CODEWITHSUNDEEP
winapiportable-executable
SEQUENCE666
SEQUENCE666

Reputation: 19

How to determine and find resource section in PE file?

How to find starting offset of resource section in PE file ? 

BOOL IsResource(PIMAGE_SECTION_HEADER Input){



}

Upvotes: 0

Views: 2209

Answers (1)

bkausbk
bkausbk

Reputation: 2790

First you should take a look at the following PE file specification by Microsoft: Microsoft PE and COFF Specification

The information you are looking for is stored in the optional header at offset 112 and is interpreted as IMAGE_DATA_DIRECTORY. Take a look at page 23. This will give you the RVA (relative virtual address) and the size of the section. Interpretation of this section is explained in section 5.9. beginning at page 89.

The RVA is the address of the table relative to the base address of the image when the table is loaded.

Upvotes: 2

Related Questions