|

 
|
1#
发表于 2008-6-19 12:43
| 只看该作者
帮个忙,谢谢了
7C92EB94 > C3 retn
7C92EB95 8DA424 00000000 lea esp,dword ptr ss:[esp]
7C92EB9C 8D6424 00 lea esp,dword ptr ss:[esp]
7C92EBA0 90 nop
7C92EBA1 90 nop
7C92EBA2 90 nop
7C92EBA3 90 nop
7C92EBA4 90 nop
7C92EBA5 > 8D5424 08 lea edx,dword ptr ss:[esp+8]
7C92EBA9 CD 2E int 2E
7C92EBAB C3 retn
7C92EBAC > 55 push ebp
7C92EBAD 8BEC mov ebp,esp
7C92EBAF 9C pushfd
7C92EBB0 81EC D0020000 sub esp,2D0
7C92EBB6 8985 DCFDFFFF mov dword ptr ss:[ebp-224],eax
7C92EBBC 898D D8FDFFFF mov dword ptr ss:[ebp-228],ecx
7C92EBC2 8B45 08 mov eax,dword ptr ss:[ebp+8]
7C92EBC5 8B4D 04 mov ecx,dword ptr ss:[ebp+4]
7C92EBC8 8948 0C mov dword ptr ds:[eax+C],ecx
7C92EBCB 8D85 2CFDFFFF lea eax,dword ptr ss:[ebp-2D4]
7C92EBD1 8988 B8000000 mov dword ptr ds:[eax+B8],ecx
7C92EBD7 8998 A4000000 mov dword ptr ds:[eax+A4],ebx
7C92EBDD 8990 A8000000 mov dword ptr ds:[eax+A8],edx
7C92EBE3 89B0 A0000000 mov dword ptr ds:[eax+A0],esi
7C92EBE9 89B8 9C000000 mov dword ptr ds:[eax+9C],edi
7C92EBEF 8D4D 0C lea ecx,dword ptr ss:[ebp+C]
7C92EBF2 8988 C4000000 mov dword ptr ds:[eax+C4],ecx
7C92EBF8 8B4D 00 mov ecx,dword ptr ss:[ebp]
7C92EBFB 8988 B4000000 mov dword ptr ds:[eax+B4],ecx
7C92EC01 8B4D FC mov ecx,dword ptr ss:[ebp-4]
7C92EC04 8988 C0000000 mov dword ptr ds:[eax+C0],ecx
7C92EC0A 8C88 BC000000 mov word ptr ds:[eax+BC],cs
7C92EC10 8C98 98000000 mov word ptr ds:[eax+98],ds
7C92EC16 8C80 94000000 mov word ptr ds:[eax+94],es
7C92EC1C 8CA0 90000000 mov word ptr ds:[eax+90],fs
7C92EC22 8CA8 8C000000 mov word ptr ds:[eax+8C],gs
7C92EC28 8C90 C8000000 mov word ptr ds:[eax+C8],ss
7C92EC2E C700 07000100 mov dword ptr ds:[eax],10007
7C92EC34 6A 01 push 1
7C92EC36 50 push eax
7C92EC37 FF75 08 push dword ptr ss:[ebp+8]
7C92EC3A E8 13F6FFFF call ntdll.ZwRaiseException
7C92EC3F 83EC 20 sub esp,20
7C92EC42 890424 mov dword ptr ss:[esp],eax
7C92EC45 C74424 04 0100000>mov dword ptr ss:[esp+4],1
7C92EC4D C74424 10 0000000>mov dword ptr ss:[esp+10],0
7C92EC55 8B45 08 mov eax,dword ptr ss:[ebp+8]
7C92EC58 894424 08 mov dword ptr ss:[esp+8],eax
7C92EC5C 8BC4 mov eax,esp
7C92EC5E 50 push eax
7C92EC5F E8 48FFFFFF call ntdll.RtlRaiseException
7C92EC64 CC int3
7C92EC65 CC int3
7C92EC66 CC int3
7C92EC67 CC int3
7C92EC68 CC int3
7C92EC69 CC int3
7C92EC6A 90 nop
帮分析下,上面说的什么? 谢谢了!
[ 本帖最后由 Sk. 于 2008-6-20 22:37 编辑 ] |
|