libPeConv
A library to load, manipulate, dump PE files.
Loading...
Searching...
No Matches
pe_mode_detector.h
Go to the documentation of this file.
1
6#pragma once
7
8#include <windows.h>
9
10#include "pe_hdrs_helper.h"
11
12namespace peconv {
13
17 bool is_pe_raw(
18 IN const BYTE* pe_buffer,
19 IN size_t pe_size
20 );
21
26 IN const BYTE* pe_buffer,
27 IN size_t pe_size
28 );
29
33 bool is_pe_expanded(
34 IN const BYTE* pe_buffer,
35 IN size_t pe_size
36 );
37
41 bool is_section_expanded(IN const BYTE* pe_buffer,
42 IN size_t pe_size,
43 IN const PIMAGE_SECTION_HEADER sec
44 );
45
46};// namespace peconv
bool is_section_expanded(IN const BYTE *pe_buffer, IN size_t pe_size, IN const PIMAGE_SECTION_HEADER sec)
bool is_pe_raw(IN const BYTE *pe_buffer, IN size_t pe_size)
bool is_pe_raw_eq_virtual(IN const BYTE *pe_buffer, IN size_t pe_size)
bool is_pe_expanded(IN const BYTE *pe_buffer, IN size_t pe_size)
Wrappers over various fields in the PE header. Read, write, parse PE headers.