Re: Finding Function in IAT tables
naveed <[email protected]> Fri, 26 May 2006 10:12:15 +0500
| Newsgroups | gmane.comp.security.full-disclosure,gmane.comp.security.programming,gmane.comp.security.vulnerabilities |
|---|---|
| Message-ID | <[email protected]> |
--===============1202301935== Content-Type: multipart/alternative; boundary="----=_Part_2773_29829093.1148620335731" ------=_Part_2773_29829093.1148620335731 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline open the DLL in IDA and you can view all its imports in Imports tab On 5/22/06, Andres Molinetti <[email protected]> wrote: > > Hi, > > I want to find if a specific function is defined in a given set of > dll's > IAT (Import Address Table). > > Does anyone know a tool to perform this check? > > Regards, > > Andy > > _________________________________________________________________ > =BFEst=E1s pensando en cambiar de coche? Todas los modelos de serie y ext= ras > en > MSN Motor. http://motor.msn.es/researchcentre/ > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > ------=_Part_2773_29829093.1148620335731 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline open the DLL in IDA and you can view all its imports in Imports tab<br><br>= <div><span class=3D"gmail_quote">On 5/22/06, <b class=3D"gmail_sendername">= Andres Molinetti</b> <<a href=3D"mailto:[email protected]">andym= [email protected] </a>> wrote:</span><blockquote class=3D"gmail_quote" style=3D"border-lef= t: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1= ex;">Hi,<br><br> I want to find if a specific function is defin= ed in a given set of dll's <br>IAT (Import Address Table).<br><br> Does anyone know a tool= to perform this check?<br><br> Regards,<br><br>Andy<br><br>___= ______________________________________________________________<br>=BFEst=E1= s pensando en cambiar de coche? Todas los modelos de serie y extras en <br>MSN Motor. <a href=3D"http://motor.msn.es/researchcentre/">http://motor= .msn.es/researchcentre/</a><br><br>________________________________________= _______<br>Full-Disclosure - We believe in it.<br>Charter: <a href=3D"http:= //lists.grok.org.uk/full-disclosure-charter.html"> http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and spo= nsored by Secunia - <a href=3D"http://secunia.com/">http://secunia.com/</a>= <br></blockquote></div><br> ------=_Part_2773_29829093.1148620335731-- --===============1202301935== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ --===============1202301935==--