GitLab

Hello. Thank you for this great lib. I have a question about getOffset function. I know that i can to receive an offset of function, for example, ntdll!RtlAllocateHeap this way : addr = getOffset('ntdll!RtlAllocateHeap'). But then i want to set breakpoint at the exit of the procedure of this function and i need offset of 'ret'. How i can use getOffset function for this case? Or i need to use other way. At the picture you can see an example of 'ret' procedure.

Thank you for you help.