码迷,mamicode.com
首页 > 其他好文 > 详细

CheatEngine查看PE header

时间:2019-10-12 11:05:59      阅读:130      评论:0      收藏:0      [点我收藏+]

标签:进程   ESS   locate   rect   bundle   star   assign   info   and   

先打开进程,炉石传说。

然后选择MemoryViewer

技术图片

在MemoryViewer界面,Tools菜单,然后选择Dissect PE headers

技术图片

 然后查看mono.dll的信息

0x357A0是新版本的

技术图片

 

这个页面还可以打开本地另外备份的mono.dll,然后查看

发现0x3535C

技术图片

 

右键选中界面的某一个函数名,然后copy everything。把内容放到notepad++。

https://www.cnblogs.com/chucklu/p/10244678.html

找到---Exports---开头的那一行,再搜索mono开头的文本,找到最后一行。

---Exports---
mono.dll:
1A2E - g_free
3535C - mono_add_internal_call
7ED22 - mono_alloc_special_static_data
5DC8B - mono_array_addr_with_size
19F12 - mono_array_class_get
60F66 - mono_array_clone
16475 - mono_array_element_size
60202 - mono_array_new
60014 - mono_array_new_full
5EF4E - mono_array_new_specific
12D04 - mono_assemblies_cleanup
11651 - mono_assemblies_init
12BB2 - mono_assembly_close
11675 - mono_assembly_fill_assembly_name
12CC5 - mono_assembly_foreach
1199D - mono_assembly_get_assemblyref
12D60 - mono_assembly_get_image
12D5A - mono_assembly_get_main
68029 - mono_assembly_get_object
115B0 - mono_assembly_getrootdir
11A73 - mono_assembly_invoke_load_hook
11B31 - mono_assembly_invoke_search_hook
13B9E - mono_assembly_load
120C8 - mono_assembly_load_from
11F3C - mono_assembly_load_from_full
13B71 - mono_assembly_load_full
12CB0 - mono_assembly_load_module
13BB6 - mono_assembly_load_reference
11A68 - mono_assembly_load_references
134F5 - mono_assembly_load_with_partial_name
12BA1 - mono_assembly_loaded
12B6B - mono_assembly_loaded_full
12716 - mono_assembly_name_parse
12FCC - mono_assembly_names_equal
13300 - mono_assembly_open
12FE1 - mono_assembly_open_full
12D4D - mono_assembly_set_main
1159D - mono_assembly_setrootdir
E8603 - mono_backtrace_from_context
CC77 - mono_bitset_alloc_size
CD94 - mono_bitset_clear
CDE2 - mono_bitset_clear_all
D116 - mono_bitset_clone
D152 - mono_bitset_copyto
CE40 - mono_bitset_count
D30B - mono_bitset_equal
CF3B - mono_bitset_find_first
D07A - mono_bitset_find_first_unset
CFEF - mono_bitset_find_last
CEFC - mono_bitset_find_start
D34A - mono_bitset_foreach
CCD1 - mono_bitset_free
D1ED - mono_bitset_intersection
D23D - mono_bitset_intersection_2
CE1A - mono_bitset_invert
CCB5 - mono_bitset_mem_new
CC8C - mono_bitset_new
CCE6 - mono_bitset_set
CDFE - mono_bitset_set_all
27654 - mono_bitset_size
D2BB - mono_bitset_sub
CD2F - mono_bitset_test
CD7A - mono_bitset_test_bulk
D19D - mono_bitset_union
19ABD - mono_bounded_array_class_get
EAC2 - mono_check_corlib_version
17EFC - mono_class_array_element_size
1D451 - mono_class_data_size
23F25 - mono_class_describe_statics
16546 - mono_class_enum_basetype
1E234 - mono_class_from_generic_parameter
1E2C8 - mono_class_from_mono_type
1DC55 - mono_class_from_name
191A8 - mono_class_from_name_case
18296 - mono_class_from_typeref
19193 - mono_class_get
16597 - mono_class_get_byref_type
27654 - mono_class_get_element_class
15D22 - mono_class_get_event_token
1D64C - mono_class_get_events
19FDF - mono_class_get_field
1A8F0 - mono_class_get_field_from_name
1A0C5 - mono_class_get_field_token
1A2C9 - mono_class_get_fields
16574 - mono_class_get_flags
19053 - mono_class_get_full
16508 - mono_class_get_image
1EFB0 - mono_class_get_interfaces
1E005 - mono_class_get_method_from_name
1D7C9 - mono_class_get_method_from_name_flags
1D5ED - mono_class_get_methods
B2DA2 - mono_class_get_name
1657F - mono_class_get_namespace
1D6AA - mono_class_get_nested_types
36E5F - mono_class_get_nesting_type
1655D - mono_class_get_parent
1DFA7 - mono_class_get_properties
1E514 - mono_class_get_property_from_name
1E570 - mono_class_get_property_token
16568 - mono_class_get_rank
1658A - mono_class_get_type
362D5 - mono_class_get_type_token
165B8 - mono_class_get_userdata
165D7 - mono_class_get_userdata_offset
1A404 - mono_class_inflate_generic_method
192F1 - mono_class_inflate_generic_method_full
16D38 - mono_class_inflate_generic_type
1CE1F - mono_class_init
15CAE - mono_class_instance_size
1E6FF - mono_class_is_assignable_from
16524 - mono_class_is_blittable
16535 - mono_class_is_enum
14BF8 - mono_class_is_generic
14C2E - mono_class_is_inflated
1D475 - mono_class_is_subclass_of
16513 - mono_class_is_valuetype
1D436 - mono_class_min_align
15D8B - mono_class_name_from_token
1BBE0 - mono_class_num_events
165A2 - mono_class_num_fields
165AD - mono_class_num_methods
1DF8D - mono_class_num_properties
165C6 - mono_class_set_userdata
15CC8 - mono_class_value_size
605DC - mono_class_vtable
35BDF - mono_cli_rva_image_map
791C - mono_code_manager_commit
7662 - mono_code_manager_destroy
76D9 - mono_code_manager_foreach
7683 - mono_code_manager_invalidate
75F2 - mono_code_manager_new
760F - mono_code_manager_new_dynamic
7907 - mono_code_manager_reserve
5C9E8 - mono_compile_method
596A1 - mono_config_for_assembly
5979B - mono_config_parse
5917E - mono_config_parse_memory
59224 - mono_config_string_for_assembly_file
2826B - mono_context_get
EAE0 - mono_context_init
2824C - mono_context_set
7B1F - mono_counters_dump
79AB - mono_counters_enable
79BD - mono_counters_register
70CAD - mono_custom_attrs_construct
65EA1 - mono_custom_attrs_free
6A209 - mono_custom_attrs_from_assembly
6A16E - mono_custom_attrs_from_class
6A286 - mono_custom_attrs_from_event
6A2C5 - mono_custom_attrs_from_field
69F8E - mono_custom_attrs_from_index
6A111 - mono_custom_attrs_from_method
6A304 - mono_custom_attrs_from_param
6A247 - mono_custom_attrs_from_property
70E5F - mono_custom_attrs_get_attr
6A3FB - mono_custom_attrs_has_attr
59EA5 - mono_debug_add_method
59BF3 - mono_debug_cleanup
240B2 - mono_debug_close_mono_symbol_file
5AB61 - mono_debug_domain_create
59C35 - mono_debug_domain_unload
5A6D6 - mono_debug_find_method
5A904 - mono_debug_free_source_location
5ACFB - mono_debug_init
59DD1 - mono_debug_lookup_method
5A84B - mono_debug_lookup_source_location
5AE23 - mono_debug_open_image_from_memory
24883 - mono_debug_open_mono_symbols
5A921 - mono_debug_print_stack_frame
9F2F3 - mono_debug_print_vars
241D1 - mono_debug_symfile_lookup_location
245F1 - mono_debug_symfile_lookup_method
59BED - mono_debug_using_mono_debugger
9F4EC - mono_debugger_breakpoint_callback
286DA - mono_debugger_check_runtime_version
59951 - mono_debugger_cleanup
598B9 - mono_debugger_event
E9887 - mono_debugger_handle_exception
59860 - mono_debugger_initialize
9F47A - mono_debugger_insert_breakpoint
9F3E4 - mono_debugger_insert_breakpoint_full
597F0 - mono_debugger_lock
9F499 - mono_debugger_method_has_breakpoint
9F426 - mono_debugger_remove_breakpoint
E9961 - mono_debugger_run_finally
59828 - mono_debugger_unlock
6AFF7 - mono_declsec_flags_from_assembly
6AF95 - mono_declsec_flags_from_class
6AF63 - mono_declsec_flags_from_method
6B4E5 - mono_declsec_get_assembly_action
6B4A9 - mono_declsec_get_class_action
6B180 - mono_declsec_get_demands
6B2F4 - mono_declsec_get_inheritdemands_class
6B350 - mono_declsec_get_inheritdemands_method
6B23D - mono_declsec_get_linkdemands
6B470 - mono_declsec_get_method_action
CAE1 - mono_digest_get_public_token
239C0 - mono_disasm_code
23970 - mono_disasm_code_one
82C1 - mono_dl_fallback_register
8350 - mono_dl_fallback_unregister
39618 - mono_dllmap_insert
28274 - mono_domain_add_class_static_data
27D1A - mono_domain_assembly_open
27879 - mono_domain_create
10FB2 - mono_domain_create_appdomain
2BB05 - mono_domain_finalize
27CAA - mono_domain_foreach
27DCA - mono_domain_free
27BD0 - mono_domain_get
2811F - mono_domain_get_by_id
165A2 - mono_domain_get_id
EB7B - mono_domain_has_type_resolve
10A22 - mono_domain_is_unloading
ECBB - mono_domain_owns_vtable_slot
ECE6 - mono_domain_set
27C99 - mono_domain_set_internal
EBEB - mono_domain_try_type_resolve
10F8B - mono_domain_unload
29732 - mono_environment_exitcode_get
29738 - mono_environment_exitcode_set
CBC7 - mono_escape_uri_string
165DD - mono_event_get_add_method
36E49 - mono_event_get_flags
165F6 - mono_event_get_name
68F3B - mono_event_get_object
27654 - mono_event_get_parent
16601 - mono_event_get_raise_method
54BF6 - mono_event_get_remove_method
29C7B - mono_exception_from_name
297BA - mono_exception_from_name_domain
29C97 - mono_exception_from_name_msg
2992A - mono_exception_from_name_two_strings
29828 - mono_exception_from_token
38C8B - mono_field_from_token
1A313 - mono_field_get_data
165E8 - mono_field_get_flags
165F6 - mono_field_get_name
68CEA - mono_field_get_object
54BF6 - mono_field_get_offset
165DD - mono_field_get_parent
27654 - mono_field_get_type
5DB4B - mono_field_get_value
62181 - mono_field_get_value_object
5DA4C - mono_field_set_value
5FBFD - mono_field_static_get_value
5DA91 - mono_field_static_set_value
A3A0 - mono_file_map
A403 - mono_file_unmap
38135 - mono_free_method
81090 - mono_free_verify_list
87B9 - mono_g_hash_table_destroy
854F - mono_g_hash_table_foreach
86DD - mono_g_hash_table_foreach_remove
88F3 - mono_g_hash_table_insert
893B - mono_g_hash_table_lookup
84DC - mono_g_hash_table_lookup_extended
837F - mono_g_hash_table_new
83D1 - mono_g_hash_table_new_full
8923 - mono_g_hash_table_new_type
8638 - mono_g_hash_table_remove
890B - mono_g_hash_table_replace
84AA - mono_g_hash_table_size
13E6E - mono_gc_collect
13E7B - mono_gc_collection_count
13FE7 - mono_gc_enable_events
F8836 - mono_gc_get_generation
13E96 - mono_gc_get_heap_size
13E81 - mono_gc_get_used_size
2B559 - mono_gc_is_finalizer_thread
F8836 - mono_gc_max_generation
2AD1A - mono_gc_out_of_memory
6A9F7 - mono_gc_wbarrier_arrayref_copy
7E7E2 - mono_gc_wbarrier_generic_store
14278 - mono_gc_wbarrier_set_arrayref
14278 - mono_gc_wbarrier_set_field
6A9F7 - mono_gc_wbarrier_value_copy
2B31E - mono_gchandle_free
2B156 - mono_gchandle_get_target
2B28E - mono_gchandle_is_in_domain
2B0EF - mono_gchandle_new
2B116 - mono_gchandle_new_weakref
283BC - mono_get_array_class
28362 - mono_get_boolean_class
28356 - mono_get_byte_class
283AA - mono_get_char_class
5929D - mono_get_config_dir
2834A - mono_get_corlib
694BE - mono_get_dbnull_object
5DBEE - mono_get_delegate_invoke
283A4 - mono_get_double_class
283B6 - mono_get_enum_class
29FD6 - mono_get_exception_appdomain_unloaded
29EC5 - mono_get_exception_argument
29E7E - mono_get_exception_argument_null
29F0F - mono_get_exception_argument_out_of_range
29D48 - mono_get_exception_arithmetic
29E25 - mono_get_exception_array_type_mismatch
29FEF - mono_get_exception_bad_image_format
29B94 - mono_get_exception_bad_image_format2
29FB6 - mono_get_exception_cannot_unload_appdomain
283C8 - mono_get_exception_class
29CD7 - mono_get_exception_divide_by_zero
29D93 - mono_get_exception_execution_engine
29A2F - mono_get_exception_file_not_found
29A52 - mono_get_exception_file_not_found2
29E0C - mono_get_exception_index_out_of_range
29DD3 - mono_get_exception_invalid_cast
29DEC - mono_get_exception_invalid_operation
29F76 - mono_get_exception_io
299EC - mono_get_exception_missing_field
299A9 - mono_get_exception_missing_method
29E3E - mono_get_exception_not_implemented
29E5E - mono_get_exception_not_supported
29D7A - mono_get_exception_null_reference
29D61 - mono_get_exception_overflow
29BCC - mono_get_exception_reflection_type_load
29CFD - mono_get_exception_security
29DB3 - mono_get_exception_serialization
2A00F - mono_get_exception_stack_overflow
29F96 - mono_get_exception_synchronization_lock
29D16 - mono_get_exception_thread_abort
29D2F - mono_get_exception_thread_interrupted
29F56 - mono_get_exception_thread_state
29A8A - mono_get_exception_type_initialization
2996B - mono_get_exception_type_load
231D - mono_get_inflated_method
2836E - mono_get_int16_class
2837A - mono_get_int32_class
28392 - mono_get_int64_class
28386 - mono_get_intptr_class
592C3 - mono_get_machine_config
3A53F - mono_get_method
3AA78 - mono_get_method_constrained
39F14 - mono_get_method_full
28350 - mono_get_object_class
27BCA - mono_get_root_domain
28368 - mono_get_sbyte_class
2839E - mono_get_single_class
7EDE0 - mono_get_special_static_data
283B0 - mono_get_string_class
283C2 - mono_get_thread_class
28374 - mono_get_uint16_class
28380 - mono_get_uint32_class
28398 - mono_get_uint64_class
2838C - mono_get_uintptr_class
2835C - mono_get_void_class
548A0 - mono_guid_to_string
1619E - mono_image_add_to_name_cache
7E04A - mono_image_addref
3668F - mono_image_close
35D15 - mono_image_ensure_section
35CA7 - mono_image_ensure_section_idx
36EB5 - mono_image_get_assembly
36D7C - mono_image_get_entry_point
36E54 - mono_image_get_filename
36E5F - mono_image_get_guid
36E49 - mono_image_get_name
36DD4 - mono_image_get_public_key
37607 - mono_image_get_resource
3777D - mono_image_get_strong_name
36E6A - mono_image_get_table_info
36E85 - mono_image_get_table_rows
36ED5 - mono_image_has_authenticode_entry
362ED - mono_image_init
15FA6 - mono_image_init_name_cache
36EC3 - mono_image_is_dynamic
3764F - mono_image_load_file_for_image
36630 - mono_image_loaded
37281 - mono_image_loaded_by_guid
37220 - mono_image_loaded_by_guid_full
365E1 - mono_image_loaded_full
37583 - mono_image_lookup_resource
3752D - mono_image_open
37442 - mono_image_open_from_data
37424 - mono_image_open_from_data_full
3733B - mono_image_open_from_data_with_name
3745D - mono_image_open_full
36FA5 - mono_image_rva_map
36C4B - mono_image_strerror
36D8D - mono_image_strong_name_position
8233A - mono_image_verify_tables
35C7C - mono_images_cleanup
35C28 - mono_images_init
296B6 - mono_init
296CD - mono_init_from_assembly
296E2 - mono_init_version
B53AF - mono_inst_name
11A93 - mono_install_assembly_load_hook
11BFF - mono_install_assembly_postload_refonly_search_hook
11BE6 - mono_install_assembly_postload_search_hook
11C6C - mono_install_assembly_preload_hook
11CB9 - mono_install_assembly_refonly_preload_hook
11BCD - mono_install_assembly_refonly_search_hook
11B99 - mono_install_assembly_search_hook
EB43 - mono_install_runtime_cleanup
5AA40 - mono_is_debugger_attached
B2D05 - mono_jit_cleanup
B182A - mono_jit_exec
16601 - mono_jit_info_get_code_size
165DD - mono_jit_info_get_code_start
27654 - mono_jit_info_get_method
2873B - mono_jit_info_table_find
B2CEB - mono_jit_init
B2CFC - mono_jit_init_version
B1C49 - mono_jit_parse_options
B2D0E - mono_jit_set_trace_options
ED831 - mono_jit_thread_attach
5FF4F - mono_ldstr
1E955 - mono_ldtoken
614CB - mono_load_remote_field
616A9 - mono_load_remote_field_new
37B94 - mono_loader_error_prepare_exception
37B43 - mono_loader_get_last_error
57460 - mono_locks_dump
3549C - mono_lookup_internal_call
39793 - mono_lookup_pinvoke_call
B1CCB - mono_main
42EBD - mono_marshal_string_to_utf16
56ACA - mono_mb_free
A113 - mono_md5_final
A1BC - mono_md5_get_digest
A205 - mono_md5_get_digest_from_file
9929 - mono_md5_init
A04C - mono_md5_update
49EBF - mono_mempool_alloc
49F52 - mono_mempool_alloc0
49F8E - mono_mempool_contains_addr
49DB8 - mono_mempool_destroy
49DF9 - mono_mempool_empty
36E49 - mono_mempool_get_allocated
49DD5 - mono_mempool_invalidate
4A07E - mono_mempool_new
49E11 - mono_mempool_stats
49FB2 - mono_mempool_strdup
52424 - mono_metadata_blob_heap
52984 - mono_metadata_cleanup
51B4C - mono_metadata_compute_size
536A1 - mono_metadata_custom_attrs_from_index
53711 - mono_metadata_declsec_from_index
5263E - mono_metadata_decode_blob_size
524A0 - mono_metadata_decode_row
52578 - mono_metadata_decode_row_col
526E5 - mono_metadata_decode_signed_value
52813 - mono_metadata_decode_table_row
5284F - mono_metadata_decode_table_row_col
52693 - mono_metadata_decode_value
53CF2 - mono_metadata_encode_value
53DFF - mono_metadata_events_from_typedef
566CF - mono_metadata_field_info
52888 - mono_metadata_free_array
5430C - mono_metadata_free_marshal_spec
6A9F7 - mono_metadata_free_method_signature
6A9F7 - mono_metadata_free_mh
52E1D - mono_metadata_free_type
53A69 - mono_metadata_generic_class_is_valuetype
53D4B - mono_metadata_get_constant_index
549D5 - mono_metadata_get_generic_param_row
54684 - mono_metadata_get_marshal_info
52A6B - mono_metadata_get_param_attrs
52460 - mono_metadata_guid_heap
540E8 - mono_metadata_implmap_from_method
56A16 - mono_metadata_init
53507 - mono_metadata_interfaces_from_typedef
54B30 - mono_metadata_load_generic_param_constraints
56816 - mono_metadata_load_generic_params
52337 - mono_metadata_locate
5238C - mono_metadata_locate_token
53E94 - mono_metadata_methods_from_event
54007 - mono_metadata_methods_from_property
5353B - mono_metadata_nested_in_typedef
535A0 - mono_metadata_nesting_typedef
53606 - mono_metadata_packing_from_typedef
560A5 - mono_metadata_parse_array
54D3E - mono_metadata_parse_custom_mod
55B3D - mono_metadata_parse_field_type
55F03 - mono_metadata_parse_marshal_spec
55224 - mono_metadata_parse_method_signature
54FD3 - mono_metadata_parse_method_signature_full
55B18 - mono_metadata_parse_mh
55983 - mono_metadata_parse_mh_full
55B58 - mono_metadata_parse_param
56180 - mono_metadata_parse_signature
54FB5 - mono_metadata_parse_type
54DFB - mono_metadata_parse_type_full
54D18 - mono_metadata_parse_typedef_or_ref
53F72 - mono_metadata_properties_from_typedef
52B2C - mono_metadata_signature_alloc
52BCD - mono_metadata_signature_dup
55D73 - mono_metadata_signature_equal
523AC - mono_metadata_string_heap
531B4 - mono_metadata_token_from_dor
52775 - mono_metadata_translate_token_index
55D55 - mono_metadata_type_equal
53B12 - mono_metadata_type_hash
532F1 - mono_metadata_typedef_from_field
5335C - mono_metadata_typedef_from_method
523E8 - mono_metadata_user_string
690F1 - mono_method_body_get_object
23355 - mono_method_desc_free
2330E - mono_method_desc_from_method
23505 - mono_method_desc_full_match
2337A - mono_method_desc_match
231FD - mono_method_desc_new
2353C - mono_method_desc_search_in_class
23573 - mono_method_desc_search_in_image
23A4C - mono_method_full_name
165DD - mono_method_get_class
3885F - mono_method_get_flags
38718 - mono_method_get_header
38877 - mono_method_get_index
382EE - mono_method_get_last_managed
3A23E - mono_method_get_marshal_info
16601 - mono_method_get_name
689B4 - mono_method_get_object
3A03B - mono_method_get_param_names
3A1C9 - mono_method_get_param_token
38FE9 - mono_method_get_signature
38DBC - mono_method_get_signature_full
165F6 - mono_method_get_token
3A43B - mono_method_has_marshal_info
5316A - mono_method_header_get_clauses
5310D - mono_method_header_get_code
53130 - mono_method_header_get_locals
5315A - mono_method_header_get_num_clauses
3842B - mono_method_signature
8AD89 - mono_method_verify
5AE43 - mono_mlist_alloc
5AF2A - mono_mlist_append
54BF6 - mono_mlist_get_data
5AEE9 - mono_mlist_last
5AED5 - mono_mlist_length
165DD - mono_mlist_next
5AF00 - mono_mlist_prepend
5AF70 - mono_mlist_remove_item
5AEBD - mono_mlist_set_data
68301 - mono_module_file_get_object
68124 - mono_module_get_object
579F2 - mono_monitor_enter
57A27 - mono_monitor_exit
57A0C - mono_monitor_try_enter
A41C - mono_mprotect
61161 - mono_object_castclass_mbyref
5DF27 - mono_object_clone
23C22 - mono_object_describe
23F08 - mono_object_describe_fields
5E12C - mono_object_get_class
5E11F - mono_object_get_domain
5E138 - mono_object_get_size
5D647 - mono_object_get_virtual_method
576B5 - mono_object_hash
13EC9 - mono_object_is_alive
61D40 - mono_object_isinst
61034 - mono_object_isinst_mbyref
60E4F - mono_object_new
5EEE1 - mono_object_new_alloc_specific
5DEA1 - mono_object_new_fast
60E6E - mono_object_new_from_token
5FE2A - mono_object_new_specific
5E188 - mono_object_unbox
62A7B - mono_opcode_name
62A8A - mono_opcode_value
A2BF - mono_pagesize
73BAF - mono_param_get_objects
B10F5 - mono_parse_default_optimizations
A806 - mono_path_canonicalize
A90B - mono_path_resolve_symlinks
37542 - mono_pe_file_open
EB89F - mono_pmip
A914 - mono_poll
EB8AB - mono_print_method_from_ip
E865C - mono_print_thread_dump
61D8D - mono_print_unhandled_exception
644AB - mono_profiler_coverage_get
63BC6 - mono_profiler_get_events
63B5D - mono_profiler_install
63C68 - mono_profiler_install_allocation
63CD0 - mono_profiler_install_appdomain
63CF6 - mono_profiler_install_assembly
63D42 - mono_profiler_install_class
63CB9 - mono_profiler_install_coverage_filter
63BCC - mono_profiler_install_enter_leave
63C90 - mono_profiler_install_exception
64330 - mono_profiler_install_gc
63BEC - mono_profiler_install_jit_compile
63C06 - mono_profiler_install_jit_end
63D1C - mono_profiler_install_module
63C7C - mono_profiler_install_statistical
63C34 - mono_profiler_install_thread
63C54 - mono_profiler_install_transition
65470 - mono_profiler_load
63BA1 - mono_profiler_set_events
16601 - mono_property_get_flags
165DD - mono_property_get_get_method
165F6 - mono_property_get_name
68E3B - mono_property_get_object
27654 - mono_property_get_parent
54BF6 - mono_property_get_set_method
5DBD1 - mono_property_get_value
5DBB4 - mono_property_set_value
15ACE - mono_ptr_class_get
5E45F - mono_raise_exception
74237 - mono_reflection_get_custom_attrs
6D669 - mono_reflection_get_custom_attrs_blob
741C0 - mono_reflection_get_custom_attrs_by_type
74248 - mono_reflection_get_custom_attrs_data
73E87 - mono_reflection_get_custom_attrs_info
73BC4 - mono_reflection_get_token
6FEB2 - mono_reflection_get_type
69D1B - mono_reflection_parse_type
6FECD - mono_reflection_type_from_name
6CC1D - mono_reflection_type_get_handle
12D6B - mono_register_bundled_assemblies
591FE - mono_register_config_for_assembly
592B6 - mono_register_machine_config
5ECAF - mono_remote_class
61A11 - mono_runtime_class_init
EB16 - mono_runtime_cleanup
5DC40 - mono_runtime_delegate_invoke
5FC7F - mono_runtime_exec_main
5DE6C - mono_runtime_exec_managed_code
60CD1 - mono_runtime_get_main_args
10CED - mono_runtime_init
5D817 - mono_runtime_invoke
623ED - mono_runtime_invoke_array
EB75 - mono_runtime_is_shutting_down
5E88E - mono_runtime_object_init
EB50 - mono_runtime_quit
60D3E - mono_runtime_run_main
EB6A - mono_runtime_set_shutting_down
5DE66 - mono_runtime_unhandled_exception_policy_get
5DE59 - mono_runtime_unhandled_exception_policy_set
769AD - mono_security_enable_core_clr
769BE - mono_security_set_core_clr_platform_callback
76FCF - mono_security_set_mode
110D4 - mono_set_assemblies_path
C54D7 - mono_set_break_policy
5DD16 - mono_set_commandline_arguments
59276 - mono_set_config_dir
EF62E - mono_set_defaults
115B6 - mono_set_dirs
38128 - mono_set_find_plugin_callback
105A8 - mono_set_ignore_version_and_key_when_finding_assemblies_already_loaded
115CD - mono_set_rootdir
B2D2A - mono_set_signal_chaining
C903 - mono_sha1_final
C9E0 - mono_sha1_get_digest
CA27 - mono_sha1_get_digest_from_file
C832 - mono_sha1_init
C864 - mono_sha1_update
54C73 - mono_signature_explicit_this
54C4A - mono_signature_get_call_conv
23138 - mono_signature_get_desc
54C3E - mono_signature_get_param_count
54C01 - mono_signature_get_params
54BF6 - mono_signature_get_return_type
56A88 - mono_signature_hash
54C66 - mono_signature_is_instance
54C5A - mono_signature_vararg_start
98E5 - mono_signbit_double
98D2 - mono_signbit_float
382A5 - mono_stack_walk
382BB - mono_stack_walk_no_il
61FB8 - mono_store_remote_field
61869 - mono_store_remote_field_new
276D0 - mono_string_equal
5F1F6 - mono_string_from_utf16
27704 - mono_string_hash
5E26C - mono_string_intern
5E25C - mono_string_is_interned
5F0C3 - mono_string_new
5F070 - mono_string_new_len
5E00F - mono_string_new_size
5F01F - mono_string_new_utf16
5F125 - mono_string_new_wrapper
5E325 - mono_string_to_utf16
5F1A1 - mono_string_to_utf8
11794 - mono_stringify_assembly_name
36EA5 - mono_table_info_get_rows
7E8FD - mono_thread_abort_all_other_threads
7F60A - mono_thread_attach
7E80B - mono_thread_cleanup
7F5F2 - mono_thread_create
7DE5C - mono_thread_current
7F77D - mono_thread_detach
7F7D1 - mono_thread_exit
800F6 - mono_thread_force_interruption_checkpoint
14285 - mono_thread_get_abort_signal
5C79C - mono_thread_get_main
7EA56 - mono_thread_has_appdomain_ref
7FCE7 - mono_thread_init
800ED - mono_thread_interruption_checkpoint
7F02B - mono_thread_interruption_request_flag
7F012 - mono_thread_interruption_requested
804A1 - mono_thread_manage
7D916 - mono_thread_new_init
7D224 - mono_thread_pool_cleanup
7EA1F - mono_thread_pop_appdomain_ref
7E9E8 - mono_thread_push_appdomain_ref
8002D - mono_thread_request_interruption
5C78F - mono_thread_set_main
8034F - mono_thread_stop
80596 - mono_thread_suspend_all_other_threads
80874 - mono_threads_abort_appdomain_threads
7EB6A - mono_threads_clear_cached_culture
7D934 - mono_threads_get_default_stacksize
7E85F - mono_threads_install_cleanup
807ED - mono_threads_request_thread_dump
7D927 - mono_threads_set_default_stacksize
8042E - mono_threads_set_shutting_down
9712 - mono_trace
94DF - mono_trace_cleanup
96BA - mono_trace_is_traced
959A - mono_trace_pop
953D - mono_trace_push
9522 - mono_trace_set_level
95E9 - mono_trace_set_level_string
978F - mono_trace_set_mask
97AA - mono_trace_set_mask_string
9751 - mono_tracev
5670F - mono_type_create_from_typespec
2310F - mono_type_full_name
53A2C - mono_type_generic_inst_is_valuetype
27654 - mono_type_get_array_type
27654 - mono_type_get_class
22DEB - mono_type_get_desc
F8836 - mono_type_get_modifiers
148E7 - mono_type_get_name
148BB - mono_type_get_name_full
687F4 - mono_type_get_object
54B88 - mono_type_get_ptr_type
54B56 - mono_type_get_signature
54B4A - mono_type_get_type
16CF9 - mono_type_get_underlying_type
54B39 - mono_type_is_byref
54BBA - mono_type_is_reference
5378D - mono_type_size
55B72 - mono_type_stack_size
54334 - mono_type_to_unmanaged
622F9 - mono_unhandled_exception
D3A5 - mono_unicode_from_external
D5D2 - mono_unicode_to_external
108EB3 - mono_unity_class_is_abstract
108E90 - mono_unity_class_is_interface
108ECC - mono_unity_get_all_classes_with_name_case
1084A9 - mono_unity_liveness_allocate_struct
10854A - mono_unity_liveness_calculation_begin
10856E - mono_unity_liveness_calculation_end
108C05 - mono_unity_liveness_calculation_from_root
108C2F - mono_unity_liveness_calculation_from_root_managed
1089B0 - mono_unity_liveness_calculation_from_statics
108B52 - mono_unity_liveness_calculation_from_statics_managed
1084FA - mono_unity_liveness_finalize
10851D - mono_unity_liveness_free_struct
108545 - mono_unity_liveness_start_gc_world
108540 - mono_unity_liveness_stop_gc_world
108DF7 - mono_unity_seh_handler
108E3F - mono_unity_set_embeddinghostname
108E04 - mono_unity_set_unhandled_exception_handler
108E87 - mono_unity_set_vprintf_func
108E7A - mono_unity_socket_security_enabled_set
4226B - mono_upgrade_remote_class_wrapper
D4EC - mono_utf8_from_external
A34A - mono_valloc
61C55 - mono_value_box
5E0A5 - mono_value_copy
5E0D7 - mono_value_copy_array
23F1C - mono_value_describe_fields
80971 - mono_verifier_set_mode
F8836 - mono_verify_corlib
A369 - mono_vfree
54BF6 - mono_vtable_get_static_field_data
E8A5E - mono_walk_stack
1000 - set_vprintf_func
108D5D - unity_mono_close_output
108EC3 - unity_mono_install_memory_callbacks
108F64 - unity_mono_method_is_generic
108F53 - unity_mono_method_is_inflated
108D04 - unity_mono_redirect_output

 

CheatEngine查看PE header

标签:进程   ESS   locate   rect   bundle   star   assign   info   and   

原文地址:https://www.cnblogs.com/chucklu/p/11658814.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!