Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-01-2005, 01:29
ancev
 
Posts: n/a
Resources and packers

hi,

this is a silly question, and i know i should already know that...

when coding a pe packer, what i should preserve from resource section to gui appz continue working? just the top-level directory entries, or also the directory pointed by these? (i know i must also preserve the icon)

so far, all my pe packers work well for console appz, but fail miserably with programs that dare to use resources

thanks in advance,
ancev
Reply With Quote
  #2  
Old 10-05-2005, 16:57
redbull redbull is offline
Friend
 
Join Date: Mar 2004
Posts: 160
Rept. Given: 17
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 3
Thanks Rcvd at 6 Times in 6 Posts
redbull Reputation: 5
Some clues might be gathered from the UPX source code

Here are some interesting aticles for you

Relocation stripper and source
hxxp://www.jrsoftware.org/striprlc.php

Also check out the Morphine v2.7b src

Here is a story on Woodmann about the resource seciton
hxxp://www.woodmann.com/forum/showthread.php?t=4909&highlight=write+packer

Here is Writing Your Own Packer - by BigBoote
http://addict3d.org/index.php?page=viewarticle&type=security&ID=256


However all those articles dont quite answer your questions fully

Hope this helps!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Reversing resources tecnmarl General Discussion 1 03-07-2018 17:58
Resources....tools or manually?? crkelbery General Discussion 0 01-30-2005 04:25
PE Explorer won't show resources (help) Rhodium General Discussion 1 08-01-2003 15:14
Hide'n Resources Bogdanbjn General Discussion 2 07-19-2003 18:58


All times are GMT +8. The time now is 14:35.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2020 )