当前位置: 代码迷 >> 汇编语言 >> ,帮忙分析下这个函数
  详细解决方案

,帮忙分析下这个函数

热度:213   发布时间:2016-05-02 04:46:20.0
求助,帮忙分析下这个函数

Disassembly of public: virtual unsigned int __thiscall PakInterface::FRead (0x101047E0)
; Section: .text
;= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = 
; EXP: public: virtual unsigned int __thiscall PakInterface::FRead(void *,int,int,struct PFILE *) - [email protected]@@UAEIPAXHHPAUPFILE@@@Z (626)
0x101047E0: 8B442410               MOV         EAX,DWORD PTR [ESP+0x10]
0x101047E4: 8B08                   MOV         ECX,DWORD PTR [EAX]
0x101047E6: 85C9                   TEST        ECX,ECX          
0x101047E8: 8B542408               MOV         EDX,DWORD PTR [ESP+0x8]
0x101047EC: 0F8481000000           JZ          0x10104873       ; (*+0x87)  
0x101047F2: 0FAF54240C             IMUL        EDX,DWORD PTR [ESP+0xC]
0x101047F7: 8B4004                 MOV         EAX,DWORD PTR [EAX+0x4]
0x101047FA: 53                     PUSH        EBX              
0x101047FB: 55                     PUSH        EBP              
0x101047FC: 56                     PUSH        ESI              
0x101047FD: 8B712C                 MOV         ESI,DWORD PTR [ECX+0x2C]
0x10104800: 2BF0                   SUB         ESI,EAX          
0x10104802: 3BD6                   CMP         EDX,ESI          
0x10104804: 57                     PUSH        EDI              
0x10104805: 8BDA                   MOV         EBX,EDX          
0x10104807: 7C02                   JL          0x1010480B       ; (*+0x4)  
0x10104809: 8BDE                   MOV         EBX,ESI          
0x1010480B: 8B5128                 MOV         EDX,DWORD PTR [ECX+0x28]; <==0x10104807(*-0x4)
0x1010480E: 8B09                   MOV         ECX,DWORD PTR [ECX]
0x10104810: 8B4908                 MOV         ECX,DWORD PTR [ECX+0x8]
0x10104813: 8B2D0C851A10           MOV         EBP,DWORD PTR [0x101A850C]; .data:     ; .text:0xB8 0x0C 0x6E 0x13  
0x10104819: 03CA                   ADD         ECX,EDX          
  相关解决方案