Home

Forum

Screenshots

Downloads

Sponsors

Articles

Personal menu

Welcome Guest

Forum

Pages (2) 1 [2] ( Go to first unread post )

PE imagebase, I know I can retrieve the image base of exe file or dll file with the help of that method

Track this topic | Email this topic | Print this topic

Member

Group: Members
Posts: 32
Member No.: 51593
Joined: 16-May 12

@ragdog

ah yeah, your right. So in that case, if im right, he can use "Call LoadLibrary" and imagebase is in eax.


ragdog
Extremely Active Member Group: Moderators Posts: 873 Member No.: 5019 Joined: 13-May 07	It gives many ways to get the imagebase or PE structure from a process or exe/dll file. and the imagebase on win7 is different Address Space Layout Randomization (ASLR)

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

« Next Oldest | Newbies | Next Newest »

Pages (2) 1 [2]