Re: BorDebug.dll & StackWalk

Article View: borland.public.cppbuilder.nativeapi

Article #14628

Back to borland.public.cppbuilder.nativeapi Previous Next

#14628

From: Russell Hind
Date: Tue, 05 Aug 2003 05:55

20 lines
1922 bytes

Michael Harris wrote:
> 
>     - find the base address of the loaded executable
>     - find the segment and offset of the piece of debug
>       info you are interested in.  This can be a procedure,
>       thunk, data, etc.
>     - crack the pe-header, and find out the base offset
>       of the segment you are interested in
>     - Now add the base address of the executable, the
>       base offset of the segment, and the offset, and
>       you will have the physical address where the item
>       you are interested in is loaded at runtime.
> 

If this doesn't help you, I'll try and dig out the test project I wrote 
that did this.

Thanks

Russell

Technical Details

Message-ID: <3f2f46cc@newsgroups.borland.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-08!supernews.com!small1.nntp.aus1.giganews.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeeds.ihug.co.nz!ihug.co.nz!newsgroups.borland.com!not-for-mail

References:

<3f2e627a@newsgroups.borland.com> <3f2e74c7@newsgroups.borland.com> <3f2e8540@newsgroups.borland.com> <3f2e9baa@newsgroups.borland.com> <3f2ead1a$1@newsgroups.borland.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10cc67,bb1b3ffe18d74dde
X-Google-Attributes: gid10cc67,public
X-Google-ArrivalTime: 2003-08-04 22:58:13 PST
Date: Tue, 05 Aug 2003 06:55:23 +0100
From: Russell Hind <unknown@unknown.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5b) Gecko/20030723 Thunderbird/0.1
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: borland.public.cppbuilder.nativeapi
Subject: Re: BorDebug.dll & StackWalk
References: <3f2e627a@newsgroups.borland.com> <3f2e74c7@newsgroups.borland.com> <3f2e8540@newsgroups.borland.com> <3f2e9baa@newsgroups.borland.com> <3f2ead1a$1@newsgroups.borland.com>
In-Reply-To: <3f2ead1a$1@newsgroups.borland.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 212.240.15.125
Message-ID: <3f2f46cc@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1060062924 212.240.15.125 (4 Aug 2003 22:55:24 -0700)
Lines: 21
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-08!supernews.com!small1.nntp.aus1.giganews.com!border1.nntp.aus1.giganews.com!nntp.giganews.com!newsfeeds.ihug.co.nz!ihug.co.nz!newsgroups.borland.com!not-for-mail

Reply to Parent Message