Interrupt 3
Whenever a software interrupt exception is triggered, the exception address and the value of the EIP register will point to the next instruction that generated the exception. But the breakpoint exception is one of the special cases.
When the EXCEPTION_BREAKPOINT(0x80000003) exception is triggered, Windows will assume that this is caused by a single-byte "CC" opcode (that is, the Int 3 instruction). Windows decrements the exception address to point to the asserted " CC" opcode, then pass the exception to the exception handler. But the value of the EIP register does not change.
Therefore, if CD 03 is used (this is the machine code representation of Int 03), then when the exception handling handle accepts control, the exception address is the location pointing to 03.
本页面的全部内容在 CC BY-NC-SA 4.0 协议之条款下提供，附加条款亦可能应用。