From 3fe596e83aec6d3359f82430a88ca07947dd9b35 Mon Sep 17 00:00:00 2001 From: hasherezade Date: Sun, 25 Sep 2022 20:15:40 +0000 Subject: [PATCH] deploy: 9ba968a751eac53f805023f7b44214d6be4939de --- _data_dir_entry_wrapper_8cpp_source.html | 2 +- _data_dir_wrapper_8cpp_source.html | 2 +- _import_dir_wrapper_8cpp_source.html | 2 +- _p_e_file_8cpp_source.html | 1230 +++++++++++----------- _p_e_file_8h_source.html | 62 +- _rich_hdr_wrapper_8cpp_source.html | 4 +- _sect_hdrs_wrapper_8cpp_source.html | 6 +- class_p_e_file-members.html | 2 +- class_p_e_file.html | 72 +- functions_c.html | 2 +- functions_func_c.html | 2 +- search/all_3.js | 2 +- search/functions_3.js | 2 +- 13 files changed, 698 insertions(+), 692 deletions(-) diff --git a/_data_dir_entry_wrapper_8cpp_source.html b/_data_dir_entry_wrapper_8cpp_source.html index aafca43f..3c3cefc8 100644 --- a/_data_dir_entry_wrapper_8cpp_source.html +++ b/_data_dir_entry_wrapper_8cpp_source.html @@ -145,7 +145,7 @@ $(function() {
Executable::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)=0
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition: Executable.h:51
PEFile
Definition: PEFile.h:41
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:243
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:249
PENodeWrapper
Definition: PENodeWrapper.h:25
PENodeWrapper::m_PE
PEFile * m_PE
Definition: PENodeWrapper.h:36
diff --git a/_data_dir_wrapper_8cpp_source.html b/_data_dir_wrapper_8cpp_source.html index 6cf496ce..9ea9d34a 100644 --- a/_data_dir_wrapper_8cpp_source.html +++ b/_data_dir_wrapper_8cpp_source.html @@ -179,7 +179,7 @@ $(function() {
Executable::RAW
@ RAW
Definition: Executable.h:37
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition: Executable.h:57
PEElementWrapper::m_PE
PEFile * m_PE
Definition: PENodeWrapper.h:17
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:237
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:243
diff --git a/_import_dir_wrapper_8cpp_source.html b/_import_dir_wrapper_8cpp_source.html index 3865a05d..3d6101a4 100644 --- a/_import_dir_wrapper_8cpp_source.html +++ b/_import_dir_wrapper_8cpp_source.html @@ -509,7 +509,7 @@ $(function() {
ImportedFuncWrapper::getImportByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr()
Definition: ImportDirWrapper.cpp:13
ImportedFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition: ImportDirWrapper.cpp:146
PEFile
Definition: PEFile.h:41
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:243
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:249
PENodeWrapper::m_PE
PEFile * m_PE
Definition: PENodeWrapper.h:36
imports_util
Definition: ImportBaseDirWrapper.h:10
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition: Util.cpp:38
diff --git a/_p_e_file_8cpp_source.html b/_p_e_file_8cpp_source.html index 8122552f..c66b28f6 100644 --- a/_p_e_file_8cpp_source.html +++ b/_p_e_file_8cpp_source.html @@ -121,614 +121,620 @@ $(function() {
42}
43
44//-------------------------------------------------------------
-
45long PEFile::computeChecksum(BYTE *buffer, size_t bufferSize, size_t checksumOffset)
+
45long PEFile::computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
46{
-
47 WORD *wordBuff = (WORD*)buffer;
-
48 size_t wordSize = bufferSize / sizeof(WORD);
-
49
-
50 size_t checksumBgn = checksumOffset;
-
51 size_t checksumEnd = checksumOffset + sizeof(DWORD);
-
52
-
53 const long long maxVal = ((long long)1) << 32;
-
54 long long checksum = 0;
-
55
-
56 for (int i = 0; i < wordSize; i++) {
-
57 WORD chunk = wordBuff[i];
+
47 if (!buffer || !bufferSize) return 0;
+
48
+
49 WORD *wordBuff = (WORD*)buffer;
+
50 size_t wordSize = bufferSize / sizeof(WORD);
+
51
+
52 size_t checksumBgn = 0;
+
53 size_t checksumEnd = 0;
+
54 if (checksumOffset != INVALID_ADDR) {
+
55 checksumBgn = size_t(checksumOffset);
+
56 checksumEnd = checksumBgn + sizeof(DWORD);
+
57 }
58
-
59 size_t bI = i * sizeof(WORD);
-
60 if (bI >= checksumBgn && bI < checksumEnd) {
-
61 size_t mask = (checksumEnd - bI) % sizeof(WORD);
-
62 size_t shift = (sizeof(WORD) - mask) * 8;
-
63 chunk = (chunk >> shift) << shift;
-
64 }
-
65
-
66 checksum = (checksum & 0xffffffff) + chunk + (checksum >> 32);
-
67 if (checksum > maxVal) {
-
68 checksum = (checksum & 0xffffffff) + (checksum >> 32);
-
69 }
-
70 }
-
71 checksum = (checksum & 0xffff) + (checksum >> 16);
-
72 checksum = (checksum)+(checksum >> 16);
-
73 checksum = checksum & 0xffff;
-
74 checksum += bufferSize;
-
75 return checksum;
-
76}
-
77
-
79
-
80PEFile::PEFile(AbstractByteBuffer *v_buf)
-
81 : MappedExe(v_buf, Executable::BITS_32), dosHdrWrapper(NULL), fHdr(NULL), optHdr(NULL), sects(NULL),
-
82 album(NULL)
-
83{
-
84 album = new ResourcesAlbum(this);
-
85 wrap(v_buf);
-
86 Logger::append(Logger::D_INFO,"Wrapped");
-
87}
-
88
-
89void PEFile::clearWrappers()
-
90{
-
91 initDirEntries();
-
92 MappedExe::clearWrappers();
-
93
-
94 this->dosHdrWrapper = NULL;
-
95 this->fHdr = NULL;
-
96 this->optHdr = NULL;
-
97 this->sects = NULL;
-
98}
+
59 const long long maxVal = ((long long)1) << 32;
+
60 long long checksum = 0;
+
61
+
62 for (int i = 0; i < wordSize; i++) {
+
63 WORD chunk = wordBuff[i];
+
64
+
65 size_t bI = i * sizeof(WORD);
+
66 if (checksumBgn != checksumEnd && bI >= checksumBgn && bI < checksumEnd) {
+
67 size_t mask = (checksumEnd - bI) % sizeof(WORD);
+
68 size_t shift = (sizeof(WORD) - mask) * 8;
+
69 chunk = (chunk >> shift) << shift;
+
70 }
+
71
+
72 checksum = (checksum & 0xffffffff) + chunk + (checksum >> 32);
+
73 if (checksum > maxVal) {
+
74 checksum = (checksum & 0xffffffff) + (checksum >> 32);
+
75 }
+
76 }
+
77 checksum = (checksum & 0xffff) + (checksum >> 16);
+
78 checksum = (checksum)+(checksum >> 16);
+
79 checksum = checksum & 0xffff;
+
80 checksum += bufferSize;
+
81 return checksum;
+
82}
+
83
+
85
+
86PEFile::PEFile(AbstractByteBuffer *v_buf)
+
87 : MappedExe(v_buf, Executable::BITS_32), dosHdrWrapper(NULL), fHdr(NULL), optHdr(NULL), sects(NULL),
+
88 album(NULL)
+
89{
+
90 album = new ResourcesAlbum(this);
+
91 wrap(v_buf);
+
92 Logger::append(Logger::D_INFO,"Wrapped");
+
93}
+
94
+
95void PEFile::clearWrappers()
+
96{
+
97 initDirEntries();
+
98 MappedExe::clearWrappers();
99
-
100void PEFile::initDirEntries()
-
101{
-
102 for (size_t i = 0 ; i < pe::DIR_ENTRIES_COUNT; i++) {
-
103 dataDirEntries[i] = NULL;
-
104 }
-
105}
-
106
-
107void PEFile::wrap()
-
108{
-
109 PEFile::wrap(this->buf);
-
110}
-
111
-
112void PEFile::wrap(AbstractByteBuffer *v_buf)
-
113{
-
114 //erase all existing wrappers:
-
115 clearWrappers();
-
116
-
117 // rewrao the core:
-
118 core.wrap(v_buf);
-
119
-
120 //regenerate the wrappers:
-
121 this->dosHdrWrapper = new DosHdrWrapper(this);
-
122 this->wrappers[WR_DOS_HDR] = this->dosHdrWrapper;
-
123
-
124 this->fHdr = new FileHdrWrapper(this);
-
125 if (fHdr->getPtr() == NULL) throw ExeException("Cannot parse FileHdr: It is not PE File!");
-
126 this->wrappers[WR_FILE_HDR] = fHdr;
-
127 this->wrappers[WR_RICH_HDR] = new RichHdrWrapper(this);
-
128
-
129 this->optHdr = new OptHdrWrapper(this);
-
130 if (optHdr->getPtr() == NULL) throw ExeException("Cannot parse OptionalHeader: It is not PE File!");
-
131 this->wrappers[WR_OPTIONAL_HDR] = optHdr;
-
132
-
133 this->wrappers[WR_DATADIR] = new DataDirWrapper(this);
+
100 this->dosHdrWrapper = NULL;
+
101 this->fHdr = NULL;
+
102 this->optHdr = NULL;
+
103 this->sects = NULL;
+
104}
+
105
+
106void PEFile::initDirEntries()
+
107{
+
108 for (size_t i = 0 ; i < pe::DIR_ENTRIES_COUNT; i++) {
+
109 dataDirEntries[i] = NULL;
+
110 }
+
111}
+
112
+
113void PEFile::wrap()
+
114{
+
115 PEFile::wrap(this->buf);
+
116}
+
117
+
118void PEFile::wrap(AbstractByteBuffer *v_buf)
+
119{
+
120 //erase all existing wrappers:
+
121 clearWrappers();
+
122
+
123 // rewrao the core:
+
124 core.wrap(v_buf);
+
125
+
126 //regenerate the wrappers:
+
127 this->dosHdrWrapper = new DosHdrWrapper(this);
+
128 this->wrappers[WR_DOS_HDR] = this->dosHdrWrapper;
+
129
+
130 this->fHdr = new FileHdrWrapper(this);
+
131 if (fHdr->getPtr() == NULL) throw ExeException("Cannot parse FileHdr: It is not PE File!");
+
132 this->wrappers[WR_FILE_HDR] = fHdr;
+
133 this->wrappers[WR_RICH_HDR] = new RichHdrWrapper(this);
134
-
135 bool isOk = false;
-
136 const size_t secNum = fHdr->getNumValue(FileHdrWrapper::SEC_NUM, &isOk);
-
137 if (isOk && secNum){
-
138 this->sects = new SectHdrsWrapper(this);
-
139 this->wrappers[WR_SECTIONS] = sects;
-
140 }
-
141 else {
-
142 this->sects = NULL;
-
143 }
-
144 // map Data Dirs
-
145 initDirEntries();
-
146 dataDirEntries[pe::DIR_IMPORT] = new ImportDirWrapper(this);
-
147 dataDirEntries[pe::DIR_DELAY_IMPORT] = new DelayImpDirWrapper(this);
-
148 dataDirEntries[pe::DIR_BOUND_IMPORT] = new BoundImpDirWrapper(this);
-
149 dataDirEntries[pe::DIR_DEBUG] = new DebugDirWrapper(this);
-
150 dataDirEntries[pe::DIR_EXPORT] = new ExportDirWrapper(this);
-
151 dataDirEntries[pe::DIR_SECURITY] = new SecurityDirWrapper(this);
-
152 dataDirEntries[pe::DIR_TLS] = new TlsDirWrapper(this);
-
153 dataDirEntries[pe::DIR_LOAD_CONFIG] = new LdConfigDirWrapper(this);
-
154 dataDirEntries[pe::DIR_BASERELOC] = new RelocDirWrapper(this);
-
155 dataDirEntries[pe::DIR_EXCEPTION] = new ExceptionDirWrapper(this);
-
156 dataDirEntries[pe::DIR_RESOURCE] = new ResourceDirWrapper(this, album);
-
157 dataDirEntries[pe::DIR_COM_DESCRIPTOR] = new ClrDirWrapper(this);
-
158
-
159 for (int i = 0; i < pe::DIR_ENTRIES_COUNT; i++) {
-
160 this->wrappers[WR_DIR_ENTRY + i] = dataDirEntries[i];
-
161 }
-
162
-
163 if (this->album) {
-
164 this->album->wrapLeafsContent();
-
165 }
-
166}
-
167
-
168pe::RICH_DANS_HEADER* PEFile::getRichHeaderBgn(pe::RICH_SIGNATURE* richSign)
-
169{
-
170 if (!richSign) return NULL;
-
171
-
172 DWORD xorkey = richSign->checksum;
-
173 const offset_t richOffset = this->getOffset(richSign);
-
174
-
175 pe::RICH_DANS_HEADER* dansHdr = NULL;
-
176
-
177 offset_t offset = richOffset - sizeof(pe::RICH_DANS_HEADER);
-
178 while (offset > 0) {
-
179 dansHdr = (pe::RICH_DANS_HEADER*) this->getContentAt(offset, sizeof(pe::RICH_DANS_HEADER));
-
180 if (!dansHdr) {
-
181 break;
-
182 }
-
183 if (dansHdr->dansId == (pe::DANS_HDR_MAGIC ^ xorkey)) {
-
184 break; //got it!
-
185 }
-
186 //walking back
-
187 offset -= sizeof(DWORD);
-
188 }
-
189 if (!dansHdr || dansHdr->dansId != (pe::DANS_HDR_MAGIC ^ xorkey)) {
-
190 return NULL; //not found
-
191 }
-
192 return dansHdr;
-
193}
-
194
-
195pe::RICH_SIGNATURE* PEFile::getRichHeaderSign()
-
196{
-
197 size_t dosStubOffset = this->core.dos->e_lfarlc;
-
198 size_t dosStubEnd = this->core.dos->e_lfanew; // PE header start
-
199 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
-
200 BYTE *dosPtr = this->getContentAt(dosStubOffset, maxSize);
-
201 if (!dosPtr) {
-
202 return NULL;
-
203 }
-
204
-
205 pe::RICH_SIGNATURE* richSign = NULL;
-
206 size_t toSearchSize = maxSize;
-
207 const offset_t startOffset = dosStubOffset; //we are starting from the beginning of DOS stub
-
208 const size_t step = sizeof(DWORD); //RichHeader is padded by DWORDS
-
209
-
210 while (toSearchSize > 0) {
-
211 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
-
212 if (!richSign) break;
-
213 if (richSign->richId == pe::RICH_HDR_MAGIC) break; //got it!
-
214 // the search goes backward.
-
215 toSearchSize -= step;
-
216 }
-
217 if (!richSign) return NULL;
-
218 if (richSign->richId != pe::RICH_HDR_MAGIC) {
-
219 return NULL; //invalid
-
220 }
-
221 return richSign;
-
222}
-
223
-
224
-
225offset_t PEFile::getMinSecRVA()
-
226{
-
227 if (!this->getSectionsCount()) {
-
228 return INVALID_ADDR;
-
229 }
-
230 SectionHdrWrapper* sec = this->getSecHdr(0);
-
231 if (!sec) {
-
232 return INVALID_ADDR;
-
233 }
-
234 return sec->getContentOffset(Executable::RVA);
-
235}
-
236
-
237offset_t PEFile::peDataDirOffset()
-
238{
-
239 if (this->optHdr == NULL) return INVALID_ADDR;
-
240 return optHdr->getFieldOffset(OptHdrWrapper::DATA_DIR);
+
135 this->optHdr = new OptHdrWrapper(this);
+
136 if (optHdr->getPtr() == NULL) throw ExeException("Cannot parse OptionalHeader: It is not PE File!");
+
137 this->wrappers[WR_OPTIONAL_HDR] = optHdr;
+
138
+
139 this->wrappers[WR_DATADIR] = new DataDirWrapper(this);
+
140
+
141 bool isOk = false;
+
142 const size_t secNum = fHdr->getNumValue(FileHdrWrapper::SEC_NUM, &isOk);
+
143 if (isOk && secNum){
+
144 this->sects = new SectHdrsWrapper(this);
+
145 this->wrappers[WR_SECTIONS] = sects;
+
146 }
+
147 else {
+
148 this->sects = NULL;
+
149 }
+
150 // map Data Dirs
+
151 initDirEntries();
+
152 dataDirEntries[pe::DIR_IMPORT] = new ImportDirWrapper(this);
+
153 dataDirEntries[pe::DIR_DELAY_IMPORT] = new DelayImpDirWrapper(this);
+
154 dataDirEntries[pe::DIR_BOUND_IMPORT] = new BoundImpDirWrapper(this);
+
155 dataDirEntries[pe::DIR_DEBUG] = new DebugDirWrapper(this);
+
156 dataDirEntries[pe::DIR_EXPORT] = new ExportDirWrapper(this);
+
157 dataDirEntries[pe::DIR_SECURITY] = new SecurityDirWrapper(this);
+
158 dataDirEntries[pe::DIR_TLS] = new TlsDirWrapper(this);
+
159 dataDirEntries[pe::DIR_LOAD_CONFIG] = new LdConfigDirWrapper(this);
+
160 dataDirEntries[pe::DIR_BASERELOC] = new RelocDirWrapper(this);
+
161 dataDirEntries[pe::DIR_EXCEPTION] = new ExceptionDirWrapper(this);
+
162 dataDirEntries[pe::DIR_RESOURCE] = new ResourceDirWrapper(this, album);
+
163 dataDirEntries[pe::DIR_COM_DESCRIPTOR] = new ClrDirWrapper(this);
+
164
+
165 for (int i = 0; i < pe::DIR_ENTRIES_COUNT; i++) {
+
166 this->wrappers[WR_DIR_ENTRY + i] = dataDirEntries[i];
+
167 }
+
168
+
169 if (this->album) {
+
170 this->album->wrapLeafsContent();
+
171 }
+
172}
+
173
+
174pe::RICH_DANS_HEADER* PEFile::getRichHeaderBgn(pe::RICH_SIGNATURE* richSign)
+
175{
+
176 if (!richSign) return NULL;
+
177
+
178 DWORD xorkey = richSign->checksum;
+
179 const offset_t richOffset = this->getOffset(richSign);
+
180
+
181 pe::RICH_DANS_HEADER* dansHdr = NULL;
+
182
+
183 offset_t offset = richOffset - sizeof(pe::RICH_DANS_HEADER);
+
184 while (offset > 0) {
+
185 dansHdr = (pe::RICH_DANS_HEADER*) this->getContentAt(offset, sizeof(pe::RICH_DANS_HEADER));
+
186 if (!dansHdr) {
+
187 break;
+
188 }
+
189 if (dansHdr->dansId == (pe::DANS_HDR_MAGIC ^ xorkey)) {
+
190 break; //got it!
+
191 }
+
192 //walking back
+
193 offset -= sizeof(DWORD);
+
194 }
+
195 if (!dansHdr || dansHdr->dansId != (pe::DANS_HDR_MAGIC ^ xorkey)) {
+
196 return NULL; //not found
+
197 }
+
198 return dansHdr;
+
199}
+
200
+
201pe::RICH_SIGNATURE* PEFile::getRichHeaderSign()
+
202{
+
203 size_t dosStubOffset = this->core.dos->e_lfarlc;
+
204 size_t dosStubEnd = this->core.dos->e_lfanew; // PE header start
+
205 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
+
206 BYTE *dosPtr = this->getContentAt(dosStubOffset, maxSize);
+
207 if (!dosPtr) {
+
208 return NULL;
+
209 }
+
210
+
211 pe::RICH_SIGNATURE* richSign = NULL;
+
212 size_t toSearchSize = maxSize;
+
213 const offset_t startOffset = dosStubOffset; //we are starting from the beginning of DOS stub
+
214 const size_t step = sizeof(DWORD); //RichHeader is padded by DWORDS
+
215
+
216 while (toSearchSize > 0) {
+
217 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
+
218 if (!richSign) break;
+
219 if (richSign->richId == pe::RICH_HDR_MAGIC) break; //got it!
+
220 // the search goes backward.
+
221 toSearchSize -= step;
+
222 }
+
223 if (!richSign) return NULL;
+
224 if (richSign->richId != pe::RICH_HDR_MAGIC) {
+
225 return NULL; //invalid
+
226 }
+
227 return richSign;
+
228}
+
229
+
230
+
231offset_t PEFile::getMinSecRVA()
+
232{
+
233 if (!this->getSectionsCount()) {
+
234 return INVALID_ADDR;
+
235 }
+
236 SectionHdrWrapper* sec = this->getSecHdr(0);
+
237 if (!sec) {
+
238 return INVALID_ADDR;
+
239 }
+
240 return sec->getContentOffset(Executable::RVA);
241}
242
-
243IMAGE_DATA_DIRECTORY* PEFile::getDataDirectory()
+
243offset_t PEFile::peDataDirOffset()
244{
-
245 if (this->wrappers[WR_DATADIR] == NULL) return NULL;
-
246 return static_cast<IMAGE_DATA_DIRECTORY*>(this->wrappers[WR_DATADIR]->getPtr());
+
245 if (this->optHdr == NULL) return INVALID_ADDR;
+
246 return optHdr->getFieldOffset(OptHdrWrapper::DATA_DIR);
247}
248
-
249bufsize_t PEFile::getMappedSize(Executable::addr_type aType)
+
249IMAGE_DATA_DIRECTORY* PEFile::getDataDirectory()
250{
-
251 if (aType == Executable::NOT_ADDR) return 0;
-
252
-
253 if (aType == Executable::RAW) {
-
254 return this->getContentSize();
-
255 }
-
256 const size_t PAGE_SIZE = 0x1000;
-
257 bufsize_t vSize = 0;
-
258 if (aType == Executable::VA || aType == Executable::RVA) {
-
259 vSize = core.getImageSize();
-
260 }
-
261 if (vSize < PAGE_SIZE) {
-
262 return PAGE_SIZE;
-
263 }
-
264 return vSize;
-
265}
-
266
-
267offset_t PEFile::getEntryPoint(Executable::addr_type addrType)
-
268{
-
269 if (optHdr == NULL) return INVALID_ADDR;
-
270
-
271 bool isOk = false;
-
272 offset_t entryPoint = static_cast<offset_t> (optHdr->getNumValue(OptHdrWrapper::EP, &isOk));
-
273 if (isOk == false) return INVALID_ADDR;
-
274
-
275 const Executable::addr_type epType = Executable::RVA;
-
276 if (addrType != epType) {
-
277 entryPoint = this->convertAddr(entryPoint, epType, addrType);
-
278 }
-
279 return entryPoint;
-
280}
-
281
-
282bool PEFile::setEntryPoint(offset_t entry, Executable::addr_type aType)
-
283{
-
284 if (optHdr == NULL) return false;
-
285
-
286 offset_t epRva = this->convertAddr(entry, aType, Executable::RVA);
-
287 bool isOk = optHdr->setNumValue(OptHdrWrapper::EP, epRva);
-
288 return isOk;
-
289}
-
290
-
291size_t PEFile::hdrSectionsNum() const
-
292{
-
293 bool isOk = false;
-
294 uint64_t secNum = this->fHdr->getNumValue(FileHdrWrapper::SEC_NUM , &isOk);
-
295 if (isOk == false) return 0;
+
251 if (this->wrappers[WR_DATADIR] == NULL) return NULL;
+
252 return static_cast<IMAGE_DATA_DIRECTORY*>(this->wrappers[WR_DATADIR]->getPtr());
+
253}
+
254
+
255bufsize_t PEFile::getMappedSize(Executable::addr_type aType)
+
256{
+
257 if (aType == Executable::NOT_ADDR) return 0;
+
258
+
259 if (aType == Executable::RAW) {
+
260 return this->getContentSize();
+
261 }
+
262 const size_t PAGE_SIZE = 0x1000;
+
263 bufsize_t vSize = 0;
+
264 if (aType == Executable::VA || aType == Executable::RVA) {
+
265 vSize = core.getImageSize();
+
266 }
+
267 if (vSize < PAGE_SIZE) {
+
268 return PAGE_SIZE;
+
269 }
+
270 return vSize;
+
271}
+
272
+
273offset_t PEFile::getEntryPoint(Executable::addr_type addrType)
+
274{
+
275 if (optHdr == NULL) return INVALID_ADDR;
+
276
+
277 bool isOk = false;
+
278 offset_t entryPoint = static_cast<offset_t> (optHdr->getNumValue(OptHdrWrapper::EP, &isOk));
+
279 if (isOk == false) return INVALID_ADDR;
+
280
+
281 const Executable::addr_type epType = Executable::RVA;
+
282 if (addrType != epType) {
+
283 entryPoint = this->convertAddr(entryPoint, epType, addrType);
+
284 }
+
285 return entryPoint;
+
286}
+
287
+
288bool PEFile::setEntryPoint(offset_t entry, Executable::addr_type aType)
+
289{
+
290 if (optHdr == NULL) return false;
+
291
+
292 offset_t epRva = this->convertAddr(entry, aType, Executable::RVA);
+
293 bool isOk = optHdr->setNumValue(OptHdrWrapper::EP, epRva);
+
294 return isOk;
+
295}
296
-
297 return static_cast<size_t> (secNum);
-
298}
-
299
-
300bool PEFile::setHdrSectionsNum(size_t newNum)
-
301{
-
302 uint64_t count = newNum;
-
303 bool canSet = fHdr->setNumValue(FileHdrWrapper::SEC_NUM , count);
-
304 if (canSet == false) {
-
305 Logger::append(Logger::D_ERROR,"Can not change FileHdr!");
-
306 return false;
-
307 }
-
308 return true;
-
309}
-
310
-
311bool PEFile::setVirtualSize(bufsize_t newSize)
-
312{
-
313 uint64_t size = newSize;
-
314 bool canSet = optHdr->setNumValue(OptHdrWrapper::IMAGE_SIZE, size);
-
315 if (canSet == false) {
-
316 Logger::append(Logger::D_ERROR, "Can not change OptHdr!");
-
317 return false;
-
318 }
-
319 return true;
-
320}
-
321
-
322size_t PEFile::getSectionsCount(bool useMapped) const
-
323{
-
324 if (useMapped == false) {
-
325 return hdrSectionsNum();
-
326 }
-
327 return (this->sects) ? this->sects->getEntriesCount() : 0;
-
328}
-
329
-
330offset_t PEFile::rawToRva(offset_t raw)
-
331{
-
332 if (raw >= this->getMappedSize(Executable::RAW)) return INVALID_ADDR;
-
333
-
334 SectionHdrWrapper* sec = this->getSecHdrAtOffset(raw, Executable::RAW, true);
-
335 if (sec) {
-
336 offset_t bgnVA = sec->getContentOffset(Executable::VA);
-
337 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
-
338 if (bgnVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
+
297size_t PEFile::hdrSectionsNum() const
+
298{
+
299 bool isOk = false;
+
300 uint64_t secNum = this->fHdr->getNumValue(FileHdrWrapper::SEC_NUM , &isOk);
+
301 if (isOk == false) return 0;
+
302
+
303 return static_cast<size_t> (secNum);
+
304}
+
305
+
306bool PEFile::setHdrSectionsNum(size_t newNum)
+
307{
+
308 uint64_t count = newNum;
+
309 bool canSet = fHdr->setNumValue(FileHdrWrapper::SEC_NUM , count);
+
310 if (canSet == false) {
+
311 Logger::append(Logger::D_ERROR,"Can not change FileHdr!");
+
312 return false;
+
313 }
+
314 return true;
+
315}
+
316
+
317bool PEFile::setVirtualSize(bufsize_t newSize)
+
318{
+
319 uint64_t size = newSize;
+
320 bool canSet = optHdr->setNumValue(OptHdrWrapper::IMAGE_SIZE, size);
+
321 if (canSet == false) {
+
322 Logger::append(Logger::D_ERROR, "Can not change OptHdr!");
+
323 return false;
+
324 }
+
325 return true;
+
326}
+
327
+
328size_t PEFile::getSectionsCount(bool useMapped) const
+
329{
+
330 if (useMapped == false) {
+
331 return hdrSectionsNum();
+
332 }
+
333 return (this->sects) ? this->sects->getEntriesCount() : 0;
+
334}
+
335
+
336offset_t PEFile::rawToRva(offset_t raw)
+
337{
+
338 if (raw >= this->getMappedSize(Executable::RAW)) return INVALID_ADDR;
339
-
340 bufsize_t curr = (raw - bgnRaw);
-
341
-
342 bufsize_t vSize = sec->getContentSize(Executable::VA, true);
-
343 if (curr >= vSize) {
-
344 //address out of section
-
345 return INVALID_ADDR;
-
346 }
-
347 return bgnVA + curr;
-
348 }
-
349 //TODO: make more tests
-
350 if (this->getSectionsCount() == 0) return raw;
-
351 if (raw < this->hdrsSize()) {
-
352 return raw;
-
353 } //else: content that is between the end of sections headers and the first virtual section is not mapped
-
354 return INVALID_ADDR;
-
355}
-
356
-
357offset_t PEFile::rvaToRaw(offset_t rva)
-
358{
-
359 if (rva >= this->getMappedSize(Executable::RVA)) return INVALID_ADDR;
-
360
-
361 SectionHdrWrapper* sec = this->getSecHdrAtOffset(rva, Executable::RVA, true);
-
362 if (sec) {
-
363 offset_t bgnRVA = sec->getContentOffset(Executable::RVA);
-
364 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
-
365 if (bgnRVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
+
340 SectionHdrWrapper* sec = this->getSecHdrAtOffset(raw, Executable::RAW, true);
+
341 if (sec) {
+
342 offset_t bgnVA = sec->getContentOffset(Executable::VA);
+
343 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
+
344 if (bgnVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
+
345
+
346 bufsize_t curr = (raw - bgnRaw);
+
347
+
348 bufsize_t vSize = sec->getContentSize(Executable::VA, true);
+
349 if (curr >= vSize) {
+
350 //address out of section
+
351 return INVALID_ADDR;
+
352 }
+
353 return bgnVA + curr;
+
354 }
+
355 //TODO: make more tests
+
356 if (this->getSectionsCount() == 0) return raw;
+
357 if (raw < this->hdrsSize()) {
+
358 return raw;
+
359 } //else: content that is between the end of sections headers and the first virtual section is not mapped
+
360 return INVALID_ADDR;
+
361}
+
362
+
363offset_t PEFile::rvaToRaw(offset_t rva)
+
364{
+
365 if (rva >= this->getMappedSize(Executable::RVA)) return INVALID_ADDR;
366
-
367 bufsize_t curr = (rva - bgnRVA);
-
368 bufsize_t rawSize = sec->getContentSize(Executable::RAW, true);
-
369 if (curr >= rawSize) {
-
370 // the address might be in a virtual cave that is not related to any raw address
-
371 return INVALID_ADDR;
-
372 }
-
373 return bgnRaw + curr;
-
374 }
-
375 if (rva >= this->getMappedSize(Executable::RAW)) {
-
376 return INVALID_ADDR;
-
377 }
-
378 if (this->getSectionsCount()) { // do this check only if sections count is non-zero
-
379 if (rva >= this->hdrsSize()) {
-
380 // the address is in the cave between the headers and the first section: cannot be mapped
-
381 return INVALID_ADDR;
-
382 }
+
367 SectionHdrWrapper* sec = this->getSecHdrAtOffset(rva, Executable::RVA, true);
+
368 if (sec) {
+
369 offset_t bgnRVA = sec->getContentOffset(Executable::RVA);
+
370 offset_t bgnRaw = sec->getContentOffset(Executable::RAW);
+
371 if (bgnRVA == INVALID_ADDR || bgnRaw == INVALID_ADDR) return INVALID_ADDR;
+
372
+
373 bufsize_t curr = (rva - bgnRVA);
+
374 bufsize_t rawSize = sec->getContentSize(Executable::RAW, true);
+
375 if (curr >= rawSize) {
+
376 // the address might be in a virtual cave that is not related to any raw address
+
377 return INVALID_ADDR;
+
378 }
+
379 return bgnRaw + curr;
+
380 }
+
381 if (rva >= this->getMappedSize(Executable::RAW)) {
+
382 return INVALID_ADDR;
383 }
-
384 // at this point we are sure that the address is within the raw size:
-
385 return rva;
-
386}
-
387
-
388DataDirEntryWrapper* PEFile::getDataDirEntry(pe::dir_entry eType)
-
389{
-
390 if (eType >= pe::DIR_ENTRIES_COUNT) return NULL;
-
391 return dataDirEntries[eType];
+
384 if (this->getSectionsCount()) { // do this check only if sections count is non-zero
+
385 if (rva >= this->hdrsSize()) {
+
386 // the address is in the cave between the headers and the first section: cannot be mapped
+
387 return INVALID_ADDR;
+
388 }
+
389 }
+
390 // at this point we are sure that the address is within the raw size:
+
391 return rva;
392}
393
-
394BufferView* PEFile::createSectionView(size_t secId)
+
394DataDirEntryWrapper* PEFile::getDataDirEntry(pe::dir_entry eType)
395{
-
396 SectionHdrWrapper *sec = this->getSecHdr(secId);
-
397 if (sec == NULL) {
-
398 Logger::append(Logger::D_WARNING, "No such section");
-
399 return NULL;
-
400 }
-
401 return _createSectionView(sec);
-
402}
-
403
-
404bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
-
405{
-
406 bool allowExceptions = true; //TODO: configure exception mode outside...
-
407
-
408 DataDirEntryWrapper *entry = getDataDirEntry(id);
-
409 if (entry == NULL) {
-
410 if (allowExceptions) throw ExeException("No such Data Directory");
-
411 return false;
-
412 }
-
413 DataDirWrapper* ddirWrapper = dynamic_cast<DataDirWrapper*> (this->wrappers[WR_DATADIR]);
-
414 IMAGE_DATA_DIRECTORY *ddir = this->getDataDirectory();
-
415 if (ddirWrapper == NULL || ddir == NULL) {
-
416 if (allowExceptions) throw ExeException("Cannot fetch DataDirTable");
+
396 if (eType >= pe::DIR_ENTRIES_COUNT) return NULL;
+
397 return dataDirEntries[eType];
+
398}
+
399
+
400BufferView* PEFile::createSectionView(size_t secId)
+
401{
+
402 SectionHdrWrapper *sec = this->getSecHdr(secId);
+
403 if (sec == NULL) {
+
404 Logger::append(Logger::D_WARNING, "No such section");
+
405 return NULL;
+
406 }
+
407 return _createSectionView(sec);
+
408}
+
409
+
410bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
+
411{
+
412 bool allowExceptions = true; //TODO: configure exception mode outside...
+
413
+
414 DataDirEntryWrapper *entry = getDataDirEntry(id);
+
415 if (entry == NULL) {
+
416 if (allowExceptions) throw ExeException("No such Data Directory");
417 return false;
418 }
-
419 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
-
420 offset_t dataDirAddr = this->convertAddr(newOffset, addrType, dataDirAddrType);
-
421 if (dataDirAddr == INVALID_ADDR) {
-
422 if (allowExceptions) throw ExeException("Invalid new offset");
+
419 DataDirWrapper* ddirWrapper = dynamic_cast<DataDirWrapper*> (this->wrappers[WR_DATADIR]);
+
420 IMAGE_DATA_DIRECTORY *ddir = this->getDataDirectory();
+
421 if (ddirWrapper == NULL || ddir == NULL) {
+
422 if (allowExceptions) throw ExeException("Cannot fetch DataDirTable");
423 return false;
424 }
-
425 offset_t targetRaw = this->toRaw(newOffset, addrType);
-
426 if (entry->canCopyToOffset(targetRaw) == false) {
-
427 if (allowExceptions) throw ExeException("Cannot copy: no space at such offset");
-
428 return false;
-
429 }
-
430 if (entry->copyToOffset(targetRaw) == false) {
-
431 if (allowExceptions) throw ExeException("Cannot copy: error occured");
-
432 return false;
-
433 }
-
434 entry->fillContent(0);
-
435 ddir[id].VirtualAddress = static_cast<DWORD> (dataDirAddr);
-
436 return true;
-
437}
-
438
-
439bool PEFile::canAddNewSection()
-
440{
-
441 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
442 if (sec == NULL || sec->canAddEntry() == false) {
-
443 return false;
-
444 }
-
445 const size_t secCount = hdrSectionsNum();
-
446 if (secCount == SectHdrsWrapper::SECT_COUNT_MAX) return false; //limit exceeded
-
447
-
448 //TODO: some more checks? overlay?
-
449 return true;
-
450}
-
451
-
452
-
453SectionHdrWrapper* PEFile::addNewSection(QString name, bufsize_t size, bufsize_t v_size)
-
454{
-
455 if (canAddNewSection() == false) return NULL;
-
456
-
457 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
458 if (!v_size) v_size = size;
-
459
-
460 bufsize_t roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
-
461 bufsize_t roundedVirtualEnd = buf_util::roundupToUnit(getMappedSize(Executable::RVA), getAlignment(Executable::RVA));
-
462 bufsize_t newSize = roundedRawEnd + size;
-
463 bufsize_t newVirtualSize = roundedVirtualEnd + v_size;
-
464
-
465 if (setVirtualSize(newVirtualSize) == false) {
-
466 Logger::append(Logger::D_ERROR, "Failed to change virtual size");
-
467 return NULL;
-
468 }
-
469
-
470 if (resize(newSize) == false) {
-
471 Logger::append(Logger::D_ERROR, "Failed to resize");
-
472 return NULL;
-
473 }
-
474 // fetch again after resize:
-
475 sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
-
476 if (sec == NULL) {
-
477 return NULL;
-
478 }
-
479
-
480 IMAGE_SECTION_HEADER secHdr;
-
481 ::memset(&secHdr, 0, sizeof(IMAGE_SECTION_HEADER));
-
482
-
483 //name copy:
-
484 const size_t nameLen = name.length();
-
485 const size_t bufSize = sizeof(secHdr.Name);
-
486 const size_t copySize = (nameLen < bufSize) ? nameLen : bufSize;
-
487 if (copySize) {
-
488 ::memcpy(secHdr.Name, name.toStdString().c_str(), copySize);
-
489 }
-
490
-
491 secHdr.PointerToRawData = static_cast<DWORD>(roundedRawEnd);
-
492 secHdr.VirtualAddress = static_cast<DWORD>(roundedVirtualEnd);
-
493 secHdr.SizeOfRawData = size;
-
494 secHdr.Misc.VirtualSize = v_size;
-
495
-
496 SectionHdrWrapper wr(this, &secHdr);
-
497 SectionHdrWrapper* secHdrWr = dynamic_cast<SectionHdrWrapper*>(sec->addEntry(&wr));
-
498 return secHdrWr;
-
499}
-
500
-
501SectionHdrWrapper* PEFile::getLastSection()
-
502{
-
503 size_t secCount = this->getSectionsCount(true);
-
504 if (secCount == 0) return NULL;
-
505 return this->getSecHdr(secCount - 1);
-
506}
-
507
-
508offset_t PEFile::getLastMapped(Executable::addr_type aType)
-
509{
-
510 offset_t lastMapped = 0;
-
511
-
512 /* check sections bounds */
-
513 const size_t secCounter = this->getSectionsCount(true);
-
514 if (!secCounter) {
-
515 // if PE file has no sections, full file will be mapped
-
516 return getMappedSize(aType);
-
517 }
-
518 for (size_t i = 0; i < secCounter; i++) {
-
519 SectionHdrWrapper *sec = this->getSecHdr(i);
-
520 if (!sec) continue;
-
521
-
522 offset_t secLastMapped= sec->getContentOffset(aType, true);
-
523 if (secLastMapped == INVALID_ADDR) continue;
-
524
-
525 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
-
526 secLastMapped += size;
-
527 if (secLastMapped > lastMapped) {
-
528 lastMapped = secLastMapped;
-
529 }
-
530 }
-
531
-
532 /* check header bounds */
-
533 /* section headers: */
-
534 if (lastMapped < this->secHdrsEndOffset()) {
-
535 lastMapped = this->secHdrsEndOffset();
+
425 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
+
426 offset_t dataDirAddr = this->convertAddr(newOffset, addrType, dataDirAddrType);
+
427 if (dataDirAddr == INVALID_ADDR) {
+
428 if (allowExceptions) throw ExeException("Invalid new offset");
+
429 return false;
+
430 }
+
431 offset_t targetRaw = this->toRaw(newOffset, addrType);
+
432 if (entry->canCopyToOffset(targetRaw) == false) {
+
433 if (allowExceptions) throw ExeException("Cannot copy: no space at such offset");
+
434 return false;
+
435 }
+
436 if (entry->copyToOffset(targetRaw) == false) {
+
437 if (allowExceptions) throw ExeException("Cannot copy: error occured");
+
438 return false;
+
439 }
+
440 entry->fillContent(0);
+
441 ddir[id].VirtualAddress = static_cast<DWORD> (dataDirAddr);
+
442 return true;
+
443}
+
444
+
445bool PEFile::canAddNewSection()
+
446{
+
447 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
448 if (sec == NULL || sec->canAddEntry() == false) {
+
449 return false;
+
450 }
+
451 const size_t secCount = hdrSectionsNum();
+
452 if (secCount == SectHdrsWrapper::SECT_COUNT_MAX) return false; //limit exceeded
+
453
+
454 //TODO: some more checks? overlay?
+
455 return true;
+
456}
+
457
+
458
+
459SectionHdrWrapper* PEFile::addNewSection(QString name, bufsize_t size, bufsize_t v_size)
+
460{
+
461 if (canAddNewSection() == false) return NULL;
+
462
+
463 ExeNodeWrapper* sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
464 if (!v_size) v_size = size;
+
465
+
466 bufsize_t roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
+
467 bufsize_t roundedVirtualEnd = buf_util::roundupToUnit(getMappedSize(Executable::RVA), getAlignment(Executable::RVA));
+
468 bufsize_t newSize = roundedRawEnd + size;
+
469 bufsize_t newVirtualSize = roundedVirtualEnd + v_size;
+
470
+
471 if (setVirtualSize(newVirtualSize) == false) {
+
472 Logger::append(Logger::D_ERROR, "Failed to change virtual size");
+
473 return NULL;
+
474 }
+
475
+
476 if (resize(newSize) == false) {
+
477 Logger::append(Logger::D_ERROR, "Failed to resize");
+
478 return NULL;
+
479 }
+
480 // fetch again after resize:
+
481 sec = dynamic_cast<ExeNodeWrapper*>(getWrapper(PEFile::WR_SECTIONS));
+
482 if (sec == NULL) {
+
483 return NULL;
+
484 }
+
485
+
486 IMAGE_SECTION_HEADER secHdr;
+
487 ::memset(&secHdr, 0, sizeof(IMAGE_SECTION_HEADER));
+
488
+
489 //name copy:
+
490 const size_t nameLen = name.length();
+
491 const size_t bufSize = sizeof(secHdr.Name);
+
492 const size_t copySize = (nameLen < bufSize) ? nameLen : bufSize;
+
493 if (copySize) {
+
494 ::memcpy(secHdr.Name, name.toStdString().c_str(), copySize);
+
495 }
+
496
+
497 secHdr.PointerToRawData = static_cast<DWORD>(roundedRawEnd);
+
498 secHdr.VirtualAddress = static_cast<DWORD>(roundedVirtualEnd);
+
499 secHdr.SizeOfRawData = size;
+
500 secHdr.Misc.VirtualSize = v_size;
+
501
+
502 SectionHdrWrapper wr(this, &secHdr);
+
503 SectionHdrWrapper* secHdrWr = dynamic_cast<SectionHdrWrapper*>(sec->addEntry(&wr));
+
504 return secHdrWr;
+
505}
+
506
+
507SectionHdrWrapper* PEFile::getLastSection()
+
508{
+
509 size_t secCount = this->getSectionsCount(true);
+
510 if (secCount == 0) return NULL;
+
511 return this->getSecHdr(secCount - 1);
+
512}
+
513
+
514offset_t PEFile::getLastMapped(Executable::addr_type aType)
+
515{
+
516 offset_t lastMapped = 0;
+
517
+
518 /* check sections bounds */
+
519 const size_t secCounter = this->getSectionsCount(true);
+
520 if (!secCounter) {
+
521 // if PE file has no sections, full file will be mapped
+
522 return getMappedSize(aType);
+
523 }
+
524 for (size_t i = 0; i < secCounter; i++) {
+
525 SectionHdrWrapper *sec = this->getSecHdr(i);
+
526 if (!sec) continue;
+
527
+
528 offset_t secLastMapped= sec->getContentOffset(aType, true);
+
529 if (secLastMapped == INVALID_ADDR) continue;
+
530
+
531 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
+
532 secLastMapped += size;
+
533 if (secLastMapped > lastMapped) {
+
534 lastMapped = secLastMapped;
+
535 }
536 }
-
537 /* NT headers: */
-
538 int ntHeadersEndOffset = this->core.peSignatureOffset() + this->core.hdrsSize();
-
539 if (lastMapped < ntHeadersEndOffset) {
-
540 lastMapped = ntHeadersEndOffset;
-
541 }
-
542 return lastMapped;
-
543}
-
544
-
545SectionHdrWrapper* PEFile::extendLastSection(bufsize_t addedSize)
-
546{
-
547 SectionHdrWrapper* secHdr = getLastSection();
-
548 if (secHdr == NULL) return NULL;
-
549
-
550 //TODO: check overlay...
-
551 bufsize_t fullSize = getContentSize();
-
552 bufsize_t newSize = fullSize + addedSize;
-
553
-
554 offset_t secROffset = secHdr->getContentOffset(Executable::RAW, false);
-
555 if (secROffset == INVALID_ADDR) {
-
556 return NULL;
-
557 }
-
558 const bufsize_t secNewRSize = newSize - secROffset; //include overlay in section
+
537
+
538 /* check header bounds */
+
539 /* section headers: */
+
540 if (lastMapped < this->secHdrsEndOffset()) {
+
541 lastMapped = this->secHdrsEndOffset();
+
542 }
+
543 /* NT headers: */
+
544 int ntHeadersEndOffset = this->core.peSignatureOffset() + this->core.hdrsSize();
+
545 if (lastMapped < ntHeadersEndOffset) {
+
546 lastMapped = ntHeadersEndOffset;
+
547 }
+
548 return lastMapped;
+
549}
+
550
+
551SectionHdrWrapper* PEFile::extendLastSection(bufsize_t addedSize)
+
552{
+
553 SectionHdrWrapper* secHdr = getLastSection();
+
554 if (secHdr == NULL) return NULL;
+
555
+
556 //TODO: check overlay...
+
557 bufsize_t fullSize = getContentSize();
+
558 bufsize_t newSize = fullSize + addedSize;
559
-
560 secHdr->setNumValue(SectionHdrWrapper::RSIZE, uint64_t(secNewRSize));
-
561
-
562 const offset_t secVOffset = secHdr->getContentOffset(Executable::RVA, false);
-
563 const bufsize_t secVSize = secHdr->getContentSize(Executable::RVA, false);
-
564
-
565 // if the previous virtual size is smaller than the new raw size, then update it:
-
566 if (secVSize < secNewRSize) {
-
567 secHdr->setNumValue(SectionHdrWrapper::VSIZE, uint64_t(secNewRSize));
-
568
-
569 // if the virtual size of section has changed,
-
570 // update the Size of Image (saved in the header):
-
571 bufsize_t newVSize = secVOffset + secNewRSize;
-
572 this->setVirtualSize(newVSize);
-
573 }
+
560 offset_t secROffset = secHdr->getContentOffset(Executable::RAW, false);
+
561 if (secROffset == INVALID_ADDR) {
+
562 return NULL;
+
563 }
+
564 const bufsize_t secNewRSize = newSize - secROffset; //include overlay in section
+
565
+
566 secHdr->setNumValue(SectionHdrWrapper::RSIZE, uint64_t(secNewRSize));
+
567
+
568 const offset_t secVOffset = secHdr->getContentOffset(Executable::RVA, false);
+
569 const bufsize_t secVSize = secHdr->getContentSize(Executable::RVA, false);
+
570
+
571 // if the previous virtual size is smaller than the new raw size, then update it:
+
572 if (secVSize < secNewRSize) {
+
573 secHdr->setNumValue(SectionHdrWrapper::VSIZE, uint64_t(secNewRSize));
574
-
575 //update raw size:
-
576 this->resize(newSize);
-
577 //finally, retrieve the resized section:
-
578 return getLastSection();
-
579}
+
575 // if the virtual size of section has changed,
+
576 // update the Size of Image (saved in the header):
+
577 bufsize_t newVSize = secVOffset + secNewRSize;
+
578 this->setVirtualSize(newVSize);
+
579 }
580
-
581bool PEFile::unbindImports()
-
582{
-
583 IMAGE_DATA_DIRECTORY* ddir = this->getDataDirectory();
-
584 if (ddir[pe::DIR_BOUND_IMPORT].VirtualAddress == 0 && ddir[pe::DIR_BOUND_IMPORT].Size == 0) {
-
585 // No bound imports already, nothing to do here!
-
586 return true;
-
587 }
-
588 ddir[pe::DIR_BOUND_IMPORT].VirtualAddress = 0;
-
589 ddir[pe::DIR_BOUND_IMPORT].Size = 0;
-
590 DataDirEntryWrapper *bImp = this->getDataDirEntry(pe::DIR_BOUND_IMPORT);
-
591 if (bImp == NULL) {
-
592 //printf("No Bound imports wrapper!\n");
-
593 return false; // todo: throw error?
-
594 }
-
595 bool isOk = bImp->wrap();
-
596 //TODO: change timestamp for all library entries from (-1 : BOUND) to 0 : NOT BOUND
-
597 return isOk;
-
598}
-
599
-
600bool PEFile::dumpSection(SectionHdrWrapper *sec, QString fileName)
-
601{
-
602 if (this->getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
-
603 return false; //not my section
-
604 }
-
605 BufferView *secView = this->_createSectionView(sec);
-
606 if (!secView) return false;
-
607
-
608 bufsize_t dumpedSize = FileBuffer::dump(fileName, *secView, false);
-
609 delete secView;
-
610
-
611 return dumpedSize ? true : false;
-
612}
+
581 //update raw size:
+
582 this->resize(newSize);
+
583 //finally, retrieve the resized section:
+
584 return getLastSection();
+
585}
+
586
+
587bool PEFile::unbindImports()
+
588{
+
589 IMAGE_DATA_DIRECTORY* ddir = this->getDataDirectory();
+
590 if (ddir[pe::DIR_BOUND_IMPORT].VirtualAddress == 0 && ddir[pe::DIR_BOUND_IMPORT].Size == 0) {
+
591 // No bound imports already, nothing to do here!
+
592 return true;
+
593 }
+
594 ddir[pe::DIR_BOUND_IMPORT].VirtualAddress = 0;
+
595 ddir[pe::DIR_BOUND_IMPORT].Size = 0;
+
596 DataDirEntryWrapper *bImp = this->getDataDirEntry(pe::DIR_BOUND_IMPORT);
+
597 if (bImp == NULL) {
+
598 //printf("No Bound imports wrapper!\n");
+
599 return false; // todo: throw error?
+
600 }
+
601 bool isOk = bImp->wrap();
+
602 //TODO: change timestamp for all library entries from (-1 : BOUND) to 0 : NOT BOUND
+
603 return isOk;
+
604}
+
605
+
606bool PEFile::dumpSection(SectionHdrWrapper *sec, QString fileName)
+
607{
+
608 if (this->getSecIndex(sec) == SectHdrsWrapper::SECT_INVALID_INDEX) {
+
609 return false; //not my section
+
610 }
+
611 BufferView *secView = this->_createSectionView(sec);
+
612 if (!secView) return false;
613
-
614//protected:
-
615
-
616BufferView* PEFile::_createSectionView(SectionHdrWrapper *sec)
-
617{
-
618 Executable::addr_type aType = Executable::RAW;
-
619 offset_t start = sec->getContentOffset(aType, true);
-
620 bufsize_t size = sec->getContentSize(aType, true);
-
621 if (start == INVALID_ADDR || size == 0) {
-
622 return NULL;
-
623 }
-
624 return new BufferView(this, start, size);
-
625}
-
626
-
627size_t PEFile::getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType)
-
628{
-
629 size_t initialSize = entrypoints.size();
-
630
-
631 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
-
632 if (!exports) return 0;
-
633
-
634 const size_t entriesCnt = exports->getEntriesCount();
-
635 if (entriesCnt == 0) return 0;
+
614 bufsize_t dumpedSize = FileBuffer::dump(fileName, *secView, false);
+
615 delete secView;
+
616
+
617 return dumpedSize ? true : false;
+
618}
+
619
+
620//protected:
+
621
+
622BufferView* PEFile::_createSectionView(SectionHdrWrapper *sec)
+
623{
+
624 Executable::addr_type aType = Executable::RAW;
+
625 offset_t start = sec->getContentOffset(aType, true);
+
626 bufsize_t size = sec->getContentSize(aType, true);
+
627 if (start == INVALID_ADDR || size == 0) {
+
628 return NULL;
+
629 }
+
630 return new BufferView(this, start, size);
+
631}
+
632
+
633size_t PEFile::getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType)
+
634{
+
635 size_t initialSize = entrypoints.size();
636
-
637 for (int i = 0; i < entriesCnt; i++) {
-
638 ExportEntryWrapper* entry = dynamic_cast<ExportEntryWrapper*>(exports->getEntryAt(i));
-
639 if (!entry) continue;
-
640
-
641 QString forwarder = entry->getForwarderStr();
-
642 if (forwarder.length()) {
-
643 continue;
-
644 }
-
645 offset_t rva = entry->getFuncRva();
-
646 offset_t offset = this->convertAddr(rva, Executable::RVA, aType);
-
647 if (offset == INVALID_ADDR) {
-
648 continue;
-
649 }
-
650 entrypoints.insert(offset, entry->getName());
-
651 }
-
652 return entrypoints.size() - initialSize;
-
653}
+
637 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
+
638 if (!exports) return 0;
+
639
+
640 const size_t entriesCnt = exports->getEntriesCount();
+
641 if (entriesCnt == 0) return 0;
+
642
+
643 for (int i = 0; i < entriesCnt; i++) {
+
644 ExportEntryWrapper* entry = dynamic_cast<ExportEntryWrapper*>(exports->getEntryAt(i));
+
645 if (!entry) continue;
+
646
+
647 QString forwarder = entry->getForwarderStr();
+
648 if (forwarder.length()) {
+
649 continue;
+
650 }
+
651 offset_t rva = entry->getFuncRva();
+
652 offset_t offset = this->convertAddr(rva, Executable::RVA, aType);
+
653 if (offset == INVALID_ADDR) {
+
654 continue;
+
655 }
+
656 entrypoints.insert(offset, entry->getName());
+
657 }
+
658 return entrypoints.size() - initialSize;
+
659}
bufsize_t
uint32_t bufsize_t
Definition: AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition: AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition: AbstractByteBuffer.h:17
@@ -803,23 +809,23 @@ $(function() {
PEFile
Definition: PEFile.h:41
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition: PEFile.h:269
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition: PEFile.h:119
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:249
-
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition: PEFile.cpp:616
-
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition: PEFile.cpp:627
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:255
+
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition: PEFile.cpp:622
+
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition: PEFile.cpp:633
PEFile::sects
SectHdrsWrapper * sects
Definition: PEFile.h:266
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition: PEFile.h:109
-
PEFile::unbindImports
bool unbindImports()
Definition: PEFile.cpp:581
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:237
-
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition: PEFile.cpp:267
-
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition: PEFile.cpp:225
+
PEFile::unbindImports
bool unbindImports()
Definition: PEFile.cpp:587
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:243
+
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition: PEFile.cpp:273
+
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition: PEFile.cpp:231
PEFile::SectHdrsWrapper
friend class SectHdrsWrapper
Definition: PEFile.h:271
-
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition: PEFile.cpp:508
+
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition: PEFile.cpp:514
PEFile::fHdr
FileHdrWrapper * fHdr
Definition: PEFile.h:264
PEFile::album
ResourcesAlbum * album
Definition: PEFile.h:268
-
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition: PEFile.cpp:282
-
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition: PEFile.cpp:322
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:168
-
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition: PEFile.cpp:545
+
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition: PEFile.cpp:288
+
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition: PEFile.cpp:328
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:174
+
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition: PEFile.cpp:551
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition: PEFile.h:51
PEFile::WR_DATADIR
@ WR_DATADIR
Definition: PEFile.h:49
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition: PEFile.h:48
@@ -828,31 +834,31 @@ $(function() {
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition: PEFile.h:50
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition: PEFile.h:46
PEFile::core
PECore core
Definition: PEFile.h:256
-
PEFile::initDirEntries
void initDirEntries()
Definition: PEFile.cpp:100
-
PEFile::wrap
virtual void wrap()
Definition: PEFile.cpp:107
-
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition: PEFile.cpp:501
+
PEFile::initDirEntries
void initDirEntries()
Definition: PEFile.cpp:106
+
PEFile::wrap
virtual void wrap()
Definition: PEFile.cpp:113
+
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition: PEFile.cpp:507
PEFile::optHdr
OptHdrWrapper * optHdr
Definition: PEFile.h:265
-
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition: PEFile.cpp:600
-
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition: PEFile.cpp:357
-
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition: PEFile.cpp:394
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:300
-
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition: PEFile.cpp:311
-
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition: PEFile.cpp:388
-
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition: PEFile.cpp:404
-
PEFile::clearWrappers
virtual void clearWrappers()
Definition: PEFile.cpp:89
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:243
-
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition: PEFile.cpp:330
+
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition: PEFile.cpp:606
+
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition: PEFile.cpp:363
+
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition: PEFile.cpp:400
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:306
+
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition: PEFile.cpp:317
+
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition: PEFile.cpp:394
+
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition: PEFile.cpp:410
+
PEFile::clearWrappers
virtual void clearWrappers()
Definition: PEFile.cpp:95
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:249
+
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition: PEFile.cpp:336
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition: PEFile.h:93
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset() const
Definition: PEFile.h:83
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:291
-
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition: PEFile.cpp:80
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:297
+
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition: PEFile.cpp:86
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition: PEFile.h:70
-
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, size_t checksumOffset)
Definition: PEFile.cpp:45
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:195
-
PEFile::canAddNewSection
bool canAddNewSection()
Definition: PEFile.cpp:439
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:201
+
PEFile::canAddNewSection
bool canAddNewSection()
Definition: PEFile.cpp:445
+
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition: PEFile.cpp:45
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition: PEFile.h:262
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition: PEFile.h:114
-
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition: PEFile.cpp:453
+
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition: PEFile.cpp:459
diff --git a/_p_e_file_8h_source.html b/_p_e_file_8h_source.html index 072ec274..0dd3548f 100644 --- a/_p_e_file_8h_source.html +++ b/_p_e_file_8h_source.html @@ -132,7 +132,7 @@ $(function() {
53 COUNT_WRAPPERS
54 };
55
-
56 static long computeChecksum(BYTE *buffer, size_t bufferSize, size_t checksumOffset);
+
56 static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset);
57
58 PEFile(AbstractByteBuffer *v_buf);
59 virtual ~PEFile() { clearWrappers(); delete album; }
@@ -414,9 +414,9 @@ $(function() {
PEFile
Definition: PEFile.h:41
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition: PEFile.h:269
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition: PEFile.h:119
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:249
-
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition: PEFile.cpp:616
-
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition: PEFile.cpp:627
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:255
+
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition: PEFile.cpp:622
+
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition: PEFile.cpp:633
PEFile::getDelayedImports
DelayImpDirWrapper * getDelayedImports()
Definition: PEFile.h:149
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset()
Definition: PEFile.h:173
PEFile::getSectionAlignment
bufsize_t getSectionAlignment() const
Definition: PEFile.h:191
@@ -426,21 +426,21 @@ $(function() {
PEFile::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition: PEFile.h:79
PEFile::hasDirectory
bool hasDirectory(pe::dir_entry dirNum)
Definition: PEFile.h:181
PEFile::~PEFile
virtual ~PEFile()
Definition: PEFile.h:59
-
PEFile::unbindImports
bool unbindImports()
Definition: PEFile.cpp:581
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:237
-
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition: PEFile.cpp:267
+
PEFile::unbindImports
bool unbindImports()
Definition: PEFile.cpp:587
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition: PEFile.cpp:243
+
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition: PEFile.cpp:273
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition: PEFile.h:81
PEFile::getExports
ExportDirWrapper * getExports()
Definition: PEFile.h:154
-
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition: PEFile.cpp:225
-
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition: PEFile.cpp:508
+
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition: PEFile.cpp:231
+
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition: PEFile.cpp:514
PEFile::fHdr
FileHdrWrapper * fHdr
Definition: PEFile.h:264
PEFile::getImageBase
virtual offset_t getImageBase()
Definition: PEFile.h:71
PEFile::album
ResourcesAlbum * album
Definition: PEFile.h:268
-
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition: PEFile.cpp:282
-
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition: PEFile.cpp:322
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:168
+
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition: PEFile.cpp:288
+
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition: PEFile.cpp:328
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:174
PEFile::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition: PEFile.h:160
-
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition: PEFile.cpp:545
+
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition: PEFile.cpp:551
PEFile::WRAPPERS
WRAPPERS
Definition: PEFile.h:43
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition: PEFile.h:51
PEFile::WR_DATADIR
@ WR_DATADIR
Definition: PEFile.h:49
@@ -453,43 +453,43 @@ $(function() {
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition: PEFile.h:46
PEFile::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition: PEFile.h:53
PEFile::core
PECore core
Definition: PEFile.h:256
-
PEFile::initDirEntries
void initDirEntries()
Definition: PEFile.cpp:100
-
PEFile::wrap
virtual void wrap()
Definition: PEFile.cpp:107
-
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition: PEFile.cpp:501
+
PEFile::initDirEntries
void initDirEntries()
Definition: PEFile.cpp:106
+
PEFile::wrap
virtual void wrap()
Definition: PEFile.cpp:113
+
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition: PEFile.cpp:507
PEFile::optHdr
OptHdrWrapper * optHdr
Definition: PEFile.h:265
-
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition: PEFile.cpp:600
-
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition: PEFile.cpp:357
-
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition: PEFile.cpp:394
+
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition: PEFile.cpp:606
+
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition: PEFile.cpp:363
+
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition: PEFile.cpp:400
PEFile::getResourcesAlbum
ResourcesAlbum * getResourcesAlbum() const
Definition: PEFile.h:96
PEFile::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition: PEFile.h:80
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:300
-
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition: PEFile.cpp:311
-
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition: PEFile.cpp:388
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:306
+
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition: PEFile.cpp:317
+
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition: PEFile.cpp:394
PEFile::clearContent
bool clearContent(SectionHdrWrapper *sec)
Definition: PEFile.h:220
-
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition: PEFile.cpp:404
-
PEFile::clearWrappers
virtual void clearWrappers()
Definition: PEFile.cpp:89
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:243
-
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition: PEFile.cpp:330
+
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition: PEFile.cpp:410
+
PEFile::clearWrappers
virtual void clearWrappers()
Definition: PEFile.cpp:95
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition: PEFile.cpp:249
+
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition: PEFile.cpp:336
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition: PEFile.h:93
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset() const
Definition: PEFile.h:83
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:291
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:297
PEFile::getImports
ImportDirWrapper * getImports()
Definition: PEFile.h:144
PEFile::getEntrySection
SectionHdrWrapper * getEntrySection()
Definition: PEFile.h:214
PEFile::setImageSize
void setImageSize(size_t newSize)
Definition: PEFile.h:209
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition: PEFile.h:78
PEFile::getFileAlignment
bufsize_t getFileAlignment() const
Definition: PEFile.h:186
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition: PEFile.h:70
-
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, size_t checksumOffset)
Definition: PEFile.cpp:45
PEFile::getBitMode
virtual exe_bits getBitMode()
Definition: PEFile.h:74
PEFile::getSecContent
BYTE * getSecContent(SectionHdrWrapper *sec)
Definition: PEFile.h:196
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:195
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:201
PEFile::canResize
bool canResize(bufsize_t newSize)
Definition: PEFile.h:235
-
PEFile::canAddNewSection
bool canAddNewSection()
Definition: PEFile.cpp:439
+
PEFile::canAddNewSection
bool canAddNewSection()
Definition: PEFile.cpp:445
+
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition: PEFile.cpp:45
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition: PEFile.h:262
PEFile::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition: PEFile.h:124
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition: PEFile.h:107
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition: PEFile.h:114
-
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition: PEFile.cpp:453
+
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition: PEFile.cpp:459
ResourcesAlbum::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition: ResourcesAlbum.cpp:105
diff --git a/_rich_hdr_wrapper_8cpp_source.html b/_rich_hdr_wrapper_8cpp_source.html index 13ad4d17..964d9405 100644 --- a/_rich_hdr_wrapper_8cpp_source.html +++ b/_rich_hdr_wrapper_8cpp_source.html @@ -635,8 +635,8 @@ $(function() {
Executable::getContent
virtual BYTE * getContent()
Definition: Executable.h:52
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition: Executable.h:51
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:168
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:195
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition: PEFile.cpp:174
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition: PEFile.cpp:201
RichHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition: RichHdrWrapper.cpp:186
RichHdrWrapper::getPtr
virtual void * getPtr()
Definition: RichHdrWrapper.cpp:18
RichHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition: RichHdrWrapper.cpp:57
diff --git a/_sect_hdrs_wrapper_8cpp_source.html b/_sect_hdrs_wrapper_8cpp_source.html index 95686352..a9cda29c 100644 --- a/_sect_hdrs_wrapper_8cpp_source.html +++ b/_sect_hdrs_wrapper_8cpp_source.html @@ -659,10 +659,10 @@ $(function() {
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition: Executable.h:57
Executable::getRawSize
virtual offset_t getRawSize() const
Definition: Executable.h:54
Executable::getImageSize
virtual bufsize_t getImageSize()
Definition: Executable.h:66
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:249
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition: PEFile.cpp:255
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition: PEFile.h:81
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:300
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:291
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition: PEFile.cpp:306
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition: PEFile.cpp:297
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition: PEFile.h:70
PENodeWrapper::m_PE
PEFile * m_PE
Definition: PENodeWrapper.h:36
SectHdrsWrapper::rSec
std::map< offset_t, SectionHdrWrapper * > rSec
Definition: SectHdrsWrapper.h:170
diff --git a/class_p_e_file-members.html b/class_p_e_file-members.html index 473cb325..804be5af 100644 --- a/class_p_e_file-members.html +++ b/class_p_e_file-members.html @@ -90,7 +90,7 @@ $(function() { canResize(bufsize_t newSize)PEFileinlinevirtual clearContent(SectionHdrWrapper *sec)PEFileinline clearWrappers()PEFileprotectedvirtual - computeChecksum(BYTE *buffer, size_t bufferSize, size_t checksumOffset)PEFilestatic + computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)PEFilestatic containsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)Executablevirtual corePEFileprotected diff --git a/class_p_e_file.html b/class_p_e_file.html index f993eb2d..39c1bd61 100644 --- a/class_p_e_file.html +++ b/class_p_e_file.html @@ -397,8 +397,8 @@ Public Member Functions - - + + @@ -520,7 +520,7 @@ Friends
-

Definition at line 80 of file PEFile.cpp.

+

Definition at line 86 of file PEFile.cpp.

Here is the call graph for this function:
@@ -597,7 +597,7 @@ Here is the call graph for this function:

Static Public Member Functions

static long computeChecksum (BYTE *buffer, size_t bufferSize, size_t checksumOffset)
 
static long computeChecksum (BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
 
- Static Public Member Functions inherited from Executable
static bool isBit64 (Executable *exe)
 
-

Definition at line 616 of file PEFile.cpp.

+

Definition at line 622 of file PEFile.cpp.

Here is the call graph for this function:
@@ -657,7 +657,7 @@ Here is the call graph for this function:
-

Definition at line 453 of file PEFile.cpp.

+

Definition at line 459 of file PEFile.cpp.

Here is the call graph for this function:
@@ -729,7 +729,7 @@ Here is the call graph for this function:
-

Definition at line 439 of file PEFile.cpp.

+

Definition at line 445 of file PEFile.cpp.

Here is the call graph for this function:
@@ -888,7 +888,7 @@ Here is the call graph for this function:
-

Definition at line 89 of file PEFile.cpp.

+

Definition at line 95 of file PEFile.cpp.

Here is the call graph for this function:
@@ -902,8 +902,8 @@ Here is the call graph for this function:
- -

◆ computeChecksum()

+ +

◆ computeChecksum()

@@ -926,7 +926,7 @@ Here is the call graph for this function:
- size_t  + offset_t  checksumOffset  @@ -962,7 +962,7 @@ Here is the call graph for this function:
-

Definition at line 394 of file PEFile.cpp.

+

Definition at line 400 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1020,7 +1020,7 @@ Here is the call graph for this function:
-

Definition at line 600 of file PEFile.cpp.

+

Definition at line 606 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1069,7 +1069,7 @@ Here is the call graph for this function:
-

Definition at line 545 of file PEFile.cpp.

+

Definition at line 551 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1296,7 +1296,7 @@ Here is the call graph for this function:
-

Definition at line 243 of file PEFile.cpp.

+

Definition at line 249 of file PEFile.cpp.

@@ -1316,7 +1316,7 @@ Here is the call graph for this function:
-

Definition at line 388 of file PEFile.cpp.

+

Definition at line 394 of file PEFile.cpp.

@@ -1382,7 +1382,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 267 of file PEFile.cpp.

+

Definition at line 273 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1545,7 +1545,7 @@ Here is the call graph for this function:
-

Definition at line 627 of file PEFile.cpp.

+

Definition at line 633 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1749,7 +1749,7 @@ Here is the call graph for this function:
-

Definition at line 508 of file PEFile.cpp.

+

Definition at line 514 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1814,7 +1814,7 @@ Here is the call graph for this function:
-

Definition at line 501 of file PEFile.cpp.

+

Definition at line 507 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1869,7 +1869,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 249 of file PEFile.cpp.

+

Definition at line 255 of file PEFile.cpp.

Here is the call graph for this function:
@@ -1899,7 +1899,7 @@ Here is the call graph for this function:
-

Definition at line 225 of file PEFile.cpp.

+

Definition at line 231 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2014,7 +2014,7 @@ Here is the call graph for this function:
-

Definition at line 168 of file PEFile.cpp.

+

Definition at line 174 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2046,7 +2046,7 @@ Here is the call graph for this function:
-

Definition at line 195 of file PEFile.cpp.

+

Definition at line 201 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2314,7 +2314,7 @@ Here is the call graph for this function:
-

Definition at line 322 of file PEFile.cpp.

+

Definition at line 328 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2392,7 +2392,7 @@ Here is the call graph for this function:
-

Definition at line 291 of file PEFile.cpp.

+

Definition at line 297 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2475,7 +2475,7 @@ Here is the call graph for this function:
-

Definition at line 100 of file PEFile.cpp.

+

Definition at line 106 of file PEFile.cpp.

@@ -2511,7 +2511,7 @@ Here is the call graph for this function:
-

Definition at line 404 of file PEFile.cpp.

+

Definition at line 410 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2561,7 +2561,7 @@ Here is the call graph for this function:
-

Definition at line 237 of file PEFile.cpp.

+

Definition at line 243 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2751,7 +2751,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 330 of file PEFile.cpp.

+

Definition at line 336 of file PEFile.cpp.

Here is the call graph for this function:
@@ -2825,7 +2825,7 @@ Here is the call graph for this function:

Implements Executable.

-

Definition at line 357 of file PEFile.cpp.

+

Definition at line 363 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3048,7 +3048,7 @@ Here is the call graph for this function:
-

Definition at line 282 of file PEFile.cpp.

+

Definition at line 288 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3104,7 +3104,7 @@ Here is the call graph for this function:
-

Definition at line 300 of file PEFile.cpp.

+

Definition at line 306 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3205,7 +3205,7 @@ Here is the call graph for this function:
-

Definition at line 311 of file PEFile.cpp.

+

Definition at line 317 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3246,7 +3246,7 @@ Here is the call graph for this function:
-

Definition at line 581 of file PEFile.cpp.

+

Definition at line 587 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3286,7 +3286,7 @@ Here is the call graph for this function:

Reimplemented from MappedExe.

-

Definition at line 107 of file PEFile.cpp.

+

Definition at line 113 of file PEFile.cpp.

Here is the call graph for this function:
@@ -3324,7 +3324,7 @@ Here is the call graph for this function:

Implements MappedExe.

-

Definition at line 112 of file PEFile.cpp.

+

Definition at line 118 of file PEFile.cpp.

Here is the call graph for this function:
diff --git a/functions_c.html b/functions_c.html index f378c777..4fa69c0a 100644 --- a/functions_c.html +++ b/functions_c.html @@ -111,7 +111,7 @@ $(function() {
  • compIdCount() : RichHdrWrapper
  • compIdCounter : RichHdrWrapper
  • COMPLEX : WrappedValue
    • -
  • computeChecksum() : PEFile
    • +
  • computeChecksum() : PEFile
  • containsAddrType() : ClrDirWrapper, DataDirWrapper, DebugDirCVEntryWrapper, DebugDirWrapper, DelayImpEntryWrapper, DelayImpFuncWrapper, DosHdrWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExportDirWrapper, ExportEntryWrapper, FileHdrWrapper, ImportedFuncWrapper, ImportEntryWrapper, LdConfigDirWrapper, LdConfigEntryWrapper, OptHdrWrapper, RelocBlockWrapper, RelocEntryWrapper, ResourceEntryWrapper, ResourceLeafWrapper, RichHdrWrapper, SectionHdrWrapper, TlsDirWrapper, TlsEntryWrapper
  • containsBlock() : AbstractByteBuffer
  • containsDataType() : ExeElementWrapper, RelocBlockWrapper, ReourceHTMLWrapper, ReourceManifestWrapper, ResourceContentWrapper, ResourceStringsWrapper, ResourceVersionWrapper, ResString, SectionHdrWrapper, SecurityDirWrapper
    • diff --git a/functions_func_c.html b/functions_func_c.html index 244bb707..3bad9084 100644 --- a/functions_func_c.html +++ b/functions_func_c.html @@ -88,7 +88,7 @@ $(function() {
  • codeOffset() : DOSExe
  • codeToString() : CustomException
  • compIdCount() : RichHdrWrapper
    • -
  • computeChecksum() : PEFile
    • +
  • computeChecksum() : PEFile
  • containsAddrType() : ClrDirWrapper, DataDirWrapper, DebugDirCVEntryWrapper, DebugDirWrapper, DelayImpEntryWrapper, DelayImpFuncWrapper, DosHdrWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExportDirWrapper, ExportEntryWrapper, FileHdrWrapper, ImportedFuncWrapper, ImportEntryWrapper, LdConfigDirWrapper, LdConfigEntryWrapper, OptHdrWrapper, RelocBlockWrapper, RelocEntryWrapper, ResourceEntryWrapper, ResourceLeafWrapper, RichHdrWrapper, SectionHdrWrapper, TlsDirWrapper, TlsEntryWrapper
  • containsBlock() : AbstractByteBuffer
  • containsDataType() : ExeElementWrapper, RelocBlockWrapper, ReourceHTMLWrapper, ReourceManifestWrapper, ResourceContentWrapper, ResourceStringsWrapper, ResourceVersionWrapper, ResString, SectionHdrWrapper, SecurityDirWrapper
    • diff --git a/search/all_3.js b/search/all_3.js index 97200923..3e28b676 100644 --- a/search/all_3.js +++ b/search/all_3.js @@ -40,7 +40,7 @@ var searchData= ['compidcount_37',['compIdCount',['../class_rich_hdr_wrapper.html#a9fa2a440b039172e68a3966841dea293',1,'RichHdrWrapper']]], ['compidcounter_38',['compIdCounter',['../class_rich_hdr_wrapper.html#a52fe8eb39cbfc5905d1a8801d1a17bef',1,'RichHdrWrapper']]], ['complex_39',['COMPLEX',['../class_wrapped_value.html#a70fcd4afb963d228e1f84fc422d13e0aaa3a63d5724d6624f3752721825bbfd8f',1,'WrappedValue']]], - ['computechecksum_40',['computeChecksum',['../class_p_e_file.html#ad2759e212a81df94512fff2f717903f9',1,'PEFile']]], + ['computechecksum_40',['computeChecksum',['../class_p_e_file.html#ae7d8f52aaf0c8e5945eb68b76bbb5d96',1,'PEFile']]], ['containsaddrtype_41',['containsAddrType',['../class_export_dir_wrapper.html#ab2f4f6ac5b4e50a0ef9e96ecfa3ca0d2',1,'ExportDirWrapper::containsAddrType()'],['../class_section_hdr_wrapper.html#a95b3f58e69a7b38367a2701ca7df89eb',1,'SectionHdrWrapper::containsAddrType()'],['../class_rich_hdr_wrapper.html#a049aada35e8dca15ea4004c32d7861e0',1,'RichHdrWrapper::containsAddrType()'],['../class_resource_leaf_wrapper.html#ae5d8a275e186d4588d595dd714c04dd2',1,'ResourceLeafWrapper::containsAddrType()'],['../class_resource_entry_wrapper.html#a53813936738fccc36c3d23d0153d7166',1,'ResourceEntryWrapper::containsAddrType()'],['../class_reloc_entry_wrapper.html#a10cd6f8cd74ce170ec4712aa3b3ef42f',1,'RelocEntryWrapper::containsAddrType()'],['../class_reloc_block_wrapper.html#ab8b0e353acb1fd577cf454d10f987585',1,'RelocBlockWrapper::containsAddrType()'],['../class_opt_hdr_wrapper.html#a1237d1e844f5a5fbfbbee66b061b4b75',1,'OptHdrWrapper::containsAddrType()'],['../class_ld_config_entry_wrapper.html#a33d4ceb10f68fdaa812da22f2c0b8d9d',1,'LdConfigEntryWrapper::containsAddrType()'],['../class_ld_config_dir_wrapper.html#ad8ebfc0a9bb4875d5e4347d104ef027b',1,'LdConfigDirWrapper::containsAddrType()'],['../class_imported_func_wrapper.html#a86a7797cd4c3881c787a90cdc619d8ce',1,'ImportedFuncWrapper::containsAddrType()'],['../class_import_entry_wrapper.html#a7ffe9f8539b4305ace49513c696de90c',1,'ImportEntryWrapper::containsAddrType()'],['../class_file_hdr_wrapper.html#a21f95f34fc7e0a77a4fad8830d11b13c',1,'FileHdrWrapper::containsAddrType()'],['../class_export_entry_wrapper.html#ab31921f4cae18bccd7781e6863290ef7',1,'ExportEntryWrapper::containsAddrType()'],['../class_exception_entry_wrapper.html#ae9404e5cb638b5c444aec3ffefacf096',1,'ExceptionEntryWrapper::containsAddrType()'],['../class_dos_hdr_wrapper.html#a2b2af365fa7330fbd198eb636aa247ca',1,'DosHdrWrapper::containsAddrType()'],['../class_delay_imp_func_wrapper.html#a2d8546adf2b32cd7895bf3e5191f808d',1,'DelayImpFuncWrapper::containsAddrType()'],['../class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc',1,'DelayImpEntryWrapper::containsAddrType()'],['../class_debug_dir_c_v_entry_wrapper.html#ac59a2e632af154ef8eafeae33482c246',1,'DebugDirCVEntryWrapper::containsAddrType()'],['../class_debug_dir_wrapper.html#a729371ea6d46de6d9d10de57906e1b64',1,'DebugDirWrapper::containsAddrType()'],['../class_data_dir_wrapper.html#a70f6562f2d0fdcabdab258ae438b0884',1,'DataDirWrapper::containsAddrType()'],['../class_clr_dir_wrapper.html#a8bc11566fdb90d7962b86e0f2d5bdd41',1,'ClrDirWrapper::containsAddrType()'],['../class_exe_element_wrapper.html#a8108914de5353bd75c8874bb3fb17129',1,'ExeElementWrapper::containsAddrType()'],['../class_tls_dir_wrapper.html#afc047beec3fff8fea78e5535e19b28af',1,'TlsDirWrapper::containsAddrType()'],['../class_tls_entry_wrapper.html#a8284e4b6950efe8d22ffc18dca14ab1a',1,'TlsEntryWrapper::containsAddrType()']]], ['containsblock_42',['containsBlock',['../class_abstract_byte_buffer.html#a9fe8ad85b0926eacf7e3e4731b0344a3',1,'AbstractByteBuffer']]], ['containsdatatype_43',['containsDataType',['../class_res_string.html#afa0c4a78fca1de554fb8548fa7331f75',1,'ResString::containsDataType()'],['../class_security_dir_wrapper.html#aa4a20aad32b13b8ab80bd34b52533f43',1,'SecurityDirWrapper::containsDataType()'],['../class_reource_h_t_m_l_wrapper.html#aaf6e24a9090198000074c643a08ed228',1,'ReourceHTMLWrapper::containsDataType()'],['../class_resource_strings_wrapper.html#ab638d9a9fb7ddd4522107577de2659ce',1,'ResourceStringsWrapper::containsDataType()'],['../class_resource_version_wrapper.html#a2bb81deb942f3f4939ce9d1711972e93',1,'ResourceVersionWrapper::containsDataType()'],['../class_section_hdr_wrapper.html#aae7571e02b78ab566c100dda88baaa2c',1,'SectionHdrWrapper::containsDataType()'],['../class_reource_manifest_wrapper.html#ab32f51338178cb53972aac8d39276fd5',1,'ReourceManifestWrapper::containsDataType()'],['../class_resource_content_wrapper.html#acf3b9c996c16b047edf841a683887c74',1,'ResourceContentWrapper::containsDataType()'],['../class_reloc_block_wrapper.html#a0374f7305a2d9a1f315e23ac190ebd02',1,'RelocBlockWrapper::containsDataType()'],['../class_exe_element_wrapper.html#a86cc36cd7ea4808d93c0ac59ffb12e60',1,'ExeElementWrapper::containsDataType()']]], diff --git a/search/functions_3.js b/search/functions_3.js index b74f275f..50d93efa 100644 --- a/search/functions_3.js +++ b/search/functions_3.js @@ -15,7 +15,7 @@ var searchData= ['codeoffset_12',['codeOffset',['../class_d_o_s_exe.html#a0dc602c68c8eb5b146b93112d86893a9',1,'DOSExe']]], ['codetostring_13',['codeToString',['../class_custom_exception.html#a956cad0ac8cc9568d8f06e7f11dc51a2',1,'CustomException']]], ['compidcount_14',['compIdCount',['../class_rich_hdr_wrapper.html#a9fa2a440b039172e68a3966841dea293',1,'RichHdrWrapper']]], - ['computechecksum_15',['computeChecksum',['../class_p_e_file.html#ad2759e212a81df94512fff2f717903f9',1,'PEFile']]], + ['computechecksum_15',['computeChecksum',['../class_p_e_file.html#ae7d8f52aaf0c8e5945eb68b76bbb5d96',1,'PEFile']]], ['containsaddrtype_16',['containsAddrType',['../class_imported_func_wrapper.html#a86a7797cd4c3881c787a90cdc619d8ce',1,'ImportedFuncWrapper::containsAddrType()'],['../class_ld_config_dir_wrapper.html#ad8ebfc0a9bb4875d5e4347d104ef027b',1,'LdConfigDirWrapper::containsAddrType()'],['../class_ld_config_entry_wrapper.html#a33d4ceb10f68fdaa812da22f2c0b8d9d',1,'LdConfigEntryWrapper::containsAddrType()'],['../class_opt_hdr_wrapper.html#a1237d1e844f5a5fbfbbee66b061b4b75',1,'OptHdrWrapper::containsAddrType()'],['../class_exception_entry_wrapper.html#ae9404e5cb638b5c444aec3ffefacf096',1,'ExceptionEntryWrapper::containsAddrType()'],['../class_reloc_block_wrapper.html#ab8b0e353acb1fd577cf454d10f987585',1,'RelocBlockWrapper::containsAddrType()'],['../class_reloc_entry_wrapper.html#a10cd6f8cd74ce170ec4712aa3b3ef42f',1,'RelocEntryWrapper::containsAddrType()'],['../class_resource_entry_wrapper.html#a53813936738fccc36c3d23d0153d7166',1,'ResourceEntryWrapper::containsAddrType()'],['../class_resource_leaf_wrapper.html#ae5d8a275e186d4588d595dd714c04dd2',1,'ResourceLeafWrapper::containsAddrType()'],['../class_rich_hdr_wrapper.html#a049aada35e8dca15ea4004c32d7861e0',1,'RichHdrWrapper::containsAddrType()'],['../class_section_hdr_wrapper.html#a95b3f58e69a7b38367a2701ca7df89eb',1,'SectionHdrWrapper::containsAddrType()'],['../class_tls_dir_wrapper.html#afc047beec3fff8fea78e5535e19b28af',1,'TlsDirWrapper::containsAddrType()'],['../class_tls_entry_wrapper.html#a8284e4b6950efe8d22ffc18dca14ab1a',1,'TlsEntryWrapper::containsAddrType()'],['../class_file_hdr_wrapper.html#a21f95f34fc7e0a77a4fad8830d11b13c',1,'FileHdrWrapper::containsAddrType()'],['../class_import_entry_wrapper.html#a7ffe9f8539b4305ace49513c696de90c',1,'ImportEntryWrapper::containsAddrType()'],['../class_exe_element_wrapper.html#a8108914de5353bd75c8874bb3fb17129',1,'ExeElementWrapper::containsAddrType()'],['../class_clr_dir_wrapper.html#a8bc11566fdb90d7962b86e0f2d5bdd41',1,'ClrDirWrapper::containsAddrType()'],['../class_data_dir_wrapper.html#a70f6562f2d0fdcabdab258ae438b0884',1,'DataDirWrapper::containsAddrType()'],['../class_debug_dir_wrapper.html#a729371ea6d46de6d9d10de57906e1b64',1,'DebugDirWrapper::containsAddrType()'],['../class_debug_dir_c_v_entry_wrapper.html#ac59a2e632af154ef8eafeae33482c246',1,'DebugDirCVEntryWrapper::containsAddrType()'],['../class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc',1,'DelayImpEntryWrapper::containsAddrType()'],['../class_delay_imp_func_wrapper.html#a2d8546adf2b32cd7895bf3e5191f808d',1,'DelayImpFuncWrapper::containsAddrType()'],['../class_dos_hdr_wrapper.html#a2b2af365fa7330fbd198eb636aa247ca',1,'DosHdrWrapper::containsAddrType()'],['../class_export_dir_wrapper.html#ab2f4f6ac5b4e50a0ef9e96ecfa3ca0d2',1,'ExportDirWrapper::containsAddrType()'],['../class_export_entry_wrapper.html#ab31921f4cae18bccd7781e6863290ef7',1,'ExportEntryWrapper::containsAddrType()']]], ['containsblock_17',['containsBlock',['../class_abstract_byte_buffer.html#a9fe8ad85b0926eacf7e3e4731b0344a3',1,'AbstractByteBuffer']]], ['containsdatatype_18',['containsDataType',['../class_security_dir_wrapper.html#aa4a20aad32b13b8ab80bd34b52533f43',1,'SecurityDirWrapper::containsDataType()'],['../class_reloc_block_wrapper.html#a0374f7305a2d9a1f315e23ac190ebd02',1,'RelocBlockWrapper::containsDataType()'],['../class_section_hdr_wrapper.html#aae7571e02b78ab566c100dda88baaa2c',1,'SectionHdrWrapper::containsDataType()'],['../class_resource_version_wrapper.html#a2bb81deb942f3f4939ce9d1711972e93',1,'ResourceVersionWrapper::containsDataType()'],['../class_resource_strings_wrapper.html#ab638d9a9fb7ddd4522107577de2659ce',1,'ResourceStringsWrapper::containsDataType()'],['../class_res_string.html#afa0c4a78fca1de554fb8548fa7331f75',1,'ResString::containsDataType()'],['../class_reource_h_t_m_l_wrapper.html#aaf6e24a9090198000074c643a08ed228',1,'ReourceHTMLWrapper::containsDataType()'],['../class_reource_manifest_wrapper.html#ab32f51338178cb53972aac8d39276fd5',1,'ReourceManifestWrapper::containsDataType()'],['../class_resource_content_wrapper.html#acf3b9c996c16b047edf841a683887c74',1,'ResourceContentWrapper::containsDataType()'],['../class_exe_element_wrapper.html#a86cc36cd7ea4808d93c0ac59ffb12e60',1,'ExeElementWrapper::containsDataType()']]],