首页
社区
课程
招聘
[旧帖] [求助][求助]D查看内存,查看指定的反汇编地址用什么命令? 0.00雪花
发表于: 2009-12-1 12:38 3550

[旧帖] [求助][求助]D查看内存,查看指定的反汇编地址用什么命令? 0.00雪花

2009-12-1 12:38
3550
收藏
免费 0
支持
分享
最新回复 (2)
雪    币: 2362
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
u
123456
2009-12-1 12:58
0
雪    币: 152
活跃值: (106)
能力值: ( LV7,RANK:100 )
在线值:
发帖
回帖
粉丝
3
u (Unassemble)
The u command displays an assembly translation of the specified program code in memory.

Do not confuse this command with the ~u (Unfreeze Thread) command.

Syntax
u Range
u Address
u

Parameters
Range
Specifies the memory range that contains the instructions to disassemble. For more information about the syntax, see Address and Address Range Syntax. If you use the b flag, you must specify Range by using the "Address LLength" syntax, not the "Address1 Address2" syntax.
Address
Specifies the beginning of the memory range to disassemble. Eight instructions (on an x86-based processor) or nine instructions (on an Itanium-based processor) are unassembled. For more information about the syntax, see Address and Address Range Syntax.
b
Determines the memory range to disassemble by counting backward. If ub Address is used, the disassembled range will be the eight or nine byte range ending with Address. If a range is specifed using the syntax ub Address LLength, the disassembled range will be the range of the specified length ending at Address.

Environment
Modes User mode, kernel mode
Targets Live, crash dump
Platforms All  

Comments
If you do not specify a parameter for the u command, the disassembly begins at the current address and extends eight instructions (on an x86-based processor) or nine instructions (on an Itanium-based processor). When you use ub without a parameter, the disassembly includes the eight or nine instructions before the current address.

Do not confuse this command with the up (Unassemble from Physical Memory). The u command disassembles only virtual memory, while the up command disassembles only physical memory.

Additional Information
For more information about assembly debugging and related commands, see Debugging in Assembly Mode.
2009-12-1 17:13
0
游客
登录 | 注册 方可回帖
返回
//