这是我的问题。我正在尝试学习如何使用OllyDBG在汇编中进行调试。通常,当一个字符串在应用程序中时,我可以找到指向它的东西,然而,这个字符串来自资源文件(在进行WinAPI编程时,使用了一个资源.rc)。因此,考虑到它在资源数据中,我如何找到在反汇编中调用该字符串的位置?
谢谢
这是我的问题。我正在尝试学习如何使用OllyDBG在汇编中进行调试。通常,当一个字符串在应用程序中时,我可以找到指向它的东西,然而,这个字符串来自资源文件(在进行WinAPI编程时,使用了一个资源.rc)。因此,考虑到它在资源数据中,我如何找到在反汇编中调用该字符串的位置?
谢谢
Put breakpoint to LoadStringW and wait this string. (Of course conditional BP is better than repeatedly press [F9])
但最好先进行静态分析(反汇编文件),然后在需要时使用OllyDbg对其进行调试。
例如,在静态分析过程中,您可以找到所有LoadStringW调用,并找到哪个调用根据其ID加载字符串。
您应该使用一些资源编辑器检查字符串表(例如ResEdit)并找到您正在搜索的字符串的ID。然后,您应该在LoadString函数调用上加上break,并检查它加载的ID。
I m getting this linker error. I know a way around it, but it s bugging me because another part of the project s linking fine and it s designed almost identically. First, I have namespace LCD. Then I ...
I have been searching for sample code creating iterator for my own container, but I haven t really found a good example. I know this been asked before (Creating my own Iterators) but didn t see any ...
Is there an equivalent to tidy for HTML code for C++? I have searched on the internet, but I find nothing but C++ wrappers for tidy, etc... I think the keyword tidy is what has me hung up. I am ...
I m new to C++ and am wondering how much time I should invest in learning how to implement template classes. Are they widely used in industry, or is this something I should move through quickly?
Given a 10 digit Telephone Number, we have to print all possible strings created from that. The mapping of the numbers is the one as exactly on a phone s keypad. i.e. for 1,0-> No Letter for 2->...
Why is it when i do the following i get errors when relating to with wchar_t? namespace Foo { typedef std::wstring String; } Now i declare all my strings as Foo::String through out the program, ...
I cannot figure out how to marshal a C++ CBitmap to a C# Bitmap or Image class. My import looks like this: [DllImport(@"test.dll", CharSet = CharSet.Unicode)] public static extern IntPtr ...
Is it possible to check with the means of pure X11/Xlib only whether the given window is iconified/minimized, and, if it is, how?