#include "stdafx.h"
int _tmain(int argc, _TCHAR* argv[]){ return 0;}
debug
od
00411370 55 push ebp ; main函数00411371 8BEC mov ebp, esp00411373 81EC C0000000 sub esp, 0C000411379 53 push ebx0041137A 56 push esi0041137B 57 push edi0041137C 8DBD 40FFFFFF lea edi, dword ptr [ebp-C0]00411382 B9 30000000 mov ecx, 3000411387 B8 CCCCCCCC mov eax, CCCCCCCC ; debug状态，填充CC（INT3），防止Over0041138C F3:AB rep stos dword ptr es:[edi]0041138E 33C0 xor eax, eax ; 返回值清000411390 5F pop edi00411391 5E pop esi00411392 5B pop ebx00411393 8BE5 mov esp, ebp00411395 5D pop ebp00411396 C3 retn
ida
.text:00411370 ; =============== S U B R O U T I N E =======================================.text:00411370.text:00411370 ; Attributes: bp-based frame.text:00411370.text:00411370 _wmain proc near ; CODE XREF: j__wmainj.text:00411370.text:00411370 var_overbuffer = byte ptr -0C0h.text:00411370.text:00411370 push ebp.text:00411371 mov ebp, esp.text:00411373 sub esp, 0C0h.text:00411379 push ebx.text:0041137A push esi.text:0041137B push edi.text:0041137C lea edi, [ebp+var_overbuffer].text:00411382 mov ecx, 30h.text:00411387 mov eax, 0CCCCCCCCh.text:0041138C rep stosd.text:0041138E xor eax, eax.text:00411390 pop edi.text:00411391 pop esi.text:00411392 pop ebx.text:00411393 mov esp, ebp.text:00411395 pop ebp.text:00411396 retn.text:00411396 _wmain endprelease
od
00401000 /$ 33C0 xor eax, eax00401002 \. C3 retn
ida
; int __cdecl main(int argc, const char **argv, const char *envp)_main proc nearxor eax, eaxretn_main endp
转载于:https://www.cnblogs.com/nanshouyong326/archive/2010/06/18/1760335.html
