I write a a test program to get the dll name loaded by an execute program

invoke EnumProcessModule ...
invoke GetModuleFileName ....

But GetLastError always prompt me partly executing ReadProcessMemory or WriteProcessMory .

my program
Posted on 2003-05-02 11:07:59 by lbxxy
Checked your code, found no calls to WPM or RPM there? But if it is WPM or RPM failing I would assume that you don't have rights to the memoryarea or it is an unaccessible memoryarea... Check what error GetLastError returns and look it up. If it is accessrights try VirtualProtect(EX)
Posted on 2003-05-02 16:39:28 by SFP
This small tool displays all DLLs that linked to the executable:
Posted on 2003-05-03 03:33:09 by Vortex
In addition, there's a program called DumpPe. It'll display a great deal of information about PE executables.
Posted on 2003-05-03 11:24:02 by Canite