Euclidyr Posted February 10, 2020 Posted February 10, 2020 Hello guys, i am very new to this reverse engineering. I will try to explain my problem. After i tried unpacking a dll, i have a problem of mapping some relative addresses. My imagebase is 0x10000000. Everytime i loaded the dll into memory, the base address changes. As shown in the pictures below, the addresses behind CALL and JUMP instructions are changed accordingly. But the addresses after PUSH or after dword ptr data segment, seem to remain unchanged. My question is how can I fix this problem? and what do u refer this problem as? Im grateful for all of you who can enlighten me... thank you guys!
mrexodia Posted February 10, 2020 Posted February 10, 2020 It looks like you don't have a valid relocation table.
Euclidyr Posted February 11, 2020 Author Posted February 11, 2020 Thanks sir! How do I fix this? or Do you have any videos to recommend me to watch ?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now