IMAGE_DIRECTORY_ENTRY_EXPORT is null

09/16/2016 23:55 .Verkauf´#1
hey guys,

some days before I created a dll in visual studio 2015.
Now I want to get the export table, to reach the function-names and addresses of these functions exported by the dll, like debuggers do(f.e. CE-Enumerate DLLS and Symbols, or x64dbg-Symbols)
I know its located in the IMAGE_OPTIONAL_HEADER at 0x60, but the pointer to the IMAGE_DIRECTORY_ENTRY_EXPORT is always 0x000000, that i cannot get symbol information.

Does anybody know how I can get the symbbols of my dll?

thanks
09/17/2016 00:20 Jeoni#2
Debuggers do not get the symbol names by the export table but by debugging symbols. They can be inlined in the compiled module (there is a data directory in the optional header for that, too) but in most cases they are outsourced to a .pdb file (at least under windows). If you want to get the symbols, you need to open and parse that file.
I'm sure with that information, you can find something using Google (haven't done this, so I can't tell you much more about it).
With best regards
Jeoni
09/17/2016 00:45 .Verkauf´#3
Thank you!