-
September 11th, 2012, 09:15 AM
#1
mmap() check when complete ??
-
September 11th, 2012, 09:27 AM
#2
Re: mmap() check when complete ??
This would typically only be doable if the host application has a specific API/trigger for this which you can trap.
If that doesn't exist, any solution or attempt thereof will be a hack of some sort and may not work reliably across versions or even inside the app... These hacks also will take quite a bit of time to figure out and implement properly. If you're not used to diving into assembly code and inner workings of windows. this could be days of work, and possibly not even be doable at your level of expertise. It's not for the faint hearted.
You could set a debugger memory trap that triggers when the last byte of the buffer gets filled/changed. However, that's going to significantly slow down the program.
You could also debug the code and look at where the image completes, then try and squeeze your own trigger/hook code in there. A jump - trampoline - your own code - jump back is the typical approach for something like that. Although you could also use debugger interrupt.
-
September 11th, 2012, 10:13 AM
#3
Re: mmap() check when complete ??
Originally Posted by OReubens
This would typically only be doable if the host application has a specific API/trigger for this which you can trap.
If that doesn't exist, any solution or attempt thereof will be a hack of some sort and may not work reliably across versions or even inside the app... These hacks also will take quite a bit of time to figure out and implement properly. If you're not used to diving into assembly code and inner workings of windows. this could be days of work, and possibly not even be doable at your level of expertise. It's not for the faint hearted.
You could set a debugger memory trap that triggers when the last byte of the buffer gets filled/changed. However, that's going to significantly slow down the program.
You could also debug the code and look at where the image completes, then try and squeeze your own trigger/hook code in there. A jump - trampoline - your own code - jump back is the typical approach for something like that. Although you could also use debugger interrupt.
Thanks! for your fast anwser!
Can you give me a preview of code, how to do that ?
Iám programming now for 2 years in c++ but sometimes it's verry difficult.
Kind regards Martijn
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|