Hi,
i have a question regarding the resource section in PE files.
i could't find some worthwhile documentation about this issue. what is the importance of the pointer to the resource table?
i had some file where i zeroed the pointer to the reasource table - and everything worked just fine (except - of course that i had no icon in explorer), when i tried this on notepad - nothing happened.

and i'm asking, if a piece of code is using some reasource, then it already "knows" where this reasource placed (isn't it?), so why (except for windows to know the icon and description) do we need this pointer?

no it does not. how is this code accesssing resources? trough an offset or by calling an api? resource api depend on it.

what do you hope to gain by zeroing that pointer???

Towelie, are you stoned again?
http://home.comcast.net/~jldraven/towelie.jpg

Hello:

The .rsrc section takes you to a directory where you can find some things that could be very useful to correct working of your program.

For instance, you could have there the "About" window of the program. So, if the pointer indicates zero you are not letting the application open this window.

For more information, you should read this link:


I was having doubts like yours just a little time ago!

Cheers

Nacho_dj

I know i'm OT but that was a great South Park episode o_o'''