If I have information such as:
AppName: myapp.exe AppVer: x.x.x.x ModName: kernel32.dll ModVer: 5.1.2600.3541 Offset: 00012a6b
Is it possible for me to determine which function exists at offset 00012a6b in kernel32.dll?
they are called dll viewers. this is just one example from a quick web search. but yes they exist
http://www.nirsoft.net/utils/dll_export_viewer.html
Run windbg, download the application and run
ln address
in the debugger and it will print the closest character.
Source: https://habr.com/ru/post/1714218/More articles:Change Background Image IDE Visual Studio.Net 2008 - visual-studioHow to save a font in an inherited text box? - c #Как сохранить элементы из CheckBoxList в FormView? - c#How high and wide will NSString write? - objective-cHow to use NSCollectionView and Outlets correctly? - objective-cDynamic method overriding or observation when calling a method at runtime? - c #Rapid Web Application Development with Web Toolkit - toolkitScala, animation and graphical user interface - user-interfaceScreen Screening Results - pythonVSTS Database Schema Comparison Does Not Save Comments - database-toolsAll Articles