Log in

View Full Version : VXD Files


markh51
June 16th, 2004, 08:16
I have a app which makes calls to a VXD file, so I opened the VXD file in a disassembler to find there were no strings/imports or anything.

How do I go about to use softice to watch the VXD file, or is there some other tool which extracts things from the VXD file.

Any help with regards to these files would be appreciated, as I have never came across these files before.

Cheers.

Fake51
June 16th, 2004, 09:21
Search, I guess. No wait, let me just make that clear: search for docs on vxd structure. Iczelion has info on vxd's, go there too. And disassemble the vxd's in IDA. It should show you the calls the vxd makes. And did I mention you should SEARCH on google?

Fake

markh51
June 16th, 2004, 10:32
I have already searched on google using various search terms, but did not find anything interesting within the first 10 pages.

Thats why I asked !!!

Kayaker
June 16th, 2004, 10:51
Hi

Nothing interesting or nothing understandable? Fake gave you the best suggestions, read Iczelion's VxD tutorials for a basic understanding of how vxd's are constructed, and use IDA to disassemble them. You shouldn't really need much more than that except for time to read and absorb all the info.

Kayaker

dELTA
June 16th, 2004, 18:21
Also, blindly screening the first 10 google hits for an exact solution to one's problem and then giving up if it ain't there isn't exactly a winning strategy either...

markh51
June 17th, 2004, 01:15
No, I meant 10 pages as in "10 pages" not the first 10 results, I seach through about 200 results.

Fake51
June 17th, 2004, 07:24
Here's some old files on vxd's I had lying around. One of em is by Griyo and has to do with virii. I removed the source and virii info from it, the rest is usable. Apart from this, go with Icz tuts.

Fake

markh51
June 17th, 2004, 07:31
Thanks for that