完美的笑傲江湖登陆时的控件基址偏移
dd [[[[[+24]+8]+320+0*4]+78]+248]基址如下：
004B09E3 > \FF15 EC710701 call dword ptr ds:[<&KERNEL32.GetTickCou>; [GetTickCount
004B09E9 .A3 C4193101 mov dword ptr ds:,eax
004B09EE >A1 A8193101 mov eax,dword ptr ds:
004B09F3 .85C0 test eax,eax
004B09F5 .8B6C24 14 mov ebp,dword ptr ss:
004B09F9 .8B7C24 20 mov edi,dword ptr ss:
004B09FD .74 4C je short xajh.004B0A4B
004B09FF .8B48 28 mov ecx,dword ptr ds:
004B0A02 .85C9 test ecx,ecx
004B0A04 .74 29 je short xajh.004B0A2F
004B0A06 .81FB E9070000 cmp ebx,0x7E9
004B0A0C .75 0E jnz short xajh.004B0A1C
004B0A0E .85FF test edi,edi
004B0A10 .0F95C0 setne al
004B0A13 .50 push eax
004B0A14 .56 push esi
004B0A15 .E8 F6937200 call xajh.00BD9E10
004B0A1A .EB 0E jmp short xajh.004B0A2A
004B0A1C >81FB EA070000 cmp ebx,0x7EA
004B0A22 .75 0B jnz short xajh.004B0A2F
004B0A24 .56 push esi
004B0A25 .E8 36548200 call xajh.00CD5E60
004B0A2A >A1 A8193101 mov eax,dword ptr ds: ;控件基址
004B0A2F >85C0 test eax,eax
004B0A31 .74 18 je short xajh.004B0A4B
004B0A33 .57 push edi
004B0A34 .56 push esi
004B0A35 .53 push ebx
004B0A36 .55 push ebp
004B0A37 .8BC8 mov ecx,eax
004B0A39 .E8 E256FDFF call xajh.00486120
004B0A3E .84C0 test al,al
004B0A40 .74 09 je short xajh.004B0A4B
004B0A42 .5F pop edi
004B0A43 .5E pop esi
004B0A44 .5D pop ebp
004B0A45 .33C0 xor eax,eax
004B0A47 .5B pop ebx
004B0A48 .C2 1000 retn 0x10
用于自动登陆
页:
[1]