(五)CALL、JMP与RET

JMP:  复制地址到EIP

jmp 0x111111 //就是修改EIP ,(EIP就是CPU下一行要执行的语句地址,这个地址也可以是数据区段,然后把数据解析为代码,漏洞就是利用了这点)

 

 

CALL:顾名思义就是调用,  push下一行语句地址到栈顶,然后将地址存入EIP,进入函数,然后ret返回到调用call的下一行

call无非就是 将下一行语句 地址push到栈顶,然后jmp 到函数地址(mov 地址到eip)

 

RET :本质就是POP 栈顶的值到EIP ,达到函数返回

转载于:https://www.cnblogs.com/A-sync/p/6212962.html

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
CODES SEGMENT ASSUME CS:CODES,DS:DATAS,SS:STACKS START: MOV AX,DATAS MOV DS,AX MAIN: CALL LOP2 LEA DX,HINT_10 MOV AH,09H INT 21H SETCHOOSE: MOV AH,01H INT 21H MOV CHOOSE,AL CALL OUTPUTCRLF CMP CHOOSE,'3' JZ CALL3 CMP CHOOSE,'4' JZ CALL4 CMP CHOOSE,'5' JZ CALL5 CMP CHOOSE,'6' JNZ SETCHOOSE CALL3: CALL LOP3 JMP SETCHOOSE CALL4: CALL LOP4 JMP SETCHOOSE CALL5: CALL LOP5 JMP SETCHOOSE OUTPUT PROC MOV BP,SP MOV AX,[BP+2] MOV INDEX,0 OUTPUT2: CWD DIV TEN ADD DX,30H PUSH DX INC INDEX CMP AX,0 JZ OUTPUT3 JMP OUTPUT2 OUTPUT3: CMP INDEX,0 JZ OUTPUTEND POP DX MOV AH,02H INT 21H DEC INDEX JMP OUTPUT3 OUTPUTEND: RET 2 OUTPUT ENDP OUTPUTSPACE PROC MOV DX,20H MOV AH,02H INT 21H RET OUTPUTSPACE ENDP OUTPUTCRLF PROC LEA DX,CRLF MOV AH,09H INT 21H RET OUTPUTCRLF ENDP LOP5 PROC MOV SI,0 MOV CX,COUNT_3 DEC CX MOV BX,GRADE[SI] ADD AVERAGE,BX ADDSUM: ADD SI,2 MOV BX,GRADE[SI] ADC AVERAGE,BX LOOP ADDSUM LEA DX,HINT_9 MOV AH,09H INT 21H MOV AX,AVERAGE CWD DIV COUNT_3 PUSH DX PUSH AX CALL OUTPUT MOV DX,'.' MOV AH,02H INT 21H MOV CX,COUNT_6 POP AX DECIMAL: MUL TEN CWD DIV COUNT_3 PUSH DX PUSH AX CALL OUTPUT POP AX LOOP DECIMAL CALL OUTPUTCRLF RET LOP5 ENDP LOP4 PROC MOV COUNT_5,0 MOV SI,0 MOV CX,0 COMPARE2: MOV BX,SIXTY CMP GRADE[SI],BX JB ACCOUNT RETURN2: ADD SI,2 INC CX CMP CX,COUNT_3 JNZ COMPARE2 JZ END4 ACCOUNT: INC COUNT_5 JMP RETURN2 END4: LEA DX,HINT_8 MOV AH,09H INT 21H MOV AX,COUNT_5 PUSH AX CALL OUTPUT CALL OUTPUTCRLF RET LOP4 ENDP LOP3 PROC MOV CX,0 FIRST: MOV DI,0 INC CX CMP CX,COUNT_3 JZ OUTPUT_3 COMPARE: MOV BX,GRADE[DI] CMP BX,GRADE[DI+2] JB SWAP RETURN1: ADD DI,2 CMP COUNT_4,DI JZ FIRST JMP COMPARE SWAP: MOV AX,GRADE[DI+2] MOV GRADE[DI],AX MOV GRADE[DI+2],BX JMP RETURN1 OUTPUT_3: MOV CX,COUNT_3 MOV SI,0 OUTPUT0: MOV AX,GRADE[SI] PUSH AX CALL OUTPUT CALL OUTPUTSPACE ADD SI,2 DEC CX CMP CX,0 JNZ OUTPUT0 CALL OUTPUTCRLF RET LOP3 ENDP LOP2 PROC MOV CX,0 MOV SI,0 LEA DX,HINT_6 MOV AH,09H INT 21H INPUT: MOV AH,01H INT 21H CMP AL,0DH JZ SAVENUM CMP AL,' ' JZ SAVENUM MOV DL,AL MOV DH,0 PUSH DI PUSH DX CALL ISDIGITAL POP DX POP DI CMP FLAG_1,0 JZ INPUT MOV N,DX SUB N,30H MOV AX,NUM MUL TEN ADD AX,N MOV NUM,AX JMP INPUT SAVENUM: INC CX MOV BX,NUM MOV GRADE[SI],BX MOV NUM,0 ADD SI,2 CMP AL,0DH JZ END2 JMP INPUT END2: MOV COUNT_3,CX LEA DX,HINT_7 MOV AH,09H INT 21H RET LOP2 ENDP ISDIGITAL PROC MOV BP,SP MOV DI,[BP+2] ISBIGGER: CMP DI,'0' JB NONDIGITAL ISSMALL: CMP DI,'9' JBE DIGITAL JMP NONDIGITAL NONDIGITAL: MOV FLAG_1,0 CALL OUTPUTCRLF LEA DX,HINT_5 MOV NUM,0 MOV AH,09H INT 21H RET DIGITAL: MOV FLAG_1,1 RET ISDIGITAL ENDP MOV AH,4CH INT 21H CODES ENDS END START请用注释的形式为我逐句解释这篇代码的功能
最新发布
05-29

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值