qq_41490873的博客

movups xmm0, xmmword ptr[rax] movaps xmmword ptr[rsp + 50h], xmm0 movups xmm1, xmmword ptr[rax + 10h] movaps xmmword ptr[rsp + 60h], xmm1 movups xmm0, xmmword ptr[rax + 20h] movaps xmmword ptr[rsp + 70h], xmm0 movups xmm1, xmmword ptr[rax + 3.

int main(){ EnableDebugPriv(); HANDLE processHandle = OpenProcess(PROCESS_ALL_ACCESS,0,5924); if (!processHandle) { DWORD err = GetLastError(); printf("打开进程失败,errorcode:%d\n", err); getchar(); return 0; } char*buffer = malloc(0x1000); ZeroM

005F33A0 FC cld //将标志寄存器Flag的方向标志位DF清零。在字串操作中使变址寄存器SI或DI的地址指针自动增加，字串处理由前往后005F33A1 E8 89 00 00 00 call buf+8Fh (05F342F) 005F33A6 60 pushad 005F33A7 89 E5 mov ebp,esp005F33A9 3

32位汇编除法指令：.divdiv oprd如果oprd是32位则edx含有被除数高32位，eax含有被除数低32位结果的商送到eax，结果的余数送到edx中

每个指令最短1字节，最长15字节。经典定长指令70 后面的立即数大于80往上跳 小于80往下跳retf:改变同时改变CS和EIP

硬编码地址=要跳转的目标地址-指令的地址-5（指令的长度）

#include "stdafx.h" int _cdecl test1(int a,int b,int c) { return a+b; } int _stdcall test2(int a,int b,int c) { return a+b; } int _fastcall test3(int a,int b,int c) { return...