00403301 $ 55 push ebp
00403302 . 8BEC mov ebp, esp
00403304 . 6A FF push -1
00403306 . 68 80A04000 push DNF夜行3.0040A080
0040330B . 68 E09D4000 push <jmp.&MSVCRT._except_handler3> ; SE 处理程序安装
00403310 . 64:A1 0000000>mov eax, dword ptr fs:[0]
00403316 . 50 push eax
00403317 . 64:8925 00000>mov dword ptr fs:[0], esp
0040331E . 83EC 68 sub esp, 68
00403321 . 53 push ebx
00403322 . 56 push esi
00403323 . 57 push edi
00403324 . 8965 E8 mov dword ptr ss:[ebp-18], esp
00403327 . 33C0 xor eax, eax
00403329 . 8945 FC mov dword ptr ss:[ebp-4], eax
0040332C . 8D4D DC lea ecx, dword ptr ss:[ebp-24]
0040332F . 8D55 E0 lea edx, dword ptr ss:[ebp-20]
00403332 . 03CA add ecx, edx
00403334 . 8D55 D8 lea edx, dword ptr ss:[ebp-28]
00403337 . 3BCA cmp ecx, edx
00403339 0F84 3C010000 je DNF夜行3.0040347B
0040333F . 8945 D4 mov dword ptr ss:[ebp-2C], eax
00403342 . 8945 D0 mov dword ptr ss:[ebp-30], eax
00403345 > 8B4D D4 mov ecx, dword ptr ss:[ebp-2C]
00403348 . 8039 00 cmp byte ptr ds:[ecx], 0 单步跟到此处即跳转看，然后就无法跟下去了
0040334B 74 08 je short DNF夜行3.00403355
0040334D . FF45 D4 inc dword ptr ss:[ebp-2C]
00403350 . FF45 D0 inc dword ptr ss:[ebp-30]
00403353 .^ EB F0 jmp short DNF夜行3.00403345
00403355 > 3945 D0 cmp dword ptr ss:[ebp-30], eax
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
