BOOL findSection(LPCWSTR lpModuleName, LPCSTR SectionName, LPVOID lpSection, DWORD *nSize)
{
        IMAGE_DOS_HEADER *DosHeader;
        IMAGE_NT_HEADERS *NtHeaders;
        IMAGE_FILE_HEADER *FileHeader;
        IMAGE_SECTION_HEADER *SectionHeader;
        WORD nSectionCount, i;
       
        DosHeader = (IMAGE_DOS_HEADER*)GetModuleHandleW(lpModuleName);
        NtHeaders = (IMAGE_NT_HEADERS*)(DosHeader + DosHeader->e_lfanew);
        FileHeader = &NtHeaders->FileHeader;
        nSectionCount = FileHeader->NumberOfSections;
        SectionHeader = (IMAGE_SECTION_HEADER*)(DosHeader + DosHeader->e_lfanew + sizeof(IMAGE_NT_HEADERS));
        for (i = 0; i < nSectionCount; i++, SectionHeader++)
         {
                if (0 == memcmp(SectionHeader->Name, SectionName, IMAGE_SIZEOF_SHORT_NAME))
                {
                        *lpSection = SectionHeader->VirtualAddress;
                        *nSize = SectionHeader->Misc.VirtualSize;
                        return TRUE;
                }
         }
        return FALSE;
}

[课程]Linux pwn 探索篇！