and esp, 0FFFFFFF0h的作用

主要是为了抬地址,对齐

不过更重要的细节是,IDA有时会因此对esp分析错误

基于esp,而非ebp的函数体需要多加注意,最好还是去动调一下

  • Copyright: Copyright is owned by the author. For commercial reprints, please contact the author for authorization. For non-commercial reprints, please indicate the source.

扫一扫,分享到微信

微信分享二维码
  • Copyrights © 2019-2024 kier Val
  • Visitors: | Views: