Hi,

in C++-Exporten in DLLs sind die Parameter in codierter Form hinterlegt. Wie kann ich solche Namen decodieren?

C++ Name-Mangling ist (leider) compilerspezifisch.

Informationen zu den verbreitetsten Compilern gibt es zum Beispiel unter
MSDN Library - Debug Help Library - UnDecorateSymbolName
Dan Kegel's Web Hostel - C++ Name Mangling/Demangling
John Collins' Home Page - Borland C++ Name-Mangling

F*** .... hab ichs doch geahnt. Dank dir Nico

Hier mal die Liste der Export Forwarder in die NTDLL.DLL ... hab mal ale DLLs meines Systems abgeklappert

markieren

Code:

[KERNEL32.dll]AddVectoredExceptionHandler -> NTDLL.RtlAddVectoredExceptionHandler
[KERNEL32.dll]DeleteCriticalSection -> NTDLL.RtlDeleteCriticalSection
[KERNEL32.dll]EnterCriticalSection -> NTDLL.RtlEnterCriticalSection
[KERNEL32.dll]GetLastError -> NTDLL.RtlGetLastWin32Error
[KERNEL32.dll]HeapAlloc -> NTDLL.RtlAllocateHeap
[KERNEL32.dll]HeapFree -> NTDLL.RtlFreeHeap
[KERNEL32.dll]HeapReAlloc -> NTDLL.RtlReAllocateHeap
[KERNEL32.dll]HeapSize -> NTDLL.RtlSizeHeap
[KERNEL32.dll]InitializeSListHead -> NTDLL.RtlInitializeSListHead
[KERNEL32.dll]InterlockedFlushSList -> NTDLL.RtlInterlockedFlushSList
[KERNEL32.dll]InterlockedPopEntrySList -> NTDLL.RtlInterlockedPopEntrySList
[KERNEL32.dll]InterlockedPushEntrySList -> NTDLL.RtlInterlockedPushEntrySList
[KERNEL32.dll]LeaveCriticalSection -> NTDLL.RtlLeaveCriticalSection
[KERNEL32.dll]QueryDepthSList -> NTDLL.RtlQueryDepthSList
[KERNEL32.dll]RemoveVectoredExceptionHandler -> NTDLL.RtlRemoveVectoredExceptionHandler
[KERNEL32.dll]RestoreLastError -> NTDLL.RtlRestoreLastWin32Error
[KERNEL32.dll]RtlCaptureContext -> NTDLL.RtlCaptureContext
[KERNEL32.dll]RtlCaptureStackBackTrace -> NTDLL.RtlCaptureStackBackTrace
[KERNEL32.dll]RtlFillMemory -> NTDLL.RtlFillMemory
[KERNEL32.dll]RtlMoveMemory -> NTDLL.RtlMoveMemory
[KERNEL32.dll]RtlUnwind -> NTDLL.RtlUnwind
[KERNEL32.dll]RtlZeroMemory -> NTDLL.RtlZeroMemory
[KERNEL32.dll]SetCriticalSectionSpinCount -> NTDLL.RtlSetCriticalSectionSpinCount
[KERNEL32.dll]SetLastError -> NTDLL.RtlSetLastWin32Error
[KERNEL32.dll]TryEnterCriticalSection -> NTDLL.RtlTryEnterCriticalSection
[KERNEL32.dll]VerSetConditionMask -> NTDLL.VerSetConditionMask
[PSXDLL.dll]HeapAlloc -> NTDLL.RtlAllocateHeap
[PSXDLL.dll]HeapFree -> NTDLL.RtlFreeHeap
[PSXDLL.dll]HeapReAlloc -> NTDLL.RtlReAllocateHeap
[PSXDLL.dll]HeapSize -> NTDLL.RtlSizeHeap
[PSXDLL.dll]RtlAnsiCharToUnicodeChar -> NTDLL.RtlAnsiCharToUnicodeChar
[PSXDLL.dll]RtlFillMemory -> NTDLL.RtlFillMemory
[PSXDLL.dll]RtlMoveMemory -> NTDLL.RtlMoveMemory
[PSXDLL.dll]RtlMultiByteToUnicodeN -> NTDLL.RtlMultiByteToUnicodeN
[PSXDLL.dll]RtlUnicodeToMultiByteN -> NTDLL.RtlUnicodeToMultiByteN
[PSXDLL.dll]RtlUnicodeToMultiByteSize -> NTDLL.RtlUnicodeToMultiByteSize
[PSXDLL.dll]RtlUnwind -> NTDLL.RtlUnwind
[PSXDLL.dll]RtlUpcaseUnicodeChar -> NTDLL.RtlUpcaseUnicodeChar
[PSXDLL.dll]RtlUpcaseUnicodeToMultiByteN -> NTDLL.RtlUpcaseUnicodeToMultiByteN
[PSXDLL.dll]RtlZeroMemory -> NTDLL.RtlZeroMemory