发包中最后的公共call位置: JI\u -+BE
$8it&/JP,
00007FF65E03BBA0 | FF 15 22 FC E7 00 | call qword ptr ds:[0x7FF65EEBB7C8] | ]s,T`
(&
00007FF65E03BBA6 | 49 8B 16 | mov rdx,qword ptr ds:[r14] | fngZ0k!
00007FF65E03BBA9 | 4A 8D 0C BA | lea rcx,qword ptr ds:[rdx+r15*4] | -QS_bQG%
00007FF65E03BBAD | 48 85 C9 | test rcx,rcx | Vi#(x9.
00007FF65E03BBB0 | 74 03 | je lostark.7FF65E03BBB5 | )sNtwSl^
00007FF65E03BBB2 | 44 89 21 | mov dword ptr ds:[rcx],r12d | bJ. ((1$
00007FF65E03BBB5 | 83 BF F4 03 00 00 64 | cmp dword ptr ds:[rdi+0x3F4],0x64 | 64:'d' a.8 nWs^
00007FF65E03BBBC | 7E 0D | jle lostark.7FF65E03BBCB | h r6f}2
00007FF65E03BBBE | 44 8B C6 | mov r8d,esi | kf5921(P
00007FF65E03BBC1 | 33 D2 | xor edx,edx | PrN?;Z.
00007FF65E03BBC3 | 49 8B CE | mov rcx,r14 | Nt/*VYUn
00007FF65E03BBC6 | E8 C5 FF EB FF | call lostark.7FF65DEFBB90 | 5@ZD'
00007FF65E03BBCB | 44 8B 75 50 | mov r14d,dword ptr ss:[rbp+0x50] | uvA}7L{UO
00007FF65E03BBCF | 4C 8B C3 | mov r8,rbx | :syR4A WM
00007FF65E03BBD2 | 48 8B 97 7C 01 00 00 | mov rdx,qword ptr ds:[rdi+0x17C] | TR)'I
00007FF65E03BBD9 | 48 8B CF | mov rcx,rdi | 发包最后一层公共位置 =~aJ]T}(
00007FF65E03BBDC | E8 8F 4E 0A 00 | call lostark.7FF65E0E0A70 | jumpout_send4 nh9K(
00007FF65E03BBE1 | 48 8B 8F 7C 01 00 00 | mov rcx,qword ptr ds:[rdi+0x17C] | eW >k'ez
00007FF65E03BBE8 | E8 C3 38 5E 00 | call lostark.7FF65E61F4B0 | `hH1rw@7<
00007FF65E03BBED | 84 C0 | test al,al | Ld`~^<