“user32”, “TranslateMessage” USER32.TranslateMessage - 8B FF - mov edi,edi [A,^F0:h
USER32.TranslateMessage+2- 55 - push ebp ^
UmYW
USER32.TranslateMessage+3- 8B EC - mov ebp,esp z.SC^/\o|
USER32.TranslateMessage+5- 56 - push esi ^r&)@R$V
USER32.TranslateMessage+6- 8B 75 08 - mov esi,[ebp+08] 这个32位的, 收64位PostMessageA (qk, 0, 123456789, 123456789) 在64位HOOK跳转等于我投递123456789内容就执行,牛的加535178252 b@;Wh-{d