00772E5E CC INT3
00772E5F CC INT3
00772E60 $ 8B4424 04 MOV EAX, DWORD PTR SS:[ESP+4]
00772E64 . 83EC 08 SUB ESP, 8
00772E67 . 3D D1070000 CMP EAX, 7D1
00772E6C . 73 0B JNB SHORT 00772E79
00772E6E . 3D F5070000 CMP EAX, 7F5
00772E73 . 0F83 C7000000 JNB 00772F40
00772E79 > 56 PUSH ESI
00772E7A . 50 PUSH EAX
00772E7B . E8 70FFFFFF CALL 00772DF0
00772E80 . 8BF0 MOV ESI, EAX
00772E82 . 85F6 TEST ESI, ESI
00772E84 . 75 24 JNZ SHORT 00772EAA
00772E86 . 68 5E070000 PUSH 75E
00772E8B . 68 88AD9D00 PUSH 009DAD88 ; ASCII "..\FunctionWnd.cpp"
00772E90 . 68 EC589D00 PUSH 009D58EC ; ASCII "UI.log"
00772E95 . 68 9CAD9D00 PUSH 009DAD9C ; ASCII "ERROR : ShortCut Bar Slot - null pointer!"
00772E9A . 50 PUSH EAX
00772E9B . E8 2080FBFF CALL 0072AEC0
00772EA0 . 83C4 14 ADD ESP, 14
00772EA3 . 5E POP ESI
00772EA4 . 83C4 08 ADD ESP, 8
00772EA7 . C2 0400 RETN 4
00772EAA > 8B46 08 MOV EAX, DWORD PTR DS:[ESI+8]
00772EAD . 83F8 01 CMP EAX, 1
00772EB0 . 75 10 JNZ SHORT 00772EC2
00772EB2 . 8B46 0C MOV EAX, DWORD PTR DS:[ESI+C]
00772EB5 . 894424 08 MOV DWORD PTR SS:[ESP+8], EAX
00772EB9 . 8D4424 04 LEA EAX, DWORD PTR SS:[ESP+4]
00772EBD . 50 PUSH EAX
00772EBE . 6A 21 PUSH 21
00772EC0 . EB 68 JMP SHORT 00772F2A
00772EC2 > 83F8 02 CMP EAX, 2
00772EC5 . 75 50 JNZ SHORT 00772F17
00772EC7 . 833D EC6EA600>CMP DWORD PTR DS:[A66EEC], 0
00772ECE . 74 6F JE SHORT 00772F3F
00772ED0 . E8 5BA7CCFF CALL 0043D630
00772ED5 . 8B88 C4010000 MOV ECX, DWORD PTR DS:[EAX+1C4] ; online.0041B98F
00772EDB . 85C9 TEST ECX, ECX
00772EDD . 74 60 JE SHORT 00772F3F
00772EDF . 0FB746 0C MOVZX EAX, WORD PTR DS:[ESI+C]
00772EE3 . 0FB756 10 MOVZX EDX, WORD PTR DS:[ESI+10]
00772EE7 . 50 PUSH EAX
00772EE8 . 52 PUSH EDX ; online.0079A5D0
00772EE9 . 6A 00 PUSH 0
00772EEB . E8 E06CD1FF CALL 00489BD0
00772EF0 . 8B0D EC6EA600 MOV ECX, DWORD PTR DS:[A66EEC]
00772EF6 . 66:8BF0 MOV SI, AX
00772EF9 . E8 4261FFFF CALL 00769040
00772EFE . 66:03F0 ADD SI, AX
00772F01 . 0FB7C6 MOVZX EAX, SI
00772F04 . 5E POP ESI
00772F05 . 83C4 08 ADD ESP, 8
00772F08 . 894424 04 MOV DWORD PTR SS:[ESP+4], EAX
00772F0C . 8B0D EC6EA600 MOV ECX, DWORD PTR DS:[A66EEC]
00772F12 .^ E9 09CFFFFF JMP 0076FE20
00772F17 > 83F8 05 CMP EAX, 5
00772F1A . 75 23 JNZ SHORT 00772F3F
00772F1C . 8B46 0C MOV EAX, DWORD PTR DS:[ESI+C] ; 技能call esi=[[[[[00a64920]+0*4]+194]+4]+0*4]+c
00772F1F . 894424 08 MOV DWORD PTR SS:[ESP+8], EAX
00772F23 . 8D4424 04 LEA EAX, DWORD PTR SS:[ESP+4]
00772F27 . 50 PUSH EAX
00772F28 . 6A 4D PUSH 4D
00772F2A > 8B0D 7C6EA600 MOV ECX, DWORD PTR DS:[A66E7C]
00772F30 . C74424 0C 820>MOV DWORD PTR SS:[ESP+C], 82
00772F38 . 8B11 MOV EDX, DWORD PTR DS:[ECX] ; online.009DC384
00772F3A . 8B52 10 MOV EDX, DWORD PTR DS:[EDX+10]
00772F3D . FFD2 CALL EDX ; online.0079A5D0
00772F3F > 5E POP ESI
00772F40 > 83C4 08 ADD ESP, 8
00772F43 . C2 0400 RETN 4
======================================================================
0079A5D0 . 53 PUSH EBX
0079A5D1 . 8B5C24 0C MOV EBX, DWORD PTR SS:[ESP+C]
0079A5D5 . 813B E9030000 CMP DWORD PTR DS:[EBX], 3E9
0079A5DB . 56 PUSH ESI
0079A5DC . 57 PUSH EDI
0079A5DD . 8B7C24 10 MOV EDI, DWORD PTR SS:[ESP+10]
0079A5E1 . 8BF1 MOV ESI, ECX
0079A5E3 75 10 JNZ SHORT 0079A5F5
0079A5E5 . 57 PUSH EDI ; /Arg1 = 06FC9258
0079A5E6 . E8 15FEFFFF CALL 0079A400 ; \online.0079A400
0079A5EB . 84C0 TEST AL, AL
0079A5ED 75 06 JNZ SHORT 0079A5F5
0079A5EF . 5F POP EDI ; online.00772F3F
0079A5F0 . 5E POP ESI ; online.00772F3F
0079A5F1 . 5B POP EBX ; online.00772F3F
0079A5F2 . C2 0800 RETN 8
0079A5F5 > 57 PUSH EDI
0079A5F6 . E8 45E9C8FF CALL 00428F40
0079A5FB . 83C4 04 ADD ESP, 4
0079A5FE . 85C0 TEST EAX, EAX
0079A600 . 74 0D JE SHORT 0079A60F
0079A602 . 8B10 MOV EDX, DWORD PTR DS:[EAX]
0079A604 . 8BC8 MOV ECX, EAX
0079A606 . 8B82 84000000 MOV EAX, DWORD PTR DS:[EDX+84]
0079A60C . 53 PUSH EBX
0079A60D . FFD0 CALL EAX
0079A60F > 813B EA030000 CMP DWORD PTR DS:[EBX], 3EA
0079A615 . 75 08 JNZ SHORT 0079A61F
0079A617 . 57 PUSH EDI ; /Arg1 = 06FC9258
0079A618 . 8BCE MOV ECX, ESI ; |
0079A61A . E8 91BDFFFF CALL 007963B0 ; \online.007963B0
0079A61F > 5F POP EDI ; online.00772F3F
0079A620 . 5E POP ESI ; online.00772F3F
0079A621 . B0 01 MOV AL, 1
0079A623 . 5B POP EBX ; online.00772F3F
0079A624 . C2 0800 RETN 8
==========================================
00772F3D 这各call在delphi里要怎么写呢 要给哪些参数 烦请各位给个分析 或是能提供一些可参考的资料
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课