Quote:
Originally Posted by cnbragon
maybe it can not, cause the library functions have been linked in the PE file during the build phase, and the PE file doesn't contain any information about the library itself.
|
But IDA can identify the function as library function, how IDA know this then?
push ebp
mov ebp, esp
mov eax, 10D0h
call
__alloca_probe