Reverse Engineering RET Homepage RET Members Reverse Engineering Projects Reverse Engineering Papers Reversing Challenges Reverser Tools RET Re-Search Engine Reverse Engineering Forum Reverse Engineering Links

Go Back   Reverse Engineering Team Board > Reverse Engineering Board > Reverse Code Engineering
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Thread Tools Display Modes
Old 05-07-2005, 08:00 AM
rvjr rvjr is offline
Junior Member
Join Date: May 2005
Posts: 1


I'm currently trying to use the 'HTCcamera1.dll' on my PocketLoox to take photographs with the integrated camera, but it is quite hard to guess the parameters of all functions. The init and deinit functions seemed to work till now. I also tried to replace the dll by another one (written by myself) which exports the same functions and I recorded the calls with their parameters to the dll, but I still couldn't guess how long the parameters were.

Is it probably possible to get this information out of the disassembly of the dll? Has someone experiences with that?

Rainer jr.

PS: should I post the dll here?
Reply With Quote
Old 05-10-2005, 10:54 AM
AndreaGeddon AndreaGeddon is offline
Join Date: Dec 2002
Location: Italy
Posts: 42

if you use Ida, it will resolve parameters for you
you can see which parameters are passed simply by looking the code in the procedure.
That is, in the disassembly you see various references to [EBP + xx], these are accesses to function parameters. First param is in ebp+8, second in ebp+0xC and so on, ida will resolve them for you and will display it at the beginning of the function along with local variables (that are ebp - xx). This is the way usually functions are compiled, sometimes due to optimization or convention call you could find a different form.
Once you find the parameters then you must understand the type and meaning of the requested parameters, and this can be a bit difficult
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.