使用windbg,如何来回读取汇编?
0:000> u execute
php5ts!execute:
100205d0 51 push ecx
100205d1 8b0da8f35310 mov ecx,dword ptr [php5ts!executor_globals_id (1053f3a8)]
100205d7 55 push ebp
100205d8 8b6c2410 mov ebp,dword ptr [esp+10h]
100205dc c644240700 mov byte ptr [esp+7],0
100205e1 8b4500 mov eax,dword ptr [ebp]
100205e4 8b4488fc mov eax,dword ptr [eax+ecx*4-4]
100205e8 8b88c4020000 mov ecx,dword ptr [eax+2C4h]
0:000>
php5ts!execute:
100205d0 51 push ecx
100205d1 8b0da8f35310 mov ecx,dword ptr [php5ts!executor_globals_id (1053f3a8)]
100205d7 55 push ebp
100205d8 8b6c2410 mov ebp,dword ptr [esp+10h]
100205dc c644240700 mov byte ptr [esp+7],0
100205e1 8b4500 mov eax,dword ptr [ebp]
100205e4 8b4488fc mov eax,dword ptr [eax+ecx*4-4]
100205e8 8b88c4020000 mov ecx,dword ptr [eax+2C4h]
我使用 uexecute
来反汇编,但正如您所见,该行 no 不会每次都增加。
我的操作有什么问题吗?
0:000> u execute
php5ts!execute:
100205d0 51 push ecx
100205d1 8b0da8f35310 mov ecx,dword ptr [php5ts!executor_globals_id (1053f3a8)]
100205d7 55 push ebp
100205d8 8b6c2410 mov ebp,dword ptr [esp+10h]
100205dc c644240700 mov byte ptr [esp+7],0
100205e1 8b4500 mov eax,dword ptr [ebp]
100205e4 8b4488fc mov eax,dword ptr [eax+ecx*4-4]
100205e8 8b88c4020000 mov ecx,dword ptr [eax+2C4h]
0:000>
php5ts!execute:
100205d0 51 push ecx
100205d1 8b0da8f35310 mov ecx,dword ptr [php5ts!executor_globals_id (1053f3a8)]
100205d7 55 push ebp
100205d8 8b6c2410 mov ebp,dword ptr [esp+10h]
100205dc c644240700 mov byte ptr [esp+7],0
100205e1 8b4500 mov eax,dword ptr [ebp]
100205e4 8b4488fc mov eax,dword ptr [eax+ecx*4-4]
100205e8 8b88c4020000 mov ecx,dword ptr [eax+2C4h]
I'm using u execute
to disassemble ,but as you see the line no doesn't increment each time.
What's wrong in my operation?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
按 Enter 键会重复上一个命令,因此本质上您是在重复
uexecute
命令。要继续列出,请执行uexecute
,然后u
,然后输入将重复该操作。Pressing enter repeats the previous command, so essentially you're repeating the
u execute
command. To continue listing dou execute
, thenu
and then enter will repeat that.