Got a stack trace that ends in an unloaded module. To make sure the stack makes sense I would like to disassemble the unloaded module (in other to check whether a call can start on the address given (access violation: attempt to read from an invalid address)). I can load the module (windbg):
.reload Unloaded.Dll=base,size
But after this reload I’m not able to disassemble the code. Is there a way to accomplish this? Thanks in advance for any help! GMore
Tip from Marc Sherman (see comments above): With windbg your can load a dll as a crash dump. After the load type the "lm" command and disassemble on the address wanted relative to the base given.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With