Versions in this module Expand all Collapse all v0 v0.1.2 Oct 27, 2023 Changes in this version + const IMAGE_DIRECTORY_ENTRY_ARCHITECTURE + const IMAGE_DIRECTORY_ENTRY_BASERELOC + const IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT + const IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR + const IMAGE_DIRECTORY_ENTRY_DEBUG + const IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT + const IMAGE_DIRECTORY_ENTRY_EXCEPTION + const IMAGE_DIRECTORY_ENTRY_EXPORT + const IMAGE_DIRECTORY_ENTRY_GLOBALPTR + const IMAGE_DIRECTORY_ENTRY_IAT + const IMAGE_DIRECTORY_ENTRY_IMPORT + const IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG + const IMAGE_DIRECTORY_ENTRY_RESOURCE + const IMAGE_DIRECTORY_ENTRY_SECURITY + const IMAGE_DIRECTORY_ENTRY_TLS + const MAX_IMPORT_TABLE_LENGTH + const MAX_MESSAGES + const MAX_MESSAGE_LENGTH + const MAX_NUMBER_OF_SECTIONS + const MAX_RESOURCE_BLOCKS + const MAX_RESOURCE_DIRECTORY_LENGTH + const MAX_RESOURCE_STRING_TABLE_LENGTH + const MAX_WIN_CERTIFICATE_LENGTH + var OIDCAT_MEMBERINFO2_OBJID = asn1.ObjectIdentifier + var OIDCAT_MEMBERINFO_OBJID = asn1.ObjectIdentifier + var OIDCatalogList = asn1.ObjectIdentifier + var OIDCounterSignature = asn1.ObjectIdentifier + var OIDIndirectData = asn1.ObjectIdentifier + var OIDNameValueObjId = asn1.ObjectIdentifier + var OIDSPC_CAB_DATA_OBJID = asn1.ObjectIdentifier + var OIDSPC_PE_IMAGE_DATA_OBJID = []int + var OID_CATALOG_LIST_MEMBER_V2 = asn1.ObjectIdentifier + var PE_DEBUG bool + func CapInt32(v int32, max int32) int32 + func CapInt64(v int64, max int64) int64 + func CapUint16(v uint16, max uint16) uint16 + func CapUint32(v uint32, max uint32) uint32 + func CapUint64(v uint64, max uint64) uint64 + func Debug(arg interface{}) + func DebugPrint(fmt_str string, v ...interface{}) + func GetImports(nt_header *IMAGE_NT_HEADERS, rva_resolver *RVAResolver) []string + func GetVersionInformation(nt_header *IMAGE_NT_HEADERS, rva_resolver *RVAResolver, resource_base int64) *ordereddict.Dict + func IsInExportDir(dir *IMAGE_DATA_DIRECTORY, va uint32) bool + func PKCS7ToOrderedDict(self *pkcs7.PKCS7) *ordereddict.Dict + func ParseArray_byte(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []byte + func ParseArray_uint16(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []uint16 + func ParseArray_uint32(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []uint32 + func ParseArray_uint64(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []uint64 + func ParseAuthenticode(pe *PEFile) (*pkcs7.PKCS7, error) + func ParseInt32(reader io.ReaderAt, offset int64) int32 + func ParseString(reader io.ReaderAt, offset int64, length int64) string + func ParseTerminatedString(reader io.ReaderAt, offset int64) string + func ParseTerminatedUTF16String(reader io.ReaderAt, offset int64) string + func ParseUTF16String(reader io.ReaderAt, offset int64, length int64) string + func ParseUint16(reader io.ReaderAt, offset int64) uint16 + func ParseUint32(reader io.ReaderAt, offset int64) uint32 + func ParseUint64(reader io.ReaderAt, offset int64) uint64 + func ParseUint8(reader io.ReaderAt, offset int64) byte + func RoundUpToWordAlignment(offset int64) int64 + func UTF16BytesToUTF8(b []byte, o binary.ByteOrder) string + func UTF16ToString(in []byte) string + func UTF16ToStringLE(in []byte) string + func X509ToOrderedDict(cert *x509.Certificate) *ordereddict.Dict + type AlgorithmIdentifier struct + Type asn1.ObjectIdentifier + type CV_RSDS_HEADER struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *CV_RSDS_HEADER) Age() uint32 + func (self *CV_RSDS_HEADER) DebugString() string + func (self *CV_RSDS_HEADER) Filename() string + func (self *CV_RSDS_HEADER) GUID() *GUID + func (self *CV_RSDS_HEADER) GUIDAge() string + func (self *CV_RSDS_HEADER) Signature() string + func (self *CV_RSDS_HEADER) Size() int + type CabHash struct + Digest []byte + Type OIDSequence + type CatNameValue struct + Items []NameValue + func (self CatNameValue) Walk(out *ordereddict.Dict) + type CatalogList struct + Digest []byte + Members []asn1.RawValue + func (self CatalogList) Walk(out *ordereddict.Dict) + type CatalogMemberSet struct + Type asn1.ObjectIdentifier + Value asn1.RawValue + func (self CatalogMemberSet) Walk(out *ordereddict.Dict) + type CertificateTrustList struct + CatNameValue CatNameValue + CatalogList []CatalogList + Digest []byte + MemberOID OIDSequence + Time time.Time + Type OIDSequence + type DebugStringer interface + DebugString func() string + type DigestInfo struct + Digest []byte + DigestAlgorithm pkix.AlgorithmIdentifier + type Directory struct + FileAddress uint32 + SectionName string + Size uint32 + Timestamp time.Time + TimestampRaw uint32 + type Enumeration struct + Name string + Value uint64 + func (self Enumeration) DebugString() string + type FileHeader struct + Characteristics uint16 + ImageBase uint64 + Machine string + TimeDateStamp string + TimeDateStampRaw uint32 + type GENERIC_DIRECTORY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *GENERIC_DIRECTORY) DebugString() string + func (self *GENERIC_DIRECTORY) Size() int + func (self *GENERIC_DIRECTORY) TimeDateStamp() *UnixTimeStamp32 + type GUID struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *GUID) Data1() uint32 + func (self *GUID) Data2() uint16 + func (self *GUID) Data3() uint16 + func (self *GUID) Data4() []byte + func (self *GUID) DebugString() string + func (self *GUID) Size() int + type Hashes struct + MD5 hash.Hash + SHA1 hash.Hash + SHA256 hash.Hash + type IMAGE_DATA_DIRECTORY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func ParseArray_IMAGE_DATA_DIRECTORY(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []*IMAGE_DATA_DIRECTORY + func (self *IMAGE_DATA_DIRECTORY) DebugString() string + func (self *IMAGE_DATA_DIRECTORY) DirSize() uint32 + func (self *IMAGE_DATA_DIRECTORY) Size() int + func (self *IMAGE_DATA_DIRECTORY) VirtualAddress() uint32 + type IMAGE_DEBUG_DIRECTORY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_DEBUG_DIRECTORY) AddressOfRawData() uint32 + func (self *IMAGE_DEBUG_DIRECTORY) DebugString() string + func (self *IMAGE_DEBUG_DIRECTORY) Size() int + func (self *IMAGE_DEBUG_DIRECTORY) TimeDateStamp() *UnixTimeStamp32 + func (self *IMAGE_DEBUG_DIRECTORY) Type() *Enumeration + type IMAGE_DOS_HEADER struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_DOS_HEADER) DebugString() string + func (self *IMAGE_DOS_HEADER) E_lfanew() int32 + func (self *IMAGE_DOS_HEADER) E_magic() uint16 + func (self *IMAGE_DOS_HEADER) NTHeader() *IMAGE_NT_HEADERS + func (self *IMAGE_DOS_HEADER) Size() int + type IMAGE_EXPORT_DESCRIPTOR struct + DLLName string + Forwarder string + Name string + Ordinal int + RVA int64 + type IMAGE_EXPORT_DIRECTORY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_EXPORT_DIRECTORY) AddressOfFunctions() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) AddressOfNameOrdinals() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) AddressOfNames() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) Base() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) DLLName(rva_resolver *RVAResolver) string + func (self *IMAGE_EXPORT_DIRECTORY) DebugString() string + func (self *IMAGE_EXPORT_DIRECTORY) Name() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) NumberOfFunctions() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) NumberOfNames() uint32 + func (self *IMAGE_EXPORT_DIRECTORY) Size() int + func (self *IMAGE_EXPORT_DIRECTORY) TimeDateStamp() *UnixTimeStamp32 + type IMAGE_FILE_HEADER struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_FILE_HEADER) Characteristics() uint16 + func (self *IMAGE_FILE_HEADER) DebugString() string + func (self *IMAGE_FILE_HEADER) Machine() *Enumeration + func (self *IMAGE_FILE_HEADER) NumberOfSections() uint16 + func (self *IMAGE_FILE_HEADER) Size() int + func (self *IMAGE_FILE_HEADER) SizeOfOptionalHeader() uint16 + func (self *IMAGE_FILE_HEADER) TimeDateStamp() *UnixTimeStamp32 + func (self *IMAGE_FILE_HEADER) TimeDateStampRaw() uint32 + type IMAGE_IMPORT_BY_NAME struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_IMPORT_BY_NAME) DebugString() string + func (self *IMAGE_IMPORT_BY_NAME) Name() string + func (self *IMAGE_IMPORT_BY_NAME) Size() int + type IMAGE_IMPORT_DESCRIPTOR struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_IMPORT_DESCRIPTOR) Characteristics() uint32 + func (self *IMAGE_IMPORT_DESCRIPTOR) DLLName(rva_resolver *RVAResolver) string + func (self *IMAGE_IMPORT_DESCRIPTOR) DebugString() string + func (self *IMAGE_IMPORT_DESCRIPTOR) Functions32(rva_resolver *RVAResolver) []string + func (self *IMAGE_IMPORT_DESCRIPTOR) Functions64(rva_resolver *RVAResolver) []string + func (self *IMAGE_IMPORT_DESCRIPTOR) Name() uint32 + func (self *IMAGE_IMPORT_DESCRIPTOR) OriginalFirstThunk() uint32 + func (self *IMAGE_IMPORT_DESCRIPTOR) Size() int + type IMAGE_NT_HEADERS struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_NT_HEADERS) DataDirectory(index int64) *IMAGE_DATA_DIRECTORY + func (self *IMAGE_NT_HEADERS) DebugDirectory(rva_resolver *RVAResolver) (*IMAGE_DEBUG_DIRECTORY, error) + func (self *IMAGE_NT_HEADERS) DebugString() string + func (self *IMAGE_NT_HEADERS) ExportDirectory(rva_resolver *RVAResolver) (*IMAGE_EXPORT_DIRECTORY, error) + func (self *IMAGE_NT_HEADERS) ExportTable(rva_resolver *RVAResolver) []*IMAGE_EXPORT_DESCRIPTOR + func (self *IMAGE_NT_HEADERS) FileHeader() *IMAGE_FILE_HEADER + func (self *IMAGE_NT_HEADERS) ImportDirectory(rva_resolver *RVAResolver) []*IMAGE_IMPORT_DESCRIPTOR + func (self *IMAGE_NT_HEADERS) OptionalHeader() *IMAGE_OPTIONAL_HEADER + func (self *IMAGE_NT_HEADERS) ParseSecurityInfo() (*pkcs7.PKCS7, error) + func (self *IMAGE_NT_HEADERS) RSDS(rva_resolver *RVAResolver) (*CV_RSDS_HEADER, error) + func (self *IMAGE_NT_HEADERS) ResourceDirectory(rva_resolver *RVAResolver) (*IMAGE_RESOURCE_DIRECTORY, error) + func (self *IMAGE_NT_HEADERS) SectionByName(name string) *IMAGE_SECTION_HEADER + func (self *IMAGE_NT_HEADERS) Sections() []*IMAGE_SECTION_HEADER + func (self *IMAGE_NT_HEADERS) Signature() uint32 + func (self *IMAGE_NT_HEADERS) Size() int + type IMAGE_OPTIONAL_HEADER struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_OPTIONAL_HEADER) CheckSum() uint32 + func (self *IMAGE_OPTIONAL_HEADER) DataDirectory() []*IMAGE_DATA_DIRECTORY + func (self *IMAGE_OPTIONAL_HEADER) DebugString() string + func (self *IMAGE_OPTIONAL_HEADER) ImageBase() uint32 + func (self *IMAGE_OPTIONAL_HEADER) Magic() uint16 + func (self *IMAGE_OPTIONAL_HEADER) Size() int + func (self *IMAGE_OPTIONAL_HEADER) SizeOfHeaders() uint32 + type IMAGE_OPTIONAL_HEADER64 struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_OPTIONAL_HEADER64) DataDirectory() []*IMAGE_DATA_DIRECTORY + func (self *IMAGE_OPTIONAL_HEADER64) DebugString() string + func (self *IMAGE_OPTIONAL_HEADER64) ImageBase() uint64 + func (self *IMAGE_OPTIONAL_HEADER64) Magic() uint16 + func (self *IMAGE_OPTIONAL_HEADER64) Size() int + func (self *IMAGE_OPTIONAL_HEADER64) SizeOfHeaders() uint32 + type IMAGE_RESOURCE_DATA_ENTRY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_RESOURCE_DATA_ENTRY) CodePage() uint32 + func (self *IMAGE_RESOURCE_DATA_ENTRY) DataSize() uint32 + func (self *IMAGE_RESOURCE_DATA_ENTRY) DebugString() string + func (self *IMAGE_RESOURCE_DATA_ENTRY) OffsetToData() uint32 + func (self *IMAGE_RESOURCE_DATA_ENTRY) Size() int + type IMAGE_RESOURCE_DIRECTORY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_RESOURCE_DIRECTORY) DebugString() string + func (self *IMAGE_RESOURCE_DIRECTORY) Entries() []*IMAGE_RESOURCE_DIRECTORY_ENTRY + func (self *IMAGE_RESOURCE_DIRECTORY) NumberOfIdEntries() uint16 + func (self *IMAGE_RESOURCE_DIRECTORY) NumberOfNamedEntries() uint16 + func (self *IMAGE_RESOURCE_DIRECTORY) Size() int + func (self *IMAGE_RESOURCE_DIRECTORY) TimeDateStamp() *UnixTimeStamp32 + type IMAGE_RESOURCE_DIRECTORY_ENTRY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func ParseArray_IMAGE_RESOURCE_DIRECTORY_ENTRY(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []*IMAGE_RESOURCE_DIRECTORY_ENTRY + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) DataIsDirectory() uint64 + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) DebugString() string + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) NameIsString() uint64 + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) NameOffset() uint64 + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) NameString(resource_base int64) string + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) OffsetToData() uint64 + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) OffsetToDirectory() uint64 + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) Size() int + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) Traverse(resource_base int64) []*IMAGE_RESOURCE_DATA_ENTRY + func (self *IMAGE_RESOURCE_DIRECTORY_ENTRY) Type() *Enumeration + type IMAGE_SECTION_HEADER struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_SECTION_HEADER) Characteristics() uint32 + func (self *IMAGE_SECTION_HEADER) Data() io.ReaderAt + func (self *IMAGE_SECTION_HEADER) DebugString() string + func (self *IMAGE_SECTION_HEADER) Name() string + func (self *IMAGE_SECTION_HEADER) Permissions() string + func (self *IMAGE_SECTION_HEADER) PointerToRawData() uint32 + func (self *IMAGE_SECTION_HEADER) Size() int + func (self *IMAGE_SECTION_HEADER) SizeOfRawData() uint32 + func (self *IMAGE_SECTION_HEADER) VirtualAddress() uint32 + type IMAGE_THUNK_DATA32 struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_THUNK_DATA32) AddressOfData() uint32 + func (self *IMAGE_THUNK_DATA32) DebugString() string + func (self *IMAGE_THUNK_DATA32) ForwarderString() uint32 + func (self *IMAGE_THUNK_DATA32) Function() uint32 + func (self *IMAGE_THUNK_DATA32) Ordinal() uint32 + func (self *IMAGE_THUNK_DATA32) Size() int + type IMAGE_THUNK_DATA64 struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *IMAGE_THUNK_DATA64) AddressOfData() uint64 + func (self *IMAGE_THUNK_DATA64) DebugString() string + func (self *IMAGE_THUNK_DATA64) ForwarderString() uint64 + func (self *IMAGE_THUNK_DATA64) Function() uint64 + func (self *IMAGE_THUNK_DATA64) Ordinal() uint64 + func (self *IMAGE_THUNK_DATA64) Size() int + type KV struct + Type OIDSequence + Value asn1.RawValue + func (self KV) Walk(out *ordereddict.Dict) + type KVString struct + Key string + Unknown int + Value []byte + type MESSAGE_RESOURCE_BLOCK struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func ParseArray_MESSAGE_RESOURCE_BLOCK(profile *PeProfile, reader io.ReaderAt, offset int64, count int) []*MESSAGE_RESOURCE_BLOCK + func (self *MESSAGE_RESOURCE_BLOCK) DebugString() string + func (self *MESSAGE_RESOURCE_BLOCK) HighId() uint32 + func (self *MESSAGE_RESOURCE_BLOCK) LowId() uint32 + func (self *MESSAGE_RESOURCE_BLOCK) Messages() []*Message + func (self *MESSAGE_RESOURCE_BLOCK) OffsetToEntries() uint32 + func (self *MESSAGE_RESOURCE_BLOCK) Size() int + type MESSAGE_RESOURCE_DATA struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *MESSAGE_RESOURCE_DATA) Blocks() []*MESSAGE_RESOURCE_BLOCK + func (self *MESSAGE_RESOURCE_DATA) DebugString() string + func (self *MESSAGE_RESOURCE_DATA) Messages() []*Message + func (self *MESSAGE_RESOURCE_DATA) NumberOfBlocks() uint32 + func (self *MESSAGE_RESOURCE_DATA) Size() int + type MESSAGE_RESOURCE_ENTRY struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *MESSAGE_RESOURCE_ENTRY) DebugString() string + func (self *MESSAGE_RESOURCE_ENTRY) Flags() uint16 + func (self *MESSAGE_RESOURCE_ENTRY) Length() uint16 + func (self *MESSAGE_RESOURCE_ENTRY) Message() string + func (self *MESSAGE_RESOURCE_ENTRY) Size() int + func (self *MESSAGE_RESOURCE_ENTRY) Text() string + type Message struct + EventId int + Id int64 + Message string + type NameValue struct + Type asn1.ObjectIdentifier + Value asn1.RawValue + func (self NameValue) Walk(out *ordereddict.Dict) + type OIDSequence struct + Type asn1.ObjectIdentifier + func (self OIDSequence) Equal(in asn1.ObjectIdentifier) bool + type OIDWithParamers struct + Params asn1.RawValue + Type asn1.ObjectIdentifier + func (self OIDWithParamers) Equal(in asn1.ObjectIdentifier) bool + type OffsetReader struct + func (self OffsetReader) ReadAt(buff []byte, off int64) (int, error) + type Options struct + MaxResourceDirectoryDepth int + type PEFile struct + FileHeader FileHeader + GUIDAge string + PDB string + Sections []*Section + func NewPEFile(reader io.ReaderAt) (*PEFile, error) + func NewPEFileWithSize(reader io.ReaderAt, max_size int64) (*PEFile, error) + func (self *PEFile) CalcHash() *Hashes + func (self *PEFile) CalcHashToDict() *ordereddict.Dict + func (self *PEFile) Exports() []string + func (self *PEFile) Forwards() []string + func (self *PEFile) GetDirectories() *ordereddict.Dict + func (self *PEFile) GetMessages() []*Message + func (self *PEFile) ImpHash() string + func (self *PEFile) Imports() []string + func (self *PEFile) Resources() []*ordereddict.Dict + func (self *PEFile) VersionInformation() *ordereddict.Dict + func (self PEFile) AsDict() *ordereddict.Dict + func (self PEFile) Members() []string + type PeProfile struct + Off_CV_RSDS_HEADER_Age int64 + Off_CV_RSDS_HEADER_Filename int64 + Off_CV_RSDS_HEADER_GUID int64 + Off_CV_RSDS_HEADER_Signature int64 + Off_GENERIC_DIRECTORY_TimeDateStamp int64 + Off_GUID_Data1 int64 + Off_GUID_Data2 int64 + Off_GUID_Data3 int64 + Off_GUID_Data4 int64 + Off_IMAGE_DATA_DIRECTORY_DirSize int64 + Off_IMAGE_DATA_DIRECTORY_VirtualAddress int64 + Off_IMAGE_DEBUG_DIRECTORY_AddressOfRawData int64 + Off_IMAGE_DEBUG_DIRECTORY_TimeDateStamp int64 + Off_IMAGE_DEBUG_DIRECTORY_Type int64 + Off_IMAGE_DOS_HEADER_E_lfanew int64 + Off_IMAGE_DOS_HEADER_E_magic int64 + Off_IMAGE_EXPORT_DIRECTORY_AddressOfFunctions int64 + Off_IMAGE_EXPORT_DIRECTORY_AddressOfNameOrdinals int64 + Off_IMAGE_EXPORT_DIRECTORY_AddressOfNames int64 + Off_IMAGE_EXPORT_DIRECTORY_Base int64 + Off_IMAGE_EXPORT_DIRECTORY_Name int64 + Off_IMAGE_EXPORT_DIRECTORY_NumberOfFunctions int64 + Off_IMAGE_EXPORT_DIRECTORY_NumberOfNames int64 + Off_IMAGE_EXPORT_DIRECTORY_TimeDateStamp int64 + Off_IMAGE_EXPORT_DIRECTORY_funcs64 int64 + Off_IMAGE_EXPORT_DIRECTORY_names int64 + Off_IMAGE_EXPORT_DIRECTORY_ordinals int64 + Off_IMAGE_FILE_HEADER_Characteristics int64 + Off_IMAGE_FILE_HEADER_Machine int64 + Off_IMAGE_FILE_HEADER_NumberOfSections int64 + Off_IMAGE_FILE_HEADER_SizeOfOptionalHeader int64 + Off_IMAGE_FILE_HEADER_TimeDateStamp int64 + Off_IMAGE_FILE_HEADER_TimeDateStampRaw int64 + Off_IMAGE_IMPORT_BY_NAME_Name int64 + Off_IMAGE_IMPORT_DESCRIPTOR_Characteristics int64 + Off_IMAGE_IMPORT_DESCRIPTOR_Name int64 + Off_IMAGE_IMPORT_DESCRIPTOR_OriginalFirstThunk int64 + Off_IMAGE_NT_HEADERS_FileHeader int64 + Off_IMAGE_NT_HEADERS_OptionalHeader int64 + Off_IMAGE_NT_HEADERS_Signature int64 + Off_IMAGE_OPTIONAL_HEADER64_DataDirectory int64 + Off_IMAGE_OPTIONAL_HEADER64_ImageBase int64 + Off_IMAGE_OPTIONAL_HEADER64_Magic int64 + Off_IMAGE_OPTIONAL_HEADER64_SizeOfHeaders int64 + Off_IMAGE_OPTIONAL_HEADER_CheckSum int64 + Off_IMAGE_OPTIONAL_HEADER_DataDirectory int64 + Off_IMAGE_OPTIONAL_HEADER_ImageBase int64 + Off_IMAGE_OPTIONAL_HEADER_Magic int64 + Off_IMAGE_OPTIONAL_HEADER_SizeOfHeaders int64 + Off_IMAGE_RESOURCE_DATA_ENTRY_CodePage int64 + Off_IMAGE_RESOURCE_DATA_ENTRY_DataSize int64 + Off_IMAGE_RESOURCE_DATA_ENTRY_OffsetToData int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_DataIsDirectory int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_NameIsString int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_NameOffset int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_OffsetToData int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_OffsetToDirectory int64 + Off_IMAGE_RESOURCE_DIRECTORY_ENTRY_Type int64 + Off_IMAGE_RESOURCE_DIRECTORY_NumberOfIdEntries int64 + Off_IMAGE_RESOURCE_DIRECTORY_NumberOfNamedEntries int64 + Off_IMAGE_RESOURCE_DIRECTORY_TimeDateStamp int64 + Off_IMAGE_RESOURCE_DIRECTORY__Entries int64 + Off_IMAGE_SECTION_HEADER_Characteristics int64 + Off_IMAGE_SECTION_HEADER_Name int64 + Off_IMAGE_SECTION_HEADER_PointerToRawData int64 + Off_IMAGE_SECTION_HEADER_SizeOfRawData int64 + Off_IMAGE_SECTION_HEADER_VirtualAddress int64 + Off_IMAGE_THUNK_DATA32_AddressOfData int64 + Off_IMAGE_THUNK_DATA32_ForwarderString int64 + Off_IMAGE_THUNK_DATA32_Function int64 + Off_IMAGE_THUNK_DATA32_Ordinal int64 + Off_IMAGE_THUNK_DATA64_AddressOfData int64 + Off_IMAGE_THUNK_DATA64_ForwarderString int64 + Off_IMAGE_THUNK_DATA64_Function int64 + Off_IMAGE_THUNK_DATA64_Ordinal int64 + Off_MESSAGE_RESOURCE_BLOCK_HighId int64 + Off_MESSAGE_RESOURCE_BLOCK_LowId int64 + Off_MESSAGE_RESOURCE_BLOCK_OffsetToEntries int64 + Off_MESSAGE_RESOURCE_DATA_NumberOfBlocks int64 + Off_MESSAGE_RESOURCE_DATA__Blocks int64 + Off_MESSAGE_RESOURCE_ENTRY_Flags int64 + Off_MESSAGE_RESOURCE_ENTRY_Length int64 + Off_MESSAGE_RESOURCE_ENTRY_Text int64 + Off_PrefixedString_Length int64 + Off_PrefixedString__Buffer int64 + Off_ResourceString_Key int64 + Off_ResourceString_Length int64 + Off_ResourceString_Type int64 + Off_ResourceString_ValueLength int64 + Off_StringFileInfo_Key int64 + Off_StringFileInfo_Length int64 + Off_StringFileInfo_Type int64 + Off_StringFileInfo_ValueLength int64 + Off_StringTable_Key int64 + Off_StringTable_Length int64 + Off_StringTable_Type int64 + Off_StringTable_ValueLength int64 + Off_VS_VERSIONINFO_Length int64 + Off_VS_VERSIONINFO_Type int64 + Off_VS_VERSIONINFO_ValueLength int64 + Off_VS_VERSIONINFO_szKey int64 + Off_WIN_CERTIFICATE_CertificateType int64 + Off_WIN_CERTIFICATE_Length int64 + Off_WIN_CERTIFICATE_Revision int64 + func NewPeProfile() *PeProfile + func (self *PeProfile) CV_RSDS_HEADER(reader io.ReaderAt, offset int64) *CV_RSDS_HEADER + func (self *PeProfile) GENERIC_DIRECTORY(reader io.ReaderAt, offset int64) *GENERIC_DIRECTORY + func (self *PeProfile) GUID(reader io.ReaderAt, offset int64) *GUID + func (self *PeProfile) IMAGE_DATA_DIRECTORY(reader io.ReaderAt, offset int64) *IMAGE_DATA_DIRECTORY + func (self *PeProfile) IMAGE_DEBUG_DIRECTORY(reader io.ReaderAt, offset int64) *IMAGE_DEBUG_DIRECTORY + func (self *PeProfile) IMAGE_DOS_HEADER(reader io.ReaderAt, offset int64) *IMAGE_DOS_HEADER + func (self *PeProfile) IMAGE_EXPORT_DIRECTORY(reader io.ReaderAt, offset int64) *IMAGE_EXPORT_DIRECTORY + func (self *PeProfile) IMAGE_FILE_HEADER(reader io.ReaderAt, offset int64) *IMAGE_FILE_HEADER + func (self *PeProfile) IMAGE_IMPORT_BY_NAME(reader io.ReaderAt, offset int64) *IMAGE_IMPORT_BY_NAME + func (self *PeProfile) IMAGE_IMPORT_DESCRIPTOR(reader io.ReaderAt, offset int64) *IMAGE_IMPORT_DESCRIPTOR + func (self *PeProfile) IMAGE_NT_HEADERS(reader io.ReaderAt, offset int64) *IMAGE_NT_HEADERS + func (self *PeProfile) IMAGE_OPTIONAL_HEADER(reader io.ReaderAt, offset int64) *IMAGE_OPTIONAL_HEADER + func (self *PeProfile) IMAGE_OPTIONAL_HEADER64(reader io.ReaderAt, offset int64) *IMAGE_OPTIONAL_HEADER64 + func (self *PeProfile) IMAGE_RESOURCE_DATA_ENTRY(reader io.ReaderAt, offset int64) *IMAGE_RESOURCE_DATA_ENTRY + func (self *PeProfile) IMAGE_RESOURCE_DIRECTORY(reader io.ReaderAt, offset int64) *IMAGE_RESOURCE_DIRECTORY + func (self *PeProfile) IMAGE_RESOURCE_DIRECTORY_ENTRY(reader io.ReaderAt, offset int64) *IMAGE_RESOURCE_DIRECTORY_ENTRY + func (self *PeProfile) IMAGE_SECTION_HEADER(reader io.ReaderAt, offset int64) *IMAGE_SECTION_HEADER + func (self *PeProfile) IMAGE_THUNK_DATA32(reader io.ReaderAt, offset int64) *IMAGE_THUNK_DATA32 + func (self *PeProfile) IMAGE_THUNK_DATA64(reader io.ReaderAt, offset int64) *IMAGE_THUNK_DATA64 + func (self *PeProfile) MESSAGE_RESOURCE_BLOCK(reader io.ReaderAt, offset int64) *MESSAGE_RESOURCE_BLOCK + func (self *PeProfile) MESSAGE_RESOURCE_DATA(reader io.ReaderAt, offset int64) *MESSAGE_RESOURCE_DATA + func (self *PeProfile) MESSAGE_RESOURCE_ENTRY(reader io.ReaderAt, offset int64) *MESSAGE_RESOURCE_ENTRY + func (self *PeProfile) PrefixedString(reader io.ReaderAt, offset int64) *PrefixedString + func (self *PeProfile) ResourceString(reader io.ReaderAt, offset int64) *ResourceString + func (self *PeProfile) StringFileInfo(reader io.ReaderAt, offset int64) *StringFileInfo + func (self *PeProfile) StringTable(reader io.ReaderAt, offset int64) *StringTable + func (self *PeProfile) TagVS_FIXEDFILEINFO(reader io.ReaderAt, offset int64) *TagVS_FIXEDFILEINFO + func (self *PeProfile) UnixTimeStamp32(reader io.ReaderAt, offset int64) *UnixTimeStamp32 + func (self *PeProfile) VS_VERSIONINFO(reader io.ReaderAt, offset int64) *VS_VERSIONINFO + func (self *PeProfile) WIN_CERTIFICATE(reader io.ReaderAt, offset int64) *WIN_CERTIFICATE + type PrefixedString struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *PrefixedString) DebugString() string + func (self *PrefixedString) Length() uint16 + func (self *PrefixedString) Size() int + func (self *PrefixedString) String() string + type RVAResolver struct + ImageBase uint64 + Is64Bit bool + Runs []*Run + func NewRVAResolver(header *IMAGE_NT_HEADERS) *RVAResolver + func (self *RVAResolver) GetFileAddress(offset uint32) (uint32, error) + type ReaderWrapper struct + func NewReaderWrapper(reader io.ReaderAt) *ReaderWrapper + func (self *ReaderWrapper) CopyRange(writer io.Writer, start, end int64) + func (self *ReaderWrapper) Read(p []byte) (n int, err error) + func (self *ReaderWrapper) Seek(offset int64) + func (self *ReaderWrapper) Tell() int64 + type ResourceString struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *ResourceString) DebugString() string + func (self *ResourceString) Key() string + func (self *ResourceString) Length() uint16 + func (self *ResourceString) Size() int + func (self *ResourceString) Type() uint16 + func (self *ResourceString) Value() string + func (self *ResourceString) ValueLength() uint16 + type Run struct + PhysicalAddress uint32 + VirtualAddress uint32 + VirtualEnd uint32 + type Section struct + FileOffset int64 + Name string + Perm string + RVA uint64 + Size int64 + VMA uint64 + type SpcAttributeTypeAndOptionalValue struct + Type asn1.ObjectIdentifier + Value SpcPeImageData + type SpcIndirectDataContent struct + Data SpcAttributeTypeAndOptionalValue + MessageDigest DigestInfo + type SpcPeImageData struct + File asn1.RawValue + Flags asn1.BitString + type SpcSpOpusInfo struct + MoreInfo string + ProgramName string + type SpcString struct + Unicode []byte + type StringFileInfo struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *StringFileInfo) DebugString() string + func (self *StringFileInfo) Key() string + func (self *StringFileInfo) Length() uint16 + func (self *StringFileInfo) Size() int + func (self *StringFileInfo) StringTable() []*StringTable + func (self *StringFileInfo) Type() uint16 + func (self *StringFileInfo) ValueLength() uint16 + type StringTable struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *StringTable) DebugString() string + func (self *StringTable) Key() string + func (self *StringTable) Length() uint16 + func (self *StringTable) ResourceStrings() []*ResourceString + func (self *StringTable) Size() int + func (self *StringTable) Type() uint16 + func (self *StringTable) ValueLength() uint16 + type TagVS_FIXEDFILEINFO struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *TagVS_FIXEDFILEINFO) DebugString() string + func (self *TagVS_FIXEDFILEINFO) Size() int + type UnixTimeStamp32 struct + Raw uint32 + func (self *UnixTimeStamp32) DebugString() string + func (self *UnixTimeStamp32) String() string + type VS_VERSIONINFO struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *VS_VERSIONINFO) Children() []*StringFileInfo + func (self *VS_VERSIONINFO) DebugString() string + func (self *VS_VERSIONINFO) Length() uint16 + func (self *VS_VERSIONINFO) Size() int + func (self *VS_VERSIONINFO) Type() *Enumeration + func (self *VS_VERSIONINFO) Value() *TagVS_FIXEDFILEINFO + func (self *VS_VERSIONINFO) ValueLength() uint16 + type WIN_CERTIFICATE struct + Offset int64 + Profile *PeProfile + Reader io.ReaderAt + func (self *WIN_CERTIFICATE) CertificateType() uint16 + func (self *WIN_CERTIFICATE) DebugString() string + func (self *WIN_CERTIFICATE) Length() uint32 + func (self *WIN_CERTIFICATE) Revision() uint16 + func (self *WIN_CERTIFICATE) Size() int