English 中文(简体)
使用程序集调试资源中的字符串
原标题:Debugging string from resource with assembly

这是我的问题。我正在尝试学习如何使用OllyDBG在汇编中进行调试。通常,当一个字符串在应用程序中时,我可以找到指向它的东西,然而,这个字符串来自资源文件(在进行WinAPI编程时,使用了一个资源.rc)。因此,考虑到它在资源数据中,我如何找到在反汇编中调用该字符串的位置?

谢谢

最佳回答

Put breakpoint to LoadStringW and wait this string. (Of course conditional BP is better than repeatedly press [F9])

但最好先进行静态分析(反汇编文件),然后在需要时使用OllyDbg对其进行调试。

例如,在静态分析过程中,您可以找到所有LoadStringW调用,并找到哪个调用根据其ID加载字符串。

问题回答

您应该使用一些资源编辑器检查字符串表(例如ResEdit)并找到您正在搜索的字符串的ID。然后,您应该在LoadString函数调用上加上break,并检查它加载的ID。





相关问题
Undefined reference

I m getting this linker error. I know a way around it, but it s bugging me because another part of the project s linking fine and it s designed almost identically. First, I have namespace LCD. Then I ...

C++ Equivalent of Tidy

Is there an equivalent to tidy for HTML code for C++? I have searched on the internet, but I find nothing but C++ wrappers for tidy, etc... I think the keyword tidy is what has me hung up. I am ...

Template Classes in C++ ... a required skill set?

I m new to C++ and am wondering how much time I should invest in learning how to implement template classes. Are they widely used in industry, or is this something I should move through quickly?

Print possible strings created from a Number

Given a 10 digit Telephone Number, we have to print all possible strings created from that. The mapping of the numbers is the one as exactly on a phone s keypad. i.e. for 1,0-> No Letter for 2->...

typedef ing STL wstring

Why is it when i do the following i get errors when relating to with wchar_t? namespace Foo { typedef std::wstring String; } Now i declare all my strings as Foo::String through out the program, ...

C# Marshal / Pinvoke CBitmap?

I cannot figure out how to marshal a C++ CBitmap to a C# Bitmap or Image class. My import looks like this: [DllImport(@"test.dll", CharSet = CharSet.Unicode)] public static extern IntPtr ...

Window iconification status via Xlib

Is it possible to check with the means of pure X11/Xlib only whether the given window is iconified/minimized, and, if it is, how?

热门标签