VxD versions in XP (and in DOS)

[go98]

Both DumpLX and MiTec EXE Explorer display full vxd headers including the DDK version.

See also: VXD files structure and disassembly - Windows 9x Member Projects - MSFN Forum for documentation links.

 

Anyone knows of any good downloadable vxd disassembler? I never saw one, had to make my own...vxd is not strictly LE format.

[jaclaz]

Anyone knows of any good downloadable vxd disassembler? I never saw one, had to make my own...vxd is not strictly LE format.

 

DumpLX provides a (I presume primitive ) disassembler:

http://www.msfn.org/board/topic/172894-windows-95-usb-support-and-the-task-of-ntkernvxd/

http://www.msfn.org/board/topic/172894-windows-95-usb-support-and-the-task-of-ntkernvxd/?p=1087484

 

jaclaz

[dencorso]

Find yourself IDA Free v. 4.1. (It's a DOS verson that can run in the DOS box).

Load the VXD in 4.1 free (using it's LX loader), save the database, and exit.

Then load the database in IDA Free 4.3 (or later) and it'll offer to to upgrade it... accept, and then save it.

Now you can use the 4.3 GUI with the VXD LE - cool, ain't it?

There'll be an error about a missing file, ntddk.til (only available in full version), but that never gave me any grief.

[go98]

Ha ha, Dencorso, you've been around for some time to have found out that...thanks for the tip, I will have a look, maybe it can complement my own tool...anything that can further simplify the task is good. However, it was partly because of IDA I decided to make my own disassembler, I wasn't satisfied with how it works (at least the free version).

 

Jaclaz, thanks for the quicker-than-upstart-of-windows-7 response

[dencorso]

Here is a maintenance update of VxDProps.exe... the new version is 1.0.0.1, because changes are really minor. Here's what's new:

 

1.) Bugfix: now Language Neutral VxD's are described as such.

2.) New feature: now the DDK Version is also given.

VxDProps_1001.7z