I had trace several functions in my Application.In some case
"ParseFunction" can parse full code,but most stop at "jmp".
It seem not the "full code"of the function.How can we know
when and what condition or rule that "ParseFunction" will stop?
I had trace several functions in my Application.In some case
"ParseFunction" can parse full code,but most stop at "jmp".
It seem not the "full code"of the function.How can we know
when and what condition or rule that "ParseFunction" will stop?
Thanks.
Best regards,
cch.
Hello!
A JMP is an unconditional jump. So the code wich is below this JMP will not be executed. Different of CALL that Calls that address and then go back to where it called. But it really should be disassembled.... What if you want to see what is below that JMP? hehe
The parsefunction will stop when its sees a $C3 (wich is a RET).