Question

I suppose there’s no way to use resource from exe without full loading it into memory. Let’s say I have plans to use large RC_DATA resource I prepared myself. Is it ok to find it inside my executable by signature scanning and use it with CreateFile and offset after that?

Thanks

Answer 1

I’m not sure if I understood you correctly, but you don’t load the entire exe into memory when you try to access it. All you need to do is:

HRSRC hres = FindResource(NULL, // Returns the current process as a resource
                          "Name",
                          RT_RCDATA); 

And then just load it:

HGLOBAL hglob = LoadResource(NULL,
                             hres);

And this will give you the pointer to the first byte:

LPVOID lpFirstByte = LockResource(hglob);

Hope this helps!