Log in

View Full Version : Calls and jumps to imported functions???


homunculus
February 4th, 2003, 06:37
Hello,

I recall at least 2 ways of calling functions referenced in the address table. One is by using a call and the other (I believe) by using a jump (????). Finding calls to the said function is easy but how should I find the jumps??? Also are there other ways of calling imported functions???

H.

TBD
February 4th, 2003, 06:44
homunculus: in the same way, CTRL+R - Find references
another way to call a function is to push on stack and do a ret

homunculus
February 4th, 2003, 07:06
What is it that you push on the stack?

H.

TBD
February 4th, 2003, 07:12
homunculus: the address where you want to go ... the address of function to be called

homunculus
February 4th, 2003, 09:15
And what do after pushing the address? Do a ret?

H.

TBD
February 5th, 2003, 00:50
homunculus: yup