StackWalk64 and user data for unwinding (x64 stack)

Can I make a StackWalk64 download and use the RUNTIME_FUNCTION table retrieved by me?
The only way I found out is to download it using SymLoadModule64 when it is in use, very slow.

I also saw that StackWalk64 can get a function that will give it the corresponding RUNTIME_FUNCTION entry every time, but I need to implement the x64 UNWINDING algorithm, which is partially undocumented.

Can this be done using RtlInstallFunctionTableCallback or RtlAddFunctionTable ? Are they StackWalk64 to StackWalk64 ?
And if so, how? I could not find examples for this.

+4
source share

Source: https://habr.com/ru/post/1488169/


All Articles