Skip to content

ARM64 PE Relocation Support #8286

Description

@emesare
  1. Open holy gift distributes methodically
  2. Go to 0x1400071a8
  3. The function pointer(s) there are for some reason zeroed out

In other tools (IDA, Ghidra) the pointer at the address is to 0x1400025d8.

If you look at it in a hex editor the raw bytes match that of the other tools, so i don't think its an issue of not materializing some data not present in the original binary (e.g. writing relocations).

Binary Ninja:
Image

Hex editor (raw bytes):
Image

Ghidra:
Image

IDA:
Image

Thanks for surfacing this issue @CR3Swapper

Metadata

Metadata

Assignees

Labels

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions