c# dll c 类_dialogboxparam_msg结构(2)

00402879 |. 6A 00 push 0x0 ; /lParam = NULL

0040287B |. 68 96284000 push 汇编.00402896 ; |DlgProc = 汇编.00402896

00402880 |. 6A 00 push 0x0 ; |hOwner = NULL

00402882 |. 6A 65 push 0x65 ; |pTemplate = 65

00402884 |. FF35 28544000 push dword ptr ds:[0x405428] ; |hInst = NULL

0040288A |. E8 4B0C0000 call <jmp.&user32.DialogBoxParamA> ; \DialogBoxParamA

0040288F |. 6A 00 push 0x0 ; /ExitCode = 0

00402891 \. E8 480B0000 call <jmp.&kernel32.ExitProcess> ; \ExitProcess

汇编的入口API函数 GetModuleHandleA

汇编查找字符串使用 ASCII码

DLPHI入口

0045D408 > $ 55 push ebp

0045D409 . 8BEC mov ebp,esp

0045D40B . 83 F0 add esp,-0x10

0045D40E . B8 28D24500 mov eax,DELPHI.0045D228

0045D413 . E8 6088FAFF call DELPHI.00405C78

0045D418 . A1 4CF14500 mov eax,dword ptr ds:[0x45F14C]

0045D41D . 8B00 mov eax,dword ptr ds:[eax]

0045D41F . E8 08DFFFFF call DELPHI.0045B32C

0045D424 . 8B0D 40F24500 mov ecx,dword ptr ds:[0x45F240] ; DELPHI.00460C04

0045D42A . A1 4CF14500 mov eax,dword ptr ds:[0x45F14C]

0045D42F . 8B00 mov eax,dword ptr ds:[eax]

0045D431 . 8B15 CCC84500 mov edx,dword ptr ds:[0x45C8CC] ; DELPHI.0045C918

0045D437 . E8 08DFFFFF call DELPHI.0045B344

0045D43C . A1 4CF14500 mov eax,dword ptr ds:[0x45F14C]

0045D441 . 8B00 mov eax,dword ptr ds:[eax]

0045D443 . E8 7CDFFFFF call DELPHI.0045B3

0045D448 . E8 2769FAFF call DELPHI.00403D74

0045D44D . 8D40 00 lea eax,dword ptr ds:[eax]

DELPHI入口特征 GetModuleHandleA

DELPHI查找按钮事件 右键--查找---查找二进制字符串740E8BD38B83????????FF93????????

采用CRTL+L键进行下翻页查找，需每一个都下上断

本文来自电脑杂谈，转载请注明本文网址：
https://www.pc-fly.com/a/jisuanjixue/article-33496-2.html