All geek questions in one place

How to interpret a visual studio column?

>    vcam.ax!CopyMediaType()  + 0x49 bytes    
     vcam.ax!CMediaType::Set()  + 0x41 bytes    
     vcam.ax!CMediaType::operator=()  + 0x2f bytes    
     vcam.ax!CVCamStream::SetFormat(_AMMediaType * pmt=0x00000000)  Line 201    C++
     FlashPlayer.exe!005641be()

Can someone explain the above line by line?

+3
source share
1 answer

This means that the instruction pointer is in the vcam.ax executable file, in the CopyMediaType () function, and the next operation is 0x48 (= 73) bytes of machine code in the function.

This function is called from the vcam.ax executable, the Set method of the CMediaType object, and the return address is 0x41 bytes of code into the function.

Etc.

FlashPlayer.exe does not have debugging symbols, so it cannot tell you what function the call originated in, all it can say is the return address. This is the absolute return address in the code from FlashPlazer.exe

SetFormat , _AMMediaType. NULL.

, . operator = , , , . , SetFormat ++, .

+3

Source: https://habr.com/ru/post/1767762/

More articles:


All Articles