You wanna get all exported function in process, dll or window files, ...
In the case if you have dll files, you don't have the .h, .lib (Im focus C++ in window project, not C++ in linux projects), how do you use that dll?
I can introduce to you two tool. One is dll export, another is resource view. From this tool, that can help you easy to dump function address, function name, and another information ...
Using this tool can help you view resource in any dll files
Using this tool can help you export function in dll files (support 32 bits, 64 bits OS)
This utility displays the list of all exported functions and their virtual memory addresses for the specified DLL files. You can easily copy the memory address of the desired function, paste it into your debugger, and set a breakpoint for this memory address. When this function is called, the debugger will stop in the beginning of this function.
For example: If you want to break each time that a message box is going to be displayed, simply put breakpoints on the memory addresses of message-box functions: MessageBoxA, MessageBoxExA, and MessageBoxIndirectA (or MessageBoxW, MessageBoxExW, and MessageBoxIndirectW in unicode based applications) When one of the message-box functions is called, your debugger should break in the entry point of that function, and then you can look at call stack and go backward into the code that initiated this API call.
Have any question or discuss about this topic, leave your comment, we can discuss about it!
Have a nice day!
Zidane
0 comments:
Post a Comment