00424A7F . 50 push eax ; /ProcNameOrOrdinal
00424A80 . 51 push ecx ; |/FileName
00424A81 . C645 B8 6B mov byte ptr ss:[ebp-48], 6B ; ||
00424A85 . 885D B9 mov byte ptr ss:[ebp-47], bl ; ||
00424A88 . C645 BA 72 mov byte ptr ss:[ebp-46], 72 ; ||
00424A8C . C645 BB 6E mov byte ptr ss:[ebp-45], 6E ; ||
00424A90 . 885D BC mov byte ptr ss:[ebp-44], bl ; ||
00424A93 . C645 BD 6C mov byte ptr ss:[ebp-43], 6C ; ||
00424A97 . C645 BE 33 mov byte ptr ss:[ebp-42], 33 ; ||
00424A9B . C645 BF 32 mov byte ptr ss:[ebp-41], 32 ; ||
00424A9F . C645 C0 2E mov byte ptr ss:[ebp-40], 2E ; ||
00424AA3 . C645 C1 64 mov byte ptr ss:[ebp-3F], 64 ; ||
00424AA7 . C645 C2 6C mov byte ptr ss:[ebp-3E], 6C ; ||
00424AAB . C645 C3 6C mov byte ptr ss:[ebp-3D], 6C ; ||
00424AAF . C685 7CFFFFFF>mov byte ptr ss:[ebp-84], 47 ; ||
00424AB6 . 889D 7DFFFFFF mov byte ptr ss:[ebp-83], bl ; ||
00424ABC . C685 7EFFFFFF>mov byte ptr ss:[ebp-82], 74 ; ||
00424AC3 . C685 7FFFFFFF>mov byte ptr ss:[ebp-81], 53 ; ||
00424ACA . C645 81 73 mov byte ptr ss:[ebp-7F], 73 ; ||
00424ACE . C645 82 74 mov byte ptr ss:[ebp-7E], 74 ; ||
00424AD2 . 885D 83 mov byte ptr ss:[ebp-7D], bl ; ||
00424AD5 . C645 84 6D mov byte ptr ss:[ebp-7C], 6D ; ||
00424AD9 . C645 85 44 mov byte ptr ss:[ebp-7B], 44 ; ||
00424ADD . C645 86 69 mov byte ptr ss:[ebp-7A], 69 ; ||
00424AE1 . C645 87 72 mov byte ptr ss:[ebp-79], 72 ; ||
00424AE5 . 885D 88 mov byte ptr ss:[ebp-78], bl ; ||
00424AE8 . C645 89 63 mov byte ptr ss:[ebp-77], 63 ; ||
00424AEC . C645 8A 74 mov byte ptr ss:[ebp-76], 74 ; ||
00424AF0 . C645 8B 6F mov byte ptr ss:[ebp-75], 6F ; ||
00424AF4 . C645 8C 72 mov byte ptr ss:[ebp-74], 72 ; ||
00424AF8 . C645 8E 41 mov byte ptr ss:[ebp-72], 41 ; ||
00424AFC . C645 8F 00 mov byte ptr ss:[ebp-71], 0 ; ||
00424B00 . FFD7 call near edi ; |\LoadLibraryA
00424B02 . 8B35 14124000 mov esi, dword ptr ds:[401214] ; |kernel32.GetProcAddress
00424B08 . 50 push eax ; |hModule
00424B09 . FFD6 call near esi ; \GetProcAddress
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
