怎样可以返回正确的值？
080C13F5 FFD5 call ebp
080C13F7 85C0 test eax, eax
080C13F9 0F84 7A020000 je 080C1679
080C13FF |. 53 push ebx ; /hTemplateFile
080C1400 |. 53 push ebx ; |Attributes
080C1401 |. 6A 03 push 3 ; |Mode = OPEN_EXISTING
080C1403 |. 53 push ebx ; |pSecurity
080C1404 |. 6A 03 push 3 ; |ShareMode = FILE_SHARE_READ|FILE_SHARE_WRITE
080C1406 |. 8D8C24 780400>lea ecx, dword ptr [esp+478] ; |
080C140D |. 68 000000C0 push C0000000 ; |Access = GENERIC_READ|GENERIC_WRITE
080C1412 |. 51 push ecx ; |FileName
080C1413 |. FF15 3C700C08 call dword ptr [<&KERNEL32.CreateFile>; \CreateFileA
080C1419 |. 8B15 E8CC0C08 mov edx, dword ptr [80CCCE8]
080C141F |. 8D0C52 lea ecx, dword ptr [edx+edx*2]
080C1422 |. C1E1 03 shl ecx, 3
080C1425 |. 2BCA sub ecx, edx
080C1427 |. 3BC3 cmp eax, ebx
080C1429 |. 8D1449 lea edx, dword ptr [ecx+ecx*2]
080C142C |. 890495 68AB0C>mov dword ptr [edx*4+80CAB68], eax
080C1433 |. 0F84 4A020000 je 080C1683
080C1439 |. 8D4C24 24 lea ecx, dword ptr [esp+24]
080C143D |. C74424 24 0C0>mov dword ptr [esp+24], 0C
080C1445 |. 51 push ecx
080C1446 |. 50 push eax
080C1447 |. E8 04070000 call <jmp.&HID.HidD_GetAttributes> ; 建立与设备通信
080C144C |. 84C0 test al, al
080C144E |. 74 6F je short 080C14BF
080C1450 |. 66:817C24 28 >cmp word ptr [esp+28], 96E
080C1457 |. 75 66 jnz short 080C14BF
080C1459 |. 66:817C24 2A >cmp word ptr [esp+2A], 201
080C1460 |. 75 5D jnz short 080C14BF
080C1462 |. 8B0D E8CC0C08 mov ecx, dword ptr [80CCCE8]
080C1468 |. 8D0449 lea eax, dword ptr [ecx+ecx*2]
080C146B |. C1E0 03 shl eax, 3
080C146E |. 2BC1 sub eax, ecx
080C1470 |. 8D1440 lea edx, dword ptr [eax+eax*2]
080C1473 |. 8B0495 68AB0C>mov eax, dword ptr [edx*4+80CAB68]
080C147A |. 50 push eax
080C147B |. E8 80FCFFFF call 080C1100
080C1480 |. 83C4 04 add esp, 4
080C1483 |. 3BC3 cmp eax, ebx
080C1485 |. 894424 10 mov dword ptr [esp+10], eax
080C1489 |. 75 34 jnz short 080C14BF
080C148B |. 8D4C24 60 lea ecx, dword ptr [esp+60]
080C148F |. 68 00040000 push 400
080C1494 |. 51 push ecx
080C1495 |. 8B0D E8CC0C08 mov ecx, dword ptr [80CCCE8]
080C149B |. 8D0449 lea eax, dword ptr [ecx+ecx*2]
080C149E |. C1E0 03 shl eax, 3
080C14A1 |. 2BC1 sub eax, ecx
080C14A3 |. 8D1440 lea edx, dword ptr [eax+eax*2]
080C14A6 |. 8B0495 68AB0C>mov eax, dword ptr [edx*4+80CAB68]
080C14AD |. 50 push eax
080C14AE |. E8 97060000 call <jmp.&HID.HidD_GetProductString>
080C14B3 |. 84C0 test al, al
080C14B5 |. 75 59 jnz short 080C1510
080C14B7 |. C74424 10 120>mov dword ptr [esp+10], A0100012
080C14BF |> 8B2D E8CC0C08 mov ebp, dword ptr [80CCCE8]
080C14C5 |> 8D446D 00 lea eax, dword ptr [ebp+ebp*2]
080C14C9 |. C1E0 03 shl eax, 3
080C14CC |. 2BC5 sub eax, ebp
080C14CE |. 8D0C40 lea ecx, dword ptr [eax+eax*2]
080C14D1 |. 8B148D 68AB0C>mov edx, dword ptr [ecx*4+80CAB68]
080C14D8 |. 52 push edx ; /hObject
080C14D9 |. FF15 9C700C08 call dword ptr [<&KERNEL32.CloseHandl>; \CloseHandle
080C14DF |. 8B0D E8CC0C08 mov ecx, dword ptr [80CCCE8]
080C14E5 |. 8D0449 lea eax, dword ptr [ecx+ecx*2]
080C14E8 |. C1E0 03 shl eax, 3
080C14EB |. 2BC1 sub eax, ecx
080C14ED |. 8D0440 lea eax, dword ptr [eax+eax*2]
080C14F0 |. 891C85 68AB0C>mov dword ptr [eax*4+80CAB68], ebx
080C14F7 |. 8B4424 14 mov eax, dword ptr [esp+14]
080C14FB |. 40 inc eax
080C14FC |. 3D 80000000 cmp eax, 80
080C1501 |. 894424 14 mov dword ptr [esp+14], eax
080C1505 |.^ 0F8C 75FEFFFF jl 080C1380
080C150B |. E9 7B010000 jmp 080C168B
080C1510 |> 8D4C24 60 lea ecx, dword ptr [esp+60]
080C1514 |. 51 push ecx
080C1515 |. E8 96FDFFFF call 080C12B0
080C151A |. 83C4 04 add esp, 4
080C151D |. BE 44800C08 mov esi, 080C8044 ; usb dongle
080C1522 |. 8D4424 60 lea eax, dword ptr [esp+60]
080C1526 |> 8A10 /mov dl, byte ptr [eax]
080C1528 |. 8ACA |mov cl, dl
080C152A |. 3A16 |cmp dl, byte ptr [esi]
080C152C |. 75 1C |jnz short 080C154A
080C152E |. 3ACB |cmp cl, bl
080C1530 |. 74 14 |je short 080C1546
080C1532 |. 8A50 01 |mov dl, byte ptr [eax+1]
080C1535 |. 8ACA |mov cl, dl
080C1537 |. 3A56 01 |cmp dl, byte ptr [esi+1]
080C153A |. 75 0E |jnz short 080C154A
080C153C |. 83C0 02 |add eax, 2
080C153F |. 83C6 02 |add esi, 2
080C1542 |. 3ACB |cmp cl, bl
080C1544 |.^ 75 E0 \jnz short 080C1526
080C1546 |> 33C0 xor eax, eax
080C1548 |. EB 05 jmp short 080C154F
080C154A |> 1BC0 sbb eax, eax
080C154C |. 83D8 FF sbb eax, -1
080C154F |> 3BC3 cmp eax, ebx
080C1551 |. 74 17 je short 080C156A
080C1553 |. 8B2D E8CC0C08 mov ebp, dword ptr [80CCCE8]
080C1559 |. 8B7424 18 mov esi, dword ptr [esp+18]
080C155D |. C74424 10 200>mov dword ptr [esp+10], A0100020
080C1565 |.^ E9 5BFFFFFF jmp 080C14C5
080C156A |> 8B0D E8CC0C08 mov ecx, dword ptr [80CCCE8]
080C1570 |. 8D4424 60 lea eax, dword ptr [esp+60]
080C1574 |. 68 00040000 push 400
080C1579 |. 50 push eax
080C157A |. 8D0449 lea eax, dword ptr [ecx+ecx*2]
080C157D |. C1E0 03 shl eax, 3
080C1580 |. 2BC1 sub eax, ecx
080C1582 |. 8D0C40 lea ecx, dword ptr [eax+eax*2]
080C1585 |. 8B148D 68AB0C>mov edx, dword ptr [ecx*4+80CAB68]
080C158C |. 52 push edx
080C158D |. E8 B2050000 call <jmp.&HID.HidD_GetSerialNumberSt>
080C1592 |. 84C0 test al, al
080C1594 |. 75 17 jnz short 080C15AD
080C1596 |. 8B2D E8CC0C08 mov ebp, dword ptr [80CCCE8]
080C159C |. 8B7424 18 mov esi, dword ptr [esp+18]
080C15A0 |. C74424 10 110>mov dword ptr [esp+10], A0100011
080C15A8 |.^ E9 18FFFFFF jmp 080C14C5
080C15AD |> 8D4424 60 lea eax, dword ptr [esp+60]
080C15B1 |. 50 push eax
080C15B2 |. E8 F9FCFFFF call 080C12B0
080C15B7 |. 8D4C24 64 lea ecx, dword ptr [esp+64]
080C15BB |. 51 push ecx
080C15BC |. E8 0FFDFFFF call 080C12D0
080C15C1 |. 8B15 E8CC0C08 mov edx, dword ptr [80CCCE8]
080C15C7 |. 8D0C52 lea ecx, dword ptr [edx+edx*2]
080C15CA |. C1E1 03 shl ecx, 3
080C15CD |. 2BCA sub ecx, edx
080C15CF |. 8D1449 lea edx, dword ptr [ecx+ecx*2]
080C15D2 |. 890495 70AB0C>mov dword ptr [edx*4+80CAB70], eax
080C15D9 |. 8D4424 70 lea eax, dword ptr [esp+70]
080C15DD |. 50 push eax
080C15DE |. E8 EDFCFFFF call 080C12D0
080C15E3 |. 8B2D E8CC0C08 mov ebp, dword ptr [80CCCE8]
080C15E9 |. 8DBC24 700400>lea edi, dword ptr [esp+470]
080C15F0 |. 83C4 0C add esp, 0C
080C15F3 |. 8D4C6D 00 lea ecx, dword ptr [ebp+ebp*2]
080C15F7 |. C1E1 03 shl ecx, 3
080C15FA |. 2BCD sub ecx, ebp
080C15FC |. 8D1449 lea edx, dword ptr [ecx+ecx*2]
080C15FF |. C1E2 02 shl edx, 2
080C1602 |. 8982 6CAB0C08 mov dword ptr [edx+80CAB6C], eax
080C1608 |. 8B8A 70AB0C08 mov ecx, dword ptr [edx+80CAB70]
080C160E |. 33C8 xor ecx, eax
080C1610 |. 66:8B4424 2C mov ax, word ptr [esp+2C]
080C1615 |. 898A 6CAB0C08 mov dword ptr [edx+80CAB6C], ecx
080C161B |. 66:8982 74AB0>mov word ptr [edx+80CAB74], ax
080C1622 |. 83C9 FF or ecx, FFFFFFFF
080C1625 |. 33C0 xor eax, eax
080C1627 |. F2:AE repne scas byte ptr es:[edi]
080C1629 |. F7D1 not ecx
080C162B |. 8DB2 68AA0C08 lea esi, dword ptr [edx+80CAA68]
080C1631 |. 2BF9 sub edi, ecx
080C1633 |. 8BC1 mov eax, ecx
080C1635 |. 897424 20 mov dword ptr [esp+20], esi
080C1639 |. 8BF7 mov esi, edi
080C163B |. 8B7C24 20 mov edi, dword ptr [esp+20]
080C163F |. C1E9 02 shr ecx, 2
080C1642 |. F3:A5 rep movs dword ptr es:[edi], dword p>
080C1644 |. 8BC8 mov ecx, eax
080C1646 |. 83E1 03 and ecx, 3
080C1649 |. 45 inc ebp
080C164A |. F3:A4 rep movs byte ptr es:[edi], byte ptr>
080C164C |. 8B7424 18 mov esi, dword ptr [esp+18]
080C1650 |. 899A 68AB0C08 mov dword ptr [edx+80CAB68], ebx
080C1656 |. 892D E8CC0C08 mov dword ptr [80CCCE8], ebp
080C165C |.^ E9 64FEFFFF jmp 080C14C5
080C1661 |> 391D E8CC0C08 cmp dword ptr [80CCCE8], ebx
080C1667 |. 76 22 jbe short 080C168B
080C1669 |. 895C24 10 mov dword ptr [esp+10], ebx
080C166D |. EB 1C jmp short 080C168B
080C166F |> C74424 10 130>mov dword ptr [esp+10], A0100013
080C1677 |. EB 12 jmp short 080C168B
080C1679 |> C74424 10 0A0>mov dword ptr [esp+10], A010000A
080C1681 |. EB 08 jmp short 080C168B
080C1683 |> C74424 10 070>mov dword ptr [esp+10], A0100007
080C168B |> 56 push esi
080C168C |. FF15 14710C08 call dword ptr [<&SETUPAPI.SetupDiDes>; SETUPAPI.SetupDiDestroyDeviceInfoList
080C1692 |. 5F pop edi
080C1693 |. 5E pop esi
080C1694 |. 8B4424 08 mov eax, dword ptr [esp+8]
080C1698 |. 5D pop ebp
080C1699 |. 3BC3 cmp eax, ebx
080C169B |. 5B pop ebx
080C169C |. 75 05 jnz short 080C16A3
080C169E |. A1 E8CC0C08 mov eax, dword ptr [80CCCE8]
080C16A3 |> 81C4 50140000 add esp, 1450
080C16A9 \. C3 retn
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
