Hi all,
Here's a little updated tool of "API Adresses Finder" ... It has now the ability to do the reverse
job (Function Address to Name conversion).
It's really easy to use it, just choose first what type of conversion you'd like to do (Name to
Addr or Addr to Name), after that enter the dll where the function is stored and then enter
either the Function Name or Address and finally press Convert.
Here are two examples :

1- Example dealing with first choice (Retrieve Function Address from its Name)
   ---------------------------------------------------------------------------
Type this info :
   DLL Name      : kernel32.dll
   Function Name : GetVersion
The result will be (for me) :
   Function Address : 7C8114AB

2- Example dealing with second choice (Retrieve Function Name from its Address)
   ----------------------------------------------------------------------------
Type this info :
   DLL Name         : user32.dll
   Function Address : 77D504EA
The result will be (for me) :
   Function Name : MessageBoxA

P.S : In the Addr to Func conversion you'll notice that the program waits for about 10 seconds
      when you enter wrong Function address, it's because the program tries to look for this
      incorrect Address in Export Table ...



附件:addr_func_converter.zip

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课