Question

i want to get the return address of a function in assembly and then compare that return address value with another value without corrupting the stack or changing anything in the stack,

how can that be done in assembly?

i’m using x86

Answer 1

Usualy on x86 if using stdcall convention return address is stored at content of register ebp +4. So cmp ebp, whatever; should do the job. Actualy it’s not dependent from calling convention rather as it depends whether your compiler puts push ebp as the first instruction of your function, which it usualy does. Generaly the function then looks like:

push ebp
mov ebp,esp
sub esp,size_of_local_variables
...
somehting something something
...
mov esp, ebp
pop ebp
ret