hasherezade / libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
https://hasherezade.github.io/libpeconv
BSD 2-Clause "Simplified" License
1.07k stars 176 forks source link

peconv::parse_resource() question #19

Closed nblog closed 1 year ago

nblog commented 4 years ago
auto on_res_entry_found = [](
    BYTE* modulePtr,
    IMAGE_RESOURCE_DIRECTORY_ENTRY* root_dir,
    IMAGE_RESOURCE_DATA_ENTRY* curr_entry
    ) {
        return true;
};

peconv::parse_resources(execute_pe, on_res_entry_found);

I found that "root_dir" is always the first, maybe I'm wrong. I hope there are relevant examples.