我想请问一下我在OD中找到了MessageBoxExW的函数地址(不知道这个词用的对不对),如下:
77D66534 > 8BFF mov edi, edi
77D66536 55 push ebp
77D66537 8BEC mov ebp, esp
77D66539 833D BC14D777 0>cmp dword ptr [77D714BC], 0
77D66540 74 24 je short 77D66566
77D66542 64:A1 18000000 mov eax, dword ptr fs:[18]
77D66548 6A 00 push 0
77D6654A FF70 24 push dword ptr [eax+24]
77D6654D 68 241BD777 push 77D71B24
77D66552 FF15 C412D177 call dword ptr [<&KERNEL32.Interlocked>; kernel32.InterlockedCompareExchange
77D66558 85C0 test eax, eax
77D6655A 75 0A jnz short 77D66566
77D6655C C705 201BD777 0>mov dword ptr [77D71B20], 1
77D66566 6A 00 push 0
77D66568 FF75 14 push dword ptr [ebp+14]
77D6656B FF75 10 push dword ptr [ebp+10]
77D6656E FF75 0C push dword ptr [ebp+C]
77D66571 FF75 08 push dword ptr [ebp+8]
77D66574 E8 BFA2FEFF call MessageBoxExW
77D66579 5D pop ebp
77D6657A C2 1000 retn 10
我现在想知道在OD中它被调用的地址怎么找,就是在哪调用了这个MessageBoxExw
谁能教我一下,提前谢过了!
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!