Euclidyr Posted February 10, 2020 Share Posted February 10, 2020 Hello guys, i am very new to this reverse engineering. I will try to explain my problem. After i tried unpacking a dll, i have a problem of mapping some relative addresses. My imagebase is 0x10000000. Everytime i loaded the dll into memory, the base address changes. As shown in the pictures below, the addresses behind CALL and JUMP instructions are changed accordingly. But the addresses after PUSH or after dword ptr data segment, seem to remain unchanged. My question is how can I fix this problem? and what do u refer this problem as? Im grateful for all of you who can enlighten me... thank you guys! Link to comment
mrexodia Posted February 10, 2020 Share Posted February 10, 2020 It looks like you don't have a valid relocation table. Link to comment
Euclidyr Posted February 11, 2020 Author Share Posted February 11, 2020 Thanks sir! How do I fix this? or Do you have any videos to recommend me to watch ? Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now