Disable CTRL Minor On Client 1299- 0064027B . E9 32300500 JMP 006932B2
复制代码
- 006932B2 MOV EDI,DWORD PTR DS:[6A335C]
- 006932B8 60 PUSHAD
- 006932B9 6A 11 PUSH 11
- 006932BB EB 35 JMP SHORT 006932F2
复制代码
- 006932F2 FFD7 CALL EDI
- 006932F4 0FBFC8 MOVSX ECX,AX
- 006932F7 81E1 00800000 AND ECX,8000
- 006932FD 61 POPAD
- 006932FE EB 12 JMP SHORT 00693312
复制代码
- 00693312 >^0F84 69CFFAFF JE 00640281
- 00693318 .^E9 46D2FAFF JMP 00640563
复制代码 |