mirror-ac/driver/pe.h

#ifndef PE_H
#define PE_H

#include "common.h"

#define IMAGE_DOS_SIGNATURE 0x5a4d     /* MZ   */
#define IMAGE_NT_SIGNATURE  0x00004550 /* PE00 */

PVOID
PeFindExportByName(_In_ PVOID Image, _In_ PCHAR Name);

PNT_HEADER_64
PeGetNtHeader(_In_ PVOID Image);

PIMAGE_DATA_DIRECTORY
PeGetExportDataDirectory(_In_ PVOID Image);

PIMAGE_EXPORT_DIRECTORY
PeGetExportDirectory(_In_ PVOID                 Image,
                     _In_ PIMAGE_DATA_DIRECTORY ExportDataDirectory);

UINT32
GetSectionCount(_In_ PNT_HEADER_64 Header);

PIMAGE_EXPORT_DIRECTORY
PeGetExportDirectorySafe(_In_ PVOID                 Image,
                         _In_ PIMAGE_DATA_DIRECTORY ExportDataDirectory);

PIMAGE_DATA_DIRECTORY
PeGetExportDataDirectorySafe(_In_ PVOID Image);

PNT_HEADER_64
PeGetNtHeaderSafe(_In_ PVOID Image);

UINT32
GetSectionCountSafe(_In_ PNT_HEADER_64 Header);

#endif