flat assembler
Message board for the users of flat assembler.

Index > Windows > DEBUG_PROCESS how get DLL functions address from lpBaseOfDll

Author
Thread Post new topic Reply to topic
Roman



Joined: 21 Apr 2012
Posts: 1766
Roman 05 Nov 2014, 06:31
Windows 7.
I need get address some function from DLL.
In LOAD_DLL_DEBUG_INFO.lpBaseOfDll and LOAD_DLL_DEBUG_INFO.hFile i have values, but GetProcAddress return NULL.

А теперь по русски. Мне надо получить адрес функции из DLL.
Я запускаю сторонее приложение через CreateProcess в режиме DEBUG_PROCESS.
Я смог получить имена DLL которые грузит сторонний процес, но не могу получить адрес функции из DLL.
В LOAD_DLL_DEBUG_INFO.lpBaseOfDll и LOAD_DLL_DEBUG_INFO.hFile есть значения. Но подставив их в GetProcAddress я получаю NULL.
Тоесть GetProcAddress не дает адрес функции.
Как получить адрес функции ?
https://www.youtube.com/watch?v=mbFzhjb1m8Q&feature=youtu.be
Post 05 Nov 2014, 06:31
View user's profile Send private message Reply with quote
tthsqe



Joined: 20 May 2009
Posts: 767
tthsqe 05 Nov 2014, 16:55
Hmm, that is strange. Are you sure that the function is actually in the exports section of the dll? Are you able to get the address of others functions in the same dll?
Post 05 Nov 2014, 16:55
View user's profile Send private message Reply with quote
Roman



Joined: 21 Apr 2012
Posts: 1766
Roman 05 Nov 2014, 20:22
Yes. I show in video. It`s Mantle32.dll
I reading about GetProcAddress , this function work in my process, but not another.
If i load Mantle32.dll and use GetProcAddress, i get address function, but not get from CreateProcess.
Post 05 Nov 2014, 20:22
View user's profile Send private message Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2024, Tomasz Grysztar. Also on GitHub, YouTube.

Website powered by rwasa.