-
-
初学者的困惑
-
发表于:
2004-12-21 14:18
3875
-
简单的一句代码:
procedure TForm1.btn1Click(Sender: TObject);
begin
application.MessageBox('test','caption',MB_OK);
end;
反汇编的代码:
procedure TForm1.btn1Click(Sender : TObject);
begin
(*
0043F040 6A00 push $00
* Possible String Reference to: 'caption'
|
0043F042 B95CF04300 mov ecx, $0043F05C
* Possible String Reference to: 'test'
|
0043F047 BA64F04300 mov edx, $0043F064
0043F04C A1D80B4400 mov eax, dword ptr [$00440BD8]
0043F051 8B00 mov eax, [eax]
* Reference to: forms.TApplication.MessageBox(TApplication;System.PChar;System.PChar;System.Longint):System.Integer;
|
0043F053 E8C0E9FFFF call 0043DA18
0043F058 C3 ret
*)
end;
上面的'test','caption'等字符串在文件中的哪里?如何查找呢?
[课程]FART 脱壳王!加量不加价!FART作者讲授!