Article View: borland.public.cppbuilder.nativeapi
Article #14607Re: BorDebug.dll & StackWalk
From: Eyyub Volkan �ektimur
Date: Mon, 04 Aug 2003 17:50
Date: Mon, 04 Aug 2003 17:50
18 lines
2070 bytes
2070 bytes
Firstly thank for interest; I've cracked PE-Header and get the sections from struct. In section struct there are start address of sections and end address'. So we can find that which segment contains the address. I ensure that the address is on 1. segment (also looked and confirmed by .map file) and the 1. segment begins from 0x1000 offset. so i subtract it (0x4980-0x1000=0x3980) from the segment's offset. but still this address is meaningless. when i cracked .tds file via bordebug.dll, called procedure (DoSomething()) is in one of the section that starts from (about 0xD400) (i'm not sure about the address because i'm at home now, but something like that) and the sections offset is bigger than 0x3980 . also there is an function offset (about 0xD80) . Anyway i couldn't yet understand how can we get symbol name (proc.name) from .tds file by getting address via StackWalk. BorDebug.dll publishes all the needed functions but i couldn't find the way...
Technical Details
Message-ID:
<3f2e9baa@newsgroups.borland.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newshosting.com!news-xfer1.atl.newshosting.com!nntp-relay.ihug.net!newsfeeds.ihug.co.nz!ihug.co.nz!newsgroups.borland.com!not-for-mailReferences:
<3f2e627a@newsgroups.borland.com> <3f2e74c7@newsgroups.borland.com> <3f2e8540@newsgroups.borland.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10cc67,bb1b3ffe18d74dde X-Google-Attributes: gid10cc67,public X-Google-ArrivalTime: 2003-08-04 11:04:17 PST From: "Eyyub Volkan �ektimur" <evcektimur@prokon.com.tr> Newsgroups: borland.public.cppbuilder.nativeapi References: <3f2e627a@newsgroups.borland.com> <3f2e74c7@newsgroups.borland.com> <3f2e8540@newsgroups.borland.com> Subject: Re: BorDebug.dll & StackWalk Date: Mon, 4 Aug 2003 20:50:04 +0300 Lines: 21 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 NNTP-Posting-Host: 213.204.88.64 Message-ID: <3f2e9baa@newsgroups.borland.com> X-Trace: newsgroups.borland.com 1060019114 213.204.88.64 (4 Aug 2003 10:45:14 -0700) Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newshosting.com!news-xfer1.atl.newshosting.com!nntp-relay.ihug.net!newsfeeds.ihug.co.nz!ihug.co.nz!newsgroups.borland.com!not-for-mail