Hi all,
Here's a little updated tool of "API Adresses Finder" ... It has now the ability to do the reverse
job (Function Address to Name conversion).
It's really easy to use it, just choose first what type of conversion you'd like to do (Name to
Addr or Addr to Name), after that enter the dll where the function is stored and then enter
either the Function Name or Address and finally press Convert.
Here are two examples :

1- Example dealing with first choice (Retrieve Function Address from its Name)
   ---------------------------------------------------------------------------
Type this info :
   DLL Name      : kernel32.dll
   Function Name : GetVersion
The result will be (for me) :
   Function Address : 7C8114AB

2- Example dealing with second choice (Retrieve Function Name from its Address)
   ----------------------------------------------------------------------------
Type this info :
   DLL Name         : user32.dll
   Function Address : 77D504EA
The result will be (for me) :
   Function Name : MessageBoxA

P.S : In the Addr to Func conversion you'll notice that the program waits for about 10 seconds
      when you enter wrong Function address, it's because the program tries to look for this
      incorrect Address in Export Table ...



附件:addr_func_converter.zip

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)