Lostin Posted April 18, 2013 Posted April 18, 2013 (edited) Hello all, Are there any documentation on this structure online? i tried to search but no much info about it i am coding a small tool i want to work with resource directory for example working with the rva pointers to resources data if i want allocate the resource on different section i have to fix those rva's , so how do i get the pointer to start of those rva's? i got the pointer to those rva's but in certian files they point to the last rva instead of the first one so it got reverse order Example 004170F0 50 71 01 00 4C 02 00 00 Pq.L.. 00417100 B0 04 00 00 00 00 00 00 9C 73 01 00 30 00 00 00 °......œs.0... 00417110 B0 04 00 00 00 00 00 00 CC 73 01 00 28 01 00 00 °......Ìs.(.. 00417120 B0 04 00 00 00 00 00 00 F4 74 01 00 E8 02 00 00 °......ôt.è..here the start of pointers is at 017150 this rva and the next DWORD is its size 024C any help appreciated. Edited April 18, 2013 by Lostin
Nacho_dj Posted April 18, 2013 Posted April 18, 2013 Probably the order of data depends on the compiler. Anyway, if you are translating data to another section, you can set data in the order you want, so go reading data from old resouces section and give the first block of data read the next addres available in the new resources section, and to calculate the address for next block of data just add the size of previuos block to the first block of data address, and so on. Nothing difficult if done with some care... Best regards Nacho_dj 1
Lostin Posted April 18, 2013 Author Posted April 18, 2013 (edited) Nacho_dj thanks friend i still remember your name on arteam long time ago, nice to see you still around i have downloaded some tutorials on this site and they explain this structure somewhat helpful along with debugging LordPE and see how it works. Edited April 18, 2013 by Lostin
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now