-
-
请教下这个汇编代码的对应DLL怎么写！
-
发表于:
2011-5-10 23:28
3713
-
代码如下，有懂的朋友给解释下，我百度过懂一部分但是不全明白，希望大牛指点。
00809E5A 00 DB 00
00809E5B 00 DB 00
00809E5C . 6F 72 64 65 2>ASCII "orde.dll",0
00809E65 00 DB 00
00809E66 . 58 52 41 4D 0>ASCII "XRAM",0
00809E6B 00 DB 00
00809E6C 00 DB 00
00809E6D 00 DB 00
00809E6E 00 DB 00
00809E6F 00 DB 00
00809E70 > 60 PUSHAD
00809E71 . 68 5C9E8000 PUSH Stock_u.00809E5C ; /FileName = "orde.dll"
00809E76 . FF15 0CA58000 CALL DWORD PTR DS:[<&KERNEL32.LoadLibrar>; \LoadLibraryA
00809E7C . 68 669E8000 PUSH Stock_u.00809E66 ; /ProcNameOrOrdinal = "XRAM"
00809E81 . 50 PUSH EAX ; |hModule
00809E82 . FF15 10A58000 CALL DWORD PTR DS:[<&KERNEL32.GetProcAdd>; \GetProcAddress
00809E88 . 6A 02 PUSH 2
00809E8A . 6A 02 PUSH 2
00809E8C . FFD0 CALL EAX
00809E8E . 61 POPAD
00809E8F . 55 PUSH EBP
00809E90 . 8BEC MOV EBP,ESP
00809E92 . 6A FF PUSH -1
00809E94 .^ E9 5A61F5FF JMP Stock_u.0075FFF3
00809E99 90 NOP
00809E9A 00 DB 00
00809E9B 00 DB 00
00809E9C 00 DB 00
00809E9D 00 DB 00
00809E9E 00 DB 00
00809E9F 00 DB 00
00809EA0 /$ 60 PUSHAD
00809EA1 |. 68 5C9E8000 PUSH Stock_u.00809E5C ; /FileName = "orde.dll"
00809EA6 |. FF15 0CA58000 CALL DWORD PTR DS:[<&KERNEL32.LoadLibrar>; \LoadLibraryA
00809EAC |. 68 669E8000 PUSH Stock_u.00809E66 ; /ProcNameOrOrdinal = "XRAM"
00809EB1 |. 50 PUSH EAX ; |hModule
00809EB2 |. FF15 10A58000 CALL DWORD PTR DS:[<&KERNEL32.GetProcAdd>; \GetProcAddress
00809EB8 |. 6A 03 PUSH 3
00809EBA |. FFD0 CALL EAX
00809EBC |. 61 POPAD
00809EBD \. C3 RETN
00809EBE 00 DB 00
00809EBF 00 DB 00
00809EC0 00 DB 00
00809EC1 00 DB 00
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
