我只是想把call与je换下位置，让他CMP后调用，
修改完文件，计算效验和，加载调试，发现修改的指令
MOV EAX,[121E4]
在运行时还是121E4，其它地址都随基址改变了。惟独我改过的还是显示文件偏移，何解？？？？
///////////////////////原码///////////////////
00011062: E8 7FFCFFFF CALL 00010CE6
00011067: 33F6 XOR ESI,ESI
00011069: 56 PUSH ESI
0001106A: 56 PUSH ESI
0001106B: 56 PUSH ESI
0001106C: 56 PUSH ESI
0001106D: FF35 E4210100 PUSH DWORD PTR [121E4]
00011073: FF15 58170100 CALL NEAR [11758]
00011079: A1 E4210100 MOV EAX,[121E4]
0001107E: 3BC6 CMP EAX,ESI
00011080: 74 0C JE SHORT 0001108E
00011082: 68 4E6F6E65 PUSH 656E6F4E
00011087: 50 PUSH EAX
00011088: FF15 80170100 CALL NEAR [11780]
0001108E: 68 F01C0100 PUSH 11CF0
//////////////////////修改后//////////////////////////
00011062: E8 7FFCFFFF CALL 00010CE6
00011067: 33F6 XOR ESI,ESI
00011069: A1 E4210100 MOV EAX,[121E4]
0001106E: 3BC6 CMP EAX,ESI
00011070: 74 1C JE SHORT 0001108E
00011072: 56 PUSH ESI
00011073: 56 PUSH ESI
00011074: 56 PUSH ESI
00011075: 56 PUSH ESI
00011076: FF35 E4210100 PUSH DWORD PTR [121E4]
0001107C: FF15 58170100 CALL [11758]
00011082: 68 4E6F6E65 PUSH 656E6F4E
00011087: 50 PUSH EAX
00011088: FF15 80170100 CALL [11780]
0001108E: 68 F01C0100 PUSH 11CF0
/////////////////////////完整代码////////////////////////////
0001105A: 8BFF MOV EDI,EDI
0001105C: 55 PUSH EBP
0001105D: 8BEC MOV EBP,ESP
0001105F: 51 PUSH ECX
00011060: 51 PUSH ECX
00011061: 56 PUSH ESI
00011062: E8 7FFCFFFF CALL 00010CE6
00011067: 33F6 XOR ESI,ESI
00011069: 56 PUSH ESI
0001106A: 56 PUSH ESI
0001106B: 56 PUSH ESI
0001106C: 56 PUSH ESI
0001106D: FF35 E4210100 PUSH DWORD PTR [121E4]
00011073: FF15 58170100 CALL NEAR [11758]
00011079: A1 E4210100 MOV EAX,[121E4]
0001107E: 3BC6 CMP EAX,ESI
00011080: 74 0C JE SHORT 0001108E
00011082: 68 4E6F6E65 PUSH 656E6F4E
00011087: 50 PUSH EAX
00011088: FF15 80170100 CALL NEAR [11780]
0001108E: 68 F01C0100 PUSH 11CF0
00011093: FF15 54170100 CALL NEAR [11754]
00011099: 8B45 08 MOV EAX,[EBP+8]
0001109C: FF70 04 PUSH DWORD PTR [EAX+4]
0001109F: FF15 50170100 CALL NEAR [11750]
000110A5: 834D FC FF OR DWORD PTR [EBP-4],FFFFFFFF
000110A9: 8D45 F8 LEA EAX,[EBP-8]
000110AC: 50 PUSH EAX
000110AD: 6A 01 PUSH 1
000110AF: 56 PUSH ESI
000110B0: C745 F8 00E548FF MOV DWORD PTR [EBP-8],FF48E500
000110B7: FF15 4C170100 CALL NEAR [1174C]
000110BD: 5E POP ESI
000110BE: C9 LEAVE
000110BF: C2 0400 RETN 4
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
