Hi all,
Anyone knows a method to identify which functions in the Kernel32.dll makes an I/O?.
eg: WriteFile and ReadFile makes I/O, but what about those undocumented functions (with cryptic names) like

Greets and thanks.
Posted on 2003-04-30 07:05:09 by r00t
like... what? :)
Posted on 2003-04-30 07:19:59 by f0dder
I don't see any functions named Greets or thanks exported from kernel32.dll on my system...
Posted on 2003-04-30 12:18:30 by Sephiroth3
Every function exported by Kernel32 is in the Kernel32.dll file so you can get the text versions of the functions from that with a hex editor and a bit of ingenuity. I originally started to learn the API by dumping the function lists from the bigger api files. If you want to know which functions of the Kernel are exported you can check the PE, it will contain a list of each api's function called and the dll it's called from as well.

Attached is a full list of exportable functions from Kernel32.dll version 5.0.2195.6079
Posted on 2003-04-30 12:31:02 by donkey
Sorry for the incomplete post.
Anyways i've solved the problem.

Posted on 2003-04-30 22:47:04 by r00t