View Full Version : How I can fix the Sections after OllyDump
Olly2All
November 28th, 2002, 07:52
Hello..
After I use OllyDump to Dump a packer program..How I can fix the Sections of this program to run it.
And Is there any tutorial to show us how to unpack any program using OllyDbg.
Thx
Anonymous
November 28th, 2002, 13:41
Use LordPE, available from most tools sites. Depending on section offset in the pe header, you might be able to simply set VOffset and VSize to ROffset and RSize.
Gigapede
November 28th, 2002, 16:37
OllyDump fixes RawSize and RawOffset of a section in a value the same as VirtualSize and VirtualOffset by default.
you can see the checkbox "Fix Raw Size & Offset of Dump Image" is checked.
if you remove the check mark, RawSize and RawOffset back to the original value.
you can edit section detail by right clicking on a section you want and select "Edit Section" menu (or double click).
then new dialogbox appears, edit section name, VSize, VOffset, RSize, ROffset and Charactaristics.
though you fix the sections, you can't get a right executable.
you must fix the import table.
"revirgin" or "Import REConstructor" do this.
does anyone show the usage of these apps?
it is difficult for me.
Olly2All
November 28th, 2002, 17:58
Hi..
Many Thx
Regard
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.