Here's a little updated tool of "API Adresses Finder" ... It has now the ability to do the reverse
job (Function Address to Name conversion).
It's really easy to use it, just choose first what type of conversion you'd like to do (Name to
Addr or Addr to Name), after that enter the dll where the function is stored and then enter
either the Function Name or Address and finally press Convert.
Here are two examples :
1- Example dealing with first choice (Retrieve Function Address from its Name)
---------------------------------------------------------------------------
Type this info :
DLL Name : kernel32.dll
Function Name : GetVersion
The result will be (for me) :
Function Address : 7C8114AB
2- Example dealing with second choice (Retrieve Function Name from its Address)
----------------------------------------------------------------------------
Type this info :
DLL Name : user32.dll
Function Address : 77D504EA
The result will be (for me) :
Function Name : MessageBoxA
P.S : In the Addr to Func conversion you'll notice that the program waits for about 10 seconds
when you enter wrong Function address, it's because the program tries to look for this
incorrect Address in Export Table ...
.jpg)
What's new?
- Locating system directory bug fixed (didn't work with win9x before).
http://bbs.pediy.com/upload/2006/10/files/addr_func_converter_0.2.1.zip