Find centralized, trusted content and collaborate around the technologies you use most.
Teams
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
假设我想在不使用 POP 的情况下查看堆栈中的顶部两个元素。
我如何访问它 - 我正在尝试:
mov ebp, esp mov eax, [ebp] mov ebx, [ebp-4]
PUSH预先递减堆栈指针,POP后递增它。因此,要查看前两个 DWORDS:
PUSH
POP
mov eax, [esp] ; Top of stack mov ebx, [esp+4] ; Second element on the stack