View Single Post
  #3  
Old 02-13-2005, 16:14
hajir
 
Posts: n/a
You can get name of Export Functions by using TDUMP.EXE (From Borland) or DUMPBIN.EXE (From Microsoft), but you can not find the arguments & return values in this manner.

If the DLL uses from _stdcall calling convention, you can see the disassemly of functions. Then try to find the return point of the function, at this location (return point) you will see ret n instruction. n/4 is the number of arguments passed to the function.
But if the DLL uses _cdecl calling convention, you should disassemble the application that calls these export functions. In this case, the no of pushes before function call or n/4 in the add esp,n after function call is the number of arguments.
Reply With Quote