Skip to main content
added 57 characters in body
Source Link
nomilk
  • 570
  • 3
  • 6

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

Calling convention ? Give us the prologue and the epilogue of this subroutine so we can see how the stack is allocated and cleaned.

IfSo if this is a stack frame of a normal application written in high level language (not malware ornor written in assembly by hand) and not calling convention specific then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

Calling convention ? Give us the prologue and the epilogue of this subroutine so we can see how the stack is allocated and cleaned.

If this is a normal application written in high level language (not malware or written in assembly by hand) then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

Calling convention ? Give us the prologue and the epilogue of this subroutine so we can see how the stack is allocated and cleaned.

So if this is a stack frame of a normal application written in high level language (not malware nor written in assembly by hand) and not calling convention specific then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

added 136 characters in body
Source Link
nomilk
  • 570
  • 3
  • 6

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

Calling convention ? Give us the prologue and the epilogue of this subroutine so we can see how the stack is allocated and cleaned.

If this is a normal application written in high level language (not a virusmalware or written in assembly by hand) then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

If this is a normal application written in high level language (not a virus or written in assembly by hand) then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

Calling convention ? Give us the prologue and the epilogue of this subroutine so we can see how the stack is allocated and cleaned.

If this is a normal application written in high level language (not malware or written in assembly by hand) then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

edited body
Source Link
nomilk
  • 570
  • 3
  • 6

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

If this is a normal application written in high level language (not a virus or written in assembly by hand) then i think we can assumeagree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

If this is a normal application written in high level language (not a virus or written in assembly by hand) then i think we can assume that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this but thats your choice.

The screenshots shows that u are examining IDA's detailed stack view.

IDA gives a name to every byte that is accessed directly in the function, any other bytes remain undefined.

If this is a normal application written in high level language (not a virus or written in assembly by hand) then i think we can agree that the compiler allocated more stack space than this function needs for some reason.

I dont think it is a "must" to know why the compiler did this, but thats your choice.

Source Link
nomilk
  • 570
  • 3
  • 6
Loading