这样的输入表示不是就说明这个arm有cc?-加壳脱壳-看雪-安全社区|安全招聘|kanxue.com

这样的输入表示不是就说明这个arm有cc?

发表于: 2006-6-15 23:37 5152

这样的输入表示不是就说明这个arm有cc?

vrowang123 活跃值

2006-6-15 23:37

5152

005B4628 - FF25 EC005D00          jmp dword ptr ds:[5D00EC]             ; advapi32.RegCloseKey
005B462E - FF25 F0005D00          jmp dword ptr ds:[5D00F0]             ; advapi32.RegOpenKeyExA
005B4634 - FF25 F4005D00          jmp dword ptr ds:[5D00F4]             ; advapi32.RegQueryValueExA
005B463A    CC                      int3
005B463B    CC                      int3
005B463C - FF25 D4025D00          jmp dword ptr ds:[5D02D4]
005B4642 - FF25 D8025D00          jmp dword ptr ds:[5D02D8]             ; kernel32.CompareStringA
005B4648 - FF25 DC025D00          jmp dword ptr ds:[5D02DC]             ; kernel32.CreateEventA
005B464E - FF25 E0025D00          jmp dword ptr ds:[5D02E0]
005B4654 - FF25 E4025D00          jmp dword ptr ds:[5D02E4]             ; kernel32.CreateMutexA
005B465A - FF25 E8025D00          jmp dword ptr ds:[5D02E8]
005B4660 - FF25 EC025D00          jmp dword ptr ds:[5D02EC]             ; kernel32.DebugBreak
005B4666 - FF25 F0025D00          jmp dword ptr ds:[5D02F0]             ; ntdll.RtlDeleteCriticalSection
005B466C - FF25 F4025D00          jmp dword ptr ds:[5D02F4]             ; ntdll.RtlEnterCriticalSection
005B4672 - FF25 F8025D00          jmp dword ptr ds:[5D02F8]             ; kernel32.EnumCalendarInfoA
005B4678 - FF25 FC025D00          jmp dword ptr ds:[5D02FC]
005B467E - FF25 00035D00          jmp dword ptr ds:[5D0300]
005B4684 - FF25 04035D00          jmp dword ptr ds:[5D0304]             ; kernel32.FileTimeToDosDateTime
005B468A - FF25 08035D00          jmp dword ptr ds:[5D0308]             ; kernel32.FileTimeToLocalFileTime
005B4690 - FF25 0C035D00          jmp dword ptr ds:[5D030C]             ; kernel32.FindClose
005B4696 - FF25 10035D00          jmp dword ptr ds:[5D0310]
005B469C - FF25 14035D00          jmp dword ptr ds:[5D0314]             ; kernel32.FindNextFileA
005B46A2 - FF25 18035D00          jmp dword ptr ds:[5D0318]
005B46A8 - FF25 1C035D00          jmp dword ptr ds:[5D031C]
005B46AE - FF25 20035D00          jmp dword ptr ds:[5D0320]
005B46B4 - FF25 24035D00          jmp dword ptr ds:[5D0324]             ; kernel32.FreeResource
005B46BA - FF25 28035D00          jmp dword ptr ds:[5D0328]
005B46C0 - FF25 2C035D00          jmp dword ptr ds:[5D032C]             ; kernel32.GetCPInfo
005B46C6 - FF25 30035D00          jmp dword ptr ds:[5D0330]
005B46CC - FF25 34035D00          jmp dword ptr ds:[5D0334]             ; kernel32.GetComputerNameA
005B46D2 - FF25 38035D00          jmp dword ptr ds:[5D0338]             ; kernel32.GetCurrentDirectoryA
005B46D8 - FF25 3C035D00          jmp dword ptr ds:[5D033C]             ; kernel32.GetCurrentProcessId
005B46DE - FF25 40035D00          jmp dword ptr ds:[5D0340]             ; kernel32.GetCurrentThreadId
005B46E4 - FF25 44035D00          jmp dword ptr ds:[5D0344]             ; kernel32.GetDateFormatA
005B46EA - FF25 48035D00          jmp dword ptr ds:[5D0348]             ; kernel32.GetDiskFreeSpaceA
005B46F0 - FF25 4C035D00          jmp dword ptr ds:[5D034C]             ; kernel32.GetDriveTypeA
005B46F6 - FF25 50035D00          jmp dword ptr ds:[5D0350]
005B46FC - FF25 54035D00          jmp dword ptr ds:[5D0354]
005B4702 - FF25 58035D00          jmp dword ptr ds:[5D0358]             ; kernel32.GetExitCodeThread
005B4708 - FF25 5C035D00          jmp dword ptr ds:[5D035C]
005B470E - FF25 60035D00          jmp dword ptr ds:[5D0360]
005B4714 - FF25 64035D00          jmp dword ptr ds:[5D0364]             ; kernel32.GetFullPathNameA
005B471A - FF25 68035D00          jmp dword ptr ds:[5D0368]             ; ntdll.RtlGetLastWin32Error
005B4720 - FF25 6C035D00          jmp dword ptr ds:[5D036C]             ; kernel32.GetLocalTime
005B4726 - FF25 70035D00          jmp dword ptr ds:[5D0370]             ; kernel32.GetLocaleInfoA
005B472C - FF25 74035D00          jmp dword ptr ds:[5D0374]             ; kernel32.GetModuleFileNameA
005B4732 - FF25 78035D00          jmp dword ptr ds:[5D0378]
005B4738 - FF25 7C035D00          jmp dword ptr ds:[5D037C]             ; kernel32.GetOEMCP
005B473E - FF25 80035D00          jmp dword ptr ds:[5D0380]             ; kernel32.GetPrivateProfileStringA
005B4744 - FF25 84035D00          jmp dword ptr ds:[5D0384]
005B474A - FF25 88035D00          jmp dword ptr ds:[5D0388]
005B4750 - FF25 8C035D00          jmp dword ptr ds:[5D038C]             ; kernel32.GetProfileStringA
005B4756 - FF25 90035D00          jmp dword ptr ds:[5D0390]             ; kernel32.GetStartupInfoA
005B475C - FF25 94035D00          jmp dword ptr ds:[5D0394]             ; kernel32.GetStdHandle
005B4762 - FF25 98035D00          jmp dword ptr ds:[5D0398]             ; kernel32.GetStringTypeExA
005B4768 - FF25 9C035D00          jmp dword ptr ds:[5D039C]             ; kernel32.GetStringTypeW
005B476E - FF25 A0035D00          jmp dword ptr ds:[5D03A0]             ; kernel32.GetSystemInfo
005B4774 - FF25 A4035D00          jmp dword ptr ds:[5D03A4]             ; kernel32.GetTempPathA
005B477A - FF25 A8035D00          jmp dword ptr ds:[5D03A8]             ; kernel32.GetThreadLocale
005B4780 - FF25 AC035D00          jmp dword ptr ds:[5D03AC]             ; kernel32.GetTickCount
005B4786 - FF25 B0035D00          jmp dword ptr ds:[5D03B0]             ; kernel32.GetUserDefaultLCID
005B478C - FF25 B4035D00          jmp dword ptr ds:[5D03B4]
005B4792 - FF25 B8035D00          jmp dword ptr ds:[5D03B8]             ; kernel32.GetVersionExA
005B4798 - FF25 BC035D00          jmp dword ptr ds:[5D03BC]             ; kernel32.GlobalAddAtomA
005B479E - FF25 C0035D00          jmp dword ptr ds:[5D03C0]
005B47A4 - FF25 C4035D00          jmp dword ptr ds:[5D03C4]             ; kernel32.GlobalDeleteAtom
005B47AA - FF25 C8035D00          jmp dword ptr ds:[5D03C8]             ; kernel32.GlobalFindAtomA
005B47B0 - FF25 CC035D00          jmp dword ptr ds:[5D03CC]             ; kernel32.GlobalFree
005B47B6 - FF25 D0035D00          jmp dword ptr ds:[5D03D0]             ; kernel32.GlobalHandle
005B47BC - FF25 D4035D00          jmp dword ptr ds:[5D03D4]
005B47C2 - FF25 D8035D00          jmp dword ptr ds:[5D03D8]             ; kernel32.GlobalReAlloc
005B47C8 - FF25 DC035D00          jmp dword ptr ds:[5D03DC]             ; kernel32.GlobalSize
005B47CE - FF25 E0035D00          jmp dword ptr ds:[5D03E0]
005B47D4 - FF25 E4035D00          jmp dword ptr ds:[5D03E4]             ; ntdll.RtlAllocateHeap
005B47DA - FF25 E8035D00          jmp dword ptr ds:[5D03E8]             ; ntdll.RtlFreeHeap
005B47E0 - FF25 EC035D00          jmp dword ptr ds:[5D03EC]             ; kernel32.InitializeCriticalSection
005B47E6 - FF25 F0035D00          jmp dword ptr ds:[5D03F0]             ; kernel32.InterlockedDecrement
005B47EC - FF25 F4035D00          jmp dword ptr ds:[5D03F4]             ; kernel32.InterlockedIncrement
005B47F2 - FF25 F8035D00          jmp dword ptr ds:[5D03F8]             ; kernel32.LCMapStringA
005B47F8 - FF25 FC035D00          jmp dword ptr ds:[5D03FC]             ; ntdll.RtlLeaveCriticalSection
005B47FE - FF25 00045D00          jmp dword ptr ds:[5D0400]
005B4804 - FF25 04045D00          jmp dword ptr ds:[5D0404]
005B480A - FF25 08045D00          jmp dword ptr ds:[5D0408]             ; kernel32.LoadResource
005B4810 - FF25 0C045D00          jmp dword ptr ds:[5D040C]             ; kernel32.LocalAlloc
005B4816 - FF25 10045D00          jmp dword ptr ds:[5D0410]             ; kernel32.LocalFree
005B481C - FF25 14045D00          jmp dword ptr ds:[5D0414]
005B4822 - FF25 18045D00          jmp dword ptr ds:[5D0418]             ; kernel32.MulDiv
005B4828 - FF25 1C045D00          jmp dword ptr ds:[5D041C]             ; kernel32.MultiByteToWideChar
005B482E - FF25 20045D00          jmp dword ptr ds:[5D0420]             ; kernel32.RaiseException
005B4834 - FF25 24045D00          jmp dword ptr ds:[5D0424]
005B483A - FF25 28045D00          jmp dword ptr ds:[5D0428]             ; kernel32.ResetEvent
005B4840 - FF25 2C045D00          jmp dword ptr ds:[5D042C]             ; kernel32.ResumeThread
005B4846 - FF25 30045D00          jmp dword ptr ds:[5D0430]             ; ntdll.RtlUnwind
005B484C - FF25 34045D00          jmp dword ptr ds:[5D0434]             ; kernel32.SetConsoleCtrlHandler
005B4852 - FF25 38045D00          jmp dword ptr ds:[5D0438]             ; kernel32.SetCurrentDirectoryA
005B4858 - FF25 3C045D00          jmp dword ptr ds:[5D043C]             ; kernel32.SetEndOfFile
005B485E - FF25 40045D00          jmp dword ptr ds:[5D0440]             ; kernel32.SetEnvironmentVariableA
005B4864 - FF25 44045D00          jmp dword ptr ds:[5D0444]             ; kernel32.SetErrorMode
005B486A - FF25 48045D00          jmp dword ptr ds:[5D0448]             ; kernel32.SetEvent
005B4870 - FF25 4C045D00          jmp dword ptr ds:[5D044C]
005B4876 - FF25 50045D00          jmp dword ptr ds:[5D0450]             ; kernel32.SetHandleCount
005B487C - FF25 54045D00          jmp dword ptr ds:[5D0454]             ; ntdll.RtlSetLastWin32Error
005B4882 - FF25 58045D00          jmp dword ptr ds:[5D0458]             ; kernel32.SetThreadLocale
005B4888 - FF25 5C045D00          jmp dword ptr ds:[5D045C]             ; kernel32.SizeofResource
005B488E - FF25 60045D00          jmp dword ptr ds:[5D0460]             ; kernel32.Sleep
005B4894 - FF25 64045D00          jmp dword ptr ds:[5D0464]             ; kernel32.TlsAlloc
005B489A - FF25 68045D00          jmp dword ptr ds:[5D0468]             ; kernel32.TlsFree
005B48A0 - FF25 6C045D00          jmp dword ptr ds:[5D046C]             ; kernel32.TlsGetValue
005B48A6 - FF25 70045D00          jmp dword ptr ds:[5D0470]             ; kernel32.TlsSetValue
005B48AC - FF25 74045D00          jmp dword ptr ds:[5D0474]             ; kernel32.UnhandledExceptionFilter
005B48B2 - FF25 78045D00          jmp dword ptr ds:[5D0478]             ; kernel32.VirtualAlloc
005B48B8 - FF25 7C045D00          jmp dword ptr ds:[5D047C]             ; kernel32.VirtualFree
005B48BE - FF25 80045D00          jmp dword ptr ds:[5D0480]             ; kernel32.VirtualQuery
005B48C4 - FF25 84045D00          jmp dword ptr ds:[5D0484]             ; kernel32.WaitForSingleObject
005B48CA - FF25 88045D00          jmp dword ptr ds:[5D0488]             ; kernel32.WideCharToMultiByte
005B48D0 - FF25 8C045D00          jmp dword ptr ds:[5D048C]             ; kernel32.WinExec
005B48D6 - FF25 90045D00          jmp dword ptr ds:[5D0490]
005B48DC - FF25 94045D00          jmp dword ptr ds:[5D0494]             ; kernel32.WritePrivateProfileStringA
005B48E2 - FF25 98045D00          jmp dword ptr ds:[5D0498]             ; kernel32.lstrcmpA
005B48E8 - FF25 9C045D00          jmp dword ptr ds:[5D049C]             ; kernel32.lstrcpyA
005B48EE - FF25 A0045D00          jmp dword ptr ds:[5D04A0]             ; kernel32.lstrcpynA
005B48F4 - FF25 A4045D00          jmp dword ptr ds:[5D04A4]             ; kernel32.lstrlenA
005B48FA    CC                      int3
005B48FB    CC                      int3
005B48FC - FF25 BC045D00          jmp dword ptr ds:[5D04BC]             ; version.GetFileVersionInfoA
005B4902 - FF25 C0045D00          jmp dword ptr ds:[5D04C0]             ; version.GetFileVersionInfoSizeA
005B4908 - FF25 C4045D00          jmp dword ptr ds:[5D04C4]             ; version.VerQueryValueA
005B490E    CC                      int3
005B490F    CC                      int3
005B4910 - FF25 E0045D00          jmp dword ptr ds:[5D04E0]             ; winspool.ClosePrinter
005B4916 - FF25 E4045D00          jmp dword ptr ds:[5D04E4]             ; winspool.DocumentPropertiesA
005B491C - FF25 E8045D00          jmp dword ptr ds:[5D04E8]             ; winspool.EnumPrintersA
005B4922 - FF25 EC045D00          jmp dword ptr ds:[5D04EC]             ; winspool.OpenPrinterA
005B4928 - FF25 58055D00          jmp dword ptr ds:[5D0558]             ; comctl32.ImageList_Add
005B492E - FF25 5C055D00          jmp dword ptr ds:[5D055C]             ; comctl32.ImageList_BeginDrag
005B4934 - FF25 60055D00          jmp dword ptr ds:[5D0560]             ; comctl32.ImageList_Create
005B493A - FF25 64055D00          jmp dword ptr ds:[5D0564]             ; comctl32.ImageList_Destroy
005B4940 - FF25 68055D00          jmp dword ptr ds:[5D0568]             ; comctl32.ImageList_DragEnter
005B4946 - FF25 6C055D00          jmp dword ptr ds:[5D056C]             ; comctl32.ImageList_DragLeave
005B494C - FF25 70055D00          jmp dword ptr ds:[5D0570]             ; comctl32.ImageList_DragMove
005B4952 - FF25 74055D00          jmp dword ptr ds:[5D0574]             ; comctl32.ImageList_DragShowNolock
005B4958 - FF25 78055D00          jmp dword ptr ds:[5D0578]             ; comctl32.ImageList_Draw
005B495E - FF25 7C055D00          jmp dword ptr ds:[5D057C]             ; comctl32.ImageList_DrawEx
005B4964 - FF25 80055D00          jmp dword ptr ds:[5D0580]             ; comctl32.ImageList_EndDrag
005B496A - FF25 84055D00          jmp dword ptr ds:[5D0584]             ; comctl32.ImageList_GetBkColor
005B4970 - FF25 88055D00          jmp dword ptr ds:[5D0588]             ; comctl32.ImageList_GetDragImage
005B4976 - FF25 8C055D00          jmp dword ptr ds:[5D058C]             ; comctl32.ImageList_GetIcon
005B497C - FF25 90055D00          jmp dword ptr ds:[5D0590]             ; comctl32.ImageList_GetIconSize
005B4982 - FF25 94055D00          jmp dword ptr ds:[5D0594]             ; comctl32.ImageList_GetImageCount
005B4988 - FF25 98055D00          jmp dword ptr ds:[5D0598]             ; comctl32.ImageList_Read
005B498E - FF25 9C055D00          jmp dword ptr ds:[5D059C]             ; comctl32.ImageList_Remove
005B4994 - FF25 A0055D00          jmp dword ptr ds:[5D05A0]             ; comctl32.ImageList_ReplaceIcon
005B499A - FF25 A4055D00          jmp dword ptr ds:[5D05A4]             ; comctl32.ImageList_SetBkColor
005B49A0 - FF25 A8055D00          jmp dword ptr ds:[5D05A8]             ; comctl32.ImageList_SetDragCursorImage
005B49A6 - FF25 AC055D00          jmp dword ptr ds:[5D05AC]             ; comctl32.ImageList_SetIconSize
005B49AC - FF25 B0055D00          jmp dword ptr ds:[5D05B0]             ; comctl32.ImageList_Write
005B49B2 - FF25 B4055D00          jmp dword ptr ds:[5D05B4]             ; comctl32.InitCommonControls
005B49B8 - FF25 44075D00          jmp dword ptr ds:[5D0744]             ; GDI32.BitBlt
005B49BE - FF25 48075D00          jmp dword ptr ds:[5D0748]             ; GDI32.CloseEnhMetaFile
005B49C4 - FF25 4C075D00          jmp dword ptr ds:[5D074C]             ; GDI32.CombineRgn
005B49CA - FF25 50075D00          jmp dword ptr ds:[5D0750]             ; GDI32.CopyEnhMetaFileA
005B49D0 - FF25 54075D00          jmp dword ptr ds:[5D0754]             ; GDI32.CreateBitmap
005B49D6 - FF25 58075D00          jmp dword ptr ds:[5D0758]             ; GDI32.CreateBrushIndirect
005B49DC - FF25 5C075D00          jmp dword ptr ds:[5D075C]             ; GDI32.CreateCompatibleBitmap
005B49E2 - FF25 60075D00          jmp dword ptr ds:[5D0760]             ; GDI32.CreateCompatibleDC
005B49E8 - FF25 64075D00          jmp dword ptr ds:[5D0764]             ; GDI32.CreateDCA
005B49EE - FF25 68075D00          jmp dword ptr ds:[5D0768]             ; GDI32.CreateDIBSection
005B49F4 - FF25 6C075D00          jmp dword ptr ds:[5D076C]             ; GDI32.CreateDIBitmap
005B49FA - FF25 70075D00          jmp dword ptr ds:[5D0770]             ; GDI32.CreateEllipticRgn
005B4A00 - FF25 74075D00          jmp dword ptr ds:[5D0774]             ; GDI32.CreateEnhMetaFileA
005B4A06 - FF25 78075D00          jmp dword ptr ds:[5D0778]             ; GDI32.CreateFontIndirectA
005B4A0C - FF25 7C075D00          jmp dword ptr ds:[5D077C]             ; GDI32.CreateHalftonePalette
005B4A12 - FF25 80075D00          jmp dword ptr ds:[5D0780]             ; GDI32.CreateICA
005B4A18 - FF25 84075D00          jmp dword ptr ds:[5D0784]             ; GDI32.CreatePalette
005B4A1E - FF25 88075D00          jmp dword ptr ds:[5D0788]             ; GDI32.CreatePenIndirect
005B4A24 - FF25 8C075D00          jmp dword ptr ds:[5D078C]             ; GDI32.CreateRectRgn
005B4A2A - FF25 90075D00          jmp dword ptr ds:[5D0790]             ; GDI32.CreateSolidBrush
005B4A30 - FF25 94075D00          jmp dword ptr ds:[5D0794]             ; GDI32.DeleteDC
005B4A36 - FF25 98075D00          jmp dword ptr ds:[5D0798]             ; GDI32.DeleteEnhMetaFile
005B4A3C - FF25 9C075D00          jmp dword ptr ds:[5D079C]             ; GDI32.DeleteObject
005B4A42 - FF25 A0075D00          jmp dword ptr ds:[5D07A0]             ; GDI32.Ellipse
005B4A48 - FF25 A4075D00          jmp dword ptr ds:[5D07A4]             ; GDI32.EndDoc
005B4A4E - FF25 A8075D00          jmp dword ptr ds:[5D07A8]             ; GDI32.EndPage
005B4A54 - FF25 AC075D00          jmp dword ptr ds:[5D07AC]             ; GDI32.EnumFontFamiliesA
005B4A5A - FF25 B0075D00          jmp dword ptr ds:[5D07B0]             ; GDI32.ExcludeClipRect
005B4A60 - FF25 B4075D00          jmp dword ptr ds:[5D07B4]             ; GDI32.ExtCreatePen
005B4A66 - FF25 B8075D00          jmp dword ptr ds:[5D07B8]             ; GDI32.ExtCreateRegion
005B4A6C - FF25 BC075D00          jmp dword ptr ds:[5D07BC]             ; GDI32.ExtTextOutA
005B4A72 - FF25 C0075D00          jmp dword ptr ds:[5D07C0]             ; GDI32.GdiFlush
005B4A78 - FF25 C4075D00          jmp dword ptr ds:[5D07C4]             ; GDI32.GetBitmapBits
005B4A7E - FF25 C8075D00          jmp dword ptr ds:[5D07C8]             ; GDI32.GetBrushOrgEx
005B4A84 - FF25 CC075D00          jmp dword ptr ds:[5D07CC]             ; GDI32.GetClipBox
005B4A8A - FF25 D0075D00          jmp dword ptr ds:[5D07D0]             ; GDI32.GetCurrentPositionEx
005B4A90 - FF25 D4075D00          jmp dword ptr ds:[5D07D4]             ; GDI32.GetDCOrgEx
005B4A96 - FF25 D8075D00          jmp dword ptr ds:[5D07D8]             ; GDI32.GetDIBColorTable
005B4A9C - FF25 DC075D00          jmp dword ptr ds:[5D07DC]             ; GDI32.GetDIBits
005B4AA2 - FF25 E0075D00          jmp dword ptr ds:[5D07E0]             ; GDI32.GetDeviceCaps
005B4AA8 - FF25 E4075D00          jmp dword ptr ds:[5D07E4]             ; GDI32.GetEnhMetaFileBits
005B4AAE - FF25 E8075D00          jmp dword ptr ds:[5D07E8]             ; GDI32.GetEnhMetaFileDescriptionA
005B4AB4 - FF25 EC075D00          jmp dword ptr ds:[5D07EC]             ; GDI32.GetEnhMetaFileHeader
005B4ABA - FF25 F0075D00          jmp dword ptr ds:[5D07F0]             ; GDI32.GetEnhMetaFilePaletteEntries
005B4AC0 - FF25 F4075D00          jmp dword ptr ds:[5D07F4]             ; GDI32.GetObjectA
005B4AC6 - FF25 F8075D00          jmp dword ptr ds:[5D07F8]             ; GDI32.GetPaletteEntries
005B4ACC - FF25 FC075D00          jmp dword ptr ds:[5D07FC]             ; GDI32.GetPixel
005B4AD2 - FF25 00085D00          jmp dword ptr ds:[5D0800]             ; GDI32.GetRgnBox
005B4AD8 - FF25 04085D00          jmp dword ptr ds:[5D0804]             ; GDI32.GetStockObject
005B4ADE - FF25 08085D00          jmp dword ptr ds:[5D0808]             ; GDI32.GetSystemPaletteEntries
005B4AE4 - FF25 0C085D00          jmp dword ptr ds:[5D080C]             ; GDI32.GetTextExtentPoint32A
005B4AEA - FF25 10085D00          jmp dword ptr ds:[5D0810]             ; GDI32.GetTextExtentPointA
005B4AF0 - FF25 14085D00          jmp dword ptr ds:[5D0814]             ; GDI32.GetTextMetricsA
005B4AF6 - FF25 18085D00          jmp dword ptr ds:[5D0818]             ; GDI32.GetWinMetaFileBits
005B4AFC - FF25 1C085D00          jmp dword ptr ds:[5D081C]             ; GDI32.GetWindowOrgEx
005B4B02 - FF25 20085D00          jmp dword ptr ds:[5D0820]             ; GDI32.IntersectClipRect
005B4B08 - FF25 24085D00          jmp dword ptr ds:[5D0824]             ; GDI32.LPtoDP
005B4B0E - FF25 28085D00          jmp dword ptr ds:[5D0828]             ; GDI32.LineTo
005B4B14 - FF25 2C085D00          jmp dword ptr ds:[5D082C]             ; GDI32.MaskBlt
005B4B1A - FF25 30085D00          jmp dword ptr ds:[5D0830]             ; GDI32.MoveToEx
005B4B20 - FF25 34085D00          jmp dword ptr ds:[5D0834]             ; GDI32.PatBlt
005B4B26 - FF25 38085D00          jmp dword ptr ds:[5D0838]             ; GDI32.Pie
005B4B2C - FF25 3C085D00          jmp dword ptr ds:[5D083C]             ; GDI32.PlayEnhMetaFile
005B4B32 - FF25 40085D00          jmp dword ptr ds:[5D0840]             ; GDI32.PolyPolyline
005B4B38 - FF25 44085D00          jmp dword ptr ds:[5D0844]             ; GDI32.Polygon
005B4B3E - FF25 48085D00          jmp dword ptr ds:[5D0848]             ; GDI32.Polyline
005B4B44 - FF25 4C085D00          jmp dword ptr ds:[5D084C]             ; GDI32.PtInRegion
005B4B4A - FF25 50085D00          jmp dword ptr ds:[5D0850]             ; GDI32.RealizePalette
005B4B50 - FF25 54085D00          jmp dword ptr ds:[5D0854]             ; GDI32.RectVisible
005B4B56 - FF25 58085D00          jmp dword ptr ds:[5D0858]             ; GDI32.Rectangle
005B4B5C - FF25 5C085D00          jmp dword ptr ds:[5D085C]             ; GDI32.RestoreDC
005B4B62 - FF25 60085D00          jmp dword ptr ds:[5D0860]             ; GDI32.RoundRect
005B4B68 - FF25 64085D00          jmp dword ptr ds:[5D0864]             ; GDI32.SaveDC
005B4B6E - FF25 68085D00          jmp dword ptr ds:[5D0868]             ; GDI32.SelectObject
005B4B74 - FF25 6C085D00          jmp dword ptr ds:[5D086C]             ; GDI32.SelectPalette
005B4B7A - FF25 70085D00          jmp dword ptr ds:[5D0870]             ; GDI32.SetAbortProc
005B4B80 - FF25 74085D00          jmp dword ptr ds:[5D0874]             ; GDI32.SetBkColor
005B4B86 - FF25 78085D00          jmp dword ptr ds:[5D0878]             ; GDI32.SetBkMode
005B4B8C - FF25 7C085D00          jmp dword ptr ds:[5D087C]             ; GDI32.SetBrushOrgEx
005B4B92 - FF25 80085D00          jmp dword ptr ds:[5D0880]             ; GDI32.SetDIBColorTable
005B4B98 - FF25 84085D00          jmp dword ptr ds:[5D0884]             ; GDI32.SetDIBitsToDevice
005B4B9E - FF25 88085D00          jmp dword ptr ds:[5D0888]             ; GDI32.SetEnhMetaFileBits
005B4BA4 - FF25 8C085D00          jmp dword ptr ds:[5D088C]             ; GDI32.SetMapMode
005B4BAA - FF25 90085D00          jmp dword ptr ds:[5D0890]             ; GDI32.SetPixel
005B4BB0 - FF25 94085D00          jmp dword ptr ds:[5D0894]             ; GDI32.SetROP2
005B4BB6 - FF25 98085D00          jmp dword ptr ds:[5D0898]             ; GDI32.SetStretchBltMode
005B4BBC - FF25 9C085D00          jmp dword ptr ds:[5D089C]             ; GDI32.SetTextColor
005B4BC2 - FF25 A0085D00          jmp dword ptr ds:[5D08A0]             ; GDI32.SetViewportExtEx
005B4BC8 - FF25 A4085D00          jmp dword ptr ds:[5D08A4]             ; GDI32.SetViewportOrgEx
005B4BCE - FF25 A8085D00          jmp dword ptr ds:[5D08A8]             ; GDI32.SetWinMetaFileBits
005B4BD4 - FF25 AC085D00          jmp dword ptr ds:[5D08AC]             ; GDI32.SetWindowExtEx
005B4BDA - FF25 B0085D00          jmp dword ptr ds:[5D08B0]             ; GDI32.SetWindowOrgEx
005B4BE0 - FF25 B4085D00          jmp dword ptr ds:[5D08B4]             ; GDI32.StartDocA
005B4BE6 - FF25 B8085D00          jmp dword ptr ds:[5D08B8]             ; GDI32.StartPage
005B4BEC - FF25 BC085D00          jmp dword ptr ds:[5D08BC]             ; GDI32.StretchBlt
005B4BF2 - FF25 C0085D00          jmp dword ptr ds:[5D08C0]             ; GDI32.StretchDIBits
005B4BF8 - FF25 C4085D00          jmp dword ptr ds:[5D08C4]             ; GDI32.UnrealizeObject
005B4BFE    CC                      int3
005B4BFF    CC                      int3
005B4C00 - FF25 D8085D00          jmp dword ptr ds:[5D08D8]             ; shell32.ShellExecuteA
005B4C06 - FF25 DC085D00          jmp dword ptr ds:[5D08DC]             ; shell32.Shell_NotifyIconA
005B4C0C - FF25 E40B5D00          jmp dword ptr ds:[5D0BE4]             ; USER32.ActivateKeyboardLayout
005B4C12 - FF25 E80B5D00          jmp dword ptr ds:[5D0BE8]             ; USER32.AdjustWindowRectEx
005B4C18 - FF25 EC0B5D00          jmp dword ptr ds:[5D0BEC]             ; USER32.BeginDeferWindowPos

[课程]FART 脱壳王！加量不加价！FART作者讲授！

收藏・0

免费・0

支持

最新回复 (5)
linex 雪币： 279 活跃值： (145) 能力值： ( LV9，RANK：290 ) 在线值：发帖 11 回帖 267 粉丝 0 关注私信	linex 7 2 楼 005B463A CC int3 005B463B CC int3 这个好像不是. 2006-6-16 07:46 0
vrowang123 雪币： 257 活跃值： (56) 能力值： ( LV5，RANK：60 ) 在线值：发帖 75 回帖 586 粉丝 0 关注私信	vrowang123 1 3 楼下面还有6处，都不是么？ 2006-6-16 07:55 0
kanxue 雪币： 44229 活跃值： (19955) 能力值： (RANK：350 ) 在线值：发帖 2369 回帖 17027 粉丝 528 关注私信	kanxue 8 4 楼首先你要搞明白arm CC是啥东西处理前的指令： 004029B6 /75 14 jnz short 004029CC 004029B8 C1E9 02 shr ecx, 2 处理后的指令： 004029B6 CC int3 004029B7 14 C1 adc al, 0C1 2006-6-16 09:43 0
forgot 雪币： 6075 活跃值： (2236) 能力值： (RANK：1060 ) 在线值：发帖 155 回帖 3771 粉丝 15 关注私信	forgot 26 5 楼最上面这些cc是编译器用来对齐地址的 2006-6-16 10:21 0
wangshq397 雪币： 277 活跃值： (312) 能力值： ( LV9，RANK：330 ) 在线值：发帖 59 回帖 650 粉丝 0 关注私信	wangshq397 8 6 楼最初由 kanxue* 发布* 首先你要搞明白arm CC是啥东西处理前的指令： 004029B6 /75 14 jnz short 004029CC 004029B8 C1E9 02 shr ecx, 2 ........ 把跳转变成CC 2006-6-16 20:06 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

vrowang123

发帖

586

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (5)
linex 雪币： 279 活跃值： (145) 能力值： ( LV9，RANK：290 ) 在线值：发帖 11 回帖 267 粉丝 0 关注私信	linex 7 2 楼 005B463A CC int3 005B463B CC int3 这个好像不是. 2006-6-16 07:46 0
vrowang123 雪币： 257 活跃值： (56) 能力值： ( LV5，RANK：60 ) 在线值：发帖 75 回帖 586 粉丝 0 关注私信	vrowang123 1 3 楼下面还有6处，都不是么？ 2006-6-16 07:55 0
kanxue 雪币： 44229 活跃值： (19955) 能力值： (RANK：350 ) 在线值：发帖 2369 回帖 17027 粉丝 528 关注私信	kanxue 8 4 楼首先你要搞明白arm CC是啥东西处理前的指令： 004029B6 /75 14 jnz short 004029CC 004029B8 C1E9 02 shr ecx, 2 处理后的指令： 004029B6 CC int3 004029B7 14 C1 adc al, 0C1 2006-6-16 09:43 0
forgot 雪币： 6075 活跃值： (2236) 能力值： (RANK：1060 ) 在线值：发帖 155 回帖 3771 粉丝 15 关注私信	forgot 26 5 楼最上面这些cc是编译器用来对齐地址的 2006-6-16 10:21 0
wangshq397 雪币： 277 活跃值： (312) 能力值： ( LV9，RANK：330 ) 在线值：发帖 59 回帖 650 粉丝 0 关注私信	wangshq397 8 6 楼最初由 kanxue* 发布* 首先你要搞明白arm CC是啥东西处理前的指令： 004029B6 /75 14 jnz short 004029CC 004029B8 C1E9 02 shr ecx, 2 ........ 把跳转变成CC 2006-6-16 20:06 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

这样的输入表示不是就说明 这个arm有cc?

这样的输入表示不是就说明这个arm有cc?