alloc(BOOM,2048)
label(BOOMA)
label(BOOMC)
label(begin)
label(RB)
label(RWX)
label(RWY)
label(next)
label(end)
define(CHAR,044CB908)
define(RB_AD,01F232D2)
define(XZ,1C0)
define(YZ,1C4)
define(MAP,BC)
define(MAPS,C0)
define(MAPW,C4)
define(TYPE,98)
define(FX,A0)
LdrInitializeThunk:
mov edi,edi
push ebp
mov ebp,esp
mov edx,[ebp+0C]
mov ecx,[ebp+08]
BOOM:
mov edx,[CHAR]
cmp edx,0
je end
mov edx,[edx+MAP]
cmp edx,0
je end
mov eax,[edx+MAPS]
mov ebx,[edx+MAPW]
sub ebx,eax
begin:
cmp ebx,0
jle end
mov edx,[eax]
mov esi,[edx+TYPE]
cmp esi,#1057
je BOOMA
cmp esi,#289
je RB
next:
add eax,4
sub ebx,4
jmp begin
end:
push #50
call kernel32.sleep
jmp BOOM
RB:
mov ecx,[CHAR]
add ecx,XZ
mov [RWX],ecx
add ecx,4
mov [RWY],ecx
mov edx,[eax]
mov ecx,[edx+AC]
add ecx,10//16 X
mov edx,[RWX]
mov edx,[edx]
mov [ecx],edx//X
add ecx,4
mov edx,[RWY]
mov edx,[edx]
mov [ecx],edx
jmp next
RWX:
dd 0
RWY:
dd 0
BOOMA:
pushad
push edx
call BOOMC
popad
jmp next
BOOMC:
mov ecx,[esp+04]
mov esi,ecx
call,0220D0F0
ret 4
[ENABLE]
CreateThread(BOOM)
[DISABLE]

为什么非得加ke32？不直接Sleep

楼主，吸物是聚物吗？能给一个？

直接call sleep