0049B372 . 57 push edi ; (initial cpu selection)
0049B373 . 8BF0 mov esi, eax
0049B375 . BB 74FE5200 mov ebx, 0052FE74
0049B37A . 33C0 xor eax, eax
0049B37C . 55 push ebp
0049B37D . 68 2ACD4900 push 0049CD2A
0049B382 . 64:FF30 push dword ptr fs:[eax]
0049B385 . 64:8920 mov dword ptr fs:[eax], esp
0049B388 . 8D45 DC lea eax, dword ptr [ebp-24]
0049B38B . E8 909DF6FF call 00405120
0049B390 . 8D95 FCFDFFFF lea edx, dword ptr [ebp-204]
0049B396 . 8B86 64030000 mov eax, dword ptr [esi+364]
0049B39C . E8 1FC1FAFF call 004474C0
0049B3A1 . 8B85 FCFDFFFF mov eax, dword ptr [ebp-204]
0049B3A7 . 8D55 FC lea edx, dword ptr [ebp-4]
0049B3AA . E8 D5E3F6FF call 00409784
0049B3AF . 8D95 F8FDFFFF lea edx, dword ptr [ebp-208]
0049B3B5 . 8B45 FC mov eax, dword ptr [ebp-4]
0049B3B8 . E8 27E0F6FF call 004093E4
0049B3BD . 8B95 F8FDFFFF mov edx, dword ptr [ebp-208]
0049B3C3 . 8B45 FC mov eax, dword ptr [ebp-4]
0049B3C6 . E8 7DA1F6FF call 00405548
0049B3CB . 0F84 AD000000 je 0049B47E
0049B3D1 . 33C0 xor eax, eax
0049B3D3 . 55 push ebp
0049B3D4 . 68 5BB44900 push 0049B45B
0049B3D9 . 64:FF30 push dword ptr fs:[eax]
0049B3DC . 64:8920 mov dword ptr fs:[eax], esp
0049B3DF . 8D95 F0FDFFFF lea edx, dword ptr [ebp-210]
0049B3E5 . 8B45 FC mov eax, dword ptr [ebp-4]
0049B3E8 . E8 F7DFF6FF call 004093E4
0049B3ED . 8B85 F0FDFFFF mov eax, dword ptr [ebp-210]
0049B3F3 . 8D95 F4FDFFFF lea edx, dword ptr [ebp-20C]
0049B3F9 . E8 F2440000 call 0049F8F0
0049B3FE . 8B95 F4FDFFFF mov edx, dword ptr [ebp-20C]
0049B404 . 8BC3 mov eax, ebx
0049B406 . E8 699DF6FF call 00405174
0049B40B . B2 01 mov dl, 1
0049B40D . A1 E0764100 mov eax, dword ptr [4176E0]
0049B412 . E8 8D8EF6FF call 004042A4
0049B417 . BA 44CD4900 mov edx, 0049CD44 ; ,
0049B41C . 8B03 mov eax, dword ptr [ebx]
0049B41E . E8 FD490000 call 0049FE20
0049B423 . 8945 CC mov dword ptr [ebp-34], eax
0049B426 . 8D8D ECFDFFFF lea ecx, dword ptr [ebp-214]
0049B42C . BA 01000000 mov edx, 1
0049B431 . 8B45 CC mov eax, dword ptr [ebp-34]
0049B434 . 8B38 mov edi, dword ptr [eax]
0049B436 . FF57 0C call dword ptr [edi+C]
0049B439 . 8B95 ECFDFFFF mov edx, dword ptr [ebp-214]
0049B43F . 8BC3 mov eax, ebx
0049B441 . E8 2E9DF6FF call 00405174
0049B446 . 8B45 CC mov eax, dword ptr [ebp-34]
0049B449 . E8 868EF6FF call 004042D4
0049B44E . 33C0 xor eax, eax
0049B450 . 5A pop edx
0049B451 . 59 pop ecx
0049B452 . 59 pop ecx
0049B453 . 64:8910 mov dword ptr fs:[eax], edx
0049B456 . E9 83010000 jmp 0049B5DE
0049B45B ^ E9 5493F6FF jmp 004047B4
0049B460 . B8 50CD4900 mov eax, 0049CD50 ; 执行密码不正确
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
