004A8C4D |> /B8 01000000 /mov eax, 1
004A8C52 |. |85C0 |test eax, eax
004A8C54 |. |0F84 EC000000 |je 004A8D46
004A8C5A |. |8B4D E4 |mov ecx, dword ptr [ebp-1C]
004A8C5D |. |51 |push ecx
004A8C5E |. |68 C8CF4B00 |push 004BCFC8 ; ASCII "src="""
004A8C63 |. |8D4D E0 |lea ecx, dword ptr [ebp-20]
004A8C66 |. |E8 758FF5FF |call 00401BE0
004A8C6B |. |8945 D4 |mov dword ptr [ebp-2C], eax
004A8C6E |. |837D D4 FF |cmp dword ptr [ebp-2C], -1
004A8C72 |. |75 05 |jnz short 004A8C79
004A8C74 |. |E9 CD000000 |jmp 004A8D46
004A8C79 |> |8B55 D4 |mov edx, dword ptr [ebp-2C]
004A8C7C |. |83C2 05 |add edx, 5
004A8C7F |. |52 |push edx
004A8C80 |. |68 D0CF4B00 |push 004BCFD0
004A8C85 |. |8D4D E0 |lea ecx, dword ptr [ebp-20]
004A8C88 |. |E8 538FF5FF |call 00401BE0
004A8C8D |. |8945 E4 |mov dword ptr [ebp-1C], eax
004A8C90 |. |6A 18 |push 18
004A8C92 |. |E8 12A4FBFF |call 004630A9
004A8C97 |. |83C4 04 |add esp, 4
004A8C9A |. |8945 B8 |mov dword ptr [ebp-48], eax
004A8C9D |. |837D B8 00 |cmp dword ptr [ebp-48], 0
004A8CA1 |. |74 0D |je short 004A8CB0
004A8CA3 |. |8B4D B8 |mov ecx, dword ptr [ebp-48]
004A8CA6 |. |E8 458CF5FF |call 004018F0
004A8CAB |. |8945 80 |mov dword ptr [ebp-80], eax
004A8CAE |. |EB 07 |jmp short 004A8CB7
004A8CB0 |> |C745 80 00000>|mov dword ptr [ebp-80], 0
004A8CB7 |> |8B45 80 |mov eax, dword ptr [ebp-80]
004A8CBA |. |8945 F0 |mov dword ptr [ebp-10], eax
004A8CBD |. |8B4D E4 |mov ecx, dword ptr [ebp-1C]
004A8CC0 |. |2B4D D4 |sub ecx, dword ptr [ebp-2C]
004A8CC3 |. |83E9 05 |sub ecx, 5
004A8CC6 |. |51 |push ecx
004A8CC7 |. |8B55 D4 |mov edx, dword ptr [ebp-2C]
004A8CCA |. |83C2 05 |add edx, 5
004A8CCD |. |52 |push edx
004A8CCE |. |8D45 B4 |lea eax, dword ptr [ebp-4C]
004A8CD1 |. |50 |push eax
004A8CD2 |. |8D4D E0 |lea ecx, dword ptr [ebp-20]
004A8CD5 |. |E8 A68FF5FF |call 00401C80
004A8CDA |. |8985 7CFFFFFF |mov dword ptr [ebp-84], eax
004A8CE0 |. |8B8D 7CFFFFFF |mov ecx, dword ptr [ebp-84]
004A8CE6 |. |898D 78FFFFFF |mov dword ptr [ebp-88], ecx
004A8CEC |. |C645 FC 05 |mov byte ptr [ebp-4], 5
004A8CF0 |. |8B95 78FFFFFF |mov edx, dword ptr [ebp-88]
004A8CF6 |. |52 |push edx
004A8CF7 |. |8B4D F0 |mov ecx, dword ptr [ebp-10]
004A8CFA |. |83C1 0C |add ecx, 0C
004A8CFD |. |E8 5EB7F5FF |call 00404460
004A8D02 |. |C645 FC 02 |mov byte ptr [ebp-4], 2
004A8D06 |. |8D4D B4 |lea ecx, dword ptr [ebp-4C]
004A8D09 |. |E8 02DFF5FF |call 00406C10
004A8D0E |. |8B45 F0 |mov eax, dword ptr [ebp-10]
004A8D11 |. |83C0 0C |add eax, 0C
004A8D14 |. |50 |push eax
004A8D15 |. |8B4D F0 |mov ecx, dword ptr [ebp-10]
004A8D18 |. |83C1 08 |add ecx, 8
004A8D1B |. |E8 40B7F5FF |call 00404460
004A8D20 |. |8B4D F0 |mov ecx, dword ptr [ebp-10]
004A8D23 |. |894D B0 |mov dword ptr [ebp-50], ecx
004A8D26 |. |8D55 B0 |lea edx, dword ptr [ebp-50]
004A8D29 |. |52 |push edx
004A8D2A |. |8B4D 0C |mov ecx, dword ptr [ebp+C]
004A8D2D |. |E8 AE92F5FF |call 00401FE0
004A8D32 |. |8B4D 0C |mov ecx, dword ptr [ebp+C]
004A8D35 |. |E8 5698F5FF |call 00402590
004A8D3A |83F8 05 cmp eax, 5
004A8D3D |72 02 jb short 004A8D41
004A8D3F |. |EB 05 |jmp short 004A8D46
004A8D41 |>^\E9 07FFFFFF \jmp 004A8C4D
数目限制是5，在最下面代码段
004A8D3A |83F8 05 cmp eax, 5
004A8D3D |72 02 jb short 004A8D41
004A8D3F |. |EB 05 |jmp short 004A8D46
004A8D41 |>^\E9 07FFFFFF \jmp 004A8C4D
然后跳到上面去了，我想怎么可以让他不限制！谢谢啦！
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
