Search code examples
delphifunctiongetprocaddress

Get procedure/function address of another processe

I'm writing a program that show the thread list of all opened process.

With a similiar program (Process Explorer), I can see the thread list, with some informations, like Thread ID, Priority, Start address, etc.

I'm able to retrieve all these informations too, but Process Explorer display Start address like this:

ModuleName!ProcedureName+$1111

How can I get ProcedureName without injecting a dll to use GetProcAddress?

Solution

  • You can use the StackWalk64 WinAPi function which is part of the DbgHelp, if you want a delphi sample of how use this function try the asmprofiler project.