lib

package
v0.0.0-...-deef810 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Apr 4, 2016 License: MIT Imports: 9 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var DebugTypes = map[string]uint32{
	"IMAGE_DEBUG_TYPE_UNKNOWN":       0,
	"IMAGE_DEBUG_TYPE_COFF":          1,
	"IMAGE_DEBUG_TYPE_CODEVIEW":      2,
	"IMAGE_DEBUG_TYPE_FPO":           3,
	"IMAGE_DEBUG_TYPE_MISC":          4,
	"IMAGE_DEBUG_TYPE_EXCEPTION":     5,
	"IMAGE_DEBUG_TYPE_FIXUP":         6,
	"IMAGE_DEBUG_TYPE_OMAP_TO_SRC":   7,
	"IMAGE_DEBUG_TYPE_OMAP_FROM_SRC": 8,
	"IMAGE_DEBUG_TYPE_BORLAND":       9,
	"IMAGE_DEBUG_TYPE_RESERVED10":    10,
	"IMAGE_DEBUG_TYPE_CLSID":         11,
}
View Source 
var DirectoryEntryTypes = map[uint32]string{
	0:  "IMAGE_DIRECTORY_ENTRY_EXPORT",
	1:  "IMAGE_DIRECTORY_ENTRY_IMPORT",
	2:  "IMAGE_DIRECTORY_ENTRY_RESOURCE",
	3:  "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
	4:  "IMAGE_DIRECTORY_ENTRY_SECURITY",
	5:  "IMAGE_DIRECTORY_ENTRY_BASERELOC",
	6:  "IMAGE_DIRECTORY_ENTRY_DEBUG",
	7:  "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
	8:  "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
	9:  "IMAGE_DIRECTORY_ENTRY_TLS",
	10: "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
	11: "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
	12: "IMAGE_DIRECTORY_ENTRY_IAT",
	13: "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
	14: "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
	15: "IMAGE_DIRECTORY_ENTRY_RESERVED",
}
View Source 
var DllCharacteristics = map[string]uint32{
	"IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA":       0x0020,
	"IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE":          0x0040,
	"IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY":       0x0080,
	"IMAGE_DLLCHARACTERISTICS_NX_COMPAT":             0x0100,
	"IMAGE_DLLCHARACTERISTICS_NO_ISOLATION":          0x0200,
	"IMAGE_DLLCHARACTERISTICS_NO_SEH":                0x0400,
	"IMAGE_DLLCHARACTERISTICS_NO_BIND":               0x0800,
	"IMAGE_DLLCHARACTERISTICS_APPCONTAINER":          0x1000,
	"IMAGE_DLLCHARACTERISTICS_WDM_DRIVER":            0x2000,
	"IMAGE_DLLCHARACTERISTICS_GUARD_CF":              0x4000,
	"IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE": 0x8000,
}
View Source 
var ImageCharacteristics = map[string]uint32{
	"IMAGE_FILE_RELOCS_STRIPPED":         0x0001,
	"IMAGE_FILE_EXECUTABLE_IMAGE":        0x0002,
	"IMAGE_FILE_LINE_NUMS_STRIPPED":      0x0004,
	"IMAGE_FILE_LOCAL_SYMS_STRIPPED":     0x0008,
	"IMAGE_FILE_AGGRESIVE_WS_TRIM":       0x0010,
	"IMAGE_FILE_LARGE_ADDRESS_AWARE":     0x0020,
	"IMAGE_FILE_16BIT_MACHINE":           0x0040,
	"IMAGE_FILE_BYTES_REVERSED_LO":       0x0080,
	"IMAGE_FILE_32BIT_MACHINE":           0x0100,
	"IMAGE_FILE_DEBUG_STRIPPED":          0x0200,
	"IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP": 0x0400,
	"IMAGE_FILE_NET_RUN_FROM_SWAP":       0x0800,
	"IMAGE_FILE_SYSTEM":                  0x1000,
	"IMAGE_FILE_DLL":                     0x2000,
	"IMAGE_FILE_UP_SYSTEM_ONLY":          0x4000,
	"IMAGE_FILE_BYTES_REVERSED_HI":       0x8000,
}
View Source 
var Lang = map[string]uint32{
	"LANG_NEUTRAL":        0x00,
	"LANG_INVARIANT":      0x7f,
	"LANG_AFRIKAANS":      0x36,
	"LANG_ALBANIAN":       0x1c,
	"LANG_ARABIC":         0x01,
	"LANG_ARMENIAN":       0x2b,
	"LANG_ASSAMESE":       0x4d,
	"LANG_AZERI":          0x2c,
	"LANG_BASQUE":         0x2d,
	"LANG_BELARUSIAN":     0x23,
	"LANG_BENGALI":        0x45,
	"LANG_BULGARIAN":      0x02,
	"LANG_CATALAN":        0x03,
	"LANG_CHINESE":        0x04,
	"LANG_CROATIAN":       0x1a,
	"LANG_CZECH":          0x05,
	"LANG_DANISH":         0x06,
	"LANG_DIVEHI":         0x65,
	"LANG_DUTCH":          0x13,
	"LANG_ENGLISH":        0x09,
	"LANG_ESTONIAN":       0x25,
	"LANG_FAEROESE":       0x38,
	"LANG_FARSI":          0x29,
	"LANG_FINNISH":        0x0b,
	"LANG_FRENCH":         0x0c,
	"LANG_GALICIAN":       0x56,
	"LANG_GEORGIAN":       0x37,
	"LANG_GERMAN":         0x07,
	"LANG_GREEK":          0x08,
	"LANG_GUJARATI":       0x47,
	"LANG_HEBREW":         0x0d,
	"LANG_HINDI":          0x39,
	"LANG_HUNGARIAN":      0x0e,
	"LANG_ICELANDIC":      0x0f,
	"LANG_INDONESIAN":     0x21,
	"LANG_ITALIAN":        0x10,
	"LANG_JAPANESE":       0x11,
	"LANG_KANNADA":        0x4b,
	"LANG_KASHMIRI":       0x60,
	"LANG_KAZAK":          0x3f,
	"LANG_KONKANI":        0x57,
	"LANG_KOREAN":         0x12,
	"LANG_KYRGYZ":         0x40,
	"LANG_LATVIAN":        0x26,
	"LANG_LITHUANIAN":     0x27,
	"LANG_MACEDONIAN":     0x2f,
	"LANG_MALAY":          0x3e,
	"LANG_MALAYALAM":      0x4c,
	"LANG_MANIPURI":       0x58,
	"LANG_MARATHI":        0x4e,
	"LANG_MONGOLIAN":      0x50,
	"LANG_NEPALI":         0x61,
	"LANG_NORWEGIAN":      0x14,
	"LANG_ORIYA":          0x48,
	"LANG_POLISH":         0x15,
	"LANG_PORTUGUESE":     0x16,
	"LANG_PUNJABI":        0x46,
	"LANG_ROMANIAN":       0x18,
	"LANG_RUSSIAN":        0x19,
	"LANG_SANSKRIT":       0x4f,
	"LANG_SERBIAN":        0x1a,
	"LANG_SINDHI":         0x59,
	"LANG_SLOVAK":         0x1b,
	"LANG_SLOVENIAN":      0x24,
	"LANG_SPANISH":        0x0a,
	"LANG_SWAHILI":        0x41,
	"LANG_SWEDISH":        0x1d,
	"LANG_SYRIAC":         0x5a,
	"LANG_TAMIL":          0x49,
	"LANG_TATAR":          0x44,
	"LANG_TELUGU":         0x4a,
	"LANG_THAI":           0x1e,
	"LANG_TURKISH":        0x1f,
	"LANG_UKRAINIAN":      0x22,
	"LANG_URDU":           0x20,
	"LANG_UZBEK":          0x43,
	"LANG_VIETNAMESE":     0x2a,
	"LANG_GAELIC":         0x3c,
	"LANG_MALTESE":        0x3a,
	"LANG_MAORI":          0x28,
	"LANG_RHAETO_ROMANCE": 0x17,
	"LANG_SAAMI":          0x3b,
	"LANG_SORBIAN":        0x2e,
	"LANG_SUTU":           0x30,
	"LANG_TSONGA":         0x31,
	"LANG_TSWANA":         0x32,
	"LANG_VENDA":          0x33,
	"LANG_XHOSA":          0x34,
	"LANG_ZULU":           0x35,
	"LANG_ESPERANTO":      0x8f,
	"LANG_WALON":          0x90,
	"LANG_CORNISH":        0x91,
	"LANG_WELSH":          0x92,
	"LANG_BRETON":         0x93,
}

Language definitions

View Source 
var MachineTypes = map[string]uint32{
	"IMAGE_FILE_MACHINE_UNKNOWN":   0,
	"IMAGE_FILE_MACHINE_I386":      0x014c,
	"IMAGE_FILE_MACHINE_R3000":     0x0162,
	"IMAGE_FILE_MACHINE_R4000":     0x0166,
	"IMAGE_FILE_MACHINE_R10000":    0x0168,
	"IMAGE_FILE_MACHINE_WCEMIPSV2": 0x0169,
	"IMAGE_FILE_MACHINE_ALPHA":     0x0184,
	"IMAGE_FILE_MACHINE_SH3":       0x01a2,
	"IMAGE_FILE_MACHINE_SH3DSP":    0x01a3,
	"IMAGE_FILE_MACHINE_SH3E":      0x01a4,
	"IMAGE_FILE_MACHINE_SH4":       0x01a6,
	"IMAGE_FILE_MACHINE_SH5":       0x01a8,
	"IMAGE_FILE_MACHINE_ARM":       0x01c0,
	"IMAGE_FILE_MACHINE_THUMB":     0x01c2,
	"IMAGE_FILE_MACHINE_ARMNT":     0x01c4,
	"IMAGE_FILE_MACHINE_AM33":      0x01d3,
	"IMAGE_FILE_MACHINE_POWERPC":   0x01f0,
	"IMAGE_FILE_MACHINE_POWERPCFP": 0x01f1,
	"IMAGE_FILE_MACHINE_IA64":      0x0200,
	"IMAGE_FILE_MACHINE_MIPS16":    0x0266,
	"IMAGE_FILE_MACHINE_ALPHA64":   0x0284,
	"IMAGE_FILE_MACHINE_AXP64":     0x0284,
	"IMAGE_FILE_MACHINE_MIPSFPU":   0x0366,
	"IMAGE_FILE_MACHINE_MIPSFPU16": 0x0466,
	"IMAGE_FILE_MACHINE_TRICORE":   0x0520,
	"IMAGE_FILE_MACHINE_CEF":       0x0cef,
	"IMAGE_FILE_MACHINE_EBC":       0x0ebc,
	"IMAGE_FILE_MACHINE_AMD64":     0x8664,
	"IMAGE_FILE_MACHINE_M32R":      0x9041,
	"IMAGE_FILE_MACHINE_CEE":       0xc0ee,
}
View Source 
var RelocationTypes = map[string]uint32{
	"IMAGE_REL_BASED_ABSOLUTE":       0,
	"IMAGE_REL_BASED_HIGH":           1,
	"IMAGE_REL_BASED_LOW":            2,
	"IMAGE_REL_BASED_HIGHLOW":        3,
	"IMAGE_REL_BASED_HIGHADJ":        4,
	"IMAGE_REL_BASED_MIPS_JMPADDR":   5,
	"IMAGE_REL_BASED_SECTION":        6,
	"IMAGE_REL_BASED_REL":            7,
	"IMAGE_REL_BASED_MIPS_JMPADDR16": 9,
	"IMAGE_REL_BASED_IA64_IMM64":     9,
	"IMAGE_REL_BASED_DIR64":          10,
	"IMAGE_REL_BASED_HIGH3ADJ":       11,
}
View Source 
var ResourceType = map[string]uint32{
	"RT_CURSOR":       1,
	"RT_BITMAP":       2,
	"RT_ICON":         3,
	"RT_MENU":         4,
	"RT_DIALOG":       5,
	"RT_STRING":       6,
	"RT_FONTDIR":      7,
	"RT_FONT":         8,
	"RT_ACCELERATOR":  9,
	"RT_RCDATA":       10,
	"RT_MESSAGETABLE": 11,
	"RT_GROUP_CURSOR": 12,
	"RT_GROUP_ICON":   14,
	"RT_VERSION":      16,
	"RT_DLGINCLUDE":   17,
	"RT_PLUGPLAY":     19,
	"RT_VXD":          20,
	"RT_ANICURSOR":    21,
	"RT_ANIICON":      22,
	"RT_HTML":         23,
	"RT_MANIFEST":     24,
}

Resource types

View Source 
var SectionCharacteristics = map[string]uint32{
	"IMAGE_SCN_TYPE_REG":    0x00000000,
	"IMAGE_SCN_TYPE_DSECT":  0x00000001,
	"IMAGE_SCN_TYPE_NOLOAD": 0x00000002,
	"IMAGE_SCN_TYPE_GROUP":  0x00000004,
	"IMAGE_SCN_TYPE_NO_PAD": 0x00000008,
	"IMAGE_SCN_TYPE_COPY":   0x00000010,

	"IMAGE_SCN_CNT_CODE":               0x00000020,
	"IMAGE_SCN_CNT_INITIALIZED_DATA":   0x00000040,
	"IMAGE_SCN_CNT_UNINITIALIZED_DATA": 0x00000080,

	"IMAGE_SCN_LNK_OTHER":  0x00000100,
	"IMAGE_SCN_LNK_INFO":   0x00000200,
	"IMAGE_SCN_LNK_OVER":   0x00000400,
	"IMAGE_SCN_LNK_REMOVE": 0x00000800,
	"IMAGE_SCN_LNK_COMDAT": 0x00001000,

	"IMAGE_SCN_MEM_PROTECTED":     0x00004000,
	"IMAGE_SCN_NO_DEFER_SPEC_EXC": 0x00004000,
	"IMAGE_SCN_GPREL":             0x00008000,
	"IMAGE_SCN_MEM_FARDATA":       0x00008000,
	"IMAGE_SCN_MEM_SYSHEAP":       0x00010000,
	"IMAGE_SCN_MEM_PURGEABLE":     0x00020000,
	"IMAGE_SCN_MEM_16BIT":         0x00020000,
	"IMAGE_SCN_MEM_LOCKED":        0x00040000,
	"IMAGE_SCN_MEM_PRELOAD":       0x00080000,

	"IMAGE_SCN_ALIGN_1BYTES":    0x00100000,
	"IMAGE_SCN_ALIGN_2BYTES":    0x00200000,
	"IMAGE_SCN_ALIGN_4BYTES":    0x00300000,
	"IMAGE_SCN_ALIGN_8BYTES":    0x00400000,
	"IMAGE_SCN_ALIGN_16BYTES":   0x00500000,
	"IMAGE_SCN_ALIGN_32BYTES":   0x00600000,
	"IMAGE_SCN_ALIGN_64BYTES":   0x00700000,
	"IMAGE_SCN_ALIGN_128BYTES":  0x00800000,
	"IMAGE_SCN_ALIGN_256BYTES":  0x00900000,
	"IMAGE_SCN_ALIGN_512BYTES":  0x00A00000,
	"IMAGE_SCN_ALIGN_1024BYTES": 0x00B00000,
	"IMAGE_SCN_ALIGN_2048BYTES": 0x00C00000,
	"IMAGE_SCN_ALIGN_4096BYTES": 0x00D00000,
	"IMAGE_SCN_ALIGN_8192BYTES": 0x00E00000,
	"IMAGE_SCN_ALIGN_MASK":      0x00F00000,

	"IMAGE_SCN_LNK_NRELOC_OVFL": 0x01000000,
	"IMAGE_SCN_MEM_DISCARDABLE": 0x02000000,
	"IMAGE_SCN_MEM_NOT_CACHED":  0x04000000,
	"IMAGE_SCN_MEM_NOT_PAGED":   0x08000000,
	"IMAGE_SCN_MEM_SHARED":      0x10000000,
	"IMAGE_SCN_MEM_EXECUTE":     0x20000000,
	"IMAGE_SCN_MEM_READ":        0x40000000,
	"IMAGE_SCN_MEM_WRITE":       0x80000000,
}
View Source 
var Sublang = map[string]uint32{}/* 103 elements not displayed */

Sublanguage definitions

View Source 
var SubsystemTypes = map[string]uint32{
	"IMAGE_SUBSYSTEM_UNKNOWN":                  0,
	"IMAGE_SUBSYSTEM_NATIVE":                   1,
	"IMAGE_SUBSYSTEM_WINDOWS_GUI":              2,
	"IMAGE_SUBSYSTEM_WINDOWS_CUI":              3,
	"IMAGE_SUBSYSTEM_OS2_CUI":                  5,
	"IMAGE_SUBSYSTEM_POSIX_CUI":                7,
	"IMAGE_SUBSYSTEM_NATIVE_WINDOWS":           8,
	"IMAGE_SUBSYSTEM_WINDOWS_CE_GUI":           9,
	"IMAGE_SUBSYSTEM_EFI_APPLICATION":          10,
	"IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER":  11,
	"IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER":       12,
	"IMAGE_SUBSYSTEM_EFI_ROM":                  13,
	"IMAGE_SUBSYSTEM_XBOX":                     14,
	"IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION": 16,
}

Functions

func EmptyStruct 

func EmptyStruct(iface interface{}) bool

func SetFlags 

func SetFlags(flagMap map[string]bool, charMap map[string]uint32, characteristic uint32)

Call this function after the data has been parsed

Types

type BaseRelocation 

type BaseRelocation struct {
	Data       BaseRelocationD
	FileOffset uint32
	Size       uint32
}

BaseRelocation

func NewBaseRelocation 

func NewBaseRelocation(fileOffset uint32) (header *BaseRelocation)

func (*BaseRelocation) String 

func (self *BaseRelocation) String() string

type BaseRelocationD 

type BaseRelocationD struct {
	VirtualAddress uint32
	SizeOfBlock    uint32
}

type BaseRelocationEntry 

type BaseRelocationEntry struct {
	Data       BaseRelocationEntryD
	FileOffset uint32
	Size       uint32
}

BaseRelocationEntry

func NewBaseRelocationEntry 

func NewBaseRelocationEntry(fileOffset uint32) (header *BaseRelocationEntry)

func (*BaseRelocationEntry) String 

func (self *BaseRelocationEntry) String() string

type BaseRelocationEntryD 

type BaseRelocationEntryD struct {
	Data uint16
}

type BoundForwarderRef 

type BoundForwarderRef struct {
	Data       BoundForwarderRefD
	FileOffset uint32
	Size       uint32
}

BoundForwarderRef

func NewBoundForwarderRef 

func NewBoundForwarderRef(fileOffset uint32) (header *BoundForwarderRef)

func (*BoundForwarderRef) String 

func (self *BoundForwarderRef) String() string

type BoundForwarderRefD 

type BoundForwarderRefD struct {
	TimeDateStamp    uint32
	OffsetModuleName uint16
	Reserved         uint16
}

type BoundImportDescriptor 

type BoundImportDescriptor struct {
	Data       BoundImportDescriptorD
	FileOffset uint32
	Size       uint32
}

BoundImportDescriptor

func NewBoundImportDescriptor 

func NewBoundImportDescriptor(fileOffset uint32) (header *BoundImportDescriptor)

func (*BoundImportDescriptor) String 

func (self *BoundImportDescriptor) String() string

type BoundImportDescriptorD 

type BoundImportDescriptorD struct {
	TimeDateStamp               uint32
	OffsetModuleName            uint16
	NumberOfModuleForwarderRefs uint16
}

type DataDirectory 

type DataDirectory struct {
	Data       DataDirectoryD
	FileOffset uint32
	Name       string
	Size       uint32
}

func NewDataDirectory 

func NewDataDirectory(fileOffset uint32) (header *DataDirectory)

func (*DataDirectory) String 

func (self *DataDirectory) String() string

type DataDirectoryD 

type DataDirectoryD struct {
	VirtualAddress uint32
	Size           uint32
}

type DebugDirectory 

type DebugDirectory struct {
	Data       DebugDirectoryD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

DebugDirectory

func NewDebugDirectory 

func NewDebugDirectory(fileOffset uint32) (header *DebugDirectory)

func (*DebugDirectory) String 

func (self *DebugDirectory) String() string

type DebugDirectoryD 

type DebugDirectoryD struct {
	Characteristics  uint32
	TimeDateStamp    uint32
	MajorVersion     uint16
	MinorVersion     uint16
	Type             uint32
	SizeOfData       uint32
	AddressOfRawData uint32
	PointerToRawData uint32
}

type DelayImportDescriptor 

type DelayImportDescriptor struct {
	Data       DelayImportDescriptorD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

Delay Import Descriptor

func NewDelayImportDescriptor 

func NewDelayImportDescriptor(fileOffset uint32) (header *DelayImportDescriptor)

func (*DelayImportDescriptor) String 

func (self *DelayImportDescriptor) String() string

type DelayImportDescriptorD 

type DelayImportDescriptorD struct {
	DIgrAttrs     uint32
	DIszName      uint32
	DIphmod       uint32
	DIpIAT        uint32
	DIpINT        uint32
	DIpBoundIAT   uint32
	DIpUnloadIAT  uint32
	DIdwTimeStamp uint32
}

type DosHeader 

type DosHeader struct {
	Data       DosHeaderD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

func NewDosHeader 

func NewDosHeader(fileOffset uint32) (header *DosHeader)

func (*DosHeader) String 

func (self *DosHeader) String() string

type DosHeaderD 

type DosHeaderD struct {
	E_magic    uint16
	E_cblp     uint16
	E_cp       uint16
	E_crlc     uint16
	E_cparhd   uint16
	E_minalloc uint16
	E_maxalloc uint16
	E_ss       uint16
	E_sp       uint16
	E_csum     uint16
	E_ip       uint16
	E_cs       uint16
	E_lfarlc   uint16
	E_ovno     uint16
	E_res      [8]uint8
	E_oemid    uint16
	E_oeminfo  uint16
	E_res2     [20]uint8
	E_lfanew   uint32
}

type ExportData 

type ExportData struct {
	Ordinal         uint16
	OrdinalOffset   uint32
	Address         uint32
	AddressOffset   uint32
	Name            []byte //
	NameOffset      uint32 //
	Forwarder       []byte
	ForwarderOffset uint32
}

func (ExportData) String 

func (self ExportData) String() string

type ExportDirectory 

type ExportDirectory struct {
	Data       ExportDirectoryD
	FileOffset uint32
	Flags      map[string]bool
	Exports    []*ExportData
	Size       uint32
}

Export Directory

func NewExportDirectory 

func NewExportDirectory(fileOffset uint32) (header *ExportDirectory)

func (*ExportDirectory) String 

func (self *ExportDirectory) String() string

type ExportDirectoryD 

type ExportDirectoryD struct {
	Characteristics       uint32
	TimeDateStamp         uint32
	MajorVersion          uint16
	MinorVersion          uint16
	Name                  uint32
	Base                  uint32
	NumberOfFunctions     uint32
	NumberOfNames         uint32
	AddressOfFunctions    uint32
	AddressOfNames        uint32
	AddressOfNameOrdinals uint32
}

type FileHeader 

type FileHeader struct {
	Data       FileHeaderD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

func NewFileHeader 

func NewFileHeader(fileOffset uint32) (header *FileHeader)

func (*FileHeader) String 

func (self *FileHeader) String() string

type FileHeaderD 

type FileHeaderD struct {
	Machine              uint16
	NumberOfSections     uint16
	TimeDateStamp        uint32
	PointerToSymbolTable uint32
	NumberOfSymbols      uint32
	SizeOfOptionalHeader uint16
	Characteristics      uint16
}

type ImportData 

type ImportData struct {
	StructTable      *ThunkData
	StructIat        *ThunkData
	ImportByOrdinal  bool
	Ordinal          uint32
	OrdinalOffset    uint32
	Hint             uint16
	Name             []byte
	NameOffset       uint32
	Bound            uint32
	Address          uint32
	HintNameTableRva uint32
	ThunkOffset      uint32
	ThunkRva         uint32
}

func (ImportData) String 

func (self ImportData) String() string

type ImportData64 

type ImportData64 struct {
	StructTable      *ThunkData64
	StructIat        *ThunkData64
	ImportByOrdinal  bool
	Ordinal          uint64
	OrdinalOffset    uint64
	Hint             uint16
	Name             []byte
	NameOffset       uint64
	Bound            uint64
	Address          uint64
	HintNameTableRva uint64
	ThunkOffset      uint64
	ThunkRva         uint64
}

func (ImportData64) String 

func (self ImportData64) String() string

type ImportDescriptor 

type ImportDescriptor struct {
	Data       ImportDescriptorD
	FileOffset uint32
	Flags      map[string]bool
	Dll        []byte
	Imports    []*ImportData
	Imports64  []*ImportData64
	Size       uint32
}

Image Import Descriptor

func NewImportDescriptor 

func NewImportDescriptor(fileOffset uint32) (header *ImportDescriptor)

func (*ImportDescriptor) String 

func (self *ImportDescriptor) String() string

type ImportDescriptorD 

type ImportDescriptorD struct {
	Characteristics uint32
	TimeDateStamp   uint32
	ForwarderChain  uint32
	Name            uint32
	FirstThunk      uint32
}

type LoadConfigDirectory 

type LoadConfigDirectory struct {
	Data       LoadConfigDirectoryD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

LoadConfigDirectory

func NewLoadConfigDirectory 

func NewLoadConfigDirectory(fileOffset uint32) (header *LoadConfigDirectory)

func (*LoadConfigDirectory) String 

func (self *LoadConfigDirectory) String() string

type LoadConfigDirectory64 

type LoadConfigDirectory64 struct {
	Data       LoadConfigDirectory64D
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

LoadConfigDirectory64

func NewLoadConfigDirectory64 

func NewLoadConfigDirectory64(fileOffset uint32) (header *LoadConfigDirectory64)

func (*LoadConfigDirectory64) String 

func (self *LoadConfigDirectory64) String() string

type LoadConfigDirectory64D 

type LoadConfigDirectory64D struct {
	Size                          uint32
	TimeDateStamp                 uint32
	MajorVersion                  uint16
	MinorVersion                  uint16
	GlobalFlagsClear              uint32
	GlobalFlagsSet                uint32
	CriticalSectionDefaultTimeout uint32
	DeCommitFreeBlockThreshold    uint64
	DeCommitTotalFreeThreshold    uint64
	LockPrefixTable               uint64
	MaximumAllocationSize         uint64
	VirtualMemoryThreshold        uint64
	ProcessAffinityMask           uint64
	ProcessHeapFlags              uint32
	CSDVersion                    uint16
	Reserved1                     uint16
	EditList                      uint64
	SecurityCookie                uint64
	SEHandlerTable                uint64
	SEHandlerCount                uint64
	GuardCFCheckFunctionPointer   uint64
	Reserved2                     uint64
	GuardCFFunctionTable          uint64
	GuardCFFunctionCount          uint64
	GuardFlags                    uint32
}

type LoadConfigDirectoryD 

type LoadConfigDirectoryD struct {
	Size                          uint32
	TimeDateStamp                 uint32
	MajorVersion                  uint16
	MinorVersion                  uint16
	GlobalFlagsClear              uint32
	GlobalFlagsSet                uint32
	CriticalSectionDefaultTimeout uint32
	DeCommitFreeBlockThreshold    uint32
	DeCommitTotalFreeThreshold    uint32
	LockPrefixTable               uint32
	MaximumAllocationSize         uint32
	VirtualMemoryThreshold        uint32
	ProcessHeapFlags              uint32
	ProcessAffinityMask           uint32
	CSDVersion                    uint16
	Reserved1                     uint16
	EditList                      uint32
	SecurityCookie                uint32
	SEHandlerTable                uint32
	SEHandlerCount                uint32
	GuardCFCheckFunctionPointer   uint32
	Reserved2                     uint32
	GuardCFFunctionTable          uint32
	GuardCFFunctionCount          uint32
	GuardFlags                    uint32
}

type NTHeader 

type NTHeader struct {
	Data       NTHeaderD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

func NewNTHeader 

func NewNTHeader(fileOffset uint32) (header *NTHeader)

func (*NTHeader) String 

func (self *NTHeader) String() string

type NTHeaderD 

type NTHeaderD struct {
	Signature uint32
}

type OptionalHeader 

type OptionalHeader struct {
	Data       OptionalHeaderD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
	DataDirs   map[string]*DataDirectory
}

func NewOptionalHeader 

func NewOptionalHeader(fileOffset uint32) (header *OptionalHeader)

func (*OptionalHeader) String 

func (self *OptionalHeader) String() string

type OptionalHeader64 

type OptionalHeader64 struct {
	Data       OptionalHeader64D
	FileOffset uint32
	Flags      map[string]bool
	DataDirs   map[string]*DataDirectory
	Size       uint32
}

func NewOptionalHeader64 

func NewOptionalHeader64(fileOffset uint32) (header *OptionalHeader64)

func (*OptionalHeader64) String 

func (self *OptionalHeader64) String() string

type OptionalHeader64D 

type OptionalHeader64D struct {
	Magic                       uint16
	MajorLinkerVersion          uint8
	MinorLinkerVersion          uint8
	SizeOfCode                  uint32
	SizeOfInitializedData       uint32
	SizeOfUninitializedData     uint32
	AddressOfEntryPoint         uint32
	BaseOfCode                  uint32
	BaseOfData                  uint32
	ImageBase                   uint32
	SectionAlignment            uint32
	FileAlignment               uint32
	MajorOperatingSystemVersion uint16
	MinorOperatingSystemVersion uint16
	MajorImageVersion           uint16
	MinorImageVersion           uint16
	MajorSubsystemVersion       uint16
	MinorSubsystemVersion       uint16
	Reserved1                   uint32
	SizeOfImage                 uint32
	SizeOfHeaders               uint32
	CheckSum                    uint32
	Subsystem                   uint16
	DllCharacteristics          uint16
	SizeOfStackReserve          uint64 // Different after this point, specific checks needed
	SizeOfStackCommit           uint64
	SizeOfHeapReserve           uint64
	SizeOfHeapCommit            uint64
	LoaderFlags                 uint32
	NumberOfRvaAndSizes         uint32
}

type OptionalHeaderD 

type OptionalHeaderD struct {
	Magic                       uint16
	MajorLinkerVersion          uint8
	MinorLinkerVersion          uint8
	SizeOfCode                  uint32
	SizeOfInitializedData       uint32
	SizeOfUninitializedData     uint32
	AddressOfEntryPoint         uint32
	BaseOfCode                  uint32
	BaseOfData                  uint32
	ImageBase                   uint32
	SectionAlignment            uint32
	FileAlignment               uint32
	MajorOperatingSystemVersion uint16
	MinorOperatingSystemVersion uint16
	MajorImageVersion           uint16
	MinorImageVersion           uint16
	MajorSubsystemVersion       uint16
	MinorSubsystemVersion       uint16
	Reserved1                   uint32
	SizeOfImage                 uint32
	SizeOfHeaders               uint32
	CheckSum                    uint32
	Subsystem                   uint16
	DllCharacteristics          uint16
	SizeOfStackReserve          uint32
	SizeOfStackCommit           uint32
	SizeOfHeapReserve           uint32
	SizeOfHeapCommit            uint32
	LoaderFlags                 uint32
	NumberOfRvaAndSizes         uint32
}

type ResourceDataEntry 

type ResourceDataEntry struct {
	Data       ResourceDataEntryD
	FileOffset uint32
	Size       uint32
}

Resource Data Entry

func NewResourceDataEntry 

func NewResourceDataEntry(fileOffset uint32) (header *ResourceDataEntry)

func (*ResourceDataEntry) String 

func (self *ResourceDataEntry) String() string

type ResourceDataEntryD 

type ResourceDataEntryD struct {
	OffsetToData uint32
	Size         uint32
	CodePage     uint32
	Reserved     uint32
}

type ResourceDirectory 

type ResourceDirectory struct {
	Data       ResourceDirectoryD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

Resource Directory

func NewResourceDirectory 

func NewResourceDirectory(fileOffset uint32) (header *ResourceDirectory)

func (*ResourceDirectory) String 

func (self *ResourceDirectory) String() string

type ResourceDirectoryD 

type ResourceDirectoryD struct {
	Characteristics      uint32
	TimeDateStamp        uint32
	MajorVersion         uint16
	MinorVersion         uint16
	NumberOfNamedEntries uint16
	NumberOfIdEntries    uint16
}

type ResourceDirectoryEntry 

type ResourceDirectoryEntry struct {
	Data       ResourceDirectoryEntryD
	FileOffset uint32
	Size       uint32
}

Resource Directory Entry

func NewResourceDirectoryEntry 

func NewResourceDirectoryEntry(fileOffset uint32) (header *ResourceDirectoryEntry)

func (*ResourceDirectoryEntry) String 

func (self *ResourceDirectoryEntry) String() string

type ResourceDirectoryEntryD 

type ResourceDirectoryEntryD struct {
	Name         uint32
	OffsetToData uint32
}

type SectionHeader 

type SectionHeader struct {
	Data           SectionHeaderD
	FileOffset     uint32
	Flags          map[string]bool
	Size           uint32
	NextHeaderAddr uint32
}

func NewSectionHeader 

func NewSectionHeader(fileOffset uint32) (header *SectionHeader)

func (*SectionHeader) Get_entropy 

func (self *SectionHeader) Get_entropy(data []byte) float64

func (*SectionHeader) Get_hash_md5 

func (self *SectionHeader) Get_hash_md5(data []byte) string

func (*SectionHeader) Get_hash_sha1 

func (self *SectionHeader) Get_hash_sha1(data []byte) string

func (*SectionHeader) Get_hash_sha256 

func (self *SectionHeader) Get_hash_sha256(data []byte) string

func (*SectionHeader) Get_hash_sha512 

func (self *SectionHeader) Get_hash_sha512(data []byte) string

func (*SectionHeader) String 

func (self *SectionHeader) String() string

type SectionHeaderD 

type SectionHeaderD struct {
	Name                 [8]uint8
	Misc                 uint32
	VirtualAddress       uint32
	SizeOfRawData        uint32
	PointerToRawData     uint32
	PointerToRelocations uint32
	PointerToLinenumbers uint32
	NumberOfRelocations  uint16
	NumberOfLinenumbers  uint16
	Characteristics      uint32
}

type String 

type String struct {
	Data       StringD
	FileOffset uint32
	Size       uint32
}

String

func NewString 

func NewString(fileOffset uint32) (header *String)

func (*String) String 

func (self *String) String() string

type StringD 

type StringD struct {
	Length      uint16
	ValueLength uint16
	Type        uint16
}

type StringFileInfo 

type StringFileInfo struct {
	Data       StringFileInfoD
	FileOffset uint32
	Size       uint32
}

StringFileInfo

func NewStringFileInfo 

func NewStringFileInfo(fileOffset uint32) (header *StringFileInfo)

func (*StringFileInfo) String 

func (self *StringFileInfo) String() string

type StringFileInfoD 

type StringFileInfoD struct {
	Length      uint16
	ValueLength uint16
	Type        uint16
}

type StringTable 

type StringTable struct {
	Data       StringTableD
	FileOffset uint32
	Size       uint32
}

StringTable

func NewStringTable 

func NewStringTable(fileOffset uint32) (header *StringTable)

func (*StringTable) String 

func (self *StringTable) String() string

type StringTableD 

type StringTableD struct {
	Length      uint16
	ValueLength uint16
	Type        uint16
}

type TLSDirectory 

type TLSDirectory struct {
	Data       TLSDirectoryD
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

TLSDirectory

func NewTLSDirectory 

func NewTLSDirectory(fileOffset uint32) (header *TLSDirectory)

func (*TLSDirectory) String 

func (self *TLSDirectory) String() string

type TLSDirectory64 

type TLSDirectory64 struct {
	Data       TLSDirectory64D
	FileOffset uint32
	Flags      map[string]bool
	Size       uint32
}

TLSDirectory64

func NewTLSDirectory64 

func NewTLSDirectory64(fileOffset uint32) (header *TLSDirectory64)

func (*TLSDirectory64) String 

func (self *TLSDirectory64) String() string

type TLSDirectory64D 

type TLSDirectory64D struct {
	StartAddressOfRawData uint64
	EndAddressOfRawData   uint64
	AddressOfIndex        uint64
	AddressOfCallBacks    uint64
	SizeOfZeroFill        uint32
	Characteristics       uint32
}

type TLSDirectoryD 

type TLSDirectoryD struct {
	StartAddressOfRawData uint32
	EndAddressOfRawData   uint32
	AddressOfIndex        uint32
	AddressOfCallBacks    uint32
	SizeOfZeroFill        uint32
	Characteristics       uint32
}

type ThunkData 

type ThunkData struct {
	Data       ThunkDataD
	FileOffset uint32
	Size       uint32
}

ThunkData

func NewThunkData 

func NewThunkData(fileOffset uint32) (header *ThunkData)

func (*ThunkData) String 

func (self *ThunkData) String() string

type ThunkData64 

type ThunkData64 struct {
	Data       ThunkData64D
	FileOffset uint32
	Size       uint32
}

ThunkData64

func NewThunkData64 

func NewThunkData64(fileOffset uint32) (header *ThunkData64)

func (*ThunkData64) String 

func (self *ThunkData64) String() string

type ThunkData64D 

type ThunkData64D struct {
	AddressOfData uint64
}

type ThunkDataD 

type ThunkDataD struct {
	AddressOfData uint32
}

type VSFixedFileInfo 

type VSFixedFileInfo struct {
	Data       VSFixedFileInfoD
	FileOffset uint32
	Size       uint32
}

VSFixedFileInfo

func NewVSFixedFileInfo 

func NewVSFixedFileInfo(fileOffset uint32) (header *VSFixedFileInfo)

func (*VSFixedFileInfo) String 

func (self *VSFixedFileInfo) String() string

type VSFixedFileInfoD 

type VSFixedFileInfoD struct {
	Signature        uint32
	StrucVersion     uint32
	FileVersionMS    uint32
	FileVersionLS    uint32
	ProductVersionMS uint32
	ProductVersionLS uint32
	FileFlagsMask    uint32
	FileFlags        uint32
	FileOS           uint32
	FileType         uint32
	FileSubtype      uint32
	FileDateMS       uint32
	FileDateLS       uint32
}

type VSVersionInfo 

type VSVersionInfo struct {
	Data       VSVersionInfoD
	FileOffset uint32
	Size       uint32
}

VS Version Info

func NewVSVersionInfo 

func NewVSVersionInfo(fileOffset uint32) (header *VSVersionInfo)

func (*VSVersionInfo) String 

func (self *VSVersionInfo) String() string

type VSVersionInfoD 

type VSVersionInfoD struct {
	Length      uint16
	ValueLength uint16
	Type        uint16
}

type Var 

type Var struct {
	Data       VarD
	FileOffset uint32
	Size       uint32
}

Var

func NewVar 

func NewVar(fileOffset uint32) (header *Var)

func (*Var) String 

func (self *Var) String() string

type VarD 

type VarD struct {
	Length      uint16
	ValueLength uint16
	Type        uint16
}

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.