- Joined
- Jul 5, 2003
- Messages
- 198
Hi...
I am willing to make a Dissassembler... i need help
when i dissemble the text.exe file i get the following code.
in this code there are two functions called from user32 and kernel32
my question is, how can i found out which function is called...
401000 PUSH 0
401002 PUSH 403000
401007 PUSH 403013
40100C PUSH 0
40100E CALL DWORD PTR [402080] < -- how can i find out which function is called ??
401014 PUSH 0
401016 CALL DWORD PTR [402060] < -- how can i find out which function is called ??
40101C BYTE 0 DUP(16)
40102C BYTE 0 DUP(16)
40103C BYTE 0 DUP(16)
40104C BYTE 0 DUP(16)
40105C BYTE 0 DUP(16)
40106C BYTE 0 DUP(16)
40107C BYTE 0 DUP(16)
40108C BYTE 0 DUP(16)
40109C BYTE 0 DUP(16)
4010AC BYTE 0 DUP(16)
4010BC BYTE 0 DUP(16)
4010CC BYTE 0 DUP(16)
4010DC BYTE 0 DUP(16)
4010EC BYTE 0 DUP(16)
4010FC BYTE 0 DUP(16)
40110C BYTE 0 DUP(16)
I am willing to make a Dissassembler... i need help
when i dissemble the text.exe file i get the following code.
in this code there are two functions called from user32 and kernel32
my question is, how can i found out which function is called...
401000 PUSH 0
401002 PUSH 403000
401007 PUSH 403013
40100C PUSH 0
40100E CALL DWORD PTR [402080] < -- how can i find out which function is called ??
401014 PUSH 0
401016 CALL DWORD PTR [402060] < -- how can i find out which function is called ??
40101C BYTE 0 DUP(16)
40102C BYTE 0 DUP(16)
40103C BYTE 0 DUP(16)
40104C BYTE 0 DUP(16)
40105C BYTE 0 DUP(16)
40106C BYTE 0 DUP(16)
40107C BYTE 0 DUP(16)
40108C BYTE 0 DUP(16)
40109C BYTE 0 DUP(16)
4010AC BYTE 0 DUP(16)
4010BC BYTE 0 DUP(16)
4010CC BYTE 0 DUP(16)
4010DC BYTE 0 DUP(16)
4010EC BYTE 0 DUP(16)
4010FC BYTE 0 DUP(16)
40110C BYTE 0 DUP(16)