有点麻烦,不过跟出了检验的地方:
CODE
009BE910 6A FF PUSH -1
009BE912 68 0BF7A200 PUSH 0A2F70B
009BE917 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
009BE91D 50 PUSH EAX
009BE91E 64:8925 0000000>MOV DWORD PTR FS:[0],ESP
009BE925 81EC 98000000 SUB ESP,98
009BE92B 53 PUSH EBX
009BE92C 55 PUSH EBP
009BE92D 899424 9C000000 MOV DWORD PTR SS:[ESP+9C],EDX
009BE934 8BE9 MOV EBP,ECX
009BE936 B1 8E MOV CL,8E
009BE938 B0 C6 MOV AL,0C6
009BE93A B3 0F MOV BL,0F
009BE93C 56 PUSH ESI
009BE93D B2 AE MOV DL,0AE
009BE93F 57 PUSH EDI
009BE940 C64424 1C E9 MOV BYTE PTR SS:[ESP+1C],0E9
009BE945 C64424 1D A8 MOV BYTE PTR SS:[ESP+1D],0A8
009BE94A C64424 1E 57 MOV BYTE PTR SS:[ESP+1E],57
009BE94F C64424 1F 46 MOV BYTE PTR SS:[ESP+1F],46
009BE954 C64424 20 EB MOV BYTE PTR SS:[ESP+20],0EB
009BE959 C64424 21 D8 MOV BYTE PTR SS:[ESP+21],0D8
009BE95E C64424 22 FA MOV BYTE PTR SS:[ESP+22],0FA
009BE963 C64424 23 D7 MOV BYTE PTR SS:[ESP+23],0D7
009BE968 C64424 24 8B MOV BYTE PTR SS:[ESP+24],8B
009BE96D C64424 25 F4 MOV BYTE PTR SS:[ESP+25],0F4
009BE972 C64424 26 21 MOV BYTE PTR SS:[ESP+26],21
9AF26A这个跳转不跳就可以了。
吃饭去了,不玩了~