If I have some information like:
AppName: myapp.exe
AppVer: x.x.x.x
ModName: kernel32.dll
ModVer: 5.1.2600.3541
Offset: 00012a6b
Is it possible for me to determine what function exists at offset 00012a6b in kernel32.dll?
start windbg, load your app and execute
ln address
in the debugger and it will print the closest symbol.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With