Einzelnen Beitrag anzeigen

Olli
(Gast)

n/a Beiträge
 
#15

Re: Unbekannte DLL Funktionsaufbau ermitteln

  Alt 15. Jun 2008, 23:51
Zitat von Remko:
Ida will tell you at least the calling convention and the number of parameters.
It'll only tell you its best guess. For most standard (not packed/not crypted) files this is a fairly good bet, but for others it might be very wrong. Especially when __fastcall (aka register in Delphi) in its variations comes in, the whole thing can become quite tricky. I've come across some pretty neat variations recently where code is being created in memory and the register variations are completely different from any compiler known to me.

But with the newest IDA version Ilfak had implemented custom calling conventions and that works pretty well

@chaosben: Die DLL ist für einen anderen (nicht x86/x64) Prozessor kompiliert?
  Mit Zitat antworten Zitat