New answers tagged address
0
Found of how it works.
The offset is indeed just the difference of the addresses, which can be taken from the static analysis, i.e. from IDA or Ghidra regardless in which address space it loads by default.
So, if the basis address specified by those tools (in the beginning of the image) is say: 140 000 000 and the function starts at 140 039 ea0, then the ...
-1
Fixed with the combined solution from this and this posts.
Top 50 recent answers are included