如何将原始转储文件（.raw）转换为字符串？ [英] how to convert a raw dump file(.raw) to string?

问题描述

我想将ram的副本转换为可理解的形式。

i want to convert the copy of ram to understandable form.

推荐答案

如果它是一个完整的转储文件，那么它可能是有关已加载模块的信息的混合，异常信息和原始内存地址。您应该在十六进制编辑器中打开它以查看它包含哪些数据，但大多数数据可能是原始内存，它不能转换为文本。您可以将其转换为十六进制，但要了解其中任何一个是无法在此处回答的主题，您必须能够加载符号文件并将它们与内存地址相关联。



这样做是非常先进的，加载符号表，分析内存等等。你是在尝试加载完整转储还是小型转储？



无论哪种方式，查找转储文件的文件格式信息，在十六进制编辑器中打开它，看看如何组织数据以及如何加载它。

If its a full dump file then its probably a mixture of information about loaded modules, exception information, and raw memory addresses. You should open this in a hex editor to see what data it contains, but most of the data is probably raw memory, which isn't convertible to text. You can convert it over to hex, but to understand any of it is a topic that can't be answered here, you have to be able to load symbol files and correlate them to memory addresses.

Doing so is very advanced, loading symbol tables, analyzing memory, etc. Are you trying to load full dumps or the mini-dumps?

Either way, look up the file format information for the dump file, open it in a hex editor, and see how the data is organized and how you can load it in.

这篇关于如何将原始转储文件（.raw）转换为字符串？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！