开发者

Base addresses not the same

When I load up an executable in IDA pro and OllyDbg, the addresses of the same inst开发者_运维百科ructions start up at different locations. This could be because they are different base addresses. I would like the executables use the same base address; how do I go about doing this?


How are you loading it with ollydbg? Because if you attach to a running process, the OS can freely reallocate it, if you however start the process through olly, it'll try load it at its preferred base address(only the binary you load, its dependancies are free to be relocated, if its a dll you'll need to use ollys loaddll.exe), else it'll virtualize and fake the addresses. IDA should be able to do the same. If the modules don't have a preferred base address you can use LordPE or MSVC's rebase.exe it give it a preferred base address.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜