pc微信39223部分算法call偏移
WechatWin.dll 基址：78FD0000
MD5_Init_call
====================================
7AF48C80 | 56 | push esi |
7AF48C81 | 8B7424 08 | mov esi,dword ptr ss:[esp+0x8] |
7AF48C85 | 6A 4C | push 0x4C |
7AF48C87 | 6A 00 | push 0x0 |
MD5_Update_call_2
====================================
7AF48CE0 | 53 | push ebx |
7AF48CE1 | 8B5C24 08 | mov ebx,dword ptr ss:[esp+0x8] |
7AF48CE5 | 55 | push ebp |
7AF48CE6 | 8B6C24 10 | mov ebp,dword ptr ss:[esp+0x10] |
7AF48CEA | 56 | push esi |
7AF48CEB | 57 | push edi |
7AF48CEC | 8B7C24 1C | mov edi,dword ptr ss:[esp+0x1C] |
7AF48CF0 | 85FF | test edi,edi |
7AF48CF2 | 0F84 B6000000 | je 0x7AF48DAE |
7AF48CF8 | 8B43 10 | mov eax,dword ptr ds:[ebx+0x10] |
MD5_Final_call_2
====================================
7AF48B60 | 53 | push ebx |
7AF48B61 | 8B5C24 0C | mov ebx,dword ptr ss:[esp+0xC] |
7AF48B65 | 56 | push esi |
7AF48B66 | 57 | push edi |
7AF48B67 | 8D7B 18 | lea edi,dword ptr ds:[ebx+0x18] |