我目前正在分析大量的汇编文件,不明白具体的jmp或call与$+5操作数:
call $+5
jmp $+5
为了提供更多的上下文,我收集了一些出现的情况:
mov esp, [ebp+ms_exc.old_esp]
and [ebp+ms_exc.registration.TryLevel], 0
or [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh
call $+5
jmp sub_4493CA
===== S U B R O U T I N E =======================================
push esi
[...]
mov esp, [ebp+ms_exc.old_esp]
and [ebp+ms_exc.registration.TryLevel], 0
or [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh
call $+5
jmp sub_45746A
===== S U B R O U T I N E =======================================
mov eax, dword_4778F8
[...]
mov eax, ebx
test al, 2
jnz loc_100994B8
jmp $+5
-----------------------------------------------------------------
mov eax, [ebp+var_34]
mov [ebp+var_40], eax
$+5操作数的含义是什么?