pecoff-0.1: Parser for PE/COFF format.

Data.Pecoff

Description

Parses a ByteString into a Pecoff record. Parsing of section data currently left as a todo.

Synopsis

Documentation

data Pecoff Source

Constructors

Pecoff 

Fields

pMachine :: IMAGE_FILE_MACHINE

Machine type.

pFileCharacteristics :: [IMAGE_FILE_CHARACTERISTICS]

File flags.

pEntryPointAddress :: Word64

Entry point address.

pImageBase :: Word64

Default load base for image.

pSubsystem :: IMAGE_SUBSYSTEM

Subsystem required to run this image.

pDllCharacteristics :: [IMAGE_DLL_CHARACTERISTICS]

DLL flags.

pSections :: [PecoffSection]

Sections contained in this PE/COFF object.

Instances

data PecoffSection Source

Constructors

PecoffSection 

Fields

psectName :: String

Name of section.

psectVirtualSize :: Word64

Virtual memory size.

psectVirtualAddress :: Word64

Virtual memory address.

psectCharacteristics :: [IMAGE_SCN_CHARACTERISTICS]

Flags.

psectRelocations :: ByteString

Raw data for relocations.

psectLinenumbers :: ByteString

Raw data for linenumbers.

psectRawData :: ByteString

Raw data for section.

Instances

data IMAGE_SUBSYSTEM Source

Constructors

IMAGE_SUBSYSTEM_UNKNOWN 
IMAGE_SUBSYSTEM_NATIVE 
IMAGE_SUBSYSTEM_WINDOWS_GUI 
IMAGE_SUBSYSTEM_WINDOWS_CUI 
IMAGE_SUBSYSTEM_OS2_CUI 
IMAGE_SUBSYSTEM_POSIX_CUI 
IMAGE_SUBSYSTEM_NATIVE_WINDOWS 
IMAGE_SUBSYSTEM_WINDOWS_CE_GUI 
IMAGE_SUBSYSTEM_EFI_APPLICATION 
IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER 
IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER 
IMAGE_SUBSYSTEM_EFI_ROM 
IMAGE_SUBSYSTEM_XBOX 

Instances

data IMAGE_SCN_CHARACTERISTICS Source

Constructors

IMAGE_SCN_TYPE_NO_PAD 
IMAGE_SCN_CNT_CODE 
IMAGE_SCN_CNT_INITIALIZED_DATA 
IMAGE_SCN_CNT_UNINITIALIZED_DATA 
IMAGE_SCN_LNK_OTHER 
IMAGE_SCN_LNK_INFO 
IMAGE_SCN_LNK_REMOVE 
IMAGE_SCN_LNK_COMDAT 
IMAGE_SCN_GPREL 
IMAGE_SCN_MEM_PURGEABLE 
IMAGE_SCN_MEM_16BIT 
IMAGE_SCN_MEM_LOCKED 
IMAGE_SCN_MEM_PRELOAD 
IMAGE_SCN_ALIGN_1BYTES 
IMAGE_SCN_ALIGN_2BYTES 
IMAGE_SCN_ALIGN_4BYTES 
IMAGE_SCN_ALIGN_8BYTES 
IMAGE_SCN_ALIGN_16BYTES 
IMAGE_SCN_ALIGN_32BYTES 
IMAGE_SCN_ALIGN_64BYTES 
IMAGE_SCN_ALIGN_128BYTES 
IMAGE_SCN_ALIGN_256BYTES 
IMAGE_SCN_ALIGN_512BYTES 
IMAGE_SCN_ALIGN_1024BYTES 
IMAGE_SCN_ALIGN_2048BYTES 
IMAGE_SCN_ALIGN_4096BYTES 
IMAGE_SCN_ALIGN_8192BYTES 
IMAGE_SCN_LNK_NRELOC_OVFL 
IMAGE_SCN_MEM_DISCARDABLE 
IMAGE_SCN_MEM_NOT_CACHED 
IMAGE_SCN_MEM_NOT_PAGED 
IMAGE_SCN_MEM_SHARED 
IMAGE_SCN_MEM_EXECUTE 
IMAGE_SCN_MEM_READ 
IMAGE_SCN_MEM_WRITE 

Instances

data IMAGE_DLL_CHARACTERISTICS Source

Constructors

IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE 
IMAGE_DLL_CHARACTERISTICS_FORCE_INTEGRITY 
IMAGE_DLL_CHARACTERISTICS_NX_COMPAT 
IMAGE_DLL_CHARACTERISTICS_NO_ISOLATION 
IMAGE_DLL_CHARACTERISTICS_NO_SEH 
IMAGE_DLL_CHARACTERISTICS_NO_BIND 
IMAGE_DLL_CHARACTERISTICS_WDM_DRIVER 
IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE 

Instances

data IMAGE_FILE_CHARACTERISTICS Source

Constructors

IMAGE_FILE_RELOCS_STRIPPED 
IMAGE_FILE_EXECUTABLE_IMAGE 
IMAGE_FILE_LINE_NUMS_STRIPPED 
IMAGE_FILE_LOCAL_SYMS_STIRPPED 
IMAGE_FILE_AGGRESSIVE_WS_TRIM 
IMAGE_FILE_LARGE_ADDRESS_AWARE 
IMAGE_FILE_BYTES_REVERSED_LO 
IMAGE_FILE_32BIT_MACHINE 
IMAGE_FILE_DEBUG_STRIPPED 
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP 
IMAGE_FILE_NET_RUN_FROM_SWAP 
IMAGE_FILE_SYSTEM 
IMAGE_FILE_DLL 
IMAGE_FILE_UP_SYSTEM_ONLY 
IMAGE_FILE_BYTES_REVERSED_HI 

Instances

data IMAGE_FILE_MACHINE Source

Constructors

IMAGE_FILE_MACHINE_UNKNOWN 
IMAGE_FILE_MACHINE_AM33 
IMAGE_FILE_MACHINE_AMD64 
IMAGE_FILE_MACHINE_ARM 
IMAGE_FILE_MACHINE_EBC 
IMAGE_FILE_MACHINE_I386 
IMAGE_FILE_MACHINE_IA64 
IMAGE_FILE_MACHINE_M32R 
IMAGE_FILE_MACHINE_MIPS16 
IMAGE_FILE_MACHINE_MIPSFPU 
IMAGE_FILE_MACHINE_MIPSFPU16 
IMAGE_FILE_MACHINE_POWERPC 
IMAGE_FILE_MACHINE_POWERPCFP 
IMAGE_FILE_MACHINE_R4000 
IMAGE_FILE_MACHINE_SH3 
IMAGE_FILE_MACHINE_SH3DSP 
IMAGE_FILE_MACHINE_SH4 
IMAGE_FILE_MACHINE_SH5 
IMAGE_FILE_MACHINE_THUMB 
IMAGE_FILE_MACHINE_WCEMIPSV2 

Instances

parsePecoff :: ByteString -> PecoffSource

Parse the ByteString of a PE/COFF file into a Pecoff record.