Re: DLL Exports, determine Arg types and RetVal?



Hi Nicholas,

The only method is to disassemble the DLL, examine the assembly code and from that make a guess as to what the arguments may be.

OK, can you point me to any detailed information specific to the task of looking at function calls, args and RetVals in ASM that were originally coded in C/C++ ?

What I've got so far, is a C++ caller program. I can load this in a debugger, set a break point just before the call into the DLL functions, then single step in ASM, but I could be looking at anything! Is there a more structured way to set up the debugger and calling program?

IMHO the best tool for the job is "IDA Pro". IIRC the trial version allows you to freely disassemble files (But not save your workings), so should be worth a look.

This looks nice, I'm going to try it out.

--
Gerry_uk
.



Relevant Pages

  • Re: DLL Exports, determine Arg types and RetVal?
    ... debugger, set a break point just before the call into the DLL functions, ... then single step in ASM, but I could be looking at anything! ... number of transmitted parameters, with the "Ret n". ...
    (alt.lang.asm)
  • Re: Disobeying jet engines - why?
    ... HIGH LEVEL LANGUAGES ... LIKE HEX or ASM need no debugger. ... programmed the knot. ...
    (sci.electronics.design)
  • Re: Disobeying jet engines - why?
    ... HIGH LEVEL LANGUAGES ... LIKE HEX or ASM need no debugger. ... programmed the knot. ...
    (sci.electronics.design)
  • Change PE header info slightly
    ... im not big into asm but i can get around in a debugger enough to ... can i slightly modify the .exe program so that the ... i have PE explorer editor etc... ...
    (comp.lang.asm.x86)
  • Re: Disobeying jet engines - why?
    ... LIKE HEX or ASM need no debugger (I ain't kidding). ... Well you do need a debugger above a certain code complexity allright. ...
    (sci.electronics.design)

Loading