能力值:
( LV2,RANK:10 )
|
-
-
2 楼
0043AAAD /. 55 push ebp
0043AAAE |. 8BEC mov ebp, esp
0043AAB0 |. 56 push esi
0043AAB1 |. 8BF1 mov esi, ecx
0043AAB3 |. 8B46 3C mov eax, dword ptr [esi+3C]
0043AAB6 |. 85C0 test eax, eax
0043AAB8 75 22 jnz short 0043AADC ; 跳转已实现,NOP.
0043AABA 8B06 mov eax, dword ptr [esi]
0043AABC FF90 F0000000 call dword ptr [eax+F0]
0043AAC2 8B00 mov eax, dword ptr [eax]
0043AAC4 85C0 test eax, eax
0043AAC6 75 14 jnz short 0043AADC ; 跳转已实现,NOP.
0043AAC8 |. FF75 10 push dword ptr [ebp+10] ; /lParam
0043AACB |. FF75 0C push dword ptr [ebp+C] ; |wParam
0043AACE |. FF75 08 push dword ptr [ebp+8] ; |Message
0043AAD1 |. FF76 1C push dword ptr [esi+1C] ; |hWnd
0043AAD4 |. FF15 C8A44400 call dword ptr [<&USER32.DefWindowProcW>] ; \DefWindowProcW
0043AADA |. EB 13 jmp short 0043AAEF
0043AADC |> FF75 10 push dword ptr [ebp+10] ; /lParam
0043AADF |. FF75 0C push dword ptr [ebp+C] ; |wParam
0043AAE2 |. FF75 08 push dword ptr [ebp+8] ; |Message
0043AAE5 |. FF76 1C push dword ptr [esi+1C] ; |hWnd
0043AAE8 |. 50 push eax ; |PrevProc
0043AAE9 |. FF15 CCA44400 call dword ptr [<&USER32.CallWindowProcW>] ; \CallWindowProcW
0043AAEF |> 5E pop esi
0043AAF0 |. 5D pop ebp
0043AAF1 \. C2 0C00 retn 0C
|
能力值:
( LV2,RANK:10 )
|
-
-
3 楼
脱壳后打开软件!文件已损坏!郁闷...
|
|
|