dotnet

Documentation

Index

• func Loader(_ interpreter.EbpfHandler, info *interpreter.LoaderInfo) (interpreter.Data, error)
• type CLIHeader
• type MetadataRoot
• type OptionalHeader32
• type OptionalHeader64
• type ReadyToRunHeader
• type ReadyToRunRuntimeFunction
• type ReadyToRunSection
• type StreamHeader

Functions

func Loader

func Loader(_ interpreter.EbpfHandler, info *interpreter.LoaderInfo) (interpreter.Data, error)

Types

type CLIHeader

type CLIHeader struct {
	SizeOfHeader            uint32
	MajorRuntimeVersion     uint16
	MinorRuntimeVersion     uint16
	MetaData                pe.DataDirectory
	Flags                   uint32
	EntryPointToken         uint32
	Resources               pe.DataDirectory
	StrongNameSignature     pe.DataDirectory
	CodeManagerTable        pe.DataDirectory
	VTableFixups            pe.DataDirectory
	ExportAddressTableJumps pe.DataDirectory
	ManagedNativeHeader     pe.DataDirectory
}

CLIHeader is the ECMA-335 II.25.3.3 CLI header

type MetadataRoot

type MetadataRoot struct {
	Signature    uint32
	MajorVersion uint16
	MinorVersion uint16
	Reserved     uint32
	Length       uint32
}

MetadataRoot is the ECMA-335 II.24.2.1 Metadata root (non-variable length header)

type OptionalHeader32

type OptionalHeader32 struct {
	MajorLinkerVersion          uint8
	MinorLinkerVersion          uint8
	SizeOfCode                  uint32
	SizeOfInitializedData       uint32
	SizeOfUninitializedData     uint32
	AddressOfEntryPoint         uint32
	BaseOfCode                  uint32
	BaseOfData                  uint32
	ImageBase                   uint32
	SectionAlignment            uint32
	FileAlignment               uint32
	MajorOperatingSystemVersion uint16
	MinorOperatingSystemVersion uint16
	MajorImageVersion           uint16
	MinorImageVersion           uint16
	MajorSubsystemVersion       uint16
	MinorSubsystemVersion       uint16
	Win32VersionValue           uint32
	SizeOfImage                 uint32
	SizeOfHeaders               uint32
	CheckSum                    uint32
	Subsystem                   uint16
	DllCharacteristics          uint16
	SizeOfStackReserve          uint32
	SizeOfStackCommit           uint32
	SizeOfHeapReserve           uint32
	SizeOfHeapCommit            uint32
	LoaderFlags                 uint32
	NumberOfRvaAndSizes         uint32
}

OptionalHeader32 is the IMAGE_OPTIONAL_HEADER32 without its Magic or DataDirectory https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optional_header32

type OptionalHeader64

type OptionalHeader64 struct {
	MajorLinkerVersion          uint8
	MinorLinkerVersion          uint8
	SizeOfCode                  uint32
	SizeOfInitializedData       uint32
	SizeOfUninitializedData     uint32
	AddressOfEntryPoint         uint32
	BaseOfCode                  uint32
	ImageBase                   uint64
	SectionAlignment            uint32
	FileAlignment               uint32
	MajorOperatingSystemVersion uint16
	MinorOperatingSystemVersion uint16
	MajorImageVersion           uint16
	MinorImageVersion           uint16
	MajorSubsystemVersion       uint16
	MinorSubsystemVersion       uint16
	Win32VersionValue           uint32
	SizeOfImage                 uint32
	SizeOfHeaders               uint32
	CheckSum                    uint32
	Subsystem                   uint16
	DllCharacteristics          uint16
	SizeOfStackReserve          uint64
	SizeOfStackCommit           uint64
	SizeOfHeapReserve           uint64
	SizeOfHeapCommit            uint64
	LoaderFlags                 uint32
	NumberOfRvaAndSizes         uint32
}

OptionalHeader64 is the IMAGE_OPTIONAL_HEADER64 without its Magic or DataDirectory https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optional_header64

type ReadyToRunHeader

type ReadyToRunHeader struct {
	Signature    uint32
	MajorVersion uint16
	MinorVersion uint16
	Flags        uint32
	NumSections  uint32
}

ReadyToRunHeader is the R2RFMT READYTORUN_HEADER + READYTORUN_CORE_HEADER

type ReadyToRunRuntimeFunction

type ReadyToRunRuntimeFunction struct {
	StartRVA uint32
	EndRVA   uint32
	GCInfo   uint32
}

ReadyToRunRuntimeFunction is the R2RFMT RUNTIME_FUNCTION for x86_64

type ReadyToRunSection

type ReadyToRunSection struct {
	Type    uint32
	Section pe.DataDirectory
}

ReadyToRunSection is the R2RFMT READYTORUN_SECTION

type StreamHeader

type StreamHeader struct {
	Offset uint32
	Size   uint32
}

StreamHeader is the ECMA-335 II.24.2.2 Stream header (non-variable length header)