From c834239830e4021d70d5c29a8691bacd3569d908 Mon Sep 17 00:00:00 2001 From: pancake Date: Tue, 5 Apr 2016 13:30:10 +0200 Subject: [PATCH] Find strings in more sections for PE binaries --- libr/bin/bin.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/libr/bin/bin.c b/libr/bin/bin.c index 17a68cb967..bbcb5cd1ee 100644 --- a/libr/bin/bin.c +++ b/libr/bin/bin.c @@ -277,8 +277,13 @@ static int is_data_section(RBinFile *a, RBinSection *s) { return true; #define X 1 #define ROW (4 | 2) + /* probably too much false positives in here, or thats fine? */ if (strstr (o->info->bclass, "PE") && s->srwx & ROW && !(s->srwx & X) && s->size > 0) { - if (!strcmp (s->name, ".rdata")) // Maybe other sections are interesting too? + if (!strcmp (s->name, ".rsrc")) + return true; + if (!strcmp (s->name, ".data")) + return true; + if (!strcmp (s->name, ".rdata")) return true; } }