-
-
请教ida一些问题?
-
2005-5-10 22:20 2313
-
我如做才能查看到哪里调用此字符串相关汇编内容了?是要插件还是要如何设置?才能正常显示?好像这样的形式显示:
.text:00401580 push 0FFFFFFFFh
.text:00401582 push offset loc_4116A8
.text:00401587 mov eax, large fs:0
.text:0040158D push eax
.text:0040158E mov large fs:0, esp
.text:00401595 sub esp, 64h
.text:00401598 push esi
.text:00401599 mov esi, ecx
.text:0040159B push esi
.text:0040159C lea ecx, [esp+18h]
.text:004015A0 call ??0CPaintDC@@QAE@PAVCWnd@@@Z ; CPaintDC::CPaintDC(CWnd *)
.text:004015A5 mov ecx, [esi+20h]
.text:004015A8 lea eax, [esp+4]
.text:004015AC push eax
.text:004015AD push ecx
.text:004015AE mov dword ptr [esp+78h], 0
.text:004015B6 call ds:GetClientRect ; Get the coordinates of a window's client area
.text:004015BC lea edx, [esp+4]
.text:004015C0 push 0F0EBE8h
.text:004015C5 push edx
.text:004015C6 lea ecx, [esp+1Ch]
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
[分享]android逆向菜鸟速参手册骚动版
25491
[求助]居然找不到提示字符哪儿调用?
4300
看原图