/* * Copyright (C) 2009 Sourcefire, Inc. * * Authors: aCaB <acab@clamav.net> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, * MA 02110-1301, USA. */ #ifndef __PE_ICONS_H #define __PE_ICONS_H #include "pe.h" struct icomtr { unsigned int color_avg[3]; unsigned int color_x[3]; unsigned int color_y[3]; unsigned int gray_avg[3]; unsigned int gray_x[3]; unsigned int gray_y[3]; unsigned int bright_avg[3]; unsigned int bright_x[3]; unsigned int bright_y[3]; unsigned int dark_avg[3]; unsigned int dark_x[3]; unsigned int dark_y[3]; unsigned int edge_avg[3]; unsigned int edge_x[3]; unsigned int edge_y[3]; unsigned int noedge_avg[3]; unsigned int noedge_x[3]; unsigned int noedge_y[3]; unsigned int rsum; unsigned int gsum; unsigned int bsum; unsigned int ccount; }; int scanicon(uint32_t resdir_rva, cli_ctx *ctx, struct cli_exe_section *exe_sections, uint16_t nsections, uint32_t hdr_size); #endif