View Single Post
  #5  
Old 30-09-2006, 14:04
TippeX's Avatar
TippeX TippeX is offline
zeroes and ones.....
 
Join Date: Jan 2003
Posts: 3,842
Thanks: 2
Thanked 33 Times in 23 Posts
TippeX is on a distinguished road
naw, relocs are only applicable to dlls, in exe, it will load at the base address specified in the pe header.. so exe's don't need reloc's

hiew had a bug in the older versions where for e8 calls it always added on the base address and screwed things up.. that could be the reason for the grayed output..

relocs are only applicable for certain situations and e8 calls are not one of them.. the e8 call is relative to the va its called from e8 xx xx xx xx -> va+ xxxxxxxx +5..

relocs apply to such things like

ff 15 xx xx xx xx (where only the xx xx xx xx will be updated by adding on the 'new runtime base)

ff 25 xx xx xx xx, ff 35 xx xx xx xx

and code like

mov eax,[12345678]
mov [12345678], eax

etc, where only the 12345678 part is updated.. if in doubt, process the reloc table and double check your patch area
__________________
bleh
DO NOT PM me with questions, leave that in the forums...ESPECIALLY if i dont know you...
Reply With Quote