|
Yes Vodu,
i just resolved in way that you have explained.
To find this "original" value, i track the sections table information in Olly using the VirtualAlloc/return bp.
Then with the original values i have fixed the right RawOffset/Rawsize VirtualOffset/VirtualSize.
Thanks a lot for your advice too.
NaSTy
|