+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
diff --git a/_p_e_file_8cpp_source.html b/_p_e_file_8cpp_source.html index fdd6bc43..fcd6f75c 100644 --- a/_p_e_file_8cpp_source.html +++ b/_p_e_file_8cpp_source.html @@ -195,646 +195,669 @@ $(function() { codefold.init(0); });
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
-
-
+
+
+
-
-
+
+
-
+
-
-
+
+
diff --git a/_p_e_core_8h_source.html b/_p_e_core_8h_source.html
index c1c75c16..2630a4b1 100644
--- a/_p_e_core_8h_source.html
+++ b/_p_e_core_8h_source.html
@@ -165,28 +165,28 @@ $(function() { codefold.init(0); });
-
-
-
+
+
+
-
-
+
+
-
+
-
+
-
+
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
@@ -287,20 +288,20 @@ $(function() { codefold.init(0); });
-virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:105
Definition PECore.h:8
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:105
Definition PEFile.h:41
Definition PEFile.h:45
diff --git a/_p_e_file_8cpp_source.html b/_p_e_file_8cpp_source.html index fdd6bc43..fcd6f75c 100644 --- a/_p_e_file_8cpp_source.html +++ b/_p_e_file_8cpp_source.html @@ -195,646 +195,669 @@ $(function() { codefold.init(0); });
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
+
+
-
- 133 if (optHdr->getPtr() == NULL) throw ExeException("Cannot parse OptionalHeader: It is not PE File!");
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
155 if (optHdr->getPtr() == NULL) throw ExeException("Cannot parse OptionalHeader: It is not PE File!");
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
224 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
-
-
-
-
-
-
-
-
-
-
-
- 236 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
- 240 const size_t maxSize = dosStubEnd - dosStubOffset; // Rich Header is somewhere in the space between DOS and PE headers
+
+
+
+
+
+
+
+
+
+
+
+ 252 richSign = (pe::RICH_SIGNATURE*) this->getContentAt(startOffset + toSearchSize, sizeof(pe::RICH_SIGNATURE));
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
+
+
@@ -551,7 +636,7 @@ Here is the call graph for this function:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
+
+
@@ -514,15 +532,82 @@ Here is the call graph for this function:
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@@ -319,7 +319,7 @@ Here is the call graph for this function: 378 } //else: content that is between the end of sections headers and the first virtual section is not mapped
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 429bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
-
-
-
-
-
-
-
-
-
-
-
-
-
- 444 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
- 450bool PEFile::moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addrType)
+
+
+
+
+
+
-
-
-
-
+
+
+
+
+
+
+ 465 Executable::addr_type dataDirAddrType = ddirWrapper->containsAddrType(id, DataDirWrapper::ADDRESS);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/_p_e_file_8h_source.html b/_p_e_file_8h_source.html index 1f8b5a86..0eea4d93 100644 --- a/_p_e_file_8h_source.html +++ b/_p_e_file_8h_source.html @@ -111,297 +111,365 @@ $(function() { codefold.init(0); }); - + -
-inlinevirtual
+pure virtual
485 bufsize_t roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
- 486 bufsize_t roundedVirtualEnd = buf_util::roundupToUnit(getMappedSize(Executable::RVA), getAlignment(Executable::RVA));
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
- 506 bufsize_t roundedRawEnd = buf_util::roundupToUnit(getMappedSize(Executable::RAW), getAlignment(Executable::RAW));
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
-
-
- 550 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
- 565 const offset_t peHdrsEnd = this->core.peSignatureOffset() + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + this->core.peNtHeadersSize();
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+ 571 const size_t size = (aType == Executable::RAW) ? sec->getMappedRawSize() : sec->getMappedVirtualSize();
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 586 const offset_t peHdrsEnd = this->core.peSignatureOffset() + sizeof(DWORD) + sizeof(IMAGE_FILE_HEADER) + this->core.peNtHeadersSize();
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
@@ -112,7 +114,29 @@ Classes
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
@@ -862,6 +886,7 @@ $(function() { codefold.init(0); });
+
@@ -886,85 +911,90 @@ $(function() { codefold.init(0); });
-
+
-
+
-
+
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
+
+
+
-
-
-
+
+
+
-
-
-
-
-
+
+
+
+
+
+
+
diff --git a/_p_e_file_8h.html b/_p_e_file_8h.html
index ee807243..c18ddceb 100644
--- a/_p_e_file_8h.html
+++ b/_p_e_file_8h.html
@@ -77,7 +77,8 @@ $(function() {
663 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
-
-
-
-
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -842,6 +865,7 @@ $(function() { codefold.init(0); });
+
684 ExportDirWrapper* exports = dynamic_cast<ExportDirWrapper*>(this->getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_EXPORT));
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Definition AbstractByteBuffer.h:32
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
Definition Executable.h:9
Definition ExeNodeWrapper.h:9
std::map< size_t, ExeElementWrapper * > wrappers
Definition MappedExe.h:27
Definition ImportDirWrapper.h:31
Definition LdConfigDirWrapper.h:6
Definition MappedExe.h:30
Definition OptHdrWrapper.h:6
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
Definition PEFile.h:41
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:272
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:648
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:659
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:292
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:307
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:577
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:632
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:413
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:429
Definition PEFile.h:45
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:326
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:669
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:680
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:308
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:323
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:598
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:653
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:433
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:301
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:450
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:114
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:478
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:499
Definition RelocDirWrapper.h:10
Definition ResourceDirWrapper.h:14
Definition ResourcesAlbum.h:27
Definition RichHdrWrapper.h:10
Definition SectHdrsWrapper.h:8
Definition SectHdrsWrapper.h:12
Definition SecurityDirWrapper.h:15
Definition TlsDirWrapper.h:10
Definition WatchedLocker.h:6
PEFile.h File Reference
@@ -103,6 +104,7 @@ $(function() {
+
#include "ClrDirWrapper.h"#include "CommonOrdinalsLookup.h"#include "rsrc/ResourcesAlbum.h"+
#include "../WatchedLocker.h"Go to the source code of this file.
| class | PEFile |
+Macros | |
| #define | PE_SHOW_LOCK false |
Macro Definition Documentation
+ +◆ PE_SHOW_LOCK
+ +diff --git a/_p_e_file_8h_source.html b/_p_e_file_8h_source.html index 1f8b5a86..0eea4d93 100644 --- a/_p_e_file_8h_source.html +++ b/_p_e_file_8h_source.html @@ -111,297 +111,365 @@ $(function() { codefold.init(0); }); - + -
-
-
-
-
-
-
-
+
+
+
+
+
diff --git a/class_mapped_exe.html b/class_mapped_exe.html index efa87f38..16b4e253 100644 --- a/class_mapped_exe.html +++ b/class_mapped_exe.html @@ -99,12 +99,12 @@ Collaboration diagram for MappedExe:
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-vaToRaw(offset_t va) Executable inlinevirtual VaToRva(offset_t va, bool autodetect=false) Executable virtual WR_NONE enum value ExeWrappersContainer wrap() MappedExe inlinevirtual wrap(AbstractByteBuffer *v_buf)=0 MappedExe protectedpure virtual wrappers ExeWrappersContainer protected wrap()=0 MappedExe pure virtual WRAPPERS enum name ExeWrappersContainer wrappersCount() ExeWrappersContainer inline ~AbstractByteBuffer() AbstractByteBuffer inlinevirtual ~Executable(void) Executable inlinevirtual ~ExeWrappersContainer(void) ExeWrappersContainer inlinevirtual ~MappedExe(void) MappedExe inlineprotectedvirtual wrappers ExeWrappersContainer protected wrappersCount() ExeWrappersContainer inline ~AbstractByteBuffer() AbstractByteBuffer inlinevirtual ~Executable(void) Executable inlinevirtual ~ExeWrappersContainer(void) ExeWrappersContainer inlinevirtual ~MappedExe(void) MappedExe inlineprotectedvirtual
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/class_mapped_exe-members.html b/class_mapped_exe-members.html
index bb6017ad..8fc3ab1c 100644
--- a/class_mapped_exe-members.html
+++ b/class_mapped_exe-members.html
@@ -153,15 +153,14 @@ $(function() {
54 };
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 58 };
70 virtual bufsize_t getAlignment(Executable::addr_type aType) const { return core.getAlignment(aType); }
- 71 virtual offset_t getImageBase(bool recalculate = false) { return core.getImageBase(recalculate); }
- 72 virtual offset_t getEntryPoint(Executable::addr_type addrType = Executable::RVA); // returns INVALID_ADDR if failed
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+ 68 virtual bufsize_t getAlignment(Executable::addr_type aType) const { return core.getAlignment(aType); }
+ 69 virtual offset_t getImageBase(bool recalculate = false) { return core.getImageBase(recalculate); }
+ 70 virtual offset_t getEntryPoint(Executable::addr_type addrType = Executable::RVA); // returns INVALID_ADDR if failed
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
void DOSExe::wrap
(
- AbstractByteBuffer * v_buf )
+ )
-protectedvirtual
+virtual
+
+
+
+
+
-
-
-
-
- 114 SectionHdrWrapper* getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-
+
+
-
+
-
-
+
+
+
-
-
-
-
-
-
-
- 135 bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType = Executable::RAW); //throws CustomException
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
-
- 131 SectionHdrWrapper* getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
+
+
+
+
-
-
-
@@ -574,7 +594,7 @@ Here is the call graph for this function: 151 return dynamic_cast<DelayImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DELAY_IMPORT));
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
160 virtual size_t getAllEntryPoints(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA)
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
-
-
-
+
+
+
-
+
-
+
-
-
-
-
-
+
+
+
+
+
+
+
@@ -506,7 +526,7 @@ Here is the call graph for this function: 185 bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType = Executable::RAW); //throws CustomException
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
-
- 201 return dynamic_cast<DelayImpDirWrapper*>(getWrapper(PEFile::WR_DIR_ENTRY + pe::DIR_DELAY_IMPORT));
+
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
diff --git a/_reloc_dir_wrapper_8h_source.html b/_reloc_dir_wrapper_8h_source.html
index 7318cc54..9e05edaf 100644
--- a/_reloc_dir_wrapper_8h_source.html
+++ b/_reloc_dir_wrapper_8h_source.html
@@ -230,7 +230,7 @@ $(function() { codefold.init(0); });
-
+
diff --git a/_resource_dir_wrapper_8cpp_source.html b/_resource_dir_wrapper_8cpp_source.html
index 430432a7..ff549b20 100644
--- a/_resource_dir_wrapper_8cpp_source.html
+++ b/_resource_dir_wrapper_8cpp_source.html
@@ -523,8 +523,8 @@ $(function() { codefold.init(0); });
-
-
+
+
diff --git a/_resource_dir_wrapper_8h_source.html b/_resource_dir_wrapper_8h_source.html
index 6dab8615..314b9378 100644
--- a/_resource_dir_wrapper_8h_source.html
+++ b/_resource_dir_wrapper_8h_source.html
@@ -237,7 +237,7 @@ $(function() { codefold.init(0); });
-
+
diff --git a/_rich_hdr_wrapper_8cpp_source.html b/_rich_hdr_wrapper_8cpp_source.html
index b3cdf6db..3ff016a6 100644
--- a/_rich_hdr_wrapper_8cpp_source.html
+++ b/_rich_hdr_wrapper_8cpp_source.html
@@ -673,8 +673,8 @@ $(function() { codefold.init(0); });
-
-
+
+
diff --git a/_rich_hdr_wrapper_8h_source.html b/_rich_hdr_wrapper_8h_source.html
index 89afe32d..9edd3059 100644
--- a/_rich_hdr_wrapper_8h_source.html
+++ b/_rich_hdr_wrapper_8h_source.html
@@ -152,7 +152,7 @@ $(function() { codefold.init(0); });
-
+
diff --git a/_sect_hdrs_wrapper_8cpp_source.html b/_sect_hdrs_wrapper_8cpp_source.html
index 0eb59e7f..5978a7e3 100644
--- a/_sect_hdrs_wrapper_8cpp_source.html
+++ b/_sect_hdrs_wrapper_8cpp_source.html
@@ -444,9 +444,9 @@ $(function() { codefold.init(0); });
-
+
-
+
@@ -491,8 +491,7 @@ $(function() { codefold.init(0); });
-
+
+
+
+
-
-
-
-
-
-
+
+
+
diff --git a/_p_e_node_wrapper_8h_source.html b/_p_e_node_wrapper_8h_source.html
index 9a9afe4e..f06a691a 100644
--- a/_p_e_node_wrapper_8h_source.html
+++ b/_p_e_node_wrapper_8h_source.html
@@ -137,7 +137,7 @@ $(function() { codefold.init(0); });
-
+
-
- 210 virtual size_t getAllEntryPoints(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA)
+
+
+
+
+
+
+
+
-
-
-
-
-
+
+
+
+
diff --git a/_p_e_node_wrapper_8cpp_source.html b/_p_e_node_wrapper_8cpp_source.html index 535d574c..31b117ef 100644 --- a/_p_e_node_wrapper_8cpp_source.html +++ b/_p_e_node_wrapper_8cpp_source.html @@ -118,7 +118,7 @@ $(function() { codefold.init(0); });
-
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
@@ -451,109 +521,119 @@ $(function() { codefold.init(0); });
-
-
-
-
-
+
+
+
+
+
-
-
+
+
-
-
+
+
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
@@ -420,6 +488,7 @@ $(function() { codefold.init(0); });
+
@@ -427,6 +496,7 @@ $(function() { codefold.init(0); });
+
+
+
+
+
+
+
+
+
-
-
- 253 size_t getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA);
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 301 SectionHdrWrapper* _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate = false, bool verbose = false)
+
+
+
+ 307 size_t getExportsMap(QMap<offset_t,QString> &entrypoints, Executable::addr_type aType = Executable::RVA);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Definition AbstractByteBuffer.h:32
Definition AbstractByteBuffer.h:79
Definition MappedExe.h:30
Definition OptHdrWrapper.h:6
Definition PECore.h:8
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:105
Definition PEFile.h:30
Definition PEFile.h:34
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
Definition PEFile.h:41
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:272
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:648
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:659
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:292
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:307
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:160
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:577
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:632
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:413
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:429
Definition PEFile.h:45
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:326
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:669
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:680
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:308
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:323
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:210
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:598
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:653
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:433
SectionHdrWrapper * _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:301
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:450
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:124
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:114
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:478
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:174
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:131
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:499
Definition ResourcesAlbum.h:27
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition ResourcesAlbum.cpp:105
Definition ResourcesAlbum.h:12
Definition SectHdrsWrapper.h:116
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
SectionHdrWrapper * getSecHdr(size_t index) const
Definition SectHdrsWrapper.h:153
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:141
Definition SectHdrsWrapper.h:8
Definition SectHdrsWrapper.h:120
SectionHdrWrapper * _getSecHdr(size_t index)
Definition SectHdrsWrapper.h:169
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:529
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:145
Definition SectHdrsWrapper.h:12
Definition WatchedLocker.h:6
diff --git a/_p_e_node_wrapper_8cpp_source.html b/_p_e_node_wrapper_8cpp_source.html index 535d574c..31b117ef 100644 --- a/_p_e_node_wrapper_8cpp_source.html +++ b/_p_e_node_wrapper_8cpp_source.html @@ -118,7 +118,7 @@ $(function() { codefold.init(0); });
Definition ExeNodeWrapper.h:9
Definition PEFile.h:41
Definition PEFile.h:45
Definition PENodeWrapper.h:25
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL)
Definition PENodeWrapper.cpp:11
Definition PEFile.h:41
Definition PEFile.h:45
Definition PENodeWrapper.h:25
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL)
Definition PENodeWrapper.cpp:11
Definition Executable.h:26
Definition PEFile.h:41
Definition PEFile.h:45
Definition RelocDirWrapper.h:39
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.cpp:181
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:200
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Definition PEFile.h:41
Definition PEFile.h:45
Definition ResourceDirWrapper.h:14
Definition PEFile.h:41
Definition PEFile.h:45
Definition PENodeWrapper.h:25
Definition ResourceDirWrapper.h:14
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:209
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:57
const QString RichHdr_ProdIdToVSversion(WORD prodId)
Definition RichHdrWrapper.cpp:231
Definition PENodeWrapper.h:9
Definition PEFile.h:41
Definition PEFile.h:45
Definition RichHdrWrapper.h:10
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
-
+
@@ -500,7 +499,6 @@ $(function() { codefold.init(0); });
-
@@ -533,17 +531,14 @@ $(function() { codefold.init(0); });
-
-
+
-
-
+
+
-
-
-
+
@@ -554,79 +549,76 @@ $(function() { codefold.init(0); });
-
+
-
-
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -477,7 +497,7 @@ Here is the call graph for this function:
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
-
+
+
+
+
+
@@ -634,118 +626,124 @@ $(function() { codefold.init(0); });
-
-
-
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
@@ -448,7 +468,7 @@ Here is the call graph for this function:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
@@ -93,7 +95,29 @@ Classes
+
+
diff --git a/_sect_hdrs_wrapper_8h_source.html b/_sect_hdrs_wrapper_8h_source.html index 59da44ef..4e5c4d4b 100644 --- a/_sect_hdrs_wrapper_8h_source.html +++ b/_sect_hdrs_wrapper_8h_source.html @@ -90,188 +90,205 @@ $(function() { codefold.init(0); }); -
+
+
+
+
+
-
-
-
524SectionHdrWrapper* SectHdrsWrapper::getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool recalculate, bool verbose)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
-
- 529SectionHdrWrapper* SectHdrsWrapper::getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool recalculate, bool verbose)
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
@@ -767,52 +765,46 @@ $(function() { codefold.init(0); });
-
-
-
-
-
-
-
+
+
+
+
+
+
+
-
-
+
-
+
-
-
-
-
-
+
+
+
-
-
-
-
-
-
-
-
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
-
+
@@ -822,11 +814,12 @@ $(function() { codefold.init(0); });
-
-
+
+
-
+
+
diff --git a/_sect_hdrs_wrapper_8h.html b/_sect_hdrs_wrapper_8h.html
index 906b454f..bf8d232c 100644
--- a/_sect_hdrs_wrapper_8h.html
+++ b/_sect_hdrs_wrapper_8h.html
@@ -77,13 +77,15 @@ $(function() {
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
+
+
virtual bufsize_t getContentSize()=0
bool isAreaEmpty(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:188
virtual bufsize_t getContentSize()
Definition ExeElementWrapper.h:20
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:290
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:68
size_t _getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:363
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:563
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:568
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
virtual bool loadNextEntry(size_t entryNum)
Definition SectHdrsWrapper.cpp:411
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:518
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
bool isMyEntryType(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:368
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:523
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:529
void addMapping(SectionHdrWrapper *sec)
Definition SectHdrsWrapper.cpp:426
Definition SectHdrsWrapper.h:8
Definition SectHdrsWrapper.h:12
static std::vector< DWORD > splitCharacteristics(DWORD characteristics)
Definition SectHdrsWrapper.cpp:42
bufsize_t getMappedVirtualSize()
Definition SectHdrsWrapper.cpp:297
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:154
offset_t getContentDeclaredOffset(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:193
static void initSecCharacter(std::map< DWORD, QString > &secHdrCharact)
Definition SectHdrsWrapper.cpp:26
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:131
bufsize_t getContentDeclaredSize(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:238
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:172
static QString getSecHdrAccessRightsDesc(DWORD characteristics)
Definition SectHdrsWrapper.cpp:13
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:183
Definition WatchedLocker.h:6
SectHdrsWrapper.h File Reference
Go to the source code of this file.
| class | SectHdrsWrapper |
+Macros | |
| #define | SEC_SHOW_LOCK false |
Macro Definition Documentation
+ +◆ SEC_SHOW_LOCK
+ +
+
+
+
+Definition at line 9 of file SectHdrsWrapper.h.
+ +diff --git a/_sect_hdrs_wrapper_8h_source.html b/_sect_hdrs_wrapper_8h_source.html index 59da44ef..4e5c4d4b 100644 --- a/_sect_hdrs_wrapper_8h_source.html +++ b/_sect_hdrs_wrapper_8h_source.html @@ -90,188 +90,205 @@ $(function() { codefold.init(0); }); -
-
-
-
-
-
-
-
-
-
-
-
-
-
@@ -421,7 +441,7 @@ Here is the call graph for this function:
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+ 35 };
-
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/class_d_o_s_exe.html b/class_d_o_s_exe.html index 097a420b..9bebb670 100644 --- a/class_d_o_s_exe.html +++ b/class_d_o_s_exe.html @@ -139,6 +139,8 @@ Public Member Functions virtual ~DOSExe () virtual void wrap () virtual offset_t rawToRva (offset_t raw) virtual offset_t rvaToRaw (offset_t rva) offset_t peSignatureOffset () 
Public Member Functions inherited from MappedExevirtual void wrap () virtual bool canResize (bufsize_t newSize) virtual bool resize (bufsize_t newSize) bufsize_t moduleSize () virtual void wrap (AbstractByteBuffer *v_buf) Protected Member Functions inherited from MappedExe MappedExe (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
+
+
+
+
+
+
+
+
+
+
+
+
+
-VaToRva(offset_t va, bool autodetect=false) Executable virtual WR_DOS_HDR enum value DOSExe WR_NONE enum value DOSExe wrap(AbstractByteBuffer *v_buf) DOSExe protectedvirtual MappedExe::wrap() MappedExe inlinevirtual wrappers ExeWrappersContainer protected WRAPPERS enum name DOSExe wrappersCount() ExeWrappersContainer inline ~AbstractByteBuffer() AbstractByteBuffer inlinevirtual ~DOSExe() DOSExe inlinevirtual ~Executable(void) Executable inlinevirtual ~ExeWrappersContainer(void) ExeWrappersContainer inlinevirtual ~MappedExe(void) MappedExe inlineprotectedvirtual wrap() DOSExe virtual wrappers ExeWrappersContainer protected WRAPPERS enum name DOSExe wrappersCount() ExeWrappersContainer inline ~AbstractByteBuffer() AbstractByteBuffer inlinevirtual ~DOSExe() DOSExe inlinevirtual ~Executable(void) Executable inlinevirtual ~ExeWrappersContainer(void) ExeWrappersContainer inlinevirtual ~MappedExe(void) MappedExe inlineprotectedvirtual
-
-
+
+
+
-
- 39 };
-
-
-
-
-
-
+
+
diff --git a/class_d_o_s_exe-members.html b/class_d_o_s_exe-members.html
index c3729a34..c960489b 100644
--- a/class_d_o_s_exe-members.html
+++ b/class_d_o_s_exe-members.html
@@ -161,16 +161,15 @@ $(function() {
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
- 64 offset_t getContentEndOffset(Executable::addr_type aType, bool roundup); //always useMapped startOFfset
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+ 68 offset_t getContentEndOffset(Executable::addr_type aType, bool roundup); //always useMapped startOFfset
+
+
+
+
+
-
+
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
-
-
-
+
+
+
+
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
-
+
+
+
+
+
-
-
-
-
-
-
+
+
-
-
-
-
-
-
+
+
+
+
+
+
-
-
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
diff --git a/_tls_dir_wrapper_8h_source.html b/_tls_dir_wrapper_8h_source.html
index ab23730c..c0601980 100644
--- a/_tls_dir_wrapper_8h_source.html
+++ b/_tls_dir_wrapper_8h_source.html
@@ -182,7 +182,7 @@ $(function() { codefold.init(0); });
-
+
diff --git a/_watched_locker_8h.html b/_watched_locker_8h.html
new file mode 100644
index 00000000..7a38535a
--- /dev/null
+++ b/_watched_locker_8h.html
@@ -0,0 +1,100 @@
+
+
+
+
+
+
+
+BearParser: parser/include/bearparser/WatchedLocker.h File Reference
+
+
+
+
+
+
+
+
+
+
+
+
+Generated by
1.10.0
+
+
+
diff --git a/_watched_locker_8h_source.html b/_watched_locker_8h_source.html
new file mode 100644
index 00000000..108d2d20
--- /dev/null
+++ b/_watched_locker_8h_source.html
@@ -0,0 +1,140 @@
+
+
+
+
+
+
+
+BearParser: parser/include/bearparser/WatchedLocker.h Source File
+
+
+
+
+
+
+
+
+
+
+
+
+Generated by 1.10.0
+
+
+
diff --git a/annotated.html b/annotated.html
index c6a41e99..0a1ecf13 100644
--- a/annotated.html
+++ b/annotated.html
@@ -157,7 +157,8 @@ $(function() {
CSecurityDirWrapper CTlsDirWrapper CTlsEntryWrapper CWrappedValue CWatchedLocker CWrappedValue
133 virtual void* getFieldPtr(size_t fieldId, size_t subField) { return getSubfieldPtr(fieldId, subField ); }
- 134 virtual bufsize_t getFieldSize(size_t fieldId, size_t subField) { return getSubfieldSize(fieldId, subField ); }
-
-
- 137 SectionHdrWrapper* getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose = false);
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/_security_dir_wrapper_8h_source.html b/_security_dir_wrapper_8h_source.html
index 552558d8..35acecf1 100644
--- a/_security_dir_wrapper_8h_source.html
+++ b/_security_dir_wrapper_8h_source.html
@@ -151,7 +151,7 @@ $(function() { codefold.init(0); });
137 virtual void* getFieldPtr(size_t fieldId, size_t subField) { return getSubfieldPtr(fieldId, subField ); }
+ 138 virtual bufsize_t getFieldSize(size_t fieldId, size_t subField) { return getSubfieldSize(fieldId, subField ); }
+
-
-
-
-
-
-
-
-
-
-
-
-
+
@@ -286,65 +305,60 @@ $(function() { codefold.init(0); });
-
+
-
-
-
-
-
+
+
+
+
+
+
-
+
-
-
-
-
-
-
+
+
+
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
-
-
+
+
-
-
+
+
-
-
+
+
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-
-
+
+
-
-
+
+
@@ -353,11 +367,12 @@ $(function() { codefold.init(0); });
-
-
+
+
-
+
+
141 SectionHdrWrapper* getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose = false);
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
-
-
-
-
-
+
+
+
+
+
+
+
@@ -279,6 +296,8 @@ $(function() { codefold.init(0); });
+
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
virtual bufsize_t getContentSize()
Definition ExeElementWrapper.h:20
Definition ExeNodeWrapper.h:9
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
virtual bufsize_t getSubfieldSize(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:47
Definition PEFile.h:41
Definition PEFile.h:45
Definition PENodeWrapper.h:25
Definition SectHdrsWrapper.h:116
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:134
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:563
Definition SectHdrsWrapper.h:120
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:138
SectionHdrWrapper * _getSecHdr(size_t index)
Definition SectHdrsWrapper.h:169
SectionHdrWrapper * getSecHdr(size_t index)
Definition SectHdrsWrapper.h:162
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:568
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
virtual bool loadNextEntry(size_t entryNum)
Definition SectHdrsWrapper.cpp:411
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:518
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
bool isMyEntryType(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:368
SectionHdrWrapper * getSecHdr(size_t index) const
Definition SectHdrsWrapper.h:153
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:523
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:529
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:133
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:141
void addMapping(SectionHdrWrapper *sec)
Definition SectHdrsWrapper.cpp:426
Definition SectHdrsWrapper.h:8
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:137
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:145
Definition SectHdrsWrapper.h:12
static std::vector< DWORD > splitCharacteristics(DWORD characteristics)
Definition SectHdrsWrapper.cpp:42
bufsize_t getMappedVirtualSize()
Definition SectHdrsWrapper.cpp:297
bool setCharacteristics(DWORD newCharacteristics)
Definition SectHdrsWrapper.h:77
SectionHdrWrapper(PEFile *pe, size_t sectionNumber)
Definition SectHdrsWrapper.h:37
bool setCharacteristics(DWORD newCharacteristics)
Definition SectHdrsWrapper.h:81
SectionHdrWrapper(PEFile *pe, size_t sectionNumber)
Definition SectHdrsWrapper.h:41
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:154
offset_t getContentDeclaredOffset(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:193
static void initSecCharacter(std::map< DWORD, QString > &secHdrCharact)
Definition SectHdrsWrapper.cpp:26
SectionHdrWrapper(PEFile *pe, IMAGE_SECTION_HEADER *v_header)
Definition SectHdrsWrapper.h:91
SectionHdrWrapper(PEFile *pe, IMAGE_SECTION_HEADER *v_header)
Definition SectHdrsWrapper.h:95
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:131
virtual size_t getSubFieldsCount()
Definition SectHdrsWrapper.h:54
virtual size_t getSubFieldsCount()
Definition SectHdrsWrapper.h:58
bufsize_t getContentDeclaredSize(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:238
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:172
static QString translateCharacteristics(DWORD charact)
Definition SectHdrsWrapper.cpp:57
static QString getSecHdrAccessRightsDesc(DWORD characteristics)
Definition SectHdrsWrapper.cpp:13
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:183
Definition WatchedLocker.h:6
Definition DataDirEntryWrapper.h:9
Definition PEFile.h:41
Definition PEFile.h:45
Definition SecurityDirWrapper.h:15
virtual QString translateFieldContent(size_t fieldId)
Definition SecurityDirWrapper.cpp:97
Definition Executable.h:26
Definition PEFile.h:41
Definition PEFile.h:45
Definition TlsDirWrapper.h:10
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+|
+ BearParser
+
+ Portable Executable parsing library (from PE-bear)
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Loading...
+Searching...
+No Matches
+
+
+
+
+WatchedLocker.h File Reference
+
+
+
+
+
+
+
+#include <iostream>+
#include <QtCore>+
Go to the source code of this file.
++Classes | |
| class | WatchedLocker |
+Generated by
1.10.0
+
+
+
diff --git a/_watched_locker_8h_source.html b/_watched_locker_8h_source.html
new file mode 100644
index 00000000..108d2d20
--- /dev/null
+++ b/_watched_locker_8h_source.html
@@ -0,0 +1,140 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+|
+ BearParser
+
+ Portable Executable parsing library (from PE-bear)
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Loading...
+Searching...
+No Matches
+
+
+
+WatchedLocker.h
+Go to the documentation of this file.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+Definition WatchedLocker.h:6
WatchedLocker(QMutex *mutex, bool show=false, const char *func=nullptr)
Definition WatchedLocker.h:8
+Generated by
1.10.0
+
+
+
diff --git a/annotated.html b/annotated.html
index c6a41e99..0a1ecf13 100644
--- a/annotated.html
+++ b/annotated.html
@@ -157,7 +157,8 @@ $(function() {
diff --git a/class_d_o_s_exe.html b/class_d_o_s_exe.html index 097a420b..9bebb670 100644 --- a/class_d_o_s_exe.html +++ b/class_d_o_s_exe.html @@ -139,6 +139,8 @@ Public Member Functions
Public Member Functions inherited from MappedExe Protected Member Functions inherited from MappedExeImplements Executable.
- +Implements Executable.
-Definition at line 45 of file DOSExe.h.
+Definition at line 46 of file DOSExe.h.
Here is the call graph for this function:
@@ -545,7 +565,7 @@ Here is the call graph for this function:
Implements Executable.
- +Implements Executable.
-Definition at line 36 of file DOSExe.h.
+Definition at line 37 of file DOSExe.h.
Here is the call graph for this function:
@@ -620,7 +640,7 @@ Here is the call graph for this function:
-
Definition at line 54 of file DOSExe.h.
+Definition at line 55 of file DOSExe.h.
Here is the call graph for this function:
@@ -700,7 +720,7 @@ Here is the call graph for this function:
Implements Executable.
-Definition at line 33 of file DOSExe.h.
+Definition at line 34 of file DOSExe.h.
Here is the call graph for this function:
@@ -741,7 +761,7 @@ Here is the call graph for this function:
Implements Executable.
-Definition at line 34 of file DOSExe.h.
+Definition at line 35 of file DOSExe.h.
Here is the call graph for this function:
@@ -757,8 +777,8 @@ Here is the call graph for this function:
◆ wrap()
+ +◆ wrap()
@@ -769,25 +789,25 @@ Here is the call graph for this function:
-
Implements MappedExe.
+Implements MappedExe.
Definition at line 39 of file DOSExe.cpp.
Here is the call graph for this function:
-
-
-
Reimplemented in ExportDirWrapper, LdConfigDirWrapper, ResourceEntryWrapper, and SectHdrsWrapper.
+Reimplemented in ExportDirWrapper, LdConfigDirWrapper, and ResourceEntryWrapper.
Definition at line 30 of file ExeNodeWrapper.cpp.
@@ -1314,8 +1314,6 @@ Here is the call graph for this function:
-
Reimplemented in SectHdrsWrapper.
-Definition at line 80 of file ExeNodeWrapper.cpp.
Here is the call graph for this function:
@@ -1382,7 +1380,7 @@ Here is the call graph for this function:
-getWrapper(size_t wrapperId) ExeWrappersContainer virtual getWrapperName(size_t id) ExeWrappersContainer WR_NONE enum value ExeWrappersContainer wrap(AbstractByteBuffer *v_buf)=0 ExeWrappersContainer protectedpure virtual wrap()=0 ExeWrappersContainer protectedpure virtual WRAPPERS enum name ExeWrappersContainer wrappers ExeWrappersContainer protected wrappersCount() ExeWrappersContainer inline
@@ -313,8 +313,8 @@ Here is the call graph for this function:
-
-
@@ -336,7 +336,7 @@ Here is the call graph for this function:
Reimplemented in DebugDirWrapper, DelayImpDirWrapper, ImportDirWrapper, BoundImpDirWrapper, DelayImpEntryWrapper, ImportEntryWrapper, and SectHdrsWrapper.
+Reimplemented in DebugDirWrapper, DelayImpDirWrapper, ImportDirWrapper, BoundImpDirWrapper, DelayImpEntryWrapper, and ImportEntryWrapper.
Definition at line 48 of file ExeNodeWrapper.h.
diff --git a/class_exe_wrappers_container-members.html b/class_exe_wrappers_container-members.html index b62b4f8b..73cddad9 100644 --- a/class_exe_wrappers_container-members.html +++ b/class_exe_wrappers_container-members.html @@ -84,7 +84,7 @@ $(function() {Protected Member Functions | |
| virtual void | wrap (AbstractByteBuffer *v_buf)=0 |
| virtual void | wrap ()=0 |
| void | clearWrappers () |
| virtual void ExeWrappersContainer::wrap | ( | -AbstractByteBuffer * | v_buf | ) | +) |
diff --git a/class_mapped_exe.html b/class_mapped_exe.html index efa87f38..16b4e253 100644 --- a/class_mapped_exe.html +++ b/class_mapped_exe.html @@ -99,12 +99,12 @@ Collaboration diagram for MappedExe:
Public Member Functions | |
| virtual void | wrap () |
| virtual bool | canResize (bufsize_t newSize) |
| virtual bool | resize (bufsize_t newSize) |
| virtual void | wrap ()=0 |
| Public Member Functions inherited from Executable | |
| bool | isBit64 () |
| virtual | ~MappedExe (void) |
| virtual void | wrap (AbstractByteBuffer *v_buf)=0 |
| Protected Member Functions inherited from Executable | |
| Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode) | |
-
-Reimplemented in PEFile.
+Implements ExeWrappersContainer.
-Definition at line 32 of file MappedExe.h.
-
-Here is the call graph for this function:
-
-
-
-
-
-◆ wrap() [2/2]
- -
-
diff --git a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.map b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.map
index fa1ea55c..58bd3f77 100644
--- a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.map
+++ b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.map
@@ -6,10 +6,9 @@
-
-
+
+
-
diff --git a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.md5 b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.md5
index e39ef47f..c42c8655 100644
--- a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.md5
+++ b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.md5
@@ -1 +1 @@
-2f5fef4f7653bce5ca9ccc714db73d00
\ No newline at end of file
+b216f162f2eb1300fa9bfb4238f5f87f
\ No newline at end of file
diff --git a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.png b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.png
index b15b09cf..5ce12178 100644
Binary files a/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.png and b/class_mapped_exe_a48c66e1ace578bb506e5beb7f1b661cc_cgraph.png differ
diff --git a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.map b/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.map
deleted file mode 100644
index 26f7ff10..00000000
--- a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.map
+++ /dev/null
@@ -1,4 +0,0 @@
-
diff --git a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.md5 b/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.md5
deleted file mode 100644
index 47a8d1bf..00000000
--- a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.md5
+++ /dev/null
@@ -1 +0,0 @@
-9a9cad4967e05b0f44a24fdb2a4c4621
\ No newline at end of file
diff --git a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.png b/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.png
deleted file mode 100644
index 7852c7c3..00000000
Binary files a/class_mapped_exe_a936dd29ca35e9234aa8b9c800034d28d_cgraph.png and /dev/null differ
diff --git a/class_p_e_core.html b/class_p_e_core.html
index a28ed941..d9dcb993 100644
--- a/class_p_e_core.html
+++ b/class_p_e_core.html
@@ -246,7 +246,7 @@ Here is the call graph for this function:
-
-
-
-
|
- -protectedpure virtual | -
-
-
Implements ExeWrappersContainer.
- - +
-
Definition at line 104 of file PECore.cpp.
+Definition at line 105 of file PECore.cpp.
-
Definition at line 141 of file PECore.cpp.
+Definition at line 142 of file PECore.cpp.
Here is the call graph for this function:
@@ -359,7 +359,7 @@ Here is the call graph for this function:
-
Definition at line 117 of file PECore.cpp.
+Definition at line 118 of file PECore.cpp.
Here is the call graph for this function:
@@ -425,7 +425,7 @@ Here is the call graph for this function:
-
Definition at line 129 of file PECore.cpp.
+Definition at line 130 of file PECore.cpp.
Here is the call graph for this function:
@@ -453,7 +453,7 @@ Here is the call graph for this function:
-
Definition at line 64 of file PECore.cpp.
+Definition at line 65 of file PECore.cpp.
Here is the call graph for this function:
@@ -484,7 +484,7 @@ Here is the call graph for this function:
-
Definition at line 83 of file PECore.cpp.
+Definition at line 84 of file PECore.cpp.
Here is the call graph for this function:
@@ -515,7 +515,7 @@ Here is the call graph for this function:
-
Definition at line 74 of file PECore.cpp.
+Definition at line 75 of file PECore.cpp.
Here is the call graph for this function:
@@ -605,7 +605,7 @@ Here is the call graph for this function:
-
diff --git a/class_p_e_file.html b/class_p_e_file.html index 24c93390..de571df8 100644 --- a/class_p_e_file.html +++ b/class_p_e_file.html @@ -181,10 +181,6 @@ Public Member Functions virtual void wrap () virtual offset_t rawToRva (offset_t raw) virtual offset_t rvaToRaw (offset_t rva) virtual bufsize_t getMappedSize (Executable::addr_type aType) virtual bufsize_t getAlignment (Executable::addr_type aType) const offset_t secHdrsOffset () const offset_t secHdrsEndOffset () const bufsize_t hdrsSize () offset_t getMinSecRVA () ResourcesAlbum * getResourcesAlbum () const pe::RICH_SIGNATURE * getRichHeaderSign () size_t hdrSectionsNum () const size_t getSectionsCount (bool useMapped=true) const exe_bits getHdrBitMode () SectionHdrWrapper * getSecHdr (size_t index) const offset_t getLastMapped (Executable::addr_type aType) virtual offset_t rawToRva (offset_t raw) virtual offset_t rvaToRaw (offset_t rva) offset_t getMinSecRVA () size_t getSectionsCount (bool useMapped=true) size_t getSecIndex (SectionHdrWrapper *sec) SectionHdrWrapper * getSecHdr (size_t index) SectionHdrWrapper * getSecHdrAtOffset (offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) size_t getSecIndex (SectionHdrWrapper *sec) const BYTE * getSecContent (SectionHdrWrapper *sec) bool clearContent (SectionHdrWrapper *sec) offset_t secHdrsEndOffset () ResourcesContainer * getResourcesOfType (pe::resource_type typeId) DataDirEntryWrapper * getDataDirEntry (pe::dir_entry eType) virtual size_t getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) offset_t getLastMapped (Executable::addr_type aType) bool hasDirectory (pe::dir_entry dirNum) bufsize_t getFileAlignment () const bufsize_t getSectionAlignment () const BYTE * getSecContent (SectionHdrWrapper *sec) void setImageSize (size_t newSize) SectionHdrWrapper * getEntrySection () bool clearContent (SectionHdrWrapper *sec) bool dumpSection (SectionHdrWrapper *sec, QString fileName) bool canResize (bufsize_t newSize) COUNT_WRAPPERS
Definition at line 91 of file PECore.cpp.
+Definition at line 92 of file PECore.cpp.
Here is the call graph for this function:
diff --git a/class_p_e_file-members.html b/class_p_e_file-members.html
index 61ced9f4..7988f42b 100644
--- a/class_p_e_file-members.html
+++ b/class_p_e_file-members.html
@@ -79,99 +79,107 @@ $(function() {
This is the complete list of members for PEFile, including all inherited members.
| _createSectionView(SectionHdrWrapper *sec) | PEFile | protected |
| AbstractByteBuffer() | AbstractByteBuffer | inline |
| addNewSection(QString name, bufsize_t size, bufsize_t v_size=0) | PEFile | |
| addr_type enum name | Executable | |
| album | PEFile | protected |
| bitMode | Executable | protected |
| BITS_16 enum value | Executable | |
| BITS_32 enum value | Executable | |
| BITS_64 enum value | Executable | |
| buf | Executable | protected |
| canAddNewSection() | PEFile | |
| canResize(bufsize_t newSize) | PEFile | inlinevirtual |
| clearContent(SectionHdrWrapper *sec) | PEFile | inline |
| clearWrappers() | PEFile | protectedvirtual |
| computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset) | PEFile | static |
| containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType) | Executable | virtual |
| core | PEFile | protected |
| COUNT_WRAPPERS enum value | PEFile | |
| createSectionView(size_t secNum) | PEFile | |
| dataDirEntries | PEFile | protected |
| detectAddrType(offset_t addr, Executable::addr_type hintType) | Executable | |
| dosHdrWrapper | PEFile | protected |
| dumpFragment(offset_t offset, bufsize_t size, QString fileName) | Executable | virtual |
| dumpSection(SectionHdrWrapper *sec, QString fileName) | PEFile | |
| exe_bits enum name | Executable | |
| Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | Executable | protected |
| ExeWrappersContainer() | ExeWrappersContainer | inline |
| extendLastSection(bufsize_t addedSize) | PEFile | |
| fHdr | PEFile | protected |
| fillContent(BYTE filling) | AbstractByteBuffer | |
| getAlignment(Executable::addr_type aType) const | PEFile | inlinevirtual |
| getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | inlinevirtual |
| getBitMode() | PEFile | inlinevirtual |
| getContent() | Executable | inlinevirtual |
| getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false) | Executable | virtual |
| getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentSize() | Executable | inlinevirtual |
| getDataDirectory() | PEFile | |
| getDataDirEntry(pe::dir_entry eType) | PEFile | |
| getDelayedImports() | PEFile | inline |
| getEntryPoint(Executable::addr_type addrType=Executable::RVA) | PEFile | virtual |
| getEntrySection() | PEFile | inline |
| getExports() | PEFile | inline |
| getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | protected |
| getFileAlignment() const | PEFile | inline |
| getFileBuffer() const | Executable | inline |
| getFileName() | Executable | |
| getFileSize() const | Executable | |
| getHdrBitMode() | PEFile | inline |
| getImageBase(bool recalculate=false) | PEFile | inlinevirtual |
| getImageSize() | Executable | inlinevirtual |
| getImports() | PEFile | inline |
| getLastMapped(Executable::addr_type aType) | PEFile | |
| getLastSection() | PEFile | |
| getMappedSize(Executable::addr_type aType) | PEFile | virtual |
| getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
| getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
| getMinSecRVA() | PEFile | |
| getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
| getOffset(void *ptr, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| getRawSize() const | Executable | inlinevirtual |
| getResourcesAlbum() const | PEFile | inline |
| getResourcesOfType(pe::resource_type typeId) | PEFile | inline |
| getRichHeaderBgn(pe::RICH_SIGNATURE *sign) | PEFile | |
| getRichHeaderSign() | PEFile | |
| getSecContent(SectionHdrWrapper *sec) | PEFile | inline |
| getSecHdr(size_t index) const | PEFile | inline |
| getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inline |
| getSecIndex(SectionHdrWrapper *sec) const | PEFile | inline |
| getSectionAlignment() const | PEFile | inline |
| getSectionsCount(bool useMapped=true) const | PEFile | |
| getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getWrapper(size_t wrapperId) | ExeWrappersContainer | virtual |
| getWrapperName(size_t id) | ExeWrappersContainer | |
| getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
| hasDirectory(pe::dir_entry dirNum) | PEFile | inline |
| hdrSectionsNum() const | PEFile | |
| hdrsSize() | PEFile | inline |
| initDirEntries() | PEFile | protected |
| intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isBit32(Executable *exe) | Executable | inlinestatic |
| isBit32() | Executable | inline |
| isBit64(Executable *exe) | Executable | inlinestatic |
| isBit64() | Executable | inline |
| isReproBuild() | PEFile | inline |
| isResized() | Executable | inlinevirtual |
| isTruncated() | Executable | inlinevirtual |
| isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
| isValidAddr(offset_t addr, addr_type addrType) | Executable | virtual |
| isValidVA(offset_t va) | Executable | inlinevirtual |
| _getLastMapped(Executable::addr_type aType) | PEFile | protected |
| _getSecHdr(size_t index) const | PEFile | inlineprotected |
| _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inlineprotected |
| _getSecIndex(SectionHdrWrapper *sec) const | PEFile | inlineprotected |
| _getSectionsCount(bool useMapped=true) const | PEFile | protected |
| _init(AbstractByteBuffer *v_buf) | PEFile | protected |
| _secHdrsEndOffset() | PEFile | inlineprotected |
| AbstractByteBuffer() | AbstractByteBuffer | inline |
| addNewSection(QString name, bufsize_t size, bufsize_t v_size=0) | PEFile | |
| addr_type enum name | Executable | |
| album | PEFile | protected |
| bitMode | Executable | protected |
| BITS_16 enum value | Executable | |
| BITS_32 enum value | Executable | |
| BITS_64 enum value | Executable | |
| buf | Executable | protected |
| canAddNewSection() | PEFile | |
| canResize(bufsize_t newSize) | PEFile | inlinevirtual |
| clearContent(SectionHdrWrapper *sec) | PEFile | inline |
| clearWrappers() | PEFile | protectedvirtual |
| computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset) | PEFile | static |
| containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType) | Executable | virtual |
| core | PEFile | protected |
| COUNT_WRAPPERS enum value | PEFile | |
| createSectionView(size_t secNum) | PEFile | |
| dataDirEntries | PEFile | protected |
| detectAddrType(offset_t addr, Executable::addr_type hintType) | Executable | |
| dosHdrWrapper | PEFile | protected |
| dumpFragment(offset_t offset, bufsize_t size, QString fileName) | Executable | virtual |
| dumpSection(SectionHdrWrapper *sec, QString fileName) | PEFile | |
| exe_bits enum name | Executable | |
| Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | Executable | protected |
| ExeWrappersContainer() | ExeWrappersContainer | inline |
| extendLastSection(bufsize_t addedSize) | PEFile | |
| fHdr | PEFile | protected |
| fillContent(BYTE filling) | AbstractByteBuffer | |
| getAlignment(Executable::addr_type aType) const | PEFile | inlinevirtual |
| getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | inlinevirtual |
| getBitMode() | PEFile | inlinevirtual |
| getContent() | Executable | inlinevirtual |
| getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false) | Executable | virtual |
| getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentSize() | Executable | inlinevirtual |
| getDataDirectory() | PEFile | |
| getDataDirEntry(pe::dir_entry eType) | PEFile | |
| getDelayedImports() | PEFile | inline |
| getEntryPoint(Executable::addr_type addrType=Executable::RVA) | PEFile | virtual |
| getEntrySection() | PEFile | inline |
| getExports() | PEFile | inline |
| getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | protected |
| getFileAlignment() const | PEFile | inline |
| getFileBuffer() const | Executable | inline |
| getFileName() | Executable | |
| getFileSize() const | Executable | |
| getHdrBitMode() | PEFile | inline |
| getImageBase(bool recalculate=false) | PEFile | inlinevirtual |
| getImageSize() | Executable | inlinevirtual |
| getImports() | PEFile | inline |
| getLastMapped(Executable::addr_type aType) | PEFile | inline |
| getLastSection() | PEFile | |
| getMappedSize(Executable::addr_type aType) | PEFile | virtual |
| getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
| getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
| getMinSecRVA() | PEFile | |
| getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
| getOffset(void *ptr, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| getRawSize() const | Executable | inlinevirtual |
| getResourcesAlbum() const | PEFile | inline |
| getResourcesOfType(pe::resource_type typeId) | PEFile | inline |
| getRichHeaderBgn(pe::RICH_SIGNATURE *sign) | PEFile | |
| getRichHeaderSign() | PEFile | |
| getSecContent(SectionHdrWrapper *sec) | PEFile | inline |
| getSecHdr(size_t index) | PEFile | inline |
| getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inline |
| getSecIndex(SectionHdrWrapper *sec) | PEFile | inline |
| getSectionAlignment() const | PEFile | inline |
| getSectionsCount(bool useMapped=true) | PEFile | inline |
| getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getWrapper(size_t wrapperId) | ExeWrappersContainer | virtual |
| getWrapperName(size_t id) | ExeWrappersContainer | |
| getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
| hasDirectory(pe::dir_entry dirNum) | PEFile | inline |
| hdrSectionsNum() const | PEFile | |
| hdrsSize() | PEFile | inline |
| initDirEntries() | PEFile | protected |
| intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isBit32(Executable *exe) | Executable | inlinestatic |
| isBit32() | Executable | inline |
| isBit64(Executable *exe) | Executable | inlinestatic |
| isBit64() | Executable | inline |
| isReproBuild() | PEFile | inline |
| isResized() | Executable | inlinevirtual |
| isTruncated() | Executable | inlinevirtual |
| isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
| isValidAddr(offset_t addr, addr_type addrType) | Executable | virtual |
| isValidVA(offset_t va) | Executable | inlinevirtual |
| m_peMutex | PEFile | protected |
| MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | MappedExe | inlineprotected |
| moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW) | PEFile | |
| NOT_ADDR enum value | Executable | |
| RVA enum value | Executable | |
| rvaToRaw(offset_t rva) | PEFile | virtual |
| rvaToVa(offset_t rva) | Executable | inlinevirtual |
| secHdrsEndOffset() const | PEFile | inline |
| secHdrsEndOffset() | PEFile | inline |
| secHdrsOffset() const | PEFile | inline |
| SectHdrsWrapper | PEFile | friend |
| sects | PEFile | protected |
| setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| setEntryPoint(offset_t entry, Executable::addr_type aType) | PEFile | |
| setHdrSectionsNum(size_t newNum) | PEFile | protected |
| setImageSize(size_t newSize) | PEFile | inline |
| setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
| setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
| setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
| setVirtualSize(bufsize_t newSize) | PEFile | protected |
| substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
| toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false) | Executable | virtual |
| unbindImports() | PEFile | |
| UNKNOWN enum value | Executable | |
| VA enum value | Executable | |
| vaToRaw(offset_t va) | Executable | inlinevirtual |
| VaToRva(offset_t va, bool autodetect=false) | Executable | virtual |
| WR_DATADIR enum value | PEFile | |
| WR_DIR_ENTRY enum value | PEFile | |
| WR_DIR_ENTRY_END enum value | PEFile | |
| WR_DOS_HDR enum value | PEFile | |
| WR_FILE_HDR enum value | PEFile | |
| WR_NONE enum value | PEFile | |
| WR_OPTIONAL_HDR enum value | PEFile | |
| WR_RICH_HDR enum value | PEFile | |
| WR_SECTIONS enum value | PEFile | |
| wrap() | PEFile | virtual |
| wrap(AbstractByteBuffer *v_buf) | PEFile | protectedvirtual |
| wrappers | ExeWrappersContainer | protected |
| SectionHdrWrapper | PEFile | friend |
| sects | PEFile | protected |
| setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| setEntryPoint(offset_t entry, Executable::addr_type aType) | PEFile | |
| setHdrSectionsNum(size_t newNum) | PEFile | protected |
| setImageSize(size_t newSize) | PEFile | inline |
| setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
| setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
| setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
| setVirtualSize(bufsize_t newSize) | PEFile | protected |
| substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
| toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false) | Executable | virtual |
| unbindImports() | PEFile | |
| UNKNOWN enum value | Executable | |
| VA enum value | Executable | |
| vaToRaw(offset_t va) | Executable | inlinevirtual |
| VaToRva(offset_t va, bool autodetect=false) | Executable | virtual |
| WR_DATADIR enum value | PEFile | |
| WR_DIR_ENTRY enum value | PEFile | |
| WR_DIR_ENTRY_END enum value | PEFile | |
| WR_DOS_HDR enum value | PEFile | |
| WR_FILE_HDR enum value | PEFile | |
| WR_NONE enum value | PEFile | |
| WR_OPTIONAL_HDR enum value | PEFile | |
| WR_RICH_HDR enum value | PEFile | |
| WR_SECTIONS enum value | PEFile | |
| wrap() | PEFile | virtual |
| wrapCore() | PEFile | protected |
| WRAPPERS enum name | PEFile | |
| wrappersCount() | ExeWrappersContainer | inline |
| ~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
| ~Executable(void) | Executable | inlinevirtual |
| ~ExeWrappersContainer(void) | ExeWrappersContainer | inlinevirtual |
| ~MappedExe(void) | MappedExe | inlineprotectedvirtual |
| ~PEFile() | PEFile | inlinevirtual |
| wrappers | ExeWrappersContainer | protected |
| wrappersCount() | ExeWrappersContainer | inline |
| ~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
| ~Executable(void) | Executable | inlinevirtual |
| ~ExeWrappersContainer(void) | ExeWrappersContainer | inlinevirtual |
| ~MappedExe(void) | MappedExe | inlineprotectedvirtual |
| ~PEFile() | PEFile | inlinevirtual |
diff --git a/class_p_e_file.html b/class_p_e_file.html index 24c93390..de571df8 100644 --- a/class_p_e_file.html +++ b/class_p_e_file.html @@ -181,10 +181,6 @@ Public Member Functions
Detailed Description
Member Enumeration Documentation
◆ WRAPPERS
@@ -487,7 +505,7 @@ Friends
-
Definition at line 59 of file PEFile.h.
+Definition at line 63 of file PEFile.h.
Here is the call graph for this function:
@@ -597,7 +682,7 @@ Here is the call graph for this function:
-
+Definition at line 648 of file PEFile.cpp.
+Definition at line 669 of file PEFile.cpp.
Here is the call graph for this function:
@@ -614,6 +699,518 @@ Here is the call graph for this function:
◆ _getLastMapped()
+ +
+
+
+
+
+
+
+
|
+ +protected | +
+
+
+Definition at line 554 of file PEFile.cpp.
+
+Here is the call graph for this function:
+
+
+
+
+
+◆ _getSecHdr()
+ +
+
+
+
+
+
+
+
+
|
+ +inlineprotected | +
◆ _getSecHdrAtOffset()
+ +
+
+
+
+
+
+
+
+
|
+ +inlineprotected | +
◆ _getSecIndex()
+ +
+
+
+
+
+
+
+
+
|
+ +inlineprotected | +
◆ _getSectionsCount()
+ +
+
+
+
+
+
+
+
|
+ +protected | +
+
+
+Definition at line 363 of file PEFile.cpp.
+
+Here is the call graph for this function:
+
+
+
+
+
+◆ _init()
+ +
+
+
+
+
+
+
+
|
+ +protected | +
+
+
+Definition at line 116 of file PEFile.cpp.
+
+Here is the call graph for this function:
+
+
+
+
+
+◆ _secHdrsEndOffset()
+ +
+
@@ -640,7 +1237,7 @@ Here is the call graph for this function:
+
+
+
+
|
+ +inlineprotected | +
-
Definition at line 478 of file PEFile.cpp.
+Definition at line 499 of file PEFile.cpp.
Here is the call graph for this function:
@@ -715,16 +1312,15 @@ Here is the call graph for this function:
-
-
+
+
-
-
+
+
-
@@ -760,7 +1356,7 @@ Here is the call graph for this function:
-
-
+
@@ -940,7 +1536,7 @@ Here is the call graph for this function:Definition at line 464 of file PEFile.cpp.
+Definition at line 485 of file PEFile.cpp.
Here is the call graph for this function:
@@ -837,7 +1433,7 @@ Here is the call graph for this function:
Reimplemented from MappedExe.
-Definition at line 228 of file PEFile.h.
+Definition at line 251 of file PEFile.h.
Here is the call graph for this function:
@@ -889,7 +1485,7 @@ Here is the call graph for this function:
-
Definition at line 114 of file PEFile.cpp.
+Definition at line 162 of file PEFile.cpp.
Here is the call graph for this function:
@@ -1021,7 +1617,7 @@ Here is the call graph for this function:
-
@@ -1071,32 +1667,32 @@ Here is the call graph for this function:Definition at line 419 of file PEFile.cpp.
+Definition at line 439 of file PEFile.cpp.
Here is the call graph for this function:
@@ -1030,23 +1626,23 @@ Here is the call graph for this function:
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
@@ -1117,100 +1713,99 @@ Here is the call graph for this function:
Definition at line 632 of file PEFile.cpp.
+Definition at line 653 of file PEFile.cpp.
Here is the call graph for this function:
-
@@ -1241,7 +1836,7 @@ Here is the call graph for this function:
Definition at line 577 of file PEFile.cpp.
+Definition at line 598 of file PEFile.cpp.
Here is the call graph for this function:
Implements Executable.
-Definition at line 70 of file PEFile.h.
+Definition at line 68 of file PEFile.h.
Here is the call graph for this function:
@@ -1286,7 +1881,7 @@ Here is the call graph for this function:
Reimplemented from Executable.
-Definition at line 160 of file PEFile.h.
+Definition at line 210 of file PEFile.h.
Here is the call graph for this function:
@@ -1427,7 +2022,7 @@ Here is the call graph for this function:
Reimplemented from Executable.
-Definition at line 74 of file PEFile.h.
+Definition at line 72 of file PEFile.h.
Here is the call graph for this function:
@@ -1458,7 +2053,7 @@ Here is the call graph for this function:
-
Definition at line 268 of file PEFile.cpp.
+Definition at line 284 of file PEFile.cpp.
Here is the call graph for this function:
@@ -1487,7 +2082,7 @@ Here is the call graph for this function:
-
Definition at line 413 of file PEFile.cpp.
+Definition at line 433 of file PEFile.cpp.
Here is the call graph for this function:
@@ -1524,7 +2119,7 @@ Here is the call graph for this function:
-
Definition at line 149 of file PEFile.h.
+Definition at line 199 of file PEFile.h.
Here is the call graph for this function:
@@ -1565,7 +2160,7 @@ Here is the call graph for this function:
Implements Executable.
-Definition at line 292 of file PEFile.cpp.
+Definition at line 308 of file PEFile.cpp.
Here is the call graph for this function:
@@ -1649,71 +2244,71 @@ Here is the call graph for this function:
