diff --git a/_data_dir_entry_wrapper_8cpp_source.html b/_data_dir_entry_wrapper_8cpp_source.html index fd65de87..c6e1708b 100644 --- a/_data_dir_entry_wrapper_8cpp_source.html +++ b/_data_dir_entry_wrapper_8cpp_source.html @@ -170,7 +170,7 @@ $(function() { codefold.init(0); });
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition Executable.h:51
PEFile
Definition PEFile.h:45
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:53
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:284
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:292
PENodeWrapper
Definition PENodeWrapper.h:25
PENodeWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:36
diff --git a/_data_dir_wrapper_8cpp_source.html b/_data_dir_wrapper_8cpp_source.html index 26911928..e70d4c2f 100644 --- a/_data_dir_wrapper_8cpp_source.html +++ b/_data_dir_wrapper_8cpp_source.html @@ -222,7 +222,7 @@ $(function() { codefold.init(0); });
OptHdrWrapper
Definition OptHdrWrapper.h:6
OptHdrWrapper::RVAS_SIZES_NUM
@ RVAS_SIZES_NUM
Definition OptHdrWrapper.h:41
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:278
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:286
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition PEFile.h:52
diff --git a/_export_dir_wrapper_8cpp_source.html b/_export_dir_wrapper_8cpp_source.html index a1cab9f7..a55466a7 100644 --- a/_export_dir_wrapper_8cpp_source.html +++ b/_export_dir_wrapper_8cpp_source.html @@ -515,7 +515,7 @@ $(function() { codefold.init(0); });
ExportEntryWrapper::getForwarder
char * getForwarder()
Definition ExportDirWrapper.cpp:307
ExportEntryWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:221
PEFile
Definition PEFile.h:45
-
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:332
+
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:333
pe_util::forwarderNameLen
size_t forwarderNameLen(const char *ptr, size_t max_len)
Definition Util.cpp:113
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition Util.cpp:38
diff --git a/_file_hdr_wrapper_8cpp_source.html b/_file_hdr_wrapper_8cpp_source.html index 8241e324..fdfce5c1 100644 --- a/_file_hdr_wrapper_8cpp_source.html +++ b/_file_hdr_wrapper_8cpp_source.html @@ -338,8 +338,8 @@ $(function() { codefold.init(0); });
FileHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition FileHdrWrapper.cpp:56
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
PEFile
Definition PEFile.h:45
-
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:75
-
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:332
+
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:76
+
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:333
util
Definition FileHdrWrapper.cpp:7
util::getDateString
QString getDateString(const quint64 timestamp)
Definition FileHdrWrapper.cpp:8
diff --git a/_import_dir_wrapper_8cpp_source.html b/_import_dir_wrapper_8cpp_source.html index 1d902190..183a844f 100644 --- a/_import_dir_wrapper_8cpp_source.html +++ b/_import_dir_wrapper_8cpp_source.html @@ -567,7 +567,7 @@ $(function() { codefold.init(0); });
ImportedFuncWrapper::getImportByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr()
Definition ImportDirWrapper.cpp:13
ImportedFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:146
PEFile
Definition PEFile.h:45
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:284
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:292
PENodeWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:36
imports_util
Definition ImportBaseDirWrapper.h:10
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition Util.cpp:38
diff --git a/_opt_hdr_wrapper_8cpp_source.html b/_opt_hdr_wrapper_8cpp_source.html index 568e90e1..0dff311b 100644 --- a/_opt_hdr_wrapper_8cpp_source.html +++ b/_opt_hdr_wrapper_8cpp_source.html @@ -535,8 +535,8 @@ $(function() { codefold.init(0); });
OptHdrWrapper::s_osVersion
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
Definition OptHdrWrapper.h:46
OptHdrWrapper::s_subsystem
static std::map< DWORD, QString > s_subsystem
Definition OptHdrWrapper.h:48
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
-
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:76
-
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:94
+
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:77
+
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:95
diff --git a/_p_e_file_8cpp_source.html b/_p_e_file_8cpp_source.html index b205039e..d13ecaed 100644 --- a/_p_e_file_8cpp_source.html +++ b/_p_e_file_8cpp_source.html @@ -292,591 +292,601 @@ $(function() { codefold.init(0); });
192
-
193void PEFile::wrap()
+
193bool PEFile::wrapDataDirs()
194{
-
195 wrapCore();
-
196
-
197 // rewrap directories
-
198 for (size_t i = 0 ; i < pe::DIR_ENTRIES_COUNT; i++) {
-
199 if (dataDirEntries[i]) {
-
200 dataDirEntries[i]->wrap();
-
201 }
-
202 }
-
203 // rewrap resources
-
204 if (this->album) {
-
205 this->album->wrapLeafsContent();
-
206 }
-
207}
+
195 bool anyModified = false;
+
196 // rewrap directories
+
197 for (size_t i = 0 ; i < pe::DIR_ENTRIES_COUNT; i++) {
+
198 if (dataDirEntries[i]) {
+
199 if (dataDirEntries[i]->wrap()) {
+
200 anyModified = true;
+
201 }
+
202 }
+
203 }
+
204 // rewrap resources
+
205 if (this->album) {
+
206 this->album->wrapLeafsContent();
+
207 }
+
208 return anyModified;
+
209}
-
208
-
-
209pe::RICH_DANS_HEADER* PEFile::getRichHeaderBgn(pe::RICH_SIGNATURE* richSign)
-
210{
-
211 if (!richSign) return NULL;
-
212
-
213 DWORD xorkey = richSign->checksum;
-
214 const offset_t richOffset = this->getOffset(richSign);
-
215
-
216 pe::RICH_DANS_HEADER* dansHdr = NULL;
-
217
-
218 offset_t offset = richOffset - sizeof(pe::RICH_DANS_HEADER);
-
219 while (offset > 0) {
-
220 dansHdr = (pe::RICH_DANS_HEADER*) this->getContentAt(offset, sizeof(pe::RICH_DANS_HEADER));
-
221 if (!dansHdr) {
-
222 break;
-
223 }
-
224 if (dansHdr->dansId == (pe::DANS_HDR_MAGIC ^ xorkey)) {
-
225 break; //got it!
-
226 }
-
227 //walking back
-
228 offset -= sizeof(DWORD);
-
229 }
-
230 if (!dansHdr || dansHdr->dansId != (pe::DANS_HDR_MAGIC ^ xorkey)) {
-
231 return NULL; //not found
-
232 }
-
233 return dansHdr;
-
234}
+
210
+
+
211void PEFile::wrap()
+
212{
+
213 wrapCore();
+
214 wrapDataDirs();
+
215}
-
235
-
-
236pe::RICH_SIGNATURE* PEFile::getRichHeaderSign()
-
237{
-
238 size_t dosStubOffset = this->core.dos->e_lfarlc;
-
239 size_t dosStubEnd = this->core.dos->e_lfanew; // PE header start
-
240 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
-
241 BYTE *dosPtr = this->getContentAt(dosStubOffset, maxSize);
-
242 if (!dosPtr) {
-
243 return NULL;
-
244 }
-
245
-
246 pe::RICH_SIGNATURE* richSign = NULL;
-
247 size_t toSearchSize = maxSize;
-
248 const offset_t startOffset = dosStubOffset; //we are starting from the beginning of DOS stub
-
249 const size_t step = sizeof(DWORD); //RichHeader is padded by DWORDS
-
250
-
251 while (toSearchSize > 0) {
-
252 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
-
253 if (!richSign) break;
-
254 if (richSign->richId == pe::RICH_HDR_MAGIC) break; //got it!
-
255 // the search goes backward.
-
256 toSearchSize -= step;
-
257 }
-
258 if (!richSign) return NULL;
-
259 if (richSign->richId != pe::RICH_HDR_MAGIC) {
-
260 return NULL; //invalid
-
261 }
-
262 return richSign;
-
263}
+
216
+
+
217pe::RICH_DANS_HEADER* PEFile::getRichHeaderBgn(pe::RICH_SIGNATURE* richSign)
+
218{
+
219 if (!richSign) return NULL;
+
220
+
221 DWORD xorkey = richSign->checksum;
+
222 const offset_t richOffset = this->getOffset(richSign);
+
223
+
224 pe::RICH_DANS_HEADER* dansHdr = NULL;
+
225
+
226 offset_t offset = richOffset - sizeof(pe::RICH_DANS_HEADER);
+
227 while (offset > 0) {
+
228 dansHdr = (pe::RICH_DANS_HEADER*) this->getContentAt(offset, sizeof(pe::RICH_DANS_HEADER));
+
229 if (!dansHdr) {
+
230 break;
+
231 }
+
232 if (dansHdr->dansId == (pe::DANS_HDR_MAGIC ^ xorkey)) {
+
233 break; //got it!
+
234 }
+
235 //walking back
+
236 offset -= sizeof(DWORD);
+
237 }
+
238 if (!dansHdr || dansHdr->dansId != (pe::DANS_HDR_MAGIC ^ xorkey)) {
+
239 return NULL; //not found
+
240 }
+
241 return dansHdr;
+
242}
-
264
-
-
265offset_t PEFile::getMinSecRVA()
-
266{
-
267 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
268 if (!this->_getSectionsCount()) {
-
269 return INVALID_ADDR;
-
270 }
-
271 SectionHdrWrapper* sec = this->_getSecHdr(0);
-
272 if (!sec) {
-
273 return INVALID_ADDR;
-
274 }
-
275 return sec->getContentOffset(Executable::RVA);
-
276}
+
243
+
+
244pe::RICH_SIGNATURE* PEFile::getRichHeaderSign()
+
245{
+
246 size_t dosStubOffset = this->core.dos->e_lfarlc;
+
247 size_t dosStubEnd = this->core.dos->e_lfanew; // PE header start
+
248 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
+
249 BYTE *dosPtr = this->getContentAt(dosStubOffset, maxSize);
+
250 if (!dosPtr) {
+
251 return NULL;
+
252 }
+
253
+
254 pe::RICH_SIGNATURE* richSign = NULL;
+
255 size_t toSearchSize = maxSize;
+
256 const offset_t startOffset = dosStubOffset; //we are starting from the beginning of DOS stub
+
257 const size_t step = sizeof(DWORD); //RichHeader is padded by DWORDS
+
258
+
259 while (toSearchSize > 0) {
+
260 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
+
261 if (!richSign) break;
+
262 if (richSign->richId == pe::RICH_HDR_MAGIC) break; //got it!
+
263 // the search goes backward.
+
264 toSearchSize -= step;
+
265 }
+
266 if (!richSign) return NULL;
+
267 if (richSign->richId != pe::RICH_HDR_MAGIC) {
+
268 return NULL; //invalid
+
269 }
+
270 return richSign;
+
271}
-
277
-
-
278offset_t PEFile::peDataDirOffset()
-
279{
-
280 if (this->optHdr == NULL) return INVALID_ADDR;
-
281 return optHdr->getFieldOffset(OptHdrWrapper::DATA_DIR);
-
282}
+
272
+
+
273offset_t PEFile::getMinSecRVA()
+
274{
+
275 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
276 if (!this->_getSectionsCount()) {
+
277 return INVALID_ADDR;
+
278 }
+
279 SectionHdrWrapper* sec = this->_getSecHdr(0);
+
280 if (!sec) {
+
281 return INVALID_ADDR;
+
282 }
+
283 return sec->getContentOffset(Executable::RVA);
+
284}
-
283
-
-
284IMAGE_DATA_DIRECTORY* PEFile::getDataDirectory()
-
285{
-
286 if (this->wrappers[WR_DATADIR] == NULL) return NULL;
-
287 return static_cast<IMAGE_DATA_DIRECTORY*>(this->wrappers[WR_DATADIR]->getPtr());
-
288}
+
285
+
+
286offset_t PEFile::peDataDirOffset()
+
287{
+
288 if (this->optHdr == NULL) return INVALID_ADDR;
+
289 return optHdr->getFieldOffset(OptHdrWrapper::DATA_DIR);
+
290}
-
289
-
-
290bufsize_t PEFile::getMappedSize(Executable::addr_type aType)
-
291{
-
292 if (aType == Executable::NOT_ADDR) return 0;
-
293
-
294 if (aType == Executable::RAW) {
-
295 return this->getContentSize();
-
296 }
-
297 const size_t unit_size = 0x1000;
-
298 bufsize_t vSize = 0;
-
299 if (aType == Executable::VA || aType == Executable::RVA) {
-
300 vSize = core.getImageSize();
-
301 }
-
302 if (vSize < unit_size) {
-
303 return unit_size;
+
291
+
+
292IMAGE_DATA_DIRECTORY* PEFile::getDataDirectory()
+
293{
+
294 if (this->wrappers[WR_DATADIR] == NULL) return NULL;
+
295 return static_cast<IMAGE_DATA_DIRECTORY*>(this->wrappers[WR_DATADIR]->getPtr());
+
296}
+
+
297
+
+
298bufsize_t PEFile::getMappedSize(Executable::addr_type aType)
+
299{
+
300 if (aType == Executable::NOT_ADDR) return 0;
+
301
+
302 if (aType == Executable::RAW) {
+
303 return this->getContentSize();
304 }
-
305 return vSize;
-
306}
+
305 const size_t unit_size = 0x1000;
+
306 bufsize_t vSize = 0;
+
307 if (aType == Executable::VA || aType == Executable::RVA) {
+
308 vSize = core.getImageSize();
+
309 }
+
310 if (vSize < unit_size) {
+
311 return unit_size;
+
312 }
+
313 return vSize;
+
314}
-
307
-
-
308offset_t PEFile::getEntryPoint(Executable::addr_type addrType)
-
309{
-
310 if (optHdr == NULL) return INVALID_ADDR;
-
311
-
312 bool isOk = false;
-
313 offset_t entryPoint = static_cast<offset_t> (optHdr->getNumValue(OptHdrWrapper::EP, &isOk));
-
314 if (isOk == false) return INVALID_ADDR;
315
-
316 const Executable::addr_type epType = Executable::RVA;
-
317 if (addrType != epType) {
-
318 entryPoint = this->convertAddr(entryPoint, epType, addrType);
-
319 }
-
320 return entryPoint;
-
321}
+
+
316offset_t PEFile::getEntryPoint(Executable::addr_type addrType)
+
317{
+
318 if (optHdr == NULL) return INVALID_ADDR;
+
319
+
320 bool isOk = false;
+
321 offset_t entryPoint = static_cast<offset_t> (optHdr->getNumValue(OptHdrWrapper::EP, &isOk));
+
322 if (isOk == false) return INVALID_ADDR;
+
323
+
324 const Executable::addr_type epType = Executable::RVA;
+
325 if (addrType != epType) {
+
326 entryPoint = this->convertAddr(entryPoint, epType, addrType);
+
327 }
+
328 return entryPoint;
+
329}
-
322
-
-
323bool PEFile::setEntryPoint(offset_t entry, Executable::addr_type aType)
-
324{
-
325 if (optHdr == NULL) return false;
-
326
-
327 offset_t epRva = this->convertAddr(entry, aType, Executable::RVA);
-
328 bool isOk = optHdr->setNumValue(OptHdrWrapper::EP, epRva);
-
329 return isOk;
-
330}
+
330
+
+
331bool PEFile::setEntryPoint(offset_t entry, Executable::addr_type aType)
+
332{
+
333 if (optHdr == NULL) return false;
+
334
+
335 offset_t epRva = this->convertAddr(entry, aType, Executable::RVA);
+
336 bool isOk = optHdr->setNumValue(OptHdrWrapper::EP, epRva);
+
337 return isOk;
+
338}
-
331
-
-
332size_t PEFile::hdrSectionsNum() const
-
333{
-
334 bool isOk = false;
-
335 uint64_t secNum = this->fHdr->getNumValue(FileHdrWrapper::SEC_NUM , &isOk);
-
336 if (isOk == false) return 0;
-
337
-
338 return static_cast<size_t> (secNum);
-
339}
+
339
+
+
340size_t PEFile::hdrSectionsNum() const
+
341{
+
342 bool isOk = false;
+
343 uint64_t secNum = this->fHdr->getNumValue(FileHdrWrapper::SEC_NUM , &isOk);
+
344 if (isOk == false) return 0;
+
345
+
346 return static_cast<size_t> (secNum);
+
347}
-
340
-
-
341bool PEFile::setHdrSectionsNum(size_t newNum)
-
342{
-
343 uint64_t count = newNum;
-
344 bool canSet = fHdr->setNumValue(FileHdrWrapper::SEC_NUM , count);
-
345 if (canSet == false) {
-
346 Logger::append(Logger::D_ERROR,"Can not change FileHdr!");
-
347 return false;
-
348 }
-
349 return true;
-
350}
+
348
+
+
349bool PEFile::setHdrSectionsNum(size_t newNum)
+
350{
+
351 uint64_t count = newNum;
+
352 bool canSet = fHdr->setNumValue(FileHdrWrapper::SEC_NUM , count);
+
353 if (canSet == false) {
+
354 Logger::append(Logger::D_ERROR,"Can not change FileHdr!");
+
355 return false;
+
356 }
+
357 return true;
+
358}
-
351
-
-
352bool PEFile::setVirtualSize(bufsize_t newSize)
-
353{
-
354 uint64_t size = newSize;
-
355 bool canSet = optHdr->setNumValue(OptHdrWrapper::IMAGE_SIZE, size);
-
356 if (canSet == false) {
-
357 Logger::append(Logger::D_ERROR, "Can not change OptHdr!");
-
358 return false;
-
359 }
-
360 return true;
-
361}
-
-
362
-
-
363size_t PEFile::_getSectionsCount(bool useMapped) const
-
364{
-
365 if (useMapped == false) {
-
366 return hdrSectionsNum();
+
359
+
+
360bool PEFile::setVirtualSize(bufsize_t newSize)
+
361{
+
362 uint64_t size = newSize;
+
363 bool canSet = optHdr->setNumValue(OptHdrWrapper::IMAGE_SIZE, size);
+
364 if (canSet == false) {
+
365 Logger::append(Logger::D_ERROR, "Can not change OptHdr!");
+
366 return false;
367 }
-
368 return (this->sects) ? this->sects->getEntriesCount() : 0;
+
368 return true;
369}
370
-
371offset_t PEFile::rawToRva(offset_t raw)
-
372{
-
373 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
374 if (raw >= this->getMappedSize(Executable::RAW)) return INVALID_ADDR;
-
375
-
376 SectionHdrWrapper* sec = this->_getSecHdrAtOffset(raw, Executable::RAW, true);
-
377 if (sec) {
-
378 offset_t bgnVA = sec->getContentOffset(Executable::VA);
-
379 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
-
380 if (bgnVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
-
381
-
382 bufsize_t curr = (raw - bgnRaw);
-
383
-
384 bufsize_t vSize = sec->getContentSize(Executable::VA, true);
-
385 if (curr >= vSize) {
-
386 //address out of section
-
387 return INVALID_ADDR;
-
388 }
-
389 return bgnVA + curr;
-
390 }
-
391 //TODO: make more tests
-
392 if (this->_getSectionsCount() == 0) return raw;
-
393 if (raw < this->hdrsSize()) {
-
394 return raw;
-
395 } //else: content that is between the end of sections headers and the first virtual section is not mapped
-
396 return INVALID_ADDR;
-
397}
+
371size_t PEFile::_getSectionsCount(bool useMapped) const
+
372{
+
373 if (useMapped == false) {
+
374 return hdrSectionsNum();
+
375 }
+
376 return (this->sects) ? this->sects->getEntriesCount() : 0;
+
377}
-
398
-
-
399offset_t PEFile::rvaToRaw(offset_t rva)
-
400{
-
401 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
402 if (rva >= this->getMappedSize(Executable::RVA)) {
-
403 return INVALID_ADDR;
-
404 }
-
405 SectionHdrWrapper* sec = this->_getSecHdrAtOffset(rva, Executable::RVA, true);
-
406 if (sec) {
-
407 offset_t bgnRVA = sec->getContentOffset(Executable::RVA);
-
408 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
-
409 if (bgnRVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) {
-
410 return INVALID_ADDR;
-
411 }
-
412 bufsize_t curr = (rva - bgnRVA);
-
413 bufsize_t rawSize = sec->getContentSize(Executable::RAW, true);
-
414 if (curr >= rawSize) {
-
415 // the address might be in a virtual cave that is not related to any raw address
-
416 return INVALID_ADDR;
-
417 }
-
418 return bgnRaw + curr;
-
419 }
-
420 if (rva >= this->getMappedSize(Executable::RAW)) {
-
421 return INVALID_ADDR;
-
422 }
-
423 if (this->_getSectionsCount()) { // do this check only if sections count is non-zero
-
424 if (rva >= this->hdrsSize()) {
-
425 // the address is in the cave between the headers and the first section: cannot be mapped
-
426 return INVALID_ADDR;
-
427 }
-
428 }
-
429 // at this point we are sure that the address is within the raw size:
-
430 return rva;
-
431}
+
378
+
+
379offset_t PEFile::rawToRva(offset_t raw)
+
380{
+
381 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
382 if (raw >= this->getMappedSize(Executable::RAW)) return INVALID_ADDR;
+
383
+
384 SectionHdrWrapper* sec = this->_getSecHdrAtOffset(raw, Executable::RAW, true);
+
385 if (sec) {
+
386 offset_t bgnVA = sec->getContentOffset(Executable::VA);
+
387 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
+
388 if (bgnVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
+
389
+
390 bufsize_t curr = (raw - bgnRaw);
+
391
+
392 bufsize_t vSize = sec->getContentSize(Executable::VA, true);
+
393 if (curr >= vSize) {
+
394 //address out of section
+
395 return INVALID_ADDR;
+
396 }
+
397 return bgnVA + curr;
+
398 }
+
399 //TODO: make more tests
+
400 if (this->_getSectionsCount() == 0) return raw;
+
401 if (raw < this->hdrsSize()) {
+
402 return raw;
+
403 } //else: content that is between the end of sections headers and the first virtual section is not mapped
+
404 return INVALID_ADDR;
+
405}
-
432
-
-
433DataDirEntryWrapper* PEFile::getDataDirEntry(pe::dir_entry eType)
-
434{
-
435 if (eType >= pe::DIR_ENTRIES_COUNT) return NULL;
-
436 return dataDirEntries[eType];
-
437}
+
406
+
+
407offset_t PEFile::rvaToRaw(offset_t rva)
+
408{
+
409 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
410 if (rva >= this->getMappedSize(Executable::RVA)) {
+
411 return INVALID_ADDR;
+
412 }
+
413 SectionHdrWrapper* sec = this->_getSecHdrAtOffset(rva, Executable::RVA, true);
+
414 if (sec) {
+
415 offset_t bgnRVA = sec->getContentOffset(Executable::RVA);
+
416 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
+
417 if (bgnRVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) {
+
418 return INVALID_ADDR;
+
419 }
+
420 bufsize_t curr = (rva - bgnRVA);
+
421 bufsize_t rawSize = sec->getContentSize(Executable::RAW, true);
+
422 if (curr >= rawSize) {
+
423 // the address might be in a virtual cave that is not related to any raw address
+
424 return INVALID_ADDR;
+
425 }
+
426 return bgnRaw + curr;
+
427 }
+
428 if (rva >= this->getMappedSize(Executable::RAW)) {
+
429 return INVALID_ADDR;
+
430 }
+
431 if (this->_getSectionsCount()) { // do this check only if sections count is non-zero
+
432 if (rva >= this->hdrsSize()) {
+
433 // the address is in the cave between the headers and the first section: cannot be mapped
+
434 return INVALID_ADDR;
+
435 }
+
436 }
+
437 // at this point we are sure that the address is within the raw size:
+
438 return rva;
+
439}
-
438
-
-
439BufferView* PEFile::createSectionView(size_t secId)
-
440{
-
441 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
442 SectionHdrWrapper *sec = this->_getSecHdr(secId);
-
443 if (!sec) {
-
444 Logger::append(Logger::D_WARNING, "No such section");
-
445 return NULL;
-
446 }
-
447 return _createSectionView(sec);
-
448}
+
440
+
+
441DataDirEntryWrapper* PEFile::getDataDirEntry(pe::dir_entry eType)
+
442{
+
443 if (eType >= pe::DIR_ENTRIES_COUNT) return NULL;
+
444 return dataDirEntries[eType];
+
445}
-
449
-
-
450bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
-
451{
-
452 bool allowExceptions = true; //TODO: configure exception mode outside...
-
453
-
454 DataDirEntryWrapper *entry = getDataDirEntry(id);
-
455 if (entry == NULL) {
-
456 if (allowExceptions) throw ExeException("No such Data Directory");
-
457 return false;
-
458 }
-
459 DataDirWrapper* ddirWrapper = dynamic_cast<DataDirWrapper*> (this->wrappers[WR_DATADIR]);
-
460 IMAGE_DATA_DIRECTORY *ddir = this->getDataDirectory();
-
461 if (ddirWrapper == NULL || ddir == NULL) {
-
462 if (allowExceptions) throw ExeException("Cannot fetch DataDirTable");
-
463 return false;
-
464 }
-
465 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
-
466 offset_t dataDirAddr = this->convertAddr(newOffset, addrType, dataDirAddrType);
-
467 if (dataDirAddr == INVALID_ADDR) {
-
468 if (allowExceptions) throw ExeException("Invalid new offset");
-
469 return false;
-
470 }
-
471 offset_t targetRaw = this->toRaw(newOffset, addrType);
-
472 if (entry->canCopyToOffset(targetRaw) == false) {
-
473 if (allowExceptions) throw ExeException("Cannot copy: no space at such offset");
-
474 return false;
-
475 }
-
476 if (entry->copyToOffset(targetRaw) == false) {
-
477 if (allowExceptions) throw ExeException("Cannot copy: error occured");
-
478 return false;
-
479 }
-
480 entry->fillContent(0);
-
481 ddir[id].VirtualAddress = static_cast<DWORD> (dataDirAddr);
-
482 return true;
-
483}
+
446
+
+
447BufferView* PEFile::createSectionView(size_t secId)
+
448{
+
449 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
450 SectionHdrWrapper *sec = this->_getSecHdr(secId);
+
451 if (!sec) {
+
452 Logger::append(Logger::D_WARNING, "No such section");
+
453 return NULL;
+
454 }
+
455 return _createSectionView(sec);
+
456}
-
484
-
-
485bool PEFile::_canAddNewSection()
-
486{
-
487 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
488 if (sec == NULL || sec->canAddEntry() == false) {
-
489 return false;
-
490 }
-
491 const size_t secCount = hdrSectionsNum();
-
492 if (secCount == SectHdrsWrapper::SECT_COUNT_MAX) {
-
493 return false; //limit exceeded
-
494 }
-
495 //TODO: some more checks? overlay?
-
496 return true;
-
497}
+
457
+
+
458bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
+
459{
+
460 bool allowExceptions = true; //TODO: configure exception mode outside...
+
461
+
462 DataDirEntryWrapper *entry = getDataDirEntry(id);
+
463 if (entry == NULL) {
+
464 if (allowExceptions) throw ExeException("No such Data Directory");
+
465 return false;
+
466 }
+
467 DataDirWrapper* ddirWrapper = dynamic_cast<DataDirWrapper*> (this->wrappers[WR_DATADIR]);
+
468 IMAGE_DATA_DIRECTORY *ddir = this->getDataDirectory();
+
469 if (ddirWrapper == NULL || ddir == NULL) {
+
470 if (allowExceptions) throw ExeException("Cannot fetch DataDirTable");
+
471 return false;
+
472 }
+
473 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
+
474 offset_t dataDirAddr = this->convertAddr(newOffset, addrType, dataDirAddrType);
+
475 if (dataDirAddr == INVALID_ADDR) {
+
476 if (allowExceptions) throw ExeException("Invalid new offset");
+
477 return false;
+
478 }
+
479 offset_t targetRaw = this->toRaw(newOffset, addrType);
+
480 if (entry->canCopyToOffset(targetRaw) == false) {
+
481 if (allowExceptions) throw ExeException("Cannot copy: no space at such offset");
+
482 return false;
+
483 }
+
484 if (entry->copyToOffset(targetRaw) == false) {
+
485 if (allowExceptions) throw ExeException("Cannot copy: error occured");
+
486 return false;
+
487 }
+
488 entry->fillContent(0);
+
489 ddir[id].VirtualAddress = static_cast<DWORD> (dataDirAddr);
+
490 return true;
+
491}
-
498
-
-
499SectionHdrWrapper* PEFile::addNewSection(QString name, bufsize_t r_size, bufsize_t v_size)
-
500{
-
501 if (!r_size && !v_size) return nullptr; //nothing to add
-
502
-
503 bufsize_t newSize = 0;
-
504 bufsize_t roundedRawEnd = 0;
-
505 bufsize_t roundedVirtualEnd = 0;
-
506 SectionHdrWrapper* secHdrWr = nullptr;
-
507 { //scope0
-
508 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
509 if (!_canAddNewSection()) {
-
510 return nullptr;
-
511 }
-
512 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
513 if (!v_size) {
-
514 v_size = r_size;
-
515 }
-
516 roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
-
517 roundedVirtualEnd = buf_util::roundupToUnit(getMappedSize(Executable::RVA), getAlignment(Executable::RVA));
-
518 newSize = roundedRawEnd + r_size;
-
519 const bufsize_t newVirtualSize = roundedVirtualEnd + v_size;
-
520 if (setVirtualSize(newVirtualSize) == false) {
-
521 Logger::append(Logger::D_ERROR, "Failed to change virtual size to: %X", newVirtualSize);
-
522 return nullptr;
+
492
+
+
493bool PEFile::_canAddNewSection()
+
494{
+
495 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
496 if (sec == NULL || sec->canAddEntry() == false) {
+
497 return false;
+
498 }
+
499 const size_t secCount = hdrSectionsNum();
+
500 if (secCount == SectHdrsWrapper::SECT_COUNT_MAX) {
+
501 return false; //limit exceeded
+
502 }
+
503 //TODO: some more checks? overlay?
+
504 return true;
+
505}
+
+
506
+
+
507SectionHdrWrapper* PEFile::addNewSection(QString name, bufsize_t r_size, bufsize_t v_size)
+
508{
+
509 if (!r_size && !v_size) return nullptr; //nothing to add
+
510
+
511 bufsize_t newSize = 0;
+
512 bufsize_t roundedRawEnd = 0;
+
513 bufsize_t roundedVirtualEnd = 0;
+
514 SectionHdrWrapper* secHdrWr = nullptr;
+
515 { //scope0
+
516 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
517 if (!_canAddNewSection()) {
+
518 return nullptr;
+
519 }
+
520 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
521 if (!v_size) {
+
522 v_size = r_size;
523 }
-
524 } //scope0
-
525
-
526 // the PE file is resized and rewrapped:
-
527 if (resize(newSize) == false) {
-
528 Logger::append(Logger::D_ERROR, "Failed to resize");
-
529 return nullptr;
-
530 }
-
531
-
532 { //scope1
-
533 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
534 // fetch again after resize:
-
535 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
536 if (!sec) {
-
537 return nullptr;
-
538 }
-
539
-
540 IMAGE_SECTION_HEADER secHdr;
-
541 ::memset(&secHdr, 0, sizeof(IMAGE_SECTION_HEADER));
-
542
-
543 //name copy:
-
544 const size_t nameLen = name.length();
-
545 const size_t bufSize = sizeof(secHdr.Name);
-
546 const size_t copySize = (nameLen < bufSize) ? nameLen : bufSize;
-
547 if (copySize) {
-
548 ::memcpy(secHdr.Name, name.toStdString().c_str(), copySize);
-
549 }
-
550 secHdr.PointerToRawData = static_cast<DWORD>(roundedRawEnd);
-
551 secHdr.VirtualAddress = static_cast<DWORD>(roundedVirtualEnd);
-
552 secHdr.SizeOfRawData = r_size;
-
553 secHdr.Misc.VirtualSize = v_size;
-
554
-
555 SectionHdrWrapper wr(this, &secHdr);
-
556 secHdrWr = dynamic_cast<SectionHdrWrapper*>(sec->addEntry(&wr));
-
557 }
-
558 return secHdrWr;
-
559}
+
524 roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
+
525 roundedVirtualEnd = buf_util::roundupToUnit(getMappedSize(Executable::RVA), getAlignment(Executable::RVA));
+
526 newSize = roundedRawEnd + r_size;
+
527 const bufsize_t newVirtualSize = roundedVirtualEnd + v_size;
+
528 if (setVirtualSize(newVirtualSize) == false) {
+
529 Logger::append(Logger::D_ERROR, "Failed to change virtual size to: %X", newVirtualSize);
+
530 return nullptr;
+
531 }
+
532 } //scope0
+
533
+
534 // the PE file is resized and rewrapped:
+
535 if (resize(newSize) == false) {
+
536 Logger::append(Logger::D_ERROR, "Failed to resize");
+
537 return nullptr;
+
538 }
+
539
+
540 { //scope1
+
541 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
542 // fetch again after resize:
+
543 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
544 if (!sec) {
+
545 return nullptr;
+
546 }
+
547
+
548 IMAGE_SECTION_HEADER secHdr;
+
549 ::memset(&secHdr, 0, sizeof(IMAGE_SECTION_HEADER));
+
550
+
551 //name copy:
+
552 const size_t nameLen = name.length();
+
553 const size_t bufSize = sizeof(secHdr.Name);
+
554 const size_t copySize = (nameLen < bufSize) ? nameLen : bufSize;
+
555 if (copySize) {
+
556 ::memcpy(secHdr.Name, name.toStdString().c_str(), copySize);
+
557 }
+
558 secHdr.PointerToRawData = static_cast<DWORD>(roundedRawEnd);
+
559 secHdr.VirtualAddress = static_cast<DWORD>(roundedVirtualEnd);
+
560 secHdr.SizeOfRawData = r_size;
+
561 secHdr.Misc.VirtualSize = v_size;
+
562
+
563 SectionHdrWrapper wr(this, &secHdr);
+
564 secHdrWr = dynamic_cast<SectionHdrWrapper*>(sec->addEntry(&wr));
+
565 }
+
566 return secHdrWr;
+
567}
-
560
-
-
561SectionHdrWrapper* PEFile::_getLastSection()
-
562{
-
563 size_t secCount = this->_getSectionsCount(true);
-
564 return (secCount > 0) ? this->_getSecHdr(secCount - 1) : nullptr;
-
565}
+
568
+
+
569SectionHdrWrapper* PEFile::_getLastSection()
+
570{
+
571 size_t secCount = this->_getSectionsCount(true);
+
572 return (secCount > 0) ? this->_getSecHdr(secCount - 1) : nullptr;
+
573}
-
566
-
-
567offset_t PEFile::_getLastMapped(Executable::addr_type aType)
-
568{
-
569 offset_t lastMapped = 0;
-
570
-
571 /* check sections bounds */
-
572 const size_t secCounter = this->_getSectionsCount(true);
-
573 if (!secCounter) {
-
574 // if PE file has no sections, full file will be mapped
-
575 return getMappedSize(aType);
-
576 }
-
577 for (size_t i = 0; i < secCounter; i++) {
-
578 SectionHdrWrapper *sec = this->_getSecHdr(i);
-
579 if (!sec) continue;
-
580
-
581 offset_t secLastMapped= sec->getContentOffset(aType, true);
-
582 if (secLastMapped == INVALID_ADDR) continue;
-
583
-
584 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
-
585 if (size == 0) continue; // exclude not mapped sections
-
586
-
587 secLastMapped += size;
-
588 if (secLastMapped > lastMapped) {
-
589 lastMapped = secLastMapped;
-
590 }
-
591 }
-
592
-
593 /* check header bounds */
-
594 /* section headers: */
-
595 if (lastMapped < this->_secHdrsEndOffset()) {
-
596 lastMapped = this->_secHdrsEndOffset();
-
597 }
-
598 // PE hdrs ending:
-
599 const offset_t peHdrsEnd = this->core.peSignatureOffset() + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + this->core.peNtHeadersSize();
-
600 if (lastMapped < peHdrsEnd) {
-
601 lastMapped = peHdrsEnd;
-
602 }
-
603 // OptionalHdr -> SizeOfHeaders:
-
604 const offset_t ntHeadersEndOffset = this->core.hdrsSize();
-
605 if (lastMapped < ntHeadersEndOffset) {
-
606 lastMapped = ntHeadersEndOffset;
-
607 }
-
608 return lastMapped;
-
609}
-
-
610
-
-
611SectionHdrWrapper* PEFile::extendLastSection(bufsize_t addedSize)
-
612{
-
613 bufsize_t newSize = 0;
-
614
-
615 { //scope0
-
616 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
617 SectionHdrWrapper* secHdr = _getLastSection();
-
618 if (!secHdr) return nullptr;
-
619
-
620 //TODO: check overlay...
-
621 const bufsize_t fullSize = getContentSize();
-
622 newSize = fullSize + addedSize;
-
623
-
624 const offset_t secROffset = secHdr->getContentOffset(Executable::RAW, false);
-
625 if (secROffset == INVALID_ADDR) {
-
626 return NULL;
-
627 }
-
628 const bufsize_t secNewRSize = newSize - secROffset; //include overlay in section
-
629 secHdr->setNumValue(SectionHdrWrapper::RSIZE, uint64_t(secNewRSize));
-
630
-
631 const offset_t secVOffset = secHdr->getContentOffset(Executable::RVA, false);
-
632 const bufsize_t secVSize = secHdr->getContentSize(Executable::RVA, false);
-
633
-
634 // if the previous virtual size is smaller than the new raw size, then update it:
-
635 if (secVSize < secNewRSize) {
-
636 secHdr->setNumValue(SectionHdrWrapper::VSIZE, uint64_t(secNewRSize));
-
637
-
638 // if the virtual size of section has changed,
-
639 // update the Size of Image (saved in the header):
-
640 bufsize_t newVSize = secVOffset + secNewRSize;
-
641 this->setVirtualSize(newVSize);
-
642 }
-
643
-
644 }
-
645
-
646 //update raw size:
-
647 this->resize(newSize);
-
648 //finally, retrieve the resized section:
-
649 return getLastSection();
-
650}
+
574
+
+
575offset_t PEFile::_getLastMapped(Executable::addr_type aType)
+
576{
+
577 offset_t lastMapped = 0;
+
578
+
579 /* check sections bounds */
+
580 const size_t secCounter = this->_getSectionsCount(true);
+
581 if (!secCounter) {
+
582 // if PE file has no sections, full file will be mapped
+
583 return getMappedSize(aType);
+
584 }
+
585 for (size_t i = 0; i < secCounter; i++) {
+
586 SectionHdrWrapper *sec = this->_getSecHdr(i);
+
587 if (!sec) continue;
+
588
+
589 offset_t secLastMapped= sec->getContentOffset(aType, true);
+
590 if (secLastMapped == INVALID_ADDR) continue;
+
591
+
592 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
+
593 if (size == 0) continue; // exclude not mapped sections
+
594
+
595 secLastMapped += size;
+
596 if (secLastMapped > lastMapped) {
+
597 lastMapped = secLastMapped;
+
598 }
+
599 }
+
600
+
601 /* check header bounds */
+
602 /* section headers: */
+
603 if (lastMapped < this->_secHdrsEndOffset()) {
+
604 lastMapped = this->_secHdrsEndOffset();
+
605 }
+
606 // PE hdrs ending:
+
607 const offset_t peHdrsEnd = this->core.peSignatureOffset() + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + this->core.peNtHeadersSize();
+
608 if (lastMapped < peHdrsEnd) {
+
609 lastMapped = peHdrsEnd;
+
610 }
+
611 // OptionalHdr -> SizeOfHeaders:
+
612 const offset_t ntHeadersEndOffset = this->core.hdrsSize();
+
613 if (lastMapped < ntHeadersEndOffset) {
+
614 lastMapped = ntHeadersEndOffset;
+
615 }
+
616 return lastMapped;
+
617}
+
618
+
+
619SectionHdrWrapper* PEFile::extendLastSection(bufsize_t addedSize)
+
620{
+
621 bufsize_t newSize = 0;
+
622
+
623 { //scope0
+
624 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
625 SectionHdrWrapper* secHdr = _getLastSection();
+
626 if (!secHdr) return nullptr;
+
627
+
628 //TODO: check overlay...
+
629 const bufsize_t fullSize = getContentSize();
+
630 newSize = fullSize + addedSize;
+
631
+
632 const offset_t secROffset = secHdr->getContentOffset(Executable::RAW, false);
+
633 if (secROffset == INVALID_ADDR) {
+
634 return NULL;
+
635 }
+
636 const bufsize_t secNewRSize = newSize - secROffset; //include overlay in section
+
637 secHdr->setNumValue(SectionHdrWrapper::RSIZE, uint64_t(secNewRSize));
+
638
+
639 const offset_t secVOffset = secHdr->getContentOffset(Executable::RVA, false);
+
640 const bufsize_t secVSize = secHdr->getContentSize(Executable::RVA, false);
+
641
+
642 // if the previous virtual size is smaller than the new raw size, then update it:
+
643 if (secVSize < secNewRSize) {
+
644 secHdr->setNumValue(SectionHdrWrapper::VSIZE, uint64_t(secNewRSize));
+
645
+
646 // if the virtual size of section has changed,
+
647 // update the Size of Image (saved in the header):
+
648 bufsize_t newVSize = secVOffset + secNewRSize;
+
649 this->setVirtualSize(newVSize);
+
650 }
651
-
-
652bool PEFile::dumpSection(SectionHdrWrapper *sec, QString fileName)
-
653{
-
654 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
655 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
-
656 return false; //not my section
-
657 }
-
658 BufferView *secView = this->_createSectionView(sec);
-
659 if (!secView) return false;
-
660
-
661 bufsize_t dumpedSize = FileBuffer::dump(fileName, *secView, false);
-
662 delete secView;
-
663
-
664 return dumpedSize ? true : false;
-
665}
+
652 }
+
653
+
654 //update raw size:
+
655 this->resize(newSize);
+
656 //finally, retrieve the resized section:
+
657 return getLastSection();
+
658}
-
666
-
-
667bool PEFile::unbindImports()
-
668{
-
669 IMAGE_DATA_DIRECTORY* ddir = this->getDataDirectory();
-
670 if (ddir[pe::DIR_BOUND_IMPORT].VirtualAddress == 0 && ddir[pe::DIR_BOUND_IMPORT].Size == 0) {
-
671 // No bound imports already, nothing to do here!
-
672 return true;
-
673 }
-
674 ddir[pe::DIR_BOUND_IMPORT].VirtualAddress = 0;
-
675 ddir[pe::DIR_BOUND_IMPORT].Size = 0;
-
676 DataDirEntryWrapper *bImp = this->getDataDirEntry(pe::DIR_BOUND_IMPORT);
-
677 if (bImp == NULL) {
-
678 //printf("No Bound imports wrapper!\n");
-
679 return false; // todo: throw error?
-
680 }
-
681 bool isOk = bImp->wrap();
-
682 //TODO: change timestamp for all library entries from (-1 : BOUND) to 0 : NOT BOUND
-
683 return isOk;
-
684}
+
659
+
+
660bool PEFile::dumpSection(SectionHdrWrapper *sec, QString fileName)
+
661{
+
662 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
663 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
+
664 return false; //not my section
+
665 }
+
666 BufferView *secView = this->_createSectionView(sec);
+
667 if (!secView) return false;
+
668
+
669 bufsize_t dumpedSize = FileBuffer::dump(fileName, *secView, false);
+
670 delete secView;
+
671
+
672 return dumpedSize ? true : false;
+
673}
-
685
-
686//protected:
-
687
-
-
688BufferView* PEFile::_createSectionView(SectionHdrWrapper *sec)
-
689{
-
690 Executable::addr_type aType = Executable::RAW;
-
691 offset_t start = sec->getContentOffset(aType, true);
-
692 bufsize_t size = sec->getContentSize(aType, true);
-
693 if (start == INVALID_ADDR || size == 0) {
-
694 return NULL;
-
695 }
-
696 return new BufferView(this, start, size);
-
697}
+
674
+
+
675bool PEFile::unbindImports()
+
676{
+
677 IMAGE_DATA_DIRECTORY* ddir = this->getDataDirectory();
+
678 if (ddir[pe::DIR_BOUND_IMPORT].VirtualAddress == 0 && ddir[pe::DIR_BOUND_IMPORT].Size == 0) {
+
679 // No bound imports already, nothing to do here!
+
680 return true;
+
681 }
+
682 ddir[pe::DIR_BOUND_IMPORT].VirtualAddress = 0;
+
683 ddir[pe::DIR_BOUND_IMPORT].Size = 0;
+
684 DataDirEntryWrapper *bImp = this->getDataDirEntry(pe::DIR_BOUND_IMPORT);
+
685 if (bImp == NULL) {
+
686 //printf("No Bound imports wrapper!\n");
+
687 return false; // todo: throw error?
+
688 }
+
689 bool isOk = bImp->wrap();
+
690 //TODO: change timestamp for all library entries from (-1 : BOUND) to 0 : NOT BOUND
+
691 return isOk;
+
692}
-
698
-
-
699size_t PEFile::getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType)
-
700{
-
701 size_t initialSize = entrypoints.size();
-
702
-
703 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
-
704 if (!exports) return 0;
-
705
-
706 const size_t entriesCnt = exports->getEntriesCount();
-
707 if (entriesCnt == 0) return 0;
-
708
-
709 for (int i = 0; i < entriesCnt; i++) {
-
710 ExportEntryWrapper* entry = dynamic_cast<ExportEntryWrapper*>(exports->getEntryAt(i));
-
711 if (!entry) continue;
-
712
-
713 QString forwarder = entry->getForwarderStr();
-
714 if (forwarder.length()) {
-
715 continue;
-
716 }
-
717 offset_t rva = entry->getFuncRva();
-
718 offset_t offset = this->convertAddr(rva, Executable::RVA, aType);
-
719 if (offset == INVALID_ADDR) {
-
720 continue;
-
721 }
-
722 entrypoints.insert(offset, entry->getName());
-
723 }
-
724 return entrypoints.size() - initialSize;
-
725}
+
693
+
694//protected:
+
695
+
+
696BufferView* PEFile::_createSectionView(SectionHdrWrapper *sec)
+
697{
+
698 Executable::addr_type aType = Executable::RAW;
+
699 offset_t start = sec->getContentOffset(aType, true);
+
700 bufsize_t size = sec->getContentSize(aType, true);
+
701 if (start == INVALID_ADDR || size == 0) {
+
702 return NULL;
+
703 }
+
704 return new BufferView(this, start, size);
+
705}
+
+
706
+
+
707size_t PEFile::getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType)
+
708{
+
709 size_t initialSize = entrypoints.size();
+
710
+
711 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
+
712 if (!exports) return 0;
+
713
+
714 const size_t entriesCnt = exports->getEntriesCount();
+
715 if (entriesCnt == 0) return 0;
+
716
+
717 for (int i = 0; i < entriesCnt; i++) {
+
718 ExportEntryWrapper* entry = dynamic_cast<ExportEntryWrapper*>(exports->getEntryAt(i));
+
719 if (!entry) continue;
+
720
+
721 QString forwarder = entry->getForwarderStr();
+
722 if (forwarder.length()) {
+
723 continue;
+
724 }
+
725 offset_t rva = entry->getFuncRva();
+
726 offset_t offset = this->convertAddr(rva, Executable::RVA, aType);
+
727 if (offset == INVALID_ADDR) {
+
728 continue;
+
729 }
+
730 entrypoints.insert(offset, entry->getName());
+
731 }
+
732 return entrypoints.size() - initialSize;
+
733}
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
@@ -905,7 +915,6 @@ $(function() { codefold.init(0); });
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
-
ExeNodeWrapper::wrap
virtual bool wrap()
Definition ExeNodeWrapper.h:16
ExeNodeWrapper::getEntriesCount
virtual size_t getEntriesCount()
Definition ExeNodeWrapper.h:20
ExeWrappersContainer::wrappers
std::map< size_t, ExeElementWrapper * > wrappers
Definition MappedExe.h:27
@@ -945,25 +954,26 @@ $(function() { codefold.init(0); });
PEFileBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition PEFile.cpp:31
PEFileBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
-
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:399
-
PEFile::m_peMutex
QMutex m_peMutex
Definition PEFile.h:400
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
-
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:688
-
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:699
-
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:396
-
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:367
-
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:667
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:278
-
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:308
+
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:400
+
PEFile::m_peMutex
QMutex m_peMutex
Definition PEFile.h:401
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:298
+
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:696
+
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:707
+
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:397
+
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:368
+
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:675
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:286
+
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:316
PEFile::_init
void _init(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:116
-
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:265
-
PEFile::SectHdrsWrapper
friend class SectHdrsWrapper
Definition PEFile.h:402
-
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:394
-
PEFile::_getSecIndex
size_t _getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:362
-
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:398
-
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:323
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
-
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:611
+
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:273
+
PEFile::SectHdrsWrapper
friend class SectHdrsWrapper
Definition PEFile.h:403
+
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:395
+
PEFile::wrapDataDirs
bool wrapDataDirs()
Definition PEFile.cpp:193
+
PEFile::_getSecIndex
size_t _getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:363
+
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:399
+
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:331
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:217
+
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:619
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition PEFile.h:55
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:53
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition PEFile.h:52
@@ -971,36 +981,36 @@ $(function() { codefold.init(0); });
PEFile::WR_DOS_HDR
@ WR_DOS_HDR
Definition PEFile.h:49
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition PEFile.h:54
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition PEFile.h:50
-
PEFile::core
PECore core
Definition PEFile.h:391
+
PEFile::core
PECore core
Definition PEFile.h:392
PEFile::initDirEntries
void initDirEntries()
Definition PEFile.cpp:173
-
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:193
-
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.h:187
-
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:395
-
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:652
-
PEFile::_getLastMapped
offset_t _getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:567
-
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:399
-
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:439
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:341
-
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:352
-
PEFile::_canAddNewSection
bool _canAddNewSection()
Definition PEFile.cpp:485
+
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:211
+
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.h:188
+
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:396
+
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:660
+
PEFile::_getLastMapped
offset_t _getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:575
+
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:407
+
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:447
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:349
+
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:360
+
PEFile::_canAddNewSection
bool _canAddNewSection()
Definition PEFile.cpp:493
PEFile::wrapCore
void wrapCore()
Definition PEFile.cpp:180
-
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:433
-
PEFile::_getSecHdrAtOffset
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:372
-
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:450
-
PEFile::_getLastSection
SectionHdrWrapper * _getLastSection()
Definition PEFile.cpp:561
+
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:441
+
PEFile::_getSecHdrAtOffset
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:373
+
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:458
+
PEFile::_getLastSection
SectionHdrWrapper * _getLastSection()
Definition PEFile.cpp:569
PEFile::clearWrappers
virtual void clearWrappers()
Definition PEFile.cpp:162
-
PEFile::_secHdrsEndOffset
offset_t _secHdrsEndOffset()
Definition PEFile.h:348
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:284
-
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:371
-
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:81
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:332
+
PEFile::_secHdrsEndOffset
offset_t _secHdrsEndOffset()
Definition PEFile.h:349
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:292
+
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:379
+
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:82
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:340
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:105
-
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:236
+
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:69
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:244
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
-
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:392
-
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
-
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:499
+
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:393
+
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:371
+
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:507
diff --git a/_p_e_file_8h_source.html b/_p_e_file_8h_source.html index 2134fcc6..8c818ad9 100644 --- a/_p_e_file_8h_source.html +++ b/_p_e_file_8h_source.html @@ -154,417 +154,418 @@ $(function() { codefold.init(0); });
63 virtual ~PEFile() { clearWrappers(); delete album; }
64
65 virtual void wrap(); // inherited from Executable
-
66
-
67 virtual bufsize_t getMappedSize(Executable::addr_type aType);
-
68 virtual bufsize_t getAlignment(Executable::addr_type aType) const { return core.getAlignment(aType); }
-
69 virtual offset_t getImageBase(bool recalculate = false) { return core.getImageBase(recalculate); }
-
70 virtual offset_t getEntryPoint(Executable::addr_type addrType = Executable::RVA); // returns INVALID_ADDR if failed
-
71
-
72 virtual exe_bits getBitMode() { return getHdrBitMode(); }
-
73 //---
-
74 // PEFile only:
-
75 offset_t peFileHdrOffset() const { return core.peFileHdrOffset(); }
-
76 offset_t peNtHdrOffset() const { return core.peSignatureOffset(); }
-
77 bufsize_t peNtHeadersSize() const { return core.peNtHeadersSize(); }
-
78 offset_t peOptHdrOffset() const { return core.peOptHdrOffset(); }
-
79 offset_t secHdrsOffset() const { return core.secHdrsOffset(); }
-
80
-
81 bufsize_t hdrsSize() { return core.hdrsSize(); }
-
82
-
83 ResourcesAlbum* getResourcesAlbum() const { return this->album; }
-
84
-
85 //get Rich header (if available)
-
86 pe::RICH_SIGNATURE* getRichHeaderSign();
-
87 pe::RICH_DANS_HEADER* getRichHeaderBgn(pe::RICH_SIGNATURE* sign);
-
88
-
89 IMAGE_DATA_DIRECTORY* getDataDirectory();
-
90 offset_t peDataDirOffset();
-
91
-
92 size_t hdrSectionsNum() const;
-
93
-
94 exe_bits getHdrBitMode() { return core.getHdrBitMode(); }
-
95
-
96/* mutex protected: section operations */
-
97
-
-
98 offset_t getLastMapped(Executable::addr_type aType)
-
99 {
-
100 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
101 return _getLastMapped(aType);
-
102 }
+
66 bool wrapDataDirs();
+
67
+
68 virtual bufsize_t getMappedSize(Executable::addr_type aType);
+
69 virtual bufsize_t getAlignment(Executable::addr_type aType) const { return core.getAlignment(aType); }
+
70 virtual offset_t getImageBase(bool recalculate = false) { return core.getImageBase(recalculate); }
+
71 virtual offset_t getEntryPoint(Executable::addr_type addrType = Executable::RVA); // returns INVALID_ADDR if failed
+
72
+
73 virtual exe_bits getBitMode() { return getHdrBitMode(); }
+
74 //---
+
75 // PEFile only:
+
76 offset_t peFileHdrOffset() const { return core.peFileHdrOffset(); }
+
77 offset_t peNtHdrOffset() const { return core.peSignatureOffset(); }
+
78 bufsize_t peNtHeadersSize() const { return core.peNtHeadersSize(); }
+
79 offset_t peOptHdrOffset() const { return core.peOptHdrOffset(); }
+
80 offset_t secHdrsOffset() const { return core.secHdrsOffset(); }
+
81
+
82 bufsize_t hdrsSize() { return core.hdrsSize(); }
+
83
+
84 ResourcesAlbum* getResourcesAlbum() const { return this->album; }
+
85
+
86 //get Rich header (if available)
+
87 pe::RICH_SIGNATURE* getRichHeaderSign();
+
88 pe::RICH_DANS_HEADER* getRichHeaderBgn(pe::RICH_SIGNATURE* sign);
+
89
+
90 IMAGE_DATA_DIRECTORY* getDataDirectory();
+
91 offset_t peDataDirOffset();
+
92
+
93 size_t hdrSectionsNum() const;
+
94
+
95 exe_bits getHdrBitMode() { return core.getHdrBitMode(); }
+
96
+
97/* mutex protected: section operations */
+
98
+ -
103
-
104 // FileAddr <-> RVA
-
105 virtual offset_t rawToRva(offset_t raw);
-
106 virtual offset_t rvaToRaw(offset_t rva);
-
107
-
108 offset_t getMinSecRVA();
-
109
-
-
110 size_t getSectionsCount(bool useMapped = true)
-
111 {
-
112 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
113 return _getSectionsCount(useMapped);
-
114 }
+
104
+
105 // FileAddr <-> RVA
+
106 virtual offset_t rawToRva(offset_t raw);
+
107 virtual offset_t rvaToRaw(offset_t rva);
+
108
+
109 offset_t getMinSecRVA();
+
110
+
+
111 size_t getSectionsCount(bool useMapped = true)
+
112 {
+
113 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
114 return _getSectionsCount(useMapped);
+
115 }
-
115
-
116 // mutex protected
-
-
117 size_t getSecIndex(SectionHdrWrapper *sec)
-
118 {
-
119 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
120 return _getSecIndex(sec);
-
121 }
+
116
+
117 // mutex protected
+ -
122
-
123 // mutex protected
-
-
124 SectionHdrWrapper* getSecHdr(size_t index)
-
125 {
-
126 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
127 return _getSecHdr(index);
-
128 }
+
123
+
124 // mutex protected
+ -
129
-
130 // mutex protected
-
-
131 SectionHdrWrapper* getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
-
132 {
-
133 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
134 return _getSecHdrAtOffset(offset, aType, recalculate, verbose);
-
135 }
+
130
+
131 // mutex protected
+ -
136
-
137 // mutex protected
-
-
138 SectionHdrWrapper* getEntrySection()
-
139 {
-
140 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
141 offset_t ep = getEntryPoint(Executable::RVA);
-
142 return this->_getSecHdrAtOffset(ep, Executable::RVA, true, false);
-
143 }
+
137
+
138 // mutex protected
+ -
144
-
145 // mutex protected
-
-
146 BYTE* getSecContent(SectionHdrWrapper *sec)
-
147 {
-
148 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
149 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
-
150 return NULL; //not my section
-
151 }
-
152 const bufsize_t buf_size = sec->getContentSize(Executable::RAW, true);
-
153 if (!buf_size) return NULL;
-
154
-
155 offset_t start = sec->getContentOffset(Executable::RAW, true);
-
156 BYTE *ptr = this->getContentAt(start, buf_size);
-
157 return ptr;
-
158 }
+
145
+
146 // mutex protected
+
+
147 BYTE* getSecContent(SectionHdrWrapper *sec)
+
148 {
+
149 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
150 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
+
151 return NULL; //not my section
+
152 }
+
153 const bufsize_t buf_size = sec->getContentSize(Executable::RAW, true);
+
154 if (!buf_size) return NULL;
+
155
+
156 offset_t start = sec->getContentOffset(Executable::RAW, true);
+
157 BYTE *ptr = this->getContentAt(start, buf_size);
+
158 return ptr;
+
159 }
-
159
-
160 // mutex protected
-
161 BufferView* createSectionView(size_t secNum);
-
162 //---
-
163
-
164 // mutex protected
-
-
165 bool clearContent(SectionHdrWrapper *sec)
-
166 {
-
167 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
168 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
-
169 return false; //not my section
-
170 }
-
171 BufferView *secView = this->_createSectionView(sec);
-
172 if (!secView) return false;
-
173
-
174 bool isOk = secView->fillContent(0);
-
175 delete secView;
-
176 return isOk;
-
177 }
+
160
+
161 // mutex protected
+
162 BufferView* createSectionView(size_t secNum);
+
163 //---
+
164
+
165 // mutex protected
+
+
166 bool clearContent(SectionHdrWrapper *sec)
+
167 {
+
168 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
169 if (this->_getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
+
170 return false; //not my section
+
171 }
+
172 BufferView *secView = this->_createSectionView(sec);
+
173 if (!secView) return false;
+
174
+
175 bool isOk = secView->fillContent(0);
+
176 delete secView;
+
177 return isOk;
+
178 }
-
178
-
179 // mutex protected
-
-
180 offset_t secHdrsEndOffset()
-
181 {
-
182 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
183 return _secHdrsEndOffset();
-
184 }
+
179
+
180 // mutex protected
+ -
185
-
186 // mutex protected
-
-
187 SectionHdrWrapper* getLastSection()
-
188 {
-
189 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
190 return this->_getLastSection();
-
191 }
+
186
+
187 // mutex protected
+ -
192
-
193 // mutex protected
-
-
194 bool canAddNewSection()
-
195 {
-
196 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
-
197 return this->_canAddNewSection();
-
198 }
+
193
+
194 // mutex protected
+
+
195 bool canAddNewSection()
+
196 {
+
197 WatchedLocker lock(&m_peMutex, PE_SHOW_LOCK, __FUNCTION__);
+
198 return this->_canAddNewSection();
+
199 }
-
199
-
200 // mutex protected
-
201 SectionHdrWrapper* addNewSection(QString name, bufsize_t size, bufsize_t v_size=0);
-
202
-
203 // mutex protected
-
204 SectionHdrWrapper* extendLastSection(bufsize_t addedSize);
-
205
-
206 // mutex protected
-
207 bool dumpSection(SectionHdrWrapper *sec, QString fileName);
-
208
-
209/* resource operations */
-
210
-
-
211 ResourcesContainer* getResourcesOfType(pe::resource_type typeId)
-
212 {
-
213 return (this->album == NULL) ? NULL : album->getResourcesOfType(typeId);
-
214 }
+
200
+
201 // mutex protected
+
202 SectionHdrWrapper* addNewSection(QString name, bufsize_t size, bufsize_t v_size=0);
+
203
+
204 // mutex protected
+
205 SectionHdrWrapper* extendLastSection(bufsize_t addedSize);
+
206
+
207 // mutex protected
+
208 bool dumpSection(SectionHdrWrapper *sec, QString fileName);
+
209
+
210/* resource operations */
+
211
+
+
212 ResourcesContainer* getResourcesOfType(pe::resource_type typeId)
+
213 {
+
214 return (this->album == NULL) ? NULL : album->getResourcesOfType(typeId);
+
215 }
-
215
-
216 DataDirEntryWrapper* getDataDirEntry(pe::dir_entry eType);
-
217
-
218 //modifications:
-
219 bool setEntryPoint(offset_t entry, Executable::addr_type aType);
-
220 bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType = Executable::RAW); //throws CustomException
-
221
-
222 bool unbindImports();
-
223
-
224 /* wrappers for fetching the initialized directories */
-
-
225 ImportDirWrapper* getImportsDir()
-
226 {
-
227 return dynamic_cast<ImportDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_IMPORT));
-
228 }
+
216
+
217 DataDirEntryWrapper* getDataDirEntry(pe::dir_entry eType);
+
218
+
219 //modifications:
+
220 bool setEntryPoint(offset_t entry, Executable::addr_type aType);
+
221 bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType = Executable::RAW); //throws CustomException
+
222
+
223 bool unbindImports();
+
224
+
225 /* wrappers for fetching the initialized directories */
+
+
226 ImportDirWrapper* getImportsDir()
+
227 {
+
228 return dynamic_cast<ImportDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_IMPORT));
+
229 }
-
229
-
-
230 DelayImpDirWrapper* getDelayedImportsDir()
-
231 {
-
232 return dynamic_cast<DelayImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DELAY_IMPORT));
-
233 }
+
230
+
+
231 DelayImpDirWrapper* getDelayedImportsDir()
+
232 {
+
233 return dynamic_cast<DelayImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DELAY_IMPORT));
+
234 }
-
234
-
-
235 BoundImpDirWrapper* getBoundImportsDir()
-
236 {
-
237 return dynamic_cast<BoundImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_BOUND_IMPORT));
-
238 }
+
235
+
+
236 BoundImpDirWrapper* getBoundImportsDir()
+
237 {
+
238 return dynamic_cast<BoundImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_BOUND_IMPORT));
+
239 }
-
239
-
-
240 DebugDirWrapper* getDebugDir()
-
241 {
-
242 return dynamic_cast<DebugDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DEBUG));
-
243 }
+
240
+
+
241 DebugDirWrapper* getDebugDir()
+
242 {
+
243 return dynamic_cast<DebugDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DEBUG));
+
244 }
-
244
-
-
245 ExportDirWrapper* getExportsDir()
-
246 {
-
247 return dynamic_cast<ExportDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
-
248 }
+
245
+
+
246 ExportDirWrapper* getExportsDir()
+
247 {
+
248 return dynamic_cast<ExportDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
+
249 }
-
249
-
-
250 SecurityDirWrapper* getSecurityDir()
-
251 {
-
252 return dynamic_cast<SecurityDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_SECURITY));
-
253 }
+
250
+
+
251 SecurityDirWrapper* getSecurityDir()
+
252 {
+
253 return dynamic_cast<SecurityDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_SECURITY));
+
254 }
-
254
-
-
255 TlsDirWrapper* getTlsDir()
-
256 {
-
257 return dynamic_cast<TlsDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_TLS));
-
258 }
+
255
+
+
256 TlsDirWrapper* getTlsDir()
+
257 {
+
258 return dynamic_cast<TlsDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_TLS));
+
259 }
-
259
-
-
260 LdConfigDirWrapper* getLoadConfigDir()
-
261 {
-
262 return dynamic_cast<LdConfigDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_LOAD_CONFIG));
-
263 }
+
260
+
+
261 LdConfigDirWrapper* getLoadConfigDir()
+
262 {
+
263 return dynamic_cast<LdConfigDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_LOAD_CONFIG));
+
264 }
-
264
-
-
265 RelocDirWrapper* getRelocsDir()
-
266 {
-
267 return dynamic_cast<RelocDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_BASERELOC));
-
268 }
+
265
+
+
266 RelocDirWrapper* getRelocsDir()
+
267 {
+
268 return dynamic_cast<RelocDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_BASERELOC));
+
269 }
-
269
-
-
270 ExceptionDirWrapper* getExceptionsDir()
-
271 {
-
272 return dynamic_cast<ExceptionDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXCEPTION));
-
273 }
+
270
+
+
271 ExceptionDirWrapper* getExceptionsDir()
+
272 {
+
273 return dynamic_cast<ExceptionDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXCEPTION));
+
274 }
-
274
-
-
275 ResourceDirWrapper* getResourcesDir()
-
276 {
-
277 return dynamic_cast<ResourceDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_RESOURCE));
-
278 }
+
275
+
+
276 ResourceDirWrapper* getResourcesDir()
+
277 {
+
278 return dynamic_cast<ResourceDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_RESOURCE));
+
279 }
-
279
-
-
280 ClrDirWrapper* getClsDir()
-
281 {
-
282 return dynamic_cast<ClrDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_COM_DESCRIPTOR));
-
283 }
+
280
+
+
281 ClrDirWrapper* getClsDir()
+
282 {
+
283 return dynamic_cast<ClrDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_COM_DESCRIPTOR));
+
284 }
-
284
-
285 /* All Entry Points of the application, including: main EP, Exports, TLS Callbacks */
-
-
286 virtual size_t getAllEntryPoints(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA)
-
287 {
-
288 size_t initialSize = entrypoints.size();
-
289
-
290 Executable::getAllEntryPoints(entrypoints, aType);
-
291 this->getExportsMap(entrypoints, aType);
-
292
-
293 return entrypoints.size() - initialSize;
-
294 }
+
285
+
286 /* All Entry Points of the application, including: main EP, Exports, TLS Callbacks */
+
+
287 virtual size_t getAllEntryPoints(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA)
+
288 {
+
289 size_t initialSize = entrypoints.size();
+
290
+
291 Executable::getAllEntryPoints(entrypoints, aType);
+
292 this->getExportsMap(entrypoints, aType);
+
293
+
294 return entrypoints.size() - initialSize;
+
295 }
-
295
-
296 /* wrappers:
-
297 */
-
-
298 bool hasDirectory(pe::dir_entry dirNum)
-
299 {
-
300 return this->getDataDirEntry(dirNum) ? true : false;
-
301 }
+
296
+
297 /* wrappers:
+
298 */
+
+
299 bool hasDirectory(pe::dir_entry dirNum)
+
300 {
+
301 return this->getDataDirEntry(dirNum) ? true : false;
+
302 }
-
302
-
-
303 bufsize_t getFileAlignment() const
-
304 {
-
305 return this->getAlignment(Executable::RAW);
-
306 }
+
303
+
+
304 bufsize_t getFileAlignment() const
+
305 {
+
306 return this->getAlignment(Executable::RAW);
+
307 }
-
307
-
-
308 bufsize_t getSectionAlignment() const
-
309 {
-
310 return this->getAlignment(Executable::RVA);
-
311 }
+
308
+
+
309 bufsize_t getSectionAlignment() const
+
310 {
+
311 return this->getAlignment(Executable::RVA);
+
312 }
-
312
313
-
-
314 void setImageSize(size_t newSize)
-
315 {
-
316 this->setVirtualSize(newSize);
-
317 }
+
314
+
+
315 void setImageSize(size_t newSize)
+
316 {
+
317 this->setVirtualSize(newSize);
+
318 }
-
318
-
-
319 bool canResize(bufsize_t newSize)
-
320 {
-
321 bufsize_t currentSize = (bufsize_t)this->getRawSize();
-
322 if (newSize > currentSize) {
-
323 return true;
-
324 }
-
325 bufsize_t hEnd = bufsize_t(this->peNtHdrOffset()) + this->peNtHeadersSize();
-
326 if (newSize < hEnd) {
-
327 return false; // the resize will harm headers!
-
328 }
-
329 return true;
-
330 }
+
319
+
+
320 bool canResize(bufsize_t newSize)
+
321 {
+
322 bufsize_t currentSize = (bufsize_t)this->getRawSize();
+
323 if (newSize > currentSize) {
+
324 return true;
+
325 }
+
326 bufsize_t hEnd = bufsize_t(this->peNtHdrOffset()) + this->peNtHeadersSize();
+
327 if (newSize < hEnd) {
+
328 return false; // the resize will harm headers!
+
329 }
+
330 return true;
+
331 }
-
331
-
-
332 bool isReproBuild()
-
333 {
-
334 bool isRepro = false;
-
335 DebugDirWrapper* dbgDir = dynamic_cast<DebugDirWrapper*>(dataDirEntries[pe::DIR_DEBUG]);
-
336 if (dbgDir && dbgDir->isRepro()) {
-
337 isRepro = true;
-
338 }
-
339 return isRepro;
-
340 }
+
332
+
+
333 bool isReproBuild()
+
334 {
+
335 bool isRepro = false;
+
336 DebugDirWrapper* dbgDir = dynamic_cast<DebugDirWrapper*>(dataDirEntries[pe::DIR_DEBUG]);
+
337 if (dbgDir && dbgDir->isRepro()) {
+
338 isRepro = true;
+
339 }
+
340 return isRepro;
+
341 }
-
341
-
342protected:
-
343 void wrapCore();
-
344
-
345 SectionHdrWrapper* _getLastSection();
-
346 bool _canAddNewSection();
-
347
-
-
348 offset_t _secHdrsEndOffset()
-
349 {
-
350 const offset_t offset = secHdrsOffset();
-
351 if (offset == INVALID_ADDR) {
-
352 return INVALID_ADDR;
-
353 }
-
354 const offset_t secHdrSize = this->_getSectionsCount() * sizeof(IMAGE_SECTION_HEADER);
-
355 return offset + secHdrSize;
-
356 }
+
342
+
343protected:
+
344 void wrapCore();
+
345
+
346 SectionHdrWrapper* _getLastSection();
+
347 bool _canAddNewSection();
+
348
+
+
349 offset_t _secHdrsEndOffset()
+
350 {
+
351 const offset_t offset = secHdrsOffset();
+
352 if (offset == INVALID_ADDR) {
+
353 return INVALID_ADDR;
+
354 }
+
355 const offset_t secHdrSize = this->_getSectionsCount() * sizeof(IMAGE_SECTION_HEADER);
+
356 return offset + secHdrSize;
+
357 }
-
357
-
358 offset_t _getLastMapped(Executable::addr_type aType);
-
359
-
360 size_t _getSectionsCount(bool useMapped = true) const;
-
361
-
-
362 size_t _getSecIndex(SectionHdrWrapper *sec) const
-
363 {
-
364 return (sects) ? sects->getSecIndex(sec) : SectHdrsWrapper::SECT_INVALID_INDEX;
-
365 }
+
358
+
359 offset_t _getLastMapped(Executable::addr_type aType);
+
360
+
361 size_t _getSectionsCount(bool useMapped = true) const;
+
362
+
+
363 size_t _getSecIndex(SectionHdrWrapper *sec) const
+
364 {
+
365 return (sects) ? sects->getSecIndex(sec) : SectHdrsWrapper::SECT_INVALID_INDEX;
+
366 }
-
366
-
-
367 SectionHdrWrapper* _getSecHdr(size_t index) const
-
368 {
-
369 return (sects) ? sects->_getSecHdr(index) : NULL;
-
370 }
+
367
+
+
368 SectionHdrWrapper* _getSecHdr(size_t index) const
+
369 {
+
370 return (sects) ? sects->_getSecHdr(index) : NULL;
+
371 }
-
371
-
-
372 SectionHdrWrapper* _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
-
373 {
-
374 return (sects) ? sects->getSecHdrAtOffset(offset, aType, recalculate, verbose) : NULL;
-
375 }
+
372
+
+
373 SectionHdrWrapper* _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
+
374 {
+
375 return (sects) ? sects->getSecHdrAtOffset(offset, aType, recalculate, verbose) : NULL;
+
376 }
-
376
-
377 BufferView* _createSectionView(SectionHdrWrapper *sec);
-
378
-
379 size_t getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA);
-
380
-
381 virtual void clearWrappers();
-
382
-
383 void _init(AbstractByteBuffer *v_buf);
-
384 void initDirEntries();
-
385
-
386 //---
-
387 //modifications:
-
388 bool setHdrSectionsNum(size_t newNum);
-
389 bool setVirtualSize(bufsize_t newSize);
-
390
-
391 PECore core;
-
392 DosHdrWrapper *dosHdrWrapper;
-
393
-
394 FileHdrWrapper *fHdr;
-
395 OptHdrWrapper *optHdr;
-
396 SectHdrsWrapper *sects;
-
397
-
398 ResourcesAlbum *album;
-
399 DataDirEntryWrapper* dataDirEntries[pe::DIR_ENTRIES_COUNT];
-
400 QMutex m_peMutex;
-
401
-
402friend class SectHdrsWrapper;
-
403friend class SectionHdrWrapper;
-
404};
+
377
+
378 BufferView* _createSectionView(SectionHdrWrapper *sec);
+
379
+
380 size_t getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA);
+
381
+
382 virtual void clearWrappers();
+
383
+
384 void _init(AbstractByteBuffer *v_buf);
+
385 void initDirEntries();
+
386
+
387 //---
+
388 //modifications:
+
389 bool setHdrSectionsNum(size_t newNum);
+
390 bool setVirtualSize(bufsize_t newSize);
+
391
+
392 PECore core;
+
393 DosHdrWrapper *dosHdrWrapper;
+
394
+
395 FileHdrWrapper *fHdr;
+
396 OptHdrWrapper *optHdr;
+
397 SectHdrsWrapper *sects;
+
398
+
399 ResourcesAlbum *album;
+
400 DataDirEntryWrapper* dataDirEntries[pe::DIR_ENTRIES_COUNT];
+
401 QMutex m_peMutex;
+
402
+
403friend class SectHdrsWrapper;
+
404friend class SectionHdrWrapper;
+
405};
-
405
+
406
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
@@ -635,38 +636,39 @@ $(function() { codefold.init(0); });
PEFileBuilder::typeName
QString typeName()
Definition PEFile.h:39
PEFileBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
-
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:399
-
PEFile::getDebugDir
DebugDirWrapper * getDebugDir()
Definition PEFile.h:240
-
PEFile::m_peMutex
QMutex m_peMutex
Definition PEFile.h:400
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
-
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:688
-
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:699
-
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset()
Definition PEFile.h:180
-
PEFile::getRelocsDir
RelocDirWrapper * getRelocsDir()
Definition PEFile.h:265
-
PEFile::getSectionAlignment
bufsize_t getSectionAlignment() const
Definition PEFile.h:308
-
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:75
-
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:396
-
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:367
-
PEFile::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PEFile.h:77
-
PEFile::getImportsDir
ImportDirWrapper * getImportsDir()
Definition PEFile.h:225
-
PEFile::hasDirectory
bool hasDirectory(pe::dir_entry dirNum)
Definition PEFile.h:298
+
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:400
+
PEFile::getDebugDir
DebugDirWrapper * getDebugDir()
Definition PEFile.h:241
+
PEFile::m_peMutex
QMutex m_peMutex
Definition PEFile.h:401
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:298
+
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:696
+
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:707
+
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset()
Definition PEFile.h:181
+
PEFile::getRelocsDir
RelocDirWrapper * getRelocsDir()
Definition PEFile.h:266
+
PEFile::getSectionAlignment
bufsize_t getSectionAlignment() const
Definition PEFile.h:309
+
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:76
+
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:397
+
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:368
+
PEFile::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PEFile.h:78
+
PEFile::getImportsDir
ImportDirWrapper * getImportsDir()
Definition PEFile.h:226
+
PEFile::hasDirectory
bool hasDirectory(pe::dir_entry dirNum)
Definition PEFile.h:299
PEFile::~PEFile
virtual ~PEFile()
Definition PEFile.h:63
-
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:667
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:278
-
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:308
-
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:79
+
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:675
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:286
+
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:316
+
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:80
PEFile::_init
void _init(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:116
-
PEFile::getSecurityDir
SecurityDirWrapper * getSecurityDir()
Definition PEFile.h:250
-
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:265
-
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition PEFile.h:98
-
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:394
-
PEFile::_getSecIndex
size_t _getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:362
-
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:398
-
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:323
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
-
PEFile::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:286
-
PEFile::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PEFile.h:69
-
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:611
+
PEFile::getSecurityDir
SecurityDirWrapper * getSecurityDir()
Definition PEFile.h:251
+
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:273
+
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition PEFile.h:99
+
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:395
+
PEFile::wrapDataDirs
bool wrapDataDirs()
Definition PEFile.cpp:193
+
PEFile::_getSecIndex
size_t _getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:363
+
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:399
+
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:331
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:217
+
PEFile::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:287
+
PEFile::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PEFile.h:70
+
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:619
PEFile::WRAPPERS
WRAPPERS
Definition PEFile.h:47
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition PEFile.h:55
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:53
@@ -678,62 +680,62 @@ $(function() { codefold.init(0); });
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition PEFile.h:54
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition PEFile.h:50
PEFile::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition PEFile.h:57
-
PEFile::core
PECore core
Definition PEFile.h:391
-
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true)
Definition PEFile.h:110
+
PEFile::core
PECore core
Definition PEFile.h:392
+
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true)
Definition PEFile.h:111
PEFile::initDirEntries
void initDirEntries()
Definition PEFile.cpp:173
-
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:193
-
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.h:187
-
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:395
-
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:652
-
PEFile::getClsDir
ClrDirWrapper * getClsDir()
Definition PEFile.h:280
-
PEFile::_getLastMapped
offset_t _getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:567
-
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:399
-
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:439
-
PEFile::getBoundImportsDir
BoundImpDirWrapper * getBoundImportsDir()
Definition PEFile.h:235
-
PEFile::getResourcesAlbum
ResourcesAlbum * getResourcesAlbum() const
Definition PEFile.h:83
-
PEFile::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PEFile.h:78
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:341
-
PEFile::getDelayedImportsDir
DelayImpDirWrapper * getDelayedImportsDir()
Definition PEFile.h:230
-
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:352
-
PEFile::_canAddNewSection
bool _canAddNewSection()
Definition PEFile.cpp:485
+
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:211
+
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.h:188
+
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:396
+
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:660
+
PEFile::getClsDir
ClrDirWrapper * getClsDir()
Definition PEFile.h:281
+
PEFile::_getLastMapped
offset_t _getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:575
+
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:407
+
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:447
+
PEFile::getBoundImportsDir
BoundImpDirWrapper * getBoundImportsDir()
Definition PEFile.h:236
+
PEFile::getResourcesAlbum
ResourcesAlbum * getResourcesAlbum() const
Definition PEFile.h:84
+
PEFile::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PEFile.h:79
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:349
+
PEFile::getDelayedImportsDir
DelayImpDirWrapper * getDelayedImportsDir()
Definition PEFile.h:231
+
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:360
+
PEFile::_canAddNewSection
bool _canAddNewSection()
Definition PEFile.cpp:493
PEFile::wrapCore
void wrapCore()
Definition PEFile.cpp:180
-
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:433
-
PEFile::_getSecHdrAtOffset
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:372
-
PEFile::clearContent
bool clearContent(SectionHdrWrapper *sec)
Definition PEFile.h:165
-
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:450
-
PEFile::_getLastSection
SectionHdrWrapper * _getLastSection()
Definition PEFile.cpp:561
+
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:441
+
PEFile::_getSecHdrAtOffset
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:373
+
PEFile::clearContent
bool clearContent(SectionHdrWrapper *sec)
Definition PEFile.h:166
+
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:458
+
PEFile::_getLastSection
SectionHdrWrapper * _getLastSection()
Definition PEFile.cpp:569
PEFile::clearWrappers
virtual void clearWrappers()
Definition PEFile.cpp:162
-
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec)
Definition PEFile.h:117
-
PEFile::_secHdrsEndOffset
offset_t _secHdrsEndOffset()
Definition PEFile.h:348
-
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index)
Definition PEFile.h:124
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:284
-
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:371
-
PEFile::getResourcesDir
ResourceDirWrapper * getResourcesDir()
Definition PEFile.h:275
-
PEFile::getLoadConfigDir
LdConfigDirWrapper * getLoadConfigDir()
Definition PEFile.h:260
-
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:81
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:332
-
PEFile::getEntrySection
SectionHdrWrapper * getEntrySection()
Definition PEFile.h:138
-
PEFile::setImageSize
void setImageSize(size_t newSize)
Definition PEFile.h:314
+
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec)
Definition PEFile.h:118
+
PEFile::_secHdrsEndOffset
offset_t _secHdrsEndOffset()
Definition PEFile.h:349
+
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index)
Definition PEFile.h:125
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:292
+
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:379
+
PEFile::getResourcesDir
ResourceDirWrapper * getResourcesDir()
Definition PEFile.h:276
+
PEFile::getLoadConfigDir
LdConfigDirWrapper * getLoadConfigDir()
Definition PEFile.h:261
+
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:82
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:340
+
PEFile::getEntrySection
SectionHdrWrapper * getEntrySection()
Definition PEFile.h:139
+
PEFile::setImageSize
void setImageSize(size_t newSize)
Definition PEFile.h:315
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:105
-
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:76
-
PEFile::getFileAlignment
bufsize_t getFileAlignment() const
Definition PEFile.h:303
-
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
-
PEFile::getBitMode
virtual exe_bits getBitMode()
Definition PEFile.h:72
-
PEFile::getSecContent
BYTE * getSecContent(SectionHdrWrapper *sec)
Definition PEFile.h:146
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:236
-
PEFile::canResize
bool canResize(bufsize_t newSize)
Definition PEFile.h:319
-
PEFile::getExceptionsDir
ExceptionDirWrapper * getExceptionsDir()
Definition PEFile.h:270
-
PEFile::canAddNewSection
bool canAddNewSection()
Definition PEFile.h:194
-
PEFile::getExportsDir
ExportDirWrapper * getExportsDir()
Definition PEFile.h:245
+
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:77
+
PEFile::getFileAlignment
bufsize_t getFileAlignment() const
Definition PEFile.h:304
+
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:69
+
PEFile::getBitMode
virtual exe_bits getBitMode()
Definition PEFile.h:73
+
PEFile::getSecContent
BYTE * getSecContent(SectionHdrWrapper *sec)
Definition PEFile.h:147
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:244
+
PEFile::canResize
bool canResize(bufsize_t newSize)
Definition PEFile.h:320
+
PEFile::getExceptionsDir
ExceptionDirWrapper * getExceptionsDir()
Definition PEFile.h:271
+
PEFile::canAddNewSection
bool canAddNewSection()
Definition PEFile.h:195
+
PEFile::getExportsDir
ExportDirWrapper * getExportsDir()
Definition PEFile.h:246
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
-
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:392
-
PEFile::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:211
-
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:94
-
PEFile::getTlsDir
TlsDirWrapper * getTlsDir()
Definition PEFile.h:255
-
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:332
-
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:131
-
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
-
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:499
+
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:393
+
PEFile::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:212
+
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:95
+
PEFile::getTlsDir
TlsDirWrapper * getTlsDir()
Definition PEFile.h:256
+
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:333
+
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:132
+
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:371
+
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:507
diff --git a/_resource_dir_wrapper_8cpp_source.html b/_resource_dir_wrapper_8cpp_source.html index c8a963d5..0695921a 100644 --- a/_resource_dir_wrapper_8cpp_source.html +++ b/_resource_dir_wrapper_8cpp_source.html @@ -524,7 +524,7 @@ $(function() { codefold.init(0); });
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
-
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:332
+
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:333
diff --git a/_resources_album_8cpp_source.html b/_resources_album_8cpp_source.html index 5e7689a4..038654bc 100644 --- a/_resources_album_8cpp_source.html +++ b/_resources_album_8cpp_source.html @@ -176,7 +176,7 @@ $(function() { codefold.init(0); });
77 //printf("topEntryId %d type: %d\n", topEntryId, type);
78//TODO: finish it!
79 ResourceContentWrapper* cw = ResourceContentFactory::makeResContentWrapper(type, leaf);
-
80 if (cw != NULL) {
+
80 if (cw) {
81 leafToContentWrapper[leaf] = cw;
82 this->allWrappers[type].putWrapper(cw);
83 }
diff --git a/_rich_hdr_wrapper_8cpp_source.html b/_rich_hdr_wrapper_8cpp_source.html index 3ff016a6..b67c991f 100644 --- a/_rich_hdr_wrapper_8cpp_source.html +++ b/_rich_hdr_wrapper_8cpp_source.html @@ -673,8 +673,8 @@ $(function() { codefold.init(0); });
Executable::getContent
virtual BYTE * getContent()
Definition Executable.h:52
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition Executable.h:51
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:236
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:217
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:244
RichHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
RichHdrWrapper::getPtr
virtual void * getPtr()
Definition RichHdrWrapper.cpp:18
RichHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:57
diff --git a/_sect_hdrs_wrapper_8cpp_source.html b/_sect_hdrs_wrapper_8cpp_source.html index dff66f58..4c91bc00 100644 --- a/_sect_hdrs_wrapper_8cpp_source.html +++ b/_sect_hdrs_wrapper_8cpp_source.html @@ -765,13 +765,13 @@ $(function() { codefold.init(0); });
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
Executable::getImageSize
virtual bufsize_t getImageSize()
Definition Executable.h:66
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
-
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:367
-
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:79
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:341
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:332
-
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
-
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:298
+
PEFile::_getSecHdr
SectionHdrWrapper * _getSecHdr(size_t index) const
Definition PEFile.h:368
+
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:80
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:349
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:340
+
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:69
+
PEFile::_getSectionsCount
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:371
SectHdrsWrapper::printSectionsMapping
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:568
SectHdrsWrapper::addEntry
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
diff --git a/class_p_e_file-members.html b/class_p_e_file-members.html index 35631e21..f7f83a1c 100644 --- a/class_p_e_file-members.html +++ b/class_p_e_file-members.html @@ -240,14 +240,15 @@ $(function() { WR_SECTIONS enum valuePEFile wrap()PEFilevirtual wrapCore()PEFileprotected - WRAPPERS enum namePEFile - wrappersExeWrappersContainerprotected - wrappersCount()ExeWrappersContainerinline - ~AbstractByteBuffer()AbstractByteBufferinlinevirtual - ~Executable(void)Executableinlinevirtual - ~ExeWrappersContainer(void)ExeWrappersContainerinlinevirtual - ~MappedExe(void)MappedExeinlineprotectedvirtual - ~PEFile()PEFileinlinevirtual + wrapDataDirs()PEFile + WRAPPERS enum namePEFile + wrappersExeWrappersContainerprotected + wrappersCount()ExeWrappersContainerinline + ~AbstractByteBuffer()AbstractByteBufferinlinevirtual + ~Executable(void)Executableinlinevirtual + ~ExeWrappersContainer(void)ExeWrappersContainerinlinevirtual + ~MappedExe(void)MappedExeinlineprotectedvirtual + ~PEFile()PEFileinlinevirtual
diff --git a/class_p_e_file.html b/class_p_e_file.html index 00dd57d4..a79a3ff7 100644 --- a/class_p_e_file.html +++ b/class_p_e_file.html @@ -181,6 +181,8 @@ Public Member Functions   virtual void wrap ()   +bool wrapDataDirs () +  virtual bufsize_t getMappedSize (Executable::addr_type aType)   virtual bufsize_t getAlignment (Executable::addr_type aType) const @@ -704,7 +706,7 @@ Here is the call graph for this function:
-

Definition at line 485 of file PEFile.cpp.

+

Definition at line 493 of file PEFile.cpp.

Here is the call graph for this function:
@@ -779,7 +781,7 @@ Here is the call graph for this function:
-

Definition at line 688 of file PEFile.cpp.

+

Definition at line 696 of file PEFile.cpp.

Here is the call graph for this function:
@@ -821,7 +823,7 @@ Here is the call graph for this function:
-

Definition at line 567 of file PEFile.cpp.

+

Definition at line 575 of file PEFile.cpp.

Here is the call graph for this function:
@@ -939,7 +941,7 @@ Here is the call graph for this function:
-

Definition at line 561 of file PEFile.cpp.

+

Definition at line 569 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1023,7 +1025,7 @@ Here is the call graph for this function:
-

Definition at line 367 of file PEFile.h.

+

Definition at line 368 of file PEFile.h.

Here is the call graph for this function:
@@ -1077,7 +1079,7 @@ Here is the call graph for this function:
-

Definition at line 372 of file PEFile.h.

+

Definition at line 373 of file PEFile.h.

Here is the call graph for this function:
@@ -1117,7 +1119,7 @@ Here is the call graph for this function:
-

Definition at line 362 of file PEFile.h.

+

Definition at line 363 of file PEFile.h.

Here is the call graph for this function:
@@ -1157,7 +1159,7 @@ Here is the call graph for this function:
-

Definition at line 363 of file PEFile.cpp.

+

Definition at line 371 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1327,7 +1329,7 @@ Here is the call graph for this function:
-

Definition at line 348 of file PEFile.h.

+

Definition at line 349 of file PEFile.h.

Here is the call graph for this function:
@@ -1419,7 +1421,7 @@ Here is the call graph for this function:

scope1

-

Definition at line 499 of file PEFile.cpp.

+

Definition at line 507 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1546,7 +1548,7 @@ Here is the call graph for this function:
-

Definition at line 194 of file PEFile.h.

+

Definition at line 195 of file PEFile.h.

Here is the call graph for this function:
@@ -1626,7 +1628,7 @@ Here is the call graph for this function:

Reimplemented from MappedExe.

-

Definition at line 319 of file PEFile.h.

+

Definition at line 320 of file PEFile.h.

Here is the call graph for this function:
@@ -1678,7 +1680,7 @@ Here is the call graph for this function:
-

Definition at line 165 of file PEFile.h.

+

Definition at line 166 of file PEFile.h.

Here is the call graph for this function:
@@ -1810,7 +1812,7 @@ Here is the call graph for this function:
-

Definition at line 439 of file PEFile.cpp.

+

Definition at line 447 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1860,7 +1862,7 @@ Here is the call graph for this function:
-

Definition at line 652 of file PEFile.cpp.

+

Definition at line 660 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1907,7 +1909,7 @@ Here is the call graph for this function:

scope0

-

Definition at line 611 of file PEFile.cpp.

+

Definition at line 619 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2034,7 +2036,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 68 of file PEFile.h.

+

Definition at line 69 of file PEFile.h.

Here is the call graph for this function:
@@ -2079,7 +2081,7 @@ Here is the call graph for this function:

Reimplemented from Executable.

-

Definition at line 286 of file PEFile.h.

+

Definition at line 287 of file PEFile.h.

Here is the call graph for this function:
@@ -2220,7 +2222,7 @@ Here is the call graph for this function:

Reimplemented from Executable.

-

Definition at line 72 of file PEFile.h.

+

Definition at line 73 of file PEFile.h.

Here is the call graph for this function:
@@ -2259,7 +2261,7 @@ Here is the call graph for this function:
-

Definition at line 235 of file PEFile.h.

+

Definition at line 236 of file PEFile.h.

Here is the call graph for this function:
@@ -2298,7 +2300,7 @@ Here is the call graph for this function:
-

Definition at line 280 of file PEFile.h.

+

Definition at line 281 of file PEFile.h.

Here is the call graph for this function:
@@ -2329,7 +2331,7 @@ Here is the call graph for this function:
-

Definition at line 284 of file PEFile.cpp.

+

Definition at line 292 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2358,7 +2360,7 @@ Here is the call graph for this function:
-

Definition at line 433 of file PEFile.cpp.

+

Definition at line 441 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2395,7 +2397,7 @@ Here is the call graph for this function:
-

Definition at line 240 of file PEFile.h.

+

Definition at line 241 of file PEFile.h.

Here is the call graph for this function:
@@ -2434,7 +2436,7 @@ Here is the call graph for this function:
-

Definition at line 230 of file PEFile.h.

+

Definition at line 231 of file PEFile.h.

Here is the call graph for this function:
@@ -2475,7 +2477,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 308 of file PEFile.cpp.

+

Definition at line 316 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2559,7 +2561,7 @@ Here is the call graph for this function:
-

Definition at line 138 of file PEFile.h.

+

Definition at line 139 of file PEFile.h.

Here is the call graph for this function:
@@ -2652,7 +2654,7 @@ Here is the call graph for this function:
-

Definition at line 270 of file PEFile.h.

+

Definition at line 271 of file PEFile.h.

Here is the call graph for this function:
@@ -2691,7 +2693,7 @@ Here is the call graph for this function:
-

Definition at line 245 of file PEFile.h.

+

Definition at line 246 of file PEFile.h.

Here is the call graph for this function:
@@ -2734,7 +2736,7 @@ Here is the call graph for this function:
-

Definition at line 699 of file PEFile.cpp.

+

Definition at line 707 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2865,7 +2867,7 @@ Here is the call graph for this function:
-

Definition at line 303 of file PEFile.h.

+

Definition at line 304 of file PEFile.h.

Here is the call graph for this function:
@@ -2906,7 +2908,7 @@ Here is the call graph for this function:
-

Definition at line 94 of file PEFile.h.

+

Definition at line 95 of file PEFile.h.

Here is the call graph for this function:
@@ -2945,7 +2947,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 69 of file PEFile.h.

+

Definition at line 70 of file PEFile.h.

Here is the call graph for this function:
@@ -2988,7 +2990,7 @@ Here is the call graph for this function:
-

Definition at line 225 of file PEFile.h.

+

Definition at line 226 of file PEFile.h.

Here is the call graph for this function:
@@ -3027,7 +3029,7 @@ Here is the call graph for this function:
-

Definition at line 98 of file PEFile.h.

+

Definition at line 99 of file PEFile.h.

Here is the call graph for this function:
@@ -3148,7 +3150,7 @@ Here is the call graph for this function:
-

Definition at line 187 of file PEFile.h.

+

Definition at line 188 of file PEFile.h.

Here is the call graph for this function:
@@ -3235,7 +3237,7 @@ Here is the call graph for this function:
-

Definition at line 260 of file PEFile.h.

+

Definition at line 261 of file PEFile.h.

Here is the call graph for this function:
@@ -3276,7 +3278,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 290 of file PEFile.cpp.

+

Definition at line 298 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3312,7 +3314,7 @@ Here is the call graph for this function:
-

Definition at line 265 of file PEFile.cpp.

+

Definition at line 273 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3396,7 +3398,7 @@ Here is the call graph for this function:
-

Definition at line 265 of file PEFile.h.

+

Definition at line 266 of file PEFile.h.

Here is the call graph for this function:
@@ -3435,7 +3437,7 @@ Here is the call graph for this function:
-

Definition at line 83 of file PEFile.h.

+

Definition at line 84 of file PEFile.h.

@@ -3462,7 +3464,7 @@ Here is the call graph for this function:
-

Definition at line 275 of file PEFile.h.

+

Definition at line 276 of file PEFile.h.

Here is the call graph for this function:
@@ -3501,7 +3503,7 @@ Here is the call graph for this function:
-

Definition at line 211 of file PEFile.h.

+

Definition at line 212 of file PEFile.h.

Here is the call graph for this function:
@@ -3536,7 +3538,7 @@ Here is the call graph for this function:
-

Definition at line 209 of file PEFile.cpp.

+

Definition at line 217 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3578,7 +3580,7 @@ Here is the call graph for this function:
-

Definition at line 236 of file PEFile.cpp.

+

Definition at line 244 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3624,7 +3626,7 @@ Here is the call graph for this function:
-

Definition at line 146 of file PEFile.h.

+

Definition at line 147 of file PEFile.h.

Here is the call graph for this function:
@@ -3676,7 +3678,7 @@ Here is the call graph for this function:
-

Definition at line 124 of file PEFile.h.

+

Definition at line 125 of file PEFile.h.

Here is the call graph for this function:
@@ -3733,7 +3735,7 @@ Here is the call graph for this function:
-

Definition at line 131 of file PEFile.h.

+

Definition at line 132 of file PEFile.h.

Here is the call graph for this function:
@@ -3776,7 +3778,7 @@ Here is the call graph for this function:
-

Definition at line 117 of file PEFile.h.

+

Definition at line 118 of file PEFile.h.

Here is the call graph for this function:
@@ -3819,7 +3821,7 @@ Here is the call graph for this function:
-

Definition at line 308 of file PEFile.h.

+

Definition at line 309 of file PEFile.h.

Here is the call graph for this function:
@@ -3860,7 +3862,7 @@ Here is the call graph for this function:
-

Definition at line 110 of file PEFile.h.

+

Definition at line 111 of file PEFile.h.

Here is the call graph for this function:
@@ -3938,7 +3940,7 @@ Here is the call graph for this function:
-

Definition at line 250 of file PEFile.h.

+

Definition at line 251 of file PEFile.h.

Here is the call graph for this function:
@@ -3977,7 +3979,7 @@ Here is the call graph for this function:
-

Definition at line 255 of file PEFile.h.

+

Definition at line 256 of file PEFile.h.

Here is the call graph for this function:
@@ -4016,7 +4018,7 @@ Here is the call graph for this function:
-

Definition at line 298 of file PEFile.h.

+

Definition at line 299 of file PEFile.h.

Here is the call graph for this function:
@@ -4048,7 +4050,7 @@ Here is the call graph for this function:
-

Definition at line 332 of file PEFile.cpp.

+

Definition at line 340 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4117,7 +4119,7 @@ Here is the call graph for this function:
-

Definition at line 81 of file PEFile.h.

+

Definition at line 82 of file PEFile.h.

Here is the call graph for this function:
@@ -4192,7 +4194,7 @@ Here is the call graph for this function:
-

Definition at line 332 of file PEFile.h.

+

Definition at line 333 of file PEFile.h.

Here is the call graph for this function:
@@ -4230,7 +4232,7 @@ Here is the call graph for this function:
-

Definition at line 450 of file PEFile.cpp.

+

Definition at line 458 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4297,7 +4299,7 @@ Here is the call graph for this function:
-

Definition at line 278 of file PEFile.cpp.

+

Definition at line 286 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4345,7 +4347,7 @@ Here is the call graph for this function:
-

Definition at line 75 of file PEFile.h.

+

Definition at line 76 of file PEFile.h.

Here is the call graph for this function:
@@ -4386,7 +4388,7 @@ Here is the call graph for this function:
-

Definition at line 76 of file PEFile.h.

+

Definition at line 77 of file PEFile.h.

Here is the call graph for this function:
@@ -4423,7 +4425,7 @@ Here is the call graph for this function:
-

Definition at line 77 of file PEFile.h.

+

Definition at line 78 of file PEFile.h.

Here is the call graph for this function:
@@ -4464,7 +4466,7 @@ Here is the call graph for this function:
-

Definition at line 78 of file PEFile.h.

+

Definition at line 79 of file PEFile.h.

Here is the call graph for this function:
@@ -4510,7 +4512,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 371 of file PEFile.cpp.

+

Definition at line 379 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4610,7 +4612,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 399 of file PEFile.cpp.

+

Definition at line 407 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4708,7 +4710,7 @@ Here is the call graph for this function:
-

Definition at line 180 of file PEFile.h.

+

Definition at line 181 of file PEFile.h.

Here is the call graph for this function:
@@ -4801,7 +4803,7 @@ Here is the call graph for this function:
-

Definition at line 79 of file PEFile.h.

+

Definition at line 80 of file PEFile.h.

Here is the call graph for this function:
@@ -4843,7 +4845,7 @@ Here is the call graph for this function:
-

Definition at line 323 of file PEFile.cpp.

+

Definition at line 331 of file PEFile.cpp.

Here is the call graph for this function:
@@ -4933,7 +4935,7 @@ Here is the call graph for this function:
-

Definition at line 341 of file PEFile.cpp.

+

Definition at line 349 of file PEFile.cpp.

Here is the call graph for this function:
@@ -5009,7 +5011,7 @@ Here is the call graph for this function:
-

Definition at line 314 of file PEFile.h.

+

Definition at line 315 of file PEFile.h.

Here is the call graph for this function:
@@ -5087,7 +5089,7 @@ Here is the call graph for this function:
-

Definition at line 352 of file PEFile.cpp.

+

Definition at line 360 of file PEFile.cpp.

Here is the call graph for this function:
@@ -5155,7 +5157,7 @@ Here is the call graph for this function:
-

Definition at line 667 of file PEFile.cpp.

+

Definition at line 675 of file PEFile.cpp.

Here is the call graph for this function:
@@ -5200,74 +5202,75 @@ Here is the call graph for this function:

Implements MappedExe.

-

Definition at line 193 of file PEFile.cpp.

+

Definition at line 211 of file PEFile.cpp.

Here is the call graph for this function:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
@@ -5353,6 +5356,95 @@ Here is the call graph for this function:
+
+
+ +

◆ wrapDataDirs()

+ +
+
+ + + + + + + +
bool PEFile::wrapDataDirs ()
+
+ +

Definition at line 193 of file PEFile.cpp.

+
+Here is the call graph for this function:
+
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+

Friends And Related Symbol Documentation

@@ -5376,7 +5468,7 @@ Here is the call graph for this function:
-

Definition at line 402 of file PEFile.h.

+

Definition at line 403 of file PEFile.h.

@@ -5400,7 +5492,7 @@ Here is the call graph for this function:
-

Definition at line 403 of file PEFile.h.

+

Definition at line 404 of file PEFile.h.

@@ -5425,7 +5517,7 @@ Here is the call graph for this function:
-

Definition at line 398 of file PEFile.h.

+

Definition at line 399 of file PEFile.h.

@@ -5449,7 +5541,7 @@ Here is the call graph for this function:
-

Definition at line 391 of file PEFile.h.

+

Definition at line 392 of file PEFile.h.

@@ -5473,7 +5565,7 @@ Here is the call graph for this function:
-

Definition at line 399 of file PEFile.h.

+

Definition at line 400 of file PEFile.h.

@@ -5497,7 +5589,7 @@ Here is the call graph for this function:
-

Definition at line 392 of file PEFile.h.

+

Definition at line 393 of file PEFile.h.

@@ -5521,7 +5613,7 @@ Here is the call graph for this function:
-

Definition at line 394 of file PEFile.h.

+

Definition at line 395 of file PEFile.h.

@@ -5545,7 +5637,7 @@ Here is the call graph for this function:
-

Definition at line 400 of file PEFile.h.

+

Definition at line 401 of file PEFile.h.

@@ -5569,7 +5661,7 @@ Here is the call graph for this function:
-

Definition at line 395 of file PEFile.h.

+

Definition at line 396 of file PEFile.h.

@@ -5593,7 +5685,7 @@ Here is the call graph for this function:
-

Definition at line 396 of file PEFile.h.

+

Definition at line 397 of file PEFile.h.

diff --git a/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.map b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.map new file mode 100644 index 00000000..8dae3714 --- /dev/null +++ b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.map @@ -0,0 +1,65 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.md5 b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.md5 new file mode 100644 index 00000000..d352ba37 --- /dev/null +++ b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.md5 @@ -0,0 +1 @@ +d0696fa41e6c76994f30c52d6046a558 \ No newline at end of file diff --git a/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.png b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.png new file mode 100644 index 00000000..79ce9fd8 Binary files /dev/null and b/class_p_e_file_a4b054b54b98eb26bda27760d876622b1_cgraph.png differ diff --git a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.map b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.map index aa857939..9a5fa836 100644 --- a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.map +++ b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.map @@ -1,64 +1,65 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.md5 b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.md5 index 55e67b0f..e25e26bf 100644 --- a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.md5 +++ b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.md5 @@ -1 +1 @@ -1985855c92f9211837d43ea3b91050bc \ No newline at end of file +52517570c02d7c4d0c20d9bc59c0115b \ No newline at end of file diff --git a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.png b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.png index 48398a9a..327ee8d5 100644 Binary files a/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.png and b/class_p_e_file_a716ee06f43de71d1885443d861edfb8d_cgraph.png differ diff --git a/functions_func_w.html b/functions_func_w.html index b701144c..42b77571 100644 --- a/functions_func_w.html +++ b/functions_func_w.html @@ -79,6 +79,7 @@ $(function() {
  • what() : CustomException
  • wrap() : BoundEntryWrapper, BoundImpDirWrapper, ClrDirWrapper, DebugDirEntryWrapper, DebugDirWrapper, DOSExe, ExceptionDirWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExeNodeWrapper, ExeWrappersContainer, ExportDirWrapper, FileHdrWrapper, ImportBaseDirWrapper, ImportBaseEntryWrapper, LdConfigDirWrapper, MappedExe, OptHdrWrapper, PECore, PEFile, RelocBlockWrapper, RelocDirWrapper, ResourceDirWrapper, ResourceEntryWrapper, ResourceStringsWrapper, RichHdrWrapper, SectHdrsWrapper, SectionHdrWrapper, SecurityDirWrapper, TlsDirWrapper
  • wrapCore() : PEFile
    • +
  • wrapDataDirs() : PEFile
  • wrapLeafsContent() : ResourcesAlbum
  • WrappedValue() : WrappedValue
  • wrappersCount() : ExeWrappersContainer
    • diff --git a/functions_w.html b/functions_w.html index 2ccb73b1..9fc7ee0e 100644 --- a/functions_w.html +++ b/functions_w.html @@ -89,11 +89,12 @@ $(function() {
  • WR_SECTIONS : PEFile
  • wrap() : BoundEntryWrapper, BoundImpDirWrapper, ClrDirWrapper, DebugDirEntryWrapper, DebugDirWrapper, DOSExe, ExceptionDirWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExeNodeWrapper, ExeWrappersContainer, ExportDirWrapper, FileHdrWrapper, ImportBaseDirWrapper, ImportBaseEntryWrapper, LdConfigDirWrapper, MappedExe, OptHdrWrapper, PECore, PEFile, RelocBlockWrapper, RelocDirWrapper, ResourceDirWrapper, ResourceEntryWrapper, ResourceStringsWrapper, RichHdrWrapper, SectHdrsWrapper, SectionHdrWrapper, SecurityDirWrapper, TlsDirWrapper
  • wrapCore() : PEFile
    • +
  • wrapDataDirs() : PEFile
  • wrapLeafsContent() : ResourcesAlbum
  • WrappedValue() : WrappedValue
    • -
  • WRAPPERS : DOSExe
    • +
  • WRAPPERS : DOSExe, ExeWrappersContainer
  • wrappers : ExeWrappersContainer
    • -
  • WRAPPERS : ExeWrappersContainer, PEFile
    • +
  • WRAPPERS : PEFile
  • wrappers : ResourcesContainer
  • wrappersCount() : ExeWrappersContainer
  • WSTRING : ResourceStringsWrapper, ResString, WrappedValue
    • diff --git a/search/all_14.js b/search/all_14.js index 1423fb4f..7041f054 100644 --- a/search/all_14.js +++ b/search/all_14.js @@ -15,12 +15,13 @@ var searchData= ['wr_5fsections_12',['WR_SECTIONS',['../class_p_e_file.html#a69fde81c3cbe7490cd595c6fb934ecbead0e41312e3cf9609c1e742c18821b0a4',1,'PEFile']]], ['wrap_13',['wrap',['../class_exe_element_wrapper.html#af1cd1e9dfaedea5c17a07c9e39d3150f',1,'ExeElementWrapper::wrap()'],['../class_exe_node_wrapper.html#a5cd7f16e4529be2a96f87237e31b2611',1,'ExeNodeWrapper::wrap()'],['../class_exe_wrappers_container.html#ad268a01a61e6775e17e0eb66954fb3b8',1,'ExeWrappersContainer::wrap()'],['../class_mapped_exe.html#a7e35d175829b4750b321c074da6820db',1,'MappedExe::wrap()'],['../class_bound_imp_dir_wrapper.html#aa333f4aed19caef73594687fd0be321e',1,'BoundImpDirWrapper::wrap()'],['../class_bound_entry_wrapper.html#abc7259183410be2a23ed2469b44fa915',1,'BoundEntryWrapper::wrap()'],['../class_clr_dir_wrapper.html#a2baf0bbdc4c5d75c50044d8d5fe010a7',1,'ClrDirWrapper::wrap()'],['../class_debug_dir_wrapper.html#ac081e75c9eed3c5f67aa9826bd335b82',1,'DebugDirWrapper::wrap()'],['../class_debug_dir_entry_wrapper.html#a094321c2f8f21b0e267683b7a84c7231',1,'DebugDirEntryWrapper::wrap()'],['../class_d_o_s_exe.html#a312aaa0ff69bb7154576c2906d34ff4b',1,'DOSExe::wrap()'],['../class_exception_dir_wrapper.html#a9780166edee43854b4bdbe996e076ff1',1,'ExceptionDirWrapper::wrap()'],['../class_exception_entry_wrapper.html#a410c44c5ed1cb185a004f69cdfb2ec35',1,'ExceptionEntryWrapper::wrap()'],['../class_export_dir_wrapper.html#a88aaf739c6239484688dd17e188d092f',1,'ExportDirWrapper::wrap()'],['../class_file_hdr_wrapper.html#a0c2aaa155ea4ec20770b59bcebd7f27a',1,'FileHdrWrapper::wrap()'],['../class_import_base_dir_wrapper.html#a8d69d5e98e7fd4bd1761730621ce1c9a',1,'ImportBaseDirWrapper::wrap()'],['../class_import_base_entry_wrapper.html#aa176da686bdcec05c9a4acd23c2cdf13',1,'ImportBaseEntryWrapper::wrap()'],['../class_ld_config_dir_wrapper.html#a9725e4776e97d6d1b229c7b50098b516',1,'LdConfigDirWrapper::wrap()'],['../class_opt_hdr_wrapper.html#a88217306b4a5133e605ed8476f8afdbb',1,'OptHdrWrapper::wrap()'],['../class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c',1,'PECore::wrap()'],['../class_p_e_file.html#a716ee06f43de71d1885443d861edfb8d',1,'PEFile::wrap()'],['../class_reloc_dir_wrapper.html#a0ebd8bd0012704d6677b1f247537b6a7',1,'RelocDirWrapper::wrap()'],['../class_reloc_block_wrapper.html#a7abe3fc11581a1c23c27251b9e09d4ab',1,'RelocBlockWrapper::wrap()'],['../class_resource_dir_wrapper.html#a3c8214b5261e5970e8da5acacf3c6222',1,'ResourceDirWrapper::wrap()'],['../class_resource_entry_wrapper.html#ac326068e4c8fee45d83e10a9799290c0',1,'ResourceEntryWrapper::wrap()'],['../class_rich_hdr_wrapper.html#a5b8139d2b81d4508cfbb81c26662a96c',1,'RichHdrWrapper::wrap()'],['../class_resource_strings_wrapper.html#ab7fdbd278641336a3356f184318a5a4c',1,'ResourceStringsWrapper::wrap()'],['../class_section_hdr_wrapper.html#a0654b98cb5a6b16c6bdbaa6d70231586',1,'SectionHdrWrapper::wrap()'],['../class_sect_hdrs_wrapper.html#aa3f5a79d62f8053557740949bb8ace4b',1,'SectHdrsWrapper::wrap()'],['../class_security_dir_wrapper.html#ae7bd72bbd0ea4c1b0be99568cadbbbdc',1,'SecurityDirWrapper::wrap()'],['../class_tls_dir_wrapper.html#a3a60743f4c55cf39f23dbbb77fe796cf',1,'TlsDirWrapper::wrap()']]], ['wrapcore_14',['wrapCore',['../class_p_e_file.html#a90147e8c963e893d6a98ad0de28770d8',1,'PEFile']]], - ['wrapleafscontent_15',['wrapLeafsContent',['../class_resources_album.html#a45775c8f0746ad67f1e406a7e221852f',1,'ResourcesAlbum']]], - ['wrappedvalue_16',['WrappedValue',['../class_wrapped_value.html',1,'WrappedValue'],['../class_wrapped_value.html#aa5efdb1c423a01139611e6ab1729e53e',1,'WrappedValue::WrappedValue()'],['../class_wrapped_value.html#a25417732791f92ad155e1713f53afba8',1,'WrappedValue::WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)']]], - ['wrappedvalue_2ecpp_17',['WrappedValue.cpp',['../_wrapped_value_8cpp.html',1,'']]], - ['wrappedvalue_2eh_18',['WrappedValue.h',['../_wrapped_value_8h.html',1,'']]], - ['wrappers_19',['wrappers',['../class_exe_wrappers_container.html#a1951bc11aa86eb00c6a3c9044a58655b',1,'ExeWrappersContainer::wrappers'],['../class_resources_container.html#a911552d5d31f91b24ec7803fa5b78107',1,'ResourcesContainer::wrappers']]], + ['wrapdatadirs_15',['wrapDataDirs',['../class_p_e_file.html#a4b054b54b98eb26bda27760d876622b1',1,'PEFile']]], + ['wrapleafscontent_16',['wrapLeafsContent',['../class_resources_album.html#a45775c8f0746ad67f1e406a7e221852f',1,'ResourcesAlbum']]], + ['wrappedvalue_17',['WrappedValue',['../class_wrapped_value.html',1,'WrappedValue'],['../class_wrapped_value.html#aa5efdb1c423a01139611e6ab1729e53e',1,'WrappedValue::WrappedValue()'],['../class_wrapped_value.html#a25417732791f92ad155e1713f53afba8',1,'WrappedValue::WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)']]], + ['wrappedvalue_2ecpp_18',['WrappedValue.cpp',['../_wrapped_value_8cpp.html',1,'']]], + ['wrappedvalue_2eh_19',['WrappedValue.h',['../_wrapped_value_8h.html',1,'']]], ['wrappers_20',['WRAPPERS',['../class_exe_wrappers_container.html#aed42e01f70986d8dff3fda4925b195ba',1,'ExeWrappersContainer::WRAPPERS'],['../class_d_o_s_exe.html#ac92b91f03b5679b4eff43c65a435d7b6',1,'DOSExe::WRAPPERS'],['../class_p_e_file.html#a69fde81c3cbe7490cd595c6fb934ecbe',1,'PEFile::WRAPPERS']]], - ['wrapperscount_21',['wrappersCount',['../class_exe_wrappers_container.html#a320d0e2d4475f1bd5c36f93fdea9f43e',1,'ExeWrappersContainer']]], - ['wstring_22',['WSTRING',['../class_res_string.html#afc469fb50c7b5d46c70add3ed72b899bab897d3e759fbc72109e473213b5ac0a6',1,'ResString::WSTRING'],['../class_resource_strings_wrapper.html#a358476b3eb52fd0a26f0ccd17d1c74d2a286d99e0e4e343b570a63e93821947cc',1,'ResourceStringsWrapper::WSTRING'],['../class_wrapped_value.html#a70fcd4afb963d228e1f84fc422d13e0aa68fcb332e868bb023fe3f7d7bab408ff',1,'WrappedValue::WSTRING']]] + ['wrappers_21',['wrappers',['../class_exe_wrappers_container.html#a1951bc11aa86eb00c6a3c9044a58655b',1,'ExeWrappersContainer::wrappers'],['../class_resources_container.html#a911552d5d31f91b24ec7803fa5b78107',1,'ResourcesContainer::wrappers']]], + ['wrapperscount_22',['wrappersCount',['../class_exe_wrappers_container.html#a320d0e2d4475f1bd5c36f93fdea9f43e',1,'ExeWrappersContainer']]], + ['wstring_23',['WSTRING',['../class_res_string.html#afc469fb50c7b5d46c70add3ed72b899bab897d3e759fbc72109e473213b5ac0a6',1,'ResString::WSTRING'],['../class_resource_strings_wrapper.html#a358476b3eb52fd0a26f0ccd17d1c74d2a286d99e0e4e343b570a63e93821947cc',1,'ResourceStringsWrapper::WSTRING'],['../class_wrapped_value.html#a70fcd4afb963d228e1f84fc422d13e0aa68fcb332e868bb023fe3f7d7bab408ff',1,'WrappedValue::WSTRING']]] ]; diff --git a/search/functions_14.js b/search/functions_14.js index 3e6e2508..b8c2b405 100644 --- a/search/functions_14.js +++ b/search/functions_14.js @@ -4,7 +4,8 @@ var searchData= ['what_1',['what',['../class_custom_exception.html#a15a4aacc703430f5caa7b8c375208445',1,'CustomException']]], ['wrap_2',['wrap',['../class_exe_element_wrapper.html#af1cd1e9dfaedea5c17a07c9e39d3150f',1,'ExeElementWrapper::wrap()'],['../class_exe_node_wrapper.html#a5cd7f16e4529be2a96f87237e31b2611',1,'ExeNodeWrapper::wrap()'],['../class_exe_wrappers_container.html#ad268a01a61e6775e17e0eb66954fb3b8',1,'ExeWrappersContainer::wrap()'],['../class_mapped_exe.html#a7e35d175829b4750b321c074da6820db',1,'MappedExe::wrap()'],['../class_bound_imp_dir_wrapper.html#aa333f4aed19caef73594687fd0be321e',1,'BoundImpDirWrapper::wrap()'],['../class_bound_entry_wrapper.html#abc7259183410be2a23ed2469b44fa915',1,'BoundEntryWrapper::wrap()'],['../class_clr_dir_wrapper.html#a2baf0bbdc4c5d75c50044d8d5fe010a7',1,'ClrDirWrapper::wrap()'],['../class_debug_dir_wrapper.html#ac081e75c9eed3c5f67aa9826bd335b82',1,'DebugDirWrapper::wrap()'],['../class_debug_dir_entry_wrapper.html#a094321c2f8f21b0e267683b7a84c7231',1,'DebugDirEntryWrapper::wrap()'],['../class_d_o_s_exe.html#a312aaa0ff69bb7154576c2906d34ff4b',1,'DOSExe::wrap()'],['../class_exception_dir_wrapper.html#a9780166edee43854b4bdbe996e076ff1',1,'ExceptionDirWrapper::wrap()'],['../class_exception_entry_wrapper.html#a410c44c5ed1cb185a004f69cdfb2ec35',1,'ExceptionEntryWrapper::wrap()'],['../class_export_dir_wrapper.html#a88aaf739c6239484688dd17e188d092f',1,'ExportDirWrapper::wrap()'],['../class_file_hdr_wrapper.html#a0c2aaa155ea4ec20770b59bcebd7f27a',1,'FileHdrWrapper::wrap()'],['../class_import_base_dir_wrapper.html#a8d69d5e98e7fd4bd1761730621ce1c9a',1,'ImportBaseDirWrapper::wrap()'],['../class_import_base_entry_wrapper.html#aa176da686bdcec05c9a4acd23c2cdf13',1,'ImportBaseEntryWrapper::wrap()'],['../class_ld_config_dir_wrapper.html#a9725e4776e97d6d1b229c7b50098b516',1,'LdConfigDirWrapper::wrap()'],['../class_opt_hdr_wrapper.html#a88217306b4a5133e605ed8476f8afdbb',1,'OptHdrWrapper::wrap()'],['../class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c',1,'PECore::wrap()'],['../class_p_e_file.html#a716ee06f43de71d1885443d861edfb8d',1,'PEFile::wrap()'],['../class_reloc_dir_wrapper.html#a0ebd8bd0012704d6677b1f247537b6a7',1,'RelocDirWrapper::wrap()'],['../class_reloc_block_wrapper.html#a7abe3fc11581a1c23c27251b9e09d4ab',1,'RelocBlockWrapper::wrap()'],['../class_resource_dir_wrapper.html#a3c8214b5261e5970e8da5acacf3c6222',1,'ResourceDirWrapper::wrap()'],['../class_resource_entry_wrapper.html#ac326068e4c8fee45d83e10a9799290c0',1,'ResourceEntryWrapper::wrap()'],['../class_rich_hdr_wrapper.html#a5b8139d2b81d4508cfbb81c26662a96c',1,'RichHdrWrapper::wrap()'],['../class_resource_strings_wrapper.html#ab7fdbd278641336a3356f184318a5a4c',1,'ResourceStringsWrapper::wrap()'],['../class_section_hdr_wrapper.html#a0654b98cb5a6b16c6bdbaa6d70231586',1,'SectionHdrWrapper::wrap()'],['../class_sect_hdrs_wrapper.html#aa3f5a79d62f8053557740949bb8ace4b',1,'SectHdrsWrapper::wrap()'],['../class_security_dir_wrapper.html#ae7bd72bbd0ea4c1b0be99568cadbbbdc',1,'SecurityDirWrapper::wrap()'],['../class_tls_dir_wrapper.html#a3a60743f4c55cf39f23dbbb77fe796cf',1,'TlsDirWrapper::wrap()']]], ['wrapcore_3',['wrapCore',['../class_p_e_file.html#a90147e8c963e893d6a98ad0de28770d8',1,'PEFile']]], - ['wrapleafscontent_4',['wrapLeafsContent',['../class_resources_album.html#a45775c8f0746ad67f1e406a7e221852f',1,'ResourcesAlbum']]], - ['wrappedvalue_5',['WrappedValue',['../class_wrapped_value.html#aa5efdb1c423a01139611e6ab1729e53e',1,'WrappedValue::WrappedValue()'],['../class_wrapped_value.html#a25417732791f92ad155e1713f53afba8',1,'WrappedValue::WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)']]], - ['wrapperscount_6',['wrappersCount',['../class_exe_wrappers_container.html#a320d0e2d4475f1bd5c36f93fdea9f43e',1,'ExeWrappersContainer']]] + ['wrapdatadirs_4',['wrapDataDirs',['../class_p_e_file.html#a4b054b54b98eb26bda27760d876622b1',1,'PEFile']]], + ['wrapleafscontent_5',['wrapLeafsContent',['../class_resources_album.html#a45775c8f0746ad67f1e406a7e221852f',1,'ResourcesAlbum']]], + ['wrappedvalue_6',['WrappedValue',['../class_wrapped_value.html#aa5efdb1c423a01139611e6ab1729e53e',1,'WrappedValue::WrappedValue()'],['../class_wrapped_value.html#a25417732791f92ad155e1713f53afba8',1,'WrappedValue::WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)']]], + ['wrapperscount_7',['wrappersCount',['../class_exe_wrappers_container.html#a320d0e2d4475f1bd5c36f93fdea9f43e',1,'ExeWrappersContainer']]] ];