Skip to main content
replaced http://reverseengineering.stackexchange.com/ with https://reverseengineering.stackexchange.com/
Source Link

I'm using IDA Pro and WinDbg as a debugger. So I loaded an executable process into it. And now I need to know the entry point (or base address) of that loaded executable, the same as I would get from calling these APIs:

MODULEINFO mi = {0};
if(::GetModuleInformation(::GetCurrentProcess(), ::GetModuleHandle(NULL), &mi, sizeof(mi)))
{
    //Needed entry point is:
    pEntryPoint = mi.EntryPoint;
}

I found this referencethis reference, but when I do:

idaapi.get_imagebase()

it gives me the error:

Operation not supported in current debug session 'idaapi.get_imagebase()'

enter image description here

Sorry, I'm new to IDA. What am I doing wrong?

I'm using IDA Pro and WinDbg as a debugger. So I loaded an executable process into it. And now I need to know the entry point (or base address) of that loaded executable, the same as I would get from calling these APIs:

MODULEINFO mi = {0};
if(::GetModuleInformation(::GetCurrentProcess(), ::GetModuleHandle(NULL), &mi, sizeof(mi)))
{
    //Needed entry point is:
    pEntryPoint = mi.EntryPoint;
}

I found this reference, but when I do:

idaapi.get_imagebase()

it gives me the error:

Operation not supported in current debug session 'idaapi.get_imagebase()'

enter image description here

Sorry, I'm new to IDA. What am I doing wrong?

I'm using IDA Pro and WinDbg as a debugger. So I loaded an executable process into it. And now I need to know the entry point (or base address) of that loaded executable, the same as I would get from calling these APIs:

MODULEINFO mi = {0};
if(::GetModuleInformation(::GetCurrentProcess(), ::GetModuleHandle(NULL), &mi, sizeof(mi)))
{
    //Needed entry point is:
    pEntryPoint = mi.EntryPoint;
}

I found this reference, but when I do:

idaapi.get_imagebase()

it gives me the error:

Operation not supported in current debug session 'idaapi.get_imagebase()'

enter image description here

Sorry, I'm new to IDA. What am I doing wrong?

Source Link
c00000fd
  • 1.8k
  • 3
  • 27
  • 42

How to get a entry point of loaded process with IDA Pro and WinDbg as a debugger?

I'm using IDA Pro and WinDbg as a debugger. So I loaded an executable process into it. And now I need to know the entry point (or base address) of that loaded executable, the same as I would get from calling these APIs:

MODULEINFO mi = {0};
if(::GetModuleInformation(::GetCurrentProcess(), ::GetModuleHandle(NULL), &mi, sizeof(mi)))
{
    //Needed entry point is:
    pEntryPoint = mi.EntryPoint;
}

I found this reference, but when I do:

idaapi.get_imagebase()

it gives me the error:

Operation not supported in current debug session 'idaapi.get_imagebase()'

enter image description here

Sorry, I'm new to IDA. What am I doing wrong?