Revision history [back]

The method to identify the system functions employed by applications utilizing dynamic loading involves using a profiling tool such as Process Monitor or Dependency Walker to monitor the application's execution and identify the system DLLs it's loading at runtime. Once the dynamic libraries are identified, one can analyze them using tools such as IDA Pro or OllyDbg to identify the system functions employed by the application. Alternatively, one can use static analysis tools such as JEB or Ghidra to examine the application's code and identify the system functions it's calling.