yekhni
September 19th, 2013, 07:07
HI..
I Have dumped a Executable page from a section of running process, Now i know that the addresses referenced in that page are relative ( i.e its position independent) now i added this section with a PE header to make it into an executable file . now the problem is that the size of .text should be 0x4000 which i am not able to change , by default in the PE dummy file it was 0x1000??
Cheers!
I Have dumped a Executable page from a section of running process, Now i know that the addresses referenced in that page are relative ( i.e its position independent) now i added this section with a PE header to make it into an executable file . now the problem is that the size of .text should be 0x4000 which i am not able to change , by default in the PE dummy file it was 0x1000??
Cheers!