- 注册时间
- 2011-8-8
- 最后登录
- 1970-1-1
该用户从未签到
|
dd [[[[[[0x13119A8]+24]+8]+320+0*4]+78]+248]
基址如下:
004B09E3 > \FF15 EC710701 call dword ptr ds:[<&KERNEL32.GetTickCou>; [GetTickCount
004B09E9 . A3 C4193101 mov dword ptr ds:[0x13119C4],eax
004B09EE > A1 A8193101 mov eax,dword ptr ds:[0x13119A8]
004B09F3 . 85C0 test eax,eax
004B09F5 . 8B6C24 14 mov ebp,dword ptr ss:[esp+0x14]
004B09F9 . 8B7C24 20 mov edi,dword ptr ss:[esp+0x20]
004B09FD . 74 4C je short xajh.004B0A4B
004B09FF . 8B48 28 mov ecx,dword ptr ds:[eax+0x28]
004B0A02 . 85C9 test ecx,ecx
004B0A04 . 74 29 je short xajh.004B0A2F
004B0A06 . 81FB E9070000 cmp ebx,0x7E9
004B0A0C . 75 0E jnz short xajh.004B0A1C
004B0A0E . 85FF test edi,edi
004B0A10 . 0F95C0 setne al
004B0A13 . 50 push eax
004B0A14 . 56 push esi
004B0A15 . E8 F6937200 call xajh.00BD9E10
004B0A1A . EB 0E jmp short xajh.004B0A2A
004B0A1C > 81FB EA070000 cmp ebx,0x7EA
004B0A22 . 75 0B jnz short xajh.004B0A2F
004B0A24 . 56 push esi
004B0A25 . E8 36548200 call xajh.00CD5E60
004B0A2A > A1 A8193101 mov eax,dword ptr ds:[0x13119A8] ; 控件基址
004B0A2F > 85C0 test eax,eax
004B0A31 . 74 18 je short xajh.004B0A4B
004B0A33 . 57 push edi
004B0A34 . 56 push esi
004B0A35 . 53 push ebx
004B0A36 . 55 push ebp
004B0A37 . 8BC8 mov ecx,eax
004B0A39 . E8 E256FDFF call xajh.00486120
004B0A3E . 84C0 test al,al
004B0A40 . 74 09 je short xajh.004B0A4B
004B0A42 . 5F pop edi
004B0A43 . 5E pop esi
004B0A44 . 5D pop ebp
004B0A45 . 33C0 xor eax,eax
004B0A47 . 5B pop ebx
004B0A48 . C2 1000 retn 0x10
用于自动登陆 |
|