A reader for the Windows `PE` executable format for debug purposes.

Collection Info

View Source
Collection
core
Path
debug/pe
Entries
32
Constants 8
Jump to Constants
COFF_SYMBOL_SIZE IMAGE_SYM_ABSOLUTE IMAGE_SYM_DEBUG IMAGE_SYM_UNDEFINED PE_CODE_VIEW_SIGNATURE_RSDS PE_SIGNATURE PE_SIGNATURE_OFFSET_INDEX_POS PE_SIGNATURE_STRING
Types 24
Jump to Types
COFF_Symbol COFF_Symbol_Aux_Format5 Data_Directory Debug_Directory_Entry File_Header IMAGE_COMDAT_SELECT IMAGE_DEBUG_TYPE IMAGE_DIRECTORY_ENTRY IMAGE_DLLCHARACTERISTIC IMAGE_DLLCHARACTERISTICS IMAGE_FILE_CHARACTERISTIC IMAGE_FILE_CHARACTERISTICS IMAGE_FILE_MACHINE IMAGE_REL IMAGE_SCN_CHARACTERISTICS IMAGE_SUBSYSTEM +8 more
Procedures 0
Procedure Groups 0
Variables 0

Source Files

Constants

8

IMAGE_SYM_ABSOLUTE #

Source 
IMAGE_SYM_ABSOLUTE :: -1

The symbol has an absolute (non-relocatable) value and is not an address.

IMAGE_SYM_DEBUG #

Source 
IMAGE_SYM_DEBUG :: -2

The symbol provides general type or debugging information but does not correspond to a section. Microsoft tools use this setting along with .file records (storage class FILE).

IMAGE_SYM_UNDEFINED #

Source 
IMAGE_SYM_UNDEFINED :: 0

The symbol record is not yet assigned a section. A value of zero indicates that a reference to an external symbol is defined elsewhere. A value of non-zero is a common symbol with a size that is specified by the value.

PE_CODE_VIEW_SIGNATURE_RSDS #

Source 
PE_CODE_VIEW_SIGNATURE_RSDS :: u32le(0x5344_5352)

PE_SIGNATURE #

Source 
PE_SIGNATURE :: u32le(0x0000_4550)

"PE\x00\x00"

PE_SIGNATURE_OFFSET_INDEX_POS #

Source 
PE_SIGNATURE_OFFSET_INDEX_POS :: 0x3c

Types

24

COFF_Symbol_Aux_Format5 #

Source 
COFF_Symbol_Aux_Format5 :: COFF_Symbol_Aux_Format5

COFF_Symbol_Aux_Format5 describes the expected form of an aux symbol attached to a section definition symbol. The PE format defines a number of different aux symbol formats: format 1 for function definitions, format 2 for .be and .ef symbols, and so on. Format 5 holds extra info associated with a section definition, including number of relocations + line numbers, as well as COMDAT info. See https://docs.microsoft.com/en-us/windows/win32/debug/pe-format#auxiliary-format-5-section-definitions for more on what's going on here.