Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
So usually when I debug with IDA I don’t come across any issues; however, with this one particular process (which is 9.9 MB in size before modules) IDA insists it rebase every single time it starts the process, which freezes IDA and forces me to wait a good 20-30 minutes before it actually starts.
Why does it do this, and can I somehow disable this? I’m new-ish to advanced debugging such as this so rebasing only makes a little sense to me.
In case anyone else finds this page like I did, this can also be caused if the DLL’s preferred entry point is already in use it must rebase it before it can continue.
To correct this you can use the ReBase.exe tool that comes with the windows SDK (or visual studio)
ReBase.Exe -b 7600000 myBadBasedDll.dllso that will reset the base of the dll to 0x7600000. You then must do the rebase in IDA one last time to make your idb in sync (or make a new idb after you rebase)
Edit->Segments->Rebase Program...In the new menu check the boxes for
Fix up ProgramandRebase the whole imageand it should be good to go.