易语言汇编替换字节集源码
mov eax, dword ptr [ebp+08h]
mov eax, dword ptr [eax] 取出ebp+08h地址(eax值加8后才是真实地址)
add eax, 07h eax的值为: ebp+08h真实地址减去1(+08H是真实地址,此时+07H),少1是修正后边加替换位置超出的1字节
add eax, dword ptr [ebp+0Ch] ebp+0Ch结合ebp+08h确定替换位置,并存放到通用寄存器eax
mov edi, eax eax作为内存指针存放于寄存器edi
------------------------------------------------------------------------------------------------------------------------------------------
mov eax, dword ptr [ebp+10h] 计算ebp+10h字节集指针
mov eax, dword ptr [eax] 计算ebp+10h字节集指针
add eax, 08h 计算ebp+10h字节集指针
mov esi, eax ebp+10h字节集指针存放于esi
------------------------------------------------------------------------------------------------------------------------------------------
mov ecx, dword ptr [ebp+10h] 计算ebp+10h字节集长度
mov ecx, dword ptr [ecx] 计算ebp+10h字节集长度
mov ecx, dword ptr [ecx+04h] ebp+10h字节集长度值存放到计数存储器ecx
rep movsb 重复操作,重复次数为ecx值,也就是用作替换的字节集长度值