一些常用的硬编码(X64)

·

跳转

//{ 0x48,0xb8,0x88,0x77,0x66,0x55,0x44,0x33,0x22,0x11,0xff,0xe0 }
48:B8 8877665544332211                  | mov rax,1122334455667788                                        |
FFE0                                    | jmp rax                                                         |

返回

//{ 0x48,0x31,0xc0,0x48,0xff,0xc0,0xc3 }
48:31C0                                 | xor rax,rax                                                     |
48:FFC0                                 | inc rax                                                         |
C3                                      | ret                                                             |

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注