PE/Header.h

Go to the documentation of this file.

/* Copyright 2017 - 2024 R. Thomas
 * Copyright 2017 - 2024 Quarkslab
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#ifndef C_LIEF_PE_HEADER_H
#define C_LIEF_PE_HEADER_H
 
#include <inttypes.h>
 
#include "LIEF/visibility.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
enum LIEF_PE_MACHINE_TYPES {
  LIEF_PE_MACHINE_UNKNOWN   = 0x0,
  LIEF_PE_MACHINE_AM33      = 0x1D3,  
  LIEF_PE_MACHINE_AMD64     = 0x8664, 
  LIEF_PE_MACHINE_ARM       = 0x1C0,  
  LIEF_PE_MACHINE_ARMNT     = 0x1C4,  
  LIEF_PE_MACHINE_ARM64     = 0xAA64, 
  LIEF_PE_MACHINE_EBC       = 0xEBC,  
  LIEF_PE_MACHINE_I386      = 0x14C,  
  LIEF_PE_MACHINE_IA64      = 0x200,  
  LIEF_PE_MACHINE_M32R      = 0x9041, 
  LIEF_PE_MACHINE_MIPS16    = 0x266,  
  LIEF_PE_MACHINE_MIPSFPU   = 0x366,  
  LIEF_PE_MACHINE_MIPSFPU16 = 0x466,  
  LIEF_PE_MACHINE_POWERPC   = 0x1F0,  
  LIEF_PE_MACHINE_POWERPCFP = 0x1F1,  
  LIEF_PE_MACHINE_POWERPCBE = 0x1F2,  
  LIEF_PE_MACHINE_R4000     = 0x166,  
  LIEF_PE_MACHINE_RISCV32   = 0x5032, 
  LIEF_PE_MACHINE_RISCV64   = 0x5064, 
  LIEF_PE_MACHINE_RISCV128  = 0x5128, 
  LIEF_PE_MACHINE_SH3       = 0x1A2,  
  LIEF_PE_MACHINE_SH3DSP    = 0x1A3,  
  LIEF_PE_MACHINE_SH4       = 0x1A6,  
  LIEF_PE_MACHINE_SH5       = 0x1A8,  
  LIEF_PE_MACHINE_THUMB     = 0x1C2,  
  LIEF_PE_MACHINE_WCEMIPSV2 = 0x169   
};
 
enum LIEF_PE_HEADER_CHARACTERISTICS {
  LIEF_PE_HEADER_CHARACTERISTICS_INVALID                 = 0x0000,
  LIEF_PE_HEADER_CHARACTERISTICS_RELOCS_STRIPPED         = 0x0001, 
  LIEF_PE_HEADER_CHARACTERISTICS_EXECUTABLE_IMAGE        = 0x0002, 
  LIEF_PE_HEADER_CHARACTERISTICS_LINE_NUMS_STRIPPED      = 0x0004, 
  LIEF_PE_HEADER_CHARACTERISTICS_LOCAL_SYMS_STRIPPED     = 0x0008, 
  LIEF_PE_HEADER_CHARACTERISTICS_AGGRESSIVE_WS_TRIM      = 0x0010, 
  LIEF_PE_HEADER_CHARACTERISTICS_LARGE_ADDRESS_AWARE     = 0x0020, 
  LIEF_PE_HEADER_CHARACTERISTICS_BYTES_REVERSED_LO       = 0x0080, 
  LIEF_PE_HEADER_CHARACTERISTICS_32BIT_MACHINE           = 0x0100, 
  LIEF_PE_HEADER_CHARACTERISTICS_DEBUG_STRIPPED          = 0x0200, 
  LIEF_PE_HEADER_CHARACTERISTICS_REMOVABLE_RUN_FROM_SWAP = 0x0400, 
  LIEF_PE_HEADER_CHARACTERISTICS_NET_RUN_FROM_SWAP       = 0x0800, 
  LIEF_PE_HEADER_CHARACTERISTICS_SYSTEM                  = 0x1000, 
  LIEF_PE_HEADER_CHARACTERISTICS_DLL                     = 0x2000, 
  LIEF_PE_HEADER_CHARACTERISTICS_UP_SYSTEM_ONLY          = 0x4000, 
  LIEF_PE_HEADER_CHARACTERISTICS_BYTES_REVERSED_HI       = 0x8000  
};
 
struct Pe_Header_t {
  uint8_t            signature[4];
  enum LIEF_PE_MACHINE_TYPES machine;
  uint16_t           numberof_sections;
  uint32_t           time_date_stamp;
  uint32_t           pointerto_symbol_table;
  uint32_t           numberof_symbols;
  uint16_t           sizeof_optional_header;
  uint16_t           characteristics;
};
 
typedef struct Pe_Header_t Pe_Header_t;
 
LIEF_API const char* lief_pe_header_machine_str(enum LIEF_PE_MACHINE_TYPES e);
LIEF_API const char* lief_pe_header_characteristics_str(enum LIEF_PE_HEADER_CHARACTERISTICS e);
 
#ifdef __cplusplus
}
#endif
 
#endif