经常在debug模式下看到有如下汇编代码用0xCC填充栈空间：
mov ecx, 30h
mov eax, 0CCCCCCCCh
rep stos dword ptr es:[edi]
今天才知道0xCC是int 3调试中断的机器码，恍然大悟。
This entry was posted on 星期六, 24 12 月, 2011 at 14:20 and is filed under 汇编, Windows. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.
Comments are closed.
