1000B0B7 55 push ebp
1000B0B8 8BEC mov ebp, esp
1000B0BA 83EC 04 sub esp, 4
1000B0BD 53 push ebx
1000B0BE 56 push esi
1000B0BF 57 push edi
1000B0C0 68 A0B70110 push 1001B7A0 ; ASCII "response_follows######7!!!69!!!###"
1000B0C5 8B45 08 mov eax, dword ptr [ebp+8]
1000B0C8 50 push eax
1000B0C9 E8 89FAFFFF call 1000AB57
1000B0CE 83C4 08 add esp, 8
1000B0D1 85C0 test eax, eax
1000B0D3 0F85 07000000 jnz 1000B0E0
1000B0D9 33C0 xor eax, eax
1000B0DB E9 3D000000 jmp 1000B11D
1000B0E0 68 A0B70110 push 1001B7A0 ; ASCII "response_follows######7!!!69!!!###"
1000B0E5 E8 2A950000 call <jmp.&MSVCRT.strlen>
1000B0EA 83C4 04 add esp, 4
1000B0ED 40 inc eax
1000B0EE 50 push eax
1000B0EF E8 1A950000 call <jmp.&MSVCRT.malloc>
1000B0F4 83C4 04 add esp, 4
1000B0F7 8945 FC mov dword ptr [ebp-4], eax
1000B0FA 837D FC 00 cmp dword ptr [ebp-4], 0
1000B0FE 0F84 11000000 je 1000B115
1000B104 68 A0B70110 push 1001B7A0 ; ASCII "response_follows######7!!!69!!!###"
1000B109 8B45 FC mov eax, dword ptr [ebp-4]
1000B10C 50 push eax
1000B10D E8 EA940000 call <jmp.&MSVCRT.strcpy>
1000B112 83C4 08 add esp, 8
1000B115 8B45 FC mov eax, dword ptr [ebp-4]
1000B118 E9 00000000 jmp 1000B11D
1000B11D 5F pop edi
1000B11E 5E pop esi
1000B11F 5B pop ebx
1000B120 C9 leave
怎样给那个堆栈地址1001B7A0赋值,原值在下面:
1001B7A0=1001B7A0 (ASCII "response_follows######7!!!69!!!###")
先谢谢!
[招生]科锐逆向工程师培训(2024年11月15日实地,远程教学同时开班, 第51期)