So from your picture i see that the differences come from the MZ header area (1), Section names (2), some author removed (3).
If the unpack is done correct the resources should be there and they can be manipulated except if a resource protection is used (encrypted or placed outside the main Virtual Space of the executable - in case of some protectors).
Edit:
Is a simple file to unpack and the file resources can be altered also. The OEP is a little bit lower than the end of the packer stub.
Code:
0041005E > 6A 00 PUSH 0x0
00410060 E8 7BFC0100 CALL super_pi.0042FCE0
Just see unpacked and modifyed file in attach.
See the "About" menu.
Edit 2.
I get the kkruchy homepage and grab the packer:
Quote:
|
http://www.farbrausch.de/~fg/kkrunchy/
|
Here is the packer itself unpacked.
Quote:
|
http://www37.zippyshare.com/v/l95rOKtU/file.html
|
The packer it have some nice features like import protection, OEP tricks, antidumps...
The unpacked file must be corrected in the size of sections . You can do that by yourself.
