00E98680->160->6C
EAX=14C50F00
EBX=00000000
ECX=14C50F1C
EDX=14CBC538
ESI=14CBC538
EDI=14A51008
EBP=0012FAC4
ESP=0012FA70
EIP=0042A000
Probable base pointer =14A51008
00429ff7 - jne 00429fe0
00429ff9 - mov esi,[edi+04]
00429ffc - add dword ptr [edi+6c],01
0042a000 - call 0040ca50
0042a005 - fld dword ptr [00679f04]
EAX=00000000
EBX=000001CC
ECX=000001C1
EDX=14841BF8
ESI=14841BF8
EDI=14A51008
EBP=14CBC538
ESP=0012FA28
EIP=0040F331
Probable base pointer =14CBC538
0040f323 - mov ecx,[esp+7c]
0040f327 - mov byte ptr [edx+65],00
0040f32b - mov edi,[ebp+00000160]
0040f331 - mov edx,ebx
标签:EIP,14CBC538,edi,mov,地址,轮数,ptr,14A51008,僵尸
From: https://blog.51cto.com/u_16076050/6240051