Disassembly of public: virtual unsigned int __thiscall PakInterface::FRead (0x101047E0)
; Section: .text
;= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
; EXP: public: virtual unsigned int __thiscall PakInterface::FRead(void *,int,int,struct PFILE *) - [email protected]@@UAEIPAXHHPAUPFILE@@@Z (626)
0x101047E0: 8B442410 MOV EAX,DWORD PTR [ESP+0x10]
0x101047E4: 8B08 MOV ECX,DWORD PTR [EAX]
0x101047E6: 85C9 TEST ECX,ECX
0x101047E8: 8B542408 MOV EDX,DWORD PTR [ESP+0x8]
0x101047EC: 0F8481000000 JZ 0x10104873 ; (*+0x87)
0x101047F2: 0FAF54240C IMUL EDX,DWORD PTR [ESP+0xC]
0x101047F7: 8B4004 MOV EAX,DWORD PTR [EAX+0x4]
0x101047FA: 53 PUSH EBX
0x101047FB: 55 PUSH EBP
0x101047FC: 56 PUSH ESI
0x101047FD: 8B712C MOV ESI,DWORD PTR [ECX+0x2C]
0x10104800: 2BF0 SUB ESI,EAX
0x10104802: 3BD6 CMP EDX,ESI
0x10104804: 57 PUSH EDI
0x10104805: 8BDA MOV EBX,EDX
0x10104807: 7C02 JL 0x1010480B ; (*+0x4)
0x10104809: 8BDE MOV EBX,ESI
0x1010480B: 8B5128 MOV EDX,DWORD PTR [ECX+0x28]; <==0x10104807(*-0x4)
0x1010480E: 8B09 MOV ECX,DWORD PTR [ECX]
0x10104810: 8B4908 MOV ECX,DWORD PTR [ECX+0x8]
0x10104813: 8B2D0C851A10 MOV EBP,DWORD PTR [0x101A850C]; .data: ; .text:0xB8 0x0C 0x6E 0x13
0x10104819: 03CA ADD ECX,EDX
详细解决方案
,帮忙分析下这个函数
热度:213 发布时间:2016-05-02 04:46:20.0
相关解决方案