Questions tagged [dll]

Dynamic-link library, or DLL, is Microsoft's implementation of the shared library concept in the Microsoft Windows and OS/2 operating systems.

Dynamic-link library, or DLL, is Microsoft's implementation of the shared library concept in the Microsoft Windows and OS/2 operating systems. The file formats for DLLs are the same as for files — that is, Portable Executable (PE) for 32-bit and 64-bit Windows, and New Executable (NE) for 16-bit Windows. DLLs can contain code, data, and resources, in any combination.

216 questions
8
votes
2 answers

How to modify/replace a non exported function in a native code dll

I disassembled a misbehaving dll with IDA and identified the faulty code. Now I want to go one step further and replace the function with a self-written, hopefully less faulty one. The dll I'm talking about is written in C/C++ and the function in…
user2011659
  • 359
  • 1
  • 4
  • 8
2
votes
0 answers

Can't view instructions inside the dll main function

I have a dll that is loaded by the program i'm reverse engineering, this dll only contains .text section without any exported functions, my guess is that dll main function contains something interesting. I have a breakpoint trigger when the dll is…
asdfs99
  • 41
  • 3
2
votes
1 answer

Where can be assembly-csharp.dll decrypted?

So I have an android game. Its Assembly-CSharp.dll causes .NET Reflector to show File is not a portable executable. DOS header does not contain 'MZ' signature It's encrypted. The app seems to decrypt that assembly at app launch time. So I used…
Ris
  • 165
  • 1
  • 5
1
vote
1 answer

DLL obfuscator - what kind of obfuscator is this?

when I am looking for packet editor, I found open project on http://www.packeteditor.com/ when I learn how it works, I see that the application is injecting a dll named WSPE.dat, when I load this WSPE.dat to ida pro, I found it was a dll that has…
0
votes
0 answers

Adding an export entry into dll file

There is an dll file which i need to edit, Using PE Explorer option, Export Viewer i can see a long list of items and i suppose each entry is called "Export Function". Using notepad++ i can access those items but since is a binary file any edit to…
wekos
  • 1
  • 1
0
votes
1 answer

Finding other segments of a manually mapped DLL having found the .text segment

I've been able to locate the .text section of the module, knowing the base address of that section and its size how would I be able to find the other segments of the DLL, like .rdata, .data, .bss, etc.
John Wayne
  • 115
  • 6