0x1001325] MEM[0x2003f21] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f21 ← 0x32
[XOR @0x1001325] MEM[0x2003f22] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f22 ← 0x00
[XOR @0x1001325] MEM[0x2003f23] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1001325] MEM[0x2003f24] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f24 ← 0x32
[XOR @0x1001325] MEM[0x2003f25] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x03
[XOR @0x1001325] MEM[0x2003f26] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f26 ← 0x01
[XOR @0x1001325] MEM[0x2003f27] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f27 ← 0x01
[XOR @0x1001325] MEM[0x2003f28] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f28 ← 0x02
[XOR @0x1001325] MEM[0x2003f29] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1001325] MEM[0x2003f2a] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2a ← 0x02
[XOR @0x1001325] MEM[0x2003f2b] 0x01 ^ AL(0x01) → 0x00
寫入後 MEM = 0x01
[WRITE] @0x2003f2b ← 0x00
[XOR @0x1001325] MEM[0x2003f2c] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2c ← 0x01
[XOR @0x1001325] MEM[0x2003f2d] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2d ← 0x33
[XOR @0x1001325] MEM[0x2003f2e] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1001325] MEM[0x2003f2f] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f2f ← 0x30
[XOR @0x1001325] MEM[0x2003f30] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x03
[XOR @0x1001325] MEM[0x2003f31] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1001325] MEM[0x2003f32] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x30
[XOR @0x1001325] MEM[0x2003f33] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f33 ← 0x30
[XOR @0x1001325] MEM[0x2003f34] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x01
[XOR @0x1001325] MEM[0x2003f35] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x01
[XOR @0x1001325] MEM[0x2003f36] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f36 ← 0x30
[XOR @0x1001325] MEM[0x2003f37] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x32
[XOR @0x1001325] MEM[0x2003f38] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f38 ← 0x01
[XOR @0x1001325] MEM[0x2003f39] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f39 ← 0x01
[XOR @0x1001325] MEM[0x2003f3a] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x02
[STATE] ESI ← 0x41
[HOOK MOV] @0x01000b05: mov esi, 0x21
[HOOK MOV] @0x01000b0a: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x30
[HOOK CMP] @0x01000b20: cmp esi, 0x43
[WRITE] @0x2003f21 ← 0x32
[WRITE] @0x2003f22 ← 0x31
[WRITE] @0x2003f23 ← 0x00
[WRITE] @0x2003f24 ← 0x33
[WRITE] @0x2003f25 ← 0x00
[WRITE] @0x2003f26 ← 0x02
[WRITE] @0x2003f27 ← 0x33
[WRITE] @0x2003f28 ← 0x30
[WRITE] @0x2003f29 ← 0x30
[WRITE] @0x2003f2a ← 0x03
[WRITE] @0x2003f2b ← 0x32
[WRITE] @0x2003f2c ← 0x03
[WRITE] @0x2003f2d ← 0x33
[WRITE] @0x2003f2e ← 0x33
[WRITE] @0x2003f2f ← 0x02
[WRITE] @0x2003f30 ← 0x32
[WRITE] @0x2003f31 ← 0x31
[WRITE] @0x2003f32 ← 0x03
[WRITE] @0x2003f33 ← 0x30
[WRITE] @0x2003f34 ← 0x03
[WRITE] @0x2003f35 ← 0x32
[WRITE] @0x2003f36 ← 0x00
[WRITE] @0x2003f37 ← 0x02
[WRITE] @0x2003f38 ← 0x02
[WRITE] @0x2003f39 ← 0x33
[WRITE] @0x2003f3a ← 0x01
[WRITE] @0x2003f3b ← 0x31
[WRITE] @0x2003f3c ← 0x01
[WRITE] @0x2003f3d ← 0x33
[WRITE] @0x2003f3e ← 0x00
[WRITE] @0x2003f3f ← 0x30
[WRITE] @0x2003f40 ← 0x00
[WRITE] @0x2003f41 ← 0x32
[STATE] ESI ← 0x53
[HOOK MOV] @0x01000f0c: mov esi, 0x2a
[XOR @0x1000f20] MEM[0x2003f20] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f20 ← 0x02
[HOOK CMP] @0x01000f26: cmp esi, 0x55
[XOR @0x1000f20] MEM[0x2003f21] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x33
[XOR @0x1000f20] MEM[0x2003f22] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x03
[XOR @0x1000f20] MEM[0x2003f23] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f23 ← 0x02
[XOR @0x1000f20] MEM[0x2003f24] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1000f20] MEM[0x2003f25] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f25 ← 0x02
[XOR @0x1000f20] MEM[0x2003f26] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f26 ← 0x31
[XOR @0x1000f20] MEM[0x2003f27] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x30
[XOR @0x1000f20] MEM[0x2003f28] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f28 ← 0x32
[XOR @0x1000f20] MEM[0x2003f29] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f29 ← 0x03
[XOR @0x1000f20] MEM[0x2003f2a] 0x03 ^ AL(0x02) → 0x01
寫入後 MEM = 0x03
[WRITE] @0x2003f2a ← 0x01
[XOR @0x1000f20] MEM[0x2003f2b] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f2b ← 0x03
[XOR @0x1000f20] MEM[0x2003f2c] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f2c ← 0x33
[XOR @0x1000f20] MEM[0x2003f2d] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000f20] MEM[0x2003f2e] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1000f20] MEM[0x2003f2f] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f2f ← 0x03
[XOR @0x1000f20] MEM[0x2003f30] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f30 ← 0x31
[XOR @0x1000f20] MEM[0x2003f31] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x02
[XOR @0x1000f20] MEM[0x2003f32] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f32 ← 0x02
[XOR @0x1000f20] MEM[0x2003f33] 0x30 ^ AL(0x30) → 0x00
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x00
[XOR @0x1000f20] MEM[0x2003f34] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f34 ← 0x00
[XOR @0x1000f20] MEM[0x2003f35] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f35 ← 0x03
[XOR @0x1000f20] MEM[0x2003f36] 0x00 ^ AL(0x02) → 0x02
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x02
[XOR @0x1000f20] MEM[0x2003f37] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f37 ← 0x00
[XOR @0x1000f20] MEM[0x2003f38] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f38 ← 0x02
[XOR @0x1000f20] MEM[0x2003f39] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f39 ← 0x33
[XOR @0x1000f20] MEM[0x2003f3a] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f3a ← 0x02
[XOR @0x1000f20] MEM[0x2003f3b] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f3b ← 0x33
[XOR @0x1000f20] MEM[0x2003f3c] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f3c ← 0x01
[XOR @0x1000f20] MEM[0x2003f3d] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f3d ← 0x31
[XOR @0x1000f20] MEM[0x2003f3e] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f3e ← 0x33
[XOR @0x1000f20] MEM[0x2003f3f] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f3f ← 0x32
[XOR @0x1000f20] MEM[0x2003f40] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f40 ← 0x33
[XOR @0x1000f20] MEM[0x2003f41] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f41 ← 0x33
[XOR @0x1000f20] MEM[0x2003f42] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f42 ← 0x31
[XOR @0x1000f20] MEM[0x2003f43] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f43 ← 0x02
[XOR @0x1000f20] MEM[0x2003f44] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f44 ← 0x03
[XOR @0x1000f20] MEM[0x2003f45] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f45 ← 0x32
[XOR @0x1000f20] MEM[0x2003f46] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f46 ← 0x30
[XOR @0x1000f20] MEM[0x2003f47] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f47 ← 0x32
[XOR @0x1000f20] MEM[0x2003f48] 0x32 ^ AL(0x02) → 0x30
寫入後 MEM = 0x32
[WRITE] @0x2003f48 ← 0x30
[XOR @0x1000f20] MEM[0x2003f49] 0x32 ^ AL(0x03) → 0x31
寫入後 MEM = 0x32
[WRITE] @0x2003f49 ← 0x31
[XOR @0x1000f20] MEM[0x2003f4a] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f4a ← 0x00
[STATE] ESI ← 0x2C
[HOOK MOV] @0x01000c1d: mov esi, 0x13
[XOR @0x1000c31] MEM[0x2003f20] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f20 ← 0x02
[HOOK CMP] @0x01000c37: cmp esi, 0x27
[XOR @0x1000c31] MEM[0x2003f21] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f21 ← 0x33
[XOR @0x1000c31] MEM[0x2003f22] 0x03 ^ AL(0x03) → 0x00
寫入後 MEM = 0x03
[WRITE] @0x2003f22 ← 0x00
[XOR @0x1000c31] MEM[0x2003f23] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f23 ← 0x00
[XOR @0x1000c31] MEM[0x2003f24] 0x33 ^ AL(0x00) → 0x33
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x33
[XOR @0x1000c31] MEM[0x2003f25] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x00
[XOR @0x1000c31] MEM[0x2003f26] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x02
[XOR @0x1000c31] MEM[0x2003f27] 0x30 ^ AL(0x02) → 0x32
寫入後 MEM = 0x30
[WRITE] @0x2003f27 ← 0x32
[XOR @0x1000c31] MEM[0x2003f28] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x01
[XOR @0x1000c31] MEM[0x2003f29] 0x03 ^ AL(0x01) → 0x02
寫入後 MEM = 0x03
[WRITE] @0x2003f29 ← 0x02
[XOR @0x1000c31] MEM[0x2003f2a] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x30
[XOR @0x1000c31] MEM[0x2003f2b] 0x03 ^ AL(0x33) → 0x30
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x30
[XOR @0x1000c31] MEM[0x2003f2c] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f2c ← 0x01
[XOR @0x1000c31] MEM[0x2003f2d] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2d ← 0x32
[XOR @0x1000c31] MEM[0x2003f2e] 0x30 ^ AL(0x33) → 0x03
寫入後 MEM = 0x30
[WRITE] @0x2003f2e ← 0x03
[XOR @0x1000c31] MEM[0x2003f2f] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f2f ← 0x32
[XOR @0x1000c31] MEM[0x2003f30] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f30 ← 0x33
[XOR @0x1000c31] MEM[0x2003f31] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f31 ← 0x01
[XOR @0x1000c31] MEM[0x2003f32] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f32 ← 0x30
[XOR @0x1000c31] MEM[0x2003f33] 0x00 ^ AL(0x30) → 0x30
寫入後 MEM = 0x00
[WRITE] @0x2003f33 ← 0x30
[STATE] ESI ← 0x09
[HOOK MOV] @0x010007ef: mov esi, 0x2e
[HOOK MOV] @0x010007f4: mov esi, 0x2f
[WRITE] @0x2003f20 ← 0x02
[HOOK CMP] @0x0100080a: cmp esi, 0x5d
[WRITE] @0x2003f21 ← 0x31
[WRITE] @0x2003f22 ← 0x31
[WRITE] @0x2003f23 ← 0x31
[WRITE] @0x2003f24 ← 0x02
[WRITE] @0x2003f25 ← 0x02
[WRITE] @0x2003f26 ← 0x00
[WRITE] @0x2003f27 ← 0x32
[WRITE] @0x2003f28 ← 0x33
[WRITE] @0x2003f29 ← 0x31
[WRITE] @0x2003f2a ← 0x01
[WRITE] @0x2003f2b ← 0x31
[WRITE] @0x2003f2c ← 0x30
[WRITE] @0x2003f2d ← 0x02
[WRITE] @0x2003f2e ← 0x01
[WRITE] @0x2003f2f ← 0x33
[WRITE] @0x2003f30 ← 0x00
[WRITE] @0x2003f31 ← 0x01
[WRITE] @0x2003f32 ← 0x31
[WRITE] @0x2003f33 ← 0x01
[WRITE] @0x2003f34 ← 0x01
[WRITE] @0x2003f35 ← 0x02
[WRITE] @0x2003f36 ← 0x00
[WRITE] @0x2003f37 ← 0x00
[WRITE] @0x2003f38 ← 0x02
[WRITE] @0x2003f39 ← 0x31
[WRITE] @0x2003f3a ← 0x33
[WRITE] @0x2003f3b ← 0x00
[WRITE] @0x2003f3c ← 0x01
[WRITE] @0x2003f3d ← 0x30
[WRITE] @0x2003f3e ← 0x03
[WRITE] @0x2003f3f ← 0x31
[WRITE] @0x2003f40 ← 0x02
[WRITE] @0x2003f41 ← 0x31
[WRITE] @0x2003f42 ← 0x00
[WRITE] @0x2003f43 ← 0x02
[WRITE] @0x2003f44 ← 0x01
[WRITE] @0x2003f45 ← 0x33
[WRITE] @0x2003f46 ← 0x03
[WRITE] @0x2003f47 ← 0x31
[WRITE] @0x2003f48 ← 0x01
[WRITE] @0x2003f49 ← 0x30
[WRITE] @0x2003f4a ← 0x30
[WRITE] @0x2003f4b ← 0x31
[WRITE] @0x2003f4c ← 0x03
[WRITE] @0x2003f4d ← 0x01
[WRITE] @0x2003f4e ← 0x01
[STATE] ESI ← 0x3C
[HOOK MOV] @0x01001340: mov esi, 0x18
[XOR @0x1001354] MEM[0x2003f20] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f20 ← 0x00
[HOOK CMP] @0x0100135a: cmp esi, 0x31
[XOR @0x1001354] MEM[0x2003f21] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1001354] MEM[0x2003f22] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x02
[XOR @0x1001354] MEM[0x2003f23] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x31
[XOR @0x1001354] MEM[0x2003f24] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f24 ← 0x03
[XOR @0x1001354] MEM[0x2003f25] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f25 ← 0x32
[XOR @0x1001354] MEM[0x2003f26] 0x00 ^ AL(0x03) → 0x03
寫入後 MEM = 0x00
[WRITE] @0x2003f26 ← 0x03
[XOR @0x1001354] MEM[0x2003f27] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f27 ← 0x03
[XOR @0x1001354] MEM[0x2003f28] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1001354] MEM[0x2003f29] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x00
[XOR @0x1001354] MEM[0x2003f2a] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x01
[XOR @0x1001354] MEM[0x2003f2b] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x33
[XOR @0x1001354] MEM[0x2003f2c] 0x30 ^ AL(0x01) → 0x31
寫入後 MEM = 0x30
[WRITE] @0x2003f2c ← 0x31
[XOR @0x1001354] MEM[0x2003f2d] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x31
[XOR @0x1001354] MEM[0x2003f2e] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f2e ← 0x02
[XOR @0x1001354] MEM[0x2003f2f] 0x33 ^ AL(0x31) → 0x02
寫入後 MEM = 0x33
[WRITE] @0x2003f2f ← 0x02
[XOR @0x1001354] MEM[0x2003f30] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f30 ← 0x01
[XOR @0x1001354] MEM[0x2003f31] 0x01 ^ AL(0x30) → 0x31
寫入後 MEM = 0x01
[WRITE] @0x2003f31 ← 0x31
[XOR @0x1001354] MEM[0x2003f32] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f32 ← 0x01
[XOR @0x1001354] MEM[0x2003f33] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x30
[XOR @0x1001354] MEM[0x2003f34] 0x01 ^ AL(0x03) → 0x02
寫入後 MEM = 0x01
[WRITE] @0x2003f34 ← 0x02
[XOR @0x1001354] MEM[0x2003f35] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f35 ← 0x03
[XOR @0x1001354] MEM[0x2003f36] 0x00 ^ AL(0x01) → 0x01
寫入後 MEM = 0x00
[WRITE] @0x2003f36 ← 0x01
[XOR @0x1001354] MEM[0x2003f37] 0x00 ^ AL(0x00) → 0x00
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x00
[XOR @0x1001354] MEM[0x2003f38] 0x02 ^ AL(0x00) → 0x02
寫入後 MEM = 0x02
[WRITE] @0x2003f38 ← 0x02
[STATE] ESI ← 0x1E
[WRITE] @0x2003f1c ← 0x0d
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x31
[WRITE] @0x2003f1c ← 0x0e
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f21 ← 0x02
[WRITE] @0x2003f1c ← 0x0f
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x00
[WRITE] @0x2003f1c ← 0x10
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f23 ← 0x30
[WRITE] @0x2003f1c ← 0x11
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f24 ← 0x32
[WRITE] @0x2003f1c ← 0x12
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f25 ← 0x33
[WRITE] @0x2003f1c ← 0x13
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f26 ← 0x33
[WRITE] @0x2003f1c ← 0x14
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f27 ← 0x01
[WRITE] @0x2003f1c ← 0x15
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f28 ← 0x32
[WRITE] @0x2003f1c ← 0x16
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f29 ← 0x01
[WRITE] @0x2003f1c ← 0x17
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x00) → 0x31
寫入後 MEM = 0x31
[WRITE] @0x2003f2a ← 0x01
[WRITE] @0x2003f1c ← 0x18
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x31
[WRITE] @0x2003f1c ← 0x19
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x31) → 0x00
寫入後 MEM = 0x31
[WRITE] @0x2003f2c ← 0x00
[WRITE] @0x2003f1c ← 0x1a
[XOR @0x1000e34] MEM[0x2003f31] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x02
[WRITE] @0x2003f1c ← 0x1b
[STATE] ESI ← 0x14
[HOOK MOV] @0x0100084b: mov esi, 0x29
[XOR @0x100085f] MEM[0x2003f20] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f20 ← 0x01
[HOOK CMP] @0x01000865: cmp esi, 0x53
[XOR @0x100085f] MEM[0x2003f21] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f21 ← 0x32
[XOR @0x100085f] MEM[0x2003f22] 0x00 ^ AL(0x31) → 0x31
寫入後 MEM = 0x00
[WRITE] @0x2003f22 ← 0x31
[XOR @0x100085f] MEM[0x2003f23] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f23 ← 0x33
[XOR @0x100085f] MEM[0x2003f24] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f24 ← 0x33
[XOR @0x100085f] MEM[0x2003f25] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f25 ← 0x32
[XOR @0x100085f] MEM[0x2003f26] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f26 ← 0x32
[XOR @0x100085f] MEM[0x2003f27] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f27 ← 0x33
[XOR @0x100085f] MEM[0x2003f28] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f28 ← 0x03
[XOR @0x100085f] MEM[0x2003f29] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f29 ← 0x32
[XOR @0x100085f] MEM[0x2003f2a] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f2a ← 0x32
[XOR @0x100085f] MEM[0x2003f2b] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f2b ← 0x03
[XOR @0x100085f] MEM[0x2003f2c] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f2c ← 0x32
[XOR @0x100085f] MEM[0x2003f2d] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f2d ← 0x31
[XOR @0x100085f] MEM[0x2003f2e] 0x02 ^ AL(0x03) → 0x01
寫入後 MEM = 0x02
[WRITE] @0x2003f2e ← 0x01
[XOR @0x100085f] MEM[0x2003f2f] 0x02 ^ AL(0x32) → 0x30
寫入後 MEM = 0x02
[WRITE] @0x2003f2f ← 0x30
[XOR @0x100085f] MEM[0x2003f30] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f30 ← 0x33
[XOR @0x100085f] MEM[0x2003f31] 0x31 ^ AL(0x03) → 0x32
寫入後 MEM = 0x31
[WRITE] @0x2003f31 ← 0x32
[XOR @0x100085f] MEM[0x2003f32] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f32 ← 0x33
[XOR @0x100085f] MEM[0x2003f33] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f33 ← 0x01
[XOR @0x100085f] MEM[0x2003f34] 0x02 ^ AL(0x01) → 0x03
寫入後 MEM = 0x02
[WRITE] @0x2003f34 ← 0x03
[XOR @0x100085f] MEM[0x2003f35] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f35 ← 0x33
[XOR @0x100085f] MEM[0x2003f36] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f36 ← 0x32
[XOR @0x100085f] MEM[0x2003f37] 0x00 ^ AL(0x32) → 0x32
寫入後 MEM = 0x00
[WRITE] @0x2003f37 ← 0x32
[XOR @0x100085f] MEM[0x2003f38] 0x02 ^ AL(0x33) → 0x31
寫入後 MEM = 0x02
[WRITE] @0x2003f38 ← 0x31
[XOR @0x100085f] MEM[0x2003f39] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f39 ← 0x30
[XOR @0x100085f] MEM[0x2003f3a] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f3a ← 0x30
[XOR @0x100085f] MEM[0x2003f3b] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f3b ← 0x33
[XOR @0x100085f] MEM[0x2003f3c] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f3c ← 0x33
[XOR @0x100085f] MEM[0x2003f3d] 0x30 ^ AL(0x32) → 0x02
寫入後 MEM = 0x30
[WRITE] @0x2003f3d ← 0x02
[XOR @0x100085f] MEM[0x2003f3e] 0x03 ^ AL(0x31) → 0x32
寫入後 MEM = 0x03
[WRITE] @0x2003f3e ← 0x32
[XOR @0x100085f] MEM[0x2003f3f] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f3f ← 0x01
[XOR @0x100085f] MEM[0x2003f40] 0x02 ^ AL(0x30) → 0x32
寫入後 MEM = 0x02
[WRITE] @0x2003f40 ← 0x32
[XOR @0x100085f] MEM[0x2003f41] 0x31 ^ AL(0x33) → 0x02
寫入後 MEM = 0x31
[WRITE] @0x2003f41 ← 0x02
[XOR @0x100085f] MEM[0x2003f42] 0x00 ^ AL(0x33) → 0x33
寫入後 MEM = 0x00
[WRITE] @0x2003f42 ← 0x33
[XOR @0x100085f] MEM[0x2003f43] 0x02 ^ AL(0x02) → 0x00
寫入後 MEM = 0x02
[WRITE] @0x2003f43 ← 0x00
[XOR @0x100085f] MEM[0x2003f44] 0x01 ^ AL(0x32) → 0x33
寫入後 MEM = 0x01
[WRITE] @0x2003f44 ← 0x33
[XOR @0x100085f] MEM[0x2003f45] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f45 ← 0x32
[XOR @0x100085f] MEM[0x2003f46] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f46 ← 0x31
[XOR @0x100085f] MEM[0x2003f47] 0x31 ^ AL(0x02) → 0x33
寫入後 MEM = 0x31
[WRITE] @0x2003f47 ← 0x33
[XOR @0x100085f] MEM[0x2003f48] 0x01 ^ AL(0x33) → 0x32
寫入後 MEM = 0x01
[WRITE] @0x2003f48 ← 0x32
[XOR @0x100085f] MEM[0x2003f49] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f49 ← 0x30
[HOOK MOV] @0x01000654: mov esi, 0x1d
[XOR @0x1000668] MEM[0x2003f20] 0x01 ^ AL(0x02) → 0x03
寫入後 MEM = 0x01
[WRITE] @0x2003f20 ← 0x03
[HOOK CMP] @0x0100066e: cmp esi, 0x3b
[XOR @0x1000668] MEM[0x2003f21] 0x32 ^ AL(0x32) → 0x00
寫入後 MEM = 0x32
[WRITE] @0x2003f21 ← 0x00
[XOR @0x1000668] MEM[0x2003f22] 0x31 ^ AL(0x01) → 0x30
寫入後 MEM = 0x31
[WRITE] @0x2003f22 ← 0x30
[XOR @0x1000668] MEM[0x2003f23] 0x33 ^ AL(0x32) → 0x01
寫入後 MEM = 0x33
[WRITE] @0x2003f23 ← 0x01
[XOR @0x1000668] MEM[0x2003f24] 0x33 ^ AL(0x02) → 0x31
寫入後 MEM = 0x33
[WRITE] @0x2003f24 ← 0x31
[XOR @0x1000668] MEM[0x2003f25] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f25 ← 0x01
[XOR @0x1000668] MEM[0x2003f26] 0x32 ^ AL(0x00) → 0x32
寫入後 MEM = 0x32
[WRITE] @0x2003f26 ← 0x32
[XOR @0x1000668] MEM[0x2003f27] 0x33 ^ AL(0x33) → 0x00
寫入後 MEM = 0x33
[WRITE] @0x2003f27 ← 0x00
[XOR @0x1000668] MEM[0x2003f28] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f28 ← 0x31
[XOR @0x1000668] MEM[0x2003f29] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f29 ← 0x03
[XOR @0x1000668] MEM[0x2003f2a] 0x32 ^ AL(0x33) → 0x01
寫入後 MEM = 0x32
[WRITE] @0x2003f2a ← 0x01
[XOR @0x1000668] MEM[0x2003f2b] 0x03 ^ AL(0x32) → 0x31
寫入後 MEM = 0x03
[WRITE] @0x2003f2b ← 0x31
[XOR @0x1000668] MEM[0x2003f2c] 0x32 ^ AL(0x30) → 0x02
寫入後 MEM = 0x32
[WRITE] @0x2003f2c ← 0x02
[XOR @0x1000668] MEM[0x2003f2d] 0x31 ^ AL(0x30) → 0x01
寫入後 MEM = 0x31
[WRITE] @0x2003f2d ← 0x01
[XOR @0x1000668] MEM[0x2003f2e] 0x01 ^ AL(0x31) → 0x30
寫入後 MEM = 0x01
[WRITE] @0x2003f2e ← 0x30
[XOR @0x1000668] MEM[0x2003f2f] 0x30 ^ AL(0x03) → 0x33
寫入後 MEM = 0x30
[WRITE] @0x2003f2f ← 0x33
[XOR @0x1000668] MEM[0x2003f30] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f30 ← 0x32
[XOR @0x1000668] MEM[0x2003f31] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f31 ← 0x33
[XOR @0x1000668] MEM[0x2003f32] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f32 ← 0x30
[XOR @0x1000668] MEM[0x2003f33] 0x01 ^ AL(0x00) → 0x01
寫入後 MEM = 0x01
[WRITE] @0x2003f33 ← 0x01
[XOR @0x1000668] MEM[0x2003f34] 0x03 ^ AL(0x30) → 0x33
寫入後 MEM = 0x03
[WRITE] @0x2003f34 ← 0x33
[XOR @0x1000668] MEM[0x2003f35] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f35 ← 0x32
[XOR @0x1000668] MEM[0x2003f36] 0x32 ^ AL(0x31) → 0x03
寫入後 MEM = 0x32
[WRITE] @0x2003f36 ← 0x03
[XOR @0x1000668] MEM[0x2003f37] 0x32 ^ AL(0x01) → 0x33
寫入後 MEM = 0x32
[WRITE] @0x2003f37 ← 0x33
[XOR @0x1000668] MEM[0x2003f38] 0x31 ^ AL(0x32) → 0x03
寫入後 MEM = 0x31
[WRITE] @0x2003f38 ← 0x03
[XOR @0x1000668] MEM[0x2003f39] 0x30 ^ AL(0x00) → 0x30
寫入後 MEM = 0x30
[WRITE] @0x2003f39 ← 0x30
[XOR @0x1000668] MEM[0x2003f3a] 0x30 ^ AL(0x31) → 0x01
寫入後 MEM = 0x30
[WRITE] @0x2003f3a ← 0x01
[XOR @0x1000668] MEM[0x2003f3b] 0x33 ^ AL(0x03) → 0x30
寫入後 MEM = 0x33
[WRITE] @0x2003f3b ← 0x30
[XOR @0x1000668] MEM[0x2003f3c] 0x33 ^ AL(0x01) → 0x32
寫入後 MEM = 0x33
[WRITE] @0x2003f3c ← 0x32
[XOR @0x1000668] MEM[0x2003f3d] 0x02 ^ AL(0x31) → 0x33
寫入後 MEM = 0x02
[WRITE] @0x2003f3d ← 0x33
[HOOK MOV] @0x01000675: mov esi, 0x11
[WRITE] @0x2003f04 ← 0x11
[WRITE] @0x2003f00 ← 0x407068

根據以上可以總結

  • 每次eip 會有0xaa 到0xbb的變動長度進行xor,進行的方式為

    python for i in range(0xbb): flag[i] = flag[i] ^ f[(0xaa + i)%47]

    結束後將eip更新

  • 其中有一段特別的XOR加密,是從0x0d + i 的數值去做xor加密

for i in range(0xbb):
  flag[i] = flag[i] ^ 0x0d+i
special case
[WRITE] @0x2003f1c ← 0x0d
[WRITE] @0x2003f20 ← 0x32
[WRITE] @0x2003f1c ← 0x0e
[WRITE] @0x2003f21 ← 0x02
[WRITE] @0x2003f1c ← 0x0f
[WRITE] @0x2003f22 ← 0x30
[WRITE] @0x2003f1c ← 0x10
[WRITE] @0x2003f23 ← 0x00
[WRITE] @0x2003f1c ← 0x11
[WRITE] @0x2003f24 ← 0x01
[WRITE] @0x2003f1c ← 0x12
[WRITE] @0x2003f25 ← 0x02
[WRITE] @0x2003f1c ← 0x13
[WRITE] @0x2003f26 ← 0x30
[WRITE] @0x2003f1c ← 0x14
[WRITE] @0x2003f27 ← 0x03
[WRITE] @0x2003f1c ← 0x15
[WRITE] @0x2003f28 ← 0x02
[WRITE] @0x2003f1c ← 0x16
[WRITE] @0x2003f29 ← 0x00
[WRITE] @0x2003f1c ← 0x17
[WRITE] @0x2003f2a ← 0x33
[WRITE] @0x2003f1c ← 0x18
[WRITE] @0x2003f2b ← 0x03
[WRITE] @0x2003f1c ← 0x19
[WRITE] @0x2003f2c ← 0x31
[WRITE] @0x2003f1c ← 0x1a
[WRITE] @0x2003f2d ← 0x30
[WRITE] @0x2003f1c ← 0x1b
  • 剩下的也是進行第一點的加密方式

綜合以上 可以寫出下面的解密script

step = [
    (0x28,0x51),(0x20,0x41),(0x18,0x31),(0x24,0x49),(0x1d,0x3b),(0x12,0x25),
    (0x0d,0x1b),(0x24,0x49),(0x0b,0x17),(0x1d,0x3b),(0x18,0x31),(0x1f,0x3f),
    (0x15,0x2b),(0x0e,0x1d),(0x2a,0x55),(0x14,0x29),(0x0b,0x17),(0x06,0x0d),
    (0x1a,0x35),(0x18,0x31),(0x18,0x31),(0x1d,0x3b),(0x1d,0x3b),(0x0e,0x1d),
    (0x03,0x07),(0x18,0x31),(0x08,0x11),(0x08,0x11),(0x29,0x53),(0x0b,0x17),
    (0x0d,0x1b),(0x12,0x25),(0x0e,0x1d),(0x19,0x33),(0x02,0x05),(0x17,0x2f),
    (0x11,0x23),(0x28,0x51),(0x11,0x23),(0x04,0x09),(0x15,0x2b),(0x16,0x2d),
    (0x2b,0x57),(0x20,0x41),(0x13,0x27),(0x0c,0x19),(0x2d,0x5b),(0x24,0x49),
    (0x23,0x47),(0x16,0x2d),(0x2b,0x57),(0x18,0x31),(0x1b,0x37),(0x08,0x11),
    (0x06,0x0d),(0x13,0x27),(0x26,0x4d),(0x15,0x2b),(0x1d,0x3b),(0x16,0x2d),
    (0x04,0x09),(0x02,0x05),(0x0a,0x15),(0x09,0x13),(0x24,0x49),(0x2c,0x59),
    (0x02,0x05),(0x11,0x23),(0x0f,0x1f),(0x22,0x45),(0x02,0x05),(0x14,0x29),
    (0x0d,0x1b),(0x26,0x4d),(0x09,0x13),(0x27,0x4f),(0x1a,0x35),(0x21,0x43),
    (0x2a,0x55),(0x13,0x27),(0x2e,0x5d),(0x18,0x31)
]

step2 = [
    (0x29, 0x53),
    (0x1d, 0x3b)
]

cipher_bytes = bytes([
    0x5a,0x60,0x61,0x0f,0x08,0x29,0x42,0x32,0x25,0x23,0x42,0x68,0x4b,0x41,
    0x63,0x55,0x37,0x43,0x6a,0x50,0x40,0x6f,0x2e,0x66,0x49,0x7f,0x09,0x66,
    0x79,0x7c,0x37,0x18,0x5d,0x35,0x46,0x41,0x37,0x0f,0x19,0x1c,0x30,0x79,
    0x29,0x69,0x0a,0x46,0x3b
])

def decrypt(first: int, length: int, data: bytearray) -> None:
    now = first
    for i in range(length - 1, -1, -1):
        j = (now + i) % 47
        data[i] ^= data[j]

def undo_xor_segment(data: bytearray) -> None:
    for k in range((0x1b - 0x0d) - 1, -1, -1):
        data[k] ^= data[k + 0x0d]

def main():
    buf = bytearray(cipher_bytes)

    for a, b in reversed(step2):
        decrypt(a, b - a, buf)

    undo_xor_segment(buf)

    for a, b in reversed(step):
        decrypt(a, b - a, buf)

    print(buf)             

if __name__ == "__main__":
    main()
unicorn1

🎏AIS3{UniCorn_2.1.3_fk_s1ow_BUT_this_chal_cool?}

AntiDbg++++

賽後解