Safe Haskell	None
Language	Haskell2010

Data.PE.Structures

Synopsis

data PEFile = PEFile {
- peHeader :: PEHeader
}
data PEObject = PEObj {
- peObjHeader :: PEObjectHeader
}
data BinSection = BinSection {
- secname :: String
- binSection :: ByteString
}
data PEObjectHeader = PEObjHdr {
- objcoffhdr :: COFFHeader
- objsectionTables :: [(SectionTable, ByteString)]
}
data PEHeader = PEHeader {
- msdosHeader :: MSDOSHeader
- peSignature :: PESignature
- coffHeader :: COFFHeader
- standardFields :: StandardFields
- windowsSpecFields :: WindowsSpecFields
- dataDirectories :: [DirectoryEntry]
- sectionTables :: [(SectionTable, ByteString)]
}
data MSDOSHeader = MSDOSHeader {
- signature :: Word16
- lastsize :: Word16
- pagesInFile :: Word16
- relocations :: Word16
- headerSizeInParagraph :: Word16
- minExtraParagraphs :: Word16
- maxExtraParagraphs :: Word16
- ss :: Word16
- sp :: Word16
- checksum :: Word16
- ip :: Word16
- cs :: Word16
- relocTableOffset :: Word16
- overlayNumber :: Word16
- oemIdentifier :: Word16
- oemInformation :: Word16
- offset :: Word32
}
data PESignature = PESignature {
- pesignature :: Word32
}
data COFFHeader = COFFHeader {
- targetMachine :: MachineType
- numberOfSections :: Word16
- timeDateStamp :: Word32
- pointerToSymbolTable :: Word32
- numberOfSymbols :: Word32
- sizeofOptionalHeaders :: Word16
- coffCharacteristics :: Word16
}
data StandardFields
- = StandardFields {
  - standardSig :: Word16
  - lnMajorVersion :: Word8
  - lnMinorVersion :: Word8
  - sizeOfCode :: Word32
  - sizeOfInitializedData :: Word32
  - sizeOfUninitData :: Word32
  - addressOfEntryPoint :: Word32
  - baseOfCode :: Word32
  - baseOfData :: Word32
  }
- | SFPlus {
  - standardSig :: Word16
  - lnMajorVersion :: Word8
  - lnMinorVersion :: Word8
  - sizeOfCode :: Word32
  - sizeOfInitializedData :: Word32
  - sizeOfUninitData :: Word32
  - addressOfEntryPoint :: Word32
  - baseOfCode :: Word32
  }
data WindowsSpecFields
- = WindowsSpecFields {
  - imageBase :: Word32
  - sectionAlignment :: Word32
  - fileAlignment :: Word32
  - majorOSVersion :: Word16
  - minorOSVersion :: Word16
  - majorImageVersion :: Word16
  - minorImageVersion :: Word16
  - majorSubSystemVersion :: Word16
  - minorSubSystemVersion :: Word16
  - win32VersionValue :: Word32
  - sizeOfImage :: Word32
  - sizeOfHeaders :: Word32
  - checkSum32 :: Word32
  - checkSum16 :: Word16
  - dllCharacteristics :: Word16
  - sizeOfStackReserve :: Word32
  - sizeOfStackCommit :: Word32
  - sizeOfHeapReserve :: Word32
  - sizeOfHeapCommit :: Word32
  - loaderFlags :: Word32
  - numberOfRVAandSizes :: Word32
  }
- | WSFPlus {
  - imgBase :: Word64
  - sectionAlignment :: Word32
  - fileAlignment :: Word32
  - majorOSVersion :: Word16
  - minorOSVersion :: Word16
  - majorImageVersion :: Word16
  - minorImageVersion :: Word16
  - majorSubSystemVersion :: Word16
  - minorSubSystemVersion :: Word16
  - win32VersionValue :: Word32
  - sizeOfImage :: Word32
  - sizeOfHeaders :: Word32
  - checkSum32 :: Word32
  - checkSum16 :: Word16
  - dllCharacteristics :: Word16
  - szOfStackReserve :: Word64
  - szOfStackCommit :: Word64
  - szOfHeapReserve :: Word64
  - szOfHeapCommit :: Word64
  - loaderFlags :: Word32
  - numberOfRVAandSizes :: Word32
  }
data DirectoryEntry = DirEntry {
- virtualAddr :: Word32
- entrySize :: Word32
}
data SectionTable = SectionTable {
- sectionHeaderName :: String
- virtualSize :: Word32
- virtualAddress :: Word32
- sizeOfRawData :: Word32
- pointerToRawData :: Word32
- pointerToRelocations :: Word32
- pointerToLineNumbers :: Word32
- numberOfRelocations :: Word16
- numberOfLineNumbers :: Word16
- secCharacteristics :: Word32
}
data MachineType
- = UNKNOWN
- | AM33
- | AMD64
- | ARM
- | ARMV7
- | EBC
- | I386
- | IA64
- | M32R
- | MIPS16
- | MIPSFPU
- | MIPSFPU16
- | PPC
- | PPCFP
- | R4000
- | SH3
- | SH3DSP
- | SH4
- | SH5
- | THUMB
- | WCE
- | INVALID
mapMachine :: Word16 -> MachineType
getAStr :: Get String

Documentation

data PEFile Source #

The over-arching container. Holds the headers and a list of binary sections

Constructors

PEFile
Fields peHeader :: PEHeader

Instances

Show PEFile Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> PEFile -> ShowS # show :: PEFile -> String # showList :: [PEFile] -> ShowS #

data PEObject Source #

Constructors

PEObj
Fields peObjHeader :: PEObjectHeader

Instances

Show PEObject Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> PEObject -> ShowS # show :: PEObject -> String # showList :: [PEObject] -> ShowS #

data BinSection Source #

The Binary Section container. Holds names and containers.

Constructors

BinSection
Fields secname :: String binSection :: ByteString

Instances

Show BinSection Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> BinSection -> ShowS # show :: BinSection -> String # showList :: [BinSection] -> ShowS #

data PEObjectHeader Source #

Constructors

PEObjHdr
Fields objcoffhdr :: COFFHeader objsectionTables :: [(SectionTable, ByteString)]

Instances

Show PEObjectHeader Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> PEObjectHeader -> ShowS # show :: PEObjectHeader -> String # showList :: [PEObjectHeader] -> ShowS #

data PEHeader Source #

The Header section, holds entries for each header in the PE File

Constructors

PEHeader
Fields msdosHeader :: MSDOSHeader peSignature :: PESignature coffHeader :: COFFHeader standardFields :: StandardFields windowsSpecFields :: WindowsSpecFields dataDirectories :: [DirectoryEntry] sectionTables :: [(SectionTable, ByteString)]

Instances

Show PEHeader Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> PEHeader -> ShowS # show :: PEHeader -> String # showList :: [PEHeader] -> ShowS #

data MSDOSHeader Source #

Constructors

MSDOSHeader
Fields signature :: Word16 lastsize :: Word16 pagesInFile :: Word16 relocations :: Word16 headerSizeInParagraph :: Word16 minExtraParagraphs :: Word16 maxExtraParagraphs :: Word16 ss :: Word16 sp :: Word16 checksum :: Word16 ip :: Word16 cs :: Word16 relocTableOffset :: Word16 overlayNumber :: Word16 oemIdentifier :: Word16 oemInformation :: Word16 offset :: Word32

Instances

Show MSDOSHeader Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> MSDOSHeader -> ShowS # show :: MSDOSHeader -> String # showList :: [MSDOSHeader] -> ShowS #

data PESignature Source #

Constructors

PESignature
Fields pesignature :: Word32

Instances

Show PESignature Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> PESignature -> ShowS # show :: PESignature -> String # showList :: [PESignature] -> ShowS #

data COFFHeader Source #

Constructors

COFFHeader
Fields targetMachine :: MachineType numberOfSections :: Word16 timeDateStamp :: Word32 pointerToSymbolTable :: Word32 numberOfSymbols :: Word32 sizeofOptionalHeaders :: Word16 coffCharacteristics :: Word16

Instances

Show COFFHeader Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> COFFHeader -> ShowS # show :: COFFHeader -> String # showList :: [COFFHeader] -> ShowS #

data StandardFields Source #

Constructors

StandardFields
Fields standardSig :: Word16 lnMajorVersion :: Word8 lnMinorVersion :: Word8 sizeOfCode :: Word32 sizeOfInitializedData :: Word32 sizeOfUninitData :: Word32 addressOfEntryPoint :: Word32 baseOfCode :: Word32 baseOfData :: Word32
SFPlus
Fields standardSig :: Word16 lnMajorVersion :: Word8 lnMinorVersion :: Word8 sizeOfCode :: Word32 sizeOfInitializedData :: Word32 sizeOfUninitData :: Word32 addressOfEntryPoint :: Word32 baseOfCode :: Word32

Instances

Show StandardFields Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> StandardFields -> ShowS # show :: StandardFields -> String # showList :: [StandardFields] -> ShowS #

data WindowsSpecFields Source #

Constructors

WindowsSpecFields
Fields imageBase :: Word32 sectionAlignment :: Word32 fileAlignment :: Word32 majorOSVersion :: Word16 minorOSVersion :: Word16 majorImageVersion :: Word16 minorImageVersion :: Word16 majorSubSystemVersion :: Word16 minorSubSystemVersion :: Word16 win32VersionValue :: Word32 sizeOfImage :: Word32 sizeOfHeaders :: Word32 checkSum32 :: Word32 checkSum16 :: Word16 dllCharacteristics :: Word16 sizeOfStackReserve :: Word32 sizeOfStackCommit :: Word32 sizeOfHeapReserve :: Word32 sizeOfHeapCommit :: Word32 loaderFlags :: Word32 numberOfRVAandSizes :: Word32
WSFPlus
Fields imgBase :: Word64 sectionAlignment :: Word32 fileAlignment :: Word32 majorOSVersion :: Word16 minorOSVersion :: Word16 majorImageVersion :: Word16 minorImageVersion :: Word16 majorSubSystemVersion :: Word16 minorSubSystemVersion :: Word16 win32VersionValue :: Word32 sizeOfImage :: Word32 sizeOfHeaders :: Word32 checkSum32 :: Word32 checkSum16 :: Word16 dllCharacteristics :: Word16 szOfStackReserve :: Word64 szOfStackCommit :: Word64 szOfHeapReserve :: Word64 szOfHeapCommit :: Word64 loaderFlags :: Word32 numberOfRVAandSizes :: Word32

Instances

Show WindowsSpecFields Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> WindowsSpecFields -> ShowS # show :: WindowsSpecFields -> String # showList :: [WindowsSpecFields] -> ShowS #

data DirectoryEntry Source #

Constructors

DirEntry
Fields virtualAddr :: Word32 entrySize :: Word32

Instances

Show DirectoryEntry Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> DirectoryEntry -> ShowS # show :: DirectoryEntry -> String # showList :: [DirectoryEntry] -> ShowS #
Binary DirectoryEntry Source #
Instance details Defined in Data.PE.Structures Methods put :: DirectoryEntry -> Put # get :: Get DirectoryEntry # putList :: [DirectoryEntry] -> Put #

data SectionTable Source #

Constructors

SectionTable
Fields sectionHeaderName :: String virtualSize :: Word32 virtualAddress :: Word32 sizeOfRawData :: Word32 pointerToRawData :: Word32 pointerToRelocations :: Word32 pointerToLineNumbers :: Word32 numberOfRelocations :: Word16 numberOfLineNumbers :: Word16 secCharacteristics :: Word32

Instances

Show SectionTable Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> SectionTable -> ShowS # show :: SectionTable -> String # showList :: [SectionTable] -> ShowS #
Binary SectionTable Source #
Instance details Defined in Data.PE.Structures Methods put :: SectionTable -> Put # get :: Get SectionTable # putList :: [SectionTable] -> Put #

data MachineType Source #

Constructors

UNKNOWN
AM33
AMD64
ARM
ARMV7
EBC
I386
IA64
M32R
MIPS16
MIPSFPU
MIPSFPU16
PPC
PPCFP
R4000
SH3
SH3DSP
SH4
SH5
THUMB
WCE
INVALID

Instances

Show MachineType Source #
Instance details Defined in Data.PE.Structures Methods showsPrec :: Int -> MachineType -> ShowS # show :: MachineType -> String # showList :: [MachineType] -> ShowS #
Binary MachineType Source #
Instance details Defined in Data.PE.Structures Methods put :: MachineType -> Put # get :: Get MachineType # putList :: [MachineType] -> Put #

mapMachine :: Word16 -> MachineType Source #

getAStr :: Get String Source #