查不出来,用od停在这
0042AF61 9C pushfd
0042AF62 60 pushad
0042AF63 E8 00000000 call 0042AF68
0042AF68 5D pop ebp
0042AF69 B8 B1854000 mov eax,004085B1
0042AF6E 2D AA854000 sub eax,004085AA
0042AF73 2BE8 sub ebp,eax
0042AF75 8DB5 CBFEFFFF lea esi,dword ptr ss:[ebp-13>
0042AF7B 8B06 mov eax,dword ptr ds:[esi]
0042AF7D 83F8 00 cmp eax,0
0042AF80 74 11 je short 0042AF93
0042AF82 8DB5 D7FEFFFF lea esi,dword ptr ss:[ebp-12>
0042AF88 8B06 mov eax,dword ptr ds:[esi]
0042AF8A 83F8 01 cmp eax,1
0042AF8D 0F84 F1010000 je 0042B184
0042AF93 C706 01000000 mov dword ptr ds:[esi],1
0042AF99 8BD5 mov edx,ebp
0042AF9B 8B85 A7FEFFFF mov eax,dword ptr ss:[ebp-15>
0042AFA1 2BD0 sub edx,eax
0042AFA3 8995 A7FEFFFF mov dword ptr ss:[ebp-159],e>
0042AFA9 0195 BFFEFFFF add dword ptr ss:[ebp-141],e>
0042AFAF 8DB5 DBFEFFFF lea esi,dword ptr ss:[ebp-12>
0042AFB5 0116 add dword ptr ds:[esi],edx
0042AFB7 8B36 mov esi,dword ptr ds:[esi]
0042AFB9 8BFD mov edi,ebp
0042AFBB 60 pushad
0042AFBC 6A 40 push 40
0042AFBE 68 00100000 push 1000
0042AFC3 68 00100000 push 1000
0042AFC8 6A 00 push 0
0042AFCA FF95 FBFEFFFF call near dword ptr ss:[ebp->
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课