刚才下线了,现在才回来看帖。
可以参考一下STAR175的引擎代码,毕竟岱瀛的这个EXE是在瓦岗的基础上改的,很多地方未必通用:
00415ACC /. 55 PUSH EBP
00415ACD |. 8BEC MOV EBP,ESP
00415ACF |. 51 PUSH ECX
00415AD0 |. 33C9 XOR ECX,ECX
00415AD2 |. 894D FC MOV DWORD PTR SS:[EBP-4],ECX
00415AD5 |. EB 09 JMP SHORT 00415AE0
00415AD7 |> 8B45 FC /MOV EAX,DWORD PTR SS:[EBP-4]
00415ADA |. 83C0 01 |ADD EAX,1
00415ADD |. 8945 FC |MOV DWORD PTR SS:[EBP-4],EAX
00415AE0 |> 66:817D FC 0001 CMP WORD PTR SS:[EBP-4],100
00415AE6 |. 73 0F |JNB SHORT 00415AF7
00415AE8 |. 6A 00 |PUSH 0
00415AEA |. FF75 FC |PUSH DWORD PTR SS:[EBP-4]
00415AED |. 8B4D 08 |MOV ECX,DWORD PTR SS:[EBP+8]
00415AF0 |. E8 DC290000 |CALL 004184D1
00415AF5 |.^EB E0 \JMP SHORT 00415AD7
00415AF7 |> 33C0 XOR EAX,EAX
00415AF9 |. B9 00145000 MOV ECX,00501400 ——相当于岱的55A400
00415AFE |. EB 07 JMP SHORT 00415B07
00415B00 |> 3D 00030000 /CMP EAX,300
00415B05 |. 73 0E |JNB SHORT 00415B15
00415B07 |> C701 00000000 MOV DWORD PTR DS:[ECX],0
00415B0D |. 83C0 01 |ADD EAX,1
00415B10 |. 83C1 04 |ADD ECX,4
00415B13 |.^EB EB \JMP SHORT 00415B00
00415B15 |> B8 01000000 MOV EAX,1
00415B1A |. 8BE5 MOV ESP,EBP
00415B1C |. 5D POP EBP
00415B1D \. C3 RETN
|