Skip to content

Analysis creates new stack variable despite the offset belongs to a structure on the stack #6787

Open
@xusheng6

Description

@xusheng6

We can see that analysis creates var_210 which appears to be not otherwise initialized before its usage.

Image

lppe is at ebp-0x230, and ebp-0x20c is being var_210:

Image

However, if we look at the stack, we can see it is actually the szExeFile field of struct PROCESSENTRY32W lppe:

Image

Binary: brave tiger dreams boldly

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions