locked
PE format RRS feed

  • Question

  • Can someone help me with the PE format ? I got the names of all the exported functions (in DLL)  now I want their address. Here is the code: http://rafb.net/p/6pIGvE35.html

    I have to use GetProcAddress() or i can get them at the same time, along with their name ?
    Tuesday, March 24, 2009 2:46 PM

Answers

  • You don't need to know PE format
    Use Win32 Debug apis which do all the job.
    • Marked as answer by Co2r Tuesday, March 24, 2009 3:55 PM
    Tuesday, March 24, 2009 2:56 PM

All replies

  • You don't need to know PE format
    Use Win32 Debug apis which do all the job.
    • Marked as answer by Co2r Tuesday, March 24, 2009 3:55 PM
    Tuesday, March 24, 2009 2:56 PM
  • sorry but have you a link with "samples"/doc, I do not find much documentation and I am a beginner then it will be difficult.
    sorry to disturb you 
    Tuesday, March 24, 2009 3:59 PM
  • There is an article that explains the PE format and has sample code of processing it. I think it is a MSJ article. I forget the name of the article or the name of the sample program. The article is actually 2 or more articles; the first one was revised and improved. I hope you can find the article and sample.
    Sam Hobbs; see my SimpleSamples.Info
    Tuesday, March 24, 2009 11:07 PM