![]() |
|
|
|
#1
|
|||
|
|||
|
pattern search for 4.2.5 gave me this
Code:
push ebp mov ebp,esp push ecx push dword ptr ss:[ebp+14] push dword ptr ss:[ebp+10] push dword ptr ss:[ebp+C] push dword ptr ss:[ebp+8] call <wartrc2.sub_FDFB10> test eax,eax jne wartrc2.FDFF3F mov byte ptr ss:[ebp-1],0 jmp wartrc2.FDFF4C lea edx,dword ptr ss:[ebp-1] mov ecx,1 call <wartrc2.sub_FE04F8> movzx eax,byte ptr ss:[ebp-1] pop ecx pop ebp ret 10 |
![]() |
| Thread Tools | |
| Display Modes | |
|
|