stos instruction

 

ECX MOV, 30
MOV eax, 0cccccccch
REP STOS DWORD PRT ES: [edi]
STOS instruction, its function is the address of the data placed in eax edi referred to in the same time, increases edi 4 bytes, REP the instructions repeated often in ecx filled .
Brackets denotes a memory , that address is actually edi points to the address of the content. Stos here corresponds stosd fact, there are other
stosb, stosw were treated 4,1,2 bytes, here 30h * 4 bytes of initializing the stack is 0CCH (i.e. machine code int 3's) so actually execute outside the event
contents of the stack which will lead to modal interrupted.

Guess you like

Origin www.cnblogs.com/xiangtingshen/p/11093302.html