flat assembler
Message board for the users of flat assembler.
![]() |
Author |
|
keenin
I think I found out myself.
call addr: push ebp push eip ; = 8 Byte mov ebp,esp goto addr So the virtual data of any proc lies in ebp+8. Right? |
|||
![]() |
|
JohnFound
keenin wrote: I think I found out myself. Yes, but right order is: call addr: push eip goto addr push ebp ; This is not part of call, but part of 'ENTER' instruction. ; = 8 Byte mov ebp,esp ; This is part of ENTER too. For more detailed description of ENTER instruction look at Intel manual. Regards |
|||
![]() |
|
keenin
Thanks a lot.
Where can I find the Intel manual? |
|||
![]() |
|
roticv
|
|||
![]() |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2020, Tomasz Grysztar. Also on GitHub, YouTube, Twitter.
Website powered by rwasa.