验证中...
语言: Assembly
分类: 其他
最后更新于 2017-10-31 11:14
disassemble.asm
原始数据 复制代码
0046C600 | mov dword ptr ds:[735CDC],0 |
0046C60A | mov eax,dword ptr fs:[0] |
0046C610 | pop ecx |
0046C611 | mov edx,dword ptr ss:[esp+18] |
0046C615 | mov dword ptr ds:[edx],eax |
0046C617 | mov dword ptr ds:[edx+4],mymod.46C676 |
0046C61E | mov dword ptr ds:[edx+8],esp |
0046C621 | mov dword ptr ds:[edx+C],ebx |
0046C624 | mov dword ptr ds:[edx+10],esi |
0046C627 | mov dword ptr ds:[edx+14],edi |
0046C62A | mov dword ptr ds:[edx+18],ebp |
0046C62D | mov eax,dword ptr ss:[esp+14] |
0046C631 | mov dword ptr ss:[esp+14],ecx |
0046C635 | mov dword ptr fs:[0],edx |
0046C63C | (4 byte nop) |
0046C640 | mov dword ptr ds:[735CE0],edx |
0046C646 | call eax |
0046C648 | mov eax,dword ptr ds:[735CE0] |
0046C64D | mov esp,dword ptr ds:[eax+8] |
0046C650 | mov edi,dword ptr ss:[esp+1C] |
0046C654 | mov esi,dword ptr ds:[735CDC] |
0046C65A | or dword ptr ds:[edi],esi |
0046C65C | mov ebx,dword ptr ds:[eax+C] |
0046C65F | mov esi,dword ptr ds:[eax+10] |
0046C662 | mov edi,dword ptr ds:[eax+14] |
0046C665 | mov ebp,dword ptr ds:[eax+18] |
0046C668 | mov ecx,dword ptr ds:[eax] |
0046C66A | push dword ptr ss:[esp+14] |
0046C66E | mov dword ptr fs:[0],ecx |
0046C675 | ret |
0046C676 | or byte ptr ds:[735CDC],1 |
0046C67D | jmp mymod.46C648 |

评论列表( 0 )

你可以在登录后,发表评论

5th_float_left_gitee 5th_float_left_close