????????????????????

樂古呀聰

本帖隱藏的內容需要回復才可以瀏覽
[ENABLE] //Address:0051bf2c  EIP:walk
registersymbol(OnOff)
alloc(OnOff,4)
registersymbol(walk)
alloc(walk,32)
label(Go)
label(Gos)

     OnOff:
     DD    0

     walk:
      cmp [OnOff] , 1
      je  Go                  
      cmp [OnOff] , 2
      je  Gos               


      mov [ecx+eax+08],edx
      jmp 0051bf30
  
       Go:
       jmp 0051bf30      

       Gos:
        jmp 0051bf40

[DISABLE]
dealloc(OnOff)
unregistersymbol(OnOff)
dealloc(walk)
unregistersymbol(walk)