OD调试指令
004CBFF8 . 6A 00 push 0 ; /Flags = 0
004CBFFA . 50 push eax ; |BufSize
004CBFFB . 56 push esi ; |Buffer
004CBFFC . 51 push ecx ; |Socket
004CBFFD . E8 D0820500 call <jmp.&WSOCK32.#16> ; \网络验证的RECV指令
004CC002 . 8B4B 14 mov ecx, dword ptr [ebx+14]
004CC005 . 8BF8 mov edi, eax
004CC007 . 83E1 F0 and ecx, FFFFFFF0
004CC00A . 85FF test edi, edi
004CC00C . 894B 14 mov dword ptr [ebx+14], ecx
004CC00F . 7F 11 jg short 004CC022
004CC011 . 57 push edi
004CC012 . E8 B9F8FFFF call BIO_sock_should_retry
004CC017 . 83C4 04 add esp, 4
004CC01A . 85C0 test eax, eax
004CC01C . 74 04 je short 004CC022
数据:
0143FE88 00 00 ..
0143FE98 01 00 00 00 00 00 00 00 00 00 00 00 54 03 00 00 ...........T..
0143FEA8 E0 FE 43 01 00 00 00 00 00 00 00 00 01 00 00 00 帼C...........
0143FEB8 00 00 00 00 48 00 00 00 00 00 00 00 0D F0 AD BA ....H........瓠
0143FEC8 AB AB AB AB AB AB AB AB 00 00 00 00 00 00 00 00 ........
0143FED8 09 00 0B 00 60 07 1C 01 06 00 00 00 28 FF 43 01 ...`...(C
0143FEE8 48 E2 49 01 00 00 00 00 C0 A8 2C 81 BB 01 AD BA H釯....括,伝
0143FEF8 02 00 01 BB C0 A8 2C 81 00 00 00 00 00 00 00 00 .焕??.......
0143FF08 00 00 00 00 AB AB AB AB AB AB AB AB ....铪铪
014425A0 00 00 ..
014425B0 01 00 00 00 00 00 00 00 00 00 00 00 54 03 00 00 ...........T..
014425C0 F8 25 44 01 00 00 00 00 00 00 00 00 01 00 00 00 ?D...........
014425D0 00 00 00 00 48 00 00 00 00 00 00 00 0D F0 AD BA ....H........瓠
014425E0 AB AB AB AB AB AB AB AB 00 00 00 00 00 00 00 00 ........
014425F0 09 00 0B 00 6F 07 1C 01 06 00 00 00 40 26 44 01 ...o...@&D
01442600 48 E2 49 01 00 00 00 00 C0 A8 2C 81 BB 01 AD BA H釯....括,伝
01442610 02 00 01 BB C0 A8 2C 81 00 00 00 00 00 00 00 00 .焕??.......
01442620 00 00 00 00 AB AB AB AB AB AB AB AB ....铪铪
01442620 00 00 ..
01442630 01 00 00 00 00 00 00 00 00 00 00 00 50 03 00 00 ...........P..
01442640 78 26 44 01 00 00 00 00 00 00 00 00 01 00 00 00 x&D...........
01442650 00 00 00 00 48 00 00 00 00 00 00 00 0D F0 AD BA ....H........瓠
01442660 AB AB AB AB AB AB AB AB 00 00 00 00 00 00 00 00 ........
01442670 09 00 0B 00 80 07 1C 01 06 00 00 00 C0 26 44 01 ...€...?D
01442680 30 E2 49 01 00 00 00 00 C0 A8 2C 81 BB 01 AD BA 0釯....括,伝
01442690 02 00 01 BB C0 A8 2C 81 00 00 00 00 00 00 00 00 .焕??.......
014426A0 00 00 00 00 AB AB AB AB AB AB AB AB ....铪铪
014425A0 00 00 ..
014425B0 01 00 00 00 00 00 00 00 00 00 00 00 50 03 00 00 ...........P..
014425C0 F8 25 44 01 00 00 00 00 00 00 00 00 01 00 00 00 ?D...........
014425D0 00 00 00 00 48 00 00 00 00 00 00 00 0D F0 AD BA ....H........瓠
014425E0 AB AB AB AB AB AB AB AB 00 00 00 00 00 00 00 00 ........
014425F0 09 00 0B 00 1D 07 1C 01 06 00 00 00 40 26 44 01 ......@&D
01442600 38 39 44 01 00 00 00 00 C0 A8 2C 81 BB 01 AD BA 89D....括,伝
01442610 02 00 01 BB C0 A8 2C 81 00 00 00 00 00 00 00 00 .焕??.......
01442620 00 00 00 00 AB AB AB AB AB AB AB AB ....铪铪
求大哥们给个指点 怎么查看是哪些指令调用数据框中的命令,给点指点也行,谢谢了
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课