Timo Kreuzer
e668a1ae2f
syscalldump: fix output of apfnSimpleCall array on 64 bit
...
svn path=/trunk/; revision=32971
2008-04-15 01:03:15 +00:00
Timo Kreuzer
786cf453f1
few fixes and simplifications for syscalldump. I hope it will now also work with 64 bits stuff.
...
svn path=/trunk/; revision=32970
2008-04-15 00:15:14 +00:00
Timo Kreuzer
c7ae31aabf
syscalldump: use debghelp function to get the address inside the file image. Hopefully it supports x64 now ;-)
...
svn path=/trunk/; revision=32933
2008-04-12 21:14:47 +00:00
Timo Kreuzer
4f6b034f60
make syscalldump dump the names of the functions in apfnSimpleCall array.
...
svn path=/trunk/; revision=32690
2008-03-15 03:08:30 +00:00
Timo Kreuzer
68dbbc3eaf
- enumerate symbols instead of simple lookup, this makes the program slow, but you can now see if an adress has more than one name
...
svn path=/trunk/; revision=31456
2007-12-27 03:42:56 +00:00
Timo Kreuzer
f9840d8e29
- fix section pointer calculation
...
- print parameter byte count from W32pArgumentTable
- use value of W32pServiceLimit for the loop
svn path=/trunk/; revision=31450
2007-12-26 17:57:53 +00:00
Timo Kreuzer
c9dc5d76f8
syscall dumper for win32k that also works on vista.
...
You need dbghelp.dll and symsrv.dll. The ones from syscall lister (http://www.openrce.org/blog/view/808/Syscall_lister ) work fine, the ones shipped with windows don't.
todo: support x64
svn path=/trunk/; revision=31340
2007-12-19 21:48:15 +00:00
