Need help understanding E8 asm call instruction x86

前端 未结 2 1126
你的背包
你的背包 2021-02-01 06:59

I need a helping hand in order to understand the following assembly instruction. It seems to me that I am calling a address at someUnknownValue += 20994A?

E8 32F         


        
2条回答
  •  长情又很酷
    2021-02-01 07:25

    If you are analyzing the PE file with a disassembler, the disassembler might had given you the wrong code. Most malware writer uses insertion of E8 as anti-disassembly technique. You can verify if the codes above E8 are jump instructions where the jump location is after E8.

提交回复
热议问题