
hi,
I use Ida Pro with Hex-Rays to create some pseudo code, and the .exe I debug is quite big ;).
HEX-Rays throws: POSITIVE SP VALUE FOUND
.text:004561E3 loc_4561E3:
.text:004561E3 mov ecx, [ebp+var_C]
.text:004561E6 pop edi
.text:004561E7 pop esi
.text:004561E8 mov large fs:0, ecx
.text:004561EF pop ebx
.text:004561F0 leave
.text:004561F1 retn //error: POSITIVE SP VALUE FOUND
.text:004561F1 sub_455DB4 endp ; sp-analysis
esp points to: 0012FC3C dd 45B84Bh ; .text:loc_45B84B
my question: what could I do to create a pseudocode from hex-rays, without error? why would an .exe create such "bad" code? scrambler - packer?
PEiD and Co. say:
Microsoft Visual C++ 6.0 [Debug]
.exe is a MFC APPLICATION
thanks guys