Answer by Peter Cordes for Understanding a function call that uses EAX before...
add eax,0x800 right before a call wouldn't make sense unless EAX is an input to the called function.Passing 1 arg in EAX and another on the stack looks to me like GCC's regparm=1 calling convention. Or...
View ArticleUnderstanding a function call that uses EAX before and after for the return...
I have been trying to hook a function which is mostly optimized by the compiler. It initializes EAX before the call and its return value is stored in EAX. Here is some code:mov eax,dword ptr...
View Article
More Pages to Explore .....
