سؤال

I'm writing a program that show the thread list of all opened process.

With a similiar program (Process Explorer), I can see the thread list, with some informations, like Thread ID, Priority, Start address, etc.

I'm able to retrieve all these informations too, but Process Explorer display Start address like this:

ModuleName!ProcedureName+$1111

How can I get ProcedureName without injecting a dll to use GetProcAddress?

هل كانت مفيدة؟

المحلول

You can use the StackWalk64 WinAPi function which is part of the DbgHelp, if you want a delphi sample of how use this function try the asmprofiler project.

مرخصة بموجب: CC-BY-SA مع الإسناد
لا تنتمي إلى StackOverflow
scroll top