PrithiPal Singh’s Reviews > Gray Hat Python: Python Programming for Hackers and Reverse Engineers > Status Update

Chapter 2 end: basics of 32bit i386. general-purpose registers, stack execution, EIP, ESP, EBP. debug events, types of breaking point(soft = changing opcode to 0xcc, but CRC(checksum verification ) is used by malware writers to detect,), hard = using debug registers (dr0-4 stores bp addresses, 3 are reserved, dr7 = on/off with type of debug events(eip @addr, write to addr, read/write to addr but not exec)), memorybp