(Small partners doing reverse debugging should have encountered this problem: when using two artifacts OD (or Windbg) and IDA to reverse a program at the same time, the module base address often changes during debugging, and the default is 0x400000 in IDA (or 0x10000000), so when I thought about the overall comparison and analysis of IDA at a certain point of debugging, I found that calculating the address is really troublesome. This problem is especially obvious when calculations are often needed.)
收藏
