据统计90%查看本帖的人,都已经注册本站了哦
您需要 登录 才可以下载或查看，没有账号？立即注册
×
[Asm] 纯文本查看 复制代码 75971F00 <user32.MessageBoxW> | 8BFF | mov edi,edi |
75971F02 | 55 | push ebp |
75971F03 | 8BEC | mov ebp,esp |
75971F05 | 833D 946C9975 00 | cmp dword ptr ds:[75996C94],0 |
75971F0C | 74 22 | je user32.75971F30 |
75971F00 <user32.MessageBoxW> | E9 FBE0E891 | jmp 7800000 |
75971F05 | 833D 946C9975 00 | cmp dword ptr ds:[75996C94],0 |
75971F0C | 74 22 | je user32.75971F30 |
07800000 | 0000 | add byte ptr ds:[eax],al | 用户分配的内存
07800002 | 0000 | add byte ptr ds:[eax],al |
07800004 | 0000 | add byte ptr ds:[eax],al |
07800006 | 0000 | add byte ptr ds:[eax],al |
07800008 | 0000 | add byte ptr ds:[eax],al |
0780000A | 0000 | add byte ptr ds:[eax],al |
0780000C | 0000 | add byte ptr ds:[eax],al |
0780000E | 0000 | add byte ptr ds:[eax],al |
07800010 | 0000 | add byte ptr ds:[eax],al |
07800000 | 89FF | mov edi,edi | 空白地址
07800002 | 55 | push ebp |
07800003 | 89E5 | mov ebp,esp |
07800005 | E9 FB1E176E | jmp user32.75971F05 |
=======X64
00007FF8263FC970 <user32.MessageBoxW> | 48:83EC 38 | sub rsp,38 |
00007FF8263FC974 | 45:33DB | xor r11d,r11d |
00007FF8263FC977 | 44:391D 72790300 | cmp dword ptr ds:[7FF8264342F0],r11d |
00007FF8263FC97E | 74 2E | je user32.7FF8263FC9AE |
00007FF8263FC980 | 6548:8B0425 30000000 | mov rax,qword ptr gs:[30] | 0000000000000030:L"退效X"
00007FF8263FC989 | 4C:8B50 48 | mov r10,qword ptr ds:[rax+48] |
00007FF8263FC98D | 33C0 | xor eax,eax |
00007FF8263FC98F | F04C:0FB115 38850300 | lock cmpxchg qword ptr ds:[7FF826434ED0],r10 |
00007FF8263FC998 | 4C:8B15 39850300 | mov r10,qword ptr ds:[7FF826434ED8] |
00007FF8263FC99F | 41:8D43 01 | lea eax,qword ptr ds:[r11+1] |
00007FF8263FC9A3 | 4C:0F44D0 | cmove r10,rax |
00007FF8263FC9A7 | 4C:8915 2A850300 | mov qword ptr ds:[7FF826434ED8],r10 |
00007FF8263FC9AE | 834C24 28 FF | or dword ptr ss:[rsp+28],FFFFFFFF |
00007FF8263FC9B3 | 6644:895C24 20 | mov word ptr ss:[rsp+20],r11w |
00007FF8263FC9B9 | E8 D2FDFFFF | call <user32.MessageBoxTimeoutW> |
00007FF8263FC9BE | 48:83C4 38 | add rsp,38 |
00007FF8263FC9C2 | C3 | ret |
00007FF8263FC970 <user32.MessageBoxW> | FF25 C8090000 | jmp qword ptr ds:[7FF8263FD33E] |
00007FF8263FC976 | 90 | nop |
00007FF8263FC977 | 44:391D 72790300 | cmp dword ptr ds:[7FF8264342F0],r11d |
00007FF8263FD33E | 0000 | add byte ptr ds:[rax],al |
00007FF8263FD340 | A8 39 | test al,39 |
00007FF8263FD342 | AD | lodsd |
00007FF8263FD343 | 0100 | add dword ptr ds:[rax],eax |
00007FF8263FD345 | 00CC | add ah,cl |
000001AD39A80000 | 48:83EC 38 | sub rsp,38 | 用户分配的内存
000001AD39A80004 | 45:31DB | xor r11d,r11d |
000001AD39A80007 | FF25 09000000 | jmp qword ptr ds:[1AD39A80016] |
000001AD39A8000D | 90 | nop |
000001AD39A8000E | 0000 | add byte ptr ds:[rax],al |
000001AD39A80010 | 0000 | add byte ptr ds:[rax],al |
000001AD39A80012 | 0000 | add byte ptr ds:[rax],al |
000001AD39A80014 | 0000 | add byte ptr ds:[rax],al |
000001AD39A80016 | 77 C9 | ja 1AD39A7FFE1 |
000001AD39A80018 | 3F | ??? |
000001AD39A80019 | 26:F8 | clc |
000001AD39A8001B | 7F 00 | jg 1AD39A8001D |
| 
/5 
已绑定手机
已实名认证
变色卡