Function Parameters
-
Hi How to know the parameters of an exported function from a dll. like NTDeleteFile exported from NTDLL.dll Thanks :rose:
-
Hi How to know the parameters of an exported function from a dll. like NTDeleteFile exported from NTDLL.dll Thanks :rose:
It's quite simple, you just disassemble the function and work it out from the stack. ;P Seriously, why do you want to use
NtDeleteFile
rather than the Win32DeleteFile
?NtDeleteFile
knows nothing of current directories and requires a fully specified path, in NT object manager format. In general, it's better to use the Win32 functions. If you're looking to reuse a DLL for which you don't have documentation, my advice is not to bother. If the function is undocumented, you should consider it to be an implementation detail which could change in future versions of the DLL. Don't use it. -
Hi How to know the parameters of an exported function from a dll. like NTDeleteFile exported from NTDLL.dll Thanks :rose:
http://undocumented.ntinternals.net/UserMode/Undocumented%20Functions/NT%20Objects/File/NtDeleteFile.html[^] Don't try it, just do it! ;-)