make it fast, fast, fast ... fpu

[dedndave]

it may be a failsafe, in case the API call fails
or, it could be the start of the IAT jmp table

[MichaelW]

Does anyone know why there is a JMP after the CALL?

If you are asking about something like this:

Code Select Expand


00401000 6A00                   push    0
00401002 E801000000             call    fn_00401008
00401007 CC                     int     3
00401008                    fn_00401008:
00401008 FF2500204000           jmp     dword ptr [ExitProcess]


The jump routes the ExitProcess call to the actual function address.

http://en.wikipedia.org/wiki/Import_Address_Table#Import_Table