Export Table Tester
Export Table Tester - Nacho_dj / ARTeam - Version 1.0.0
-------------------------------------------------------
This is a tool to test & practice to better understand how an export table works.
First, select a file, or drag & drop it over the tool. If it is a valid PE32 file and it contains an export table, all fields will be filled with the proper data.
Moving the cursor over any field will display the offset in the file where you can find the item pointed.
Then, select at any listbox the value required and more data will appear, also here you can use cursor to find file offsets.
As a sidenote, forwarded functions are those that won't be executed by the current module, since the address of function points to a string instead of an assembler instruction. That string is composed by two substrings separated by a dot: the first substring indicates the name of the module owner of the function name of the second substring.For instance: 'NTDLL.RtlDeleteCriticalSection' is found inside the export table of kernel32.dll, and this string is pointed by the address of the function 'DeleteCriticalSection'.So, in the case the function 'DeleteCriticalSection' of kernel32.dll is invoked, it will inform the system to load the NTDLL.DLL module and use its function named 'RtlDeleteCriticalSection'.
Thanks to LCF-AT for his always valuable help and the idea of building this little tool.
Coded in Delphi by Nacho_dj/ARTeam - 2012, December the 31th
要看懂有难度,E文很白菜5555555 路过支持下楼主在很多网站都能看见大大破解的东西 真心的说句实话 真心的看不懂啊 小菜我是俄语专业
页:
[1]