Little Question About Syntax

[qWord]

for the sake of completeness: You can also directly work with the pointer to import function, but this requires manual name mangling:

Code Select Expand

EXITPROCESS typedef proto dwExitCode:DWORD
EXTERNDEF _imp__ExitProcess@4: ptr EXITPROCESS ; is const pointer to ExitProcess (placed in the IAT as part of an JMP-opcode)
...
invoke _imp__ExitProcess@4,0

[Ener]

for the sake of completeness: You can also directly work with the pointer to import function, but this requires manual name mangling:

Code Select Expand

EXITPROCESS typedef proto dwExitCode:DWORD
EXTERNDEF _imp__ExitProcess@4: ptr EXITPROCESS ; is const pointer to ExitProcess (placed in the IAT as part of an JMP-opcode)
...
invoke _imp__ExitProcess@4,0

thanks for your reply

I was not aware of this, so if it's a const pointer it doesn't need relocation, and would be easier but i don't understand how this could be placed in the IAT, sorry but what do you mean by "as part of an JMP-opcode"?