Index
> Windows > To know what API used |
| Author |
|
|
cod3b453 07 May 2015, 16:57
On a good day, you can see the libraries/APIs used from the import section (it lists DLLs and their respective APIs) though not all are necessarily used. On a bad day, you'll only see the GetProcAddress/LoadLibrary type functions which dynamically lookup and call; if you're lucky, you'll still be able to see the API strings in the data sections.
After this, you're into disassembling/reverse engineering to uncover obfuscated strings or interrupts/calls (int/syscall). |
|||
07 May 2015, 16:57 |
|
|
l4m2 08 May 2015, 16:05
cod3b453 wrote: On a good day, you can see the libraries/APIs used from the import section (it lists DLLs and their respective APIs) though not all are necessarily used. On a bad day, you'll only see the GetProcAddress/LoadLibrary type functions which dynamically lookup and call; if you're lucky, you'll still be able to see the API strings in the data sections. |
|||
|
08 May 2015, 16:05 |
|
< Last Thread | Next Thread > |
Forum Rules:
|