🚀 go-pugleaf

Hi,

    I'm using StackWalk method to get stack info and plannig to use
BorDebug.dll to resolve symbol... names. I have a problem.

    Stackwalk returns an address (i think an real addres at addrFlat mode)
and i don't know to convert it to offseted (logical) address. I resolved
some symbols from .tds file via BorDebug.dll and still working to understand
how it works.

    How can i convert real (flat) address to logical addres ?;
    I can get the names of procedures from .tds file by iterating and also
can get offset  values. How can i find the related procedure name by having
real address.

    Is there any documentation about these subjects ?

    I'm using VirtualQuery to get MEMORY_BASIC_INFORMATION and it's
AllocationBase for base addr.

    // addr is the search addr of stack that returned from StackWalk

    rva = addr - AllocationBase; // RVA is offset from module load address

    than examine the returned sections from VirtualQuery, we can find the
Segment and Offset values. Anyway, the found segment is right but offset is
little big number (like 0x15BE6). I can't find this offset in .tds file ,
the related procedures offset seems to be

 10. sub section : BORDEBUG_SSTGLOBALSYM
      Module  : 00000000
      Offset  : 0000E654
      Size    : 0002896C
      symOffset: 0000E674
      symLength: 00000008
                  GPROCREF: DoSomething
                    refSymOffset  :0000
                    browserOffset :0000
                    codeSegment   :0001
                    codeOffset    :0C74


my mind really is confused. how can i translate real address to logical
address ? or am i examing .tds file in wrong way ... ?

anything will help....
___________________________________
Eyyub Volkan �ektimur
Proya Software & Trade Inc.
Head of Core Development Department