jadeite/game_payload/src/pe.c

31 lines
942 B
C
Raw Normal View History

2023-06-05 21:23:08 +00:00
#include <pe.h>
IMAGE_SECTION_HEADER *pe_find_section(HMODULE module, const char *section) {
2023-06-05 21:23:08 +00:00
char *cModule = (char*)module;
IMAGE_DOS_HEADER* dosHeader = (IMAGE_DOS_HEADER*)module;
IMAGE_NT_HEADERS64* ntHeaders = (IMAGE_NT_HEADERS64*)(cModule + dosHeader->e_lfanew);
2023-06-24 22:42:32 +00:00
WORD sectionCount = ntHeaders->FileHeader.NumberOfSections;
2023-06-05 21:23:08 +00:00
IMAGE_SECTION_HEADER* sectionHeader = (IMAGE_SECTION_HEADER*)(ntHeaders + 1);
2023-06-24 22:42:32 +00:00
for (WORD i = 0; i < sectionCount; i++) {
2023-06-05 21:23:08 +00:00
if (strncmp((char*)sectionHeader->Name, section, 8) == 0) {
return sectionHeader;
2023-06-05 21:23:08 +00:00
}
sectionHeader++;
}
return NULL;
2023-06-05 21:23:08 +00:00
}
void *pe_find_entry_point(HMODULE module) {
char *cModule = (char*)module;
IMAGE_DOS_HEADER* dosHeader = (IMAGE_DOS_HEADER*)module;
IMAGE_NT_HEADERS64* ntHeaders = (IMAGE_NT_HEADERS64*)(cModule + dosHeader->e_lfanew);
return cModule + ntHeaders->OptionalHeader.AddressOfEntryPoint;
}