flat assembler
Message board for the users of flat assembler.

Index > Windows > Registers usage by Windows API

Author
Thread Post new topic Reply to topic
barmentalisk



Joined: 06 Sep 2005
Posts: 36
barmentalisk 01 Oct 2008, 11:49
Is there any document with description which registers does each API use?
I'm interested in APIs in WinXP.
Or the one way to find it - is decompilation of each function ?
Post 01 Oct 2008, 11:49
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 20303
Location: In your JS exploiting you and your system
revolution 01 Oct 2008, 11:56
All Windows APIs can/might/will use EAX, ECX and EDX at anytime. All other registers are preserved.
Post 01 Oct 2008, 11:56
View user's profile Send private message Visit poster's website Reply with quote
barmentalisk



Joined: 06 Sep 2005
Posts: 36
barmentalisk 01 Oct 2008, 12:18
Thank you. But that I already know.
I'd like to know if some API, for example, does not use EDX, how can I find it without decompillation of every API? Is anywhere such information?
Post 01 Oct 2008, 12:18
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 20303
Location: In your JS exploiting you and your system
revolution 01 Oct 2008, 12:24
I've never seen any official documentation and I doubt I ever will. The OS is written in HLL and the compiler generally doesn't tell you what functions are not using particular registers.

But, be that as it may, what you propose is risky. Your code can break at any time with a new security patch or service patch or upgrade or whatever. And what you might gain, if anything, is of dubious value.
Post 01 Oct 2008, 12:24
View user's profile Send private message Visit poster's website Reply with quote
barmentalisk



Joined: 06 Sep 2005
Posts: 36
barmentalisk 01 Oct 2008, 13:09
Thank you very much. Now I've got the idea Wink
You are a real brother-in-asm =).
Post 01 Oct 2008, 13:09
View user's profile Send private message Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2024, Tomasz Grysztar. Also on GitHub, YouTube.

Website powered by rwasa.