TheCruZ-kdmapper/kdmapper/include/portable_executable.hpp

#pragma once
#include <Windows.h>
#include <vector>
#include <string>

namespace portable_executable
{
	struct RelocInfo
	{
		ULONG64 address;
		USHORT* item;
		ULONG32 count;
	};

	struct ImportFunctionInfo
	{
		std::string name;
		ULONG64* address;
	};

	struct ImportInfo
	{
		std::string module_name;
		std::vector<ImportFunctionInfo> function_datas;
	};

	using vec_sections = std::vector<IMAGE_SECTION_HEADER>;
	using vec_relocs = std::vector<RelocInfo>;
	using vec_imports = std::vector<ImportInfo>;

	PIMAGE_NT_HEADERS64 GetNtHeaders(void* image_base);
	vec_relocs GetRelocs(void* image_base);
	vec_imports GetImports(void* image_base);
}