|
主题 : : 我知道我进入了误区,却不知道错在哪,半夜无法入睡 [待解决] |
回复[ 5次 ]
点击[ 477次 ] | |
荣誉值:2
信誉值:0
注册日期:2009-06-02 19:37 |
-q
E:\System\Hacker>debug test3.exe
-r
AX=0000 BX=0000 CX=0016 DX=0000 SP=0000 BP=0000 SI=0000 DI=0000
DS=1405 ES=1405 SS=1415 CS=1415 IP=0000 NV UP EI PL NZ NA PO NC
1415:0000 B80020 MOV AX,2000
-t
AX=2000 BX=0000 CX=0016 DX=0000 SP=0000 BP=0000 SI=0000 DI=0000
DS=1405 ES=1405 SS=1415 CS=1415 IP=0003 NV UP EI PL NZ NA PO NC
1415:0003 8ED0 MOV SS,AX
-t
AX=2000 BX=0000 CX=0016 DX=0000 SP=0000 BP=0000 SI=0000 DI=0000
DS=1405 ES=1405 SS=2000 CS=1415 IP=0008 NV UP EI PL NZ NA PO NC
1415:0008 83C40A ADD SP,+0A
-t
AX=2000 BX=0000 CX=0016 DX=0000 SP=000A BP=0000 SI=0000 DI=0000
DS=1405 ES=1405 SS=2000 CS=1415 IP=000B NV UP EI PL NZ NA PE NC
1415:000B 58 POP AX
-d 1415:0
1415:0000 B8 00 20 8E D0 BC 00 00-83 C4 0A 58 5B 50 53 58 .. ........X[PSX
1415:0010 5B B8 00 4C CD 21 00 00-00 00 00 00 00 00 00 00 [..L.!..........
1415:0020 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1415:0030 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1415:0040 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1415:0050 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1415:0060 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1415:0070 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
-d 2000:0
2000:0000 00 20 00 00 0B 00 15 14-1F 0E 15 14 06 32 00 00 . ...........2..
2000:0010 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0020 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0030 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0040 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0050 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0060 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
2000:0070 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
-
上面的POP AX 应该是取哪一个的值?
不是指定了栈段:SS=2000
怎么不是取SS:IP的值呢? (就是说2000:10) | | |