Robert Baruch autophile@starband.net writes:
Hmm. Can you suggest an API call that would write to the resource area? Or is this more like, any time anywhere something writes to the resource area of any mapped PE file, allow it?
Anywhere something writes, yes. The problem is that resource data was writeable in Win16, and some (broken) apps depend on that. So on Win32 the resource area is read-only but if an app writes into it, it gets an exception and the default handler unprotects the resource area. There is an article somewhere on MSDN about this.