C++ Programming
01-13-2010, 07:20 AM
Hey,
I'm wondering how the OS converts the data in exes (specifically calls) into, for example E8 6CAA0100. I'm not sure if this is the phyiscal address that I want, but I think it is.
I'm wondering because I want to find all references to a function in another process, then dump the data that gets passed to it. I think this would be more efficient than using virtual addresses (ie running the process) because the data I'd be searching for would change depending of the address that is calling the function. Any help would be appreciated, thanks.
I'm wondering how the OS converts the data in exes (specifically calls) into, for example E8 6CAA0100. I'm not sure if this is the phyiscal address that I want, but I think it is.
I'm wondering because I want to find all references to a function in another process, then dump the data that gets passed to it. I think this would be more efficient than using virtual addresses (ie running the process) because the data I'd be searching for would change depending of the address that is calling the function. Any help would be appreciated, thanks.