I have a app which makes calls to a VXD file, so I opened the VXD file in a disassembler to find there were no strings/imports or anything.

How do I go about to use softice to watch the VXD file, or is there some other tool which extracts things from the VXD file.

Any help with regards to these files would be appreciated, as I have never came across these files before.

Cheers.

Search, I guess. No wait, let me just make that clear: search for docs on vxd structure. Iczelion has info on vxd's, go there too. And disassemble the vxd's in IDA. It should show you the calls the vxd makes. And did I mention you should SEARCH on google?

Fake

I have already searched on google using various search terms, but did not find anything interesting within the first 10 pages.

Thats why I asked !!!

Hi

Nothing interesting or nothing understandable? Fake gave you the best suggestions, read Iczelion's VxD tutorials for a basic understanding of how vxd's are constructed, and use IDA to disassemble them. You shouldn't really need much more than that except for time to read and absorb all the info.

Kayaker

Also, blindly screening the first 10 google hits for an exact solution to one's problem and then giving up if it ain't there isn't exactly a winning strategy either...

No, I meant 10 pages as in "10 pages" not the first 10 results, I seach through about 200 results.

Here's some old files on vxd's I had lying around. One of em is by Griyo and has to do with virii. I removed the source and virii info from it, the rest is usable. Apart from this, go with Icz tuts.

Fake

Thanks for that