干掉烦人的==>必要的系统组件未能正常运行,请修复Flash Player

冥界3大法王 · 发表于 2019-7-24 14:04

本帖最后由冥界3大法王于 2019-7-24 18:15 编辑

曾几何时，我们最爱用的Opera浏览器堕落了，因为它背叛了组织，不再有先天纯洁的血统，并且被360这大狗屎收购了。
和当年无数的Opera粉丝一样，楼主对它很失望，最近Q群中有人说这个新版本可以玩玩，于是安了一个。

但每次调用vip看视频就会出来这个破玩意，烂玩意，很是烦人，万一没点对点地方
就会误安装马克丁狗尿台烂玩意流氓请回家中，下面我们就要手动把这个干掉。
当这个出来以后，我们马上打开X64DBG，进行附加调试，如果直接加载就会跑飞。
先点刷新，再点

当你搜索全部模块，所有字符，flash 后就会截获

但是我们实验无数次总是会晚那么一步。

最后我们发现，原来bp GetMessageW 可以断到，但修改的源文件位于c:\windows\system32\combase.dll
不想弹框，貌似就只能修改系统文件了。

combase.rar (1.07 MB, 下载次数: 251)

[Asm] 纯文本查看 复制代码

00007FFB09DC0D78 | 4C: | lea r8,qword ptr ds:[7FFB0D0DD518]      | 00007FFB0D0DD518:"../../chrome/browser/renderer_host/pepper/pepper_flash_browser_host.cc"


00007FFB07E488B2 | 41: | push r15                                |
00007FFB07E488B4 | 41: | push r14                                |
00007FFB07E488B6 | 41: | push r13                                |
00007FFB07E488B8 | 41: | push r12                                |
00007FFB07E488BA | 56  | push rsi                                |
00007FFB07E488BB | 57  | push rdi                                |
00007FFB07E488BC | 55  | push rbp                                |
00007FFB07E488BD | 53  | push rbx                                | rbx:L"!"
00007FFB07E488BE | 48: | sub rsp,B8                              |
00007FFB07E488C5 | 48: | mov rsi,rdx                             |
00007FFB07E488C8 | 49: | mov r12,rcx                             |
00007FFB07E488CB | 48: | mov rax,qword ptr ds:[7FFB0D9FE798]     |
00007FFB07E488D2 | 48: | xor rax,rsp                             |
00007FFB07E488D5 | 48: | mov qword ptr ss:[rsp+B0],rax           |
00007FFB07E488DD | F60 | test byte ptr ds:[7FFB0D9F64C0],19      |
00007FFB07E488E4 | E9  | jmp opera_browser.7FFB07E48FE1          | 我们尝试修改这句
00007FFB07E488E9 | 004 | add byte ptr ss:[rbp+31],al             |
00007FFB07E488EC | FF4 | dec dword ptr ds:[rax-77]               |
00007FFB07E488EF | F1  | int1                                    |
00007FFB07E488F0 | E8  | call <opera_browser.sub_7FFB0738D056>   |
00007FFB07E488F5 | E8  | call <opera_browser.sub_7FFB07266980>   |
00007FFB07E488FA | 49: | mov r13,rax                             |
00007FFB07E488FD | 4C: | mov rcx,r12                             |
00007FFB07E48900 | 48: | mov rdx,rax                             |
00007FFB07E48903 | 49: | mov r8,rsi                              |
00007FFB07E48906 | E8  | call <opera_browser.sub_7FFB07E4903E>   |
00007FFB07E4890B | 48: | lea rdx,qword ptr ds:[7FFB0CC704B0]     | 00007FFB0CC704B0:"disable-web-security"
00007FFB07E48912 | 4C: | mov rcx,r13                             |
00007FFB07E48915 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E4891A | 34  | xor al,1                                |
00007FFB07E4891C | 888 | mov byte ptr ds:[rsi+D2],al             |
00007FFB07E48922 | 48: | lea rdx,qword ptr ds:[7FFB0CC702B0]     | 00007FFB0CC702B0:"disable-remote-fonts"
00007FFB07E48929 | 4C: | mov rcx,r13                             |
00007FFB07E4892C | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48931 | 34  | xor al,1                                |
00007FFB07E48933 | 888 | mov byte ptr ds:[rsi+DB],al             |
00007FFB07E48939 | B0  | mov al,1                                |
00007FFB07E4893B | 888 | mov byte ptr ds:[rsi+E4],al             | rsi+E4:L"ā"
00007FFB07E48941 | 48: | lea rdx,qword ptr ds:[7FFB0CC704D0]     | 00007FFB0CC704D0:"disable-xss-auditor"
00007FFB07E48948 | 4C: | mov rcx,r13                             |
00007FFB07E4894B | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48950 | 34  | xor al,1                                |
00007FFB07E48952 | 888 | mov byte ptr ds:[rsi+DE],al             | rsi+DE:L"ā"
00007FFB07E48958 | 48: | lea rdx,qword ptr ds:[7FFB0CC700D0]     | 00007FFB0CC700D0:"disable-local-storage"
00007FFB07E4895F | 4C: | mov rcx,r13                             |
00007FFB07E48962 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48967 | 34  | xor al,1                                |
00007FFB07E48969 | 888 | mov byte ptr ds:[rsi+E2],al             | rsi+E2:L"āā"
00007FFB07E4896F | 48: | lea rdx,qword ptr ds:[7FFB0CC6FDD0]     | 00007FFB0CC6FDD0:"disable-databases"
00007FFB07E48976 | 4C: | mov rcx,r13                             |
00007FFB07E48979 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E4897E | 34  | xor al,1                                |
00007FFB07E48980 | 888 | mov byte ptr ds:[rsi+E3],al             |
00007FFB07E48986 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FCA0]     | 00007FFB0CC6FCA0:"disable-3d-apis"
00007FFB07E4898D | 4C: | mov rcx,r13                             |
00007FFB07E48990 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48995 | 84C | test al,al                              |
00007FFB07E48997 | 74  | je opera_browser.7FFB07E4899D           |
00007FFB07E48999 | 31C | xor eax,eax                             |
00007FFB07E4899B | EB  | jmp opera_browser.7FFB07E489AE          |
00007FFB07E4899D | 48: | lea rdx,qword ptr ds:[7FFB0CC6FE14]     | 00007FFB0CC6FE14:"disable-webgl"
00007FFB07E489A4 | 4C: | mov rcx,r13                             |
00007FFB07E489A7 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E489AC | 34  | xor al,1                                |
00007FFB07E489AE | 888 | mov byte ptr ds:[rsi+EB],al             | rsi+EB:L"āāāā"
00007FFB07E489B4 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FCA0]     | 00007FFB0CC6FCA0:"disable-3d-apis"
00007FFB07E489BB | 4C: | mov rcx,r13                             |
00007FFB07E489BE | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E489C3 | 84C | test al,al                              |
00007FFB07E489C5 | 75  | jne opera_browser.7FFB07E489DA          |
00007FFB07E489C7 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FE14]     | 00007FFB0CC6FE14:"disable-webgl"
00007FFB07E489CE | 4C: | mov rcx,r13                             |
00007FFB07E489D1 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E489D6 | 84C | test al,al                              |
00007FFB07E489D8 | 74  | je opera_browser.7FFB07E489DE           |
00007FFB07E489DA | 31C | xor eax,eax                             |
00007FFB07E489DC | EB  | jmp opera_browser.7FFB07E489EF          |
00007FFB07E489DE | 48: | lea rdx,qword ptr ds:[7FFB0CC6FE22]     | 00007FFB0CC6FE22:"disable-webgl2"
00007FFB07E489E5 | 4C: | mov rcx,r13                             |
00007FFB07E489E8 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E489ED | 34  | xor al,1                                |
00007FFB07E489EF | 888 | mov byte ptr ds:[rsi+EC],al             |
00007FFB07E489F5 | 48: | lea rdx,qword ptr ds:[7FFB0CC70190]     | 00007FFB0CC70190:"disable-pepper-3d"
00007FFB07E489FC | 4C: | mov rcx,r13                             |
00007FFB07E489FF | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A04 | 34  | xor al,1                                |
00007FFB07E48A06 | 888 | mov byte ptr ds:[rsi+ED],al             | rsi+ED:L"āāā"
00007FFB07E48A0C | 48: | lea rdx,qword ptr ds:[7FFB0CC6FE60]     | 00007FFB0CC6FE60:"disable-flash-3d"
00007FFB07E48A13 | 4C: | mov rcx,r13                             |
00007FFB07E48A16 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A1B | 34  | xor al,1                                |
00007FFB07E48A1D | 888 | mov byte ptr ds:[rsi+EE],al             |
00007FFB07E48A23 | 48: | lea rbx,qword ptr ds:[7FFB0CC6FE80]     | rbx:L"!", 00007FFB0CC6FE80:"disable-flash-stage3d"
00007FFB07E48A2A | 4C: | mov rcx,r13                             |
00007FFB07E48A2D | 48: | mov rdx,rbx                             | rbx:L"!"
00007FFB07E48A30 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A35 | 34  | xor al,1                                |
00007FFB07E48A37 | 888 | mov byte ptr ds:[rsi+EF],al             | rsi+EF:L"āā"
00007FFB07E48A3D | 4C: | mov rcx,r13                             |
00007FFB07E48A40 | 48: | mov rdx,rbx                             | rbx:L"!"
00007FFB07E48A43 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A48 | 34  | xor al,1                                |
00007FFB07E48A4A | 888 | mov byte ptr ds:[rsi+F0],al             |
00007FFB07E48A50 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FB00]     | 00007FFB0CC6FB00:"allow-file-access-from-files"
00007FFB07E48A57 | 4C: | mov rcx,r13                             |
00007FFB07E48A5A | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A5F | 888 | mov byte ptr ds:[rsi+EA],al             |
00007FFB07E48A65 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FCB0]     | 00007FFB0CC6FCB0:"disable-accelerated-2d-canvas"
00007FFB07E48A6C | 4C: | mov rcx,r13                             |
00007FFB07E48A6F | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A74 | 34  | xor al,1                                |
00007FFB07E48A76 | 888 | mov byte ptr ds:[rsi+F5],al             |
00007FFB07E48A7C | 48: | lea rdx,qword ptr ds:[7FFB0CC6FC50]     | 00007FFB0CC6FC50:"disable-canvas-aa"
00007FFB07E48A83 | 4C: | mov rcx,r13                             |
00007FFB07E48A86 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48A8B | 888 | mov byte ptr ds:[rsi+FC],al             | rsi+FC:L"ā"
00007FFB07E48A91 | 48: | lea rdx,qword ptr ds:[7FFB0CC70520]     | 00007FFB0CC70520:"disable-2d-canvas-clip-aa"
00007FFB07E48A98 | 4C: | mov rcx,r13                             |
00007FFB07E48A9B | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48AA0 | 34  | xor al,1                                |
00007FFB07E48AA2 | 888 | mov byte ptr ds:[rsi+FD],al             |
00007FFB07E48AA8 | 48: | lea rcx,qword ptr ds:[7FFB0CC6FAE0]     | 00007FFB0CC6FAE0:"canvas-msaa-sample-count"
00007FFB07E48AAF | 48: | lea rbx,qword ptr ss:[rsp+80]           | [rsp+80]:"canvas-msaa-sample-count"
00007FFB07E48AB7 | 48: | mov qword ptr ds:[rbx],rcx              | rbx:L"!"
00007FFB07E48ABA | E8  | call <opera_browser.sub_7FFB0CB086E0>   |
00007FFB07E48ABF | 48: | mov qword ptr ds:[rbx+8],rax            | rbx+8:L"0"
00007FFB07E48AC3 | 48: | lea rdi,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48ACB | 4C: | mov rcx,r13                             |
00007FFB07E48ACE | 48: | mov rdx,rdi                             |
00007FFB07E48AD1 | 49: | mov r8,rbx                              | rbx:L"!"
00007FFB07E48AD4 | E8  | call <opera_browser.sub_7FFB07266A10>   |
00007FFB07E48AD9 | 807 | cmp byte ptr ds:[rdi+17],0              |
00007FFB07E48ADD | 78  | js opera_browser.7FFB07E48AF4           |
00007FFB07E48ADF | 48: | lea rcx,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48AE7 | E8  | call <opera_browser.sub_7FFB0CAF8EA0>   |
00007FFB07E48AEC | 898 | mov dword ptr ds:[rsi+100],eax          |
00007FFB07E48AF2 | EB  | jmp opera_browser.7FFB07E48B12          |
00007FFB07E48AF4 | 48: | mov rdi,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48AFC | 48: | mov rcx,rdi                             |
00007FFB07E48AFF | E8  | call <opera_browser.sub_7FFB0CAF8EA0>   |
00007FFB07E48B04 | 898 | mov dword ptr ds:[rsi+100],eax          |
00007FFB07E48B0A | 48: | mov rcx,rdi                             |
00007FFB07E48B0D | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48B12 | C68 | mov byte ptr ds:[rsi+146],0             | rsi+146:L"ā"
00007FFB07E48B19 | 48: | lea rdx,qword ptr ds:[7FFB0CC70BB0]     | 00007FFB0CC70BB0:"history-entry-requires-user-gesture"
00007FFB07E48B20 | 4C: | mov rcx,r13                             |
00007FFB07E48B23 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48B28 | 888 | mov byte ptr ds:[rsi+E6],al             |
00007FFB07E48B2E | 48: | lea rdx,qword ptr ds:[7FFB0CC70030]     | 00007FFB0CC70030:"disable-ipc-flooding-protection"
00007FFB07E48B35 | 4C: | mov rcx,r13                             |
00007FFB07E48B38 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48B3D | 89C | mov ecx,eax                             |
00007FFB07E48B3F | B0  | mov al,1                                |
00007FFB07E48B41 | 84C | test cl,cl                              |
00007FFB07E48B43 | 75  | jne opera_browser.7FFB07E48B54          |
00007FFB07E48B45 | 48: | lea rdx,qword ptr ds:[7FFB0CC70250]     | 00007FFB0CC70250:"disable-pushstate-throttle"
00007FFB07E48B4C | 4C: | mov rcx,r13                             |
00007FFB07E48B4F | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48B54 | 888 | mov byte ptr ds:[rsi+E7],al             | rsi+E7:L"ā"
00007FFB07E48B5A | 48: | lea rdx,qword ptr ds:[7FFB0CC6FCD0]     | 00007FFB0CC6FCD0:"disable-accelerated-video-decode"
00007FFB07E48B61 | 4C: | mov rcx,r13                             |
00007FFB07E48B64 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48B69 | 34  | xor al,1                                |
00007FFB07E48B6B | 888 | mov byte ptr ds:[rsi+14E],al            |
00007FFB07E48B71 | 48: | lea rdi,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48B79 | 48: | mov rcx,rdi                             |
00007FFB07E48B7C | 4C: | mov rdx,r13                             |
00007FFB07E48B7F | E8  | call <opera_browser.sub_7FFB07E4950E>   |
00007FFB07E48B84 | 48: | lea rcx,qword ptr ds:[7FFB0CB32CD0]     | 00007FFB0CB32CD0:"no-user-gesture-required"
00007FFB07E48B8B | E8  | call <opera_browser.sub_7FFB0CB086E0>   |
00007FFB07E48B90 | 8A5 | mov bl,byte ptr ds:[rdi+17]             |
00007FFB07E48B93 | 84D | test bl,bl                              |
00007FFB07E48B95 | 48: | mov rdi,qword ptr ds:[rdi+8]            | 执行完这句之后 就要弹框了
00007FFB07E48B99 | 0FB | movzx ebp,bl                            |
00007FFB07E48B9C | 48: | mov rcx,rbp                             |
00007FFB07E48B9F | 48: | cmovs rcx,rdi                           |
00007FFB07E48BA3 | 48: | cmp rax,rcx                             |
00007FFB07E48BA6 | 75  | jne opera_browser.7FFB07E48BE4          |
00007FFB07E48BA8 | 48: | mov qword ptr ss:[rsp+20],rax           |
00007FFB07E48BAD | 4C: | lea r9,qword ptr ds:[7FFB0CB32CD0]      | 00007FFB0CB32CD0:"no-user-gesture-required"
00007FFB07E48BB4 | 48: | lea rcx,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48BBC | 31D | xor edx,edx                             |
00007FFB07E48BBE | 49: | mov r8,FFFFFFFFFFFFFFFF                 |
00007FFB07E48BC5 | E8  | call <opera_browser.sub_7FFB0727237C>   |
00007FFB07E48BCA | 85C | test eax,eax                            |
00007FFB07E48BCC | 0F8 | je opera_browser.7FFB07E48C7F           |
00007FFB07E48BD2 | 8A9 | mov bl,byte ptr ss:[rsp+AF]             |
00007FFB07E48BD9 | 48: | mov rdi,qword ptr ss:[rsp+A0]           |
00007FFB07E48BE1 | 0FB | movzx ebp,bl                            |
00007FFB07E48BE4 | 48: | lea rcx,qword ptr ds:[7FFB0CB32CF0]     | 00007FFB0CB32CF0:"user-gesture-required"
00007FFB07E48BEB | E8  | call <opera_browser.sub_7FFB0CB086E0>   |
00007FFB07E48BF0 | 84D | test bl,bl                              |
00007FFB07E48BF2 | 48: | mov rcx,rbp                             |
00007FFB07E48BF5 | 48: | cmovs rcx,rdi                           |
00007FFB07E48BF9 | 48: | cmp rax,rcx                             |
00007FFB07E48BFC | 75  | jne opera_browser.7FFB07E48C36          |
00007FFB07E48BFE | 48: | mov qword ptr ss:[rsp+20],rax           |
00007FFB07E48C03 | 4C: | lea r9,qword ptr ds:[7FFB0CB32CF0]      | 00007FFB0CB32CF0:"user-gesture-required"
00007FFB07E48C0A | 48: | lea rcx,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48C12 | 31D | xor edx,edx                             |
00007FFB07E48C14 | 49: | mov r8,FFFFFFFFFFFFFFFF                 |
00007FFB07E48C1B | E8  | call <opera_browser.sub_7FFB0727237C>   |
00007FFB07E48C20 | 85C | test eax,eax                            |
00007FFB07E48C22 | 74  | je opera_browser.7FFB07E48C8B           |
00007FFB07E48C24 | 8A9 | mov bl,byte ptr ss:[rsp+AF]             |
00007FFB07E48C2B | 48: | mov rdi,qword ptr ss:[rsp+A0]           |
00007FFB07E48C33 | 0FB | movzx ebp,bl                            |
00007FFB07E48C36 | 48: | lea rcx,qword ptr ds:[7FFB0CB32CA0]     | 00007FFB0CB32CA0:"document-user-activation-required"
00007FFB07E48C3D | E8  | call <opera_browser.sub_7FFB0CB086E0>   |
00007FFB07E48C42 | 84D | test bl,bl                              |
00007FFB07E48C44 | 48: | cmovs rbp,rdi                           |
00007FFB07E48C48 | 48: | cmp rax,rbp                             |
00007FFB07E48C4B | 75  | jne opera_browser.7FFB07E48C95          |
00007FFB07E48C4D | 48: | mov qword ptr ss:[rsp+20],rax           |
00007FFB07E48C52 | 4C: | lea r9,qword ptr ds:[7FFB0CB32CA0]      | 00007FFB0CB32CA0:"document-user-activation-required"
00007FFB07E48C59 | 48: | lea rcx,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48C61 | 31D | xor edx,edx                             |
00007FFB07E48C63 | 49: | mov r8,FFFFFFFFFFFFFFFF                 |
00007FFB07E48C6A | E8  | call <opera_browser.sub_7FFB0727237C>   |
00007FFB07E48C6F | 85C | test eax,eax                            |
00007FFB07E48C71 | 75  | jne opera_browser.7FFB07E48C95          |
00007FFB07E48C73 | C78 | mov dword ptr ds:[rsi+27C],2            |
00007FFB07E48C7D | EB  | jmp opera_browser.7FFB07E48C95          |
00007FFB07E48C7F | C78 | mov dword ptr ds:[rsi+27C],0            |
00007FFB07E48C89 | EB  | jmp opera_browser.7FFB07E48C95          |
00007FFB07E48C8B | C78 | mov dword ptr ds:[rsi+27C],1            |
00007FFB07E48C95 | 48: | lea rcx,qword ptr ds:[7FFB0D1F46B0]     | 00007FFB0D1F46B0:&"DontSendKeyEventsToJavascript"
00007FFB07E48C9C | E8  | call opera_browser.7FFB0727FD20         |
00007FFB07E48CA1 | 888 | mov byte ptr ds:[rsi+12C],al            |
00007FFB07E48CA7 | 48: | lea rcx,qword ptr ds:[7FFB0D1CFE90]     | 00007FFB0D1CFE90:&"DirectManipulationStylus"
00007FFB07E48CAE | E8  | call opera_browser.7FFB0727FD20         |
00007FFB07E48CB3 | 888 | mov byte ptr ds:[rsi+12D],al            |
00007FFB07E48CB9 | 48: | lea rdx,qword ptr ds:[7FFB0D1CF680]     | 00007FFB0D1CF680:"disable-touch-adjustment"
00007FFB07E48CC0 | 4C: | mov rcx,r13                             |
00007FFB07E48CC3 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48CC8 | 34  | xor al,1                                |
00007FFB07E48CCA | 888 | mov byte ptr ds:[rsi+114],al            |
00007FFB07E48CD0 | 48: | lea rdx,qword ptr ds:[7FFB0CC70820]     | 00007FFB0CC70820:"enable-smooth-scrolling"
00007FFB07E48CD7 | 4C: | mov rcx,r13                             |
00007FFB07E48CDA | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48CDF | 89C | mov ecx,eax                             |
00007FFB07E48CE1 | B0  | mov al,1                                |
00007FFB07E48CE3 | 84C | test cl,cl                              |
00007FFB07E48CE5 | 75  | jne opera_browser.7FFB07E48D03          |
00007FFB07E48CE7 | 48: | lea rdx,qword ptr ds:[7FFB0CC70390]     | 00007FFB0CC70390:"disable-smooth-scrolling"
00007FFB07E48CEE | 4C: | mov rcx,r13                             |
00007FFB07E48CF1 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48CF6 | 84C | test al,al                              |
00007FFB07E48CF8 | 74  | je opera_browser.7FFB07E48CFE           |
00007FFB07E48CFA | 31C | xor eax,eax                             |
00007FFB07E48CFC | EB  | jmp opera_browser.7FFB07E48D03          |
00007FFB07E48CFE | E8  | call <opera_browser.sub_7FFB07E495D8>   |
00007FFB07E48D03 | 888 | mov byte ptr ds:[rsi+111],al            |
00007FFB07E48D09 | E8  | call <opera_browser.sub_7FFB07E49650>   |
00007FFB07E48D0E | 888 | mov byte ptr ds:[rsi+112],al            |
00007FFB07E48D14 | E8  | call <opera_browser.sub_7FFB07C181BE>   |
00007FFB07E48D19 | 48: | mov rdi,rax                             |
00007FFB07E48D1C | 49: | mov rax,qword ptr ds:[r12]              |
00007FFB07E48D20 | 4C: | mov rcx,r12                             |
00007FFB07E48D23 | FF5 | call qword ptr ds:[rax+18]              |
00007FFB07E48D26 | 48: | mov rdx,qword ptr ds:[rax]              |
00007FFB07E48D29 | 48: | mov rcx,rax                             |
00007FFB07E48D2C | FF9 | call qword ptr ds:[rdx+E0]              |
00007FFB07E48D32 | 48: | mov rbp,qword ptr ds:[rdi]              |
00007FFB07E48D35 | 48: | mov rcx,rdi                             |
00007FFB07E48D38 | 89C | mov edx,eax                             |
00007FFB07E48D3A | FF9 | call qword ptr ss:[rbp+C8]              |
00007FFB07E48D40 | 84C | test al,al                              |
00007FFB07E48D42 | 74  | je opera_browser.7FFB07E48D52           |
00007FFB07E48D44 | B0  | mov al,1                                |
00007FFB07E48D46 | 888 | mov byte ptr ds:[rsi+D3],al             |
00007FFB07E48D4C | 888 | mov byte ptr ds:[rsi+D1],al             |
00007FFB07E48D52 | 48: | lea rdx,qword ptr ds:[7FFB0CC70900]     | 00007FFB0CC70900:"enable-viewport"
00007FFB07E48D59 | 4C: | mov rcx,r13                             |
00007FFB07E48D5C | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48D61 | 888 | mov byte ptr ds:[rsi+139],al            |
00007FFB07E48D67 | 49: | mov rcx,qword ptr ds:[r12+38]           |
00007FFB07E48D6C | 48: | test rcx,rcx                            |
00007FFB07E48D6F | 74  | je opera_browser.7FFB07E48D85           |
00007FFB07E48D71 | 48: | mov rax,qword ptr ds:[rcx]              |
00007FFB07E48D74 | FF9 | call qword ptr ds:[rax+C0]              |
00007FFB07E48D7A | 84C | test al,al                              |
00007FFB07E48D7C | 74  | je opera_browser.7FFB07E48D85           |
00007FFB07E48D7E | C68 | mov byte ptr ds:[rsi+13A],0             |
00007FFB07E48D85 | 48: | lea rdx,qword ptr ds:[7FFB0CC70CD0]     | 00007FFB0CC70CD0:"main-frame-resizes-are-orientation-changes"
00007FFB07E48D8C | 4C: | mov rcx,r13                             |
00007FFB07E48D8F | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48D94 | 888 | mov byte ptr ds:[rsi+142],al            | rsi+142:L"ā"
00007FFB07E48D9A | 48: | lea rdx,qword ptr ds:[7FFB0CC70840]     | 00007FFB0CC70840:"enable-spatial-navigation"
00007FFB07E48DA1 | 4C: | mov rcx,r13                             |
00007FFB07E48DA4 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48DA9 | 888 | mov byte ptr ds:[rsi+145],al            |
00007FFB07E48DAF | 48: | lea rdx,qword ptr ds:[7FFB0CC70290]     | 00007FFB0CC70290:"disable-reading-from-canvas"
00007FFB07E48DB6 | 4C: | mov rcx,r13                             |
00007FFB07E48DB9 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48DBE | 888 | mov byte ptr ds:[rsi+108],al            |
00007FFB07E48DC4 | 48: | lea rdx,qword ptr ds:[7FFB0CC70860]     | 00007FFB0CC70860:"enable-strict-mixed-content-checking"
00007FFB07E48DCB | 4C: | mov rcx,r13                             |
00007FFB07E48DCE | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48DD3 | 888 | mov byte ptr ds:[rsi+109],al            |
00007FFB07E48DD9 | 48: | lea rdx,qword ptr ds:[7FFB0CC70890]     | 00007FFB0CC70890:"enable-strict-powerful-feature-restrictions"
00007FFB07E48DE0 | 4C: | mov rcx,r13                             |
00007FFB07E48DE3 | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48DE8 | 888 | mov byte ptr ds:[rsi+10A],al            |
00007FFB07E48DEE | 48: | lea rdx,qword ptr ds:[7FFB0CDCA9F5]     | 00007FFB0CDCA9F5:"BlockableMixedContent"
00007FFB07E48DF5 | 48: | lea rdi,qword ptr ss:[rsp+68]           |
00007FFB07E48DFA | 48: | mov rcx,rdi                             |
00007FFB07E48DFD | E8  | call opera_browser.7FFB07262804         |
00007FFB07E48E02 | 48: | lea rcx,qword ptr ss:[rsp+80]           | [rsp+80]:"canvas-msaa-sample-count"
00007FFB07E48E0A | 48: | mov rdx,rdi                             |
00007FFB07E48E0D | E8  | call <opera_browser.sub_7FFB07A1AB70>   |
00007FFB07E48E12 | 807 | cmp byte ptr ds:[rdi+17],0              |
00007FFB07E48E16 | 79  | jns opera_browser.7FFB07E48E22          |
00007FFB07E48E18 | 48: | mov rcx,qword ptr ss:[rsp+68]           |
00007FFB07E48E1D | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48E22 | 0FB | movzx eax,byte ptr ss:[rsp+97]          |
00007FFB07E48E2A | 84C | test al,al                              |
00007FFB07E48E2C | 79  | jns opera_browser.7FFB07E48E36          |
00007FFB07E48E2E | 48: | mov rax,qword ptr ss:[rsp+88]           |
00007FFB07E48E36 | 48: | cmp rax,22                              | 22:'\"'
00007FFB07E48E3A | 75  | jne opera_browser.7FFB07E48E69          |
00007FFB07E48E3C | 48: | mov qword ptr ss:[rsp+20],22            | 22:'\"'
00007FFB07E48E45 | 4C: | lea r9,qword ptr ds:[7FFB0CDCAA0B]      | 00007FFB0CDCAA0B:"StrictlyBlockBlockableMixedContent"
00007FFB07E48E4C | 48: | lea rcx,qword ptr ss:[rsp+80]           | [rsp+80]:"canvas-msaa-sample-count"
00007FFB07E48E54 | 31D | xor edx,edx                             |
00007FFB07E48E56 | 49: | mov r8,FFFFFFFFFFFFFFFF                 |
00007FFB07E48E5D | E8  | call <opera_browser.sub_7FFB0727237C>   |
00007FFB07E48E62 | 85C | test eax,eax                            |
00007FFB07E48E64 | 0F9 | sete al                                 |
00007FFB07E48E67 | EB  | jmp opera_browser.7FFB07E48E6B          |
00007FFB07E48E69 | 31C | xor eax,eax                             |
00007FFB07E48E6B | 888 | mov byte ptr ds:[rsi+10C],al            |
00007FFB07E48E71 | 48: | lea rdx,qword ptr ds:[7FFB0CDCAA2E]     | 00007FFB0CDCAA2E:"PluginMixedContentStatus"
00007FFB07E48E78 | 48: | lea rdi,qword ptr ss:[rsp+50]           |
00007FFB07E48E7D | 48: | mov rcx,rdi                             |
00007FFB07E48E80 | E8  | call opera_browser.7FFB07262804         |
00007FFB07E48E85 | 48: | lea rcx,qword ptr ss:[rsp+68]           |
00007FFB07E48E8A | 48: | mov rdx,rdi                             |
00007FFB07E48E8D | E8  | call <opera_browser.sub_7FFB07A1AB70>   |
00007FFB07E48E92 | 807 | cmp byte ptr ds:[rdi+17],0              |
00007FFB07E48E96 | 79  | jns opera_browser.7FFB07E48EA2          |
00007FFB07E48E98 | 48: | mov rcx,qword ptr ss:[rsp+50]           |
00007FFB07E48E9D | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48EA2 | 0FB | movzx eax,byte ptr ss:[rsp+7F]          |
00007FFB07E48EA7 | 84C | test al,al                              |
00007FFB07E48EA9 | 79  | jns opera_browser.7FFB07E48EB0          |
00007FFB07E48EAB | 48: | mov rax,qword ptr ss:[rsp+70]           |
00007FFB07E48EB0 | 48: | cmp rax,15                              |
00007FFB07E48EB4 | 75  | jne opera_browser.7FFB07E48EE0          |
00007FFB07E48EB6 | 48: | mov qword ptr ss:[rsp+20],15            |
00007FFB07E48EBF | 4C: | lea r9,qword ptr ds:[7FFB0CDCA9F5]      | 00007FFB0CDCA9F5:"BlockableMixedContent"
00007FFB07E48EC6 | 48: | lea rcx,qword ptr ss:[rsp+68]           |
00007FFB07E48ECB | 31D | xor edx,edx                             |
00007FFB07E48ECD | 49: | mov r8,FFFFFFFFFFFFFFFF                 |
00007FFB07E48ED4 | E8  | call <opera_browser.sub_7FFB0727237C>   |
00007FFB07E48ED9 | 85C | test eax,eax                            |
00007FFB07E48EDB | 0F9 | sete al                                 |
00007FFB07E48EDE | EB  | jmp opera_browser.7FFB07E48EE2          |
00007FFB07E48EE0 | 31C | xor eax,eax                             |
00007FFB07E48EE2 | 888 | mov byte ptr ds:[rsi+10D],al            |
00007FFB07E48EE8 | E8  | call <opera_browser.sub_7FFB07E497B9>   |
00007FFB07E48EED | 898 | mov dword ptr ds:[rsi+148],eax          |
00007FFB07E48EF3 | 48: | lea rdx,qword ptr ds:[7FFB0CC6FEA0]     | 00007FFB0CC6FEA0:"disable-gesture-requirement-for-presentation"
00007FFB07E48EFA | 4C: | mov rcx,r13                             |
00007FFB07E48EFD | E8  | call <opera_browser.sub_7FFB07268A00>   |
00007FFB07E48F02 | 34  | xor al,1                                |
00007FFB07E48F04 | 888 | mov byte ptr ds:[rsi+154],al            |
00007FFB07E48F0A | 49: | mov rcx,qword ptr ds:[r12+38]           |
00007FFB07E48F0F | 48: | test rcx,rcx                            |
00007FFB07E48F12 | 74  | je opera_browser.7FFB07E48F46           |
00007FFB07E48F14 | 48: | mov rax,qword ptr ds:[rcx]              |
00007FFB07E48F17 | FF9 | call qword ptr ds:[rax+D8]              |
00007FFB07E48F1D | 84C | test al,al                              |
00007FFB07E48F1F | 74  | je opera_browser.7FFB07E48F28           |
00007FFB07E48F21 | C68 | mov byte ptr ds:[rsi+275],1             |
00007FFB07E48F28 | 49: | mov rcx,qword ptr ds:[r12+38]           |
00007FFB07E48F2D | 48: | test rcx,rcx                            |
00007FFB07E48F30 | 74  | je opera_browser.7FFB07E48F46           |
00007FFB07E48F32 | 48: | mov rax,qword ptr ds:[rcx]              |
00007FFB07E48F35 | FF9 | call qword ptr ds:[rax+E0]              |
00007FFB07E48F3B | 84C | test al,al                              |
00007FFB07E48F3D | 74  | je opera_browser.7FFB07E48F46           |
00007FFB07E48F3F | C68 | mov byte ptr ds:[rsi+277],0             |
00007FFB07E48F46 | E8  | call <opera_browser.sub_7FFB072721E5>   |
00007FFB07E48F4B | 48: | mov rcx,qword ptr ds:[rax+8]            |
00007FFB07E48F4F | 48: | mov rax,qword ptr ds:[rcx]              |
00007FFB07E48F52 | 4C: | mov rdx,r12                             |
00007FFB07E48F55 | 49: | mov r8,rsi                              |
00007FFB07E48F58 | FF9 | call qword ptr ds:[rax+2C8]             |
00007FFB07E48F5E | 807 | cmp byte ptr ss:[rsp+7F],0              |
00007FFB07E48F63 | 79  | jns opera_browser.7FFB07E48F6F          |
00007FFB07E48F65 | 48: | mov rcx,qword ptr ss:[rsp+68]           |
00007FFB07E48F6A | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48F6F | 80B | cmp byte ptr ss:[rsp+97],0              |
00007FFB07E48F77 | 79  | jns opera_browser.7FFB07E48F86          |
00007FFB07E48F79 | 48: | mov rcx,qword ptr ss:[rsp+80]           | [rsp+80]:"canvas-msaa-sample-count"
00007FFB07E48F81 | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48F86 | 80B | cmp byte ptr ss:[rsp+AF],0              |
00007FFB07E48F8E | 79  | jns opera_browser.7FFB07E48F9D          |
00007FFB07E48F90 | 48: | mov rcx,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48F98 | E8  | call <opera_browser.sub_7FFB0CADB5B8>   |
00007FFB07E48F9D | 4D: | test r15,r15                            |
00007FFB07E48FA0 | 74  | je opera_browser.7FFB07E48FBA           |
00007FFB07E48FA2 | 41: | cmp byte ptr ds:[r15],0                 |
00007FFB07E48FA6 | 74  | je opera_browser.7FFB07E48FBA           |
00007FFB07E48FA8 | 48: | lea rdx,qword ptr ds:[7FFB0CDCA9D2]     | 00007FFB0CDCA9D2:"RenderViewHostImpl::GetWebkitPrefs"
00007FFB07E48FAF | 4C: | mov rcx,r15                             |
00007FFB07E48FB2 | 4D: | mov r8,r14                              |
00007FFB07E48FB5 | E8  | call <opera_browser.sub_7FFB09EE9D80>   |
00007FFB07E48FBA | 48: | mov rcx,qword ptr ss:[rsp+B0]           |
00007FFB07E48FC2 | 48: | xor rcx,rsp                             |
00007FFB07E48FC5 | E8  | call opera_browser.7FFB0CADB9E0         |
00007FFB07E48FCA | 48: | mov rax,rsi                             |
00007FFB07E48FCD | 48: | add rsp,B8                              |
00007FFB07E48FD4 | 5B  | pop rbx                                 | rbx:L"!"
00007FFB07E48FD5 | 5D  | pop rbp                                 |
00007FFB07E48FD6 | 5F  | pop rdi                                 |
00007FFB07E48FD7 | 5E  | pop rsi                                 |
00007FFB07E48FD8 | 41: | pop r12                                 |
00007FFB07E48FDA | 41: | pop r13                                 |
00007FFB07E48FDC | 41: | pop r14                                 |
00007FFB07E48FDE | 41: | pop r15                                 |
00007FFB07E48FE0 | C3  | ret                                     |
00007FFB07E48FE1 | E8  | call <JMP.&GetCurrentThreadId>          |
00007FFB07E48FE6 | 89C | mov edi,eax                             |
00007FFB07E48FE8 | 4C: | lea r14,qword ptr ss:[rsp+98]           | [rsp+98]:"document-user-activation-required"
00007FFB07E48FF0 | 4C: | mov rcx,r14                             |
00007FFB07E48FF3 | E8  | call <opera_browser.sub_7FFB072B6C30>   |
00007FFB07E48FF8 | 4C: | mov qword ptr ss:[rsp+38],r14           |
00007FFB07E48FFD | 897 | mov dword ptr ss:[rsp+30],edi           |
00007FFB07E49001 | 0F5 | xorps xmm0,xmm0                         |
00007FFB07E49004 | 0F1 | movups xmmword ptr ss:[rsp+20],xmm0     |
00007FFB07E49009 | C74 | mov dword ptr ss:[rsp+48],0             |
00007FFB07E49011 | 48: | mov qword ptr ss:[rsp+40],0             |
00007FFB07E4901A | 4C: | lea r15,qword ptr ds:[7FFB0D9F64C0]     |
00007FFB07E49021 | 4C: | lea r8,qword ptr ds:[7FFB0CDCA9D2]      | 00007FFB0CDCA9D2:"RenderViewHostImpl::GetWebkitPrefs"
00007FFB07E49028 | B1  | mov cl,58                               | 58:'X'
00007FFB07E4902A | 4C: | mov rdx,r15                             |
00007FFB07E4902D | 45: | xor r9d,r9d                             |
00007FFB07E49030 | E8  | call <opera_browser.sub_7FFB09EE9C10>   |
00007FFB07E49035 | 49: | mov r14,rax                             |
00007FFB07E49038 | E9  | jmp opera_browser.7FFB07E488ED          |



00007FFB3A713D03 | FF 15 CF | call qword ptr ds:[<&GetMessageW>]                          |

另，还有以下1个切入点

风轻然雨朦胧 · 发表于 2019-7-24 14:24

无语了，你修复一下就完事了。。。

pikachu888 · 发表于 2019-7-24 19:25

scncrenyong 发表于 2019-7-24 15:18
Flash必要的系统组件未能正常运行的原因，只是FlashHelperService服务未运行，或运行出错。只要在服务里面 ...

所以问题就在这...好好的一个电脑,又不是时刻要运行FLASH,漏洞这么多,还不让人关闭服务

穆慕慕 · 发表于 2019-7-24 14:12

还需要客户端啊，，有crx插件么

愚无尽 · 发表于 2019-7-24 14:22

大法王就是比别人会玩。

wwwlailailai · 发表于 2019-7-24 14:24

大佬牛逼！666三联我也碰到过这种情况

fla3537 · 发表于 2019-7-24 14:24

一脸懵B，但还要为你加油

wei88888888 · 发表于 2019-7-24 14:25

还得继续学习呀

mojunwei · 发表于 2019-7-24 14:26

我也会弹出这个，不知道是怎么回事！太复杂不敢动

owlsgame · 发表于 2019-7-24 14:34

学习了，崇拜大佬

吾爱破解北天 · 发表于 2019-7-24 14:42

风轻然雨朦胧发表于 2019-7-24 14:24
无语了，你修复一下就完事了。。。

修复就是让下载现在流氓代{过}{滤}理的那个版本。

帐号		自动登录	找回密码
密码			注册[Register]

[原创] 干掉烦人的==>必要的系统组件未能正常运行,请修复Flash Player

免费评分