How to rebase a binary dump to enable pointer traversal? #4

Activity

1. srvasn

   changed the title [-]Rebase binary dump[/-] [+]How to rebase a binary dump to enable pointer traversal?[/+] on Sep 7, 2019
2. KN4CK3R commented on Sep 9, 2019

   

   KN4CK3R

   on Sep 9, 2019

   Member

   More actions

   Isn't there a way to LoadLibraryEx the dump to let Windows rebase it? The same as the DllHelper application of OllyDbg to load dll files.
3. srvasn commented on Sep 10, 2019

   

   srvasn

   on Sep 10, 2019

   Last edited by srvasn

   Author

   More actions

   I'm not on Windows. I'm analysing an Android memory dump (32 bit) on ReClass x86. I managed to get it running partially through wine (though it crashes very often, unless I uncheck show pointers). It's pretty unusable as any kind of nesting is impossible and causes the program to crash instantly.

   Rebasing should be a matter of shifting address in the main application view, and would be immensely helpful as it would enable traversing pointers that are in the same memory dump.