Handle Base of Code, Size of Code and Base of Data
From Olly Advanced
 Olly Advanced Help
|
Handle Base of Code, Size of Code and Base of Data
Copyright © 2006 MaRKuS TH-DJM
Problem:
Someone faked BaseOfCode and / or BaseOfData. Olly has problems with such thing again. In a combination with a faked SizeOfCode, Olly will eat up our RAM and so get the computer in a slow-performance state.
By enabling this option, Olly will have a new system for BaseOfCode, BaseOfData and SizeOfCode.
- BaseOfCode is set to first section VA, SizeOfCode to size of first section or to ImageSize (in memory) - first section VA. this way, a complete analysis of the whole file is done. this is useful especially for packed targets. Also PE-wide changes are catched.
- BaseOfData will be set to second section VA, or, if not available, to first section VA.
Copyright © 2006 MaRKuS TH-DJM