X64DBG -Call Stack
Call Stack
Call stack view displays the call stack of the current thread. It has 6 columns.
Address is the base address of the stack frame.
To is the address of the code that is going to return to.
From is the probable address of the routine that is going to return.
Size is the size of the call stack frame, in bytes.
Comment is a brief description of the call stack frame.
Party describes whether the procedure that is going to return to, is a user module or a system module.
When Show suspected call stack frame option in the context menu in call stack view is active, it will search through the entire stack for possible return addresses. When it is inactive, it will use standard stack walking algorithm to get the call stack. It will typically get more results when Show suspected call stack frame option is active, but some of which may not be actual call stack frames.
Call Stack — x64dbg documentation
Function Call Stack in C - Scaler Topics
调用堆栈视图显示当前线程的调用堆栈。
Call stack view displays the call stack of the current thread.
它有6列。
It has 6 columns.
Address是栈帧的基址。
Address is the base address of the stack frame.
To是要返回的代码的地址。
To is the address of the code that is going to return to.
From是将要返回的例程的可能地址。
From is the probable address of the routine that is going to return.
Size是调用栈帧的大小，以字节为单位。
Size is the size of the call stack frame, in bytes.
Comment是对调用栈帧的简要描述。
Comment is a brief description of the call stack frame.
一方描述将要返回的程序，是用户模块还是系统模块。
Party describes whether the procedure that is going to return to, is a user module or a system module.
当调用堆栈视图中的上下文菜单中的“显示可疑调用堆栈帧”选项处于活动状态时，它将搜索整个堆栈以寻找可能的返回地址。
When Show suspected call stack frame option in the context menu in call stack view is active, it will search through the entire stack for possible return addresses.
当它处于非活动状态时，它将使用标准的栈遍历算法来获取调用栈。
When it is inactive, it will use standard stack walking algorithm to get the call stack.
当显示可疑的调用栈帧选项是活动的时候，它通常会得到更多的结果，但其中一些可能不是实际的调用栈帧。
It will typically get more results when Show suspected call stack frame option is active, but some of which may not be actual call stack frames.
