exported / paimei

Automatically exported from code.google.com/p/paimei
GNU General Public License v2.0
1 stars 0 forks source link

Not easy to track caller of function #1

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
The current code doesn't store the value at [esp] which in general is the 
return address (at the beginning of a function).

The attached patch also stores the [esp] value. This allows to easily 
identify indirect calls e.g. "call cx". these are constructions that IDA 
will not Xref.

BTW, this patch also changes the behaviour of the dereference storage (no 
dots but hexadecimal view). I guess the prefered behaviour depends on the 
application.

Feel free to leave that part out.

Best regards,

Ruud

Original issue reported on code.google.com by streetde...@gmail.com on 24 Nov 2008 at 4:17

Attachments:

GoogleCodeExporter commented 9 years ago
http://gitorious.org/projects/paimei

Original comment by streetde...@gmail.com on 2 Dec 2008 at 12:40