The registers you posted don't tell much on what's going on as some of them get XOR-ed out. The symptoms become apparent in this function (it's 1.23), but the source of the problem could be much harder to find. I can only guess what the problem is, since I can't reproduce it.
Code:
0046DBB0 MOV EAX,ECX
0046DBB2 XOR ECX,ECX
0046DBB4 MOV CX,WORD PTR DS:[54956B]
0046DBBB SUB EAX,ECX
0046DBBD JNS SHORT 0046DBC2
0046DBBF XOR EAX,EAX
0046DBC1 RET
0046DBC2 MOV ECX,EAX
0046DBC4 SHL ECX,4
0046DBC7 ADD ECX,EAX
0046DBC9 LEA ECX,DWORD PTR DS:[EAX+ECX*8]
0046DBCC XOR EAX,EAX
0046DBCE MOV AL,BYTE PTR DS:[ECX+54B175]
0046DBD4 DEC EAX
0046DBD5 CMP EDX,EAX
0046DBD7 JNB SHORT 0046DBDB
0046DBD9 MOV EAX,EDX
0046DBDB MOV EDX,DWORD PTR DS:[ECX+54B176]
0046DBE1 XOR ECX,ECX
0046DBE3 MOV CX,WORD PTR DS:[EDX+EAX*2]
0046DBE7 MOV EAX,ECX
0046DBE9 RET
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
|