Skip to content

Instantly share code, notes, and snippets.

@mvankuipers

mvankuipers/tf-article2-windbg-9.txt Secret

Created August 13, 2017 21:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mvankuipers/7851deba2629f1b90badbab499c657da to your computer and use it in GitHub Desktop.
Save mvankuipers/7851deba2629f1b90badbab499c657da to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tf-article2-windbg-9.txt
6: kd> u notepad.exe + 0x3acc L10
notepad!WinMainCRTStartup:
00000000`ffd53acc 4883ec28 sub rsp,28h
00000000`ffd53ad0 e80bf3ffff call notepad!_security_init_cookie (00000000`ffd52de0)
00000000`ffd53ad5 4883c428 add rsp,28h
00000000`ffd53ad9 eb09 jmp notepad!DisplayNonGenuineDlgWorker+0x14c (00000000`ffd53ae4)
00000000`ffd53adb 90 nop
00000000`ffd53adc 90 nop
00000000`ffd53add 90 nop
00000000`ffd53ade 90 nop
00000000`ffd53adf 90 nop
00000000`ffd53ae0 90 nop
00000000`ffd53ae1 90 nop
00000000`ffd53ae2 90 nop
00000000`ffd53ae3 90 nop
00000000`ffd53ae4 4889742408 mov qword ptr [rsp+8],rsi
00000000`ffd53ae9 48897c2410 mov qword ptr [rsp+10h],rdi
00000000`ffd53aee 4154 push r12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment