Hello all,

 

Are there any documentation on this structure online? i tried to search but no much info about it

 

i am coding a small tool i want to work with resource directory

 

for example working with the rva pointers to resources data if i want allocate the resource on different section i have to fix those rva's , so how do i get the pointer to start of those rva's?

 

i got the pointer to those rva's but in certian files they point to the last rva instead of the first one so it got reverse order

 

Example

004170F0                          50 71 01 00 4C 02 00 00          Pq.L..

00417100  B0 04 00 00 00 00 00 00 9C 73 01 00 30 00 00 00  °......œs.0...

00417110  B0 04 00 00 00 00 00 00 CC 73 01 00 28 01 00 00  °......Ìs.(..

00417120  B0 04 00 00 00 00 00 00 F4 74 01 00 E8 02 00 00  °......ôt.è..

here the start of pointers is at 017150 this rva and the next DWORD is its size 024C

 

any help appreciated.

Edited April 18, 201312 yr by Lostin

Probably the order of data depends on the compiler.

 

Anyway, if you are translating data to another section, you can set data in the order you want, so go reading data from old resouces section and give the first block of data read the next addres available in the new resources section, and to calculate the address for next block of data just add the size of previuos block to the first block of data address, and so on. Nothing difficult if done with some care...

 

Best regards

 

Nacho_dj

Nacho_dj thanks friend i still remember your name on arteam long time ago, nice to see you still around

i have downloaded some tutorials on this site and they explain this structure somewhat helpful along with debugging LordPE and see how it works.

Edited April 18, 201312 yr by Lostin