12#define PAGE_SIZE 0x1000
39 bool is64bit(IN
const BYTE *pe_buffer);
46 IN
const BYTE *pe_buffer,
47 IN OPTIONAL
size_t buffer_size=0
63 LPVOID
get_optional_hdr(IN
const BYTE* payload, IN
const size_t buffer_size);
69 IN
const BYTE* payload,
70 IN
const size_t buffer_size
81 IMAGE_DATA_DIRECTORY*
get_directory_entry(IN
const BYTE* pe_buffer, IN DWORD dir_id, IN
bool allow_empty =
false);
86 template <
typename IMAGE_TYPE_DIRECTORY>
90 if (!my_dir)
return nullptr;
92 DWORD dir_addr = my_dir->VirtualAddress;
93 if (dir_addr == 0)
return nullptr;
95 return (IMAGE_TYPE_DIRECTORY*)(dir_addr + (ULONG_PTR)modulePtr);
125 IN
const BYTE* buffer,
126 IN
const size_t buffer_size
138 IN
const BYTE* pe_buffer,
139 IN
const size_t buffer_size,
140 IN
size_t section_num
156 bool is_dot_net(BYTE *pe_buffer,
size_t pe_buffer_size);
182 IN
const BYTE* pe_buffer,
183 IN
size_t const buffer_size,
184 IN
const IMAGE_DATA_DIRECTORY* dotNetDir
195 bool set_sec_alignment(IN OUT BYTE* pe_buffer, IN
bool is_raw, IN DWORD new_alignment);
201 IN
const BYTE* pe_hdr,
202 IN
const PIMAGE_SECTION_HEADER sec_hdr,
212 PIMAGE_SECTION_HEADER
get_last_section(IN
const PBYTE pe_buffer, IN
size_t pe_size, IN
bool is_raw);
221 IN
const PBYTE pe_buffer,
Definitions of the used buffer types. Functions for their allocation and deallocation.
bool update_entry_point_rva(IN OUT BYTE *pe_buffer, IN DWORD ep)
bool set_sec_alignment(IN OUT BYTE *pe_buffer, IN bool is_raw, IN DWORD new_alignment)
bool has_relocations(IN const BYTE *pe_buffer)
DWORD get_entry_point_rva(IN const BYTE *pe_buffer)
WORD get_nt_hdr_architecture(IN const BYTE *pe_buffer)
bool set_subsystem(IN OUT BYTE *payload, IN WORD subsystem)
bool is_dot_net(BYTE *pe_buffer, size_t pe_buffer_size)
DWORD get_virtual_sec_size(IN const BYTE *pe_hdr, IN const PIMAGE_SECTION_HEADER sec_hdr, IN bool rounded)
const IMAGE_FILE_HEADER * get_file_hdr(IN const BYTE *payload, IN const size_t buffer_size)
bool update_image_base(IN OUT BYTE *payload, IN ULONGLONG destImageBase)
bool is_valid_sections_hdr_offset(IN const BYTE *buffer, IN const size_t buffer_size)
ULONGLONG get_image_base(IN const BYTE *pe_buffer)
WORD get_file_characteristics(IN const BYTE *payload)
PIMAGE_SECTION_HEADER get_section_hdr(IN const BYTE *pe_buffer, IN const size_t buffer_size, IN size_t section_num)
IMAGE_TYPE_DIRECTORY * get_type_directory(IN HMODULE modulePtr, IN DWORD dir_id)
IMAGE_NT_HEADERS64 * get_nt_hdrs64(IN const BYTE *pe_buffer)
IMAGE_COR20_HEADER * get_dotnet_hdr(IN const BYTE *pe_buffer, IN size_t const buffer_size, IN const IMAGE_DATA_DIRECTORY *dotNetDir)
DWORD get_image_size(IN const BYTE *payload)
DWORD get_sec_alignment(IN const BYTE *modulePtr, IN bool is_raw)
bool is64bit(IN const BYTE *pe_buffer)
size_t get_sections_count(IN const BYTE *buffer, IN const size_t buffer_size)
IMAGE_NT_HEADERS32 * get_nt_hdrs32(IN const BYTE *pe_buffer)
bool update_image_size(IN OUT BYTE *payload, IN DWORD new_img_size)
const ULONGLONG MAX_HEADER_SIZE
DWORD get_hdrs_size(IN const BYTE *pe_buffer)
IMAGE_DATA_DIRECTORY * get_directory_entry(IN const BYTE *pe_buffer, IN DWORD dir_id, IN bool allow_empty=false)
PIMAGE_SECTION_HEADER get_last_section(IN const PBYTE pe_buffer, IN size_t pe_size, IN bool is_raw)
WORD get_dll_characteristics(IN const BYTE *payload)
IMAGE_EXPORT_DIRECTORY * get_export_directory(IN HMODULE modulePtr)
bool is_valid_sectons_alignment(IN const BYTE *buffer, IN const SIZE_T buffer_size, IN bool is_raw)
BYTE * get_nt_hdrs(IN const BYTE *pe_buffer, IN OPTIONAL size_t buffer_size=0)
DWORD calc_pe_size(IN const PBYTE pe_buffer, IN size_t pe_size, IN bool is_raw)
bool is_module_dll(IN const BYTE *payload)
WORD get_subsystem(IN const BYTE *payload)
LPVOID get_optional_hdr(IN const BYTE *payload, IN const size_t buffer_size)