-
-
[求助]关于printf函数异常的汇编跟踪
-
发表于: 2009-5-22 20:36
-
首先，来看下这段代码
由于在windows下看不到printf函数的资源文件，我就试图用vc的反汇编看了下代码，异常到了这里
我跟了2个小时，还是没有找到原因，请高手指点下，让我这个周末没有遗憾
#include <stdio.h>
#include <string.h>
int main()
{
__int64 i = 0xffffffffff; // 长度超过4个字节就异常
//__int64 i = 0xffffffff; // 长度不超过4个字节就正常
printf("%d %s", i ,"hello");
return 0;
}
由于在windows下看不到printf函数的资源文件，我就试图用vc的反汇编看了下代码，异常到了这里
00401A66 cmp dword ptr [precision],0FFh
00401A6D jne $L1748+15h (00401a7b)
00401A6F mov dword ptr [ebp-2A4h],7FFFFFFFh
00401A79 jmp $L1748+21h (00401a87)
00401A7B mov eax,dword ptr [precision]
00401A81 mov dword ptr [ebp-2A4h],eax
00401A87 mov ecx,dword ptr [ebp-2A4h]
00401A8D mov dword ptr ,ecx
00401A93 lea edx,[argptr]
00401A96 push edx
00401A97 call get_int_arg (004023e0)
00401A9C add esp,4
00401A9F mov dword ptr [text],eax
00401AA2 mov eax,dword ptr [flags]
00401AA5 and eax,810h
00401AAA test eax,eax
00401AAC je $L1748+0B0h (00401b16)
00401AAE cmp dword ptr [text],0
00401AB2 jne $L1748+57h (00401abd)
00401AB4 mov ecx,dword ptr [___wnullstring (00425a50)]
00401ABA mov dword ptr [text],ecx
00401ABD mov dword ptr [bufferiswide],1
00401AC4 mov edx,dword ptr [text]
00401AC7 mov dword ptr [pwch],edx
00401ACD mov eax,dword ptr
00401AD3 mov ecx,dword ptr
00401AD9 sub ecx,1
00401ADC mov dword ptr ,ecx
00401AE2 test eax,eax
00401AE4 je $L1748+0A0h (00401b06)
00401AE6 mov edx,dword ptr [pwch]
00401AEC xor eax,eax
00401AEE mov ax,word ptr [edx]
00401AF1 test eax,eax
00401AF3 je $L1748+0A0h (00401b06)
00401AF5 mov ecx,dword ptr [pwch]
00401AFB add ecx,2
00401AFE mov dword ptr [pwch],ecx
00401B04 jmp $L1748+67h (00401acd)
00401B06 mov edx,dword ptr [pwch]
00401B0C sub edx,dword ptr [text]
00401B0F sar edx,1
00401B11 mov dword ptr [textlen],edx
00401B14 jmp $L1748+10Ah (00401b70)
00401B16 cmp dword ptr [text],0
00401B1A jne $L1748+0BEh (00401b24)
00401B1C mov eax,[___nullstring (00425a4c)]
00401B21 mov dword ptr [text],eax
00401B24 mov ecx,dword ptr [text]
00401B27 mov dword ptr,ecx
00401B2D mov edx,dword ptr
00401B33 mov eax,dword ptr
00401B39 sub eax,1
00401B3C mov dword ptr ,eax
00401B42 test edx,edx
00401B44 je $L1748+0FEh (00401b64)
00401B46 mov ecx,dword ptr
00401B4C movsx edx,byte ptr [ecx] ;到这句话挂掉了
00401B4F test edx,edx
00401B51 je $L1748+0FEh (00401b64)
00401B53 mov eax,dword ptr
00401B59 add eax,1
00401B5C mov dword ptr,eax
00401B62 jmp $L1748+0C7h (00401b2d)
00401B64 mov ecx,dword ptr
00401B6A sub ecx,dword ptr [text]
00401B6D mov dword ptr [textlen],ecx
00401B70 jmp COMMON_INT+272h (00401fd7)
我跟了2个小时，还是没有找到原因，请高手指点下，让我这个周末没有遗憾
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
