assembly - How to find addresses that a program used? -


i want find memory addresses exe file uses. have exe file , want have list of addresses uses.

this must done statically , without running executable itself. can me please?

also, if know dynamic way please tell me.

you must exe header. there list of addresses loader must adapt relative base address when executable run. called relocation table. when exe via disassembler ida can assume load address or exe can specify it.

normally addresses relative, if find address once, it's not guaranteed in same place. if program written or compiled position independent code, doesn't rely on absolute address.

just disassembling can @ tools ida or similar.


Comments

Post a Comment

Popular posts from this blog

c# - Operator '==' incompatible with operand types 'Guid' and 'Guid' using DynamicExpression.ParseLambda<T, bool> -

i'm using dynamic linq library , there source code , basic docu , nuget version pm> install-package dynamiclinq i'm trying construct clause involves guids i have tried string "id == @0" . parameter array object[] value ( guid xxxx ) var whereclausesb = buildlogicalkeywhereclause2(entity, logicalkey); //build string var parms = buildparamarray(entity, logicalkey); // object[] var wherelambda = ofsi.bos.core.dynamicexpression.parselambda<t, bool>(whereclausesb.tostring(),parms); //parse an exception thrown in dynamicexpression.parselambda operator '==' incompatible operand types 'guid' , 'guid' i have tried guid , string.(fail) i tried , "id = @0" (fail). string == string works, int32==int32 not guid == guid not any ideas? try using equals method instead of == operator in string: "id.equals(@0)"
Read more