CE AA 教程(国外英语资料).docVIP

CE AA 教程(国外英语资料) EDI: destination index register (DestinyIndex, register). Again, a pointer variable that can be used as a memory and is a string, but dont worry. EBP: mechanism pointer register (Base, Pointer, register). Is used to temporarily store ESP and, of course, can be used like regular memory. ESP: field pointer register (Source, Pointer, register). It points to the register and address in the stack (which will be later). EIP: instruction pointer register (Instruction, Pointer, register). Incorrect use will crash the program you are trying to modify. - II.b 16, Bit - The 16 bit register is very similar to the 32 bit register, and there are two differences between them. First, the 32 bit register name is three letters, and the 16 bit register is two letters. One more thing is that the 16 bit register is more than the 32 bit register, but dont worry. We dont usually use 16 bit registers. AX: refer to EAX BX: refer to EBX CX: refer to ECX DX: refer to EDX SI: refer to ESI DI: refer to EDI BP: refer to EBP SP: refer to ESP IP: refer to EIP - There is a lot of content about registers. If you want to learn more about registers, then go and worship the Google gods. Curiosity is important to most learners. The III. command The Today, what language does not have its own functions and commands? Compared with English, the command is like a word, and the operation code is like a sentence. The operation code is not difficult, for example: Code: JMP 00123EAA You should know two points about the operation code. First of all, in the opcode, there is usually an address or register, and an obvious command. The address is in the form of Hex, an abbreviation for Hexadecimal. Hexadecimal is the 16 hexadecimal number. Just like the 10 decimal system. Think about it in this way. As mentioned above, we usually use decimal notation. That means we cant have 10 in a column because it occupies two places. And 16 hexadecimal, 10 to 15 can be placed in a column inside. But you will find