Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to rebase a binary dump to enable pointer traversal? #4

Open
srvasn opened this issue Sep 7, 2019 · 2 comments
Open

How to rebase a binary dump to enable pointer traversal? #4

srvasn opened this issue Sep 7, 2019 · 2 comments

Comments

@srvasn
Copy link

srvasn commented Sep 7, 2019

Is there any way to rebase a binary dump so that the pointers in the dump can be resolved correctly?

@srvasn srvasn changed the title Rebase binary dump How to rebase a binary dump to enable pointer traversal? Sep 7, 2019
@KN4CK3R
Copy link
Member

KN4CK3R commented Sep 9, 2019

Isn't there a way to LoadLibraryEx the dump to let Windows rebase it? The same as the DllHelper application of OllyDbg to load dll files.

@srvasn
Copy link
Author

srvasn commented Sep 10, 2019

I'm not on Windows. I'm analysing an Android memory dump (32 bit) on ReClass x86. I managed to get it running partially through wine (though it crashes very often, unless I uncheck show pointers). It's pretty unusable as any kind of nesting is impossible and causes the program to crash instantly.

Rebasing should be a matter of shifting address in the main application view, and would be immensely helpful as it would enable traversing pointers that are in the same memory dump.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants