Join Date: Jul 2008
Liked 6 Times in 5 Posts
Mentioned: 1 Post(s)
Tagged: 0 Thread(s)
I was wondering if its possible of converting a virtual address like an elf file's entry point into a physical address or if not is it possible to locate where in the elf's .text file is the entry point is physically located?
The reason I ask is because is because im practicing reversing my own ppc code and I want to understand how to locate the TOC pointer by hand.
Using google I was able to locate that the initial rtoc pointer is pulled from the function descriptor pointed at by the e_entry fild in the ELF header.
Thanks for the help :-)