> Pat, > Thanks. That gibes with what I've been seeing. Thanks for confirming that. > I guessed the return value was going into EAX but I wasn't entirely sure. > So if this was C++ then the object's address would also have been pushed > on the stack? Perhaps right after the return address? > > Joshua Jore > Minneapolis Ward 3, precinct 10 > Maybe. The the 'this' pointer is passed to the function somehow. It could be passed implicitly as the first parameter, in which case it is the first parameter pushed on the stack and therefore the nearest to EBP in the called function. I'm hedging here because I notice on my system (win32, alas), it is being passed in the ECX register. Patrick McCabe