{"id":298,"date":"2023-06-20T16:05:41","date_gmt":"2023-06-20T07:05:41","guid":{"rendered":"https:\/\/h4ck.kr\/?p=298"},"modified":"2024-05-22T17:06:48","modified_gmt":"2024-05-22T08:06:48","slug":"%ec%8a%a4%ed%83%9d-%ed%94%84%eb%a0%88%ec%9e%84-%eb%b6%84%ec%84%9d","status":"publish","type":"post","link":"https:\/\/h4ck.kr\/?p=298","title":{"rendered":"\uc2a4\ud0dd \ud504\ub808\uc784 \ubd84\uc11d"},"content":{"rendered":"\n
\n
\n
#include <stdio.h>\n\nlong add(long a, long b)\n{\n\tlong x=a, y=b;\n\treturn (x + y);\n}\n\nint main(int argc, char* argvp[])\n{\n\tlong a=1, b=2;\n\tprintf(\"%d\\n\", add(a,b));\n\treturn 0;\n}<\/pre>\n<\/div>\n<\/div>\n\n\n\n
1. main() \ud568\uc218 \uc2dc\uc791 – \uc2a4\ud0dd \ud504\ub808\uc784 \uc0dd\uc131<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
\n
\n
int main(int argc, char* argv[])\n{<\/pre>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
\n
(\ucd08\uae30 \uc0c1\ud0dc)<\/pre>\n<\/div><\/div>\n\n\n\n
<\/p>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
ebp\ub97c \uc800\uc7a5\ud558\ub294 \uc774\uc720\ub294 \uc774\uc804\uc5d0 \uc218\ud589\ud558\ub358 \ud568\uc218\uc758 \ub370\uc774\ud130\ub97c \ubcf4\uc874\ud558\uae30 \uc704\ud574\uc11c\uc774\ub2e4.<\/p>\n\n\n\n
\uc774\uac83\uc744 base pointer\ub77c\uace0\ub3c4 \ubd80\ub974\ub294\ub370,<\/p>\n\n\n\n
\uadf8\ub798\uc11c \ud568\uc218\uac00 \uc2dc\uc791\ub420 \ub54c\ub294 \uc774\ub807\uac8c stack pointer\uc640 base pointer\ub97c \uc0c8\ub85c \uc9c0\uc815\ud558\uba70 
\uc774\ub7ec\ud55c \uacfc\uc815\uc744 “\ud568\uc218 \ud504\ub864\ub85c\uadf8 \uacfc\uc815<\/strong>“\uc774\ub77c\uace0 \ud55c\ub2e4.<\/p>\n\n\n\n
\n<\/div><\/div>\n\n\n\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
\n
\n
push ebp<\/pre>\n<\/div>\n<\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
‘PUSH’\ub294 \uac12\uc744 \uc2a4\ud0dd\uc5d0 \uc9d1\uc5b4\ub123\ub294 \uba85\ub839\uc774\ub2e4.
\ub530\ub77c\uc11c “EBP \uac12\uc744 \uc2a4\ud0dd\uc5d0 \uc9d1\uc5b4 \ub123\uc5b4\ub77c”\ub77c\ub294 \uc758\ubbf8\uc774\ub2e4.<\/p>\n\n\n\n
\uc774\ub807\uac8c main() \ud568\uc218\uc5d0\uc11c EBP\uac00 \ubca0\uc774\uc2a4 \ud3ec\uc778\ud130\uc758 \uc5ed\ud560\uc744 \ud560\ud14c\ub2c8,
EBP\uac00 \uc774\uc804\uc5d0 \uac00\uc9c0\uace0 \uc788\ub358 \uac12\uc744 \uc2a4\ud0dd\uc5d0 \ubc31\uc5c5\ud574\ub450\uae30 \uc704\ud55c \uc6a9\ub3c4\ub85c \uc0ac\uc6a9\ub41c\ub2e4.
(\ub098\uc911\uc5d0 main() \ud568\uc218\uac00 \uc885\ub8cc(\ub9ac\ud134)\ub418\uae30 \uc804\uc5d0 \uc774 \uac12\uc744 \ud68c\ubcf5\uc2dc\ucf1c\uc900\ub2e4.<\/p>\n\n\n\n
\uc774\uc804 \ud568\uc218\uc758 base pointer\ub97c \uc800\uc7a5\ud558\uba74,
stack pointer\ub294 4 byte \uc544\ub798\uc778 0x12ff40\uc744 \uac00\ub9ac\ud0a4\uac8c \ub41c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
\n
\n
mov ebp, esp<\/pre>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
ESP\uc758 \uac12\uc744 EBP\uc5d0 \ubcf5\uc0ac\ud55c\ub2e4.
\uc774 \uba85\ub839 \uc774\ud6c4\ubd80\ud130 EBP\ub294 \ud604\uc7ac ESP\uc640 \uac19\uc740 \uac12\uc744 \uac00\uc9c0\uac8c \ub41c\ub2e4.
\uadf8\ub9ac\uace0 main() \ud568\uc218\uac00 \ub05d\ub0a0 \ub54c\uae4c\uc9c0 EBP \uac12\uc740 \uace0\uc815\ub41c\ub2e4.<\/p>\n\n\n\n
\uc2a4\ud0dd\uc5d0 \uc800\uc7a5\ub41c \ud568\uc218 \ud30c\ub77c\ubbf8\ud130\uc640 \ub85c\uceec \ubcc0\uc218\ub4e4\uc740 EBP\ub97c \ud1b5\ud574 \uc811\uadfc\ud558\uae30 \uc704\ud574 \uace0\uc815\ub41c \uac83\uc774\uba70,
\ub450 \uba85\ub839\uc5b4\uc5d0 \uc758\ud574 main() \ud568\uc218\uc5d0 \ub300\ud55c \uc2a4\ud0dd \ud504\ub808\uc784\uc774 \uc0dd\uc131\ub418\uc5c8\ub2e4.<\/p>\n\n\n\n
\n<\/div><\/div>\n\n\n\n
2. \ub85c\uceec \ubcc0\uc218 \uc138\ud305<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
long a=1, b=2;<\/pre>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
sub esp, 8<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
ESP\uc5d0\uc11c 8\uc744 \ube7c\ub294 \uba85\ub839\uc774\ub2e4.
main() \ud568\uc218\uc758 \ub85c\uceec \ubcc0\uc218 ‘a’, ‘b’\ub294 long \ud0c0\uc785\uc774\uae30\uc5d0 \uac01\uac01 4byte \ud06c\uae30\ub97c \uac00\uc9c4\ub2e4.
\ub530\ub77c\uc11c \uc774 \ub450 \ubcc0\uc218\ub4e4\uc744 \uc2a4\ud0dd\uc5d0 \uc800\uc7a5\ud558\ub824\uba74 \ucd1d 8byte\uac00 \ud544\uc694\ud558\ubbc0\ub85c
8byte \ub9cc\ud07c\uc758 \uacf5\uac04\uc744 \ud655\uc7a5\uc2dc\ucf30\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\n
\n
\uc5b4\uc148\ube14\ub9ac<\/h3>\n\n\n\n
mov [ebp-4], 1\nmov [ebp-8], 2<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
\ub85c\uceec \ubcc0\uc218 a\ub97c \uc758\ubbf8\ud558\ub294 [ebp-4]\uc5d0\ub294 1\uc744 \ub123\uace0,
\ub85c\uceec \ubcc0\uc218 b\ub97c \uc758\ubbf8\ud558\ub294 [ebp-8]\uc5d0\ub294 2\ub97c \ub123\ub294\ub2e4.<\/p>\n\n\n\n
\n<\/div><\/div>\n\n\n\n
3. add() \ud568\uc218 \ud30c\ub77c\ubbf8\ud130 \uc785\ub825 \/ add \ud568\uc218 \ud638\ucd9c<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
printf(\"%d\\n\", add(a,b));<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
mov  eax, [ebp-8]\npush eax\nmov  ecx, [ebp-4]\npush ecx\ncall 0x401000 \/\/ add()<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
\ubcc0\uc218 a, b\uc758 \uac12\uc744 \uc2a4\ud0dd\uc5d0 \ub123\ub294\ub370,
\uc774 \ub54c \ud568\uc218 \ud30c\ub77c\ubbf8\ud130\uc758 \uc5ed\uc21c \ubc29\uc2dd\uc73c\ub85c \uc800\uc7a5\uc2dc\ud0a8\ub2e4.<\/p>\n\n\n\n
call \uba85\ub839\uc740 \ud568\uc218\ub97c \ud638\ucd9c\ud560 \ub54c \uc0ac\uc6a9\ub418\ub294 \uba85\ub839\uc73c\ub85c,
\ud574\ub2f9 \ud568\uc218\ub85c \ub4e4\uc5b4\uac00\uae30 \uc804\uc5d0 \ud574\ub2f9 \ud568\uc218\uac00 \uc885\ub8cc\ub420 \ub54c \ubcf5\uadc0\ud560 \uc8fc\uc18c(add() return address)\ub97c \uc2a4\ud0dd\uc5d0 \uc800\uc7a5\ud55c\ub2e4.
\uadf8\ub7f0 \ub2e4\uc74c, EIP\uc5d0 add \ud568\uc218\uc758 \uc2dc\uc791\uc9c0\uc810 \uc8fc\uc18c\uc778 0x401000\ub97c \ub123\ub294\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
4. add() \ud568\uc218 \uc2dc\uc791 \/ \uc2a4\ud0dd \ud504\ub808\uc784 \uc0dd\uc131<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
long add (long a, long b)\n{<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
push ebp\nmov  ebp, esp<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
\uc774\uc81c add() \ud568\uc218\uac00 \uc2dc\uc791\ub418\uba74, \uc790\uc2e0\ub9cc\uc758 \uc2a4\ud0dd \ud504\ub808\uc784\uc744 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n\n\n\n
\uc6d0\ub798\uc758 EBP \uac12(main() base pointer)\uc744 \uc2a4\ud0dd\uc5d0 \uc800\uc7a5\uc2dc\ud0a4\uace0,
\ud604\uc7ac\uc758 EBP \uac12(Stack Pointer)\ub97c EBP\uc5d0 \ubcf5\uc0ac\ud55c\ub2e4.<\/p>\n\n\n\n
add() \ud568\uc218 \ub0b4\uc5d0\uc11c EBP \uac12\uc740 \uace0\uc815\ub41c\ub2e4.<\/p>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
5. add() \ud568\uc218\uc758 \ub85c\uceec \ubcc0\uc218 (x, y) \uc138\ud305<\/h2>\n\n\n\n
\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
long x=a, y=b;<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
sub  esp, 8\nmov  eax, [ebp + 8]\nmov  [ebp-8], eax\nmov  ecx, [ebp + c]\nmov  [ebp-4], ecx<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
8byte \ub9cc\ud07c\uc758 \uacf5\uac04\uc744 \uc2a4\ud0dd\uc5d0 \ud655\uc7a5\uc2dc\ud0a8\ub2e4.<\/p>\n\n\n\n
[ebp+8] \uac12\uc778 1\uc744 eax\uc5d0, eax\uac12\uc778 1\uc744 \ub2e4\uc2dc [ebp-8]\uc5d0 \ubcf5\uc0ac\ud55c\ub2e4.
\ub9c8\ucc2c\uac00\uc9c0\ub85c, [ebp+c]\uac12\uc778 2\ub97c ecx\uc5d0, ecx \uac12\uc778 2\ub97c \ub2e4\uc2dc [ebp-4]\uc5d0 \ubcf5\uc0ac\ud55c\ub2e4.<\/p>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
6. ADD \uc5f0\uc0b0<\/h2>\n\n\n\n
\n
\ucf54\ub4dc <\/h3>\n\n\n\n
...(x+y);\n}<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
mov  eax, [ebp-8]\nadd  eax, [ebp-4]<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
[ebp-8]\uac12\uc778 1\uc744 eax\uc5d0 \ubcf5\uc0ac\ud558\uace0,
eax+[ebp-4](=1+2) \uacc4\uc0b0\uac12\uc778 3\uc744 eax\uc5d0 \uc800\uc7a5\ud55c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
7. add() \ud568\uc218\uc758 \uc2a4\ud0dd \ud504\ub808\uc784 \ud574\uc81c \/ \ud568\uc218 \uc885\ub8cc(\ub9ac\ud134)<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
return (x+y);\n}<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
mov esp, ebp<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
EBP \uac12\uc778 0x12ff28\uc744 ESP\ub85c \ubcf5\uc0ac\ud55c\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c \uc774\uc804 \uba85\ub839\uc5b4\uc778 SUB ESP, 8 \uba85\ub839 \ud6a8\uacfc\uac00 \uc0ac\ub77c\uc838
\uc2a4\ud0dd\uc5d0 \uc313\uc5ec\uc788\ub358 2, 1\uc740 \ub354 \uc774\uc0c1 \uc720\ud6a8\ud558\uc9c0 \uc54a\uac8c \ub41c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
pop  ebp<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
\uc2a4\ud0dd\uc5d0 \ubc31\uc5c5\ud574\ub454 ebp \uac12\uc744 \ubcf5\uc6d0\ud55c\ub2e4.<\/p>\n\n\n\n
\ubcf5\uc6d0\ub41c ebp \uac12\uc740 0x12ff40\uc774\uba70,
\uc774 \uac12\uc740 main() \ud568\uc218\uc758 ebp \uac12\uc774\ub2e4.<\/p>\n\n\n\n
pop\uc744 \ud588\uc73c\ubbc0\ub85c stack pointer\ub294 1 word \uc704\ub85c \uc62c\ub77c\uac00\uba70,
\uc774\uc81c stack pointer\ub294 return address\ub97c \uac00\ub9ac\ud0a8\ub2e4.<\/p>\n\n\n\n
\uc774\ub85c\uc368, add() \ud568\uc218\uc758 \uc2a4\ud0dd\ud504\ub808\uc784\uc740 \ud574\uc81c\ub41c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
retn<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\uc124\uba85<\/h3>\n\n\n\n
\uc2a4\ud0dd\uc5d0 \uc800\uc7a5\ub41c \ubcf5\uadc0\uc8fc\uc18c\ub85c \ub9ac\ud134\ud55c\ub2e4.<\/p>\n\n\n\n
return address\ub294 POP \ub418\uc5b4 EIP\uc5d0 \uc800\uc7a5\ub418\uace0,
stack pointer\ub294 \ud55c\ubc88\ub354 1 word \uc704\ub85c \uc62c\ub77c\uac04\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
8. add() \ud568\uc218 \ud30c\ub77c\ubbf8\ud130 \uc81c\uac70 (\uc2a4\ud0dd \uc815\ub9ac)<\/h2>\n\n\n\n
\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
add esp, 8<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
‘ADD’ \uba85\ub839\uc73c\ub85c ESP\uc5d0 8\uc744 \ub354\ud558\uc5ec, \uc2a4\ud0dd\uc744 8byte \uc904\uc778\ub2e4.<\/p>\n\n\n\n
add() \ud568\uc218\uac00 \uc644\uc804\ud788 \uc885\ub8cc\ub418\uc5c8\uae30 \ub54c\ubb38\uc5d0
\ud30c\ub77c\ubbf8\ud130\ub85c \uc4f0\uc774\ub294 2, 1\uc740 \ub354\uc774\uc0c1 \ud544\uc694\uc5c6\uc5b4 \uc2a4\ud0dd\uc744 \uc815\ub9ac\ud55c\ub2e4.<\/p>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
9. printf() \ud568\uc218 \ud638\ucd9c<\/h2>\n\n\n\n
\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
printf(\"%d\\n\", add(a, b));<\/pre>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
push eax\npush 0x40b384 \/\/\"%d\\n\"\npush 0x401067 \/\/printf()\nadd  esp, 8<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
printf() \ud568\uc218\uc5d0 \uc0ac\uc6a9\ub41c \ud30c\ub9ac\uba38\ud130\uc758 \uac1c\uc218\uac00 2\uac1c\uc774\uba70, 8\ubc14\uc774\ud2b8\uac00 \ub41c\ub2e4.
(32\ube44\ud2b8 \ub808\uc9c0\uc2a4\ud130+32\ube44\ud2b8 \uc0c1\uc218=64\ube44\ud2b8=8\ubc14\uc774\ud2b8)<\/p>\n\n\n\n
\ud638\ucd9c \ud6c4, \ub9c8\ucc2c\uac00\uc9c0\ub85c ‘ADD’ \uba85\ub839\uc73c\ub85c \ud30c\ub77c\ubbf8\ud130\ub97c \uc815\ub9ac\ud55c\ub2e4.<\/p>\n<\/div><\/div>\n\n\n\n
\n\n\n\n
10. \ub9ac\ud134 \uac12 \uc138\ud305 \/ \uc2a4\ud0dd \ud504\ub808\uc784 \ud574\uc81c \/ main() \uc885\ub8cc<\/h2>\n\n\n\n
\n
\ucf54\ub4dc<\/h3>\n\n\n\n
   return 0;\n}<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uc5b4\uc148\ube14\ub7ec<\/h3>\n\n\n\n
xor  eax, eax\nmov  esp, ebp\npop  ebp\nretn<\/pre>\n<\/div><\/div>\n\n\n\n
\n
\uadf8\ub9bc<\/h3>\n\n\n\n
\"\"<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\uc124\uba85<\/h3>\n\n\n\n
main() \ud568\uc218\uc758 \ub9ac\ud134 \uac12\uc778 0\uc744 \uc138\ud305\ud558\uae30 \uc704\ud574 ‘XOR’ \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud55c\ub2e4.
\uac19\uc740 \uac12\ub07c\ub9ac XOR\ud558\uba74 0\uc774 \ub418\ub294 \ud2b9\uc9d5\uc774 \uc788\ub294\ub370, “MOV EAX, 0″\ubcf4\ub2e4 \uc2e4\ud589 \uc18d\ub3c4\uac00 \ube68\ub77c 
\uc704\uc640 \uac19\uc774 \ub808\uc9c0\uc2a4\ud130\ub97c \ucd08\uae30\ud654\ud560 \ub54c \ub9ce\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n
main() \ud568\uc218\uc758 \uc2a4\ud0dd \ud504\ub808\uc784\uc744 \ud574\uc81c\uc2dc\ud0a4\ub294\ub370
stack pointer\ub294 mov \uba85\ub839\uc5d0 \uc758\ud574 2word \uc704\ub85c,
pop \uba85\ub839\uc5d0 \uc758\ud574 1word \uc704\ub85c, \uc989 3word\uc704\ub85c \uc62c\ub77c\uac04\ub2e4.<\/p>\n\n\n\n
\ub9c8\uc9c0\ub9c9\uc73c\ub85c, \uc2a4\ud0dd\uc5d0 \uc800\uc7a5\ub41c \ubcf5\uadc0\uc8fc\uc18c\ub85c \ub9ac\ud134\ub418\uc5b4
ret address\ub294 POP\ub418\uc5b4 EIP\uc5d0 \uc800\uc7a5\ub418\uace0,
stack pointer\ub294 \ud55c\ubc88 \ub354 1word \uc704\ub85c \uc62c\ub77c\uac04\ub2e4.<\/p>\n<\/div><\/div>\n\n\n\n
picture<\/a>\ub2e4\uc6b4\ub85c\ub4dc<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"
1. main() \ud568\uc218 \uc2dc\uc791 – \uc2a4\ud0dd \ud504\ub808\uc784 \uc0dd\uc131 \ucf54\ub4dc \uc5b4\uc148\ube14\ub7ec \uadf8\ub9bc \uc124\uba85 ebp\ub97c \uc800\uc7a5\ud558\ub294 \uc774\uc720\ub294 \uc774\uc804\uc5d0 \uc218\ud589\ud558\ub358 \ud568\uc218\uc758 \ub370\uc774\ud130\ub97c \ubcf4\uc874\ud558\uae30 \uc704\ud574\uc11c\uc774\ub2e4. \uc774\uac83\uc744 base pointer\ub77c\uace0\ub3c4 \ubd80\ub974\ub294\ub370, \uadf8\ub798\uc11c \ud568\uc218\uac00 \uc2dc\uc791\ub420 \ub54c\ub294 \uc774\ub807\uac8c stack pointer\uc640 base pointer\ub97c \uc0c8\ub85c \uc9c0\uc815\ud558\uba70 \uc774\ub7ec\ud55c \uacfc\uc815\uc744 “\ud568\uc218 \ud504\ub864\ub85c\uadf8 \uacfc\uc815“\uc774\ub77c\uace0 \ud55c\ub2e4. \uc5b4\uc148\ube14\ub7ec \uadf8\ub9bc \uc124\uba85 ‘PUSH’\ub294 \uac12\uc744 \uc2a4\ud0dd\uc5d0 \uc9d1\uc5b4\ub123\ub294 \uba85\ub839\uc774\ub2e4.\ub530\ub77c\uc11c “EBP \uac12\uc744 \uc2a4\ud0dd\uc5d0 \uc9d1\uc5b4 \ub123\uc5b4\ub77c”\ub77c\ub294… \ub354 \ubcf4\uae30 »\uc2a4\ud0dd \ud504\ub808\uc784 \ubd84\uc11d<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[1],"tags":[43],"class_list":["post-298","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-stack-frame"],"_links":{"self":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=298"}],"version-history":[{"count":44,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/298\/revisions"}],"predecessor-version":[{"id":402,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/298\/revisions\/402"}],"wp:attachment":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}