Replies: 1 comment
-
I decided to just create a loader and eliminate the image base option. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Is there a way to obtain the image base in sleigh? I have a situation where the image base is larger than the default pointer size and when performing relocations a 16 bit address cannot compensate for the image base which is larger than 16 bits.
ex:
Image base is
0x10000
The 16 bit register
HL
is loaded with0x110c
The value at the address in
HL
is then loaded into registerAX
. However because the address with the image base is larger than 16 bits then incorrect address is used in the listing and decompiler.I seem to have other issues as the default image base is actually within a mirror area.
Beta Was this translation helpful? Give feedback.
All reactions