汇编知识（compiled knowledge）.docVIP

汇编知识（compiled knowledge） I. mechanical code, also called machine code Ultraedit open, edit EXE file, you will see a lot of by 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, F digital, these numbers are machine code. When modifying a program, you must modify the machine code to modify the EXE file. Two. Need to master all the assembly knowledge CMP, a, B compare a and B. MOV, a, and B send the value of B to a. RET returns the main program. NOP has no effect. The abbreviation no operation in English means do nothing (machine code 90). * * * the meaning of machine code is referred to Above。 (explanation: when UltraEdit opens the edit EXE file, you see 90, equivalent to the assembly statement NOP) Call call subroutine. If JE or JZ is equal, jump (machine code 74 or 0F84). If jne or JNZ is not equal, jump (machine code 75 or 0F85). JMP unconditional jump (machine code EB). JB jump if less than. JA jump if larger than. JG jump if larger than. Jge jump if it is greater than or equal to. JL jump if less than. JLE jump if less than equal. Pop stack. Push stack. Three. Common changes (machine code) 74=75 74=90 74=EB 75=74 75=90 75=EB Jnz-nop 75-90 (corresponding machine code modification) JNZ - JMP 75 - EB (the corresponding machine code modification) JNZ - JZ 75-74 (normal) 0F 0F (85 - 84 special cases, sometimes, the corresponding machine code modification) Four. Different modification methods for two different situations 1. modify to Jmp Je (jne, JZ, JNZ) =jmp the corresponding machine code EB (the first jump found in the error message), JMPs role is absolute jump, unconditional jump, so as to skip the following error messages: XXXXXXXXXXXX error information, such as: registration code is wrong, sorry, unregistered version does not Yes, Function Not Avaible in Demo or Command Not Avaible or Cant save in Shareware/Demo wait (we want to skip it, dont let it appear) ... ... Where is the correct route for XXXXXXXXXXXX? 2. modify to Nop Je (jne, JZ, JNZ) =nop the correspondin