; SS:[0012F620]=00EE54E4 ASCII "D:\WINDOWS\" 00459FBB 8D45 D0 lea eax,dword ptr ss:[ebp-30] 00459FBE 50 push eax 00459FBF A1 B8DC4500 mov eax,dword ptr ds:[45DCB8] 00459FC4 E8 CBA1FAFF call 超强灰鸽.00404194 00459FC9 8BC8 mov ecx,eax 00459FCB 83E9 04 sub ecx,4 00459FCE BA 01000000 mov edx,1 00459FD3 A1 B8DC4500 mov eax,dword ptr ds:[45DCB8] ; LWVVKL_ 00459FD8 E8 17A4FAFF call 超强灰鸽.004043F4 00459FDD FF75 D0 push dword ptr ss:[ebp-30] ; ASCII "LWVV" 00459FE0 68 FCA24500 push 超强灰鸽.0045A2FC ; ASCII "_Hook.DLL" 00459FE5 8D45 FC lea eax,dword ptr ss:[ebp-4] 00459FE8 BA 03000000 mov edx,3 ; 3个字符串连接数 00459FED E8 62A2FAFF call 超强灰鸽.00404254 ; 将三个字符串连接起来ASCII "D:\WINDOWS\LWVV_Hook.DLL" 00459FF2 8B45 FC mov eax,dword ptr ss:[ebp-4] ; EAX=00459FF2 SS:[0012F648]=00EE5510,ASCII "D:\WINDOWS\LWVV_Hook.DLL" 00459FF5 E8 9AA1FAFF call 超强灰鸽.00404194 ; EAX=0X18=24 => ASCII "D:\WINDOWS\LWVV_Hook.DLL" 字符长度数 00459FFA 8BD0 mov edx,eax 00459FFC 85D2 test edx,edx 00459FFE 7E 18 jle short 超强灰鸽.0045A018 0045A000 BE 01000000 mov esi,1 0045A005 B8 CCDC4500 mov eax,超强灰鸽.0045DCCC ; ASCII "D:\WINDOWS\LWVV_Hook.DLL" 0045A00A 8B4D FC mov ecx,dword ptr ss:[ebp-4] 0045A00D 8A4C31 FF mov cl,byte ptr ds:[ecx+esi-1] 0045A011 8808 mov byte ptr ds:[eax],cl 0045A013 46 inc esi
|