计算内存中导出函数位置的映射
我正在使用反汇编(当前是VS反汇编窗口)调试应用程序,主要是因为我没有正在调试的DLL的源代码/符号。
我试图找出 DLL 中的哪个函数正在调用我的代码。我怀疑(并想检查)它是否是导出函数。
使用调试器,我可以看到调用我的内存位置是“0x52CCCF94”。因此,根据我的理解,如果我可以知道每个导出函数被映射到哪里,我就可以知道哪个导出函数可能正在调用我的代码。
因此,如果我写的是正确的,我的问题是如何计算每个导出函数“入口点”(我可以在依赖项步行器中看到)到其在内存中的位置。 如果我写的完全是无稽之谈,有人可以指出我或给我指明正确的方向吗?
正如你所看到的,我有点像在黑暗中行走,试图摸索出路,并在路上尽可能多地学习。
非常感谢您的帮助! :-)
I'm debugging an application using disassember (currently VS disassembly window), mainly because I don't have the source code/symbols of DLL I'm debugging.
What I'm trying to find out is which function in the DLL is calling my code. I suspect (and want to check) if it is an exported function.
Using the debugger I can see that the memory location I'm being called from is "0x52CCCF94". So from what I understand, if I can tell where each exported function is being mapped to, I can tell which exported function might be calling my code.
So if what I wrote is correct, my question is how can I calculate each exported function "entry point" (that I can see in dependency walker) to its location in the memory.
If what I wrote is a complete nonsense, can someone point me out or set me in the correct direction?
As you can see I'm kinda walking in the dark trying to feel my way through and learn as much as I can on the way.
Thanks a lot for any help!!! :-)
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论