Bug:
Pe-Editor -> Sections -> Kill(From File)
- This action should update [PE:50h] field "Image size", but does not do this.
Its IMAGE_OPTIONAL_HEADERxx.ImageSize (IMAGE_OPTIONAL_HEADERxx[38h]).
Old version 1.5 works fine in this case.
--Add--
Resulting "damaged" PE-file can be fixed with Hiew32:
View PE Header(F8) -> Edit(F3) -> Image Size (F3=update).
--Add2--
sendersu, I think this is the same bug.
Plus working with PE-overlay, - discussed
Last edited by dosprog; 05-31-2018 at 04:34.
|