View Single Post
  #5  
Old 06-29-2005, 17:21
Nacho_dj's Avatar
Nacho_dj Nacho_dj is offline
Lo*eXeTools*rd
 
Join Date: Mar 2005
Posts: 211
Rept. Given: 16
Rept. Rcvd 179 Times in 34 Posts
Thanks Given: 44
Thanks Rcvd at 137 Times in 41 Posts
Nacho_dj Reputation: 100-199 Nacho_dj Reputation: 100-199
.rsrc not so misterious yet!

Ok, I think all is a little bit clear for me.

Slv, I haven't installed the masm, so couldn't found the windows.inc. I'll try to install it and see it.
Vodu, I have found the URL you wrote down, but I couldn't find the procedure PrepareResourceSectionData, any clue?
skip, the docs you have suggested are very clear! Specially the one of Julius.

I am trying to fix some values of RVA pointing to data in the .rsrc after you have deleted some irrelevant sections of the
PE header inserted by an exe wrapper. Thus the .rsrc woulg go to a new raw position, and is getting necessary to fix the RVA values of the data.

I know you can find some tools that are doing this, but I would like insert this procedure in an unpacker/rebuilder I have developping to get "all in one".

Anyway...

Thanks for your answers!

Cheers from the sunny Spain!


Nacho_dj
Reply With Quote