Miguel wrote: > > Theory #2 > > Confirm that the stack location of the target address is correct: > > mov eax,[esp+10*4] ; CS:IP > > BUT ... if that wasn't correct then _farcall would never have worked. > It's not a given that it ever has worked. -hpa