Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
2.0k views
in Technique[技术] by (71.8m points)

windows - Several int3 in a row

I'm using x64dbg to inspect the disassembly of a .DLL.

At several points in the assembly I see several Int3 instructions in a row.

00007FFA24BF1638 | CC                       | int3                                    |
00007FFA24BF1639 | CC                       | int3                                    |
00007FFA24BF163A | CC                       | int3                                    |
00007FFA24BF163B | CC                       | int3                                    |
00007FFA24BF163C | CC                       | int3                                    |
00007FFA24BF163D | CC                       | int3                                    |
00007FFA24BF163E | CC                       | int3                                    |
00007FFA24BF163F | CC                       | int3                                    |

This instruction is used for debugging / break points right? So then why are there so many in a row, and why is there any at all considering this DLL was compiled with a release configuration VC++.

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

It's probably just padding, they won't ever be executed. I assume the next function begins at 00007FFA24BF1640 which is 16 byte aligned, and the preceding function presumably ends before these instructions.


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...