关于版本错误问题还有些地方不明白 [复制链接]

上一主题下一主题查看指定楼层

离线私服开放

新手上路

发帖: 58

祝福宝石: 0

威望: 0

玛雅之石: 0

创造宝石: 0

只看楼主倒序阅读使用道具楼主发表于: 2005-05-08

本人是菜鸟所以有些东西看不明白！谁能告诉我下面这段代码是哪个文件下面的，怎么用法? 盼能回复！万分感激！
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401046(U)
|
:00405330 55 push ebp
:00405331 8BEC mov ebp, esp
:00405333 83EC44 sub esp, 00000044
:00405336 53 push ebx
:00405337 56 push esi
:00405338 57 push edi
:00405339 51 push ecx
:0040533A 8D7DBC lea edi, dword ptr [ebp-44]
:0040533D B911000000 mov ecx, 00000011
:00405342 B8CCCCCCCC mov eax, CCCCCCCC
:00405347 F3 repz
:00405348 AB stosd
:00405349 59 pop ecx
:0040534A 894DFC mov dword ptr [ebp-04], ecx
:0040534D 8B45FC mov eax, dword ptr [ebp-04]
:00405350 66C7000900 mov word ptr [eax], 0009
:00405355 8B4DFC mov ecx, dword ptr [ebp-04]
:00405358 C7410201071004 mov [ecx+02], 04100701 ---这里是版本号
:0040535F 8B45FC mov eax, dword ptr [ebp-04]
:00405362 5F pop edi
:00405363 5E pop esi
:00405364 5B pop ebx
:00405365 8BE5 mov esp, ebp
:00405367 5D pop ebp
:00405368 C3 ret

------------下面是主程序调用检测版本号的函数的代码--------------------

* Reference T MSVCRT._chkesp, Ord:00AFh
|
:00403DDA E8FD5A0000 Call 004098DC
:00403DDF 8945FC mov dword ptr [ebp-04], eax
:00403DE2 8D8DC8FEFFFF lea ecx, dword ptr [ebp+FFFFFEC8]
:00403DE8 E859D2FFFF call 00401046 --这里是jmp 00405330
:00403DED 8BF4 mov esi, esp
:00403DEF 6A00 push 00000000
:00403DF1 6A06 push 00000006
:00403DF3 8D95C8FEFFFF lea edx, dword ptr [ebp+FFFFFEC8]
:00403DF9 52 push edx
:00403DFA 8B45F4 mov eax, dword ptr [ebp-0C]
:00403DFD 8B08 mov ecx, dword ptr [eax]
:00403DFF 51 push ecx
:00403E00 8B15A8E54100 mov edx, dword ptr [0041E5A8]
:00403E06 8B02 mov eax, dword ptr [edx]
:00403E08 8B0DA8E54100 mov ecx, dword ptr [0041E5A8]
:00403E0E 51 push ecx
:00403E0F FF503C call [eax+3C]
:00403E12 3BF4 cmp esi, esp
* Reference T MSVCRT._chkesp, Ord:00AFh
|
:00403E14 E8C35A0000 Call 004098DC
:00403E19 8945FC mov dword ptr [ebp-04], eax
:00403E1C E9F7010000 jmp 00404018