请教大侠:下面的代码是如何判断是在4524D0h位置还是4534D0h读写呢?新手看不懂其原理。谢谢。
mov ebx, ds:dword_402098
code:00401030 push offset unk_402090
code:00401035 push 4
code:00401037 push offset dword_402094
code:0040103C push 4524D0h
code:00401041 push ebx
code:00401042 call ds:ReadProcessMemory
code:00401048 test eax, eax
code:0040104A jz loc_401000
code:0040104A
code:00401050 mov eax, ds:dword_402094
code:00401055 cmp eax, ds:dword_402008
code:0040105B jnz loc_401000
code:0040105B
code:00401061 push offset unk_402090
code:00401066 push 4
code:00401068 push offset s_sync_dll ; "sync.dll "
code:0040106D push 4524D0h
code:00401072 push ebx
code:00401073 call ds:WriteProcessMemory
code:00401079 test eax, eax
code:0040107B jz loc_401000