一个Win9x下的程序,当程序执行int3会去哪里?
00402CF4 PUSH EBP
00402CF5 MOV EBP,ESP
00402CF7 PUSHAD
00402CF8 PUSHFD
00402CF9 CLI
00402CFA SIDT FWORD PTR DS:[41F434]
00402D01 MOV EBX,DWORD PTR DS:[41F436]
00402D07 ADD EBX,18
00402D0A MOV EAX,DWORD PTR DS:[EBX]
00402D0C MOV DWORD PTR DS:[41F42C],EAX
00402D11 MOV EAX,DWORD PTR DS:[EBX+4]
00402D14 MOV DWORD PTR DS:[41F430],EAX
00402D19 MOV EAX,DWORD PTR SS:[EBP+8]
00402D1C MOV WORD PTR DS:[EBX],AX
00402D1F SHR EAX,10
00402D22 MOV WORD PTR DS:[EBX+6],AX
00402D26 MOV WORD PTR DS:[EBX+4],0EE00
00402D2C INT3
00402D2D MOV EBX,DWORD PTR DS:[41F436]
00402D33 ADD EBX,18
00402D36 MOV EAX,DWORD PTR DS:[41F42C]
00402D3B MOV DWORD PTR DS:[EBX],EAX
00402D3D MOV EAX,DWORD PTR DS:[41F430]
00402D42 MOV DWORD PTR DS:[EBX+4],EAX
00402D45 POPFD
00402D46 POPAD
00402D47 LEAVE
00402D48 RETN 4
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!