1. Data Transmission commands ── ─ they transmit data between the storage and registers, registers and input and output ports. 1. general data transmission commands. moV transfers words or bytes. movsx first extends the symbol and then transmits it.
First, the Reverse debugging technology
Anti-debugging technology is a common kind of counter detection technique, because malware always attempts to monitor its own code to detect if it is being debugged. To do this, the malware can check whether
1.
. (1) No addressing now
(2) direct addressing 7237 H
(3) No register addressing using BX
(4) using BX indirect addressing 637dh
(5) use the Bx register to address the 0d5f0h
(6) base address addressing 8e18h
(7) change the relative base address
3.3 x86 Command System3.3. 1 data transmission instructions
1. General transfer commands(1) mov commandFormat: mov DST, SRCFunction: Send the content of the source operand SRC to the destination operand DST.(2) movsx signed extended transfer command
1. redirect
The following a.asm, with the ' t ' and carriage return 13 txt, imitation command.com, according to the MASM command line arg symbol value N, (such as masm/darg=0 A;), redirect 5 dos open Files (std_):
N=0: Is stdin handle, first bin
Brother even blockchain Dean Yin Cheng senior Blockchain technical expert: graduated from Tsinghua University, has served as Google algorithm engineer, Microsoft Blockchain field of the world's most valuable experts, Microsoft Tech.ed Conference
Preface
Since go Ethereum is the most widely used Ethereum client, subsequent source analysis is analyzed from this code on GitHub.
Build Go ethereum debugging environment
Windows 64bit
First download go install package to install, because go
Sometimes in order to facilitate the installation of the source package, we need to customize the software package requirements, we will be some source packages according to our needs to make RPM package, when the source package can be directly
32-bit CPUs contain the following registers:
Four data registers (eax, EBX, ECx, and EDX)2 address changes and pointer registers (ESI and EDI) 2 pointer registers (ESP and EBP)Six segment registers (ES, Cs, SS, DS, FS, and GS)1 Instruction Pointer
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.