1234567890.zipSZMH1015ZIP1234567890.zip 67.46MB 立即下载资源文件列表:ZIP 1234567890.zip 大约有7个文件 上机一/ 上机一/HelloWorld.zip 29.19KB 上机一/OllyDbg2.01.zip 25.01MB 上机一/VC6.0green.rar 41.91MB 上机一/上机一 堆栈图、函数调用反汇编分析.docx 669.05KB 上机一/函数反汇编示例.xlsx 8.95KB 上机一/堆栈图示例.xlsx 11.36KB 资源介绍: 1234567890.zip <link href="/image.php?url=https://csdnimg.cn/release/download_crawler_static/css/base.min.css" rel="stylesheet"/><link href="/image.php?url=https://csdnimg.cn/release/download_crawler_static/css/fancy.min.css" rel="stylesheet"/><link href="/image.php?url=https://csdnimg.cn/release/download_crawler_static/90016824/3/raw.css" rel="stylesheet"/><div id="sidebar" style="display: none"><div id="outline"></div></div><div class="pf w0 h0" data-page-no="1" id="pf1"><div class="pc pc1 w0 h0"><img alt="" class="bi x0 y0 w1 h1" src="/image.php?url=https://csdnimg.cn/release/download_crawler_static/90016824/bg1.jpg"/><div class="t m0 x1 h2 y1 ff1 fs0 fc0 sc0 ls0 ws0">上机一<span class="_ _0"></span><span class="ff2"> </span>堆栈图<span class="_ _0"></span>、函数调<span class="_ _0"></span>用反汇<span class="_ _0"></span>编分析</div><div class="t m0 x2 h3 y2 ff3 fs0 fc0 sc1 ls0 ws0">任务一<span class="ff4"> <span class="_ _1"> </span></span>堆栈图</div><div class="t m0 x2 h4 y3 ff5 fs1 fc0 sc0 ls0 ws0">1. <span class="_ _2"> </span><span class="ff6">具体任务</span></div><div class="t m0 x3 h5 y4 ff7 fs2 fc0 sc1 ls0 ws0">分别找到以下四个地址,<span class="_ _3"></span>设置断点,<span class="_ _3"></span>单步调试并画出堆栈图,<span class="_ _3"></span>堆栈图形式参</div><div class="t m0 x2 h5 y5 ff7 fs2 fc0 sc1 ls0 ws0">考“堆栈图示例<span class="ff8">.xlsx”<span class="_ _4"></span><span class="ff7">。</span></span></div><div class="t m0 x2 h5 y6 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">1</span>)<span class="ff8">0x401168</span></div><div class="t m0 x2 h5 y7 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">2</span>)<span class="ff8">0x401174<span class="ff9 sc0">(需提交作业<span class="_ _0"></span>,作业一)</span></span></div><div class="t m0 x2 h5 y8 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">3</span>)<span class="ff8">0x401182<span class="ff9 sc0">(需提交作业<span class="_ _0"></span>,作业二)</span></span></div><div class="t m0 x2 h5 y9 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">4</span>)<span class="ff8">0x40118E</span></div><div class="t m0 x2 h4 ya ff5 fs1 fc0 sc0 ls0 ws0">2. <span class="_ _2"> </span><span class="ff6">操作步骤</span></div><div class="t m0 x2 h5 yb ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">1</span>)打开<span class="_ _5"> </span><span class="ff8">OD</span>,把<span class="_ _5"> </span><span class="ff8">HelloWorld.exe<span class="_ _5"> </span></span>拖进去(不要关闭黑窗口)<span class="_ _4"></span>;</div><div class="t m0 x2 h5 yc ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">2</span>)找到要调试<span class="_ _0"></span>的位置:<span class="ff8">Ctrl+G</span>,<span class="_ _0"></span>在弹出的窗<span class="_ _0"></span>口中输入地<span class="_ _0"></span>址(如:<span class="ff8">0x401168</span>,</div><div class="t m0 x3 h5 yd ff8 fs2 fc0 sc1 ls0 ws0">0x401174<span class="ff7">)<span class="_ _4"></span>,点击<span class="ff8">“</span>跟随表达式<span class="ff8">”<span class="_ _4"></span><span class="ff7">,自动跳到该位置;</span></span></span></div><div class="t m0 x2 h5 ye ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">3</span>)<span class="ff8">F2<span class="_ _5"> </span></span>在此处下断点;</div><div class="t m0 x2 h5 yf ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">4</span>)<span class="ff8">F9<span class="_ _5"> </span></span>使程序运行到此处停下;</div><div class="t m0 x2 h5 y10 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">5</span>)<span class="ff8">F7<span class="_ _5"> </span></span>单步(步入)调试;</div><div class="t m0 x3 h5 y11 ff7 fs2 fc0 sc1 ls0 ws0">提示:</div><div class="t m0 x2 h5 y12 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">1</span>)如果地址弄乱了,<span class="ff8">Ctrl+F2<span class="_ _5"> </span></span>重新加载;</div><div class="t m0 x2 h5 y13 ff7 fs2 fc0 sc1 ls0 ws0">(<span class="ff8">2</span>)调试完以后<span class="_ _5"> </span><span class="ff8">OD<span class="_ _5"> </span></span>会<span class="_ _0"></span>生成缓存文件<span class="_ _0"></span>,如果需要清<span class="_ _0"></span>除缓存,可以进<span class="_ _0"></span>到<span class="_ _5"> </span><span class="ff8">OD<span class="_ _5"> </span></span>文件夹,</div><div class="t m0 x3 h5 y14 ff7 fs2 fc0 sc1 ls0 ws0">把<span class="_ _5"> </span><span class="ff8">HelloWorld.udd<span class="_ _5"> </span></span>删掉。</div></div><div class="pi" data-data='{"ctm":[1.611830,0.000000,0.000000,1.611830,0.000000,0.000000]}'></div></div><div id="pf2" class="pf w0 h0" data-page-no="2"><div class="pc pc2 w0 h0"><img class="bi x0 y0 w1 h1" alt="" src="/image.php?url=https://csdnimg.cn/release/download_crawler_static/90016824/bg2.jpg"><div class="t m0 x2 h4 y15 ff5 fs1 fc0 sc0 ls0 ws0">3. OD<span class="_ _6"> </span><span class="ff6">操作提示</span></div><div class="t m0 x2 h4 y16 ff5 fs1 fc0 sc0 ls0 ws0">4. OD<span class="_ _6"> </span><span class="ff6">设置建议</span></div></div><div class="pi" data-data='{"ctm":[1.611830,0.000000,0.000000,1.611830,0.000000,0.000000]}'></div></div><div id="pf3" class="pf w0 h0" data-page-no="3"><div class="pc pc3 w0 h0"><img class="bi x0 y0 w1 h1" alt="" src="/image.php?url=https://csdnimg.cn/release/download_crawler_static/90016824/bg3.jpg"><div class="t m0 x2 h3 y17 ff3 fs0 fc0 sc1 ls0 ws0">任务二<span class="ff4"> <span class="_ _1"> </span></span>函数调用反汇编分析</div><div class="t m0 x2 h4 y18 ff5 fs1 fc0 sc0 ls0 ws0">1. <span class="_ _2"> </span><span class="ff6">具体任务</span></div><div class="t m0 x2 h6 y19 ff4 fs1 fc0 sc1 ls0 ws0">1.1 <span class="_ _2"> </span><span class="ff3">简单函数反汇编分析</span></div><div class="t m0 x3 h5 y1a ff7 fs2 fc0 sc1 ls0 ws0">在<span class="_ _5"> </span><span class="ff8">VC6<span class="_ _7"> </span></span>中创<span class="_ _0"></span>建工<span class="_ _0"></span>程和<span class="_ _0"></span>程序<span class="_ _0"></span>,并<span class="_ _0"></span>将<span class="_ _0"></span>程序<span class="_ _0"></span>修改<span class="_ _0"></span>成如<span class="_ _0"></span>上的<span class="_ _0"></span>简单<span class="_ _0"></span>函数<span class="_ _0"></span>,<span class="_ _0"></span>在函<span class="_ _0"></span>数调<span class="_ _0"></span>用</div><div class="t m0 x2 h5 y1b ff8 fs2 fc0 sc1 ls0 ws0">Add1<span class="ff7">(</span>10,20<span class="ff7">)处下断点,执行程序并查看、分析反汇编代码。</span></div><div class="t m0 x3 h5 y1c ff7 fs2 fc0 sc1 ls0 ws0">思考:</div><div class="t m0 x3 h5 y1d ff8 fs2 fc0 sc1 ls0 ws0">1<span class="ff7">、</span>[ebp+4]<span class="ff7">存的是什么内容?</span></div><div class="t m0 x3 h5 y1e ff8 fs2 fc0 sc1 ls0 ws0">2<span class="ff7">、</span>[ebp+8]<span class="ff7">存的是什么内容?</span></div><div class="t m0 x3 h5 y1f ff8 fs2 fc0 sc1 ls0 ws0">3<span class="ff7">、</span>[ebp+0Ch]<span class="ff7">存的是什么内容?</span></div><div class="t m0 x3 h5 y20 ff8 fs2 fc0 sc1 ls0 ws0">4<span class="ff7">、函数执行后,</span>eax<span class="_ _5"> </span><span class="ff7">存的是什么内容?</span></div><div class="t m0 x3 h5 y21 ff8 fs2 fc0 sc1 ls0 ws0">5<span class="ff7">、调用函数执行完,有没有做堆栈平衡?</span></div></div><div class="pi" data-data='{"ctm":[1.611830,0.000000,0.000000,1.611830,0.000000,0.000000]}'></div></div>