Disassembly Dll ~upd~ Today

MOV EAX, [global_var] PUSH EAX CALL internal_function ADD ESP, 0x4 RET

Disassembling a DLL is legal under specific circumstances: disassembly dll

Unlike an EXE, a DLL has many entry points (its exports). The analyst must manually determine which function is relevant, as DllMain often just returns TRUE . MOV EAX, [global_var] PUSH EAX CALL internal_function ADD