Skip to main content
Tweeted twitter.com/#!/StackReverseEng/status/470604921495384064
Better usage of the wiki syntax
Source Link
perror
  • 19.2k
  • 29
  • 87
  • 150

When using IDA, I can press "x"x on any subroutine to see where it is called from. Eventually I end up in the ".data".data section. My question is:

But, what am I looking at when I get to this point  ? 

Are these exports offered by the .dll.dll that I'm looking at  ? IfAnd, if I get to this point, is it safe to assume that there are no other calls to my function (with the exception of dynamically-generated and/or external calls)  ? See reference image below for context.

XRefs

When using IDA, I can press "x" on any subroutine to see where it is called from. Eventually I end up in the ".data" section. My question is: what am I looking at when I get to this point? Are these exports offered by the .dll that I'm looking at? If I get to this point, is it safe to assume that there are no other calls to my function (with the exception of dynamically-generated and/or external calls)? See reference image below for context.

XRefs

When using IDA, I can press x on any subroutine to see where it is called from. Eventually I end up in the .data section.

But, what am I looking at when I get to this point  ? 

Are these exports offered by the .dll that I'm looking at  ? And, if I get to this point, is it safe to assume that there are no other calls to my function (with the exception of dynamically-generated and/or external calls)  ? See reference image below for context.

XRefs

Source Link
zz3star90
  • 107
  • 1
  • 8

IDA and XRefs in the .data Section

When using IDA, I can press "x" on any subroutine to see where it is called from. Eventually I end up in the ".data" section. My question is: what am I looking at when I get to this point? Are these exports offered by the .dll that I'm looking at? If I get to this point, is it safe to assume that there are no other calls to my function (with the exception of dynamically-generated and/or external calls)? See reference image below for context.

XRefs