Thread: FUNCTION CHUNKs
View Single Post
  #4  
Old 09-07-2005, 14:46
shyokou
 
Posts: n/a
really ?

do you really think it is true? i dont think it is a way of optimization for compiler to break a single function into chunks, even though the chunks may be re-used by other function(s). anyhow, i do think it is a way of assembly level re-organization or something like multi-morph.

Quote:
Originally Posted by doug
shyokou: this is not exactly what Git was refering to. IDA introduced that feature because some compilers (optimization?) break a single function into several chunks and do not place them in a contiguous area. Sometimes these chunks are re-used by more than one function.
i admit i have read the sources for neither kernel32 nor ntdll, so i am sure if the chunks you refer to are generated by compiler; are they in fact assembly chunks intended ?

Quote:
Originally Posted by doug
It is a function of IDA to actually recognize the chunks - earlier versions did not - but it is the compiler/linker that actually generates code that way. Look at most of Windows' DLL (kernel32, ntdll, ...) for live examples.
Reply With Quote