diff --git a/README.md b/README.md index ba72651..3d97204 100644 --- a/README.md +++ b/README.md @@ -16,10 +16,10 @@ Select the multi-line assembly in the disassembly window and use Baymax ToOls fr ## Example: -1. 00007FFB5565133F 48:8B48 30 mov rcx,qword ptr ds:[rax+30] -2. 00007FFB55651343 48:890D 4E400900 mov qword ptr ds:[7FFB556E5398],rcx -3. 00007FFB5565134A E8 D17AF9FF call ntdll.7FFB555E8E20 -4. 00007FFB5565134F 8BD8 mov ebx,eax +1. 00007FFB5565133F....48:8B48 30...............mov rcx,qword ptr ds:[rax+30] +2. 00007FFB55651343....48:890D 4E400900.........mov qword ptr ds:[7FFB556E5398],rcx +3. 00007FFB5565134A....E8 D17AF9FF..............call ntdll.7FFB555E8E20 +4. 00007FFB5565134F....8BD8.....................mov ebx,eax + Src Hex: 48 8B 48 30 48 89 0D 4E 40 09 00 E8 D1 7A F9 FF 8B D8 + Signature: 48 8B 48 ?? 48 89 0D ?? ?? ?? ?? E8 ?? ?? ?? ?? 8B D8