**
XYClient.exe+711DC - C3 - ret
XYClient.exe+711DD - 89 04 24 - mov [esp],eax
XYClient.exe+711E0 - 8B 04 24 - mov eax,[esp]
XYClient.exe+711E3 - 8A 00 - mov al,[eax] //获取代码数据
XYClient.exe+711E5 - 5A - pop edx
XYClient.exe+711E6 - C3 - ret
XYClient.exe+711E7 - 90 - nop
XYClient.exe+711E8 - 53 - push ebx
XYClient.exe+711E9 - 56 - push esi
XYClient.exe+711EA - 57 - push edi
XYClient.exe+711EB - 55 - push ebp
XYClient.exe+711EC - 51 - push ecx
XYClient.exe+711ED - 89 14 24 - mov [esp],edx
XYClient.exe+711F0 - 8B E8 - mov ebp,eax
XYClient.exe+711F2 - 33 FF - xor edi,edi
XYClient.exe+711F4 - 8B 1C 24 - mov ebx,[esp]
XYClient.exe+711F7 - 4B - dec ebx
XYClient.exe+711F8 - 85 DB - test ebx,ebx
XYClient.exe+711FA - 7C 16 - jnge 004F1212
XYClient.exe+711FC - 43 - inc ebx
XYClient.exe+711FD - 33 F6 - xor esi,esi
XYClient.exe+711FF - 8D 04 2E - lea eax,[esi+ebp]
XYClient.exe+71202 - E8 D5FFFFFF - call 004F11DC
XYClient.exe+71207 - 25 FF000000 - and eax,000000FF
XYClient.exe+7120C - 03 F8 - add edi,eax
XYClient.exe+7120E - 46 - inc esi
XYClient.exe+7120F - 4B - dec ebx
XYClient.exe+71210 - 75 ED - jne 004F11FF
XYClient.exe+71212 - 8B C7 - mov eax,edi
XYClient.exe+71214 - 5A - pop edx
XYClient.exe+71215 - 5D - pop ebp
XYClient.exe+71216 - 5F - pop edi
XYClient.exe+71217 - 5E - pop esi
XYClient.exe+71218 - 5B - pop ebx
XYClient.exe+71219 - C3 - ret **
【汇编】检测代码段的字节是否被修改
最新推荐文章于 2021-09-11 20:46:21 发布