10.5. Raw Stack (No Local Variables and Function Parameters)

Now we can understand additional data that appear on the raw stack together with function return addresses that we saw in Chapter 9 project "SimpleStack":

0:000> r
eax=00333058 ebx=7ffde000 ecx=00000001 edx=0040b170 esi=7c9118f1
edi=00011970
eip=00401023 esp=0012ff60 ebp=0012ff60 iopl=0      nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000         efl=00000246
SimpleStack!func3+0×3:
00401023 cc              int     3

0:000> dds esp
0012ff60  0012ff68
0012ff64  00401018 SimpleStack!func2+0×8 [c:\wdpf\simplestack\func2.c @ 6]
0012ff68  0012ff70
0012ff6c  00401008 SimpleStack!func+0×8 [c:\wdpf\simplestack\func.c @ 6]
0012ff70  0012ff78
0012ff74  00401038 SimpleStack!main+0×8 [c:\wdpf\simplestack\simplestack.c
@ 6]
0012ff78  0012ffc0
0012ff7c  00401160 SimpleStack!__tmainCRTStartup+0xfb
[f:\dd\vctools\crt_bld\self_x86\crt\src\crt0.c @ 266]
0012ff80  00000001
0012ff84  00333008
0012ff88  00333058