非API函数检测操作系统类型！~~~~~MASM

[gag2463]

得到一段汇编代码MASM，功能如题， 本人不懂汇编， 想测试代码运行效果，手头工具 VS2003、VC6.0 求高人帮忙指导


.const

;-- return values from OS_GetOS
OS_UNKNOWN equ -1
OS_WIN95 equ 1
OS_WIN98 equ 2
OS_WINME equ 3
OS_WINNT equ 4
OS_WIN2K equ 5
OS_WINXP equ 6
OS_WIN2K3 equ 7

.code

OS_GetOS proc

local _theReturnValue:DWORD

pushad ; store all registers
mov _theReturnValue,OS_UNKNOWN
assume fs:nothing
mov ebx,fs:[18h] ; get self pointer from TEB
mov eax,fs:[30h] ; get pointer to PEB / database
.if eax==7FFDF000h && ebx==7FFDE000h ; WinNT based
mov ebx,[eax+0A8h] ; get OSMinorVersion
mov eax,[eax+0A4h] ; get OSMajorVersion
.if eax==5 && ebx==0 ; is it Windows 2000?
mov _theReturnValue,OS_WIN2K
.elseif eax==5 && ebx==1 ; is it Windows XP?
mov _theReturnValue,OS_WINXP
.elseif eax==5 && ebx==2 ; is it Windows 2003?
mov _theReturnValue,OS_WIN2K3
.elseif eax<=4 ; is it Windows NT?
mov _theReturnValue,OS_WINNT
.endif

.else ; Win9X based

mov edx,00530000h ; the magic value to search
mov eax,fs:[18h] ; get the TEB base address
mov ebx,[eax+58h] ; TEB-base + 58h (W95)
mov ecx,[eax+7Ch] ; TEB-base + 7Ch (WME)
mov eax,[eax+54h] ; TEB-base + 54h (W98)

.if ebx==edx ; is it Windows 95?
mov _theReturnValue,OS_WIN95
.elseif eax==edx ; is it Windows 98?
mov _theReturnValue,OS_WIN98
.elseif ecx==edx ; is it Windows ME?
mov _theReturnValue,OS_WINME
.endif

.endif ; of base check NT/9X

popad ; restore all registers
mov eax,_theReturnValue
ret ; return to caller
OS_GetOS endp

[ciahi]

在主程序中调用就可以了呀
invoke OS_GetOS
然后根据EAX的值就可得出

[大熊猫侯佩]

try to use ollydbg

[gag2463]

编译ciahi(爪哇乞丐) 的上段代码 出现错误
c:\Samples\Visual C++ .NET 2003\Compiler\Masm\CustomBuildStep\euclidstep2\euclid.asm(5): fatal error A1000: cannot open file : windows.inc
EuclidStep2 error PRJ0019: A tool returned an error code from "Assembling..."

我的编译方法：
VS2003中下个汇编代码的sample 把.asm 为后缀名的文件改为上段代码，编译

请帮忙！~

[ciahi]

我在RadASM下运行通过了
include windows.inc
include user32.inc
includelib user32.lib
include kernel32.inc
includelib kernel32.lib

你把这几个文件用绝对目录包含进来
如：
include C:\Program Files\*******\include\windows.inc

试下

[gag2463]

我实在没用过 汇编，在VS2003中下个汇编代码的sample 把上面那段代码copy到.asm 为后缀名的文件 下 编译报很多错误，是不是 上面的那段代码的错误
如果不是 该如何做

主要想通过汇编代码检测操作系统类型 越详细越好，系统名、补丁信息、系统语言...

谢谢各位汇编高手帮忙啊

[ciahi]

这只是一段子程序呀

[ciahi]

.386
.model flat,stdcall
option casemap:none

include windows.inc
include user32.inc
includelib user32.lib
include kernel32.inc
includelib kernel32.lib

.const

;-- return values from OS_GetOS
OS_UNKNOWN equ -1
OS_WIN95 equ 1
OS_WIN98 equ 2
OS_WINME equ 3
OS_WINNT equ 4
OS_WIN2K equ 5
OS_WINXP equ 6
OS_WIN2K3 equ 7

.data
szCaption db 'xp',0
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
; 代码段
;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
.code
start:
call OS_GetOS
.if eax==5 ; 在此处加入多个判断，根据eax,得出系统类型
invoke MessageBox,NULL,offset szCaption,offset szCaption,MB_OK
.endif
invoke ExitProcess,NULL

OS_GetOS proc

local _theReturnValue:DWORD

pushad ; store all registers
mov _theReturnValue,OS_UNKNOWN
assume fs:nothing
mov ebx,fs:[18h] ; get self pointer from TEB
mov eax,fs:[30h] ; get pointer to PEB / database
.if eax==7FFDF000h && ebx==7FFDE000h ; WinNT based
mov ebx,[eax+0A8h] ; get OSMinorVersion
mov eax,[eax+0A4h] ; get OSMajorVersion
.if eax==5 && ebx==0 ; is it Windows 2000?
mov _theReturnValue,OS_WIN2K
.elseif eax==5 && ebx==1 ; is it Windows XP?
mov _theReturnValue,OS_WINXP
.elseif eax==5 && ebx==2 ; is it Windows 2003?
mov _theReturnValue,OS_WIN2K3
.elseif eax<=4 ; is it Windows NT?
mov _theReturnValue,OS_WINNT
.endif

.else ; Win9X based

mov edx,00530000h ; the magic value to search
mov eax,fs:[18h] ; get the TEB base address
mov ebx,[eax+58h] ; TEB-base + 58h (W95)
mov ecx,[eax+7Ch] ; TEB-base + 7Ch (WME)
mov eax,[eax+54h] ; TEB-base + 54h (W98)

.if ebx==edx ; is it Windows 95?
mov _theReturnValue,OS_WIN95
.elseif eax==edx ; is it Windows 98?
mov _theReturnValue,OS_WIN98
.elseif ecx==edx ; is it Windows ME?
mov _theReturnValue,OS_WINME
.endif

.endif ; of base check NT/9X

popad ; restore all registers
mov eax,_theReturnValue
ret ; return to caller
OS_GetOS endp

;>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

end start

[gag2463]

谢谢 ciahi(爪哇乞丐) ！~！