Functions, Calling Conventions and the Stack Frame | Reverse Engineering Course Ep 9

Описание: How do you make sense of millions of lines of code? One function at a time. This episode treats the function as the fundamental unit of understanding and shows you how to identify, read, and map functions inside a compiled binary.

We cover functions as isolated logical rooms, the calling conventions that set the rules for passing arguments, returning results, and cleaning up memory, and the stack frame that serves as each function's temporary workbench. You'll learn how caller and callee memory boundaries work, how call graphs reveal a program's architecture and its external dependencies, and the common mistakes that cause reversers to misread functions. We finish with hands-on reversing, identifying the prologue and core logic in real disassembly and comparing it with decompiler pseudo-code.

What you'll learn:
Why functions are the building blocks of analysis
Calling conventions and how arguments move between functions
Stack frame layout: arguments, locals, return address, saved base pointer
How stacks grow and shrink
Using call graphs to map architecture
Spotting function prologues and epilogues in a disassembler

Chapters:
0:00 Introduction
0:35 Episode Overview
0:50 Building Blocks: Functions as Foundation
1:57 Calling Conventions: Rules of Engagement
3:17 The Stack Frame: Temporary Workbench
5:44 Call Graphs: Mapping Architecture
6:24 Reversing Pitfalls and Common Mistakes
7:06 Hands-On Reversing
9:02 Final Question: Apply This to Your Next Puzzle

Cybersecurity Masterclass by Joshua Moses | CyberTrace Foundation. #Course Lab Guide:
https://github.com/joshuanmoses/Cyber...