Not very clear talking about .rsrc section

[Nacho_dj]

Ok, I think all is a little bit clear for me.

Slv, I haven't installed the masm, so couldn't found the windows.inc. I'll try to install it and see it.
Vodu, I have found the URL you wrote down, but I couldn't find the procedure PrepareResourceSectionData, any clue?
skip, the docs you have suggested are very clear! Specially the one of Julius.

I am trying to fix some values of RVA pointing to data in the .rsrc after you have deleted some irrelevant sections of the
PE header inserted by an exe wrapper. Thus the .rsrc woulg go to a new raw position, and is getting necessary to fix the RVA values of the data.

I know you can find some tools that are doing this, but I would like insert this procedure in an unpacker/rebuilder I have developping to get "all in one".

Anyway...

Thanks for your answers!

Cheers from the sunny Spain!


Nacho_dj

Originally Posted by Nacho_dj

Vodu, I have found the URL you wrote down, but I couldn't find the procedure PrepareResourceSectionData, any clue?

Just look at morphine source. I also attached it to this msg.

[Nacho_dj]

Ok, Vodu, I see that the source is very complete (and complicated!!)

I guess with a little of patience reading the morphine's code, the .rsrc will be
totally clear.

I was doing tests with the information supplied by the people of the forum. But I think it is hard developping completely a .rsrc rebuilder.

It seems a lilttle bit more complicated I was suppossing

Thanks for the info


Nacho_dj