Jump to content
Tuts 4 You

working with resources


Recommended Posts

Hello all,


Are there any documentation on this structure online? i tried to search but no much info about it


i am coding a small tool i want to work with resource directory


for example working with the rva pointers to resources data if i want allocate the resource on different section i have to fix those rva's , so how do i get the pointer to start of those rva's?


i got the pointer to those rva's but in certian files they point to the last rva instead of the first one so it got reverse order



004170F0 50 71 01 00 4C 02 00 00 Pq.L..
00417100 B0 04 00 00 00 00 00 00 9C 73 01 00 30 00 00 00 °......œs.0...
00417110 B0 04 00 00 00 00 00 00 CC 73 01 00 28 01 00 00 °......Ìs.(..
00417120 B0 04 00 00 00 00 00 00 F4 74 01 00 E8 02 00 00 °......ôt.è..

here the start of pointers is at 017150 this rva and the next DWORD is its size 024C


any help appreciated.

Edited by Lostin
Link to comment

Probably the order of data depends on the compiler.


Anyway, if you are translating data to another section, you can set data in the order you want, so go reading data from old resouces section and give the first block of data read the next addres available in the new resources section, and to calculate the address for next block of data just add the size of previuos block to the first block of data address, and so on. Nothing difficult if done with some care...


Best regards



  • Like 1
Link to comment

Nacho_dj thanks friend i still remember your name on arteam long time ago, nice to see you still around :)

i have downloaded some tutorials on this site and they explain this structure somewhat helpful along with debugging LordPE and see how it works.

Edited by Lostin
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...