13 Dec
2022
13 Dec
'22
7:53 p.m.
This calls for shadowing in winedbg some module information (here this could be the address of AddressOfIndex).
Where are you thinking that info should get tracked? Since you would then need to keep it up to date as dlls are loaded and unloaded