From e8509cc016cedd5ffcac33de57c76e7505845b30 Mon Sep 17 00:00:00 2001 From: hasherezade Date: Thu, 28 Dec 2023 17:08:48 +0000 Subject: [PATCH] deploy: dfc0560ee5f1bf2d839db1e5f3977aeaa5b886ec --- _abstract_byte_buffer_8cpp.html | 34 +- _abstract_byte_buffer_8cpp_source.html | 72 +- _abstract_byte_buffer_8h.html | 32 +- _abstract_byte_buffer_8h_source.html | 65 +- _bound_imp_dir_wrapper_8cpp.html | 10 +- _bound_imp_dir_wrapper_8cpp_source.html | 32 +- _bound_imp_dir_wrapper_8h.html | 10 +- _bound_imp_dir_wrapper_8h_source.html | 54 +- _byte_buffer_8cpp.html | 10 +- _byte_buffer_8cpp_source.html | 20 +- _byte_buffer_8h.html | 12 +- _byte_buffer_8h_source.html | 37 +- _clr_dir_wrapper_8cpp.html | 10 +- _clr_dir_wrapper_8cpp_source.html | 34 +- _clr_dir_wrapper_8h.html | 10 +- _clr_dir_wrapper_8h_source.html | 64 +- _common_ordinals_lookup_8h.html | 10 +- _common_ordinals_lookup_8h_source.html | 24 +- _common_ordinals_map_8h.html | 10 +- _common_ordinals_map_8h_source.html | 22 +- _common_ordinals_oleaut32_8h.html | 10 +- _common_ordinals_oleaut32_8h_source.html | 16 +- _common_ordinals_w_s2__32_8h.html | 10 +- _common_ordinals_w_s2__32_8h_source.html | 16 +- _custom_exception_8h.html | 12 +- _custom_exception_8h_source.html | 40 +- _d_o_s_exe_8cpp.html | 10 +- _d_o_s_exe_8cpp_source.html | 20 +- _d_o_s_exe_8h.html | 12 +- _d_o_s_exe_8h_source.html | 60 +- _data_dir_entry_wrapper_8cpp.html | 10 +- _data_dir_entry_wrapper_8cpp_source.html | 20 +- _data_dir_entry_wrapper_8h.html | 10 +- _data_dir_entry_wrapper_8h_source.html | 21 +- _data_dir_wrapper_8cpp.html | 10 +- _data_dir_wrapper_8cpp_source.html | 26 +- _data_dir_wrapper_8h.html | 10 +- _data_dir_wrapper_8h_source.html | 32 +- _debug_dir_wrapper_8cpp.html | 10 +- _debug_dir_wrapper_8cpp_source.html | 52 +- _debug_dir_wrapper_8h.html | 10 +- _debug_dir_wrapper_8h_source.html | 100 +- _delay_imp_dir_wrapper_8cpp.html | 10 +- _delay_imp_dir_wrapper_8cpp_source.html | 58 +- _delay_imp_dir_wrapper_8h.html | 10 +- _delay_imp_dir_wrapper_8h_source.html | 76 +- _dos_hdr_wrapper_8cpp.html | 10 +- _dos_hdr_wrapper_8cpp_source.html | 18 +- _dos_hdr_wrapper_8h.html | 10 +- _dos_hdr_wrapper_8h_source.html | 74 +- _exception_dir_wrapper_8cpp.html | 10 +- _exception_dir_wrapper_8cpp_source.html | 26 +- _exception_dir_wrapper_8h.html | 10 +- _exception_dir_wrapper_8h_source.html | 54 +- _exe_element_wrapper_8cpp.html | 10 +- _exe_element_wrapper_8cpp_source.html | 30 +- _exe_element_wrapper_8h.html | 12 +- _exe_element_wrapper_8h_source.html | 53 +- _exe_factory_8cpp.html | 10 +- _exe_factory_8cpp_source.html | 22 +- _exe_factory_8h.html | 10 +- _exe_factory_8h_source.html | 30 +- _exe_node_wrapper_8cpp.html | 10 +- _exe_node_wrapper_8cpp_source.html | 38 +- _exe_node_wrapper_8h.html | 12 +- _exe_node_wrapper_8h_source.html | 49 +- _executable_8cpp.html | 10 +- _executable_8cpp_source.html | 30 +- _executable_8h.html | 10 +- _executable_8h_source.html | 91 +- _export_dir_wrapper_8cpp.html | 14 +- _export_dir_wrapper_8cpp_source.html | 58 +- _export_dir_wrapper_8h.html | 10 +- _export_dir_wrapper_8h_source.html | 80 +- _file_buffer_8cpp.html | 10 +- _file_buffer_8cpp_source.html | 22 +- _file_buffer_8h.html | 14 +- _file_buffer_8h_source.html | 69 +- _file_hdr_wrapper_8cpp.html | 10 +- _file_hdr_wrapper_8cpp_source.html | 36 +- _file_hdr_wrapper_8h.html | 10 +- _file_hdr_wrapper_8h_source.html | 48 +- _formatter_8cpp.html | 10 +- _formatter_8cpp_source.html | 16 +- _formatter_8h.html | 10 +- _formatter_8h_source.html | 37 +- _import_base_dir_wrapper_8cpp.html | 10 +- _import_base_dir_wrapper_8cpp_source.html | 42 +- _import_base_dir_wrapper_8h.html | 10 +- _import_base_dir_wrapper_8h_source.html | 63 +- _import_dir_wrapper_8cpp.html | 10 +- _import_dir_wrapper_8cpp_source.html | 62 +- _import_dir_wrapper_8h.html | 10 +- _import_dir_wrapper_8h_source.html | 72 +- _ld_config_dir_wrapper_8cpp.html | 23 +- _ld_config_dir_wrapper_8cpp_source.html | 46 +- _ld_config_dir_wrapper_8h.html | 10 +- _ld_config_dir_wrapper_8h_source.html | 160 +-- _mapped_exe_8cpp.html | 10 +- _mapped_exe_8cpp_source.html | 18 +- _mapped_exe_8h.html | 10 +- _mapped_exe_8h_source.html | 40 +- _opt_hdr_wrapper_8cpp.html | 10 +- _opt_hdr_wrapper_8cpp_source.html | 46 +- _opt_hdr_wrapper_8h.html | 10 +- _opt_hdr_wrapper_8h_source.html | 102 +- _p_e_core_8cpp.html | 12 +- _p_e_core_8cpp_source.html | 38 +- _p_e_core_8h.html | 10 +- _p_e_core_8h_source.html | 37 +- _p_e_file_8cpp.html | 10 +- _p_e_file_8cpp_source.html | 78 +- _p_e_file_8h.html | 10 +- _p_e_file_8h_source.html | 119 +-- _p_e_node_wrapper_8cpp.html | 10 +- _p_e_node_wrapper_8cpp_source.html | 16 +- _p_e_node_wrapper_8h.html | 10 +- _p_e_node_wrapper_8h_source.html | 43 +- _reloc_dir_wrapper_8cpp.html | 10 +- _reloc_dir_wrapper_8cpp_source.html | 46 +- _reloc_dir_wrapper_8h.html | 10 +- _reloc_dir_wrapper_8h_source.html | 78 +- _resource_content_factory_8cpp.html | 10 +- _resource_content_factory_8cpp_source.html | 14 +- _resource_content_factory_8h.html | 10 +- _resource_content_factory_8h_source.html | 14 +- _resource_content_wrapper_8cpp.html | 10 +- _resource_content_wrapper_8cpp_source.html | 22 +- _resource_content_wrapper_8h.html | 10 +- _resource_content_wrapper_8h_source.html | 58 +- _resource_dir_wrapper_8cpp.html | 14 +- _resource_dir_wrapper_8cpp_source.html | 60 +- _resource_dir_wrapper_8h.html | 10 +- _resource_dir_wrapper_8h_source.html | 80 +- _resource_leaf_wrapper_8h.html | 10 +- _resource_leaf_wrapper_8h_source.html | 51 +- _resource_strings_wrapper_8cpp.html | 10 +- _resource_strings_wrapper_8cpp_source.html | 32 +- _resource_strings_wrapper_8h.html | 10 +- _resource_strings_wrapper_8h_source.html | 71 +- _resource_version_wrapper_8cpp.html | 10 +- _resource_version_wrapper_8cpp_source.html | 22 +- _resource_version_wrapper_8h.html | 10 +- _resource_version_wrapper_8h_source.html | 74 +- _resources_album_8cpp.html | 10 +- _resources_album_8cpp_source.html | 34 +- _resources_album_8h.html | 12 +- _resources_album_8h_source.html | 56 +- _rich_hdr_wrapper_8cpp.html | 33 +- _rich_hdr_wrapper_8cpp_source.html | 42 +- _rich_hdr_wrapper_8h.html | 20 +- _rich_hdr_wrapper_8h_source.html | 44 +- _sect_hdrs_wrapper_8cpp.html | 10 +- _sect_hdrs_wrapper_8cpp_source.html | 78 +- _sect_hdrs_wrapper_8h.html | 10 +- _sect_hdrs_wrapper_8h_source.html | 86 +- _security_dir_wrapper_8cpp.html | 10 +- _security_dir_wrapper_8cpp_source.html | 28 +- _security_dir_wrapper_8h.html | 10 +- _security_dir_wrapper_8h_source.html | 38 +- _tls_dir_wrapper_8cpp.html | 10 +- _tls_dir_wrapper_8cpp_source.html | 28 +- _tls_dir_wrapper_8h.html | 10 +- _tls_dir_wrapper_8h_source.html | 64 +- _util_8cpp.html | 17 +- _util_8cpp_source.html | 44 +- _util_8h.html | 37 +- _util_8h_source.html | 34 +- _wrapped_value_8cpp.html | 10 +- _wrapped_value_8cpp_source.html | 18 +- _wrapped_value_8h.html | 10 +- _wrapped_value_8h_source.html | 44 +- annotated.html | 10 +- bearparser_8h.html | 12 +- bearparser_8h_source.html | 12 +- class_abstract_byte_buffer-members.html | 14 +- class_abstract_byte_buffer.html | 320 ++---- ...b2b8f6c4056609a33cef548e848e7a4_cgraph.map | 0 ...b2b8f6c4056609a33cef548e848e7a4_cgraph.md5 | 0 ...b2b8f6c4056609a33cef548e848e7a4_cgraph.png | Bin ...42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.map | 0 ...42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.md5 | 0 ...42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.png | Bin class_abstract_file_buffer-members.html | 10 +- class_abstract_file_buffer.html | 81 +- class_abstract_formatter-members.html | 10 +- class_abstract_formatter.html | 26 +- class_bound_entry_wrapper-members.html | 14 +- class_bound_entry_wrapper.html | 110 +-- class_bound_imp_dir_wrapper-members.html | 14 +- class_bound_imp_dir_wrapper.html | 126 +-- class_buffer_exception-members.html | 10 +- class_buffer_exception.html | 21 +- class_buffer_view-members.html | 14 +- class_buffer_view.html | 60 +- class_byte_buffer-members.html | 14 +- class_byte_buffer.html | 112 +-- class_clr_dir_wrapper-members.html | 14 +- class_clr_dir_wrapper.html | 169 ++-- class_common_ordinals_lookup-members.html | 10 +- class_common_ordinals_lookup.html | 37 +- class_common_ordinals_map-members.html | 10 +- class_common_ordinals_map.html | 23 +- class_common_ordinals_oleaut32-members.html | 10 +- class_common_ordinals_oleaut32.html | 18 +- class_common_ordinals_w_s2__32-members.html | 10 +- class_common_ordinals_w_s2__32.html | 18 +- class_custom_exception-members.html | 10 +- class_custom_exception.html | 64 +- class_d_o_s_exe-members.html | 14 +- class_d_o_s_exe.html | 116 ++- class_d_o_s_exe_builder-members.html | 10 +- class_d_o_s_exe_builder.html | 30 +- class_data_dir_entry_wrapper-members.html | 14 +- class_data_dir_entry_wrapper.html | 72 +- class_data_dir_wrapper-members.html | 14 +- class_data_dir_wrapper.html | 115 +-- ...s_debug_dir_c_v_entry_wrapper-members.html | 14 +- class_debug_dir_c_v_entry_wrapper.html | 127 +-- class_debug_dir_entry_wrapper-members.html | 14 +- class_debug_dir_entry_wrapper.html | 167 ++-- class_debug_dir_wrapper-members.html | 14 +- class_debug_dir_wrapper.html | 129 +-- class_delay_imp_dir_wrapper-members.html | 14 +- class_delay_imp_dir_wrapper.html | 97 +- class_delay_imp_entry_wrapper-members.html | 14 +- class_delay_imp_entry_wrapper.html | 150 ++- class_delay_imp_func_wrapper-members.html | 14 +- class_delay_imp_func_wrapper.html | 152 ++- class_dos_hdr_wrapper-members.html | 14 +- class_dos_hdr_wrapper.html | 126 ++- class_exception_dir_wrapper-members.html | 14 +- class_exception_dir_wrapper.html | 106 +- class_exception_entry_wrapper-members.html | 14 +- class_exception_entry_wrapper.html | 119 +-- class_exe_builder-members.html | 10 +- class_exe_builder.html | 32 +- class_exe_element_wrapper-members.html | 14 +- class_exe_element_wrapper.html | 267 ++--- class_exe_exception-members.html | 10 +- class_exe_exception.html | 21 +- class_exe_factory-members.html | 10 +- class_exe_factory.html | 57 +- class_exe_factory_exception-members.html | 10 +- class_exe_factory_exception.html | 21 +- class_exe_node_wrapper-members.html | 14 +- class_exe_node_wrapper.html | 219 ++-- class_exe_wrappers_container-members.html | 10 +- class_exe_wrappers_container.html | 50 +- class_executable-members.html | 14 +- class_executable.html | 329 +++---- class_export_dir_wrapper-members.html | 14 +- class_export_dir_wrapper.html | 158 ++- class_export_entry_wrapper-members.html | 14 +- class_export_entry_wrapper.html | 156 ++- class_file_buffer-members.html | 14 +- class_file_buffer.html | 79 +- class_file_buffer_exception-members.html | 10 +- class_file_buffer_exception.html | 23 +- class_file_hdr_wrapper-members.html | 14 +- class_file_hdr_wrapper.html | 142 ++- class_file_view-members.html | 14 +- class_file_view.html | 76 +- class_formatter-members.html | 10 +- class_formatter.html | 49 +- class_hex_formatter-members.html | 10 +- class_hex_formatter.html | 23 +- class_import_base_dir_wrapper-members.html | 14 +- class_import_base_dir_wrapper.html | 172 ++-- class_import_base_entry_wrapper-members.html | 14 +- class_import_base_entry_wrapper.html | 83 +- class_import_base_func_wrapper-members.html | 14 +- class_import_base_func_wrapper.html | 92 +- class_import_dir_wrapper-members.html | 14 +- class_import_dir_wrapper.html | 84 +- class_import_entry_wrapper-members.html | 14 +- class_import_entry_wrapper.html | 150 ++- class_imported_func_wrapper-members.html | 14 +- class_imported_func_wrapper.html | 168 ++-- class_ld_config_dir_wrapper-members.html | 14 +- class_ld_config_dir_wrapper.html | 277 +++--- class_ld_config_entry_wrapper-members.html | 14 +- class_ld_config_entry_wrapper.html | 123 +-- class_mapped_exe-members.html | 14 +- class_mapped_exe.html | 77 +- class_opt_hdr_wrapper-members.html | 14 +- class_opt_hdr_wrapper.html | 239 ++--- class_p_e_core-members.html | 10 +- class_p_e_core.html | 94 +- class_p_e_element_wrapper-members.html | 14 +- class_p_e_element_wrapper.html | 45 +- class_p_e_file-members.html | 14 +- class_p_e_file.html | 444 ++++----- class_p_e_file_builder-members.html | 10 +- class_p_e_file_builder.html | 30 +- class_p_e_node_wrapper-members.html | 14 +- class_p_e_node_wrapper.html | 81 +- class_parser_exception-members.html | 10 +- class_parser_exception.html | 21 +- class_reloc_block_wrapper-members.html | 14 +- class_reloc_block_wrapper.html | 140 ++- class_reloc_dir_wrapper-members.html | 14 +- class_reloc_dir_wrapper.html | 119 +-- class_reloc_entry_wrapper-members.html | 14 +- class_reloc_entry_wrapper.html | 129 +-- class_reource_h_t_m_l_wrapper-members.html | 14 +- class_reource_h_t_m_l_wrapper.html | 70 +- class_reource_manifest_wrapper-members.html | 14 +- class_reource_manifest_wrapper.html | 70 +- class_res_string-members.html | 14 +- class_res_string.html | 141 ++- class_resource_content_factory-members.html | 10 +- class_resource_content_factory.html | 23 +- class_resource_content_wrapper-members.html | 14 +- class_resource_content_wrapper.html | 148 ++- class_resource_dir_wrapper-members.html | 14 +- class_resource_dir_wrapper.html | 157 ++- class_resource_entry_wrapper-members.html | 14 +- class_resource_entry_wrapper.html | 178 ++-- class_resource_leaf_wrapper-members.html | 14 +- class_resource_leaf_wrapper.html | 129 +-- class_resource_strings_wrapper-members.html | 14 +- class_resource_strings_wrapper.html | 137 +-- class_resource_version_wrapper-members.html | 14 +- class_resource_version_wrapper.html | 160 ++- class_resources_album-members.html | 10 +- class_resources_album.html | 109 +- class_resources_container-members.html | 10 +- class_resources_container.html | 38 +- class_rich_hdr_wrapper-members.html | 14 +- class_rich_hdr_wrapper.html | 147 ++- class_sect_hdrs_wrapper-members.html | 14 +- class_sect_hdrs_wrapper.html | 168 ++-- class_section_hdr_wrapper-members.html | 14 +- class_section_hdr_wrapper.html | 270 ++--- class_security_dir_wrapper-members.html | 14 +- class_security_dir_wrapper.html | 134 ++- class_tls_dir_wrapper-members.html | 14 +- class_tls_dir_wrapper.html | 124 ++- class_tls_entry_wrapper-members.html | 14 +- class_tls_entry_wrapper.html | 109 +- class_wrapped_value-members.html | 10 +- class_wrapped_value.html | 81 +- classes.html | 10 +- clipboard.js | 61 ++ cookie.js | 58 ++ core_8h.html | 10 +- core_8h_source.html | 12 +- dir_000000_000004.html | 10 +- dir_000003_000001.html | 10 +- dir_000004_000002.html | 10 +- dir_000004_000006.html | 10 +- dir_000005_000001.html | 10 +- dir_000007_000001.html | 10 +- dir_34d82ae88b217b68a1956692d3713215.html | 10 +- dir_4561956d067eca565361a6c170f6be44.html | 10 +- dir_4a981a2c437aae818192c59915bbaa01.html | 10 +- dir_572890c148f68441e050f6560d78312b.html | 10 +- dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html | 10 +- dir_91d1d07216ef6e2054337842b728042c.html | 10 +- dir_993b4b96b9d24e1e5416bf28e31c7e44.html | 10 +- dir_adf887ac753f7e9996998b0bcae7ad69.html | 10 +- doxygen.css | 252 ++++- doxygen_crawl.html | 535 ++++++++++ dynsections.js | 324 +++--- files.html | 28 +- functions.html | 10 +- functions_a.html | 10 +- functions_b.html | 10 +- functions_c.html | 10 +- functions_d.html | 10 +- functions_e.html | 10 +- functions_enum.html | 10 +- functions_eval.html | 10 +- functions_eval_b.html | 10 +- functions_eval_c.html | 10 +- functions_eval_d.html | 10 +- functions_eval_e.html | 10 +- functions_eval_f.html | 10 +- functions_eval_g.html | 10 +- functions_eval_h.html | 10 +- functions_eval_i.html | 10 +- functions_eval_l.html | 10 +- functions_eval_m.html | 10 +- functions_eval_n.html | 10 +- functions_eval_o.html | 10 +- functions_eval_p.html | 10 +- functions_eval_r.html | 10 +- functions_eval_s.html | 10 +- functions_eval_t.html | 10 +- functions_eval_u.html | 10 +- functions_eval_v.html | 10 +- functions_eval_w.html | 10 +- functions_eval_z.html | 10 +- functions_f.html | 10 +- functions_func.html | 10 +- functions_func_a.html | 10 +- functions_func_b.html | 10 +- functions_func_c.html | 10 +- functions_func_d.html | 10 +- functions_func_e.html | 10 +- functions_func_f.html | 10 +- functions_func_g.html | 14 +- functions_func_h.html | 10 +- functions_func_i.html | 10 +- functions_func_l.html | 10 +- functions_func_m.html | 10 +- functions_func_n.html | 10 +- functions_func_o.html | 10 +- functions_func_p.html | 10 +- functions_func_r.html | 10 +- functions_func_s.html | 10 +- functions_func_t.html | 10 +- functions_func_u.html | 10 +- functions_func_v.html | 10 +- functions_func_w.html | 10 +- functions_func_~.html | 10 +- functions_g.html | 14 +- functions_h.html | 10 +- functions_i.html | 10 +- functions_l.html | 10 +- functions_m.html | 10 +- functions_n.html | 10 +- functions_o.html | 10 +- functions_p.html | 10 +- functions_r.html | 10 +- functions_rela.html | 10 +- functions_s.html | 10 +- functions_t.html | 10 +- functions_u.html | 10 +- functions_v.html | 10 +- functions_vars.html | 10 +- functions_w.html | 10 +- functions_z.html | 10 +- functions_~.html | 10 +- globals.html | 10 +- globals_defs.html | 10 +- globals_func.html | 10 +- globals_type.html | 10 +- globals_vars.html | 10 +- graph_legend.html | 10 +- hierarchy.html | 54 +- index.html | 11 +- inherits.html | 10 +- menu.js | 34 +- namespace_logger.html | 36 +- namespacebuf__util.html | 23 +- namespaceimports__util.html | 23 +- namespacemembers.html | 10 +- namespacemembers_enum.html | 10 +- namespacemembers_eval.html | 10 +- namespacemembers_func.html | 10 +- namespacepe__util.html | 193 +--- namespaces.html | 10 +- namespaceutil.html | 15 +- pe_8h.html | 10 +- pe_8h_source.html | 12 +- pe__rsrc_8h.html | 10 +- pe__rsrc_8h_source.html | 12 +- search/all_1.js | 10 +- search/all_10.js | 63 +- search/all_11.js | 16 +- search/all_14.js | 15 +- search/all_2.js | 12 +- search/all_3.js | 32 +- search/all_4.js | 44 +- search/all_5.js | 24 +- search/all_6.js | 22 +- search/all_7.js | 94 +- search/all_8.js | 6 +- search/all_9.js | 30 +- search/all_a.js | 6 +- search/all_b.js | 10 +- search/all_c.js | 27 +- search/all_d.js | 6 +- search/all_e.js | 20 +- search/all_f.js | 46 +- search/enums_3.js | 2 +- search/enums_6.js | 2 +- search/enums_9.js | 2 +- search/enumvalues_10.js | 4 +- search/enumvalues_13.js | 6 +- search/enumvalues_2.js | 8 +- search/enumvalues_3.js | 2 +- search/enumvalues_4.js | 2 +- search/enumvalues_5.js | 6 +- search/enumvalues_8.js | 2 +- search/enumvalues_a.js | 6 +- search/enumvalues_b.js | 6 +- search/enumvalues_c.js | 2 +- search/enumvalues_f.js | 4 +- search/functions_1.js | 4 +- search/functions_10.js | 10 +- search/functions_11.js | 8 +- search/functions_14.js | 4 +- search/functions_2.js | 2 +- search/functions_3.js | 18 +- search/functions_5.js | 2 +- search/functions_6.js | 2 +- search/functions_7.js | 94 +- search/functions_8.js | 4 +- search/functions_9.js | 14 +- search/functions_a.js | 2 +- search/functions_c.js | 2 +- search/functions_e.js | 10 +- search/functions_f.js | 10 +- search/related_3.js | 4 +- search/related_5.js | 2 +- search/related_6.js | 2 +- search/search.js | 932 ++++++++---------- search/variables_3.js | 2 +- search/variables_5.js | 2 +- search/variables_6.js | 2 +- search/variables_8.js | 2 +- tabs.css | 2 +- 515 files changed, 9824 insertions(+), 10052 deletions(-) rename class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.map => class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.map (100%) rename class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.md5 => class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.md5 (100%) rename class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.png => class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.png (100%) rename class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.map => class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.map (100%) rename class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.md5 => class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.md5 (100%) rename class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.png => class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.png (100%) create mode 100644 clipboard.js create mode 100644 cookie.js create mode 100644 doxygen_crawl.html diff --git a/_abstract_byte_buffer_8cpp.html b/_abstract_byte_buffer_8cpp.html index 8b53bca5..65244e8e 100644 --- a/_abstract_byte_buffer_8cpp.html +++ b/_abstract_byte_buffer_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/AbstractByteBuffer.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -86,10 +88,10 @@ $(function() {

Functions

template<typename INT_TYPE > -INT_TYPE _getNumValue (void *ptr) +INT_TYPE _getNumValue (void *ptr)   -template<typename INT_TYPE > -bool _setNumValue (void *ptr, INT_TYPE nVal) +template<typename INT_TYPE > +bool _setNumValue (void *ptr, INT_TYPE nVal)  

Function Documentation

@@ -104,8 +106,7 @@ template<typename INT_TYPE > INT_TYPE _getNumValue ( - void *  - ptr) + void * ptr) @@ -121,24 +122,17 @@ template<typename INT_TYPE >
-template<typename INT_TYPE >
+template<typename INT_TYPE >
- + - - + - - - - - - - +
bool _setNumValue bool _setNumValue (void * ptr, void * ptr,
INT_TYPE nVal 
)INT_TYPE nVal )
@@ -160,7 +154,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_abstract_byte_buffer_8cpp_source.html b/_abstract_byte_buffer_8cpp_source.html index a83184e1..84583b04 100644 --- a/_abstract_byte_buffer_8cpp_source.html +++ b/_abstract_byte_buffer_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/AbstractByteBuffer.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -250,14 +252,14 @@ $(document).ready(function() { init_codefold(0); });
149
-
150QString AbstractByteBuffer::getStringValue(offset_t rawOffset, bufsize_t size)
+
150QString AbstractByteBuffer::getStringValue(offset_t rawOffset, bufsize_t size, bool acceptNonTerminated)
151{
152 if (size == BUFSIZE_MAX) {
153 size = this->getContentSize() - rawOffset;
154 }
155 char *ptr = (char*) getContentAt(rawOffset, size);
156 if (!ptr) return "";
-
157 size_t asciiLen = pe_util::getAsciiLen(ptr, size);
+
157 size_t asciiLen = pe_util::getAsciiLen(ptr, size, acceptNonTerminated);
158
159 return QString::fromUtf8(ptr, static_cast<int>(asciiLen));
160}
@@ -278,7 +280,7 @@ $(document).ready(function() { init_codefold(0); });
173
-
174QString AbstractByteBuffer::getWAsciiStringValue(offset_t rawOffset, bufsize_t len)
+
174QString AbstractByteBuffer::getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated)
175{
176 const bufsize_t unitSize = sizeof(WORD);
177 bufsize_t size = unitSize;
@@ -288,7 +290,7 @@ $(document).ready(function() { init_codefold(0); });
181 WORD* ptr = (WORD*) getContentAt(rawOffset, size);
182 if (!ptr) return "";
183
-
184 size_t asciiLen = pe_util::getAsciiLenW(ptr, len);
+
184 size_t asciiLen = pe_util::getAsciiLenW(ptr, len, acceptNonTerminated);
185 return QString::fromUtf16(ptr, static_cast<int>(asciiLen));
186}
@@ -573,8 +575,8 @@ $(document).ready(function() { init_codefold(0); });
438 return this->parent->getContentAt(offset, getContentSize());
439}
-
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
_setNumValue
bool _setNumValue(void *ptr, INT_TYPE nVal)
Definition AbstractByteBuffer.cpp:319
+
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
+
_setNumValue
bool _setNumValue(void *ptr, INT_TYPE nVal)
Definition AbstractByteBuffer.cpp:319
AbstractByteBuffer.h
BUFSIZE_MAX
const bufsize_t BUFSIZE_MAX
Definition AbstractByteBuffer.h:15
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
@@ -582,44 +584,44 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
AbstractByteBuffer::getContentSize
virtual bufsize_t getContentSize()=0
-
AbstractByteBuffer::getMaxSizeFromOffset
bufsize_t getMaxSizeFromOffset(offset_t startOffset)
Definition AbstractByteBuffer.cpp:87
-
AbstractByteBuffer::intersectsBlock
bool intersectsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:257
-
AbstractByteBuffer::getContentAtPtr
virtual BYTE * getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:99
-
AbstractByteBuffer::getStringValue
QString getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
Definition AbstractByteBuffer.cpp:150
+
AbstractByteBuffer::getMaxSizeFromOffset
bufsize_t getMaxSizeFromOffset(offset_t startOffset)
Definition AbstractByteBuffer.cpp:87
+
AbstractByteBuffer::intersectsBlock
bool intersectsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:257
+
AbstractByteBuffer::getStringValue
QString getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
Definition AbstractByteBuffer.cpp:150
+
AbstractByteBuffer::getContentAtPtr
virtual BYTE * getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:99
AbstractByteBuffer::getContent
virtual BYTE * getContent()=0
-
AbstractByteBuffer::setTextValue
bool setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0)
Definition AbstractByteBuffer.cpp:362
-
AbstractByteBuffer::setNumValue
bool setNumValue(offset_t offset, bufsize_t size, uint64_t newVal)
Definition AbstractByteBuffer.cpp:327
-
AbstractByteBuffer::setBufferedValue
virtual bool setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:107
-
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
-
AbstractByteBuffer::substFragmentByFile
offset_t substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn)
Definition AbstractByteBuffer.cpp:395
-
AbstractByteBuffer::pasteBuffer
bool pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
Definition AbstractByteBuffer.cpp:210
-
AbstractByteBuffer::setStringValue
bool setStringValue(offset_t rawOffset, QString newText)
Definition AbstractByteBuffer.cpp:135
-
AbstractByteBuffer::getNumValue
uint64_t getNumValue(offset_t offset, bufsize_t size, bool *isOk)
Definition AbstractByteBuffer.cpp:297
-
AbstractByteBuffer::containsBlock
bool containsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:237
-
AbstractByteBuffer::operator[]
BYTE operator[](size_t idx)
Definition AbstractByteBuffer.cpp:26
-
AbstractByteBuffer::isValid
static bool isValid(AbstractByteBuffer *buf)
Definition AbstractByteBuffer.cpp:16
-
AbstractByteBuffer::getWStringValue
QString getWStringValue(offset_t rawOffset, bufsize_t len)
Definition AbstractByteBuffer.cpp:162
-
AbstractByteBuffer::getWAsciiStringValue
QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len)
Definition AbstractByteBuffer.cpp:174
-
AbstractByteBuffer::isAreaEmpty
bool isAreaEmpty(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:188
-
AbstractByteBuffer::getOffset
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
-
AbstractByteBuffer::fillContent
bool fillContent(BYTE filling)
Definition AbstractByteBuffer.cpp:199
+
AbstractByteBuffer::setTextValue
bool setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0)
Definition AbstractByteBuffer.cpp:362
+
AbstractByteBuffer::setNumValue
bool setNumValue(offset_t offset, bufsize_t size, uint64_t newVal)
Definition AbstractByteBuffer.cpp:327
+
AbstractByteBuffer::setBufferedValue
virtual bool setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:107
+
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
+
AbstractByteBuffer::substFragmentByFile
offset_t substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn)
Definition AbstractByteBuffer.cpp:395
+
AbstractByteBuffer::pasteBuffer
bool pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
Definition AbstractByteBuffer.cpp:210
+
AbstractByteBuffer::setStringValue
bool setStringValue(offset_t rawOffset, QString newText)
Definition AbstractByteBuffer.cpp:135
+
AbstractByteBuffer::getNumValue
uint64_t getNumValue(offset_t offset, bufsize_t size, bool *isOk)
Definition AbstractByteBuffer.cpp:297
+
AbstractByteBuffer::containsBlock
bool containsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:237
+
AbstractByteBuffer::operator[]
BYTE operator[](size_t idx)
Definition AbstractByteBuffer.cpp:26
+
AbstractByteBuffer::isValid
static bool isValid(AbstractByteBuffer *buf)
Definition AbstractByteBuffer.cpp:16
+
AbstractByteBuffer::getWStringValue
QString getWStringValue(offset_t rawOffset, bufsize_t len)
Definition AbstractByteBuffer.cpp:162
+
AbstractByteBuffer::isAreaEmpty
bool isAreaEmpty(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:188
+
AbstractByteBuffer::getOffset
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
+
AbstractByteBuffer::getWAsciiStringValue
QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
Definition AbstractByteBuffer.cpp:174
+
AbstractByteBuffer::fillContent
bool fillContent(BYTE filling)
Definition AbstractByteBuffer.cpp:199
BufferException
Definition AbstractByteBuffer.h:22
BufferView::offset
offset_t offset
Definition AbstractByteBuffer.h:91
-
BufferView::BufferView
BufferView(AbstractByteBuffer *parent, offset_t offset, bufsize_t size)
Definition AbstractByteBuffer.cpp:417
+
BufferView::BufferView
BufferView(AbstractByteBuffer *parent, offset_t offset, bufsize_t size)
Definition AbstractByteBuffer.cpp:417
BufferView::parent
AbstractByteBuffer * parent
Definition AbstractByteBuffer.h:90
BufferView::size
bufsize_t size
Definition AbstractByteBuffer.h:92
-
BufferView::getContent
virtual BYTE * getContent()
Definition AbstractByteBuffer.cpp:436
-
BufferView::getContentSize
virtual bufsize_t getContentSize()
Definition AbstractByteBuffer.cpp:423
+
BufferView::getContent
virtual BYTE * getContent()
Definition AbstractByteBuffer.cpp:436
+
BufferView::getContentSize
virtual bufsize_t getContentSize()
Definition AbstractByteBuffer.cpp:423
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
Logger::D_ERROR
@ D_ERROR
Definition Util.h:26
Logger::D_INFO
@ D_INFO
Definition Util.h:26
-
buf_util::roundupToUnit
bufsize_t roundupToUnit(bufsize_t size, bufsize_t unit)
Definition AbstractByteBuffer.cpp:3
+
buf_util::roundupToUnit
bufsize_t roundupToUnit(bufsize_t size, bufsize_t unit)
Definition AbstractByteBuffer.cpp:3
pe_util::getAsciiLen
size_t getAsciiLen(const char *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:46
pe_util::getAsciiLenW
size_t getAsciiLenW(const WORD *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:58
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_abstract_byte_buffer_8h.html b/_abstract_byte_buffer_8h.html index fe3b5f69..7ad73fd5 100644 --- a/_abstract_byte_buffer_8h.html +++ b/_abstract_byte_buffer_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/AbstractByteBuffer.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -108,23 +110,23 @@ Namespaces - + - +

Typedefs

typedef uint32_t bufsize_t
typedef uint32_t bufsize_t
 
typedef uint64_t offset_t
typedef uint64_t offset_t
 
- +

Functions

bufsize_t buf_util::roundupToUnit (bufsize_t size, bufsize_t unit)
bufsize_t buf_util::roundupToUnit (bufsize_t size, bufsize_t unit)
 
- + - + - +

Variables

const bufsize_t BUFSIZE_MAX = bufsize_t(-1)
const bufsize_t BUFSIZE_MAX = bufsize_t(-1)
 
const offset_t INVALID_ADDR = offset_t(-1)
const offset_t INVALID_ADDR = offset_t(-1)
 
const offset_t OFFSET_MAX = (INVALID_ADDR - 1)
const offset_t OFFSET_MAX = (INVALID_ADDR - 1)
 

Typedef Documentation

@@ -135,7 +137,7 @@ Variables
- +
typedef uint32_t bufsize_ttypedef uint32_t bufsize_t
@@ -151,7 +153,7 @@ Variables
- +
typedef uint64_t offset_ttypedef uint64_t offset_t
@@ -168,7 +170,7 @@ Variables
- +
const bufsize_t BUFSIZE_MAX = bufsize_t(-1)const bufsize_t BUFSIZE_MAX = bufsize_t(-1)
@@ -184,7 +186,7 @@ Variables
- +
const offset_t INVALID_ADDR = offset_t(-1)const offset_t INVALID_ADDR = offset_t(-1)
@@ -200,7 +202,7 @@ Variables
- +
const offset_t OFFSET_MAX = (INVALID_ADDR - 1)const offset_t OFFSET_MAX = (INVALID_ADDR - 1)
@@ -212,7 +214,7 @@ Variables
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_abstract_byte_buffer_8h_source.html b/_abstract_byte_buffer_8h_source.html index c0c042ec..71611e14 100644 --- a/_abstract_byte_buffer_8h_source.html +++ b/_abstract_byte_buffer_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/AbstractByteBuffer.h Source File + + @@ -30,7 +32,7 @@
- + @@ -139,9 +141,9 @@ $(document).ready(function() { init_codefold(0); });
50 virtual bool setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions = false);
51 bool setStringValue(offset_t rawOffset, QString newText);
52
-
53 QString getStringValue(offset_t rawOffset, bufsize_t len = BUFSIZE_MAX);
+
53 QString getStringValue(offset_t rawOffset, bufsize_t len = BUFSIZE_MAX, bool acceptNonTerminated = false);
54 QString getWStringValue(offset_t rawOffset, bufsize_t len);
-
55 QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len);
+
55 QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated = false);
56
57 bufsize_t getMaxSizeFromOffset(offset_t startOffset);
58 bufsize_t getMaxSizeFromPtr(BYTE *ptr) { return getMaxSizeFromOffset(getOffset(ptr)); }
@@ -169,7 +171,7 @@ $(document).ready(function() { init_codefold(0); });
78class BufferView : public AbstractByteBuffer
79{
80public:
-
81 BufferView(AbstractByteBuffer *parent, offset_t offset, bufsize_t size);
+
81 BufferView(AbstractByteBuffer *parent, offset_t offset, bufsize_t size);
82 virtual ~BufferView() { }
83
84 virtual bufsize_t getContentSize();
@@ -185,26 +187,26 @@ $(document).ready(function() { init_codefold(0); });
94
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
BUFSIZE_MAX
const bufsize_t BUFSIZE_MAX
Definition AbstractByteBuffer.h:15
-
OFFSET_MAX
const offset_t OFFSET_MAX
Definition AbstractByteBuffer.h:19
-
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
-
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
-
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
+
BUFSIZE_MAX
const bufsize_t BUFSIZE_MAX
Definition AbstractByteBuffer.h:15
+
OFFSET_MAX
const offset_t OFFSET_MAX
Definition AbstractByteBuffer.h:19
+
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
+
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
+
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
- +
AbstractByteBuffer::getContentSize
virtual bufsize_t getContentSize()=0
AbstractByteBuffer::getMaxSizeFromOffset
bufsize_t getMaxSizeFromOffset(offset_t startOffset)
Definition AbstractByteBuffer.cpp:87
- - -
AbstractByteBuffer::isTruncated
virtual bool isTruncated()
Definition AbstractByteBuffer.h:41
+ + +
AbstractByteBuffer::isTruncated
virtual bool isTruncated()
Definition AbstractByteBuffer.h:41
AbstractByteBuffer::intersectsBlock
bool intersectsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:257
+
AbstractByteBuffer::getStringValue
QString getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
Definition AbstractByteBuffer.cpp:150
AbstractByteBuffer::getContentAtPtr
virtual BYTE * getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:99
-
AbstractByteBuffer::isResized
virtual bool isResized()
Definition AbstractByteBuffer.h:42
-
AbstractByteBuffer::getStringValue
QString getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
Definition AbstractByteBuffer.cpp:150
+
AbstractByteBuffer::isResized
virtual bool isResized()
Definition AbstractByteBuffer.h:42
AbstractByteBuffer::getContent
virtual BYTE * getContent()=0
AbstractByteBuffer::setTextValue
bool setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0)
Definition AbstractByteBuffer.cpp:362
-
AbstractByteBuffer::getMaxSizeFromPtr
bufsize_t getMaxSizeFromPtr(BYTE *ptr)
Definition AbstractByteBuffer.h:58
+
AbstractByteBuffer::getMaxSizeFromPtr
bufsize_t getMaxSizeFromPtr(BYTE *ptr)
Definition AbstractByteBuffer.h:58
AbstractByteBuffer::setNumValue
bool setNumValue(offset_t offset, bufsize_t size, uint64_t newVal)
Definition AbstractByteBuffer.cpp:327
AbstractByteBuffer::setBufferedValue
virtual bool setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:107
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
@@ -214,30 +216,31 @@ $(document).ready(function() { init_codefold(0); });
AbstractByteBuffer::getNumValue
uint64_t getNumValue(offset_t offset, bufsize_t size, bool *isOk)
Definition AbstractByteBuffer.cpp:297
AbstractByteBuffer::containsBlock
bool containsBlock(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:237
AbstractByteBuffer::operator[]
BYTE operator[](size_t idx)
Definition AbstractByteBuffer.cpp:26
-
AbstractByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition AbstractByteBuffer.h:72
+
AbstractByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition AbstractByteBuffer.h:72
AbstractByteBuffer::isValid
static bool isValid(AbstractByteBuffer *buf)
Definition AbstractByteBuffer.cpp:16
AbstractByteBuffer::getWStringValue
QString getWStringValue(offset_t rawOffset, bufsize_t len)
Definition AbstractByteBuffer.cpp:162
-
AbstractByteBuffer::getWAsciiStringValue
QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len)
Definition AbstractByteBuffer.cpp:174
AbstractByteBuffer::isAreaEmpty
bool isAreaEmpty(offset_t rawOffset, bufsize_t size)
Definition AbstractByteBuffer.cpp:188
AbstractByteBuffer::getOffset
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
+
AbstractByteBuffer::getWAsciiStringValue
QString getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
Definition AbstractByteBuffer.cpp:174
AbstractByteBuffer::fillContent
bool fillContent(BYTE filling)
Definition AbstractByteBuffer.cpp:199
- -
BufferException::BufferException
BufferException(const QString info)
Definition AbstractByteBuffer.h:24
- -
BufferView::~BufferView
virtual ~BufferView()
Definition AbstractByteBuffer.h:82
- -
BufferView::getRequestedSize
bufsize_t getRequestedSize() const
Definition AbstractByteBuffer.h:87
-
BufferView::parent
AbstractByteBuffer * parent
Definition AbstractByteBuffer.h:90
- + +
BufferException::BufferException
BufferException(const QString info)
Definition AbstractByteBuffer.h:24
+ +
BufferView::~BufferView
virtual ~BufferView()
Definition AbstractByteBuffer.h:82
+ +
BufferView::getRequestedSize
bufsize_t getRequestedSize() const
Definition AbstractByteBuffer.h:87
+
BufferView::BufferView
BufferView(AbstractByteBuffer *parent, offset_t offset, bufsize_t size)
Definition AbstractByteBuffer.cpp:417
+
BufferView::parent
AbstractByteBuffer * parent
Definition AbstractByteBuffer.h:90
+
BufferView::getContent
virtual BYTE * getContent()
Definition AbstractByteBuffer.cpp:436
BufferView::getContentSize
virtual bufsize_t getContentSize()
Definition AbstractByteBuffer.cpp:423
-
buf_util
Definition AbstractByteBuffer.h:27
+
buf_util
Definition AbstractByteBuffer.h:27
buf_util::roundupToUnit
bufsize_t roundupToUnit(bufsize_t size, bufsize_t unit)
Definition AbstractByteBuffer.cpp:3
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_bound_imp_dir_wrapper_8cpp.html b/_bound_imp_dir_wrapper_8cpp.html index 4a42dfcb..1ade8ee4 100644 --- a/_bound_imp_dir_wrapper_8cpp.html +++ b/_bound_imp_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/BoundImpDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_bound_imp_dir_wrapper_8cpp_source.html b/_bound_imp_dir_wrapper_8cpp_source.html index 7bd03257..d76251a8 100644 --- a/_bound_imp_dir_wrapper_8cpp_source.html +++ b/_bound_imp_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/BoundImpDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -266,23 +268,23 @@ $(document).ready(function() { init_codefold(0); });
BoundImpDirWrapper.h
PEFile.h
BoundEntryWrapper
Definition BoundImpDirWrapper.h:34
-
BoundEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.cpp:132
-
BoundEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition BoundImpDirWrapper.cpp:109
+
BoundEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.cpp:132
+
BoundEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition BoundImpDirWrapper.cpp:109
BoundEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition BoundImpDirWrapper.h:38
BoundEntryWrapper::MODULE_FORWARDERS_NUM
@ MODULE_FORWARDERS_NUM
Definition BoundImpDirWrapper.h:40
BoundEntryWrapper::MODULE_NAME_OFFSET
@ MODULE_NAME_OFFSET
Definition BoundImpDirWrapper.h:39
-
BoundEntryWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:96
-
BoundEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition BoundImpDirWrapper.cpp:148
-
BoundEntryWrapper::getName
virtual QString getName()
Definition BoundImpDirWrapper.cpp:102
-
BoundEntryWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.cpp:75
+
BoundEntryWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:96
+
BoundEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition BoundImpDirWrapper.cpp:148
+
BoundEntryWrapper::getName
virtual QString getName()
Definition BoundImpDirWrapper.cpp:102
+
BoundEntryWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.cpp:75
BoundImpDirWrapper
Definition BoundImpDirWrapper.h:6
-
BoundImpDirWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition BoundImpDirWrapper.cpp:29
+
BoundImpDirWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition BoundImpDirWrapper.cpp:29
BoundImpDirWrapper::importsCount
size_t importsCount
Definition BoundImpDirWrapper.h:28
-
BoundImpDirWrapper::boundImp
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp()
Definition BoundImpDirWrapper.cpp:20
+
BoundImpDirWrapper::boundImp
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp()
Definition BoundImpDirWrapper.cpp:20
BoundImpDirWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.h:13
-
BoundImpDirWrapper::wrap
virtual bool wrap()
Definition BoundImpDirWrapper.cpp:47
+
BoundImpDirWrapper::wrap
virtual bool wrap()
Definition BoundImpDirWrapper.cpp:47
BoundImpDirWrapper::BoundEntryWrapper
friend class BoundEntryWrapper
Definition BoundImpDirWrapper.h:30
-
BoundImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:66
+
BoundImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:66
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
DataDirEntryWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition DataDirEntryWrapper.cpp:10
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
@@ -297,7 +299,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_bound_imp_dir_wrapper_8h.html b/_bound_imp_dir_wrapper_8h.html index d99eb837..0367d4c6 100644 --- a/_bound_imp_dir_wrapper_8h.html +++ b/_bound_imp_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/BoundImpDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_bound_imp_dir_wrapper_8h_source.html b/_bound_imp_dir_wrapper_8h_source.html index 97c28245..18509ab6 100644 --- a/_bound_imp_dir_wrapper_8h_source.html +++ b/_bound_imp_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/BoundImpDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -154,37 +156,37 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
DataDirEntryWrapper.h
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
-
BoundEntryWrapper
Definition BoundImpDirWrapper.h:34
+
BoundEntryWrapper
Definition BoundImpDirWrapper.h:34
BoundEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.cpp:132
-
BoundEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition BoundImpDirWrapper.h:53
+
BoundEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition BoundImpDirWrapper.h:53
BoundEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition BoundImpDirWrapper.cpp:109
-
BoundEntryWrapper::BoundEntryWrapper
BoundEntryWrapper(Executable *pe, BoundImpDirWrapper *parent, size_t entryNum)
Definition BoundImpDirWrapper.h:44
-
BoundEntryWrapper::FieldID
FieldID
Definition BoundImpDirWrapper.h:36
-
BoundEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition BoundImpDirWrapper.h:38
-
BoundEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition BoundImpDirWrapper.h:41
-
BoundEntryWrapper::MODULE_FORWARDERS_NUM
@ MODULE_FORWARDERS_NUM
Definition BoundImpDirWrapper.h:40
-
BoundEntryWrapper::NONE
@ NONE
Definition BoundImpDirWrapper.h:37
-
BoundEntryWrapper::MODULE_NAME_OFFSET
@ MODULE_NAME_OFFSET
Definition BoundImpDirWrapper.h:39
-
BoundEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition BoundImpDirWrapper.h:54
+
BoundEntryWrapper::BoundEntryWrapper
BoundEntryWrapper(Executable *pe, BoundImpDirWrapper *parent, size_t entryNum)
Definition BoundImpDirWrapper.h:44
+
BoundEntryWrapper::FieldID
FieldID
Definition BoundImpDirWrapper.h:36
+
BoundEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition BoundImpDirWrapper.h:38
+
BoundEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition BoundImpDirWrapper.h:41
+
BoundEntryWrapper::MODULE_FORWARDERS_NUM
@ MODULE_FORWARDERS_NUM
Definition BoundImpDirWrapper.h:40
+
BoundEntryWrapper::NONE
@ NONE
Definition BoundImpDirWrapper.h:37
+
BoundEntryWrapper::MODULE_NAME_OFFSET
@ MODULE_NAME_OFFSET
Definition BoundImpDirWrapper.h:39
+
BoundEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition BoundImpDirWrapper.h:54
BoundEntryWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:96
BoundEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition BoundImpDirWrapper.cpp:148
BoundEntryWrapper::getName
virtual QString getName()
Definition BoundImpDirWrapper.cpp:102
-
BoundEntryWrapper::wrap
bool wrap()
Definition BoundImpDirWrapper.h:47
+
BoundEntryWrapper::wrap
bool wrap()
Definition BoundImpDirWrapper.h:47
BoundEntryWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.cpp:75
-
BoundImpDirWrapper
Definition BoundImpDirWrapper.h:6
-
BoundImpDirWrapper::BoundImpDirWrapper
BoundImpDirWrapper(PEFile *pe)
Definition BoundImpDirWrapper.h:8
+
BoundImpDirWrapper
Definition BoundImpDirWrapper.h:6
+
BoundImpDirWrapper::BoundImpDirWrapper
BoundImpDirWrapper(PEFile *pe)
Definition BoundImpDirWrapper.h:8
BoundImpDirWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition BoundImpDirWrapper.cpp:29
-
BoundImpDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.h:18
-
BoundImpDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.h:21
-
BoundImpDirWrapper::importsCount
size_t importsCount
Definition BoundImpDirWrapper.h:28
+
BoundImpDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.h:18
+
BoundImpDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition BoundImpDirWrapper.h:21
+
BoundImpDirWrapper::importsCount
size_t importsCount
Definition BoundImpDirWrapper.h:28
BoundImpDirWrapper::boundImp
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp()
Definition BoundImpDirWrapper.cpp:20
-
BoundImpDirWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.h:13
+
BoundImpDirWrapper::getPtr
virtual void * getPtr()
Definition BoundImpDirWrapper.h:13
BoundImpDirWrapper::wrap
virtual bool wrap()
Definition BoundImpDirWrapper.cpp:47
-
BoundImpDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition BoundImpDirWrapper.h:16
+
BoundImpDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition BoundImpDirWrapper.h:16
BoundImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition BoundImpDirWrapper.cpp:66
-
BoundImpDirWrapper::getName
virtual QString getName()
Definition BoundImpDirWrapper.h:15
-
BoundImpDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition BoundImpDirWrapper.h:22
-
BoundImpDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition BoundImpDirWrapper.h:19
+
BoundImpDirWrapper::getName
virtual QString getName()
Definition BoundImpDirWrapper.h:15
+
BoundImpDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition BoundImpDirWrapper.h:22
+
BoundImpDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition BoundImpDirWrapper.h:19
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
ExeNodeWrapper::getSubfieldPtr
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
@@ -197,7 +199,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_byte_buffer_8cpp.html b/_byte_buffer_8cpp.html index aaaf7ff2..fd21949d 100644 --- a/_byte_buffer_8cpp.html +++ b/_byte_buffer_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/ByteBuffer.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_byte_buffer_8cpp_source.html b/_byte_buffer_8cpp_source.html index 6140cae8..ddf1f611 100644 --- a/_byte_buffer_8cpp_source.html +++ b/_byte_buffer_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/ByteBuffer.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -191,16 +193,16 @@ $(document).ready(function() { init_codefold(0); });
BufferException
Definition AbstractByteBuffer.h:22
ByteBuffer::originalSize
bufsize_t originalSize
Definition ByteBuffer.h:28
ByteBuffer::content
BYTE * content
Definition ByteBuffer.h:24
-
ByteBuffer::~ByteBuffer
virtual ~ByteBuffer()
Definition ByteBuffer.cpp:83
+
ByteBuffer::~ByteBuffer
virtual ~ByteBuffer()
Definition ByteBuffer.cpp:83
ByteBuffer::contentSize
bufsize_t contentSize
Definition ByteBuffer.h:25
-
ByteBuffer::ByteBuffer
ByteBuffer(bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
Definition ByteBuffer.cpp:3
-
ByteBuffer::allocContent
BYTE * allocContent(bufsize_t v_size, bufsize_t padding)
Definition ByteBuffer.cpp:45
+
ByteBuffer::ByteBuffer
ByteBuffer(bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
Definition ByteBuffer.cpp:3
+
ByteBuffer::allocContent
BYTE * allocContent(bufsize_t v_size, bufsize_t padding)
Definition ByteBuffer.cpp:45
ByteBuffer::padding
bufsize_t padding
Definition ByteBuffer.h:26
-
ByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition ByteBuffer.cpp:57
+
ByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition ByteBuffer.cpp:57
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_byte_buffer_8h.html b/_byte_buffer_8h.html index 57901791..78fe1bfb 100644 --- a/_byte_buffer_8h.html +++ b/_byte_buffer_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ByteBuffer.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes - +

Macros

#define DEFAULT_PADDING   2
#define DEFAULT_PADDING   2
 

Macro Definition Documentation

@@ -114,7 +116,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_byte_buffer_8h_source.html b/_byte_buffer_8h_source.html index a5a83578..1b58b667 100644 --- a/_byte_buffer_8h_source.html +++ b/_byte_buffer_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ByteBuffer.h Source File + + @@ -30,7 +32,7 @@ - + @@ -91,9 +93,9 @@ $(document).ready(function() { init_codefold(0); });
6class ByteBuffer : public AbstractByteBuffer
7{
8public:
-
9 ByteBuffer(bufsize_t v_size, bufsize_t padding = DEFAULT_PADDING);
-
10 ByteBuffer(BYTE *v_content, bufsize_t v_size, bufsize_t padding = DEFAULT_PADDING);
-
11 ByteBuffer(AbstractByteBuffer *sourceBuf, offset_t offset, bufsize_t size, bufsize_t padding = DEFAULT_PADDING);
+
9 ByteBuffer(bufsize_t v_size, bufsize_t padding = DEFAULT_PADDING);
+
10 ByteBuffer(BYTE *v_content, bufsize_t v_size, bufsize_t padding = DEFAULT_PADDING);
+
11 ByteBuffer(AbstractByteBuffer *sourceBuf, offset_t offset, bufsize_t size, bufsize_t padding = DEFAULT_PADDING);
12
13 virtual ~ByteBuffer();
14
@@ -118,23 +120,24 @@ $(document).ready(function() { init_codefold(0); });
AbstractByteBuffer.h
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
-
DEFAULT_PADDING
#define DEFAULT_PADDING
Definition ByteBuffer.h:4
+
DEFAULT_PADDING
#define DEFAULT_PADDING
Definition ByteBuffer.h:4
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
ByteBuffer
Definition ByteBuffer.h:7
-
ByteBuffer::getContent
virtual BYTE * getContent()
Definition ByteBuffer.h:16
-
ByteBuffer::getContentSize
virtual bufsize_t getContentSize()
Definition ByteBuffer.h:15
-
ByteBuffer::isResized
virtual bool isResized()
Definition ByteBuffer.h:19
-
ByteBuffer::originalSize
bufsize_t originalSize
Definition ByteBuffer.h:28
-
ByteBuffer::content
BYTE * content
Definition ByteBuffer.h:24
+
ByteBuffer
Definition ByteBuffer.h:7
+
ByteBuffer::getContent
virtual BYTE * getContent()
Definition ByteBuffer.h:16
+
ByteBuffer::getContentSize
virtual bufsize_t getContentSize()
Definition ByteBuffer.h:15
+
ByteBuffer::isResized
virtual bool isResized()
Definition ByteBuffer.h:19
+
ByteBuffer::originalSize
bufsize_t originalSize
Definition ByteBuffer.h:28
+
ByteBuffer::content
BYTE * content
Definition ByteBuffer.h:24
ByteBuffer::~ByteBuffer
virtual ~ByteBuffer()
Definition ByteBuffer.cpp:83
-
ByteBuffer::contentSize
bufsize_t contentSize
Definition ByteBuffer.h:25
+
ByteBuffer::contentSize
bufsize_t contentSize
Definition ByteBuffer.h:25
+
ByteBuffer::ByteBuffer
ByteBuffer(bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
Definition ByteBuffer.cpp:3
ByteBuffer::allocContent
BYTE * allocContent(bufsize_t v_size, bufsize_t padding)
Definition ByteBuffer.cpp:45
-
ByteBuffer::padding
bufsize_t padding
Definition ByteBuffer.h:26
+
ByteBuffer::padding
bufsize_t padding
Definition ByteBuffer.h:26
ByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition ByteBuffer.cpp:57
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_clr_dir_wrapper_8cpp.html b/_clr_dir_wrapper_8cpp.html index 277f06cd..5d5c825a 100644 --- a/_clr_dir_wrapper_8cpp.html +++ b/_clr_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ClrDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_clr_dir_wrapper_8cpp_source.html b/_clr_dir_wrapper_8cpp_source.html index 04787693..8306900d 100644 --- a/_clr_dir_wrapper_8cpp_source.html +++ b/_clr_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ClrDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -342,15 +344,15 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
ClrDirWrapper.h
-
ClrDirWrapper::getFlagsSet
static std::set< DWORD > getFlagsSet(DWORD flags)
Definition ClrDirWrapper.cpp:172
-
ClrDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ClrDirWrapper.cpp:70
-
ClrDirWrapper::getName
virtual QString getName()
Definition ClrDirWrapper.cpp:76
-
ClrDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ClrDirWrapper.cpp:113
-
ClrDirWrapper::wrap
bool wrap()
Definition ClrDirWrapper.cpp:54
-
ClrDirWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition ClrDirWrapper.cpp:216
-
ClrDirWrapper::translateFlag
static QString translateFlag(DWORD value)
Definition ClrDirWrapper.cpp:193
-
ClrDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ClrDirWrapper.cpp:148
-
ClrDirWrapper::getSize
virtual bufsize_t getSize()
Definition ClrDirWrapper.cpp:64
+
ClrDirWrapper::getFlagsSet
static std::set< DWORD > getFlagsSet(DWORD flags)
Definition ClrDirWrapper.cpp:172
+
ClrDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ClrDirWrapper.cpp:70
+
ClrDirWrapper::getName
virtual QString getName()
Definition ClrDirWrapper.cpp:76
+
ClrDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ClrDirWrapper.cpp:113
+
ClrDirWrapper::wrap
bool wrap()
Definition ClrDirWrapper.cpp:54
+
ClrDirWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition ClrDirWrapper.cpp:216
+
ClrDirWrapper::translateFlag
static QString translateFlag(DWORD value)
Definition ClrDirWrapper.cpp:193
+
ClrDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ClrDirWrapper.cpp:148
+
ClrDirWrapper::getSize
virtual bufsize_t getSize()
Definition ClrDirWrapper.cpp:64
ClrDirWrapper::META_DATA_VA
@ META_DATA_VA
Definition ClrDirWrapper.h:15
ClrDirWrapper::MINOR_RUNTIME_VER
@ MINOR_RUNTIME_VER
Definition ClrDirWrapper.h:14
ClrDirWrapper::MANAGED_NATIVE_HDR_VA
@ MANAGED_NATIVE_HDR_VA
Definition ClrDirWrapper.h:29
@@ -371,8 +373,8 @@ $(document).ready(function() { init_codefold(0); });
ClrDirWrapper::MANAGED_NATIVE_HDR_SIZE
@ MANAGED_NATIVE_HDR_SIZE
Definition ClrDirWrapper.h:30
ClrDirWrapper::RESOURCES_VA
@ RESOURCES_VA
Definition ClrDirWrapper.h:19
ClrDirWrapper::VTABLE_FIXUPS_VA
@ VTABLE_FIXUPS_VA
Definition ClrDirWrapper.h:25
-
ClrDirWrapper::getPtr
virtual void * getPtr()
Definition ClrDirWrapper.cpp:59
-
ClrDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ClrDirWrapper.cpp:81
+
ClrDirWrapper::getPtr
virtual void * getPtr()
Definition ClrDirWrapper.cpp:59
+
ClrDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ClrDirWrapper.cpp:81
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
Executable::addr_type
addr_type
Definition Executable.h:35
@@ -382,7 +384,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_clr_dir_wrapper_8h.html b/_clr_dir_wrapper_8h.html index bcd7d3bd..694b3861 100644 --- a/_clr_dir_wrapper_8h.html +++ b/_clr_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ClrDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_clr_dir_wrapper_8h_source.html b/_clr_dir_wrapper_8h_source.html index c7d4e84d..18b3a95a 100644 --- a/_clr_dir_wrapper_8h_source.html +++ b/_clr_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ClrDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -153,41 +155,41 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
DataDirEntryWrapper.h
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
-
ClrDirWrapper
Definition ClrDirWrapper.h:7
-
ClrDirWrapper::ClrDirWrapper
ClrDirWrapper(PEFile *pe)
Definition ClrDirWrapper.h:37
+
ClrDirWrapper
Definition ClrDirWrapper.h:7
+
ClrDirWrapper::ClrDirWrapper
ClrDirWrapper(PEFile *pe)
Definition ClrDirWrapper.h:37
ClrDirWrapper::getFlagsSet
static std::set< DWORD > getFlagsSet(DWORD flags)
Definition ClrDirWrapper.cpp:172
ClrDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ClrDirWrapper.cpp:70
ClrDirWrapper::getName
virtual QString getName()
Definition ClrDirWrapper.cpp:76
ClrDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ClrDirWrapper.cpp:113
ClrDirWrapper::wrap
bool wrap()
Definition ClrDirWrapper.cpp:54
-
ClrDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ClrDirWrapper.h:48
+
ClrDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ClrDirWrapper.h:48
ClrDirWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition ClrDirWrapper.cpp:216
-
ClrDirWrapper::~ClrDirWrapper
~ClrDirWrapper()
Definition ClrDirWrapper.h:40
+
ClrDirWrapper::~ClrDirWrapper
~ClrDirWrapper()
Definition ClrDirWrapper.h:40
ClrDirWrapper::translateFlag
static QString translateFlag(DWORD value)
Definition ClrDirWrapper.cpp:193
ClrDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ClrDirWrapper.cpp:148
ClrDirWrapper::getSize
virtual bufsize_t getSize()
Definition ClrDirWrapper.cpp:64
-
ClrDirWrapper::FieldID
FieldID
Definition ClrDirWrapper.h:10
-
ClrDirWrapper::META_DATA_VA
@ META_DATA_VA
Definition ClrDirWrapper.h:15
-
ClrDirWrapper::NONE
@ NONE
Definition ClrDirWrapper.h:11
-
ClrDirWrapper::MINOR_RUNTIME_VER
@ MINOR_RUNTIME_VER
Definition ClrDirWrapper.h:14
-
ClrDirWrapper::MANAGED_NATIVE_HDR_VA
@ MANAGED_NATIVE_HDR_VA
Definition ClrDirWrapper.h:29
-
ClrDirWrapper::MAJOR_RUNTIME_VER
@ MAJOR_RUNTIME_VER
Definition ClrDirWrapper.h:13
-
ClrDirWrapper::EXPORT_ADDR_TABLE_JMPS_SIZE
@ EXPORT_ADDR_TABLE_JMPS_SIZE
Definition ClrDirWrapper.h:28
-
ClrDirWrapper::FLAGS
@ FLAGS
Definition ClrDirWrapper.h:17
-
ClrDirWrapper::VTABLE_FIXUPS_SIZE
@ VTABLE_FIXUPS_SIZE
Definition ClrDirWrapper.h:26
-
ClrDirWrapper::STRONG_NAME_SIGNATURE_SIZE
@ STRONG_NAME_SIGNATURE_SIZE
Definition ClrDirWrapper.h:22
-
ClrDirWrapper::ENTRY_POINT
@ ENTRY_POINT
Definition ClrDirWrapper.h:18
-
ClrDirWrapper::STRONG_NAME_SIGNATURE_VA
@ STRONG_NAME_SIGNATURE_VA
Definition ClrDirWrapper.h:21
-
ClrDirWrapper::CB
@ CB
Definition ClrDirWrapper.h:12
-
ClrDirWrapper::RESOURCES_SIZE
@ RESOURCES_SIZE
Definition ClrDirWrapper.h:20
-
ClrDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ClrDirWrapper.h:31
-
ClrDirWrapper::CODE_MANAGER_TABLE_SIZE
@ CODE_MANAGER_TABLE_SIZE
Definition ClrDirWrapper.h:24
-
ClrDirWrapper::CODE_MANAGER_TABLE_VA
@ CODE_MANAGER_TABLE_VA
Definition ClrDirWrapper.h:23
-
ClrDirWrapper::EXPORT_ADDR_TABLE_JMPS_VA
@ EXPORT_ADDR_TABLE_JMPS_VA
Definition ClrDirWrapper.h:27
-
ClrDirWrapper::META_DATA_SIZE
@ META_DATA_SIZE
Definition ClrDirWrapper.h:16
-
ClrDirWrapper::MANAGED_NATIVE_HDR_SIZE
@ MANAGED_NATIVE_HDR_SIZE
Definition ClrDirWrapper.h:30
-
ClrDirWrapper::RESOURCES_VA
@ RESOURCES_VA
Definition ClrDirWrapper.h:19
-
ClrDirWrapper::VTABLE_FIXUPS_VA
@ VTABLE_FIXUPS_VA
Definition ClrDirWrapper.h:25
+
ClrDirWrapper::FieldID
FieldID
Definition ClrDirWrapper.h:10
+
ClrDirWrapper::META_DATA_VA
@ META_DATA_VA
Definition ClrDirWrapper.h:15
+
ClrDirWrapper::NONE
@ NONE
Definition ClrDirWrapper.h:11
+
ClrDirWrapper::MINOR_RUNTIME_VER
@ MINOR_RUNTIME_VER
Definition ClrDirWrapper.h:14
+
ClrDirWrapper::MANAGED_NATIVE_HDR_VA
@ MANAGED_NATIVE_HDR_VA
Definition ClrDirWrapper.h:29
+
ClrDirWrapper::MAJOR_RUNTIME_VER
@ MAJOR_RUNTIME_VER
Definition ClrDirWrapper.h:13
+
ClrDirWrapper::EXPORT_ADDR_TABLE_JMPS_SIZE
@ EXPORT_ADDR_TABLE_JMPS_SIZE
Definition ClrDirWrapper.h:28
+
ClrDirWrapper::FLAGS
@ FLAGS
Definition ClrDirWrapper.h:17
+
ClrDirWrapper::VTABLE_FIXUPS_SIZE
@ VTABLE_FIXUPS_SIZE
Definition ClrDirWrapper.h:26
+
ClrDirWrapper::STRONG_NAME_SIGNATURE_SIZE
@ STRONG_NAME_SIGNATURE_SIZE
Definition ClrDirWrapper.h:22
+
ClrDirWrapper::ENTRY_POINT
@ ENTRY_POINT
Definition ClrDirWrapper.h:18
+
ClrDirWrapper::STRONG_NAME_SIGNATURE_VA
@ STRONG_NAME_SIGNATURE_VA
Definition ClrDirWrapper.h:21
+
ClrDirWrapper::CB
@ CB
Definition ClrDirWrapper.h:12
+
ClrDirWrapper::RESOURCES_SIZE
@ RESOURCES_SIZE
Definition ClrDirWrapper.h:20
+
ClrDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ClrDirWrapper.h:31
+
ClrDirWrapper::CODE_MANAGER_TABLE_SIZE
@ CODE_MANAGER_TABLE_SIZE
Definition ClrDirWrapper.h:24
+
ClrDirWrapper::CODE_MANAGER_TABLE_VA
@ CODE_MANAGER_TABLE_VA
Definition ClrDirWrapper.h:23
+
ClrDirWrapper::EXPORT_ADDR_TABLE_JMPS_VA
@ EXPORT_ADDR_TABLE_JMPS_VA
Definition ClrDirWrapper.h:27
+
ClrDirWrapper::META_DATA_SIZE
@ META_DATA_SIZE
Definition ClrDirWrapper.h:16
+
ClrDirWrapper::MANAGED_NATIVE_HDR_SIZE
@ MANAGED_NATIVE_HDR_SIZE
Definition ClrDirWrapper.h:30
+
ClrDirWrapper::RESOURCES_VA
@ RESOURCES_VA
Definition ClrDirWrapper.h:19
+
ClrDirWrapper::VTABLE_FIXUPS_VA
@ VTABLE_FIXUPS_VA
Definition ClrDirWrapper.h:25
ClrDirWrapper::getPtr
virtual void * getPtr()
Definition ClrDirWrapper.cpp:59
ClrDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ClrDirWrapper.cpp:81
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
@@ -196,7 +198,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_lookup_8h.html b/_common_ordinals_lookup_8h.html index cabcbb7d..dd339690 100644 --- a/_common_ordinals_lookup_8h.html +++ b/_common_ordinals_lookup_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/CommonOrdinalsLookup.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_lookup_8h_source.html b/_common_ordinals_lookup_8h_source.html index b6013471..e569f422 100644 --- a/_common_ordinals_lookup_8h_source.html +++ b/_common_ordinals_lookup_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/CommonOrdinalsLookup.h Source File + + @@ -30,7 +32,7 @@ - + @@ -144,19 +146,19 @@ $(document).ready(function() { init_codefold(0); });
CommonOrdinalsMap.h
CommonOrdinalsOleaut32.h
CommonOrdinalsWS2_32.h
-
CommonOrdinalsLookup
Definition CommonOrdinalsLookup.h:9
-
CommonOrdinalsLookup::listsMap
QMap< QString, CommonOrdinalsMap * > listsMap
Definition CommonOrdinalsLookup.h:47
-
CommonOrdinalsLookup::init
void init()
Definition CommonOrdinalsLookup.h:31
-
CommonOrdinalsLookup::CommonOrdinalsLookup
CommonOrdinalsLookup()
Definition CommonOrdinalsLookup.h:11
-
CommonOrdinalsLookup::findFuncName
QString findFuncName(QString dllName, int ordinal)
Definition CommonOrdinalsLookup.h:16
-
CommonOrdinalsLookup::clear
void clear()
Definition CommonOrdinalsLookup.h:38
+
CommonOrdinalsLookup
Definition CommonOrdinalsLookup.h:9
+
CommonOrdinalsLookup::listsMap
QMap< QString, CommonOrdinalsMap * > listsMap
Definition CommonOrdinalsLookup.h:47
+
CommonOrdinalsLookup::init
void init()
Definition CommonOrdinalsLookup.h:31
+
CommonOrdinalsLookup::CommonOrdinalsLookup
CommonOrdinalsLookup()
Definition CommonOrdinalsLookup.h:11
+
CommonOrdinalsLookup::findFuncName
QString findFuncName(QString dllName, int ordinal)
Definition CommonOrdinalsLookup.h:16
+
CommonOrdinalsLookup::clear
void clear()
Definition CommonOrdinalsLookup.h:38
CommonOrdinalsMap
Definition CommonOrdinalsMap.h:6
CommonOrdinalsOleaut32
Definition CommonOrdinalsOleaut32.h:6
CommonOrdinalsWS2_32
Definition CommonOrdinalsWS2_32.h:6
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_map_8h.html b/_common_ordinals_map_8h.html index 49122c4e..7ecf6a42 100644 --- a/_common_ordinals_map_8h.html +++ b/_common_ordinals_map_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsMap.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_map_8h_source.html b/_common_ordinals_map_8h_source.html index 70c9939e..614ff0c0 100644 --- a/_common_ordinals_map_8h_source.html +++ b/_common_ordinals_map_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsMap.h Source File + + @@ -30,7 +32,7 @@ - + @@ -105,15 +107,15 @@ $(document).ready(function() { init_codefold(0); });
16};
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
CommonOrdinalsMap
Definition CommonOrdinalsMap.h:6
-
CommonOrdinalsMap::dllName
QString dllName
Definition CommonOrdinalsMap.h:14
-
CommonOrdinalsMap::CommonOrdinalsMap
CommonOrdinalsMap()
Definition CommonOrdinalsMap.h:8
-
CommonOrdinalsMap::CommonOrdinalsMap
CommonOrdinalsMap(QString _dllName)
Definition CommonOrdinalsMap.h:11
-
CommonOrdinalsMap::ord_names
QMap< int, QString > ord_names
Definition CommonOrdinalsMap.h:15
+
CommonOrdinalsMap
Definition CommonOrdinalsMap.h:6
+
CommonOrdinalsMap::dllName
QString dllName
Definition CommonOrdinalsMap.h:14
+
CommonOrdinalsMap::CommonOrdinalsMap
CommonOrdinalsMap()
Definition CommonOrdinalsMap.h:8
+
CommonOrdinalsMap::CommonOrdinalsMap
CommonOrdinalsMap(QString _dllName)
Definition CommonOrdinalsMap.h:11
+
CommonOrdinalsMap::ord_names
QMap< int, QString > ord_names
Definition CommonOrdinalsMap.h:15
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_oleaut32_8h.html b/_common_ordinals_oleaut32_8h.html index 3d7d9158..59d51c64 100644 --- a/_common_ordinals_oleaut32_8h.html +++ b/_common_ordinals_oleaut32_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsOleaut32.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_oleaut32_8h_source.html b/_common_ordinals_oleaut32_8h_source.html index 7cc83b61..25bac0fd 100644 --- a/_common_ordinals_oleaut32_8h_source.html +++ b/_common_ordinals_oleaut32_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsOleaut32.h Source File + + @@ -30,7 +32,7 @@ - + @@ -499,12 +501,12 @@ $(document).ready(function() { init_codefold(0); });
CommonOrdinalsMap.h
CommonOrdinalsMap
Definition CommonOrdinalsMap.h:6
CommonOrdinalsMap::ord_names
QMap< int, QString > ord_names
Definition CommonOrdinalsMap.h:15
-
CommonOrdinalsOleaut32
Definition CommonOrdinalsOleaut32.h:6
-
CommonOrdinalsOleaut32::CommonOrdinalsOleaut32
CommonOrdinalsOleaut32()
Definition CommonOrdinalsOleaut32.h:8
+
CommonOrdinalsOleaut32
Definition CommonOrdinalsOleaut32.h:6
+
CommonOrdinalsOleaut32::CommonOrdinalsOleaut32
CommonOrdinalsOleaut32()
Definition CommonOrdinalsOleaut32.h:8
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_w_s2__32_8h.html b/_common_ordinals_w_s2__32_8h.html index d805633e..40069760 100644 --- a/_common_ordinals_w_s2__32_8h.html +++ b/_common_ordinals_w_s2__32_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsWS2_32.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_common_ordinals_w_s2__32_8h_source.html b/_common_ordinals_w_s2__32_8h_source.html index 45e2ef98..d185d3f8 100644 --- a/_common_ordinals_w_s2__32_8h_source.html +++ b/_common_ordinals_w_s2__32_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup/CommonOrdinalsWS2_32.h Source File + + @@ -30,7 +32,7 @@ - + @@ -218,12 +220,12 @@ $(document).ready(function() { init_codefold(0); });
CommonOrdinalsMap.h
CommonOrdinalsMap
Definition CommonOrdinalsMap.h:6
CommonOrdinalsMap::ord_names
QMap< int, QString > ord_names
Definition CommonOrdinalsMap.h:15
-
CommonOrdinalsWS2_32
Definition CommonOrdinalsWS2_32.h:6
-
CommonOrdinalsWS2_32::CommonOrdinalsWS2_32
CommonOrdinalsWS2_32()
Definition CommonOrdinalsWS2_32.h:8
+
CommonOrdinalsWS2_32
Definition CommonOrdinalsWS2_32.h:6
+
CommonOrdinalsWS2_32::CommonOrdinalsWS2_32
CommonOrdinalsWS2_32()
Definition CommonOrdinalsWS2_32.h:8
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_custom_exception_8h.html b/_custom_exception_8h.html index 3d8edd06..ee1b9d74 100644 --- a/_custom_exception_8h.html +++ b/_custom_exception_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/CustomException.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ Classes - +

Macros

#define UNKNOWN_EXCEPTION   (-1)
#define UNKNOWN_EXCEPTION   (-1)
 

Macro Definition Documentation

@@ -120,7 +122,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_custom_exception_8h_source.html b/_custom_exception_8h_source.html index a89796d8..85516002 100644 --- a/_custom_exception_8h_source.html +++ b/_custom_exception_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/CustomException.h Source File + + @@ -30,7 +32,7 @@ - + @@ -129,24 +131,24 @@ $(document).ready(function() { init_codefold(0); });
38
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
UNKNOWN_EXCEPTION
#define UNKNOWN_EXCEPTION
Definition CustomException.h:9
-
CustomException
Definition CustomException.h:12
-
CustomException::what
virtual const char * what() const
Definition CustomException.h:24
-
CustomException::getInfo
QString getInfo()
Definition CustomException.h:22
-
CustomException::CustomException
CustomException(const QString info, const int32_t code=UNKNOWN_EXCEPTION)
Definition CustomException.h:14
-
CustomException::m_code
const int m_code
Definition CustomException.h:30
-
CustomException::CustomException
CustomException(const int32_t code)
Definition CustomException.h:17
-
CustomException::getCode
int getCode()
Definition CustomException.h:23
-
CustomException::codeToString
virtual QString codeToString()
Definition CustomException.h:27
-
CustomException::~CustomException
virtual ~CustomException()
Definition CustomException.h:20
-
CustomException::m_info
QString m_info
Definition CustomException.h:28
-
CustomException::m_strInfo
std::string m_strInfo
Definition CustomException.h:29
-
ParserException
Definition CustomException.h:34
-
ParserException::ParserException
ParserException(const QString info)
Definition CustomException.h:36
+
UNKNOWN_EXCEPTION
#define UNKNOWN_EXCEPTION
Definition CustomException.h:9
+
CustomException
Definition CustomException.h:12
+
CustomException::what
virtual const char * what() const
Definition CustomException.h:24
+
CustomException::getInfo
QString getInfo()
Definition CustomException.h:22
+
CustomException::CustomException
CustomException(const QString info, const int32_t code=UNKNOWN_EXCEPTION)
Definition CustomException.h:14
+
CustomException::m_code
const int m_code
Definition CustomException.h:30
+
CustomException::CustomException
CustomException(const int32_t code)
Definition CustomException.h:17
+
CustomException::getCode
int getCode()
Definition CustomException.h:23
+
CustomException::codeToString
virtual QString codeToString()
Definition CustomException.h:27
+
CustomException::~CustomException
virtual ~CustomException()
Definition CustomException.h:20
+
CustomException::m_info
QString m_info
Definition CustomException.h:28
+
CustomException::m_strInfo
std::string m_strInfo
Definition CustomException.h:29
+
ParserException
Definition CustomException.h:34
+
ParserException::ParserException
ParserException(const QString info)
Definition CustomException.h:36
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_d_o_s_exe_8cpp.html b/_d_o_s_exe_8cpp.html index 05bfb8fa..b481840c 100644 --- a/_d_o_s_exe_8cpp.html +++ b/_d_o_s_exe_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DOSExe.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_d_o_s_exe_8cpp_source.html b/_d_o_s_exe_8cpp_source.html index f89ee40c..17de42d5 100644 --- a/_d_o_s_exe_8cpp_source.html +++ b/_d_o_s_exe_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DOSExe.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -163,12 +165,12 @@ $(document).ready(function() { init_codefold(0); });
DOSExe.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
-
DOSExeBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition DOSExe.cpp:18
-
DOSExeBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition DOSExe.cpp:4
+
DOSExeBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition DOSExe.cpp:18
+
DOSExeBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition DOSExe.cpp:4
DOSExe
Definition DOSExe.h:19
-
DOSExe::DOSExe
DOSExe(AbstractByteBuffer *v_buf)
Definition DOSExe.cpp:33
+
DOSExe::DOSExe
DOSExe(AbstractByteBuffer *v_buf)
Definition DOSExe.cpp:33
DOSExe::m_dosHdr
IMAGE_DOS_HEADER * m_dosHdr
Definition DOSExe.h:68
-
DOSExe::peSignatureOffset
offset_t peSignatureOffset()
Definition DOSExe.cpp:59
+
DOSExe::peSignatureOffset
offset_t peSignatureOffset()
Definition DOSExe.cpp:59
DOSExe::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition DOSExe.h:67
DOSExe::WR_DOS_HDR
@ WR_DOS_HDR
Definition DOSExe.h:23
DosHdrWrapper
Definition DosHdrWrapper.h:9
@@ -188,7 +190,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_d_o_s_exe_8h.html b/_d_o_s_exe_8h.html index c6a60b7e..f308f5e6 100644 --- a/_d_o_s_exe_8h.html +++ b/_d_o_s_exe_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DOSExe.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes - +

Macros

#define DOS_PARAGRAPH   0x10
#define DOS_PARAGRAPH   0x10
 

Macro Definition Documentation

@@ -117,7 +119,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_d_o_s_exe_8h_source.html b/_d_o_s_exe_8h_source.html index 4c345b60..74afbfc9 100644 --- a/_d_o_s_exe_8h_source.html +++ b/_d_o_s_exe_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DOSExe.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../MappedExe.h"
+
3#include "../MappedExe.h"
4#include "DosHdrWrapper.h"
5
6#define DOS_PARAGRAPH 0x10
@@ -113,7 +115,7 @@ $(document).ready(function() { init_codefold(0); });
25 };
26
-
27 DOSExe(AbstractByteBuffer *v_buf);
+
27 DOSExe(AbstractByteBuffer *v_buf);
28 virtual ~DOSExe() { }
29
30 // inherited from Executable:
@@ -165,32 +167,34 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
-
DOS_PARAGRAPH
#define DOS_PARAGRAPH
Definition DOSExe.h:6
+
DOS_PARAGRAPH
#define DOS_PARAGRAPH
Definition DOSExe.h:6
+ - -
DOSExeBuilder::DOSExeBuilder
DOSExeBuilder()
Definition DOSExe.h:10
+ +
DOSExeBuilder::DOSExeBuilder
DOSExeBuilder()
Definition DOSExe.h:10
DOSExeBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition DOSExe.cpp:18
-
DOSExeBuilder::typeName
QString typeName()
Definition DOSExe.h:13
+
DOSExeBuilder::typeName
QString typeName()
Definition DOSExe.h:13
DOSExeBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition DOSExe.cpp:4
- -
DOSExe::codeOffset
offset_t codeOffset()
Definition DOSExe.h:53
-
DOSExe::dosHeaderOffset
virtual offset_t dosHeaderOffset()
Definition DOSExe.h:49
-
DOSExe::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition DOSExe.h:34
-
DOSExe::moduleSize
bufsize_t moduleSize()
Definition DOSExe.h:54
-
DOSExe::m_dosHdr
IMAGE_DOS_HEADER * m_dosHdr
Definition DOSExe.h:68
+ +
DOSExe::codeOffset
offset_t codeOffset()
Definition DOSExe.h:53
+
DOSExe::dosHeaderOffset
virtual offset_t dosHeaderOffset()
Definition DOSExe.h:49
+
DOSExe::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition DOSExe.h:34
+
DOSExe::DOSExe
DOSExe(AbstractByteBuffer *v_buf)
Definition DOSExe.cpp:33
+
DOSExe::moduleSize
bufsize_t moduleSize()
Definition DOSExe.h:54
+
DOSExe::m_dosHdr
IMAGE_DOS_HEADER * m_dosHdr
Definition DOSExe.h:68
DOSExe::peSignatureOffset
offset_t peSignatureOffset()
Definition DOSExe.cpp:59
-
DOSExe::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition DOSExe.h:44
-
DOSExe::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition DOSExe.h:67
-
DOSExe::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type aType=Executable::RVA)
Definition DOSExe.h:45
-
DOSExe::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition DOSExe.h:33
-
DOSExe::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition DOSExe.h:36
-
DOSExe::WRAPPERS
WRAPPERS
Definition DOSExe.h:21
-
DOSExe::WR_NONE
@ WR_NONE
Definition DOSExe.h:22
-
DOSExe::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition DOSExe.h:24
-
DOSExe::WR_DOS_HDR
@ WR_DOS_HDR
Definition DOSExe.h:23
-
DOSExe::~DOSExe
virtual ~DOSExe()
Definition DOSExe.h:28
-
DOSExe::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition DOSExe.h:43
+
DOSExe::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition DOSExe.h:44
+
DOSExe::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition DOSExe.h:67
+
DOSExe::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type aType=Executable::RVA)
Definition DOSExe.h:45
+
DOSExe::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition DOSExe.h:33
+
DOSExe::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition DOSExe.h:36
+
DOSExe::WRAPPERS
WRAPPERS
Definition DOSExe.h:21
+
DOSExe::WR_NONE
@ WR_NONE
Definition DOSExe.h:22
+
DOSExe::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition DOSExe.h:24
+
DOSExe::WR_DOS_HDR
@ WR_DOS_HDR
Definition DOSExe.h:23
+
DOSExe::~DOSExe
virtual ~DOSExe()
Definition DOSExe.h:28
+
DOSExe::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition DOSExe.h:43
@@ -204,7 +208,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_entry_wrapper_8cpp.html b/_data_dir_entry_wrapper_8cpp.html index edfe4092..93a60ebe 100644 --- a/_data_dir_entry_wrapper_8cpp.html +++ b/_data_dir_entry_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DataDirEntryWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_entry_wrapper_8cpp_source.html b/_data_dir_entry_wrapper_8cpp_source.html index 81d8f6e9..0f19f0ff 100644 --- a/_data_dir_entry_wrapper_8cpp_source.html +++ b/_data_dir_entry_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DataDirEntryWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -154,11 +156,11 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
DataDirEntryWrapper.h
PEFile.h
-
DataDirEntryWrapper::getDirEntrySize
bufsize_t getDirEntrySize(bool trimToExeSize=false)
Definition DataDirEntryWrapper.cpp:33
-
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
+
DataDirEntryWrapper::getDirEntrySize
bufsize_t getDirEntrySize(bool trimToExeSize=false)
Definition DataDirEntryWrapper.cpp:33
+
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
DataDirEntryWrapper::entryType
int entryType
Definition DataDirEntryWrapper.h:20
-
DataDirEntryWrapper::DataDirEntryWrapper
DataDirEntryWrapper(PEFile *pe, pe::dir_entry v_entryType)
Definition DataDirEntryWrapper.cpp:4
-
DataDirEntryWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition DataDirEntryWrapper.cpp:10
+
DataDirEntryWrapper::DataDirEntryWrapper
DataDirEntryWrapper(PEFile *pe, pe::dir_entry v_entryType)
Definition DataDirEntryWrapper.cpp:4
+
DataDirEntryWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition DataDirEntryWrapper.cpp:10
DataDirWrapper
Definition DataDirWrapper.h:6
DataDirWrapper::getDirsCount
size_t getDirsCount()
Definition DataDirWrapper.cpp:21
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
@@ -174,7 +176,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_entry_wrapper_8h.html b/_data_dir_entry_wrapper_8h.html index de093959..999f489e 100644 --- a/_data_dir_entry_wrapper_8h.html +++ b/_data_dir_entry_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DataDirEntryWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_entry_wrapper_8h_source.html b/_data_dir_entry_wrapper_8h_source.html index 1c4ee0a8..342f60db 100644 --- a/_data_dir_entry_wrapper_8h_source.html +++ b/_data_dir_entry_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DataDirEntryWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -100,7 +102,7 @@ $(document).ready(function() { init_codefold(0); });
15 int getDirEntryType() { return this->entryType; }
16
17protected:
-
18 DataDirEntryWrapper(PEFile* pe, pe:: dir_entry v_entryType);
+
18 DataDirEntryWrapper(PEFile* pe, pe:: dir_entry v_entryType);
19
20 int entryType;
21
@@ -112,18 +114,19 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
PENodeWrapper.h
-
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
-
DataDirEntryWrapper::getDirEntryType
int getDirEntryType()
Definition DataDirEntryWrapper.h:15
+
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
+
DataDirEntryWrapper::getDirEntryType
int getDirEntryType()
Definition DataDirEntryWrapper.h:15
DataDirEntryWrapper::getDirEntrySize
bufsize_t getDirEntrySize(bool trimToExeSize=false)
Definition DataDirEntryWrapper.cpp:33
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
-
DataDirEntryWrapper::entryType
int entryType
Definition DataDirEntryWrapper.h:20
+
DataDirEntryWrapper::entryType
int entryType
Definition DataDirEntryWrapper.h:20
+
DataDirEntryWrapper::DataDirEntryWrapper
DataDirEntryWrapper(PEFile *pe, pe::dir_entry v_entryType)
Definition DataDirEntryWrapper.cpp:4
DataDirEntryWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition DataDirEntryWrapper.cpp:10
PEFile
Definition PEFile.h:41
PENodeWrapper
Definition PENodeWrapper.h:25
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_wrapper_8cpp.html b/_data_dir_wrapper_8cpp.html index 9205e337..458326e2 100644 --- a/_data_dir_wrapper_8cpp.html +++ b/_data_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DataDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_wrapper_8cpp_source.html b/_data_dir_wrapper_8cpp_source.html index a650e28a..5080a871 100644 --- a/_data_dir_wrapper_8cpp_source.html +++ b/_data_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DataDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -200,15 +202,15 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
DataDirWrapper.h
PEFile.h
-
DataDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DataDirWrapper.cpp:71
-
DataDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:53
-
DataDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DataDirWrapper.cpp:93
-
DataDirWrapper::getPtr
virtual void * getPtr()
Definition DataDirWrapper.cpp:4
+
DataDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DataDirWrapper.cpp:71
+
DataDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:53
+
DataDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DataDirWrapper.cpp:93
+
DataDirWrapper::getPtr
virtual void * getPtr()
Definition DataDirWrapper.cpp:4
DataDirWrapper::ADDRESS
@ ADDRESS
Definition DataDirWrapper.h:10
DataDirWrapper::SIZE
@ SIZE
Definition DataDirWrapper.h:11
-
DataDirWrapper::getSize
virtual bufsize_t getSize()
Definition DataDirWrapper.cpp:13
-
DataDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:35
-
DataDirWrapper::getDirsCount
size_t getDirsCount()
Definition DataDirWrapper.cpp:21
+
DataDirWrapper::getSize
virtual bufsize_t getSize()
Definition DataDirWrapper.cpp:13
+
DataDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:35
+
DataDirWrapper::getDirsCount
size_t getDirsCount()
Definition DataDirWrapper.cpp:21
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
ExeWrappersContainer::getWrapper
virtual ExeElementWrapper * getWrapper(size_t wrapperId)
Definition MappedExe.cpp:13
@@ -225,7 +227,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_wrapper_8h.html b/_data_dir_wrapper_8h.html index c26f7578..7134ce76 100644 --- a/_data_dir_wrapper_8h.html +++ b/_data_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DataDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_data_dir_wrapper_8h_source.html b/_data_dir_wrapper_8h_source.html index 9103fa6f..17f672b1 100644 --- a/_data_dir_wrapper_8h_source.html +++ b/_data_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DataDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -122,20 +124,20 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
PENodeWrapper.h
-
DataDirWrapper
Definition DataDirWrapper.h:6
+
DataDirWrapper
Definition DataDirWrapper.h:6
DataDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DataDirWrapper.cpp:71
DataDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:53
-
DataDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DataDirWrapper.h:22
-
DataDirWrapper::getName
virtual QString getName()
Definition DataDirWrapper.h:21
-
DataDirWrapper::DataDirWrapper
DataDirWrapper(PEFile *pe)
Definition DataDirWrapper.h:15
+
DataDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DataDirWrapper.h:22
+
DataDirWrapper::getName
virtual QString getName()
Definition DataDirWrapper.h:21
+
DataDirWrapper::DataDirWrapper
DataDirWrapper(PEFile *pe)
Definition DataDirWrapper.h:15
DataDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DataDirWrapper.cpp:93
DataDirWrapper::getPtr
virtual void * getPtr()
Definition DataDirWrapper.cpp:4
-
DataDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DataDirWrapper.h:16
-
DataDirWrapper::DataDirSID
DataDirSID
Definition DataDirWrapper.h:8
-
DataDirWrapper::ADDRESS
@ ADDRESS
Definition DataDirWrapper.h:10
-
DataDirWrapper::NONE
@ NONE
Definition DataDirWrapper.h:9
-
DataDirWrapper::COUNTER
@ COUNTER
Definition DataDirWrapper.h:12
-
DataDirWrapper::SIZE
@ SIZE
Definition DataDirWrapper.h:11
+
DataDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DataDirWrapper.h:16
+
DataDirWrapper::DataDirSID
DataDirSID
Definition DataDirWrapper.h:8
+
DataDirWrapper::ADDRESS
@ ADDRESS
Definition DataDirWrapper.h:10
+
DataDirWrapper::NONE
@ NONE
Definition DataDirWrapper.h:9
+
DataDirWrapper::COUNTER
@ COUNTER
Definition DataDirWrapper.h:12
+
DataDirWrapper::SIZE
@ SIZE
Definition DataDirWrapper.h:11
DataDirWrapper::getSize
virtual bufsize_t getSize()
Definition DataDirWrapper.cpp:13
DataDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DataDirWrapper.cpp:35
DataDirWrapper::getDirsCount
size_t getDirsCount()
Definition DataDirWrapper.cpp:21
@@ -145,7 +147,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_debug_dir_wrapper_8cpp.html b/_debug_dir_wrapper_8cpp.html index eb58dc17..571cc863 100644 --- a/_debug_dir_wrapper_8cpp.html +++ b/_debug_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DebugDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_debug_dir_wrapper_8cpp_source.html b/_debug_dir_wrapper_8cpp_source.html index cb583d94..932f5e12 100644 --- a/_debug_dir_wrapper_8cpp_source.html +++ b/_debug_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DebugDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -452,25 +454,25 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
DebugDirWrapper.h
DebugDirCVEntryWrapper
Definition DebugDirWrapper.h:132
-
DebugDirCVEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:309
-
DebugDirCVEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:298
-
DebugDirCVEntryWrapper::getSignature
QString getSignature()
Definition DebugDirWrapper.cpp:284
+
DebugDirCVEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:309
+
DebugDirCVEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:298
+
DebugDirCVEntryWrapper::getSignature
QString getSignature()
Definition DebugDirWrapper.cpp:284
DebugDirCVEntryWrapper::F_CVDBG_SIGN
@ F_CVDBG_SIGN
Definition DebugDirWrapper.h:137
DebugDirCVEntryWrapper::F_CVDBG_GUID
@ F_CVDBG_GUID
Definition DebugDirWrapper.h:138
DebugDirCVEntryWrapper::F_CVDBG_AGE
@ F_CVDBG_AGE
Definition DebugDirWrapper.h:139
DebugDirCVEntryWrapper::F_CVDBG_PDB
@ F_CVDBG_PDB
Definition DebugDirWrapper.h:140
-
DebugDirCVEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:191
-
DebugDirCVEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:207
-
DebugDirCVEntryWrapper::getGuidString
QString getGuidString()
Definition DebugDirWrapper.cpp:232
-
DebugDirCVEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:200
+
DebugDirCVEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:191
+
DebugDirCVEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:207
+
DebugDirCVEntryWrapper::getGuidString
QString getGuidString()
Definition DebugDirWrapper.cpp:232
+
DebugDirCVEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:200
DebugDirEntryWrapper
Definition DebugDirWrapper.h:67
-
DebugDirEntryWrapper::getRDSI
pe::DEBUG_RSDSI * getRDSI()
Definition DebugDirWrapper.cpp:160
-
DebugDirEntryWrapper::wrap
bool wrap()
Definition DebugDirWrapper.cpp:52
+
DebugDirEntryWrapper::getRDSI
pe::DEBUG_RSDSI * getRDSI()
Definition DebugDirWrapper.cpp:160
+
DebugDirEntryWrapper::wrap
bool wrap()
Definition DebugDirWrapper.cpp:52
DebugDirEntryWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:96
DebugDirEntryWrapper::dbgRootDir
DebugDirWrapper * dbgRootDir
Definition DebugDirWrapper.h:125
-
DebugDirEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:138
-
DebugDirEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:90
-
DebugDirEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:61
+
DebugDirEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:138
+
DebugDirEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:90
+
DebugDirEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:61
DebugDirEntryWrapper::RAW_DATA_PTR
@ RAW_DATA_PTR
Definition DebugDirWrapper.h:79
DebugDirEntryWrapper::MINOR_VER
@ MINOR_VER
Definition DebugDirWrapper.h:75
DebugDirEntryWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition DebugDirWrapper.h:72
@@ -479,17 +481,17 @@ $(document).ready(function() { init_codefold(0); });
DebugDirEntryWrapper::DATA_SIZE
@ DATA_SIZE
Definition DebugDirWrapper.h:77
DebugDirEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DebugDirWrapper.h:73
DebugDirEntryWrapper::RAW_DATA_ADDR
@ RAW_DATA_ADDR
Definition DebugDirWrapper.h:78
-
DebugDirEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:66
+
DebugDirEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:66
DebugDirEntryWrapper::debugDir
IMAGE_DEBUG_DIRECTORY * debugDir()
Definition DebugDirWrapper.h:115
DebugDirEntryWrapper::DebugDirCVEntryWrapper
friend class DebugDirCVEntryWrapper
Definition DebugDirWrapper.h:127
-
DebugDirEntryWrapper::getNB10
pe::DEBUG_NB10 * getNB10()
Definition DebugDirWrapper.cpp:175
-
DebugDirEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DebugDirWrapper.cpp:72
-
DebugDirEntryWrapper::getDebugStruct
BYTE * getDebugStruct()
Definition DebugDirWrapper.cpp:148
-
DebugDirEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:105
-
DebugDirEntryWrapper::translateType
QString translateType(int type)
Definition DebugDirWrapper.cpp:114
+
DebugDirEntryWrapper::getNB10
pe::DEBUG_NB10 * getNB10()
Definition DebugDirWrapper.cpp:175
+
DebugDirEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DebugDirWrapper.cpp:72
+
DebugDirEntryWrapper::getDebugStruct
BYTE * getDebugStruct()
Definition DebugDirWrapper.cpp:148
+
DebugDirEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:105
+
DebugDirEntryWrapper::translateType
QString translateType(int type)
Definition DebugDirWrapper.cpp:114
DebugDirWrapper::DebugDirEntryWrapper
friend class DebugDirEntryWrapper
Definition DebugDirWrapper.h:62
-
DebugDirWrapper::isRepro
bool isRepro()
Definition DebugDirWrapper.cpp:36
-
DebugDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DebugDirWrapper.cpp:19
+
DebugDirWrapper::isRepro
bool isRepro()
Definition DebugDirWrapper.cpp:36
+
DebugDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DebugDirWrapper.cpp:19
DebugDirWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.h:15
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
@@ -503,7 +505,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_debug_dir_wrapper_8h.html b/_debug_dir_wrapper_8h.html index 629504dd..ec1bee7d 100644 --- a/_debug_dir_wrapper_8h.html +++ b/_debug_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DebugDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_debug_dir_wrapper_8h_source.html b/_debug_dir_wrapper_8h_source.html index cdec6bb3..be6abd1b 100644 --- a/_debug_dir_wrapper_8h_source.html +++ b/_debug_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DebugDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -290,70 +292,70 @@ $(document).ready(function() { init_codefold(0); });
DataDirEntryWrapper::getDirEntrySize
bufsize_t getDirEntrySize(bool trimToExeSize=false)
Definition DataDirEntryWrapper.cpp:33
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
DataDirEntryWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition DataDirEntryWrapper.cpp:10
-
DebugDirCVEntryWrapper
Definition DebugDirWrapper.h:132
+
DebugDirCVEntryWrapper
Definition DebugDirWrapper.h:132
DebugDirCVEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:309
DebugDirCVEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:298
-
DebugDirCVEntryWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:154
+
DebugDirCVEntryWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:154
DebugDirCVEntryWrapper::getSignature
QString getSignature()
Definition DebugDirWrapper.cpp:284
-
DebugDirCVEntryWrapper::FieldID
FieldID
Definition DebugDirWrapper.h:135
-
DebugDirCVEntryWrapper::F_CVDBG_SIGN
@ F_CVDBG_SIGN
Definition DebugDirWrapper.h:137
-
DebugDirCVEntryWrapper::F_CVDBG_GUID
@ F_CVDBG_GUID
Definition DebugDirWrapper.h:138
-
DebugDirCVEntryWrapper::F_CVDBG_AGE
@ F_CVDBG_AGE
Definition DebugDirWrapper.h:139
-
DebugDirCVEntryWrapper::NONE
@ NONE
Definition DebugDirWrapper.h:136
-
DebugDirCVEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DebugDirWrapper.h:141
-
DebugDirCVEntryWrapper::F_CVDBG_PDB
@ F_CVDBG_PDB
Definition DebugDirWrapper.h:140
+
DebugDirCVEntryWrapper::FieldID
FieldID
Definition DebugDirWrapper.h:135
+
DebugDirCVEntryWrapper::F_CVDBG_SIGN
@ F_CVDBG_SIGN
Definition DebugDirWrapper.h:137
+
DebugDirCVEntryWrapper::F_CVDBG_GUID
@ F_CVDBG_GUID
Definition DebugDirWrapper.h:138
+
DebugDirCVEntryWrapper::F_CVDBG_AGE
@ F_CVDBG_AGE
Definition DebugDirWrapper.h:139
+
DebugDirCVEntryWrapper::NONE
@ NONE
Definition DebugDirWrapper.h:136
+
DebugDirCVEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DebugDirWrapper.h:141
+
DebugDirCVEntryWrapper::F_CVDBG_PDB
@ F_CVDBG_PDB
Definition DebugDirWrapper.h:140
DebugDirCVEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:191
-
DebugDirCVEntryWrapper::DebugDirCVEntryWrapper
DebugDirCVEntryWrapper(Executable *pe, DebugDirEntryWrapper *_parentDir)
Definition DebugDirWrapper.h:144
+
DebugDirCVEntryWrapper::DebugDirCVEntryWrapper
DebugDirCVEntryWrapper(Executable *pe, DebugDirEntryWrapper *_parentDir)
Definition DebugDirWrapper.h:144
DebugDirCVEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:207
DebugDirCVEntryWrapper::getGuidString
QString getGuidString()
Definition DebugDirWrapper.cpp:232
-
DebugDirCVEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:155
-
DebugDirCVEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:161
+
DebugDirCVEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:155
+
DebugDirCVEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:161
DebugDirCVEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:200
-
DebugDirCVEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DebugDirWrapper.h:156
-
DebugDirEntryWrapper
Definition DebugDirWrapper.h:67
+
DebugDirCVEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DebugDirWrapper.h:156
+
DebugDirEntryWrapper
Definition DebugDirWrapper.h:67
DebugDirEntryWrapper::getRDSI
pe::DEBUG_RSDSI * getRDSI()
Definition DebugDirWrapper.cpp:160
DebugDirEntryWrapper::wrap
bool wrap()
Definition DebugDirWrapper.cpp:52
-
DebugDirEntryWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:96
-
DebugDirEntryWrapper::dbgRootDir
DebugDirWrapper * dbgRootDir
Definition DebugDirWrapper.h:125
+
DebugDirEntryWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:96
+
DebugDirEntryWrapper::dbgRootDir
DebugDirWrapper * dbgRootDir
Definition DebugDirWrapper.h:125
DebugDirEntryWrapper::translateFieldContent
QString translateFieldContent(size_t fieldId)
Definition DebugDirWrapper.cpp:138
DebugDirEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.cpp:90
-
DebugDirEntryWrapper::DebugDirEntryWrapper
DebugDirEntryWrapper(PEFile *pe, DebugDirWrapper *rootDir, size_t entryNumber)
Definition DebugDirWrapper.h:83
-
DebugDirEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DebugDirWrapper.h:104
-
DebugDirEntryWrapper::~DebugDirEntryWrapper
~DebugDirEntryWrapper()
Definition DebugDirWrapper.h:89
+
DebugDirEntryWrapper::DebugDirEntryWrapper
DebugDirEntryWrapper(PEFile *pe, DebugDirWrapper *rootDir, size_t entryNumber)
Definition DebugDirWrapper.h:83
+
DebugDirEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DebugDirWrapper.h:104
+
DebugDirEntryWrapper::~DebugDirEntryWrapper
~DebugDirEntryWrapper()
Definition DebugDirWrapper.h:89
DebugDirEntryWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.cpp:61
-
DebugDirEntryWrapper::DebugDirFID
DebugDirFID
Definition DebugDirWrapper.h:70
-
DebugDirEntryWrapper::RAW_DATA_PTR
@ RAW_DATA_PTR
Definition DebugDirWrapper.h:79
-
DebugDirEntryWrapper::MINOR_VER
@ MINOR_VER
Definition DebugDirWrapper.h:75
-
DebugDirEntryWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition DebugDirWrapper.h:72
-
DebugDirEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DebugDirWrapper.h:80
-
DebugDirEntryWrapper::NONE
@ NONE
Definition DebugDirWrapper.h:71
-
DebugDirEntryWrapper::TYPE
@ TYPE
Definition DebugDirWrapper.h:76
-
DebugDirEntryWrapper::MAJOR_VER
@ MAJOR_VER
Definition DebugDirWrapper.h:74
-
DebugDirEntryWrapper::DATA_SIZE
@ DATA_SIZE
Definition DebugDirWrapper.h:77
-
DebugDirEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DebugDirWrapper.h:73
-
DebugDirEntryWrapper::RAW_DATA_ADDR
@ RAW_DATA_ADDR
Definition DebugDirWrapper.h:78
+
DebugDirEntryWrapper::DebugDirFID
DebugDirFID
Definition DebugDirWrapper.h:70
+
DebugDirEntryWrapper::RAW_DATA_PTR
@ RAW_DATA_PTR
Definition DebugDirWrapper.h:79
+
DebugDirEntryWrapper::MINOR_VER
@ MINOR_VER
Definition DebugDirWrapper.h:75
+
DebugDirEntryWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition DebugDirWrapper.h:72
+
DebugDirEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DebugDirWrapper.h:80
+
DebugDirEntryWrapper::NONE
@ NONE
Definition DebugDirWrapper.h:71
+
DebugDirEntryWrapper::TYPE
@ TYPE
Definition DebugDirWrapper.h:76
+
DebugDirEntryWrapper::MAJOR_VER
@ MAJOR_VER
Definition DebugDirWrapper.h:74
+
DebugDirEntryWrapper::DATA_SIZE
@ DATA_SIZE
Definition DebugDirWrapper.h:77
+
DebugDirEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DebugDirWrapper.h:73
+
DebugDirEntryWrapper::RAW_DATA_ADDR
@ RAW_DATA_ADDR
Definition DebugDirWrapper.h:78
DebugDirEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.cpp:66
-
DebugDirEntryWrapper::debugDir
IMAGE_DEBUG_DIRECTORY * debugDir()
Definition DebugDirWrapper.h:115
+
DebugDirEntryWrapper::debugDir
IMAGE_DEBUG_DIRECTORY * debugDir()
Definition DebugDirWrapper.h:115
DebugDirEntryWrapper::getNB10
pe::DEBUG_NB10 * getNB10()
Definition DebugDirWrapper.cpp:175
DebugDirEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DebugDirWrapper.cpp:72
DebugDirEntryWrapper::getDebugStruct
BYTE * getDebugStruct()
Definition DebugDirWrapper.cpp:148
-
DebugDirEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:103
+
DebugDirEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:103
DebugDirEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.cpp:105
DebugDirEntryWrapper::translateType
QString translateType(int type)
Definition DebugDirWrapper.cpp:114
-
DebugDirWrapper
Definition DebugDirWrapper.h:8
-
DebugDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.h:29
-
DebugDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:28
-
DebugDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:22
-
DebugDirWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.h:13
-
DebugDirWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:20
-
DebugDirWrapper::getDebugDir
IMAGE_DEBUG_DIRECTORY * getDebugDir(size_t index=0)
Definition DebugDirWrapper.h:52
+
DebugDirWrapper
Definition DebugDirWrapper.h:8
+
DebugDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DebugDirWrapper.h:29
+
DebugDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:28
+
DebugDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DebugDirWrapper.h:22
+
DebugDirWrapper::getPtr
virtual void * getPtr()
Definition DebugDirWrapper.h:13
+
DebugDirWrapper::getName
virtual QString getName()
Definition DebugDirWrapper.h:20
+
DebugDirWrapper::getDebugDir
IMAGE_DEBUG_DIRECTORY * getDebugDir(size_t index=0)
Definition DebugDirWrapper.h:52
DebugDirWrapper::isRepro
bool isRepro()
Definition DebugDirWrapper.cpp:36
DebugDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DebugDirWrapper.cpp:19
-
DebugDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.h:30
-
DebugDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:27
-
DebugDirWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.h:15
-
DebugDirWrapper::DebugDirWrapper
DebugDirWrapper(PEFile *pe)
Definition DebugDirWrapper.h:10
-
DebugDirWrapper::wrap
bool wrap()
Definition DebugDirWrapper.h:36
+
DebugDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition DebugDirWrapper.h:30
+
DebugDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DebugDirWrapper.h:27
+
DebugDirWrapper::getSize
virtual bufsize_t getSize()
Definition DebugDirWrapper.h:15
+
DebugDirWrapper::DebugDirWrapper
DebugDirWrapper(PEFile *pe)
Definition DebugDirWrapper.h:10
+
DebugDirWrapper::wrap
bool wrap()
Definition DebugDirWrapper.h:36
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
ExeNodeWrapper::getSubfieldPtr
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
@@ -372,7 +374,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_delay_imp_dir_wrapper_8cpp.html b/_delay_imp_dir_wrapper_8cpp.html index cb72b063..a80bea91 100644 --- a/_delay_imp_dir_wrapper_8cpp.html +++ b/_delay_imp_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DelayImpDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_delay_imp_dir_wrapper_8cpp_source.html b/_delay_imp_dir_wrapper_8cpp_source.html index 15b59917..3be1cafa 100644 --- a/_delay_imp_dir_wrapper_8cpp_source.html +++ b/_delay_imp_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DelayImpDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -482,21 +484,21 @@ $(document).ready(function() { init_codefold(0); });
PEFile.h
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
DelayImpDirWrapper
Definition DelayImpDirWrapper.h:9
-
DelayImpDirWrapper::getEntrySize
bufsize_t getEntrySize()
Definition DelayImpDirWrapper.cpp:64
+
DelayImpDirWrapper::getEntrySize
bufsize_t getEntrySize()
Definition DelayImpDirWrapper.cpp:64
DelayImpDirWrapper::firstDelayLd
pe::IMAGE_DELAY_LOAD * firstDelayLd()
Definition DelayImpDirWrapper.h:24
-
DelayImpDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DelayImpDirWrapper.cpp:34
-
DelayImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:58
+
DelayImpDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DelayImpDirWrapper.cpp:34
+
DelayImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:58
DelayImpDirWrapper::DelayImpEntryWrapper
friend class DelayImpEntryWrapper
Definition DelayImpDirWrapper.h:28
-
DelayImpDirWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:52
-
DelayImpDirWrapper::is64
bool is64()
Definition DelayImpDirWrapper.cpp:18
+
DelayImpDirWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:52
+
DelayImpDirWrapper::is64
bool is64()
Definition DelayImpDirWrapper.cpp:18
DelayImpEntryWrapper
Definition DelayImpDirWrapper.h:32
-
DelayImpEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:153
-
DelayImpEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:171
-
DelayImpEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:186
-
DelayImpEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition DelayImpDirWrapper.cpp:138
-
DelayImpEntryWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:102
-
DelayImpEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:125
-
DelayImpEntryWrapper::getFirstImpByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr()
Definition DelayImpDirWrapper.cpp:71
+
DelayImpEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:153
+
DelayImpEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:171
+
DelayImpEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:186
+
DelayImpEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition DelayImpDirWrapper.cpp:138
+
DelayImpEntryWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:102
+
DelayImpEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:125
+
DelayImpEntryWrapper::getFirstImpByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr()
Definition DelayImpDirWrapper.cpp:71
DelayImpEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DelayImpDirWrapper.h:43
DelayImpEntryWrapper::BOUND_IAT
@ BOUND_IAT
Definition DelayImpDirWrapper.h:41
DelayImpEntryWrapper::UNLOAD_IAT
@ UNLOAD_IAT
Definition DelayImpDirWrapper.h:42
@@ -505,24 +507,24 @@ $(document).ready(function() { init_codefold(0); });
DelayImpEntryWrapper::ATTRS
@ ATTRS
Definition DelayImpDirWrapper.h:36
DelayImpEntryWrapper::NAME
@ NAME
Definition DelayImpDirWrapper.h:37
DelayImpEntryWrapper::INT
@ INT
Definition DelayImpDirWrapper.h:40
-
DelayImpEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition DelayImpDirWrapper.cpp:82
+
DelayImpEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition DelayImpDirWrapper.cpp:82
DelayImpEntryWrapper::DelayImpFuncWrapper
friend class DelayImpFuncWrapper
Definition DelayImpDirWrapper.h:67
-
DelayImpEntryWrapper::getName
virtual QString getName()
Definition DelayImpDirWrapper.cpp:131
+
DelayImpEntryWrapper::getName
virtual QString getName()
Definition DelayImpDirWrapper.cpp:131
DelayImpFuncWrapper
Definition DelayImpDirWrapper.h:72
-
DelayImpFuncWrapper::getFunctionName
char * getFunctionName()
Definition DelayImpDirWrapper.cpp:236
-
DelayImpFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:318
-
DelayImpFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition DelayImpDirWrapper.cpp:208
+
DelayImpFuncWrapper::getFunctionName
char * getFunctionName()
Definition DelayImpDirWrapper.cpp:236
+
DelayImpFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:318
+
DelayImpFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition DelayImpDirWrapper.cpp:208
DelayImpFuncWrapper::BOUND_IAT_ADDR
@ BOUND_IAT_ADDR
Definition DelayImpDirWrapper.h:79
DelayImpFuncWrapper::IAT_ADDR
@ IAT_ADDR
Definition DelayImpDirWrapper.h:78
DelayImpFuncWrapper::NAMETHUNK_ADDR
@ NAMETHUNK_ADDR
Definition DelayImpDirWrapper.h:77
DelayImpFuncWrapper::UNLOAD_IAT_ADDR
@ UNLOAD_IAT_ADDR
Definition DelayImpDirWrapper.h:80
-
DelayImpFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:309
-
DelayImpFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()
Definition DelayImpDirWrapper.cpp:223
-
DelayImpFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:298
-
DelayImpFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:257
-
DelayImpFuncWrapper::getHint
uint16_t getHint()
Definition DelayImpDirWrapper.cpp:247
+
DelayImpFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:309
+
DelayImpFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()
Definition DelayImpDirWrapper.cpp:223
+
DelayImpFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:298
+
DelayImpFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:257
+
DelayImpFuncWrapper::getHint
uint16_t getHint()
Definition DelayImpDirWrapper.cpp:247
DelayImpFuncWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.h:88
-
DelayImpFuncWrapper::callVia
offset_t callVia()
Definition DelayImpDirWrapper.cpp:287
+
DelayImpFuncWrapper::callVia
offset_t callVia()
Definition DelayImpDirWrapper.cpp:287
ExeElementWrapper::isBit64
bool isBit64()
Definition ExeElementWrapper.h:58
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
@@ -546,7 +548,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_delay_imp_dir_wrapper_8h.html b/_delay_imp_dir_wrapper_8h.html index c364a934..960dc97f 100644 --- a/_delay_imp_dir_wrapper_8h.html +++ b/_delay_imp_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DelayImpDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_delay_imp_dir_wrapper_8h_source.html b/_delay_imp_dir_wrapper_8h_source.html index bf809145..63da9693 100644 --- a/_delay_imp_dir_wrapper_8h_source.html +++ b/_delay_imp_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DelayImpDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -214,60 +216,60 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
ImportBaseDirWrapper.h
-
DelayImpDirWrapper
Definition DelayImpDirWrapper.h:9
-
DelayImpDirWrapper::is32
bool is32()
Definition DelayImpDirWrapper.h:22
-
DelayImpDirWrapper::DelayImpDirWrapper
DelayImpDirWrapper(PEFile *pe)
Definition DelayImpDirWrapper.h:11
+
DelayImpDirWrapper
Definition DelayImpDirWrapper.h:9
+
DelayImpDirWrapper::is32
bool is32()
Definition DelayImpDirWrapper.h:22
+
DelayImpDirWrapper::DelayImpDirWrapper
DelayImpDirWrapper(PEFile *pe)
Definition DelayImpDirWrapper.h:11
DelayImpDirWrapper::getEntrySize
bufsize_t getEntrySize()
Definition DelayImpDirWrapper.cpp:64
-
DelayImpDirWrapper::getName
virtual QString getName()
Definition DelayImpDirWrapper.h:16
-
DelayImpDirWrapper::firstDelayLd
pe::IMAGE_DELAY_LOAD * firstDelayLd()
Definition DelayImpDirWrapper.h:24
+
DelayImpDirWrapper::getName
virtual QString getName()
Definition DelayImpDirWrapper.h:16
+
DelayImpDirWrapper::firstDelayLd
pe::IMAGE_DELAY_LOAD * firstDelayLd()
Definition DelayImpDirWrapper.h:24
DelayImpDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition DelayImpDirWrapper.cpp:34
DelayImpDirWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:58
DelayImpDirWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:52
DelayImpDirWrapper::is64
bool is64()
Definition DelayImpDirWrapper.cpp:18
-
DelayImpEntryWrapper
Definition DelayImpDirWrapper.h:32
+
DelayImpEntryWrapper
Definition DelayImpDirWrapper.h:32
DelayImpEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:153
DelayImpEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:171
DelayImpEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:186
DelayImpEntryWrapper::getLibraryName
virtual char * getLibraryName()
Definition DelayImpDirWrapper.cpp:138
DelayImpEntryWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.cpp:102
DelayImpEntryWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.cpp:125
-
DelayImpEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DelayImpDirWrapper.h:56
-
DelayImpEntryWrapper::DelayImpEntryWrapper
DelayImpEntryWrapper(PEFile *pe, DelayImpDirWrapper *importsDir, size_t entryNumber)
Definition DelayImpDirWrapper.h:47
+
DelayImpEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DelayImpDirWrapper.h:56
+
DelayImpEntryWrapper::DelayImpEntryWrapper
DelayImpEntryWrapper(PEFile *pe, DelayImpDirWrapper *importsDir, size_t entryNumber)
Definition DelayImpDirWrapper.h:47
DelayImpEntryWrapper::getFirstImpByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr()
Definition DelayImpDirWrapper.cpp:71
-
DelayImpEntryWrapper::DelayImpDirFID
DelayImpDirFID
Definition DelayImpDirWrapper.h:34
-
DelayImpEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DelayImpDirWrapper.h:43
-
DelayImpEntryWrapper::BOUND_IAT
@ BOUND_IAT
Definition DelayImpDirWrapper.h:41
-
DelayImpEntryWrapper::UNLOAD_IAT
@ UNLOAD_IAT
Definition DelayImpDirWrapper.h:42
-
DelayImpEntryWrapper::IAT
@ IAT
Definition DelayImpDirWrapper.h:39
-
DelayImpEntryWrapper::MOD
@ MOD
Definition DelayImpDirWrapper.h:38
-
DelayImpEntryWrapper::ATTRS
@ ATTRS
Definition DelayImpDirWrapper.h:36
-
DelayImpEntryWrapper::NAME
@ NAME
Definition DelayImpDirWrapper.h:37
-
DelayImpEntryWrapper::NONE
@ NONE
Definition DelayImpDirWrapper.h:35
-
DelayImpEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DelayImpDirWrapper.h:44
-
DelayImpEntryWrapper::INT
@ INT
Definition DelayImpDirWrapper.h:40
+
DelayImpEntryWrapper::DelayImpDirFID
DelayImpDirFID
Definition DelayImpDirWrapper.h:34
+
DelayImpEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition DelayImpDirWrapper.h:43
+
DelayImpEntryWrapper::BOUND_IAT
@ BOUND_IAT
Definition DelayImpDirWrapper.h:41
+
DelayImpEntryWrapper::UNLOAD_IAT
@ UNLOAD_IAT
Definition DelayImpDirWrapper.h:42
+
DelayImpEntryWrapper::IAT
@ IAT
Definition DelayImpDirWrapper.h:39
+
DelayImpEntryWrapper::MOD
@ MOD
Definition DelayImpDirWrapper.h:38
+
DelayImpEntryWrapper::ATTRS
@ ATTRS
Definition DelayImpDirWrapper.h:36
+
DelayImpEntryWrapper::NAME
@ NAME
Definition DelayImpDirWrapper.h:37
+
DelayImpEntryWrapper::NONE
@ NONE
Definition DelayImpDirWrapper.h:35
+
DelayImpEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DelayImpDirWrapper.h:44
+
DelayImpEntryWrapper::INT
@ INT
Definition DelayImpDirWrapper.h:40
DelayImpEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition DelayImpDirWrapper.cpp:82
DelayImpEntryWrapper::getName
virtual QString getName()
Definition DelayImpDirWrapper.cpp:131
-
DelayImpFuncWrapper
Definition DelayImpDirWrapper.h:72
-
DelayImpFuncWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DelayImpDirWrapper.h:92
+
DelayImpFuncWrapper
Definition DelayImpDirWrapper.h:72
+
DelayImpFuncWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DelayImpDirWrapper.h:92
DelayImpFuncWrapper::getFunctionName
char * getFunctionName()
Definition DelayImpDirWrapper.cpp:236
DelayImpFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition DelayImpDirWrapper.cpp:318
DelayImpFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition DelayImpDirWrapper.cpp:208
-
DelayImpFuncWrapper::FieldID
FieldID
Definition DelayImpDirWrapper.h:75
-
DelayImpFuncWrapper::BOUND_IAT_ADDR
@ BOUND_IAT_ADDR
Definition DelayImpDirWrapper.h:79
-
DelayImpFuncWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DelayImpDirWrapper.h:81
-
DelayImpFuncWrapper::IAT_ADDR
@ IAT_ADDR
Definition DelayImpDirWrapper.h:78
-
DelayImpFuncWrapper::NAMETHUNK_ADDR
@ NAMETHUNK_ADDR
Definition DelayImpDirWrapper.h:77
-
DelayImpFuncWrapper::NONE
@ NONE
Definition DelayImpDirWrapper.h:76
-
DelayImpFuncWrapper::UNLOAD_IAT_ADDR
@ UNLOAD_IAT_ADDR
Definition DelayImpDirWrapper.h:80
-
DelayImpFuncWrapper::DelayImpFuncWrapper
DelayImpFuncWrapper(PEFile *pe, DelayImpEntryWrapper *parentDir, size_t entryNumber)
Definition DelayImpDirWrapper.h:84
+
DelayImpFuncWrapper::FieldID
FieldID
Definition DelayImpDirWrapper.h:75
+
DelayImpFuncWrapper::BOUND_IAT_ADDR
@ BOUND_IAT_ADDR
Definition DelayImpDirWrapper.h:79
+
DelayImpFuncWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DelayImpDirWrapper.h:81
+
DelayImpFuncWrapper::IAT_ADDR
@ IAT_ADDR
Definition DelayImpDirWrapper.h:78
+
DelayImpFuncWrapper::NAMETHUNK_ADDR
@ NAMETHUNK_ADDR
Definition DelayImpDirWrapper.h:77
+
DelayImpFuncWrapper::NONE
@ NONE
Definition DelayImpDirWrapper.h:76
+
DelayImpFuncWrapper::UNLOAD_IAT_ADDR
@ UNLOAD_IAT_ADDR
Definition DelayImpDirWrapper.h:80
+
DelayImpFuncWrapper::DelayImpFuncWrapper
DelayImpFuncWrapper(PEFile *pe, DelayImpEntryWrapper *parentDir, size_t entryNumber)
Definition DelayImpDirWrapper.h:84
DelayImpFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:309
DelayImpFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()
Definition DelayImpDirWrapper.cpp:223
DelayImpFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DelayImpDirWrapper.cpp:298
-
DelayImpFuncWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DelayImpDirWrapper.h:93
+
DelayImpFuncWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition DelayImpDirWrapper.h:93
DelayImpFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DelayImpDirWrapper.cpp:257
DelayImpFuncWrapper::getHint
uint16_t getHint()
Definition DelayImpDirWrapper.cpp:247
-
DelayImpFuncWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.h:88
-
DelayImpFuncWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.h:89
+
DelayImpFuncWrapper::getPtr
virtual void * getPtr()
Definition DelayImpDirWrapper.h:88
+
DelayImpFuncWrapper::getSize
virtual bufsize_t getSize()
Definition DelayImpDirWrapper.h:89
DelayImpFuncWrapper::callVia
offset_t callVia()
Definition DelayImpDirWrapper.cpp:287
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeNodeWrapper::entryNum
size_t entryNum
Definition ExeNodeWrapper.h:54
@@ -283,7 +285,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_dos_hdr_wrapper_8cpp.html b/_dos_hdr_wrapper_8cpp.html index e424f3a5..1159ab38 100644 --- a/_dos_hdr_wrapper_8cpp.html +++ b/_dos_hdr_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DosHdrWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_dos_hdr_wrapper_8cpp_source.html b/_dos_hdr_wrapper_8cpp_source.html index d59663cc..74ea4ad8 100644 --- a/_dos_hdr_wrapper_8cpp_source.html +++ b/_dos_hdr_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/DosHdrWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -165,7 +167,7 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
DOSExe.h
DosHdrWrapper.h
-
DosHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:65
+
DosHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:65
DosHdrWrapper::SS
@ SS
Definition DosHdrWrapper.h:21
DosHdrWrapper::CP
@ CP
Definition DosHdrWrapper.h:16
DosHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition DosHdrWrapper.h:33
@@ -186,8 +188,8 @@ $(document).ready(function() { init_codefold(0); });
DosHdrWrapper::CRLC
@ CRLC
Definition DosHdrWrapper.h:17
DosHdrWrapper::OVNO
@ OVNO
Definition DosHdrWrapper.h:27
DosHdrWrapper::RES2
@ RES2
Definition DosHdrWrapper.h:31
-
DosHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:4
-
DosHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DosHdrWrapper.cpp:39
+
DosHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:4
+
DosHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DosHdrWrapper.cpp:39
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
@@ -196,7 +198,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_dos_hdr_wrapper_8h.html b/_dos_hdr_wrapper_8h.html index e1a78c49..841bb5e3 100644 --- a/_dos_hdr_wrapper_8h.html +++ b/_dos_hdr_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DosHdrWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_dos_hdr_wrapper_8h_source.html b/_dos_hdr_wrapper_8h_source.html index 05691385..d1c09751 100644 --- a/_dos_hdr_wrapper_8h_source.html +++ b/_dos_hdr_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/DosHdrWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,8 +86,8 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../ExeElementWrapper.h"
-
4#include "../Executable.h"
+
3#include "../ExeElementWrapper.h"
+
4#include "../Executable.h"
5
6#include "pe_formats.h"
7
@@ -137,38 +139,40 @@ $(document).ready(function() { init_codefold(0); });
49
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
+
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
- + +
DosHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:65
- - - - - - - - - - - - - - - - - - - - - - -
DosHdrWrapper::getName
virtual QString getName()
Definition DosHdrWrapper.h:41
+ + + + + + + + + + + + + + + + + + + + + + +
DosHdrWrapper::getName
virtual QString getName()
Definition DosHdrWrapper.h:41
DosHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition DosHdrWrapper.cpp:4
DosHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition DosHdrWrapper.cpp:39
-
DosHdrWrapper::getSize
virtual bufsize_t getSize()
Definition DosHdrWrapper.h:40
-
DosHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DosHdrWrapper.h:42
-
DosHdrWrapper::getPtr
virtual void * getPtr()
Definition DosHdrWrapper.h:39
-
DosHdrWrapper::DosHdrWrapper
DosHdrWrapper(Executable *dosExe)
Definition DosHdrWrapper.h:36
+
DosHdrWrapper::getSize
virtual bufsize_t getSize()
Definition DosHdrWrapper.h:40
+
DosHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition DosHdrWrapper.h:42
+
DosHdrWrapper::getPtr
virtual void * getPtr()
Definition DosHdrWrapper.h:39
+
DosHdrWrapper::DosHdrWrapper
DosHdrWrapper(Executable *dosExe)
Definition DosHdrWrapper.h:36
@@ -177,7 +181,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exception_dir_wrapper_8cpp.html b/_exception_dir_wrapper_8cpp.html index f21d592b..1230ef1e 100644 --- a/_exception_dir_wrapper_8cpp.html +++ b/_exception_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ExceptionDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exception_dir_wrapper_8cpp_source.html b/_exception_dir_wrapper_8cpp_source.html index 8dd98790..7f1d3368 100644 --- a/_exception_dir_wrapper_8cpp_source.html +++ b/_exception_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ExceptionDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -213,18 +215,18 @@ $(document).ready(function() { init_codefold(0); });
DataDirEntryWrapper::getDirEntrySize
bufsize_t getDirEntrySize(bool trimToExeSize=false)
Definition DataDirEntryWrapper.cpp:33
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
ExceptionDirWrapper::ExceptionEntryWrapper
friend class ExceptionEntryWrapper
Definition ExceptionDirWrapper.h:32
-
ExceptionDirWrapper::exceptFunc64
IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * exceptFunc64()
Definition ExceptionDirWrapper.cpp:41
-
ExceptionDirWrapper::wrap
bool wrap()
Definition ExceptionDirWrapper.cpp:12
+
ExceptionDirWrapper::exceptFunc64
IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * exceptFunc64()
Definition ExceptionDirWrapper.cpp:41
+
ExceptionDirWrapper::wrap
bool wrap()
Definition ExceptionDirWrapper.cpp:12
ExceptionEntryWrapper
Definition ExceptionDirWrapper.h:37
-
ExceptionEntryWrapper::getPtr
virtual void * getPtr()
Definition ExceptionDirWrapper.cpp:53
+
ExceptionEntryWrapper::getPtr
virtual void * getPtr()
Definition ExceptionDirWrapper.cpp:53
ExceptionEntryWrapper::getName
virtual QString getName()
Definition ExceptionDirWrapper.h:57
-
ExceptionEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExceptionDirWrapper.cpp:76
+
ExceptionEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExceptionDirWrapper.cpp:76
ExceptionEntryWrapper::BEGIN_ADDR
@ BEGIN_ADDR
Definition ExceptionDirWrapper.h:42
ExceptionEntryWrapper::UNWIND_INFO_ADDR
@ UNWIND_INFO_ADDR
Definition ExceptionDirWrapper.h:44
ExceptionEntryWrapper::END_ADDR
@ END_ADDR
Definition ExceptionDirWrapper.h:43
-
ExceptionEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.cpp:99
-
ExceptionEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExceptionDirWrapper.cpp:89
-
ExceptionEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExceptionDirWrapper.cpp:68
+
ExceptionEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.cpp:99
+
ExceptionEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExceptionDirWrapper.cpp:89
+
ExceptionEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExceptionDirWrapper.cpp:68
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeNodeWrapper::entries
std::vector< ExeNodeWrapper * > entries
Definition ExeNodeWrapper.h:56
@@ -240,7 +242,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exception_dir_wrapper_8h.html b/_exception_dir_wrapper_8h.html index 8d732cf2..43a905cb 100644 --- a/_exception_dir_wrapper_8h.html +++ b/_exception_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ExceptionDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exception_dir_wrapper_8h_source.html b/_exception_dir_wrapper_8h_source.html index 46c6b66e..2b0507fb 100644 --- a/_exception_dir_wrapper_8h_source.html +++ b/_exception_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ExceptionDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -169,31 +171,31 @@ $(document).ready(function() { init_codefold(0); });
DataDirEntryWrapper.h
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
-
ExceptionDirWrapper
Definition ExceptionDirWrapper.h:9
-
ExceptionDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.h:24
-
ExceptionDirWrapper::ExceptionDirWrapper
ExceptionDirWrapper(PEFile *pe)
Definition ExceptionDirWrapper.h:11
-
ExceptionDirWrapper::getName
virtual QString getName()
Definition ExceptionDirWrapper.h:19
-
ExceptionDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExceptionDirWrapper.h:20
-
ExceptionDirWrapper::getPtr
virtual void * getPtr()
Definition ExceptionDirWrapper.h:16
-
ExceptionDirWrapper::getSize
virtual bufsize_t getSize()
Definition ExceptionDirWrapper.h:17
-
ExceptionDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.h:22
+
ExceptionDirWrapper
Definition ExceptionDirWrapper.h:9
+
ExceptionDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.h:24
+
ExceptionDirWrapper::ExceptionDirWrapper
ExceptionDirWrapper(PEFile *pe)
Definition ExceptionDirWrapper.h:11
+
ExceptionDirWrapper::getName
virtual QString getName()
Definition ExceptionDirWrapper.h:19
+
ExceptionDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExceptionDirWrapper.h:20
+
ExceptionDirWrapper::getPtr
virtual void * getPtr()
Definition ExceptionDirWrapper.h:16
+
ExceptionDirWrapper::getSize
virtual bufsize_t getSize()
Definition ExceptionDirWrapper.h:17
+
ExceptionDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.h:22
ExceptionDirWrapper::exceptFunc64
IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * exceptFunc64()
Definition ExceptionDirWrapper.cpp:41
ExceptionDirWrapper::wrap
bool wrap()
Definition ExceptionDirWrapper.cpp:12
-
ExceptionDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExceptionDirWrapper.h:23
-
ExceptionEntryWrapper
Definition ExceptionDirWrapper.h:37
-
ExceptionEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExceptionDirWrapper.h:58
+
ExceptionDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExceptionDirWrapper.h:23
+
ExceptionEntryWrapper
Definition ExceptionDirWrapper.h:37
+
ExceptionEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExceptionDirWrapper.h:58
ExceptionEntryWrapper::getPtr
virtual void * getPtr()
Definition ExceptionDirWrapper.cpp:53
-
ExceptionEntryWrapper::ExceptionEntryWrapper
ExceptionEntryWrapper(Executable *pe, ExceptionDirWrapper *parentDir, size_t entryNumber)
Definition ExceptionDirWrapper.h:48
-
ExceptionEntryWrapper::getName
virtual QString getName()
Definition ExceptionDirWrapper.h:57
-
ExceptionEntryWrapper::wrap
bool wrap()
Definition ExceptionDirWrapper.h:51
+
ExceptionEntryWrapper::ExceptionEntryWrapper
ExceptionEntryWrapper(Executable *pe, ExceptionDirWrapper *parentDir, size_t entryNumber)
Definition ExceptionDirWrapper.h:48
+
ExceptionEntryWrapper::getName
virtual QString getName()
Definition ExceptionDirWrapper.h:57
+
ExceptionEntryWrapper::wrap
bool wrap()
Definition ExceptionDirWrapper.h:51
ExceptionEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExceptionDirWrapper.cpp:76
-
ExceptionEntryWrapper::ExceptionBlockFID
ExceptionBlockFID
Definition ExceptionDirWrapper.h:40
-
ExceptionEntryWrapper::BEGIN_ADDR
@ BEGIN_ADDR
Definition ExceptionDirWrapper.h:42
-
ExceptionEntryWrapper::NONE
@ NONE
Definition ExceptionDirWrapper.h:41
-
ExceptionEntryWrapper::UNWIND_INFO_ADDR
@ UNWIND_INFO_ADDR
Definition ExceptionDirWrapper.h:44
-
ExceptionEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExceptionDirWrapper.h:45
-
ExceptionEntryWrapper::END_ADDR
@ END_ADDR
Definition ExceptionDirWrapper.h:43
-
ExceptionEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExceptionDirWrapper.h:59
+
ExceptionEntryWrapper::ExceptionBlockFID
ExceptionBlockFID
Definition ExceptionDirWrapper.h:40
+
ExceptionEntryWrapper::BEGIN_ADDR
@ BEGIN_ADDR
Definition ExceptionDirWrapper.h:42
+
ExceptionEntryWrapper::NONE
@ NONE
Definition ExceptionDirWrapper.h:41
+
ExceptionEntryWrapper::UNWIND_INFO_ADDR
@ UNWIND_INFO_ADDR
Definition ExceptionDirWrapper.h:44
+
ExceptionEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExceptionDirWrapper.h:45
+
ExceptionEntryWrapper::END_ADDR
@ END_ADDR
Definition ExceptionDirWrapper.h:43
+
ExceptionEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExceptionDirWrapper.h:59
ExceptionEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ExceptionDirWrapper.cpp:99
ExceptionEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExceptionDirWrapper.cpp:89
ExceptionEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExceptionDirWrapper.cpp:68
@@ -207,7 +209,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_element_wrapper_8cpp.html b/_exe_element_wrapper_8cpp.html index 40bed26c..6f882a6a 100644 --- a/_exe_element_wrapper_8cpp.html +++ b/_exe_element_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeElementWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_element_wrapper_8cpp_source.html b/_exe_element_wrapper_8cpp_source.html index c4b48b15..aaab0ac3 100644 --- a/_exe_element_wrapper_8cpp_source.html +++ b/_exe_element_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeElementWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -230,20 +232,20 @@ $(document).ready(function() { init_codefold(0); });
AbstractByteBuffer::getOffset
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
CustomException
Definition CustomException.h:12
ExeElementWrapper::getSize
virtual bufsize_t getSize()=0
-
ExeElementWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:12
-
ExeElementWrapper::setNumValue
virtual bool setNumValue(size_t fieldId, size_t subField, uint64_t val)
Definition ExeElementWrapper.cpp:83
-
ExeElementWrapper::canCopyToOffset
virtual bool canCopyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:92
+
ExeElementWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:12
+
ExeElementWrapper::setNumValue
virtual bool setNumValue(size_t fieldId, size_t subField, uint64_t val)
Definition ExeElementWrapper.cpp:83
+
ExeElementWrapper::canCopyToOffset
virtual bool canCopyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:92
ExeElementWrapper::getPtr
virtual void * getPtr()=0
ExeElementWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)=0
-
ExeElementWrapper::getFieldOffset
virtual offset_t getFieldOffset(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:51
+
ExeElementWrapper::getFieldOffset
virtual offset_t getFieldOffset(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:51
ExeElementWrapper::getFieldsCount
virtual size_t getFieldsCount()=0
-
ExeElementWrapper::getWrappedValue
virtual WrappedValue getWrappedValue(size_t fieldId, size_t subField)
Definition ExeElementWrapper.cpp:57
-
ExeElementWrapper::ExeElementWrapper
ExeElementWrapper(Executable *exe)
Definition ExeElementWrapper.cpp:3
+
ExeElementWrapper::getWrappedValue
virtual WrappedValue getWrappedValue(size_t fieldId, size_t subField)
Definition ExeElementWrapper.cpp:57
+
ExeElementWrapper::ExeElementWrapper
ExeElementWrapper(Executable *exe)
Definition ExeElementWrapper.cpp:3
ExeElementWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.h:48
-
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
-
ExeElementWrapper::copyToOffset
bool copyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:102
+
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
+
ExeElementWrapper::copyToOffset
bool copyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:102
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
-
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
+
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
Executable
Definition Executable.h:26
WrappedValue
Definition WrappedValue.h:12
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
@@ -252,7 +254,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_element_wrapper_8h.html b/_exe_element_wrapper_8h.html index 4545c238..a55d0cba 100644 --- a/_exe_element_wrapper_8h.html +++ b/_exe_element_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeElementWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ Classes - +

Macros

#define FIELD_NONE   (-1)
#define FIELD_NONE   (-1)
 

Macro Definition Documentation

@@ -118,7 +120,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_element_wrapper_8h_source.html b/_exe_element_wrapper_8h_source.html index 8a4f5353..5af70b6a 100644 --- a/_exe_element_wrapper_8h_source.html +++ b/_exe_element_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeElementWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ $(document).ready(function() { init_codefold(0); });
11class ExeElementWrapper : public AbstractByteBuffer
12{
13public:
-
14 ExeElementWrapper(Executable *exe);
+
14 ExeElementWrapper(Executable *exe);
15 virtual ~ExeElementWrapper() {}
16
17 virtual bool wrap() { return true; }
@@ -157,40 +159,41 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
CustomException.h
-
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
+
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
Executable.h
WrappedValue.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
ExeElementWrapper
Definition ExeElementWrapper.h:12
+
ExeElementWrapper
Definition ExeElementWrapper.h:12
ExeElementWrapper::getSize
virtual bufsize_t getSize()=0
-
ExeElementWrapper::getContentSize
virtual bufsize_t getContentSize()
Definition ExeElementWrapper.h:20
-
ExeElementWrapper::isBit32
bool isBit32()
Definition ExeElementWrapper.h:59
+
ExeElementWrapper::getContentSize
virtual bufsize_t getContentSize()
Definition ExeElementWrapper.h:20
+
ExeElementWrapper::isBit32
bool isBit32()
Definition ExeElementWrapper.h:59
ExeElementWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:12
ExeElementWrapper::setNumValue
virtual bool setNumValue(size_t fieldId, size_t subField, uint64_t val)
Definition ExeElementWrapper.cpp:83
ExeElementWrapper::canCopyToOffset
virtual bool canCopyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:92
ExeElementWrapper::getPtr
virtual void * getPtr()=0
-
ExeElementWrapper::hasSubfieldWrapper
virtual bool hasSubfieldWrapper(size_t parentType)
Definition ExeElementWrapper.h:41
-
ExeElementWrapper::getWrappedValue
virtual WrappedValue getWrappedValue(size_t fieldId)
Definition ExeElementWrapper.h:45
+
ExeElementWrapper::hasSubfieldWrapper
virtual bool hasSubfieldWrapper(size_t parentType)
Definition ExeElementWrapper.h:41
+
ExeElementWrapper::getWrappedValue
virtual WrappedValue getWrappedValue(size_t fieldId)
Definition ExeElementWrapper.h:45
ExeElementWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)=0
ExeElementWrapper::getFieldOffset
virtual offset_t getFieldOffset(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.cpp:51
-
ExeElementWrapper::~ExeElementWrapper
virtual ~ExeElementWrapper()
Definition ExeElementWrapper.h:15
+
ExeElementWrapper::~ExeElementWrapper
virtual ~ExeElementWrapper()
Definition ExeElementWrapper.h:15
ExeElementWrapper::getFieldsCount
virtual size_t getFieldsCount()=0
ExeElementWrapper::getWrappedValue
virtual WrappedValue getWrappedValue(size_t fieldId, size_t subField)
Definition ExeElementWrapper.cpp:57
-
ExeElementWrapper::setNumValue
bool setNumValue(size_t fieldId, uint64_t val)
Definition ExeElementWrapper.h:54
-
ExeElementWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExeElementWrapper.h:29
+
ExeElementWrapper::setNumValue
bool setNumValue(size_t fieldId, uint64_t val)
Definition ExeElementWrapper.h:54
+
ExeElementWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExeElementWrapper.h:29
ExeElementWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)=0
-
ExeElementWrapper::getContent
virtual BYTE * getContent()
Definition ExeElementWrapper.h:21
-
ExeElementWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.h:47
-
ExeElementWrapper::isBit64
bool isBit64()
Definition ExeElementWrapper.h:58
-
ExeElementWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.h:48
+
ExeElementWrapper::getContent
virtual BYTE * getContent()
Definition ExeElementWrapper.h:21
+
ExeElementWrapper::ExeElementWrapper
ExeElementWrapper(Executable *exe)
Definition ExeElementWrapper.cpp:3
+
ExeElementWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.h:47
+
ExeElementWrapper::isBit64
bool isBit64()
Definition ExeElementWrapper.h:58
+
ExeElementWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExeElementWrapper.h:48
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
ExeElementWrapper::copyToOffset
bool copyToOffset(offset_t rawOffset)
Definition ExeElementWrapper.cpp:102
-
ExeElementWrapper::getNumValue
uint64_t getNumValue(size_t fieldId, bool *isOk)
Definition ExeElementWrapper.h:51
-
ExeElementWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition ExeElementWrapper.h:40
-
ExeElementWrapper::getExe
Executable * getExe()
Definition ExeElementWrapper.h:56
-
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
-
ExeElementWrapper::getFieldPtr
void * getFieldPtr(size_t fieldId)
Definition ExeElementWrapper.h:36
-
ExeElementWrapper::wrap
virtual bool wrap()
Definition ExeElementWrapper.h:17
+
ExeElementWrapper::getNumValue
uint64_t getNumValue(size_t fieldId, bool *isOk)
Definition ExeElementWrapper.h:51
+
ExeElementWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition ExeElementWrapper.h:40
+
ExeElementWrapper::getExe
Executable * getExe()
Definition ExeElementWrapper.h:56
+
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
+
ExeElementWrapper::getFieldPtr
void * getFieldPtr(size_t fieldId)
Definition ExeElementWrapper.h:36
+
ExeElementWrapper::wrap
virtual bool wrap()
Definition ExeElementWrapper.h:17
ExeElementWrapper::getName
virtual QString getName()=0
ExeElementWrapper::getNumValue
virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)
Definition ExeElementWrapper.cpp:73
Executable
Definition Executable.h:26
@@ -204,7 +207,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_factory_8cpp.html b/_exe_factory_8cpp.html index b23faf7e..73cd0808 100644 --- a/_exe_factory_8cpp.html +++ b/_exe_factory_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeFactory.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_factory_8cpp_source.html b/_exe_factory_8cpp_source.html index 589093e8..58b38dca 100644 --- a/_exe_factory_8cpp_source.html +++ b/_exe_factory_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeFactory.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -170,12 +172,12 @@ $(document).ready(function() { init_codefold(0); });
ExeBuilder
Definition Executable.h:14
ExeBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)=0
ExeBuilder::typeName
virtual QString typeName()=0
-
ExeFactory::findMatching
static exe_type findMatching(AbstractByteBuffer *buf)
Definition ExeFactory.cpp:27
+
ExeFactory::findMatching
static exe_type findMatching(AbstractByteBuffer *buf)
Definition ExeFactory.cpp:27
ExeFactory::builders
static std::map< exe_type, ExeBuilder * > builders
Definition ExeFactory.h:29
-
ExeFactory::destroy
static void destroy()
Definition ExeFactory.cpp:17
-
ExeFactory::build
static Executable * build(AbstractByteBuffer *buf, exe_type type)
Definition ExeFactory.cpp:46
-
ExeFactory::init
static void init()
Definition ExeFactory.cpp:8
-
ExeFactory::getTypeName
static QString getTypeName(exe_type type)
Definition ExeFactory.cpp:59
+
ExeFactory::destroy
static void destroy()
Definition ExeFactory.cpp:17
+
ExeFactory::build
static Executable * build(AbstractByteBuffer *buf, exe_type type)
Definition ExeFactory.cpp:46
+
ExeFactory::init
static void init()
Definition ExeFactory.cpp:8
+
ExeFactory::getTypeName
static QString getTypeName(exe_type type)
Definition ExeFactory.cpp:59
ExeFactory::exe_type
exe_type
Definition ExeFactory.h:14
ExeFactory::MZ
@ MZ
Definition ExeFactory.h:17
ExeFactory::PE
@ PE
Definition ExeFactory.h:16
@@ -185,7 +187,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_factory_8h.html b/_exe_factory_8h.html index d1db5942..5536e4d5 100644 --- a/_exe_factory_8h.html +++ b/_exe_factory_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeFactory.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_factory_8h_source.html b/_exe_factory_8h_source.html index 2d9a4217..03b041ff 100644 --- a/_exe_factory_8h_source.html +++ b/_exe_factory_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeFactory.h Source File + + @@ -30,7 +32,7 @@ - + @@ -122,25 +124,25 @@ $(document).ready(function() { init_codefold(0); });
Executable.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
CustomException
Definition CustomException.h:12
-
ExeFactoryException
Definition ExeFactory.h:6
-
ExeFactoryException::ExeFactoryException
ExeFactoryException(const QString info)
Definition ExeFactory.h:8
-
ExeFactory
Definition ExeFactory.h:12
+
ExeFactoryException
Definition ExeFactory.h:6
+
ExeFactoryException::ExeFactoryException
ExeFactoryException(const QString info)
Definition ExeFactory.h:8
+
ExeFactory
Definition ExeFactory.h:12
ExeFactory::findMatching
static exe_type findMatching(AbstractByteBuffer *buf)
Definition ExeFactory.cpp:27
-
ExeFactory::builders
static std::map< exe_type, ExeBuilder * > builders
Definition ExeFactory.h:29
+
ExeFactory::builders
static std::map< exe_type, ExeBuilder * > builders
Definition ExeFactory.h:29
ExeFactory::destroy
static void destroy()
Definition ExeFactory.cpp:17
ExeFactory::build
static Executable * build(AbstractByteBuffer *buf, exe_type type)
Definition ExeFactory.cpp:46
ExeFactory::init
static void init()
Definition ExeFactory.cpp:8
ExeFactory::getTypeName
static QString getTypeName(exe_type type)
Definition ExeFactory.cpp:59
-
ExeFactory::exe_type
exe_type
Definition ExeFactory.h:14
-
ExeFactory::TYPES_COUNT
@ TYPES_COUNT
Definition ExeFactory.h:18
-
ExeFactory::MZ
@ MZ
Definition ExeFactory.h:17
-
ExeFactory::PE
@ PE
Definition ExeFactory.h:16
-
ExeFactory::NONE
@ NONE
Definition ExeFactory.h:15
+
ExeFactory::exe_type
exe_type
Definition ExeFactory.h:14
+
ExeFactory::TYPES_COUNT
@ TYPES_COUNT
Definition ExeFactory.h:18
+
ExeFactory::MZ
@ MZ
Definition ExeFactory.h:17
+
ExeFactory::PE
@ PE
Definition ExeFactory.h:16
+
ExeFactory::NONE
@ NONE
Definition ExeFactory.h:15
Executable
Definition Executable.h:26
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_node_wrapper_8cpp.html b/_exe_node_wrapper_8cpp.html index 9980cad5..8213ab1a 100644 --- a/_exe_node_wrapper_8cpp.html +++ b/_exe_node_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeNodeWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_node_wrapper_8cpp_source.html b/_exe_node_wrapper_8cpp_source.html index 533e903d..3270773f 100644 --- a/_exe_node_wrapper_8cpp_source.html +++ b/_exe_node_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/ExeNodeWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -269,32 +271,32 @@ $(document).ready(function() { init_codefold(0); });
ExeElementWrapper
Definition ExeElementWrapper.h:12
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
-
ExeNodeWrapper::isMyEntryType
virtual bool isMyEntryType(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:80
-
ExeNodeWrapper::getSubfieldPtr
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
-
ExeNodeWrapper::addEntryAt
virtual ExeNodeWrapper * addEntryAt(ExeNodeWrapper *entry, offset_t nextOffset)
Definition ExeNodeWrapper.cpp:114
-
ExeNodeWrapper::getLastEntry
ExeNodeWrapper * getLastEntry()
Definition ExeNodeWrapper.cpp:86
-
ExeNodeWrapper::getSubfieldName
virtual QString getSubfieldName(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:55
+
ExeNodeWrapper::isMyEntryType
virtual bool isMyEntryType(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:80
+
ExeNodeWrapper::getSubfieldPtr
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
+
ExeNodeWrapper::addEntryAt
virtual ExeNodeWrapper * addEntryAt(ExeNodeWrapper *entry, offset_t nextOffset)
Definition ExeNodeWrapper.cpp:114
+
ExeNodeWrapper::getLastEntry
ExeNodeWrapper * getLastEntry()
Definition ExeNodeWrapper.cpp:86
+
ExeNodeWrapper::getSubfieldName
virtual QString getSubfieldName(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:55
ExeNodeWrapper::wrap
virtual bool wrap()
Definition ExeNodeWrapper.h:16
-
ExeNodeWrapper::ExeNodeWrapper
ExeNodeWrapper(Executable *pe, ExeNodeWrapper *parent=NULL)
Definition ExeNodeWrapper.cpp:3
+
ExeNodeWrapper::ExeNodeWrapper
ExeNodeWrapper(Executable *pe, ExeNodeWrapper *parent=NULL)
Definition ExeNodeWrapper.cpp:3
ExeNodeWrapper::reloadMapping
virtual void reloadMapping()
Definition ExeNodeWrapper.h:17
-
ExeNodeWrapper::getEntryAt
virtual ExeNodeWrapper * getEntryAt(size_t fieldId)
Definition ExeNodeWrapper.cpp:15
-
ExeNodeWrapper::geEntrySize
virtual bufsize_t geEntrySize()
Definition ExeNodeWrapper.cpp:105
+
ExeNodeWrapper::getEntryAt
virtual ExeNodeWrapper * getEntryAt(size_t fieldId)
Definition ExeNodeWrapper.cpp:15
+
ExeNodeWrapper::geEntrySize
virtual bufsize_t geEntrySize()
Definition ExeNodeWrapper.cpp:105
ExeNodeWrapper::entries
std::vector< ExeNodeWrapper * > entries
Definition ExeNodeWrapper.h:56
ExeNodeWrapper::loadNextEntry
virtual bool loadNextEntry(size_t entryNum)
Definition ExeNodeWrapper.h:48
-
ExeNodeWrapper::canAddEntry
virtual bool canAddEntry()
Definition ExeNodeWrapper.cpp:63
-
ExeNodeWrapper::getNextEntryOffset
virtual offset_t getNextEntryOffset()
Definition ExeNodeWrapper.cpp:92
+
ExeNodeWrapper::canAddEntry
virtual bool canAddEntry()
Definition ExeNodeWrapper.cpp:63
+
ExeNodeWrapper::getNextEntryOffset
virtual offset_t getNextEntryOffset()
Definition ExeNodeWrapper.cpp:92
ExeNodeWrapper::getEntriesCount
virtual size_t getEntriesCount()
Definition ExeNodeWrapper.h:20
ExeNodeWrapper::entryNum
size_t entryNum
Definition ExeNodeWrapper.h:54
-
ExeNodeWrapper::clear
virtual void clear()
Definition ExeNodeWrapper.cpp:30
-
ExeNodeWrapper::getSubfieldSize
virtual bufsize_t getSubfieldSize(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:47
-
ExeNodeWrapper::addEntry
virtual ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:140
+
ExeNodeWrapper::clear
virtual void clear()
Definition ExeNodeWrapper.cpp:30
+
ExeNodeWrapper::getSubfieldSize
virtual bufsize_t getSubfieldSize(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:47
+
ExeNodeWrapper::addEntry
virtual ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:140
Executable
Definition Executable.h:26
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
Logger::D_INFO
@ D_INFO
Definition Util.h:26
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_node_wrapper_8h.html b/_exe_node_wrapper_8h.html index e0bd70a3..cce2354c 100644 --- a/_exe_node_wrapper_8h.html +++ b/_exe_node_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeNodeWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ Classes - +

Variables

const size_t INVALID_ENTRYNUM = (-1)
const size_t INVALID_ENTRYNUM = (-1)
 

Variable Documentation

@@ -115,7 +117,7 @@ Variables
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_exe_node_wrapper_8h_source.html b/_exe_node_wrapper_8h_source.html index 8459da01..8783662e 100644 --- a/_exe_node_wrapper_8h_source.html +++ b/_exe_node_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/ExeNodeWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -93,8 +95,8 @@ $(document).ready(function() { init_codefold(0); });
8class ExeNodeWrapper : public ExeElementWrapper
9{
10public:
-
11 ExeNodeWrapper(Executable *pe, ExeNodeWrapper* parent = NULL);
-
12 ExeNodeWrapper(Executable *pe, ExeNodeWrapper* parent, size_t entryNumber);
+
11 ExeNodeWrapper(Executable *pe, ExeNodeWrapper* parent = NULL);
+
12 ExeNodeWrapper(Executable *pe, ExeNodeWrapper* parent, size_t entryNumber);
13
14 virtual ~ExeNodeWrapper() { clear(); }
15
@@ -146,41 +148,42 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
ExeElementWrapper.h
-
INVALID_ENTRYNUM
const size_t INVALID_ENTRYNUM
Definition ExeNodeWrapper.h:6
+
INVALID_ENTRYNUM
const size_t INVALID_ENTRYNUM
Definition ExeNodeWrapper.h:6
ExeElementWrapper
Definition ExeElementWrapper.h:12
-
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
+
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
ExeNodeWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)=0
ExeNodeWrapper::isMyEntryType
virtual bool isMyEntryType(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:80
ExeNodeWrapper::getSubfieldPtr
virtual void * getSubfieldPtr(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:39
ExeNodeWrapper::addEntryAt
virtual ExeNodeWrapper * addEntryAt(ExeNodeWrapper *entry, offset_t nextOffset)
Definition ExeNodeWrapper.cpp:114
ExeNodeWrapper::getLastEntry
ExeNodeWrapper * getLastEntry()
Definition ExeNodeWrapper.cpp:86
ExeNodeWrapper::getSubfieldName
virtual QString getSubfieldName(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:55
-
ExeNodeWrapper::getEntriesNum
virtual size_t getEntriesNum()
Definition ExeNodeWrapper.h:21
-
ExeNodeWrapper::wrap
virtual bool wrap()
Definition ExeNodeWrapper.h:16
-
ExeNodeWrapper::reloadMapping
virtual void reloadMapping()
Definition ExeNodeWrapper.h:17
+
ExeNodeWrapper::getEntriesNum
virtual size_t getEntriesNum()
Definition ExeNodeWrapper.h:21
+
ExeNodeWrapper::wrap
virtual bool wrap()
Definition ExeNodeWrapper.h:16
+
ExeNodeWrapper::ExeNodeWrapper
ExeNodeWrapper(Executable *pe, ExeNodeWrapper *parent=NULL)
Definition ExeNodeWrapper.cpp:3
+
ExeNodeWrapper::reloadMapping
virtual void reloadMapping()
Definition ExeNodeWrapper.h:17
ExeNodeWrapper::getEntryAt
virtual ExeNodeWrapper * getEntryAt(size_t fieldId)
Definition ExeNodeWrapper.cpp:15
-
ExeNodeWrapper::addMapping
virtual void addMapping(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.h:47
+
ExeNodeWrapper::addMapping
virtual void addMapping(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.h:47
ExeNodeWrapper::geEntrySize
virtual bufsize_t geEntrySize()
Definition ExeNodeWrapper.cpp:105
-
ExeNodeWrapper::entries
std::vector< ExeNodeWrapper * > entries
Definition ExeNodeWrapper.h:56
-
ExeNodeWrapper::~ExeNodeWrapper
virtual ~ExeNodeWrapper()
Definition ExeNodeWrapper.h:14
-
ExeNodeWrapper::getEntryId
size_t getEntryId()
Definition ExeNodeWrapper.h:25
-
ExeNodeWrapper::loadNextEntry
virtual bool loadNextEntry(size_t entryNum)
Definition ExeNodeWrapper.h:48
+
ExeNodeWrapper::entries
std::vector< ExeNodeWrapper * > entries
Definition ExeNodeWrapper.h:56
+
ExeNodeWrapper::~ExeNodeWrapper
virtual ~ExeNodeWrapper()
Definition ExeNodeWrapper.h:14
+
ExeNodeWrapper::getEntryId
size_t getEntryId()
Definition ExeNodeWrapper.h:25
+
ExeNodeWrapper::loadNextEntry
virtual bool loadNextEntry(size_t entryNum)
Definition ExeNodeWrapper.h:48
ExeNodeWrapper::canAddEntry
virtual bool canAddEntry()
Definition ExeNodeWrapper.cpp:63
ExeNodeWrapper::getNextEntryOffset
virtual offset_t getNextEntryOffset()
Definition ExeNodeWrapper.cpp:92
-
ExeNodeWrapper::parentNode
ExeNodeWrapper * parentNode
Definition ExeNodeWrapper.h:53
-
ExeNodeWrapper::isValid
virtual bool isValid()
Definition ExeNodeWrapper.h:40
-
ExeNodeWrapper::getEntriesCount
virtual size_t getEntriesCount()
Definition ExeNodeWrapper.h:20
-
ExeNodeWrapper::entryNum
size_t entryNum
Definition ExeNodeWrapper.h:54
-
ExeNodeWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExeNodeWrapper.h:22
+
ExeNodeWrapper::parentNode
ExeNodeWrapper * parentNode
Definition ExeNodeWrapper.h:53
+
ExeNodeWrapper::isValid
virtual bool isValid()
Definition ExeNodeWrapper.h:40
+
ExeNodeWrapper::getEntriesCount
virtual size_t getEntriesCount()
Definition ExeNodeWrapper.h:20
+
ExeNodeWrapper::entryNum
size_t entryNum
Definition ExeNodeWrapper.h:54
+
ExeNodeWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExeNodeWrapper.h:22
ExeNodeWrapper::clear
virtual void clear()
Definition ExeNodeWrapper.cpp:30
ExeNodeWrapper::getSubfieldSize
virtual bufsize_t getSubfieldSize(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:47
ExeNodeWrapper::addEntry
virtual ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition ExeNodeWrapper.cpp:140
-
ExeNodeWrapper::getParentNode
virtual ExeNodeWrapper * getParentNode()
Definition ExeNodeWrapper.h:24
+
ExeNodeWrapper::getParentNode
virtual ExeNodeWrapper * getParentNode()
Definition ExeNodeWrapper.h:24
Executable
Definition Executable.h:26
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_executable_8cpp.html b/_executable_8cpp.html index cbe9b064..713d4b6a 100644 --- a/_executable_8cpp.html +++ b/_executable_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/Executable.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_executable_8cpp_source.html b/_executable_8cpp_source.html index eb05aa30..811d5843 100644 --- a/_executable_8cpp_source.html +++ b/_executable_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/Executable.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -300,22 +302,22 @@ $(document).ready(function() { init_codefold(0); });
Executable::RVA
@ RVA
Definition Executable.h:38
Executable::RAW
@ RAW
Definition Executable.h:37
Executable::VA
@ VA
Definition Executable.h:39
-
Executable::getFileSize
bufsize_t getFileSize() const
Definition Executable.cpp:158
+
Executable::getFileSize
bufsize_t getFileSize() const
Definition Executable.cpp:158
Executable::exe_bits
exe_bits
Definition Executable.h:28
-
Executable::toRaw
virtual offset_t toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)
Definition Executable.cpp:85
-
Executable::isValidAddr
virtual bool isValidAddr(offset_t addr, addr_type addrType)
Definition Executable.cpp:19
+
Executable::toRaw
virtual offset_t toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)
Definition Executable.cpp:85
+
Executable::isValidAddr
virtual bool isValidAddr(offset_t addr, addr_type addrType)
Definition Executable.cpp:19
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::getImageBase
virtual offset_t getImageBase(bool recalculate=false)=0
-
Executable::getFileName
QString getFileName()
Definition Executable.cpp:149
-
Executable::Executable
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode)
Definition Executable.cpp:4
+
Executable::getFileName
QString getFileName()
Definition Executable.cpp:149
+
Executable::Executable
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode)
Definition Executable.cpp:4
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
Executable::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)=0
Executable::rawToRva
virtual offset_t rawToRva(offset_t raw)=0
Executable::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)=0
-
Executable::convertAddr
virtual offset_t convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)
Definition Executable.cpp:46
-
Executable::detectAddrType
Executable::addr_type detectAddrType(offset_t addr, Executable::addr_type hintType)
Definition Executable.cpp:125
-
Executable::dumpFragment
virtual bool dumpFragment(offset_t offset, bufsize_t size, QString fileName)
Definition Executable.cpp:169
-
Executable::VaToRva
virtual offset_t VaToRva(offset_t va, bool autodetect=false)
Definition Executable.cpp:30
+
Executable::convertAddr
virtual offset_t convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)
Definition Executable.cpp:46
+
Executable::detectAddrType
Executable::addr_type detectAddrType(offset_t addr, Executable::addr_type hintType)
Definition Executable.cpp:125
+
Executable::dumpFragment
virtual bool dumpFragment(offset_t offset, bufsize_t size, QString fileName)
Definition Executable.cpp:169
+
Executable::VaToRva
virtual offset_t VaToRva(offset_t va, bool autodetect=false)
Definition Executable.cpp:30
FileBuffer
Definition FileBuffer.h:56
FileBuffer::getFileSize
offset_t getFileSize()
Definition FileBuffer.h:74
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
@@ -323,7 +325,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_executable_8h.html b/_executable_8h.html index e5bd2962..8b5498d5 100644 --- a/_executable_8h.html +++ b/_executable_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Executable.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_executable_8h_source.html b/_executable_8h_source.html index d4649685..0ef09f11 100644 --- a/_executable_8h_source.html +++ b/_executable_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Executable.h Source File + + @@ -30,7 +32,7 @@ - + @@ -218,7 +220,7 @@ $(document).ready(function() { init_codefold(0); });
119 virtual bool dumpFragment(offset_t offset, bufsize_t size, QString fileName);
120
121protected:
-
122 Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode);
+
122 Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode);
123
124 exe_bits bitMode;
125 AbstractByteBuffer *buf;
@@ -239,65 +241,66 @@ $(document).ready(function() { init_codefold(0); });
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
AbstractByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition AbstractByteBuffer.h:72
CustomException
Definition CustomException.h:12
-
ExeBuilder
Definition Executable.h:14
-
ExeBuilder::~ExeBuilder
virtual ~ExeBuilder()
Definition Executable.h:17
-
ExeBuilder::ExeBuilder
ExeBuilder()
Definition Executable.h:16
+
ExeBuilder
Definition Executable.h:14
+
ExeBuilder::~ExeBuilder
virtual ~ExeBuilder()
Definition Executable.h:17
+
ExeBuilder::ExeBuilder
ExeBuilder()
Definition Executable.h:16
ExeBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)=0
ExeBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)=0
ExeBuilder::typeName
virtual QString typeName()=0
-
ExeException
Definition Executable.h:9
-
ExeException::ExeException
ExeException(const QString info)
Definition Executable.h:11
-
Executable
Definition Executable.h:26
-
Executable::buf
AbstractByteBuffer * buf
Definition Executable.h:125
-
Executable::isTruncated
virtual bool isTruncated()
Definition Executable.h:113
-
Executable::addr_type
addr_type
Definition Executable.h:35
-
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
-
Executable::RVA
@ RVA
Definition Executable.h:38
-
Executable::RAW
@ RAW
Definition Executable.h:37
-
Executable::VA
@ VA
Definition Executable.h:39
+
ExeException
Definition Executable.h:9
+
ExeException::ExeException
ExeException(const QString info)
Definition Executable.h:11
+
Executable
Definition Executable.h:26
+
Executable::buf
AbstractByteBuffer * buf
Definition Executable.h:125
+
Executable::isTruncated
virtual bool isTruncated()
Definition Executable.h:113
+
Executable::addr_type
addr_type
Definition Executable.h:35
+
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
+
Executable::RVA
@ RVA
Definition Executable.h:38
+
Executable::RAW
@ RAW
Definition Executable.h:37
+
Executable::VA
@ VA
Definition Executable.h:39
Executable::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type aType=Executable::RVA)=0
Executable::getFileSize
bufsize_t getFileSize() const
Definition Executable.cpp:158
-
Executable::isBit32
bool isBit32()
Definition Executable.h:45
-
Executable::exe_bits
exe_bits
Definition Executable.h:28
-
Executable::UNKNOWN
@ UNKNOWN
Definition Executable.h:29
-
Executable::BITS_16
@ BITS_16
Definition Executable.h:30
-
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
-
Executable::BITS_64
@ BITS_64
Definition Executable.h:32
-
Executable::getBitMode
virtual exe_bits getBitMode()
Definition Executable.h:49
+
Executable::isBit32
bool isBit32()
Definition Executable.h:45
+
Executable::exe_bits
exe_bits
Definition Executable.h:28
+
Executable::UNKNOWN
@ UNKNOWN
Definition Executable.h:29
+
Executable::BITS_16
@ BITS_16
Definition Executable.h:30
+
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
+
Executable::BITS_64
@ BITS_64
Definition Executable.h:32
+
Executable::getBitMode
virtual exe_bits getBitMode()
Definition Executable.h:49
Executable::toRaw
virtual offset_t toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)
Definition Executable.cpp:85
Executable::isValidAddr
virtual bool isValidAddr(offset_t addr, addr_type addrType)
Definition Executable.cpp:19
-
Executable::getContentAtPtr
BYTE * getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:56
-
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
-
Executable::isBit64
bool isBit64()
Definition Executable.h:44
-
Executable::isBit64
static bool isBit64(Executable *exe)
Definition Executable.h:41
+
Executable::getContentAtPtr
BYTE * getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:56
+
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
+
Executable::isBit64
bool isBit64()
Definition Executable.h:44
+
Executable::isBit64
static bool isBit64(Executable *exe)
Definition Executable.h:41
Executable::getImageBase
virtual offset_t getImageBase(bool recalculate=false)=0
-
Executable::getContent
virtual BYTE * getContent()
Definition Executable.h:52
+
Executable::getContent
virtual BYTE * getContent()
Definition Executable.h:52
Executable::getFileName
QString getFileName()
Definition Executable.cpp:149
-
Executable::vaToRaw
virtual offset_t vaToRaw(offset_t va)
Definition Executable.h:99
-
Executable::~Executable
virtual ~Executable(void)
Definition Executable.h:47
-
Executable::isValidVA
virtual bool isValidVA(offset_t va)
Definition Executable.h:78
-
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
-
Executable::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition Executable.h:69
+
Executable::vaToRaw
virtual offset_t vaToRaw(offset_t va)
Definition Executable.h:99
+
Executable::~Executable
virtual ~Executable(void)
Definition Executable.h:47
+
Executable::isValidVA
virtual bool isValidVA(offset_t va)
Definition Executable.h:78
+
Executable::Executable
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode)
Definition Executable.cpp:4
+
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
+
Executable::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition Executable.h:69
Executable::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)=0
-
Executable::getImageSize
virtual bufsize_t getImageSize()
Definition Executable.h:66
+
Executable::getImageSize
virtual bufsize_t getImageSize()
Definition Executable.h:66
Executable::rawToRva
virtual offset_t rawToRva(offset_t raw)=0
-
Executable::bitMode
exe_bits bitMode
Definition Executable.h:124
+
Executable::bitMode
exe_bits bitMode
Definition Executable.h:124
Executable::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)=0
Executable::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const =0
Executable::convertAddr
virtual offset_t convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)
Definition Executable.cpp:46
-
Executable::resize
virtual bool resize(bufsize_t newSize)
Definition Executable.h:109
+
Executable::resize
virtual bool resize(bufsize_t newSize)
Definition Executable.h:109
Executable::detectAddrType
Executable::addr_type detectAddrType(offset_t addr, Executable::addr_type hintType)
Definition Executable.cpp:125
Executable::dumpFragment
virtual bool dumpFragment(offset_t offset, bufsize_t size, QString fileName)
Definition Executable.cpp:169
Executable::VaToRva
virtual offset_t VaToRva(offset_t va, bool autodetect=false)
Definition Executable.cpp:30
-
Executable::isBit32
static bool isBit32(Executable *exe)
Definition Executable.h:42
-
Executable::rvaToVa
virtual offset_t rvaToVa(offset_t rva)
Definition Executable.h:93
-
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition Executable.h:51
-
Executable::getFileBuffer
AbstractByteBuffer * getFileBuffer() const
Definition Executable.h:116
-
Executable::isResized
virtual bool isResized()
Definition Executable.h:111
+
Executable::isBit32
static bool isBit32(Executable *exe)
Definition Executable.h:42
+
Executable::rvaToVa
virtual offset_t rvaToVa(offset_t rva)
Definition Executable.h:93
+
Executable::getContentSize
virtual bufsize_t getContentSize()
Definition Executable.h:51
+
Executable::getFileBuffer
AbstractByteBuffer * getFileBuffer() const
Definition Executable.h:116
+
Executable::isResized
virtual bool isResized()
Definition Executable.h:111
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_export_dir_wrapper_8cpp.html b/_export_dir_wrapper_8cpp.html index effc6c26..32826fec 100644 --- a/_export_dir_wrapper_8cpp.html +++ b/_export_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ExportDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -86,9 +88,9 @@ $(function() { - + - +

Macros

#define INVALID_NAME   "<invalid>"
#define INVALID_NAME   "<invalid>"
 
#define INVALID_ID   (-1)
#define INVALID_ID   (-1)
 

Macro Definition Documentation

@@ -127,7 +129,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_export_dir_wrapper_8cpp_source.html b/_export_dir_wrapper_8cpp_source.html index 3ebe1da8..9eb2f301 100644 --- a/_export_dir_wrapper_8cpp_source.html +++ b/_export_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ExportDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -457,8 +459,8 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
-
INVALID_NAME
#define INVALID_NAME
Definition ExportDirWrapper.cpp:4
-
INVALID_ID
#define INVALID_ID
Definition ExportDirWrapper.cpp:5
+
INVALID_NAME
#define INVALID_NAME
Definition ExportDirWrapper.cpp:4
+
INVALID_ID
#define INVALID_ID
Definition ExportDirWrapper.cpp:5
ExportDirWrapper.h
PEFile.h
AbstractByteBuffer::getOffset
virtual offset_t getOffset(void *ptr, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:35
@@ -473,7 +475,7 @@ $(document).ready(function() { init_codefold(0); });
Executable::RVA
@ RVA
Definition Executable.h:38
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
-
ExportDirWrapper::getLibraryName
virtual QString getLibraryName()
Definition ExportDirWrapper.cpp:173
+
ExportDirWrapper::getLibraryName
virtual QString getLibraryName()
Definition ExportDirWrapper.cpp:173
ExportDirWrapper::NAMES_NUM
@ NAMES_NUM
Definition ExportDirWrapper.h:18
ExportDirWrapper::MINOR_VER
@ MINOR_VER
Definition ExportDirWrapper.h:14
ExportDirWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:15
@@ -487,31 +489,31 @@ $(document).ready(function() { init_codefold(0); });
ExportDirWrapper::BASE
@ BASE
Definition ExportDirWrapper.h:16
ExportDirWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:30
ExportDirWrapper::ordToNameId
std::map< WORD, DWORD > ordToNameId
Definition ExportDirWrapper.h:48
-
ExportDirWrapper::clear
void clear()
Definition ExportDirWrapper.cpp:32
-
ExportDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ExportDirWrapper.cpp:101
-
ExportDirWrapper::exportDir
IMAGE_EXPORT_DIRECTORY * exportDir()
Definition ExportDirWrapper.cpp:23
-
ExportDirWrapper::wrap
bool wrap()
Definition ExportDirWrapper.cpp:63
-
ExportDirWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:91
-
ExportDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.cpp:146
-
ExportDirWrapper::mapNames
size_t mapNames()
Definition ExportDirWrapper.cpp:38
-
ExportDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:122
-
ExportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:85
+
ExportDirWrapper::clear
void clear()
Definition ExportDirWrapper.cpp:32
+
ExportDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ExportDirWrapper.cpp:101
+
ExportDirWrapper::exportDir
IMAGE_EXPORT_DIRECTORY * exportDir()
Definition ExportDirWrapper.cpp:23
+
ExportDirWrapper::wrap
bool wrap()
Definition ExportDirWrapper.cpp:63
+
ExportDirWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:91
+
ExportDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.cpp:146
+
ExportDirWrapper::mapNames
size_t mapNames()
Definition ExportDirWrapper.cpp:38
+
ExportDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:122
+
ExportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:85
ExportDirWrapper::ExportEntryWrapper
friend class ExportEntryWrapper
Definition ExportDirWrapper.h:50
-
ExportDirWrapper::_getLibraryName
char * _getLibraryName()
Definition ExportDirWrapper.cpp:158
+
ExportDirWrapper::_getLibraryName
char * _getLibraryName()
Definition ExportDirWrapper.cpp:158
ExportEntryWrapper
Definition ExportDirWrapper.h:55
-
ExportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:234
-
ExportEntryWrapper::getFuncName
char * getFuncName()
Definition ExportDirWrapper.cpp:296
-
ExportEntryWrapper::getOrdinal
uint32_t getOrdinal()
Definition ExportDirWrapper.cpp:251
+
ExportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:234
+
ExportEntryWrapper::getFuncName
char * getFuncName()
Definition ExportDirWrapper.cpp:296
+
ExportEntryWrapper::getOrdinal
uint32_t getOrdinal()
Definition ExportDirWrapper.cpp:251
ExportEntryWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:69
-
ExportEntryWrapper::isByOrdinal
bool isByOrdinal()
Definition ExportDirWrapper.cpp:215
-
ExportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:207
-
ExportEntryWrapper::getFuncNameRva
offset_t getFuncNameRva()
Definition ExportDirWrapper.cpp:288
-
ExportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.cpp:185
-
ExportEntryWrapper::getFuncRva
offset_t getFuncRva()
Definition ExportDirWrapper.cpp:243
+
ExportEntryWrapper::isByOrdinal
bool isByOrdinal()
Definition ExportDirWrapper.cpp:215
+
ExportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:207
+
ExportEntryWrapper::getFuncNameRva
offset_t getFuncNameRva()
Definition ExportDirWrapper.cpp:288
+
ExportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.cpp:185
+
ExportEntryWrapper::getFuncRva
offset_t getFuncRva()
Definition ExportDirWrapper.cpp:243
ExportEntryWrapper::FUNCTION_RVA
@ FUNCTION_RVA
Definition ExportDirWrapper.h:60
ExportEntryWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:61
-
ExportEntryWrapper::getForwarder
char * getForwarder()
Definition ExportDirWrapper.cpp:307
-
ExportEntryWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:221
+
ExportEntryWrapper::getForwarder
char * getForwarder()
Definition ExportDirWrapper.cpp:307
+
ExportEntryWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:221
PEFile
Definition PEFile.h:41
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:241
pe_util::forwarderNameLen
size_t forwarderNameLen(const char *ptr, size_t max_len)
Definition Util.cpp:113
@@ -519,7 +521,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_export_dir_wrapper_8h.html b/_export_dir_wrapper_8h.html index 7de328ba..17798fbb 100644 --- a/_export_dir_wrapper_8h.html +++ b/_export_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ExportDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_export_dir_wrapper_8h_source.html b/_export_dir_wrapper_8h_source.html index 53dc839b..3f5221ae 100644 --- a/_export_dir_wrapper_8h_source.html +++ b/_export_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ExportDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -205,27 +207,27 @@ $(document).ready(function() { init_codefold(0); });
Executable
Definition Executable.h:26
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::RVA
@ RVA
Definition Executable.h:38
-
ExportDirWrapper
Definition ExportDirWrapper.h:6
+
ExportDirWrapper
Definition ExportDirWrapper.h:6
ExportDirWrapper::getLibraryName
virtual QString getLibraryName()
Definition ExportDirWrapper.cpp:173
-
ExportDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExportDirWrapper.h:34
-
ExportDirWrapper::ExportDirFID
ExportDirFID
Definition ExportDirWrapper.h:9
-
ExportDirWrapper::NAMES_NUM
@ NAMES_NUM
Definition ExportDirWrapper.h:18
-
ExportDirWrapper::MINOR_VER
@ MINOR_VER
Definition ExportDirWrapper.h:14
-
ExportDirWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:15
-
ExportDirWrapper::FUNCTIONS_RVA
@ FUNCTIONS_RVA
Definition ExportDirWrapper.h:19
-
ExportDirWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition ExportDirWrapper.h:11
-
ExportDirWrapper::TIMESTAMP
@ TIMESTAMP
Definition ExportDirWrapper.h:12
-
ExportDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExportDirWrapper.h:22
-
ExportDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition ExportDirWrapper.h:13
-
ExportDirWrapper::FUNCTIONS_NUM
@ FUNCTIONS_NUM
Definition ExportDirWrapper.h:17
-
ExportDirWrapper::NAMES_ORDINALS_RVA
@ NAMES_ORDINALS_RVA
Definition ExportDirWrapper.h:21
-
ExportDirWrapper::FUNC_NAMES_RVA
@ FUNC_NAMES_RVA
Definition ExportDirWrapper.h:20
-
ExportDirWrapper::NONE
@ NONE
Definition ExportDirWrapper.h:10
-
ExportDirWrapper::BASE
@ BASE
Definition ExportDirWrapper.h:16
-
ExportDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExportDirWrapper.h:33
-
ExportDirWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:30
-
ExportDirWrapper::ExportDirWrapper
ExportDirWrapper(PEFile *pe)
Definition ExportDirWrapper.h:25
-
ExportDirWrapper::ordToNameId
std::map< WORD, DWORD > ordToNameId
Definition ExportDirWrapper.h:48
+
ExportDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExportDirWrapper.h:34
+
ExportDirWrapper::ExportDirFID
ExportDirFID
Definition ExportDirWrapper.h:9
+
ExportDirWrapper::NAMES_NUM
@ NAMES_NUM
Definition ExportDirWrapper.h:18
+
ExportDirWrapper::MINOR_VER
@ MINOR_VER
Definition ExportDirWrapper.h:14
+
ExportDirWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:15
+
ExportDirWrapper::FUNCTIONS_RVA
@ FUNCTIONS_RVA
Definition ExportDirWrapper.h:19
+
ExportDirWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition ExportDirWrapper.h:11
+
ExportDirWrapper::TIMESTAMP
@ TIMESTAMP
Definition ExportDirWrapper.h:12
+
ExportDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExportDirWrapper.h:22
+
ExportDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition ExportDirWrapper.h:13
+
ExportDirWrapper::FUNCTIONS_NUM
@ FUNCTIONS_NUM
Definition ExportDirWrapper.h:17
+
ExportDirWrapper::NAMES_ORDINALS_RVA
@ NAMES_ORDINALS_RVA
Definition ExportDirWrapper.h:21
+
ExportDirWrapper::FUNC_NAMES_RVA
@ FUNC_NAMES_RVA
Definition ExportDirWrapper.h:20
+
ExportDirWrapper::NONE
@ NONE
Definition ExportDirWrapper.h:10
+
ExportDirWrapper::BASE
@ BASE
Definition ExportDirWrapper.h:16
+
ExportDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExportDirWrapper.h:33
+
ExportDirWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:30
+
ExportDirWrapper::ExportDirWrapper
ExportDirWrapper(PEFile *pe)
Definition ExportDirWrapper.h:25
+
ExportDirWrapper::ordToNameId
std::map< WORD, DWORD > ordToNameId
Definition ExportDirWrapper.h:48
ExportDirWrapper::clear
void clear()
Definition ExportDirWrapper.cpp:32
ExportDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ExportDirWrapper.cpp:101
ExportDirWrapper::exportDir
IMAGE_EXPORT_DIRECTORY * exportDir()
Definition ExportDirWrapper.cpp:23
@@ -236,35 +238,35 @@ $(document).ready(function() { init_codefold(0); });
ExportDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:122
ExportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:85
ExportDirWrapper::_getLibraryName
char * _getLibraryName()
Definition ExportDirWrapper.cpp:158
-
ExportEntryWrapper
Definition ExportDirWrapper.h:55
+
ExportEntryWrapper
Definition ExportDirWrapper.h:55
ExportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ExportDirWrapper.cpp:234
-
ExportEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExportDirWrapper.h:74
-
ExportEntryWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.h:78
-
ExportEntryWrapper::getForwarderStr
QString getForwarderStr()
Definition ExportDirWrapper.h:92
-
ExportEntryWrapper::ExportEntryWrapper
ExportEntryWrapper(Executable *pe, ExportDirWrapper *parentDir, size_t entryNumber)
Definition ExportDirWrapper.h:65
+
ExportEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ExportDirWrapper.h:74
+
ExportEntryWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.h:78
+
ExportEntryWrapper::getForwarderStr
QString getForwarderStr()
Definition ExportDirWrapper.h:92
+
ExportEntryWrapper::ExportEntryWrapper
ExportEntryWrapper(Executable *pe, ExportDirWrapper *parentDir, size_t entryNumber)
Definition ExportDirWrapper.h:65
ExportEntryWrapper::getFuncName
char * getFuncName()
Definition ExportDirWrapper.cpp:296
ExportEntryWrapper::getOrdinal
uint32_t getOrdinal()
Definition ExportDirWrapper.cpp:251
-
ExportEntryWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:69
+
ExportEntryWrapper::getPtr
virtual void * getPtr()
Definition ExportDirWrapper.h:69
ExportEntryWrapper::isByOrdinal
bool isByOrdinal()
Definition ExportDirWrapper.cpp:215
ExportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ExportDirWrapper.cpp:207
-
ExportEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ExportDirWrapper.h:81
+
ExportEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ExportDirWrapper.h:81
ExportEntryWrapper::getFuncNameRva
offset_t getFuncNameRva()
Definition ExportDirWrapper.cpp:288
-
ExportEntryWrapper::getuncNameStr
QString getuncNameStr()
Definition ExportDirWrapper.h:90
+
ExportEntryWrapper::getuncNameStr
QString getuncNameStr()
Definition ExportDirWrapper.h:90
ExportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ExportDirWrapper.cpp:185
ExportEntryWrapper::getFuncRva
offset_t getFuncRva()
Definition ExportDirWrapper.cpp:243
-
ExportEntryWrapper::FieldID
FieldID
Definition ExportDirWrapper.h:58
-
ExportEntryWrapper::FUNCTION_RVA
@ FUNCTION_RVA
Definition ExportDirWrapper.h:60
-
ExportEntryWrapper::NONE
@ NONE
Definition ExportDirWrapper.h:59
-
ExportEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExportDirWrapper.h:62
-
ExportEntryWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:61
+
ExportEntryWrapper::FieldID
FieldID
Definition ExportDirWrapper.h:58
+
ExportEntryWrapper::FUNCTION_RVA
@ FUNCTION_RVA
Definition ExportDirWrapper.h:60
+
ExportEntryWrapper::NONE
@ NONE
Definition ExportDirWrapper.h:59
+
ExportEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ExportDirWrapper.h:62
+
ExportEntryWrapper::NAME_RVA
@ NAME_RVA
Definition ExportDirWrapper.h:61
ExportEntryWrapper::getForwarder
char * getForwarder()
Definition ExportDirWrapper.cpp:307
ExportEntryWrapper::getName
virtual QString getName()
Definition ExportDirWrapper.cpp:221
-
ExportEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExportDirWrapper.h:73
+
ExportEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ExportDirWrapper.h:73
PEFile
Definition PEFile.h:41
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_buffer_8cpp.html b/_file_buffer_8cpp.html index d60e0ab8..3a460d4a 100644 --- a/_file_buffer_8cpp.html +++ b/_file_buffer_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/FileBuffer.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_buffer_8cpp_source.html b/_file_buffer_8cpp_source.html index 094d0a90..f5d69a86 100644 --- a/_file_buffer_8cpp_source.html +++ b/_file_buffer_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/FileBuffer.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -237,26 +239,26 @@ $(document).ready(function() { init_codefold(0); });
FILE_MAXSIZE
const bufsize_t FILE_MAXSIZE
Definition FileBuffer.h:6
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
AbstractFileBuffer
Definition FileBuffer.h:16
-
AbstractFileBuffer::getReadableSize
static bufsize_t getReadableSize(QFile &fIn)
Definition FileBuffer.cpp:95
-
AbstractFileBuffer::dump
static bufsize_t dump(const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
Definition FileBuffer.cpp:114
-
AbstractFileBuffer::read
static ByteBuffer * read(QString &file, bufsize_t minBufSize, const bool allowTruncate)
Definition FileBuffer.cpp:41
+
AbstractFileBuffer::getReadableSize
static bufsize_t getReadableSize(QFile &fIn)
Definition FileBuffer.cpp:95
+
AbstractFileBuffer::dump
static bufsize_t dump(const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
Definition FileBuffer.cpp:114
+
AbstractFileBuffer::read
static ByteBuffer * read(QString &file, bufsize_t minBufSize, const bool allowTruncate)
Definition FileBuffer.cpp:41
AbstractFileBuffer::fileSize
qint64 fileSize
Definition FileBuffer.h:31
BufferException
Definition AbstractByteBuffer.h:22
ByteBuffer
Definition ByteBuffer.h:7
CustomException
Definition CustomException.h:12
FileBufferException
Definition FileBuffer.h:10
-
FileView::~FileView
virtual ~FileView()
Definition FileBuffer.cpp:25
+
FileView::~FileView
virtual ~FileView()
Definition FileBuffer.cpp:25
FileView::mappedSize
bufsize_t mappedSize
Definition FileBuffer.h:50
FileView::fIn
QFile fIn
Definition FileBuffer.h:51
FileView::getMappableSize
bufsize_t getMappableSize()
Definition FileBuffer.h:45
-
FileView::FileView
FileView(QString &fileName, bufsize_t maxSize=FILE_MAXSIZE)
Definition FileBuffer.cpp:4
+
FileView::FileView
FileView(QString &fileName, bufsize_t maxSize=FILE_MAXSIZE)
Definition FileBuffer.cpp:4
FileView::mappedContent
BYTE * mappedContent
Definition FileBuffer.h:49
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
Logger::D_INFO
@ D_INFO
Definition Util.h:26
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_buffer_8h.html b/_file_buffer_8h.html index c4df2e08..f698ebaf 100644 --- a/_file_buffer_8h.html +++ b/_file_buffer_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/FileBuffer.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -98,9 +100,9 @@ Classes - + - +

Variables

const bufsize_t FILE_MAXSIZE = BUFSIZE_MAX
const bufsize_t FILE_MAXSIZE = BUFSIZE_MAX
 
const bufsize_t FILEVIEW_MAXSIZE = (1024*1024*400)
const bufsize_t FILEVIEW_MAXSIZE = (1024*1024*400)
 

Variable Documentation

@@ -139,7 +141,7 @@ Variables
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_buffer_8h_source.html b/_file_buffer_8h_source.html index 40be136a..63919435 100644 --- a/_file_buffer_8h_source.html +++ b/_file_buffer_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/FileBuffer.h Source File + + @@ -30,7 +32,7 @@ - + @@ -126,7 +128,7 @@ $(document).ready(function() { init_codefold(0); });
37public:
38 static bufsize_t getMappableSize(QFile &fIn);
39
-
40 FileView(QString &fileName, bufsize_t maxSize = FILE_MAXSIZE); //throws exceptions
+
40 FileView(QString &fileName, bufsize_t maxSize = FILE_MAXSIZE); //throws exceptions
41 virtual ~FileView();
42
43 virtual bufsize_t getContentSize() { return mappedSize; }
@@ -186,48 +188,49 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
ByteBuffer.h
-
FILEVIEW_MAXSIZE
const bufsize_t FILEVIEW_MAXSIZE
Definition FileBuffer.h:7
-
FILE_MAXSIZE
const bufsize_t FILE_MAXSIZE
Definition FileBuffer.h:6
+
FILEVIEW_MAXSIZE
const bufsize_t FILEVIEW_MAXSIZE
Definition FileBuffer.h:7
+
FILE_MAXSIZE
const bufsize_t FILE_MAXSIZE
Definition FileBuffer.h:6
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
AbstractFileBuffer
Definition FileBuffer.h:16
+
AbstractFileBuffer
Definition FileBuffer.h:16
AbstractFileBuffer::getReadableSize
static bufsize_t getReadableSize(QFile &fIn)
Definition FileBuffer.cpp:95
-
AbstractFileBuffer::getFileName
QString getFileName()
Definition FileBuffer.h:23
+
AbstractFileBuffer::getFileName
QString getFileName()
Definition FileBuffer.h:23
AbstractFileBuffer::dump
static bufsize_t dump(const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
Definition FileBuffer.cpp:114
AbstractFileBuffer::read
static ByteBuffer * read(QString &file, bufsize_t minBufSize, const bool allowTruncate)
Definition FileBuffer.cpp:41
-
AbstractFileBuffer::fileName
QString fileName
Definition FileBuffer.h:30
-
AbstractFileBuffer::AbstractFileBuffer
AbstractFileBuffer(QString v_fileName)
Definition FileBuffer.h:28
-
AbstractFileBuffer::fileSize
qint64 fileSize
Definition FileBuffer.h:31
+
AbstractFileBuffer::fileName
QString fileName
Definition FileBuffer.h:30
+
AbstractFileBuffer::AbstractFileBuffer
AbstractFileBuffer(QString v_fileName)
Definition FileBuffer.h:28
+
AbstractFileBuffer::fileSize
qint64 fileSize
Definition FileBuffer.h:31
BufferException
Definition AbstractByteBuffer.h:22
ByteBuffer
Definition ByteBuffer.h:7
ByteBuffer::getContent
virtual BYTE * getContent()
Definition ByteBuffer.h:16
ByteBuffer::getContentSize
virtual bufsize_t getContentSize()
Definition ByteBuffer.h:15
ByteBuffer::isResized
virtual bool isResized()
Definition ByteBuffer.h:19
ByteBuffer::resize
virtual bool resize(bufsize_t newSize)
Definition ByteBuffer.cpp:57
-
FileBufferException
Definition FileBuffer.h:10
-
FileBufferException::FileBufferException
FileBufferException(const QString info)
Definition FileBuffer.h:12
-
FileBuffer
Definition FileBuffer.h:56
-
FileBuffer::~FileBuffer
virtual ~FileBuffer()
Definition FileBuffer.h:70
-
FileBuffer::isResized
virtual bool isResized()
Definition FileBuffer.h:77
-
FileBuffer::m_Buf
ByteBuffer * m_Buf
Definition FileBuffer.h:86
-
FileBuffer::FileBuffer
FileBuffer(QString &fileName, bufsize_t minSize, bool allowTruncate)
Definition FileBuffer.h:58
-
FileBuffer::getContentSize
virtual bufsize_t getContentSize()
Definition FileBuffer.h:72
-
FileBuffer::getContent
virtual BYTE * getContent()
Definition FileBuffer.h:73
-
FileBuffer::resize
bool resize(bufsize_t newSize)
Definition FileBuffer.h:75
-
FileBuffer::isTruncated
virtual bool isTruncated()
Definition FileBuffer.h:79
-
FileBuffer::getFileSize
offset_t getFileSize()
Definition FileBuffer.h:74
-
FileView
Definition FileBuffer.h:36
+
FileBufferException
Definition FileBuffer.h:10
+
FileBufferException::FileBufferException
FileBufferException(const QString info)
Definition FileBuffer.h:12
+
FileBuffer
Definition FileBuffer.h:56
+
FileBuffer::~FileBuffer
virtual ~FileBuffer()
Definition FileBuffer.h:70
+
FileBuffer::isResized
virtual bool isResized()
Definition FileBuffer.h:77
+
FileBuffer::m_Buf
ByteBuffer * m_Buf
Definition FileBuffer.h:86
+
FileBuffer::FileBuffer
FileBuffer(QString &fileName, bufsize_t minSize, bool allowTruncate)
Definition FileBuffer.h:58
+
FileBuffer::getContentSize
virtual bufsize_t getContentSize()
Definition FileBuffer.h:72
+
FileBuffer::getContent
virtual BYTE * getContent()
Definition FileBuffer.h:73
+
FileBuffer::resize
bool resize(bufsize_t newSize)
Definition FileBuffer.h:75
+
FileBuffer::isTruncated
virtual bool isTruncated()
Definition FileBuffer.h:79
+
FileBuffer::getFileSize
offset_t getFileSize()
Definition FileBuffer.h:74
+
FileView
Definition FileBuffer.h:36
FileView::~FileView
virtual ~FileView()
Definition FileBuffer.cpp:25
-
FileView::isTruncated
virtual bool isTruncated()
Definition FileBuffer.h:46
-
FileView::getContent
virtual BYTE * getContent()
Definition FileBuffer.h:44
-
FileView::mappedSize
bufsize_t mappedSize
Definition FileBuffer.h:50
-
FileView::fIn
QFile fIn
Definition FileBuffer.h:51
-
FileView::getMappableSize
bufsize_t getMappableSize()
Definition FileBuffer.h:45
-
FileView::getContentSize
virtual bufsize_t getContentSize()
Definition FileBuffer.h:43
-
FileView::mappedContent
BYTE * mappedContent
Definition FileBuffer.h:49
+
FileView::isTruncated
virtual bool isTruncated()
Definition FileBuffer.h:46
+
FileView::getContent
virtual BYTE * getContent()
Definition FileBuffer.h:44
+
FileView::mappedSize
bufsize_t mappedSize
Definition FileBuffer.h:50
+
FileView::fIn
QFile fIn
Definition FileBuffer.h:51
+
FileView::getMappableSize
bufsize_t getMappableSize()
Definition FileBuffer.h:45
+
FileView::getContentSize
virtual bufsize_t getContentSize()
Definition FileBuffer.h:43
+
FileView::FileView
FileView(QString &fileName, bufsize_t maxSize=FILE_MAXSIZE)
Definition FileBuffer.cpp:4
+
FileView::mappedContent
BYTE * mappedContent
Definition FileBuffer.h:49
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_hdr_wrapper_8cpp.html b/_file_hdr_wrapper_8cpp.html index a2a303fb..a3421c2c 100644 --- a/_file_hdr_wrapper_8cpp.html +++ b/_file_hdr_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/FileHdrWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -100,7 +102,7 @@ Functions
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_hdr_wrapper_8cpp_source.html b/_file_hdr_wrapper_8cpp_source.html index 63690b09..64f5e31b 100644 --- a/_file_hdr_wrapper_8cpp_source.html +++ b/_file_hdr_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/FileHdrWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -315,7 +317,7 @@ $(document).ready(function() { init_codefold(0); });
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
-
FileHdrWrapper::translateMachine
static QString translateMachine(DWORD val)
Definition FileHdrWrapper.cpp:116
+
FileHdrWrapper::translateMachine
static QString translateMachine(DWORD val)
Definition FileHdrWrapper.cpp:116
FileHdrWrapper::SYMBOL_NUM
@ SYMBOL_NUM
Definition FileHdrWrapper.h:20
FileHdrWrapper::MACHINE
@ MACHINE
Definition FileHdrWrapper.h:16
FileHdrWrapper::OPTHDR_SIZE
@ OPTHDR_SIZE
Definition FileHdrWrapper.h:21
@@ -323,27 +325,27 @@ $(document).ready(function() { init_codefold(0); });
FileHdrWrapper::SEC_NUM
@ SEC_NUM
Definition FileHdrWrapper.h:17
FileHdrWrapper::TIMESTAMP
@ TIMESTAMP
Definition FileHdrWrapper.h:18
FileHdrWrapper::CHARACT
@ CHARACT
Definition FileHdrWrapper.h:22
-
FileHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition FileHdrWrapper.cpp:183
-
FileHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:140
-
FileHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:178
-
FileHdrWrapper::splitCharact
static std::vector< DWORD > splitCharact(DWORD characteristics)
Definition FileHdrWrapper.cpp:43
-
FileHdrWrapper::getPtr
virtual void * getPtr()
Definition FileHdrWrapper.cpp:125
-
FileHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition FileHdrWrapper.cpp:158
-
FileHdrWrapper::initCharact
static void initCharact()
Definition FileHdrWrapper.cpp:21
+
FileHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition FileHdrWrapper.cpp:183
+
FileHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:140
+
FileHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:178
+
FileHdrWrapper::splitCharact
static std::vector< DWORD > splitCharact(DWORD characteristics)
Definition FileHdrWrapper.cpp:43
+
FileHdrWrapper::getPtr
virtual void * getPtr()
Definition FileHdrWrapper.cpp:125
+
FileHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition FileHdrWrapper.cpp:158
+
FileHdrWrapper::initCharact
static void initCharact()
Definition FileHdrWrapper.cpp:21
FileHdrWrapper::s_fHdrCharact
static std::map< DWORD, QString > s_fHdrCharact
Definition FileHdrWrapper.h:26
FileHdrWrapper::s_machine
static std::map< DWORD, QString > s_machine
Definition FileHdrWrapper.h:27
-
FileHdrWrapper::initMachine
static void initMachine()
Definition FileHdrWrapper.cpp:65
-
FileHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition FileHdrWrapper.cpp:56
+
FileHdrWrapper::initMachine
static void initMachine()
Definition FileHdrWrapper.cpp:65
+
FileHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition FileHdrWrapper.cpp:56
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
PEFile
Definition PEFile.h:41
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:77
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:241
-
util
Definition FileHdrWrapper.cpp:7
-
util::getDateString
QString getDateString(const quint64 timestamp)
Definition FileHdrWrapper.cpp:8
+
util
Definition FileHdrWrapper.cpp:7
+
util::getDateString
QString getDateString(const quint64 timestamp)
Definition FileHdrWrapper.cpp:8
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_hdr_wrapper_8h.html b/_file_hdr_wrapper_8h.html index 3e4bf8e3..9f6442d4 100644 --- a/_file_hdr_wrapper_8h.html +++ b/_file_hdr_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/FileHdrWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_file_hdr_wrapper_8h_source.html b/_file_hdr_wrapper_8h_source.html index b7f70b3e..1c39e746 100644 --- a/_file_hdr_wrapper_8h_source.html +++ b/_file_hdr_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/FileHdrWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -145,32 +147,32 @@ $(document).ready(function() { init_codefold(0); });
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
PENodeWrapper.h
Executable::addr_type
addr_type
Definition Executable.h:35
-
FileHdrWrapper
Definition FileHdrWrapper.h:11
+
FileHdrWrapper
Definition FileHdrWrapper.h:11
FileHdrWrapper::translateMachine
static QString translateMachine(DWORD val)
Definition FileHdrWrapper.cpp:116
-
FileHdrWrapper::FieldID
FieldID
Definition FileHdrWrapper.h:14
-
FileHdrWrapper::SYMBOL_NUM
@ SYMBOL_NUM
Definition FileHdrWrapper.h:20
-
FileHdrWrapper::MACHINE
@ MACHINE
Definition FileHdrWrapper.h:16
-
FileHdrWrapper::OPTHDR_SIZE
@ OPTHDR_SIZE
Definition FileHdrWrapper.h:21
-
FileHdrWrapper::SYMBOL_PTR
@ SYMBOL_PTR
Definition FileHdrWrapper.h:19
-
FileHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition FileHdrWrapper.h:23
-
FileHdrWrapper::SEC_NUM
@ SEC_NUM
Definition FileHdrWrapper.h:17
-
FileHdrWrapper::TIMESTAMP
@ TIMESTAMP
Definition FileHdrWrapper.h:18
-
FileHdrWrapper::NONE
@ NONE
Definition FileHdrWrapper.h:15
-
FileHdrWrapper::CHARACT
@ CHARACT
Definition FileHdrWrapper.h:22
-
FileHdrWrapper::wrap
bool wrap()
Definition FileHdrWrapper.h:37
+
FileHdrWrapper::FieldID
FieldID
Definition FileHdrWrapper.h:14
+
FileHdrWrapper::SYMBOL_NUM
@ SYMBOL_NUM
Definition FileHdrWrapper.h:20
+
FileHdrWrapper::MACHINE
@ MACHINE
Definition FileHdrWrapper.h:16
+
FileHdrWrapper::OPTHDR_SIZE
@ OPTHDR_SIZE
Definition FileHdrWrapper.h:21
+
FileHdrWrapper::SYMBOL_PTR
@ SYMBOL_PTR
Definition FileHdrWrapper.h:19
+
FileHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition FileHdrWrapper.h:23
+
FileHdrWrapper::SEC_NUM
@ SEC_NUM
Definition FileHdrWrapper.h:17
+
FileHdrWrapper::TIMESTAMP
@ TIMESTAMP
Definition FileHdrWrapper.h:18
+
FileHdrWrapper::NONE
@ NONE
Definition FileHdrWrapper.h:15
+
FileHdrWrapper::CHARACT
@ CHARACT
Definition FileHdrWrapper.h:22
+
FileHdrWrapper::wrap
bool wrap()
Definition FileHdrWrapper.h:37
FileHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition FileHdrWrapper.cpp:183
FileHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:140
FileHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition FileHdrWrapper.cpp:178
FileHdrWrapper::splitCharact
static std::vector< DWORD > splitCharact(DWORD characteristics)
Definition FileHdrWrapper.cpp:43
-
FileHdrWrapper::getSize
virtual bufsize_t getSize()
Definition FileHdrWrapper.h:41
+
FileHdrWrapper::getSize
virtual bufsize_t getSize()
Definition FileHdrWrapper.h:41
FileHdrWrapper::getPtr
virtual void * getPtr()
Definition FileHdrWrapper.cpp:125
FileHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition FileHdrWrapper.cpp:158
-
FileHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition FileHdrWrapper.h:43
+
FileHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition FileHdrWrapper.h:43
FileHdrWrapper::initCharact
static void initCharact()
Definition FileHdrWrapper.cpp:21
-
FileHdrWrapper::s_fHdrCharact
static std::map< DWORD, QString > s_fHdrCharact
Definition FileHdrWrapper.h:26
-
FileHdrWrapper::getName
virtual QString getName()
Definition FileHdrWrapper.h:42
-
FileHdrWrapper::s_machine
static std::map< DWORD, QString > s_machine
Definition FileHdrWrapper.h:27
-
FileHdrWrapper::FileHdrWrapper
FileHdrWrapper(PEFile *pe)
Definition FileHdrWrapper.h:36
+
FileHdrWrapper::s_fHdrCharact
static std::map< DWORD, QString > s_fHdrCharact
Definition FileHdrWrapper.h:26
+
FileHdrWrapper::getName
virtual QString getName()
Definition FileHdrWrapper.h:42
+
FileHdrWrapper::s_machine
static std::map< DWORD, QString > s_machine
Definition FileHdrWrapper.h:27
+
FileHdrWrapper::FileHdrWrapper
FileHdrWrapper(PEFile *pe)
Definition FileHdrWrapper.h:36
FileHdrWrapper::initMachine
static void initMachine()
Definition FileHdrWrapper.cpp:65
FileHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition FileHdrWrapper.cpp:56
PEElementWrapper
Definition PENodeWrapper.h:9
@@ -178,7 +180,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_formatter_8cpp.html b/_formatter_8cpp.html index 7db1fd86..7873cb54 100644 --- a/_formatter_8cpp.html +++ b/_formatter_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/Formatter.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_formatter_8cpp_source.html b/_formatter_8cpp_source.html index de15526e..30ba12d4 100644 --- a/_formatter_8cpp_source.html +++ b/_formatter_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/Formatter.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -153,16 +155,16 @@ $(document).ready(function() { init_codefold(0); });
Formatter.h
Util.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
AbstractFormatter::AbstractFormatter
AbstractFormatter(AbstractByteBuffer *v_buf)
Definition Formatter.cpp:5
+
AbstractFormatter::AbstractFormatter
AbstractFormatter(AbstractByteBuffer *v_buf)
Definition Formatter.cpp:5
BufferException
Definition AbstractByteBuffer.h:22
-
Formatter::operator[]
const QString operator[](std::size_t idx) const
Definition Formatter.cpp:12
+
Formatter::operator[]
const QString operator[](std::size_t idx) const
Definition Formatter.cpp:12
Formatter::isHex
bool isHex
Definition Formatter.h:32
Formatter::isSkipNonprintable
bool isSkipNonprintable
Definition Formatter.h:33
pe_util::isPrintable
bool isPrintable(char c)
Definition Util.h:32
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_formatter_8h.html b/_formatter_8h.html index eb5b8075..74efcd2a 100644 --- a/_formatter_8h.html +++ b/_formatter_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Formatter.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_formatter_8h_source.html b/_formatter_8h_source.html index e919501e..60ef9863 100644 --- a/_formatter_8h_source.html +++ b/_formatter_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Formatter.h Source File + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ $(document).ready(function() { init_codefold(0); });
6class AbstractFormatter
7{
8public:
-
9 AbstractFormatter(AbstractByteBuffer *v_buf);
+
9 AbstractFormatter(AbstractByteBuffer *v_buf);
10 virtual ~AbstractFormatter() {}
11
12 virtual const QString operator[](std::size_t idx) const = 0;
@@ -158,23 +160,24 @@ $(document).ready(function() { init_codefold(0); });
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
AbstractByteBuffer.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
AbstractFormatter
Definition Formatter.h:7
-
AbstractFormatter::~AbstractFormatter
virtual ~AbstractFormatter()
Definition Formatter.h:10
+
AbstractFormatter
Definition Formatter.h:7
+
AbstractFormatter::~AbstractFormatter
virtual ~AbstractFormatter()
Definition Formatter.h:10
AbstractFormatter::operator[]
virtual const QString operator[](std::size_t idx) const =0
-
AbstractFormatter::buf
AbstractByteBuffer * buf
Definition Formatter.h:15
-
Formatter
Definition Formatter.h:18
-
Formatter::setSkipNonPrintable
void setSkipNonPrintable(bool isEnabled)
Definition Formatter.h:27
+
AbstractFormatter::AbstractFormatter
AbstractFormatter(AbstractByteBuffer *v_buf)
Definition Formatter.cpp:5
+
AbstractFormatter::buf
AbstractByteBuffer * buf
Definition Formatter.h:15
+
Formatter
Definition Formatter.h:18
+
Formatter::setSkipNonPrintable
void setSkipNonPrintable(bool isEnabled)
Definition Formatter.h:27
Formatter::operator[]
const QString operator[](std::size_t idx) const
Definition Formatter.cpp:12
-
Formatter::isHex
bool isHex
Definition Formatter.h:32
-
Formatter::setHex
void setHex(bool isEnabled)
Definition Formatter.h:26
-
Formatter::Formatter
Formatter(AbstractByteBuffer *buf, bool _isHex=false, bool _isSkipNonprintable=false)
Definition Formatter.h:20
-
Formatter::isSkipNonprintable
bool isSkipNonprintable
Definition Formatter.h:33
-
HexFormatter
Definition Formatter.h:37
-
HexFormatter::HexFormatter
HexFormatter(AbstractByteBuffer *buf)
Definition Formatter.h:39
+
Formatter::isHex
bool isHex
Definition Formatter.h:32
+
Formatter::setHex
void setHex(bool isEnabled)
Definition Formatter.h:26
+
Formatter::Formatter
Formatter(AbstractByteBuffer *buf, bool _isHex=false, bool _isSkipNonprintable=false)
Definition Formatter.h:20
+
Formatter::isSkipNonprintable
bool isSkipNonprintable
Definition Formatter.h:33
+
HexFormatter
Definition Formatter.h:37
+
HexFormatter::HexFormatter
HexFormatter(AbstractByteBuffer *buf)
Definition Formatter.h:39
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_base_dir_wrapper_8cpp.html b/_import_base_dir_wrapper_8cpp.html index 162e11cb..7d3cf15e 100644 --- a/_import_base_dir_wrapper_8cpp.html +++ b/_import_base_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ImportBaseDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_base_dir_wrapper_8cpp_source.html b/_import_base_dir_wrapper_8cpp_source.html index 43246faa..b04b677f 100644 --- a/_import_base_dir_wrapper_8cpp_source.html +++ b/_import_base_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ImportBaseDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -364,41 +366,41 @@ $(document).ready(function() { init_codefold(0); });
Executable::exe_bits
exe_bits
Definition Executable.h:28
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
Executable::BITS_64
@ BITS_64
Definition Executable.h:32
-
ImportBaseDirWrapper::thunkSize
static bufsize_t thunkSize(Executable::exe_bits bits)
Definition ImportBaseDirWrapper.cpp:23
-
ImportBaseDirWrapper::thunkToLib
ImportBaseEntryWrapper * thunkToLib(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:76
+
ImportBaseDirWrapper::thunkSize
static bufsize_t thunkSize(Executable::exe_bits bits)
Definition ImportBaseDirWrapper.cpp:23
+
ImportBaseDirWrapper::thunkToLib
ImportBaseEntryWrapper * thunkToLib(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:76
ImportBaseDirWrapper::thunksList
QList< offset_t > thunksList
Definition ImportBaseDirWrapper.h:52
ImportBaseDirWrapper::thunkToLibMap
std::map< offset_t, size_t > thunkToLibMap
Definition ImportBaseDirWrapper.h:51
ImportBaseDirWrapper::importsCount
size_t importsCount
Definition ImportBaseDirWrapper.h:54
-
ImportBaseDirWrapper::reloadMapping
virtual void reloadMapping()
Definition ImportBaseDirWrapper.cpp:59
-
ImportBaseDirWrapper::wrap
virtual bool wrap()
Definition ImportBaseDirWrapper.cpp:115
-
ImportBaseDirWrapper::clearMapping
virtual void clearMapping()
Definition ImportBaseDirWrapper.cpp:52
-
ImportBaseDirWrapper::thunkToLibName
QString thunkToLibName(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:108
-
ImportBaseDirWrapper::thunkToFunction
ImportBaseFuncWrapper * thunkToFunction(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:86
-
ImportBaseDirWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.cpp:30
-
ImportBaseDirWrapper::thunkToFuncName
QString thunkToFuncName(offset_t thunk, bool shortName=true)
Definition ImportBaseDirWrapper.cpp:98
+
ImportBaseDirWrapper::reloadMapping
virtual void reloadMapping()
Definition ImportBaseDirWrapper.cpp:59
+
ImportBaseDirWrapper::wrap
virtual bool wrap()
Definition ImportBaseDirWrapper.cpp:115
+
ImportBaseDirWrapper::clearMapping
virtual void clearMapping()
Definition ImportBaseDirWrapper.cpp:52
+
ImportBaseDirWrapper::thunkToLibName
QString thunkToLibName(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:108
+
ImportBaseDirWrapper::thunkToFunction
ImportBaseFuncWrapper * thunkToFunction(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:86
+
ImportBaseDirWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.cpp:30
+
ImportBaseDirWrapper::thunkToFuncName
QString thunkToFuncName(offset_t thunk, bool shortName=true)
Definition ImportBaseDirWrapper.cpp:98
ImportBaseEntryWrapper
Definition ImportBaseDirWrapper.h:61
ImportBaseEntryWrapper::NameLenLimit
static bufsize_t NameLenLimit
Definition ImportBaseDirWrapper.h:63
-
ImportBaseEntryWrapper::wrap
bool wrap()
Definition ImportBaseDirWrapper.cpp:157
-
ImportBaseEntryWrapper::isValid
virtual bool isValid()
Definition ImportBaseDirWrapper.cpp:150
+
ImportBaseEntryWrapper::wrap
bool wrap()
Definition ImportBaseDirWrapper.cpp:157
+
ImportBaseEntryWrapper::isValid
virtual bool isValid()
Definition ImportBaseDirWrapper.cpp:150
ImportBaseEntryWrapper::getLibraryName
virtual char * getLibraryName()=0
ImportBaseEntryWrapper::thunkToFuncMap
std::map< offset_t, size_t > thunkToFuncMap
Definition ImportBaseDirWrapper.h:76
ImportBaseFuncWrapper
Definition ImportBaseDirWrapper.h:83
-
ImportBaseFuncWrapper::getName
virtual QString getName()
Definition ImportBaseDirWrapper.cpp:223
+
ImportBaseFuncWrapper::getName
virtual QString getName()
Definition ImportBaseDirWrapper.cpp:223
ImportBaseFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()=0
ImportBaseFuncWrapper::getFunctionName
virtual char * getFunctionName()=0
ImportBaseFuncWrapper::callVia
virtual offset_t callVia()=0
-
ImportBaseFuncWrapper::getShortName
QString getShortName()
Definition ImportBaseDirWrapper.cpp:192
-
ImportBaseFuncWrapper::getLibName
QString getLibName()
Definition ImportBaseDirWrapper.cpp:212
+
ImportBaseFuncWrapper::getShortName
QString getShortName()
Definition ImportBaseDirWrapper.cpp:192
+
ImportBaseFuncWrapper::getLibName
QString getLibName()
Definition ImportBaseDirWrapper.cpp:212
ImportBaseFuncWrapper::isByOrdinal
virtual bool isByOrdinal()=0
PENodeWrapper::getParentNode
virtual PENodeWrapper * getParentNode()
Definition PENodeWrapper.h:33
imports_util
Definition ImportBaseDirWrapper.h:10
-
imports_util::isNameValid
bool isNameValid(Executable *pe, char *myName)
Definition ImportBaseDirWrapper.cpp:7
+
imports_util::isNameValid
bool isNameValid(Executable *pe, char *myName)
Definition ImportBaseDirWrapper.cpp:7
pe_util::hasNonPrintable
bool hasNonPrintable(const char *ptr, size_t maxInp)
Definition Util.cpp:70
pe_util::noWhiteCount
size_t noWhiteCount(char *buf, size_t bufSize)
Definition Util.cpp:136
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_base_dir_wrapper_8h.html b/_import_base_dir_wrapper_8h.html index e6a7b3c9..d63b9482 100644 --- a/_import_base_dir_wrapper_8h.html +++ b/_import_base_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ImportBaseDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -108,7 +110,7 @@ Functions
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_base_dir_wrapper_8h_source.html b/_import_base_dir_wrapper_8h_source.html index a79996c8..47daf992 100644 --- a/_import_base_dir_wrapper_8h_source.html +++ b/_import_base_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ImportBaseDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(document).ready(function() { init_codefold(0); }); Go to the documentation of this file.
1#pragma once
2
3#include "DataDirEntryWrapper.h"
-
4#include "../Util.h"
+
4#include "../Util.h"
5
6class ImportBaseDirWrapper;
7class ImportBaseEntryWrapper;
@@ -213,6 +215,7 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
DataDirEntryWrapper.h
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
+
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
@@ -221,56 +224,56 @@ $(document).ready(function() { init_codefold(0); });
ExeNodeWrapper::getSubfieldSize
virtual bufsize_t getSubfieldSize(size_t fieldId, size_t subField)
Definition ExeNodeWrapper.cpp:47
- +
ImportBaseDirWrapper::thunkSize
static bufsize_t thunkSize(Executable::exe_bits bits)
Definition ImportBaseDirWrapper.cpp:23
ImportBaseDirWrapper::thunkToLib
ImportBaseEntryWrapper * thunkToLib(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:76
-
ImportBaseDirWrapper::thunksList
QList< offset_t > thunksList
Definition ImportBaseDirWrapper.h:52
-
ImportBaseDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition ImportBaseDirWrapper.h:26
-
ImportBaseDirWrapper::hasThunk
bool hasThunk(offset_t thunk)
Definition ImportBaseDirWrapper.h:35
-
ImportBaseDirWrapper::thunkToLibMap
std::map< offset_t, size_t > thunkToLibMap
Definition ImportBaseDirWrapper.h:51
- +
ImportBaseDirWrapper::thunksList
QList< offset_t > thunksList
Definition ImportBaseDirWrapper.h:52
+
ImportBaseDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition ImportBaseDirWrapper.h:26
+
ImportBaseDirWrapper::hasThunk
bool hasThunk(offset_t thunk)
Definition ImportBaseDirWrapper.h:35
+
ImportBaseDirWrapper::thunkToLibMap
std::map< offset_t, size_t > thunkToLibMap
Definition ImportBaseDirWrapper.h:51
+ -
ImportBaseDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportBaseDirWrapper.h:28
-
ImportBaseDirWrapper::getThunksList
QList< offset_t > getThunksList()
Definition ImportBaseDirWrapper.h:33
+
ImportBaseDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportBaseDirWrapper.h:28
+
ImportBaseDirWrapper::getThunksList
QList< offset_t > getThunksList()
Definition ImportBaseDirWrapper.h:33
ImportBaseDirWrapper::thunkToLibName
QString thunkToLibName(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:108
ImportBaseDirWrapper::thunkToFunction
ImportBaseFuncWrapper * thunkToFunction(offset_t thunk)
Definition ImportBaseDirWrapper.cpp:86
-
ImportBaseDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportBaseDirWrapper.h:27
+
ImportBaseDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportBaseDirWrapper.h:27
ImportBaseDirWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.cpp:30
ImportBaseDirWrapper::thunkToFuncName
QString thunkToFuncName(offset_t thunk, bool shortName=true)
Definition ImportBaseDirWrapper.cpp:98
-
ImportBaseDirWrapper::ImportBaseDirWrapper
ImportBaseDirWrapper(PEFile *pe, pe::dir_entry v_entryType)
Definition ImportBaseDirWrapper.h:43
-
ImportBaseDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportBaseDirWrapper.h:23
-
ImportBaseDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ImportBaseDirWrapper.h:25
-
ImportBaseEntryWrapper
Definition ImportBaseDirWrapper.h:61
-
ImportBaseEntryWrapper::impDir
ImportBaseDirWrapper * impDir
Definition ImportBaseDirWrapper.h:77
-
ImportBaseEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ImportBaseDirWrapper.h:66
-
ImportBaseEntryWrapper::NameLenLimit
static bufsize_t NameLenLimit
Definition ImportBaseDirWrapper.h:63
+
ImportBaseDirWrapper::ImportBaseDirWrapper
ImportBaseDirWrapper(PEFile *pe, pe::dir_entry v_entryType)
Definition ImportBaseDirWrapper.h:43
+
ImportBaseDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportBaseDirWrapper.h:23
+
ImportBaseDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ImportBaseDirWrapper.h:25
+
ImportBaseEntryWrapper
Definition ImportBaseDirWrapper.h:61
+
ImportBaseEntryWrapper::impDir
ImportBaseDirWrapper * impDir
Definition ImportBaseDirWrapper.h:77
+
ImportBaseEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ImportBaseDirWrapper.h:66
+
ImportBaseEntryWrapper::NameLenLimit
static bufsize_t NameLenLimit
Definition ImportBaseDirWrapper.h:63
ImportBaseEntryWrapper::wrap
bool wrap()
Definition ImportBaseDirWrapper.cpp:157
-
ImportBaseEntryWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.h:74
+
ImportBaseEntryWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.h:74
ImportBaseEntryWrapper::isValid
virtual bool isValid()
Definition ImportBaseDirWrapper.cpp:150
-
ImportBaseEntryWrapper::ImportBaseEntryWrapper
ImportBaseEntryWrapper(PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
Definition ImportBaseDirWrapper.h:71
+
ImportBaseEntryWrapper::ImportBaseEntryWrapper
ImportBaseEntryWrapper(PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
Definition ImportBaseDirWrapper.h:71
ImportBaseEntryWrapper::getLibraryName
virtual char * getLibraryName()=0
-
ImportBaseEntryWrapper::thunkToFuncMap
std::map< offset_t, size_t > thunkToFuncMap
Definition ImportBaseDirWrapper.h:76
- +
ImportBaseEntryWrapper::thunkToFuncMap
std::map< offset_t, size_t > thunkToFuncMap
Definition ImportBaseDirWrapper.h:76
+ - +
ImportBaseFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()=0
- +
ImportBaseFuncWrapper::getFunctionName
virtual char * getFunctionName()=0
ImportBaseFuncWrapper::callVia
virtual offset_t callVia()=0
ImportBaseFuncWrapper::isByOrdinal
virtual bool isByOrdinal()=0
-
ImportBaseFuncWrapper::ImportBaseFuncWrapper
ImportBaseFuncWrapper(PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
Definition ImportBaseDirWrapper.h:85
+
ImportBaseFuncWrapper::ImportBaseFuncWrapper
ImportBaseFuncWrapper(PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
Definition ImportBaseDirWrapper.h:85
-
imports_util
Definition ImportBaseDirWrapper.h:10
+
imports_util
Definition ImportBaseDirWrapper.h:10
imports_util::isNameValid
bool isNameValid(Executable *pe, char *myName)
Definition ImportBaseDirWrapper.cpp:7
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_dir_wrapper_8cpp.html b/_import_dir_wrapper_8cpp.html index ba4b55c2..4b504f2f 100644 --- a/_import_dir_wrapper_8cpp.html +++ b/_import_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ImportDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_dir_wrapper_8cpp_source.html b/_import_dir_wrapper_8cpp_source.html index fbe3d890..bbec8513 100644 --- a/_import_dir_wrapper_8cpp_source.html +++ b/_import_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ImportDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -526,44 +528,44 @@ $(document).ready(function() { init_codefold(0); });
ImportBaseEntryWrapper::addMapping
void addMapping(ExeNodeWrapper *func)
Definition ImportBaseDirWrapper.h:74
ImportBaseFuncWrapper::getThunkValSize
bufsize_t getThunkValSize()
Definition ImportBaseDirWrapper.h:104
ImportBaseFuncWrapper::getAddrSize
bufsize_t getAddrSize()
Definition ImportBaseDirWrapper.h:98
-
ImportDirWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition ImportDirWrapper.cpp:310
-
ImportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:361
-
ImportDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition ImportDirWrapper.cpp:335
-
ImportDirWrapper::firstDescriptor
IMAGE_IMPORT_DESCRIPTOR * firstDescriptor()
Definition ImportDirWrapper.cpp:319
+
ImportDirWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition ImportDirWrapper.cpp:310
+
ImportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:361
+
ImportDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition ImportDirWrapper.cpp:335
+
ImportDirWrapper::firstDescriptor
IMAGE_IMPORT_DESCRIPTOR * firstDescriptor()
Definition ImportDirWrapper.cpp:319
ImportDirWrapper::ImportEntryWrapper
friend class ImportEntryWrapper
Definition ImportDirWrapper.h:46
ImportEntryWrapper
Definition ImportDirWrapper.h:51
-
ImportEntryWrapper::isBound
bool isBound()
Definition ImportDirWrapper.cpp:231
+
ImportEntryWrapper::isBound
bool isBound()
Definition ImportDirWrapper.cpp:231
ImportEntryWrapper::FieldID
FieldID
Definition ImportDirWrapper.h:54
ImportEntryWrapper::FIRST_THUNK
@ FIRST_THUNK
Definition ImportDirWrapper.h:60
ImportEntryWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:58
ImportEntryWrapper::ORIG_FIRST_THUNK
@ ORIG_FIRST_THUNK
Definition ImportDirWrapper.h:56
ImportEntryWrapper::NAME
@ NAME
Definition ImportDirWrapper.h:59
ImportEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition ImportDirWrapper.h:57
-
ImportEntryWrapper::getName
virtual QString getName()
Definition ImportDirWrapper.cpp:224
-
ImportEntryWrapper::getLibraryName
char * getLibraryName()
Definition ImportDirWrapper.cpp:280
-
ImportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:257
-
ImportEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition ImportDirWrapper.cpp:179
-
ImportEntryWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:196
-
ImportEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:269
-
ImportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:241
-
ImportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:219
+
ImportEntryWrapper::getName
virtual QString getName()
Definition ImportDirWrapper.cpp:224
+
ImportEntryWrapper::getLibraryName
char * getLibraryName()
Definition ImportDirWrapper.cpp:280
+
ImportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:257
+
ImportEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition ImportDirWrapper.cpp:179
+
ImportEntryWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:196
+
ImportEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:269
+
ImportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:241
+
ImportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:219
ImportedFuncWrapper
Definition ImportDirWrapper.h:117
-
ImportedFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:123
-
ImportedFuncWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:6
+
ImportedFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:123
+
ImportedFuncWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:6
ImportedFuncWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:124
ImportedFuncWrapper::HINT
@ HINT
Definition ImportDirWrapper.h:125
ImportedFuncWrapper::ORIG_THUNK
@ ORIG_THUNK
Definition ImportDirWrapper.h:122
ImportedFuncWrapper::THUNK
@ THUNK
Definition ImportDirWrapper.h:123
-
ImportedFuncWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:118
-
ImportedFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:164
-
ImportedFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition ImportDirWrapper.cpp:88
-
ImportedFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:153
-
ImportedFuncWrapper::getFunctionName
char * getFunctionName()
Definition ImportDirWrapper.cpp:108
-
ImportedFuncWrapper::getValuePtr
void * getValuePtr(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:44
-
ImportedFuncWrapper::getFieldRVA
offset_t getFieldRVA(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:25
-
ImportedFuncWrapper::getThunkValue
uint64_t getThunkValue()
Definition ImportDirWrapper.cpp:66
-
ImportedFuncWrapper::getImportByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr()
Definition ImportDirWrapper.cpp:13
-
ImportedFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:146
+
ImportedFuncWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:118
+
ImportedFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:164
+
ImportedFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition ImportDirWrapper.cpp:88
+
ImportedFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:153
+
ImportedFuncWrapper::getFunctionName
char * getFunctionName()
Definition ImportDirWrapper.cpp:108
+
ImportedFuncWrapper::getValuePtr
void * getValuePtr(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:44
+
ImportedFuncWrapper::getFieldRVA
offset_t getFieldRVA(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:25
+
ImportedFuncWrapper::getThunkValue
uint64_t getThunkValue()
Definition ImportDirWrapper.cpp:66
+
ImportedFuncWrapper::getImportByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr()
Definition ImportDirWrapper.cpp:13
+
ImportedFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:146
PEFile
Definition PEFile.h:41
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:268
PENodeWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:36
@@ -572,7 +574,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_dir_wrapper_8h.html b/_import_dir_wrapper_8h.html index 11d00455..e0ea5f89 100644 --- a/_import_dir_wrapper_8h.html +++ b/_import_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ImportDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_import_dir_wrapper_8h_source.html b/_import_dir_wrapper_8h_source.html index 68d973c6..e35da701 100644 --- a/_import_dir_wrapper_8h_source.html +++ b/_import_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ImportDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -282,66 +284,66 @@ $(document).ready(function() { init_codefold(0); });
ImportBaseEntryWrapper
Definition ImportBaseDirWrapper.h:61
ImportBaseEntryWrapper::wrap
bool wrap()
Definition ImportBaseDirWrapper.cpp:157
ImportBaseFuncWrapper
Definition ImportBaseDirWrapper.h:83
-
ImportDirWrapper
Definition ImportDirWrapper.h:31
-
ImportDirWrapper::ImportDirWrapper
ImportDirWrapper(PEFile *pe)
Definition ImportDirWrapper.h:33
+
ImportDirWrapper
Definition ImportDirWrapper.h:31
+
ImportDirWrapper::ImportDirWrapper
ImportDirWrapper(PEFile *pe)
Definition ImportDirWrapper.h:33
ImportDirWrapper::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition ImportDirWrapper.cpp:310
-
ImportDirWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.h:36
-
ImportDirWrapper::getName
virtual QString getName()
Definition ImportDirWrapper.h:38
+
ImportDirWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.h:36
+
ImportDirWrapper::getName
virtual QString getName()
Definition ImportDirWrapper.h:38
ImportDirWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:361
ImportDirWrapper::loadNextEntry
virtual bool loadNextEntry(size_t cntr)
Definition ImportDirWrapper.cpp:335
ImportDirWrapper::firstDescriptor
IMAGE_IMPORT_DESCRIPTOR * firstDescriptor()
Definition ImportDirWrapper.cpp:319
-
ImportEntryWrapper
Definition ImportDirWrapper.h:51
+
ImportEntryWrapper
Definition ImportDirWrapper.h:51
ImportEntryWrapper::isBound
bool isBound()
Definition ImportDirWrapper.cpp:231
-
ImportEntryWrapper::FieldID
FieldID
Definition ImportDirWrapper.h:54
-
ImportEntryWrapper::FIRST_THUNK
@ FIRST_THUNK
Definition ImportDirWrapper.h:60
-
ImportEntryWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:58
-
ImportEntryWrapper::ORIG_FIRST_THUNK
@ ORIG_FIRST_THUNK
Definition ImportDirWrapper.h:56
-
ImportEntryWrapper::NONE
@ NONE
Definition ImportDirWrapper.h:55
-
ImportEntryWrapper::NAME
@ NAME
Definition ImportDirWrapper.h:59
-
ImportEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition ImportDirWrapper.h:57
-
ImportEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ImportDirWrapper.h:61
+
ImportEntryWrapper::FieldID
FieldID
Definition ImportDirWrapper.h:54
+
ImportEntryWrapper::FIRST_THUNK
@ FIRST_THUNK
Definition ImportDirWrapper.h:60
+
ImportEntryWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:58
+
ImportEntryWrapper::ORIG_FIRST_THUNK
@ ORIG_FIRST_THUNK
Definition ImportDirWrapper.h:56
+
ImportEntryWrapper::NONE
@ NONE
Definition ImportDirWrapper.h:55
+
ImportEntryWrapper::NAME
@ NAME
Definition ImportDirWrapper.h:59
+
ImportEntryWrapper::TIMESTAMP
@ TIMESTAMP
Definition ImportDirWrapper.h:57
+
ImportEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ImportDirWrapper.h:61
ImportEntryWrapper::getName
virtual QString getName()
Definition ImportDirWrapper.cpp:224
-
ImportEntryWrapper::geEntrySize
bufsize_t geEntrySize()
Definition ImportDirWrapper.h:83
+
ImportEntryWrapper::geEntrySize
bufsize_t geEntrySize()
Definition ImportDirWrapper.h:83
ImportEntryWrapper::getLibraryName
char * getLibraryName()
Definition ImportDirWrapper.cpp:280
ImportEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:257
-
ImportEntryWrapper::ImportEntryWrapper
ImportEntryWrapper(PEFile *pe, ImportDirWrapper *importsDir, size_t entryNumber)
Definition ImportDirWrapper.h:64
+
ImportEntryWrapper::ImportEntryWrapper
ImportEntryWrapper(PEFile *pe, ImportDirWrapper *importsDir, size_t entryNumber)
Definition ImportDirWrapper.h:64
ImportEntryWrapper::loadNextEntry
bool loadNextEntry(size_t entryNum)
Definition ImportDirWrapper.cpp:179
-
ImportEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportDirWrapper.h:76
+
ImportEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportDirWrapper.h:76
ImportEntryWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:196
ImportEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:269
ImportEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:241
-
ImportEntryWrapper::getNextEntryOffset
virtual offset_t getNextEntryOffset()
Definition ImportDirWrapper.h:89
+
ImportEntryWrapper::getNextEntryOffset
virtual offset_t getNextEntryOffset()
Definition ImportDirWrapper.h:89
ImportEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:219
-
ImportedFuncWrapper
Definition ImportDirWrapper.h:117
-
ImportedFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()
Definition ImportDirWrapper.h:154
+
ImportedFuncWrapper
Definition ImportDirWrapper.h:117
+
ImportedFuncWrapper::getOrdinal
virtual uint64_t getOrdinal()
Definition ImportDirWrapper.h:154
ImportedFuncWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:123
-
ImportedFuncWrapper::ImportedFuncWrapper
ImportedFuncWrapper(PEFile *pe, ImportEntryWrapper *parentLib, size_t entryNumber)
Definition ImportDirWrapper.h:129
+
ImportedFuncWrapper::ImportedFuncWrapper
ImportedFuncWrapper(PEFile *pe, ImportEntryWrapper *parentLib, size_t entryNumber)
Definition ImportDirWrapper.h:129
ImportedFuncWrapper::getPtr
virtual void * getPtr()
Definition ImportDirWrapper.cpp:6
-
ImportedFuncWrapper::FieldID
FieldID
Definition ImportDirWrapper.h:120
-
ImportedFuncWrapper::NONE
@ NONE
Definition ImportDirWrapper.h:121
-
ImportedFuncWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:124
-
ImportedFuncWrapper::HINT
@ HINT
Definition ImportDirWrapper.h:125
-
ImportedFuncWrapper::ORIG_THUNK
@ ORIG_THUNK
Definition ImportDirWrapper.h:122
-
ImportedFuncWrapper::THUNK
@ THUNK
Definition ImportDirWrapper.h:123
-
ImportedFuncWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ImportDirWrapper.h:126
+
ImportedFuncWrapper::FieldID
FieldID
Definition ImportDirWrapper.h:120
+
ImportedFuncWrapper::NONE
@ NONE
Definition ImportDirWrapper.h:121
+
ImportedFuncWrapper::FORWARDER
@ FORWARDER
Definition ImportDirWrapper.h:124
+
ImportedFuncWrapper::HINT
@ HINT
Definition ImportDirWrapper.h:125
+
ImportedFuncWrapper::ORIG_THUNK
@ ORIG_THUNK
Definition ImportDirWrapper.h:122
+
ImportedFuncWrapper::THUNK
@ THUNK
Definition ImportDirWrapper.h:123
+
ImportedFuncWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ImportDirWrapper.h:126
ImportedFuncWrapper::getSize
virtual bufsize_t getSize()
Definition ImportDirWrapper.cpp:118
ImportedFuncWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:164
-
ImportedFuncWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportDirWrapper.h:138
+
ImportedFuncWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ImportDirWrapper.h:138
ImportedFuncWrapper::isByOrdinal
bool isByOrdinal()
Definition ImportDirWrapper.cpp:88
ImportedFuncWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ImportDirWrapper.cpp:153
ImportedFuncWrapper::getFunctionName
char * getFunctionName()
Definition ImportDirWrapper.cpp:108
ImportedFuncWrapper::getValuePtr
void * getValuePtr(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:44
ImportedFuncWrapper::getFieldRVA
offset_t getFieldRVA(ImportEntryWrapper::FieldID fId)
Definition ImportDirWrapper.cpp:25
-
ImportedFuncWrapper::callVia
virtual offset_t callVia()
Definition ImportDirWrapper.h:152
+
ImportedFuncWrapper::callVia
virtual offset_t callVia()
Definition ImportDirWrapper.h:152
ImportedFuncWrapper::getThunkValue
uint64_t getThunkValue()
Definition ImportDirWrapper.cpp:66
ImportedFuncWrapper::getImportByNamePtr
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr()
Definition ImportDirWrapper.cpp:13
-
ImportedFuncWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ImportDirWrapper.h:139
+
ImportedFuncWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ImportDirWrapper.h:139
ImportedFuncWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ImportDirWrapper.cpp:146
PEFile
Definition PEFile.h:41
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_ld_config_dir_wrapper_8cpp.html b/_ld_config_dir_wrapper_8cpp.html index 3e1583bb..64e07a0d 100644 --- a/_ld_config_dir_wrapper_8cpp.html +++ b/_ld_config_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/LdConfigDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() { - +

Macros

#define getStructFieldOffset(STRUCT, FIELD)   ((ULONGLONG) &(STRUCT.FIELD) - (ULONGLONG)&STRUCT)
#define getStructFieldOffset(STRUCT, FIELD)   ((ULONGLONG) &(STRUCT.FIELD) - (ULONGLONG)&STRUCT)
 

Macro Definition Documentation

@@ -98,19 +100,12 @@ Macros #define getStructFieldOffset ( -   - STRUCT, + STRUCT, -   - FIELD  - - - - ) -    ((ULONGLONG) &(STRUCT.FIELD) - (ULONGLONG)&STRUCT) + FIELD )   ((ULONGLONG) &(STRUCT.FIELD) - (ULONGLONG)&STRUCT)
@@ -122,7 +117,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_ld_config_dir_wrapper_8cpp_source.html b/_ld_config_dir_wrapper_8cpp_source.html index 31f5f5f6..b35fe85b 100644 --- a/_ld_config_dir_wrapper_8cpp_source.html +++ b/_ld_config_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/LdConfigDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -674,7 +676,7 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
-
getStructFieldOffset
#define getStructFieldOffset(STRUCT, FIELD)
Definition LdConfigDirWrapper.cpp:4
+
getStructFieldOffset
#define getStructFieldOffset(STRUCT, FIELD)
Definition LdConfigDirWrapper.cpp:4
LdConfigDirWrapper.h
CustomException
Definition CustomException.h:12
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
@@ -695,20 +697,20 @@ $(document).ready(function() { init_codefold(0); });
Executable::isValidAddr
virtual bool isValidAddr(offset_t addr, addr_type addrType)
Definition Executable.cpp:19
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)=0
-
LdConfigDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:298
-
LdConfigDirWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:118
+
LdConfigDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:298
+
LdConfigDirWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:118
LdConfigDirWrapper::firstSubEntrySize
size_t firstSubEntrySize(size_t parentId)
Definition LdConfigDirWrapper.h:158
-
LdConfigDirWrapper::translateGuardFlag
static QString translateGuardFlag(DWORD flags)
Definition LdConfigDirWrapper.cpp:431
-
LdConfigDirWrapper::translateGuardFlagsContent
QString translateGuardFlagsContent(const QString &delim)
Definition LdConfigDirWrapper.cpp:475
-
LdConfigDirWrapper::getGuardFlagsSet
static std::set< DWORD > getGuardFlagsSet(DWORD flags)
Definition LdConfigDirWrapper.cpp:403
-
LdConfigDirWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:87
-
LdConfigDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition LdConfigDirWrapper.cpp:313
-
LdConfigDirWrapper::wrap
bool wrap()
Definition LdConfigDirWrapper.cpp:70
-
LdConfigDirWrapper::clear
virtual void clear()
Definition LdConfigDirWrapper.cpp:92
-
LdConfigDirWrapper::firstSubEntryPtr
void * firstSubEntryPtr(size_t parentId)
Definition LdConfigDirWrapper.cpp:102
+
LdConfigDirWrapper::translateGuardFlag
static QString translateGuardFlag(DWORD flags)
Definition LdConfigDirWrapper.cpp:431
+
LdConfigDirWrapper::translateGuardFlagsContent
QString translateGuardFlagsContent(const QString &delim)
Definition LdConfigDirWrapper.cpp:475
+
LdConfigDirWrapper::getGuardFlagsSet
static std::set< DWORD > getGuardFlagsSet(DWORD flags)
Definition LdConfigDirWrapper.cpp:403
+
LdConfigDirWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:87
+
LdConfigDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition LdConfigDirWrapper.cpp:313
+
LdConfigDirWrapper::wrap
bool wrap()
Definition LdConfigDirWrapper.cpp:70
+
LdConfigDirWrapper::clear
virtual void clear()
Definition LdConfigDirWrapper.cpp:92
+
LdConfigDirWrapper::firstSubEntryPtr
void * firstSubEntryPtr(size_t parentId)
Definition LdConfigDirWrapper.cpp:102
LdConfigDirWrapper::getName
virtual QString getName()
Definition LdConfigDirWrapper.h:80
-
LdConfigDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition LdConfigDirWrapper.cpp:494
-
LdConfigDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:379
+
LdConfigDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition LdConfigDirWrapper.cpp:494
+
LdConfigDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:379
LdConfigDirWrapper::CHPE_METADATA_PTR
@ CHPE_METADATA_PTR
Definition LdConfigDirWrapper.h:54
LdConfigDirWrapper::GUARD_EH_CONT_TABLE
@ GUARD_EH_CONT_TABLE
Definition LdConfigDirWrapper.h:65
LdConfigDirWrapper::GUARD_CHECK
@ GUARD_CHECK
Definition LdConfigDirWrapper.h:39
@@ -758,17 +760,17 @@ $(document).ready(function() { init_codefold(0); });
LdConfigDirWrapper::CODE_INTEGRITY_CATALOG_OFFSET
@ CODE_INTEGRITY_CATALOG_OFFSET
Definition LdConfigDirWrapper.h:47
LdConfigDirWrapper::LdConfigEntryWrapper
friend class LdConfigEntryWrapper
Definition LdConfigDirWrapper.h:191
LdConfigEntryWrapper
Definition LdConfigDirWrapper.h:195
-
LdConfigEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:530
-
LdConfigEntryWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:522
+
LdConfigEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:530
+
LdConfigEntryWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:522
LdConfigEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition LdConfigDirWrapper.h:218
-
LdConfigEntryWrapper::getFieldSize
bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:546
+
LdConfigEntryWrapper::getFieldSize
bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:546
LdConfigEntryWrapper::HANDLER_ADDR
@ HANDLER_ADDR
Definition LdConfigDirWrapper.h:200
LdConfigEntryWrapper::NONE
@ NONE
Definition LdConfigDirWrapper.h:199
-
LdConfigEntryWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:503
+
LdConfigEntryWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:503
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_ld_config_dir_wrapper_8h.html b/_ld_config_dir_wrapper_8h.html index 301af6e3..85e90531 100644 --- a/_ld_config_dir_wrapper_8h.html +++ b/_ld_config_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/LdConfigDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_ld_config_dir_wrapper_8h_source.html b/_ld_config_dir_wrapper_8h_source.html index 2ab02fe0..3d8d31b8 100644 --- a/_ld_config_dir_wrapper_8h_source.html +++ b/_ld_config_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/LdConfigDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -375,101 +377,101 @@ $(document).ready(function() { init_codefold(0); });
Executable::RVA
@ RVA
Definition Executable.h:38
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
Executable::getBitMode
virtual exe_bits getBitMode()
Definition Executable.h:49
-
LdConfigDirWrapper
Definition LdConfigDirWrapper.h:6
-
LdConfigDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition LdConfigDirWrapper.h:82
+
LdConfigDirWrapper
Definition LdConfigDirWrapper.h:6
+
LdConfigDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition LdConfigDirWrapper.h:82
LdConfigDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:298
LdConfigDirWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:118
-
LdConfigDirWrapper::hasSupressionInfo
bool hasSupressionInfo()
Definition LdConfigDirWrapper.h:125
-
LdConfigDirWrapper::getSubfieldWrapper
virtual ExeNodeWrapper * getSubfieldWrapper(size_t parentType, size_t fieldId)
Definition LdConfigDirWrapper.h:104
-
LdConfigDirWrapper::firstSubEntrySize
size_t firstSubEntrySize(size_t parentId)
Definition LdConfigDirWrapper.h:158
-
LdConfigDirWrapper::getSubfieldWrapperCount
virtual size_t getSubfieldWrapperCount(size_t parentType)
Definition LdConfigDirWrapper.h:111
+
LdConfigDirWrapper::hasSupressionInfo
bool hasSupressionInfo()
Definition LdConfigDirWrapper.h:125
+
LdConfigDirWrapper::getSubfieldWrapper
virtual ExeNodeWrapper * getSubfieldWrapper(size_t parentType, size_t fieldId)
Definition LdConfigDirWrapper.h:104
+
LdConfigDirWrapper::firstSubEntrySize
size_t firstSubEntrySize(size_t parentId)
Definition LdConfigDirWrapper.h:158
+
LdConfigDirWrapper::getSubfieldWrapperCount
virtual size_t getSubfieldWrapperCount(size_t parentType)
Definition LdConfigDirWrapper.h:111
LdConfigDirWrapper::translateGuardFlag
static QString translateGuardFlag(DWORD flags)
Definition LdConfigDirWrapper.cpp:431
LdConfigDirWrapper::translateGuardFlagsContent
QString translateGuardFlagsContent(const QString &delim)
Definition LdConfigDirWrapper.cpp:475
-
LdConfigDirWrapper::hasSubfieldWrapper
virtual bool hasSubfieldWrapper(size_t parentType)
Definition LdConfigDirWrapper.h:118
+
LdConfigDirWrapper::hasSubfieldWrapper
virtual bool hasSubfieldWrapper(size_t parentType)
Definition LdConfigDirWrapper.h:118
LdConfigDirWrapper::getGuardFlagsSet
static std::set< DWORD > getGuardFlagsSet(DWORD flags)
Definition LdConfigDirWrapper.cpp:403
LdConfigDirWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:87
-
LdConfigDirWrapper::metadataSize
size_t metadataSize()
Definition LdConfigDirWrapper.h:136
+
LdConfigDirWrapper::metadataSize
size_t metadataSize()
Definition LdConfigDirWrapper.h:136
LdConfigDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition LdConfigDirWrapper.cpp:313
LdConfigDirWrapper::wrap
bool wrap()
Definition LdConfigDirWrapper.cpp:70
LdConfigDirWrapper::clear
virtual void clear()
Definition LdConfigDirWrapper.cpp:92
LdConfigDirWrapper::firstSubEntryPtr
void * firstSubEntryPtr(size_t parentId)
Definition LdConfigDirWrapper.cpp:102
-
LdConfigDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition LdConfigDirWrapper.h:98
-
LdConfigDirWrapper::getName
virtual QString getName()
Definition LdConfigDirWrapper.h:80
+
LdConfigDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition LdConfigDirWrapper.h:98
+
LdConfigDirWrapper::getName
virtual QString getName()
Definition LdConfigDirWrapper.h:80
LdConfigDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition LdConfigDirWrapper.cpp:494
LdConfigDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:379
-
LdConfigDirWrapper::LdConfigDirWrapper
LdConfigDirWrapper(PEFile *pe)
Definition LdConfigDirWrapper.h:73
-
LdConfigDirWrapper::LdConfigDirFID
LdConfigDirFID
Definition LdConfigDirWrapper.h:16
-
LdConfigDirWrapper::CHPE_METADATA_PTR
@ CHPE_METADATA_PTR
Definition LdConfigDirWrapper.h:54
-
LdConfigDirWrapper::GUARD_EH_CONT_TABLE
@ GUARD_EH_CONT_TABLE
Definition LdConfigDirWrapper.h:65
-
LdConfigDirWrapper::GUARD_CHECK
@ GUARD_CHECK
Definition LdConfigDirWrapper.h:39
-
LdConfigDirWrapper::PROC_HEAP_FLAGS32
@ PROC_HEAP_FLAGS32
Definition LdConfigDirWrapper.h:30
-
LdConfigDirWrapper::LOCK_PREFIX
@ LOCK_PREFIX
Definition LdConfigDirWrapper.h:27
-
LdConfigDirWrapper::GUARD_DISPATCH
@ GUARD_DISPATCH
Definition LdConfigDirWrapper.h:40
-
LdConfigDirWrapper::DEPENDENT_LOAD_FLAGS
@ DEPENDENT_LOAD_FLAGS
Definition LdConfigDirWrapper.h:33
-
LdConfigDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition LdConfigDirWrapper.h:67
-
LdConfigDirWrapper::GUARD_LONG_JUMP_COUNT
@ GUARD_LONG_JUMP_COUNT
Definition LdConfigDirWrapper.h:52
-
LdConfigDirWrapper::SEH_COUNT
@ SEH_COUNT
Definition LdConfigDirWrapper.h:37
-
LdConfigDirWrapper::CODE_INTEGRITY_FLAGS
@ CODE_INTEGRITY_FLAGS
Definition LdConfigDirWrapper.h:45
-
LdConfigDirWrapper::GLOBAL_FLAGS_CLEAR
@ GLOBAL_FLAGS_CLEAR
Definition LdConfigDirWrapper.h:22
-
LdConfigDirWrapper::CRITICAT_SEC_TIMEOUT
@ CRITICAT_SEC_TIMEOUT
Definition LdConfigDirWrapper.h:24
-
LdConfigDirWrapper::NONE
@ NONE
Definition LdConfigDirWrapper.h:17
-
LdConfigDirWrapper::ENCLAVE_CONFIG_PTR
@ ENCLAVE_CONFIG_PTR
Definition LdConfigDirWrapper.h:63
-
LdConfigDirWrapper::MAX_ALLOC
@ MAX_ALLOC
Definition LdConfigDirWrapper.h:28
-
LdConfigDirWrapper::DECOMMIT_TOTAL
@ DECOMMIT_TOTAL
Definition LdConfigDirWrapper.h:26
-
LdConfigDirWrapper::DECOMMIT_FREE
@ DECOMMIT_FREE
Definition LdConfigDirWrapper.h:25
-
LdConfigDirWrapper::CSD_VER
@ CSD_VER
Definition LdConfigDirWrapper.h:32
-
LdConfigDirWrapper::SIZE
@ SIZE
Definition LdConfigDirWrapper.h:18
-
LdConfigDirWrapper::EDIT_LIST
@ EDIT_LIST
Definition LdConfigDirWrapper.h:34
-
LdConfigDirWrapper::DYNAMIC_VAL_RELOC_TABLE_SECTION
@ DYNAMIC_VAL_RELOC_TABLE_SECTION
Definition LdConfigDirWrapper.h:58
-
LdConfigDirWrapper::HOT_PATCH_TABLE_OFFSET
@ HOT_PATCH_TABLE_OFFSET
Definition LdConfigDirWrapper.h:61
-
LdConfigDirWrapper::CODE_INTEGRITY_CATALOG
@ CODE_INTEGRITY_CATALOG
Definition LdConfigDirWrapper.h:46
-
LdConfigDirWrapper::GUARD_LONG_JUMP_TABLE
@ GUARD_LONG_JUMP_TABLE
Definition LdConfigDirWrapper.h:51
-
LdConfigDirWrapper::GUARD_EH_CONT_COUNT
@ GUARD_EH_CONT_COUNT
Definition LdConfigDirWrapper.h:66
-
LdConfigDirWrapper::TIMEST
@ TIMEST
Definition LdConfigDirWrapper.h:19
-
LdConfigDirWrapper::MINOR_VER
@ MINOR_VER
Definition LdConfigDirWrapper.h:21
-
LdConfigDirWrapper::DYNAMIC_VAL_RELOC_TABLE_OFFSET
@ DYNAMIC_VAL_RELOC_TABLE_OFFSET
Definition LdConfigDirWrapper.h:57
-
LdConfigDirWrapper::GUARD_TABLE
@ GUARD_TABLE
Definition LdConfigDirWrapper.h:41
-
LdConfigDirWrapper::GUARD_FLAGS
@ GUARD_FLAGS
Definition LdConfigDirWrapper.h:43
-
LdConfigDirWrapper::GUARD_ADDR_IAT_ENTRY_TABLE
@ GUARD_ADDR_IAT_ENTRY_TABLE
Definition LdConfigDirWrapper.h:49
-
LdConfigDirWrapper::RESERVED2
@ RESERVED2
Definition LdConfigDirWrapper.h:59
-
LdConfigDirWrapper::CODE_INTEGRITY_RESERVED
@ CODE_INTEGRITY_RESERVED
Definition LdConfigDirWrapper.h:48
-
LdConfigDirWrapper::GUARD_FAILURE_ROUTINE
@ GUARD_FAILURE_ROUTINE
Definition LdConfigDirWrapper.h:55
-
LdConfigDirWrapper::SEH_TABLE
@ SEH_TABLE
Definition LdConfigDirWrapper.h:36
-
LdConfigDirWrapper::GLOBAL_FLAGS_SET
@ GLOBAL_FLAGS_SET
Definition LdConfigDirWrapper.h:23
-
LdConfigDirWrapper::GUARD_VERIFY_STACK_PTR
@ GUARD_VERIFY_STACK_PTR
Definition LdConfigDirWrapper.h:60
-
LdConfigDirWrapper::GUARD_ADDR_IAT_ENTRY_COUNT
@ GUARD_ADDR_IAT_ENTRY_COUNT
Definition LdConfigDirWrapper.h:50
-
LdConfigDirWrapper::RESERVED3
@ RESERVED3
Definition LdConfigDirWrapper.h:62
-
LdConfigDirWrapper::FIELD_COUNTER_W81
@ FIELD_COUNTER_W81
Definition LdConfigDirWrapper.h:44
-
LdConfigDirWrapper::FIELD_COUNTER_OLD
@ FIELD_COUNTER_OLD
Definition LdConfigDirWrapper.h:38
-
LdConfigDirWrapper::SEC_COOKIE
@ SEC_COOKIE
Definition LdConfigDirWrapper.h:35
-
LdConfigDirWrapper::GUARD_COUNT
@ GUARD_COUNT
Definition LdConfigDirWrapper.h:42
-
LdConfigDirWrapper::PROC_AFF_MASK32
@ PROC_AFF_MASK32
Definition LdConfigDirWrapper.h:31
-
LdConfigDirWrapper::GUARD_FAILURE_ROUTINE_FUNC_PTR
@ GUARD_FAILURE_ROUTINE_FUNC_PTR
Definition LdConfigDirWrapper.h:56
-
LdConfigDirWrapper::VOLATILE_METADATA_PTR
@ VOLATILE_METADATA_PTR
Definition LdConfigDirWrapper.h:64
-
LdConfigDirWrapper::DYNAMIC_VAL_RELOC
@ DYNAMIC_VAL_RELOC
Definition LdConfigDirWrapper.h:53
-
LdConfigDirWrapper::VIRTUAL_MEM
@ VIRTUAL_MEM
Definition LdConfigDirWrapper.h:29
-
LdConfigDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition LdConfigDirWrapper.h:20
-
LdConfigDirWrapper::CODE_INTEGRITY_CATALOG_OFFSET
@ CODE_INTEGRITY_CATALOG_OFFSET
Definition LdConfigDirWrapper.h:47
-
LdConfigEntryWrapper
Definition LdConfigDirWrapper.h:195
-
LdConfigEntryWrapper::getName
virtual QString getName()
Definition LdConfigDirWrapper.h:216
+
LdConfigDirWrapper::LdConfigDirWrapper
LdConfigDirWrapper(PEFile *pe)
Definition LdConfigDirWrapper.h:73
+
LdConfigDirWrapper::LdConfigDirFID
LdConfigDirFID
Definition LdConfigDirWrapper.h:16
+
LdConfigDirWrapper::CHPE_METADATA_PTR
@ CHPE_METADATA_PTR
Definition LdConfigDirWrapper.h:54
+
LdConfigDirWrapper::GUARD_EH_CONT_TABLE
@ GUARD_EH_CONT_TABLE
Definition LdConfigDirWrapper.h:65
+
LdConfigDirWrapper::GUARD_CHECK
@ GUARD_CHECK
Definition LdConfigDirWrapper.h:39
+
LdConfigDirWrapper::PROC_HEAP_FLAGS32
@ PROC_HEAP_FLAGS32
Definition LdConfigDirWrapper.h:30
+
LdConfigDirWrapper::LOCK_PREFIX
@ LOCK_PREFIX
Definition LdConfigDirWrapper.h:27
+
LdConfigDirWrapper::GUARD_DISPATCH
@ GUARD_DISPATCH
Definition LdConfigDirWrapper.h:40
+
LdConfigDirWrapper::DEPENDENT_LOAD_FLAGS
@ DEPENDENT_LOAD_FLAGS
Definition LdConfigDirWrapper.h:33
+
LdConfigDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition LdConfigDirWrapper.h:67
+
LdConfigDirWrapper::GUARD_LONG_JUMP_COUNT
@ GUARD_LONG_JUMP_COUNT
Definition LdConfigDirWrapper.h:52
+
LdConfigDirWrapper::SEH_COUNT
@ SEH_COUNT
Definition LdConfigDirWrapper.h:37
+
LdConfigDirWrapper::CODE_INTEGRITY_FLAGS
@ CODE_INTEGRITY_FLAGS
Definition LdConfigDirWrapper.h:45
+
LdConfigDirWrapper::GLOBAL_FLAGS_CLEAR
@ GLOBAL_FLAGS_CLEAR
Definition LdConfigDirWrapper.h:22
+
LdConfigDirWrapper::CRITICAT_SEC_TIMEOUT
@ CRITICAT_SEC_TIMEOUT
Definition LdConfigDirWrapper.h:24
+
LdConfigDirWrapper::NONE
@ NONE
Definition LdConfigDirWrapper.h:17
+
LdConfigDirWrapper::ENCLAVE_CONFIG_PTR
@ ENCLAVE_CONFIG_PTR
Definition LdConfigDirWrapper.h:63
+
LdConfigDirWrapper::MAX_ALLOC
@ MAX_ALLOC
Definition LdConfigDirWrapper.h:28
+
LdConfigDirWrapper::DECOMMIT_TOTAL
@ DECOMMIT_TOTAL
Definition LdConfigDirWrapper.h:26
+
LdConfigDirWrapper::DECOMMIT_FREE
@ DECOMMIT_FREE
Definition LdConfigDirWrapper.h:25
+
LdConfigDirWrapper::CSD_VER
@ CSD_VER
Definition LdConfigDirWrapper.h:32
+
LdConfigDirWrapper::SIZE
@ SIZE
Definition LdConfigDirWrapper.h:18
+
LdConfigDirWrapper::EDIT_LIST
@ EDIT_LIST
Definition LdConfigDirWrapper.h:34
+
LdConfigDirWrapper::DYNAMIC_VAL_RELOC_TABLE_SECTION
@ DYNAMIC_VAL_RELOC_TABLE_SECTION
Definition LdConfigDirWrapper.h:58
+
LdConfigDirWrapper::HOT_PATCH_TABLE_OFFSET
@ HOT_PATCH_TABLE_OFFSET
Definition LdConfigDirWrapper.h:61
+
LdConfigDirWrapper::CODE_INTEGRITY_CATALOG
@ CODE_INTEGRITY_CATALOG
Definition LdConfigDirWrapper.h:46
+
LdConfigDirWrapper::GUARD_LONG_JUMP_TABLE
@ GUARD_LONG_JUMP_TABLE
Definition LdConfigDirWrapper.h:51
+
LdConfigDirWrapper::GUARD_EH_CONT_COUNT
@ GUARD_EH_CONT_COUNT
Definition LdConfigDirWrapper.h:66
+
LdConfigDirWrapper::TIMEST
@ TIMEST
Definition LdConfigDirWrapper.h:19
+
LdConfigDirWrapper::MINOR_VER
@ MINOR_VER
Definition LdConfigDirWrapper.h:21
+
LdConfigDirWrapper::DYNAMIC_VAL_RELOC_TABLE_OFFSET
@ DYNAMIC_VAL_RELOC_TABLE_OFFSET
Definition LdConfigDirWrapper.h:57
+
LdConfigDirWrapper::GUARD_TABLE
@ GUARD_TABLE
Definition LdConfigDirWrapper.h:41
+
LdConfigDirWrapper::GUARD_FLAGS
@ GUARD_FLAGS
Definition LdConfigDirWrapper.h:43
+
LdConfigDirWrapper::GUARD_ADDR_IAT_ENTRY_TABLE
@ GUARD_ADDR_IAT_ENTRY_TABLE
Definition LdConfigDirWrapper.h:49
+
LdConfigDirWrapper::RESERVED2
@ RESERVED2
Definition LdConfigDirWrapper.h:59
+
LdConfigDirWrapper::CODE_INTEGRITY_RESERVED
@ CODE_INTEGRITY_RESERVED
Definition LdConfigDirWrapper.h:48
+
LdConfigDirWrapper::GUARD_FAILURE_ROUTINE
@ GUARD_FAILURE_ROUTINE
Definition LdConfigDirWrapper.h:55
+
LdConfigDirWrapper::SEH_TABLE
@ SEH_TABLE
Definition LdConfigDirWrapper.h:36
+
LdConfigDirWrapper::GLOBAL_FLAGS_SET
@ GLOBAL_FLAGS_SET
Definition LdConfigDirWrapper.h:23
+
LdConfigDirWrapper::GUARD_VERIFY_STACK_PTR
@ GUARD_VERIFY_STACK_PTR
Definition LdConfigDirWrapper.h:60
+
LdConfigDirWrapper::GUARD_ADDR_IAT_ENTRY_COUNT
@ GUARD_ADDR_IAT_ENTRY_COUNT
Definition LdConfigDirWrapper.h:50
+
LdConfigDirWrapper::RESERVED3
@ RESERVED3
Definition LdConfigDirWrapper.h:62
+
LdConfigDirWrapper::FIELD_COUNTER_W81
@ FIELD_COUNTER_W81
Definition LdConfigDirWrapper.h:44
+
LdConfigDirWrapper::FIELD_COUNTER_OLD
@ FIELD_COUNTER_OLD
Definition LdConfigDirWrapper.h:38
+
LdConfigDirWrapper::SEC_COOKIE
@ SEC_COOKIE
Definition LdConfigDirWrapper.h:35
+
LdConfigDirWrapper::GUARD_COUNT
@ GUARD_COUNT
Definition LdConfigDirWrapper.h:42
+
LdConfigDirWrapper::PROC_AFF_MASK32
@ PROC_AFF_MASK32
Definition LdConfigDirWrapper.h:31
+
LdConfigDirWrapper::GUARD_FAILURE_ROUTINE_FUNC_PTR
@ GUARD_FAILURE_ROUTINE_FUNC_PTR
Definition LdConfigDirWrapper.h:56
+
LdConfigDirWrapper::VOLATILE_METADATA_PTR
@ VOLATILE_METADATA_PTR
Definition LdConfigDirWrapper.h:64
+
LdConfigDirWrapper::DYNAMIC_VAL_RELOC
@ DYNAMIC_VAL_RELOC
Definition LdConfigDirWrapper.h:53
+
LdConfigDirWrapper::VIRTUAL_MEM
@ VIRTUAL_MEM
Definition LdConfigDirWrapper.h:29
+
LdConfigDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition LdConfigDirWrapper.h:20
+
LdConfigDirWrapper::CODE_INTEGRITY_CATALOG_OFFSET
@ CODE_INTEGRITY_CATALOG_OFFSET
Definition LdConfigDirWrapper.h:47
+
LdConfigEntryWrapper
Definition LdConfigDirWrapper.h:195
+
LdConfigEntryWrapper::getName
virtual QString getName()
Definition LdConfigDirWrapper.h:216
LdConfigEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition LdConfigDirWrapper.cpp:530
-
LdConfigEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.h:240
-
LdConfigEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition LdConfigDirWrapper.h:232
+
LdConfigEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.h:240
+
LdConfigEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition LdConfigDirWrapper.h:232
LdConfigEntryWrapper::getSize
virtual bufsize_t getSize()
Definition LdConfigDirWrapper.cpp:522
-
LdConfigEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition LdConfigDirWrapper.h:218
+
LdConfigEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition LdConfigDirWrapper.h:218
LdConfigEntryWrapper::getFieldSize
bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition LdConfigDirWrapper.cpp:546
-
LdConfigEntryWrapper::FieldID
FieldID
Definition LdConfigDirWrapper.h:198
-
LdConfigEntryWrapper::HANDLER_ADDR
@ HANDLER_ADDR
Definition LdConfigDirWrapper.h:200
-
LdConfigEntryWrapper::METADATA
@ METADATA
Definition LdConfigDirWrapper.h:201
-
LdConfigEntryWrapper::NONE
@ NONE
Definition LdConfigDirWrapper.h:199
-
LdConfigEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition LdConfigDirWrapper.h:202
+
LdConfigEntryWrapper::FieldID
FieldID
Definition LdConfigDirWrapper.h:198
+
LdConfigEntryWrapper::HANDLER_ADDR
@ HANDLER_ADDR
Definition LdConfigDirWrapper.h:200
+
LdConfigEntryWrapper::METADATA
@ METADATA
Definition LdConfigDirWrapper.h:201
+
LdConfigEntryWrapper::NONE
@ NONE
Definition LdConfigDirWrapper.h:199
+
LdConfigEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition LdConfigDirWrapper.h:202
LdConfigEntryWrapper::getPtr
virtual void * getPtr()
Definition LdConfigDirWrapper.cpp:503
-
LdConfigEntryWrapper::LdConfigEntryWrapper
LdConfigEntryWrapper(Executable *pe, LdConfigDirWrapper *_parentDir, size_t entryNumber, size_t _parentFieldId)
Definition LdConfigDirWrapper.h:205
+
LdConfigEntryWrapper::LdConfigEntryWrapper
LdConfigEntryWrapper(Executable *pe, LdConfigDirWrapper *_parentDir, size_t entryNumber, size_t _parentFieldId)
Definition LdConfigDirWrapper.h:205
PEFile
Definition PEFile.h:41
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_mapped_exe_8cpp.html b/_mapped_exe_8cpp.html index e17a0918..6688b928 100644 --- a/_mapped_exe_8cpp.html +++ b/_mapped_exe_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/MappedExe.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_mapped_exe_8cpp_source.html b/_mapped_exe_8cpp_source.html index 6f5742e6..ae99151e 100644 --- a/_mapped_exe_8cpp_source.html +++ b/_mapped_exe_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/MappedExe.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -116,13 +118,13 @@ $(document).ready(function() { init_codefold(0); });
ExeElementWrapper
Definition ExeElementWrapper.h:12
ExeElementWrapper::getName
virtual QString getName()=0
ExeWrappersContainer::wrappers
std::map< size_t, ExeElementWrapper * > wrappers
Definition MappedExe.h:27
-
ExeWrappersContainer::getWrapperName
QString getWrapperName(size_t id)
Definition MappedExe.cpp:19
-
ExeWrappersContainer::clearWrappers
void clearWrappers()
Definition MappedExe.cpp:3
-
ExeWrappersContainer::getWrapper
virtual ExeElementWrapper * getWrapper(size_t wrapperId)
Definition MappedExe.cpp:13
+
ExeWrappersContainer::getWrapperName
QString getWrapperName(size_t id)
Definition MappedExe.cpp:19
+
ExeWrappersContainer::clearWrappers
void clearWrappers()
Definition MappedExe.cpp:3
+
ExeWrappersContainer::getWrapper
virtual ExeElementWrapper * getWrapper(size_t wrapperId)
Definition MappedExe.cpp:13
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_mapped_exe_8h.html b/_mapped_exe_8h.html index e654ff04..e2c70021 100644 --- a/_mapped_exe_8h.html +++ b/_mapped_exe_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/MappedExe.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_mapped_exe_8h_source.html b/_mapped_exe_8h_source.html index 3f331bd2..5450e8c4 100644 --- a/_mapped_exe_8h_source.html +++ b/_mapped_exe_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/MappedExe.h Source File + + @@ -30,7 +32,7 @@ - + @@ -158,33 +160,33 @@ $(document).ready(function() { init_codefold(0); });
Executable.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
ExeElementWrapper
Definition ExeElementWrapper.h:12
-
ExeWrappersContainer
Definition MappedExe.h:8
-
ExeWrappersContainer::ExeWrappersContainer
ExeWrappersContainer()
Definition MappedExe.h:15
-
ExeWrappersContainer::wrappers
std::map< size_t, ExeElementWrapper * > wrappers
Definition MappedExe.h:27
-
ExeWrappersContainer::~ExeWrappersContainer
virtual ~ExeWrappersContainer(void)
Definition MappedExe.h:16
-
ExeWrappersContainer::wrappersCount
size_t wrappersCount()
Definition MappedExe.h:20
+
ExeWrappersContainer
Definition MappedExe.h:8
+
ExeWrappersContainer::ExeWrappersContainer
ExeWrappersContainer()
Definition MappedExe.h:15
+
ExeWrappersContainer::wrappers
std::map< size_t, ExeElementWrapper * > wrappers
Definition MappedExe.h:27
+
ExeWrappersContainer::~ExeWrappersContainer
virtual ~ExeWrappersContainer(void)
Definition MappedExe.h:16
+
ExeWrappersContainer::wrappersCount
size_t wrappersCount()
Definition MappedExe.h:20
ExeWrappersContainer::getWrapperName
QString getWrapperName(size_t id)
Definition MappedExe.cpp:19
ExeWrappersContainer::clearWrappers
void clearWrappers()
Definition MappedExe.cpp:3
ExeWrappersContainer::wrap
virtual void wrap(AbstractByteBuffer *v_buf)=0
ExeWrappersContainer::getWrapper
virtual ExeElementWrapper * getWrapper(size_t wrapperId)
Definition MappedExe.cpp:13
-
ExeWrappersContainer::WRAPPERS
WRAPPERS
Definition MappedExe.h:10
-
ExeWrappersContainer::WR_NONE
@ WR_NONE
Definition MappedExe.h:11
-
ExeWrappersContainer::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition MappedExe.h:12
+
ExeWrappersContainer::WRAPPERS
WRAPPERS
Definition MappedExe.h:10
+
ExeWrappersContainer::WR_NONE
@ WR_NONE
Definition MappedExe.h:11
+
ExeWrappersContainer::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition MappedExe.h:12
Executable
Definition Executable.h:26
Executable::buf
AbstractByteBuffer * buf
Definition Executable.h:125
Executable::exe_bits
exe_bits
Definition Executable.h:28
Executable::resize
virtual bool resize(bufsize_t newSize)
Definition Executable.h:109
-
MappedExe
Definition MappedExe.h:30
-
MappedExe::canResize
virtual bool canResize(bufsize_t newSize)
Definition MappedExe.h:34
-
MappedExe::MappedExe
MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode)
Definition MappedExe.h:52
-
MappedExe::resize
virtual bool resize(bufsize_t newSize)
Definition MappedExe.h:40
-
MappedExe::~MappedExe
virtual ~MappedExe(void)
Definition MappedExe.h:55
-
MappedExe::wrap
virtual void wrap()
Definition MappedExe.h:32
+
MappedExe
Definition MappedExe.h:30
+
MappedExe::canResize
virtual bool canResize(bufsize_t newSize)
Definition MappedExe.h:34
+
MappedExe::MappedExe
MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode)
Definition MappedExe.h:52
+
MappedExe::resize
virtual bool resize(bufsize_t newSize)
Definition MappedExe.h:40
+
MappedExe::~MappedExe
virtual ~MappedExe(void)
Definition MappedExe.h:55
+
MappedExe::wrap
virtual void wrap()
Definition MappedExe.h:32
MappedExe::wrap
virtual void wrap(AbstractByteBuffer *v_buf)=0
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_opt_hdr_wrapper_8cpp.html b/_opt_hdr_wrapper_8cpp.html index e3663cad..382ce57e 100644 --- a/_opt_hdr_wrapper_8cpp.html +++ b/_opt_hdr_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/OptHdrWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_opt_hdr_wrapper_8cpp_source.html b/_opt_hdr_wrapper_8cpp_source.html index a5422406..b520cde0 100644 --- a/_opt_hdr_wrapper_8cpp_source.html +++ b/_opt_hdr_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/OptHdrWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -477,13 +479,13 @@ $(document).ready(function() { init_codefold(0); });
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
Executable::BITS_64
@ BITS_64
Definition Executable.h:32
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
-
OptHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:331
-
OptHdrWrapper::translateOptMagic
static QString translateOptMagic(DWORD magic)
Definition OptHdrWrapper.cpp:50
-
OptHdrWrapper::nt64
IMAGE_NT_HEADERS64 * nt64()
Definition OptHdrWrapper.cpp:138
-
OptHdrWrapper::translateSubsystem
static QString translateSubsystem(DWORD subsystem)
Definition OptHdrWrapper.cpp:84
-
OptHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition OptHdrWrapper.cpp:264
-
OptHdrWrapper::initDllCharact
static void initDllCharact()
Definition OptHdrWrapper.cpp:11
-
OptHdrWrapper::getHdrBitMode
Executable::exe_bits getHdrBitMode()
Definition OptHdrWrapper.cpp:120
+
OptHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:331
+
OptHdrWrapper::translateOptMagic
static QString translateOptMagic(DWORD magic)
Definition OptHdrWrapper.cpp:50
+
OptHdrWrapper::nt64
IMAGE_NT_HEADERS64 * nt64()
Definition OptHdrWrapper.cpp:138
+
OptHdrWrapper::translateSubsystem
static QString translateSubsystem(DWORD subsystem)
Definition OptHdrWrapper.cpp:84
+
OptHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition OptHdrWrapper.cpp:264
+
OptHdrWrapper::initDllCharact
static void initDllCharact()
Definition OptHdrWrapper.cpp:11
+
OptHdrWrapper::getHdrBitMode
Executable::exe_bits getHdrBitMode()
Definition OptHdrWrapper.cpp:120
OptHdrWrapper::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition OptHdrWrapper.h:84
OptHdrWrapper::s_optMagic
static std::map< DWORD, QString > s_optMagic
Definition OptHdrWrapper.h:45
OptHdrWrapper::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition OptHdrWrapper.h:83
@@ -518,18 +520,18 @@ $(document).ready(function() { init_codefold(0); });
OptHdrWrapper::LINKER_MINOR
@ LINKER_MINOR
Definition OptHdrWrapper.h:13
OptHdrWrapper::HEAP_RSRV_SIZE
@ HEAP_RSRV_SIZE
Definition OptHdrWrapper.h:38
OptHdrWrapper::SEC_ALIGN
@ SEC_ALIGN
Definition OptHdrWrapper.h:22
-
OptHdrWrapper::translateDllCharacteristics
static QString translateDllCharacteristics(DWORD charact)
Definition OptHdrWrapper.cpp:28
-
OptHdrWrapper::translateOSVersion
static QString translateOSVersion(WORD major, WORD minor)
Definition OptHdrWrapper.cpp:61
+
OptHdrWrapper::translateDllCharacteristics
static QString translateDllCharacteristics(DWORD charact)
Definition OptHdrWrapper.cpp:28
+
OptHdrWrapper::translateOSVersion
static QString translateOSVersion(WORD major, WORD minor)
Definition OptHdrWrapper.cpp:61
OptHdrWrapper::dllCharact
std::vector< DWORD > dllCharact
Definition OptHdrWrapper.h:85
-
OptHdrWrapper::wrap
bool wrap()
Definition OptHdrWrapper.cpp:106
-
OptHdrWrapper::nt32
IMAGE_NT_HEADERS32 * nt32()
Definition OptHdrWrapper.cpp:128
-
OptHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:174
-
OptHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition OptHdrWrapper.cpp:282
-
OptHdrWrapper::getPtr
virtual void * getPtr()
Definition OptHdrWrapper.cpp:149
-
OptHdrWrapper::getSize
virtual bufsize_t getSize()
Definition OptHdrWrapper.cpp:164
+
OptHdrWrapper::wrap
bool wrap()
Definition OptHdrWrapper.cpp:106
+
OptHdrWrapper::nt32
IMAGE_NT_HEADERS32 * nt32()
Definition OptHdrWrapper.cpp:128
+
OptHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:174
+
OptHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition OptHdrWrapper.cpp:282
+
OptHdrWrapper::getPtr
virtual void * getPtr()
Definition OptHdrWrapper.cpp:149
+
OptHdrWrapper::getSize
virtual bufsize_t getSize()
Definition OptHdrWrapper.cpp:164
OptHdrWrapper::s_dllCharact
static std::map< DWORD, QString > s_dllCharact
Definition OptHdrWrapper.h:47
-
OptHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:184
-
OptHdrWrapper::splitDllCharact
static std::vector< DWORD > splitDllCharact(DWORD characteristics)
Definition OptHdrWrapper.cpp:36
+
OptHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:184
+
OptHdrWrapper::splitDllCharact
static std::vector< DWORD > splitDllCharact(DWORD characteristics)
Definition OptHdrWrapper.cpp:36
OptHdrWrapper::s_osVersion
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
Definition OptHdrWrapper.h:46
OptHdrWrapper::s_subsystem
static std::map< DWORD, QString > s_subsystem
Definition OptHdrWrapper.h:48
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
@@ -538,7 +540,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_opt_hdr_wrapper_8h.html b/_opt_hdr_wrapper_8h.html index b3f569dc..791a2f57 100644 --- a/_opt_hdr_wrapper_8h.html +++ b/_opt_hdr_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/OptHdrWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_opt_hdr_wrapper_8h_source.html b/_opt_hdr_wrapper_8h_source.html index 10d5e256..5e98f972 100644 --- a/_opt_hdr_wrapper_8h_source.html +++ b/_opt_hdr_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/OptHdrWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -179,7 +181,7 @@ $(document).ready(function() { init_codefold(0); });
PENodeWrapper.h
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::exe_bits
exe_bits
Definition Executable.h:28
-
OptHdrWrapper
Definition OptHdrWrapper.h:6
+
OptHdrWrapper
Definition OptHdrWrapper.h:6
OptHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:331
OptHdrWrapper::translateOptMagic
static QString translateOptMagic(DWORD magic)
Definition OptHdrWrapper.cpp:50
OptHdrWrapper::nt64
IMAGE_NT_HEADERS64 * nt64()
Definition OptHdrWrapper.cpp:138
@@ -187,66 +189,66 @@ $(document).ready(function() { init_codefold(0); });
OptHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition OptHdrWrapper.cpp:264
OptHdrWrapper::initDllCharact
static void initDllCharact()
Definition OptHdrWrapper.cpp:11
OptHdrWrapper::getHdrBitMode
Executable::exe_bits getHdrBitMode()
Definition OptHdrWrapper.cpp:120
-
OptHdrWrapper::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition OptHdrWrapper.h:84
-
OptHdrWrapper::s_optMagic
static std::map< DWORD, QString > s_optMagic
Definition OptHdrWrapper.h:45
-
OptHdrWrapper::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition OptHdrWrapper.h:83
-
OptHdrWrapper::OptHdrFID
OptHdrFID
Definition OptHdrWrapper.h:9
-
OptHdrWrapper::IMGVER_MAJOR
@ IMGVER_MAJOR
Definition OptHdrWrapper.h:26
-
OptHdrWrapper::WIN32_VER
@ WIN32_VER
Definition OptHdrWrapper.h:30
-
OptHdrWrapper::OSVER_MAJOR
@ OSVER_MAJOR
Definition OptHdrWrapper.h:24
-
OptHdrWrapper::UNINITDATA_SIZE
@ UNINITDATA_SIZE
Definition OptHdrWrapper.h:16
-
OptHdrWrapper::LINKER_MAJOR
@ LINKER_MAJOR
Definition OptHdrWrapper.h:12
-
OptHdrWrapper::STACK_RSRV_SIZE
@ STACK_RSRV_SIZE
Definition OptHdrWrapper.h:36
-
OptHdrWrapper::SUBSYS
@ SUBSYS
Definition OptHdrWrapper.h:34
-
OptHdrWrapper::IMAGE_BASE
@ IMAGE_BASE
Definition OptHdrWrapper.h:21
-
OptHdrWrapper::FILE_ALIGN
@ FILE_ALIGN
Definition OptHdrWrapper.h:23
-
OptHdrWrapper::CHECKSUM
@ CHECKSUM
Definition OptHdrWrapper.h:33
-
OptHdrWrapper::EP
@ EP
Definition OptHdrWrapper.h:17
-
OptHdrWrapper::SUBSYSVER_MAJOR
@ SUBSYSVER_MAJOR
Definition OptHdrWrapper.h:28
-
OptHdrWrapper::HEAP_COMMIT_SIZE
@ HEAP_COMMIT_SIZE
Definition OptHdrWrapper.h:39
-
OptHdrWrapper::DLL_CHARACT
@ DLL_CHARACT
Definition OptHdrWrapper.h:35
-
OptHdrWrapper::OSVER_MINOR
@ OSVER_MINOR
Definition OptHdrWrapper.h:25
-
OptHdrWrapper::IMGVER_MINOR
@ IMGVER_MINOR
Definition OptHdrWrapper.h:27
-
OptHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition OptHdrWrapper.h:43
-
OptHdrWrapper::LDR_FLAGS
@ LDR_FLAGS
Definition OptHdrWrapper.h:40
-
OptHdrWrapper::DATA_DIR
@ DATA_DIR
Definition OptHdrWrapper.h:42
-
OptHdrWrapper::HDRS_SIZE
@ HDRS_SIZE
Definition OptHdrWrapper.h:32
-
OptHdrWrapper::DATA_BASE
@ DATA_BASE
Definition OptHdrWrapper.h:19
-
OptHdrWrapper::NONE
@ NONE
Definition OptHdrWrapper.h:10
-
OptHdrWrapper::STACK_COMMIT_SIZE
@ STACK_COMMIT_SIZE
Definition OptHdrWrapper.h:37
-
OptHdrWrapper::MAGIC
@ MAGIC
Definition OptHdrWrapper.h:11
-
OptHdrWrapper::SUBSYSVER_MINOR
@ SUBSYSVER_MINOR
Definition OptHdrWrapper.h:29
-
OptHdrWrapper::IMAGE_SIZE
@ IMAGE_SIZE
Definition OptHdrWrapper.h:31
-
OptHdrWrapper::CODE_BASE
@ CODE_BASE
Definition OptHdrWrapper.h:18
-
OptHdrWrapper::INITDATA_SIZE
@ INITDATA_SIZE
Definition OptHdrWrapper.h:15
-
OptHdrWrapper::CODE_SIZE
@ CODE_SIZE
Definition OptHdrWrapper.h:14
-
OptHdrWrapper::RVAS_SIZES_NUM
@ RVAS_SIZES_NUM
Definition OptHdrWrapper.h:41
-
OptHdrWrapper::LINKER_MINOR
@ LINKER_MINOR
Definition OptHdrWrapper.h:13
-
OptHdrWrapper::HEAP_RSRV_SIZE
@ HEAP_RSRV_SIZE
Definition OptHdrWrapper.h:38
-
OptHdrWrapper::SEC_ALIGN
@ SEC_ALIGN
Definition OptHdrWrapper.h:22
+
OptHdrWrapper::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition OptHdrWrapper.h:84
+
OptHdrWrapper::s_optMagic
static std::map< DWORD, QString > s_optMagic
Definition OptHdrWrapper.h:45
+
OptHdrWrapper::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition OptHdrWrapper.h:83
+
OptHdrWrapper::OptHdrFID
OptHdrFID
Definition OptHdrWrapper.h:9
+
OptHdrWrapper::IMGVER_MAJOR
@ IMGVER_MAJOR
Definition OptHdrWrapper.h:26
+
OptHdrWrapper::WIN32_VER
@ WIN32_VER
Definition OptHdrWrapper.h:30
+
OptHdrWrapper::OSVER_MAJOR
@ OSVER_MAJOR
Definition OptHdrWrapper.h:24
+
OptHdrWrapper::UNINITDATA_SIZE
@ UNINITDATA_SIZE
Definition OptHdrWrapper.h:16
+
OptHdrWrapper::LINKER_MAJOR
@ LINKER_MAJOR
Definition OptHdrWrapper.h:12
+
OptHdrWrapper::STACK_RSRV_SIZE
@ STACK_RSRV_SIZE
Definition OptHdrWrapper.h:36
+
OptHdrWrapper::SUBSYS
@ SUBSYS
Definition OptHdrWrapper.h:34
+
OptHdrWrapper::IMAGE_BASE
@ IMAGE_BASE
Definition OptHdrWrapper.h:21
+
OptHdrWrapper::FILE_ALIGN
@ FILE_ALIGN
Definition OptHdrWrapper.h:23
+
OptHdrWrapper::CHECKSUM
@ CHECKSUM
Definition OptHdrWrapper.h:33
+
OptHdrWrapper::EP
@ EP
Definition OptHdrWrapper.h:17
+
OptHdrWrapper::SUBSYSVER_MAJOR
@ SUBSYSVER_MAJOR
Definition OptHdrWrapper.h:28
+
OptHdrWrapper::HEAP_COMMIT_SIZE
@ HEAP_COMMIT_SIZE
Definition OptHdrWrapper.h:39
+
OptHdrWrapper::DLL_CHARACT
@ DLL_CHARACT
Definition OptHdrWrapper.h:35
+
OptHdrWrapper::OSVER_MINOR
@ OSVER_MINOR
Definition OptHdrWrapper.h:25
+
OptHdrWrapper::IMGVER_MINOR
@ IMGVER_MINOR
Definition OptHdrWrapper.h:27
+
OptHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition OptHdrWrapper.h:43
+
OptHdrWrapper::LDR_FLAGS
@ LDR_FLAGS
Definition OptHdrWrapper.h:40
+
OptHdrWrapper::DATA_DIR
@ DATA_DIR
Definition OptHdrWrapper.h:42
+
OptHdrWrapper::HDRS_SIZE
@ HDRS_SIZE
Definition OptHdrWrapper.h:32
+
OptHdrWrapper::DATA_BASE
@ DATA_BASE
Definition OptHdrWrapper.h:19
+
OptHdrWrapper::NONE
@ NONE
Definition OptHdrWrapper.h:10
+
OptHdrWrapper::STACK_COMMIT_SIZE
@ STACK_COMMIT_SIZE
Definition OptHdrWrapper.h:37
+
OptHdrWrapper::MAGIC
@ MAGIC
Definition OptHdrWrapper.h:11
+
OptHdrWrapper::SUBSYSVER_MINOR
@ SUBSYSVER_MINOR
Definition OptHdrWrapper.h:29
+
OptHdrWrapper::IMAGE_SIZE
@ IMAGE_SIZE
Definition OptHdrWrapper.h:31
+
OptHdrWrapper::CODE_BASE
@ CODE_BASE
Definition OptHdrWrapper.h:18
+
OptHdrWrapper::INITDATA_SIZE
@ INITDATA_SIZE
Definition OptHdrWrapper.h:15
+
OptHdrWrapper::CODE_SIZE
@ CODE_SIZE
Definition OptHdrWrapper.h:14
+
OptHdrWrapper::RVAS_SIZES_NUM
@ RVAS_SIZES_NUM
Definition OptHdrWrapper.h:41
+
OptHdrWrapper::LINKER_MINOR
@ LINKER_MINOR
Definition OptHdrWrapper.h:13
+
OptHdrWrapper::HEAP_RSRV_SIZE
@ HEAP_RSRV_SIZE
Definition OptHdrWrapper.h:38
+
OptHdrWrapper::SEC_ALIGN
@ SEC_ALIGN
Definition OptHdrWrapper.h:22
OptHdrWrapper::translateDllCharacteristics
static QString translateDllCharacteristics(DWORD charact)
Definition OptHdrWrapper.cpp:28
OptHdrWrapper::translateOSVersion
static QString translateOSVersion(WORD major, WORD minor)
Definition OptHdrWrapper.cpp:61
-
OptHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition OptHdrWrapper.h:66
-
OptHdrWrapper::dllCharact
std::vector< DWORD > dllCharact
Definition OptHdrWrapper.h:85
-
OptHdrWrapper::OptHdrWrapper
OptHdrWrapper(PEFile *pe)
Definition OptHdrWrapper.h:59
+
OptHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition OptHdrWrapper.h:66
+
OptHdrWrapper::dllCharact
std::vector< DWORD > dllCharact
Definition OptHdrWrapper.h:85
+
OptHdrWrapper::OptHdrWrapper
OptHdrWrapper(PEFile *pe)
Definition OptHdrWrapper.h:59
OptHdrWrapper::wrap
bool wrap()
Definition OptHdrWrapper.cpp:106
OptHdrWrapper::nt32
IMAGE_NT_HEADERS32 * nt32()
Definition OptHdrWrapper.cpp:128
OptHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:174
OptHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition OptHdrWrapper.cpp:282
OptHdrWrapper::getPtr
virtual void * getPtr()
Definition OptHdrWrapper.cpp:149
OptHdrWrapper::getSize
virtual bufsize_t getSize()
Definition OptHdrWrapper.cpp:164
-
OptHdrWrapper::getName
virtual QString getName()
Definition OptHdrWrapper.h:65
-
OptHdrWrapper::s_dllCharact
static std::map< DWORD, QString > s_dllCharact
Definition OptHdrWrapper.h:47
+
OptHdrWrapper::getName
virtual QString getName()
Definition OptHdrWrapper.h:65
+
OptHdrWrapper::s_dllCharact
static std::map< DWORD, QString > s_dllCharact
Definition OptHdrWrapper.h:47
OptHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition OptHdrWrapper.cpp:184
OptHdrWrapper::splitDllCharact
static std::vector< DWORD > splitDllCharact(DWORD characteristics)
Definition OptHdrWrapper.cpp:36
-
OptHdrWrapper::s_osVersion
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
Definition OptHdrWrapper.h:46
-
OptHdrWrapper::s_subsystem
static std::map< DWORD, QString > s_subsystem
Definition OptHdrWrapper.h:48
+
OptHdrWrapper::s_osVersion
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
Definition OptHdrWrapper.h:46
+
OptHdrWrapper::s_subsystem
static std::map< DWORD, QString > s_subsystem
Definition OptHdrWrapper.h:48
PEElementWrapper
Definition PENodeWrapper.h:9
PEFile
Definition PEFile.h:41
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_core_8cpp.html b/_p_e_core_8cpp.html index 63667db0..39e11a13 100644 --- a/_p_e_core_8cpp.html +++ b/_p_e_core_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PECore.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() { - +

Macros

#define DEFAULT_IMGBASE   0x10000
#define DEFAULT_IMGBASE   0x10000
 

Macro Definition Documentation

@@ -108,7 +110,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_core_8cpp_source.html b/_p_e_core_8cpp_source.html index 58e04220..eb55536d 100644 --- a/_p_e_core_8cpp_source.html +++ b/_p_e_core_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PECore.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -275,7 +277,7 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
-
DEFAULT_IMGBASE
#define DEFAULT_IMGBASE
Definition PECore.cpp:3
+
DEFAULT_IMGBASE
#define DEFAULT_IMGBASE
Definition PECore.cpp:3
PECore.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
@@ -285,27 +287,27 @@ $(document).ready(function() { init_codefold(0); });
Executable::exe_bits
exe_bits
Definition Executable.h:28
Executable::BITS_32
@ BITS_32
Definition Executable.h:31
Executable::BITS_64
@ BITS_64
Definition Executable.h:32
-
PECore::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
-
PECore::hdrsSize
bufsize_t hdrsSize() const
Definition PECore.cpp:129
-
PECore::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PECore.cpp:74
+
PECore::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
+
PECore::hdrsSize
bufsize_t hdrsSize() const
Definition PECore.cpp:129
+
PECore::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PECore.cpp:74
PECore::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition PECore.h:56
-
PECore::wrap
bool wrap(AbstractByteBuffer *v_buf)
Definition PECore.cpp:13
-
PECore::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PECore.cpp:141
-
PECore::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PECore.cpp:64
+
PECore::wrap
bool wrap(AbstractByteBuffer *v_buf)
Definition PECore.cpp:13
+
PECore::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PECore.cpp:141
+
PECore::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PECore.cpp:64
PECore::buf
AbstractByteBuffer * buf
Definition PECore.h:52
-
PECore::reset
void reset()
Definition PECore.cpp:5
-
PECore::getImageSize
virtual bufsize_t getImageSize()
Definition PECore.cpp:117
-
PECore::peSignatureOffset
offset_t peSignatureOffset() const
Definition PECore.cpp:59
+
PECore::reset
void reset()
Definition PECore.cpp:5
+
PECore::getImageSize
virtual bufsize_t getImageSize()
Definition PECore.cpp:117
+
PECore::peSignatureOffset
offset_t peSignatureOffset() const
Definition PECore.cpp:59
PECore::fHdr
IMAGE_FILE_HEADER * fHdr
Definition PECore.h:55
-
PECore::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PECore.cpp:83
-
PECore::secHdrsOffset
offset_t secHdrsOffset() const
Definition PECore.cpp:91
+
PECore::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PECore.cpp:83
+
PECore::secHdrsOffset
offset_t secHdrsOffset() const
Definition PECore.cpp:91
PECore::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition PECore.h:57
-
PECore::getHdrBitMode
Executable::exe_bits getHdrBitMode() const
Definition PECore.cpp:51
+
PECore::getHdrBitMode
Executable::exe_bits getHdrBitMode() const
Definition PECore.cpp:51
PECore::dos
IMAGE_DOS_HEADER * dos
Definition PECore.h:54
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_core_8h.html b/_p_e_core_8h.html index e06e8fe4..2df44c63 100644 --- a/_p_e_core_8h.html +++ b/_p_e_core_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PECore.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_core_8h_source.html b/_p_e_core_8h_source.html index 6799bce4..c1c75c16 100644 --- a/_p_e_core_8h_source.html +++ b/_p_e_core_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PECore.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../Executable.h"
+
3#include "../Executable.h"
4#include "pe_formats.h"
5
6//class for internal use of PEFile
@@ -156,38 +158,39 @@ $(document).ready(function() { init_codefold(0); });
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
+
AbstractByteBuffer::getContentSize
virtual bufsize_t getContentSize()=0
-
PECore
Definition PECore.h:8
-
PECore::~PECore
virtual ~PECore()
Definition PECore.h:14
+
PECore
Definition PECore.h:8
+
PECore::~PECore
virtual ~PECore()
Definition PECore.h:14
PECore::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PECore.cpp:104
PECore::hdrsSize
bufsize_t hdrsSize() const
Definition PECore.cpp:129
PECore::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PECore.cpp:74
-
PECore::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition PECore.h:56
+
PECore::opt32
IMAGE_OPTIONAL_HEADER32 * opt32
Definition PECore.h:56
PECore::wrap
bool wrap(AbstractByteBuffer *v_buf)
Definition PECore.cpp:13
PECore::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PECore.cpp:141
PECore::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PECore.cpp:64
-
PECore::buf
AbstractByteBuffer * buf
Definition PECore.h:52
+
PECore::buf
AbstractByteBuffer * buf
Definition PECore.h:52
PECore::reset
void reset()
Definition PECore.cpp:5
PECore::getImageSize
virtual bufsize_t getImageSize()
Definition PECore.cpp:117
-
PECore::getFileHeader
IMAGE_FILE_HEADER * getFileHeader() const
Definition PECore.h:45
-
PECore::PECore
PECore()
Definition PECore.h:11
+
PECore::getFileHeader
IMAGE_FILE_HEADER * getFileHeader() const
Definition PECore.h:45
+
PECore::PECore
PECore()
Definition PECore.h:11
PECore::peSignatureOffset
offset_t peSignatureOffset() const
Definition PECore.cpp:59
-
PECore::fHdr
IMAGE_FILE_HEADER * fHdr
Definition PECore.h:55
+
PECore::fHdr
IMAGE_FILE_HEADER * fHdr
Definition PECore.h:55
PECore::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PECore.cpp:83
-
PECore::getRawSize
virtual offset_t getRawSize() const
Definition PECore.h:21
+
PECore::getRawSize
virtual offset_t getRawSize() const
Definition PECore.h:21
PECore::secHdrsOffset
offset_t secHdrsOffset() const
Definition PECore.cpp:91
-
PECore::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition PECore.h:57
+
PECore::opt64
IMAGE_OPTIONAL_HEADER64 * opt64
Definition PECore.h:57
PECore::getHdrBitMode
Executable::exe_bits getHdrBitMode() const
Definition PECore.cpp:51
-
PECore::setImageSize
void setImageSize(bufsize_t newSize)
Definition PECore.h:35
-
PECore::dos
IMAGE_DOS_HEADER * dos
Definition PECore.h:54
+
PECore::setImageSize
void setImageSize(bufsize_t newSize)
Definition PECore.h:35
+
PECore::dos
IMAGE_DOS_HEADER * dos
Definition PECore.h:54
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_file_8cpp.html b/_p_e_file_8cpp.html index 4ae9ff1c..865dd54d 100644 --- a/_p_e_file_8cpp.html +++ b/_p_e_file_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PEFile.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_file_8cpp_source.html b/_p_e_file_8cpp_source.html index 808d1c9a..fdd6bc43 100644 --- a/_p_e_file_8cpp_source.html +++ b/_p_e_file_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PEFile.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -896,28 +898,28 @@ $(document).ready(function() { init_codefold(0); });
PECore::peSignatureOffset
offset_t peSignatureOffset() const
Definition PECore.cpp:59
PECore::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PECore.cpp:83
PECore::dos
IMAGE_DOS_HEADER * dos
Definition PECore.h:54
-
PEFileBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition PEFile.cpp:31
-
PEFileBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
+
PEFileBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition PEFile.cpp:31
+
PEFileBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
PEFile
Definition PEFile.h:41
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:272
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:119
-
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
-
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:648
-
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:659
+
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
+
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:648
+
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:659
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:269
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition PEFile.h:109
-
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:613
-
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:262
-
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:292
-
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:250
+
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:613
+
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:262
+
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:292
+
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:250
PEFile::SectHdrsWrapper
friend class SectHdrsWrapper
Definition PEFile.h:274
-
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:533
+
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:533
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:267
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:271
-
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:307
-
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:347
-
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
-
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:577
+
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:307
+
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:347
+
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
+
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:577
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition PEFile.h:51
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:49
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition PEFile.h:48
@@ -926,31 +928,31 @@ $(document).ready(function() { init_codefold(0); });
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition PEFile.h:50
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition PEFile.h:46
PEFile::core
PECore core
Definition PEFile.h:259
-
PEFile::initDirEntries
void initDirEntries()
Definition PEFile.cpp:125
-
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:132
-
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.cpp:526
+
PEFile::initDirEntries
void initDirEntries()
Definition PEFile.cpp:125
+
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:132
+
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.cpp:526
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:268
-
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:632
-
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:382
-
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:419
-
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:325
-
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:336
-
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:413
-
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:429
-
PEFile::clearWrappers
virtual void clearWrappers()
Definition PEFile.cpp:114
-
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:268
-
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:355
+
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:632
+
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:382
+
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:419
+
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:325
+
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:336
+
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:413
+
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:429
+
PEFile::clearWrappers
virtual void clearWrappers()
Definition PEFile.cpp:114
+
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:268
+
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:355
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:93
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset() const
Definition PEFile.h:83
-
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:316
-
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:105
+
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:316
+
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:105
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
-
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:220
-
PEFile::canAddNewSection
bool canAddNewSection()
Definition PEFile.cpp:464
-
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
+
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:220
+
PEFile::canAddNewSection
bool canAddNewSection()
Definition PEFile.cpp:464
+
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:265
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:114
-
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:478
+
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:478
RelocDirWrapper
Definition RelocDirWrapper.h:10
ResourceDirWrapper
Definition ResourceDirWrapper.h:14
ResourcesAlbum
Definition ResourcesAlbum.h:27
@@ -971,7 +973,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_file_8h.html b/_p_e_file_8h.html index cec09057..ee807243 100644 --- a/_p_e_file_8h.html +++ b/_p_e_file_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PEFile.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -114,7 +116,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_file_8h_source.html b/_p_e_file_8h_source.html index 0f8d0f32..1f8b5a86 100644 --- a/_p_e_file_8h_source.html +++ b/_p_e_file_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PEFile.h Source File + + @@ -30,7 +32,7 @@ - + @@ -144,7 +146,7 @@ $(document).ready(function() { init_codefold(0); });
55
56 static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset);
57
-
58 PEFile(AbstractByteBuffer *v_buf);
+
58 PEFile(AbstractByteBuffer *v_buf);
59 virtual ~PEFile() { clearWrappers(); delete album; }
60 //---
61 // inherited from Executable:
@@ -458,89 +460,90 @@ $(document).ready(function() { init_codefold(0); });
PECore::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PECore.cpp:83
PECore::secHdrsOffset
offset_t secHdrsOffset() const
Definition PECore.cpp:91
PECore::getHdrBitMode
Executable::exe_bits getHdrBitMode() const
Definition PECore.cpp:51
-
PEFileBuilder
Definition PEFile.h:30
-
PEFileBuilder::PEFileBuilder
PEFileBuilder()
Definition PEFile.h:32
+
PEFileBuilder
Definition PEFile.h:30
+
PEFileBuilder::PEFileBuilder
PEFileBuilder()
Definition PEFile.h:32
PEFileBuilder::build
virtual Executable * build(AbstractByteBuffer *buf)
Definition PEFile.cpp:31
-
PEFileBuilder::typeName
QString typeName()
Definition PEFile.h:35
+
PEFileBuilder::typeName
QString typeName()
Definition PEFile.h:35
PEFileBuilder::signatureMatches
virtual bool signatureMatches(AbstractByteBuffer *buf)
Definition PEFile.cpp:4
-
PEFile
Definition PEFile.h:41
-
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:272
-
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:119
+
PEFile
Definition PEFile.h:41
+
PEFile::dataDirEntries
DataDirEntryWrapper * dataDirEntries[pe::DIR_ENTRIES_COUNT]
Definition PEFile.h:272
+
PEFile::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition PEFile.h:119
PEFile::getMappedSize
virtual bufsize_t getMappedSize(Executable::addr_type aType)
Definition PEFile.cpp:274
PEFile::_createSectionView
BufferView * _createSectionView(SectionHdrWrapper *sec)
Definition PEFile.cpp:648
PEFile::getExportsMap
size_t getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.cpp:659
-
PEFile::getDelayedImports
DelayImpDirWrapper * getDelayedImports()
Definition PEFile.h:149
-
PEFile::getSectionAlignment
bufsize_t getSectionAlignment() const
Definition PEFile.h:184
-
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:77
-
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:269
-
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition PEFile.h:109
-
PEFile::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PEFile.h:79
-
PEFile::hasDirectory
bool hasDirectory(pe::dir_entry dirNum)
Definition PEFile.h:174
-
PEFile::~PEFile
virtual ~PEFile()
Definition PEFile.h:59
+
PEFile::getDelayedImports
DelayImpDirWrapper * getDelayedImports()
Definition PEFile.h:149
+
PEFile::getSectionAlignment
bufsize_t getSectionAlignment() const
Definition PEFile.h:184
+
PEFile::peFileHdrOffset
offset_t peFileHdrOffset() const
Definition PEFile.h:77
+
PEFile::sects
SectHdrsWrapper * sects
Definition PEFile.h:269
+
PEFile::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition PEFile.h:109
+
PEFile::peNtHeadersSize
bufsize_t peNtHeadersSize() const
Definition PEFile.h:79
+
PEFile::hasDirectory
bool hasDirectory(pe::dir_entry dirNum)
Definition PEFile.h:174
+
PEFile::~PEFile
virtual ~PEFile()
Definition PEFile.h:59
PEFile::unbindImports
bool unbindImports()
Definition PEFile.cpp:613
PEFile::peDataDirOffset
offset_t peDataDirOffset()
Definition PEFile.cpp:262
PEFile::getEntryPoint
virtual offset_t getEntryPoint(Executable::addr_type addrType=Executable::RVA)
Definition PEFile.cpp:292
-
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:81
-
PEFile::getExports
ExportDirWrapper * getExports()
Definition PEFile.h:154
+
PEFile::secHdrsOffset
offset_t secHdrsOffset() const
Definition PEFile.h:81
+
PEFile::getExports
ExportDirWrapper * getExports()
Definition PEFile.h:154
PEFile::getMinSecRVA
offset_t getMinSecRVA()
Definition PEFile.cpp:250
PEFile::getLastMapped
offset_t getLastMapped(Executable::addr_type aType)
Definition PEFile.cpp:533
-
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:267
-
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:271
+
PEFile::fHdr
FileHdrWrapper * fHdr
Definition PEFile.h:267
+
PEFile::album
ResourcesAlbum * album
Definition PEFile.h:271
PEFile::setEntryPoint
bool setEntryPoint(offset_t entry, Executable::addr_type aType)
Definition PEFile.cpp:307
PEFile::getSectionsCount
size_t getSectionsCount(bool useMapped=true) const
Definition PEFile.cpp:347
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
-
PEFile::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:160
-
PEFile::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PEFile.h:71
+
PEFile::getAllEntryPoints
virtual size_t getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
Definition PEFile.h:160
+
PEFile::getImageBase
virtual offset_t getImageBase(bool recalculate=false)
Definition PEFile.h:71
PEFile::extendLastSection
SectionHdrWrapper * extendLastSection(bufsize_t addedSize)
Definition PEFile.cpp:577
-
PEFile::WRAPPERS
WRAPPERS
Definition PEFile.h:43
-
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition PEFile.h:51
-
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:49
-
PEFile::WR_NONE
@ WR_NONE
Definition PEFile.h:44
-
PEFile::WR_DIR_ENTRY_END
@ WR_DIR_ENTRY_END
Definition PEFile.h:52
-
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition PEFile.h:48
-
PEFile::WR_FILE_HDR
@ WR_FILE_HDR
Definition PEFile.h:47
-
PEFile::WR_DOS_HDR
@ WR_DOS_HDR
Definition PEFile.h:45
-
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition PEFile.h:50
-
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition PEFile.h:46
-
PEFile::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition PEFile.h:53
-
PEFile::core
PECore core
Definition PEFile.h:259
+
PEFile::WRAPPERS
WRAPPERS
Definition PEFile.h:43
+
PEFile::WR_DIR_ENTRY
@ WR_DIR_ENTRY
Definition PEFile.h:51
+
PEFile::WR_DATADIR
@ WR_DATADIR
Definition PEFile.h:49
+
PEFile::WR_NONE
@ WR_NONE
Definition PEFile.h:44
+
PEFile::WR_DIR_ENTRY_END
@ WR_DIR_ENTRY_END
Definition PEFile.h:52
+
PEFile::WR_OPTIONAL_HDR
@ WR_OPTIONAL_HDR
Definition PEFile.h:48
+
PEFile::WR_FILE_HDR
@ WR_FILE_HDR
Definition PEFile.h:47
+
PEFile::WR_DOS_HDR
@ WR_DOS_HDR
Definition PEFile.h:45
+
PEFile::WR_SECTIONS
@ WR_SECTIONS
Definition PEFile.h:50
+
PEFile::WR_RICH_HDR
@ WR_RICH_HDR
Definition PEFile.h:46
+
PEFile::COUNT_WRAPPERS
@ COUNT_WRAPPERS
Definition PEFile.h:53
+
PEFile::core
PECore core
Definition PEFile.h:259
PEFile::initDirEntries
void initDirEntries()
Definition PEFile.cpp:125
PEFile::wrap
virtual void wrap()
Definition PEFile.cpp:132
PEFile::getLastSection
SectionHdrWrapper * getLastSection()
Definition PEFile.cpp:526
-
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:268
+
PEFile::optHdr
OptHdrWrapper * optHdr
Definition PEFile.h:268
PEFile::dumpSection
bool dumpSection(SectionHdrWrapper *sec, QString fileName)
Definition PEFile.cpp:632
PEFile::rvaToRaw
virtual offset_t rvaToRaw(offset_t rva)
Definition PEFile.cpp:382
PEFile::createSectionView
BufferView * createSectionView(size_t secNum)
Definition PEFile.cpp:419
-
PEFile::getResourcesAlbum
ResourcesAlbum * getResourcesAlbum() const
Definition PEFile.h:96
-
PEFile::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PEFile.h:80
+
PEFile::getResourcesAlbum
ResourcesAlbum * getResourcesAlbum() const
Definition PEFile.h:96
+
PEFile::peOptHdrOffset
offset_t peOptHdrOffset() const
Definition PEFile.h:80
PEFile::setHdrSectionsNum
bool setHdrSectionsNum(size_t newNum)
Definition PEFile.cpp:325
PEFile::setVirtualSize
bool setVirtualSize(bufsize_t newSize)
Definition PEFile.cpp:336
PEFile::getDataDirEntry
DataDirEntryWrapper * getDataDirEntry(pe::dir_entry eType)
Definition PEFile.cpp:413
-
PEFile::clearContent
bool clearContent(SectionHdrWrapper *sec)
Definition PEFile.h:213
+
PEFile::clearContent
bool clearContent(SectionHdrWrapper *sec)
Definition PEFile.h:213
PEFile::moveDataDirEntry
bool moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
Definition PEFile.cpp:429
PEFile::clearWrappers
virtual void clearWrappers()
Definition PEFile.cpp:114
PEFile::getDataDirectory
IMAGE_DATA_DIRECTORY * getDataDirectory()
Definition PEFile.cpp:268
PEFile::rawToRva
virtual offset_t rawToRva(offset_t raw)
Definition PEFile.cpp:355
-
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:93
-
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset() const
Definition PEFile.h:83
+
PEFile::hdrsSize
bufsize_t hdrsSize()
Definition PEFile.h:93
+
PEFile::secHdrsEndOffset
offset_t secHdrsEndOffset() const
Definition PEFile.h:83
PEFile::hdrSectionsNum
size_t hdrSectionsNum() const
Definition PEFile.cpp:316
-
PEFile::getImports
ImportDirWrapper * getImports()
Definition PEFile.h:144
-
PEFile::getEntrySection
SectionHdrWrapper * getEntrySection()
Definition PEFile.h:207
-
PEFile::setImageSize
void setImageSize(size_t newSize)
Definition PEFile.h:202
-
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:78
-
PEFile::getFileAlignment
bufsize_t getFileAlignment() const
Definition PEFile.h:179
-
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
-
PEFile::getBitMode
virtual exe_bits getBitMode()
Definition PEFile.h:74
-
PEFile::getSecContent
BYTE * getSecContent(SectionHdrWrapper *sec)
Definition PEFile.h:189
+
PEFile::getImports
ImportDirWrapper * getImports()
Definition PEFile.h:144
+
PEFile::getEntrySection
SectionHdrWrapper * getEntrySection()
Definition PEFile.h:207
+
PEFile::setImageSize
void setImageSize(size_t newSize)
Definition PEFile.h:202
+
PEFile::PEFile
PEFile(AbstractByteBuffer *v_buf)
Definition PEFile.cpp:105
+
PEFile::peNtHdrOffset
offset_t peNtHdrOffset() const
Definition PEFile.h:78
+
PEFile::getFileAlignment
bufsize_t getFileAlignment() const
Definition PEFile.h:179
+
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
+
PEFile::getBitMode
virtual exe_bits getBitMode()
Definition PEFile.h:74
+
PEFile::getSecContent
BYTE * getSecContent(SectionHdrWrapper *sec)
Definition PEFile.h:189
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:220
-
PEFile::canResize
bool canResize(bufsize_t newSize)
Definition PEFile.h:228
+
PEFile::canResize
bool canResize(bufsize_t newSize)
Definition PEFile.h:228
PEFile::canAddNewSection
bool canAddNewSection()
Definition PEFile.cpp:464
PEFile::computeChecksum
static long computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
Definition PEFile.cpp:45
-
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:265
-
PEFile::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:124
-
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:107
-
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:241
-
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:114
+
PEFile::dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
Definition PEFile.h:265
+
PEFile::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition PEFile.h:124
+
PEFile::getHdrBitMode
exe_bits getHdrBitMode()
Definition PEFile.h:107
+
PEFile::isReproBuild
bool isReproBuild()
Definition PEFile.h:241
+
PEFile::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
Definition PEFile.h:114
PEFile::addNewSection
SectionHdrWrapper * addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)
Definition PEFile.cpp:478
ResourcesAlbum
Definition ResourcesAlbum.h:27
ResourcesAlbum::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition ResourcesAlbum.cpp:105
@@ -554,7 +557,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_node_wrapper_8cpp.html b/_p_e_node_wrapper_8cpp.html index d3cef31a..1c7595ac 100644 --- a/_p_e_node_wrapper_8cpp.html +++ b/_p_e_node_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PENodeWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_node_wrapper_8cpp_source.html b/_p_e_node_wrapper_8cpp_source.html index 5bcd6548..535d574c 100644 --- a/_p_e_node_wrapper_8cpp_source.html +++ b/_p_e_node_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/PENodeWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -115,14 +117,14 @@ $(document).ready(function() { init_codefold(0); });
ExeElementWrapper
Definition ExeElementWrapper.h:12
ExeNodeWrapper
Definition ExeNodeWrapper.h:9
ExeNodeWrapper::wrap
virtual bool wrap()
Definition ExeNodeWrapper.h:16
-
PEElementWrapper::PEElementWrapper
PEElementWrapper(PEFile *pe)
Definition PENodeWrapper.cpp:4
+
PEElementWrapper::PEElementWrapper
PEElementWrapper(PEFile *pe)
Definition PENodeWrapper.cpp:4
PEFile
Definition PEFile.h:41
PENodeWrapper
Definition PENodeWrapper.h:25
-
PENodeWrapper::PENodeWrapper
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL)
Definition PENodeWrapper.cpp:11
+
PENodeWrapper::PENodeWrapper
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL)
Definition PENodeWrapper.cpp:11
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_node_wrapper_8h.html b/_p_e_node_wrapper_8h.html index 67a59fd1..d9cacd42 100644 --- a/_p_e_node_wrapper_8h.html +++ b/_p_e_node_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PENodeWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_p_e_node_wrapper_8h_source.html b/_p_e_node_wrapper_8h_source.html index b4f391ef..9a9afe4e 100644 --- a/_p_e_node_wrapper_8h_source.html +++ b/_p_e_node_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/PENodeWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../ExeNodeWrapper.h"
+
3#include "../ExeNodeWrapper.h"
4#include "pe_formats.h"
5
6class PEFile;
@@ -93,7 +95,7 @@ $(document).ready(function() { init_codefold(0); });
8class PEElementWrapper : public ExeElementWrapper
9{
10public:
-
11 PEElementWrapper(PEFile* pe);
+
11 PEElementWrapper(PEFile* pe);
12 virtual ~PEElementWrapper() {}
13
14 PEFile* getPE() { return m_PE; }
@@ -111,8 +113,8 @@ $(document).ready(function() { init_codefold(0); });
24class PENodeWrapper : public ExeNodeWrapper
25{
26public:
-
27 PENodeWrapper(PEFile* pe, PENodeWrapper* parent = NULL);
-
28 PENodeWrapper(PEFile* pe, PENodeWrapper* parent, size_t entryNumber);
+
27 PENodeWrapper(PEFile* pe, PENodeWrapper* parent = NULL);
+
28 PENodeWrapper(PEFile* pe, PENodeWrapper* parent, size_t entryNumber);
29
30 virtual ~PENodeWrapper() {}
31
@@ -127,23 +129,26 @@ $(document).ready(function() { init_codefold(0); });
40};
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
+ - - - -
PEElementWrapper::~PEElementWrapper
virtual ~PEElementWrapper()
Definition PENodeWrapper.h:12
+ +
PEElementWrapper::PEElementWrapper
PEElementWrapper(PEFile *pe)
Definition PENodeWrapper.cpp:4
+ + +
PEElementWrapper::~PEElementWrapper
virtual ~PEElementWrapper()
Definition PENodeWrapper.h:12
- -
PENodeWrapper::~PENodeWrapper
virtual ~PENodeWrapper()
Definition PENodeWrapper.h:30
-
PENodeWrapper::getParentNode
virtual PENodeWrapper * getParentNode()
Definition PENodeWrapper.h:33
-
PENodeWrapper::getPE
PEFile * getPE()
Definition PENodeWrapper.h:32
-
PENodeWrapper::peParentNode
PENodeWrapper * peParentNode
Definition PENodeWrapper.h:37
- + +
PENodeWrapper::~PENodeWrapper
virtual ~PENodeWrapper()
Definition PENodeWrapper.h:30
+
PENodeWrapper::PENodeWrapper
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL)
Definition PENodeWrapper.cpp:11
+
PENodeWrapper::getParentNode
virtual PENodeWrapper * getParentNode()
Definition PENodeWrapper.h:33
+
PENodeWrapper::getPE
PEFile * getPE()
Definition PENodeWrapper.h:32
+
PENodeWrapper::peParentNode
PENodeWrapper * peParentNode
Definition PENodeWrapper.h:37
+
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_reloc_dir_wrapper_8cpp.html b/_reloc_dir_wrapper_8cpp.html index 3a511609..c637ad6c 100644 --- a/_reloc_dir_wrapper_8cpp.html +++ b/_reloc_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/RelocDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_reloc_dir_wrapper_8cpp_source.html b/_reloc_dir_wrapper_8cpp_source.html index 8d26a77d..34ffbc8e 100644 --- a/_reloc_dir_wrapper_8cpp_source.html +++ b/_reloc_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/RelocDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -444,37 +446,37 @@ $(document).ready(function() { init_codefold(0); });
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::getRawSize
virtual offset_t getRawSize() const
Definition Executable.h:54
RelocBlockWrapper
Definition RelocDirWrapper.h:39
-
RelocBlockWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.cpp:181
-
RelocBlockWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:200
-
RelocBlockWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RelocDirWrapper.cpp:164
-
RelocBlockWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:72
-
RelocBlockWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:98
+
RelocBlockWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.cpp:181
+
RelocBlockWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:200
+
RelocBlockWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RelocDirWrapper.cpp:164
+
RelocBlockWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:72
+
RelocBlockWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:98
RelocBlockWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:58
-
RelocBlockWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:153
-
RelocBlockWrapper::maxEntriesNumInBlock
size_t maxEntriesNumInBlock()
Definition RelocDirWrapper.cpp:221
-
RelocBlockWrapper::getEntriesPtr
void * getEntriesPtr()
Definition RelocDirWrapper.cpp:208
+
RelocBlockWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:153
+
RelocBlockWrapper::maxEntriesNumInBlock
size_t maxEntriesNumInBlock()
Definition RelocDirWrapper.cpp:221
+
RelocBlockWrapper::getEntriesPtr
void * getEntriesPtr()
Definition RelocDirWrapper.cpp:208
RelocBlockWrapper::PAGE_VA
@ PAGE_VA
Definition RelocDirWrapper.h:44
RelocBlockWrapper::ENTRIES_PTR
@ ENTRIES_PTR
Definition RelocDirWrapper.h:46
RelocBlockWrapper::BLOCK_SIZE
@ BLOCK_SIZE
Definition RelocDirWrapper.h:45
-
RelocBlockWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:191
+
RelocBlockWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:191
RelocBlockWrapper::myReloc
IMAGE_BASE_RELOCATION * myReloc()
Definition RelocDirWrapper.h:70
-
RelocDirWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:34
+
RelocDirWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:34
RelocDirWrapper::RelocBlockWrapper
friend class RelocBlockWrapper
Definition RelocDirWrapper.h:34
-
RelocDirWrapper::reloc
IMAGE_BASE_RELOCATION * reloc()
Definition RelocDirWrapper.cpp:59
+
RelocDirWrapper::reloc
IMAGE_BASE_RELOCATION * reloc()
Definition RelocDirWrapper.cpp:59
RelocEntryWrapper
Definition RelocDirWrapper.h:83
-
RelocEntryWrapper::deltaToRVA
offset_t deltaToRVA(WORD delta)
Definition RelocDirWrapper.cpp:295
-
RelocEntryWrapper::translateType
static QString translateType(WORD type)
Definition RelocDirWrapper.cpp:279
-
RelocEntryWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:247
-
RelocEntryWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:261
-
RelocEntryWrapper::getDelta
static WORD getDelta(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:273
-
RelocEntryWrapper::getType
static WORD getType(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:267
+
RelocEntryWrapper::deltaToRVA
offset_t deltaToRVA(WORD delta)
Definition RelocDirWrapper.cpp:295
+
RelocEntryWrapper::translateType
static QString translateType(WORD type)
Definition RelocDirWrapper.cpp:279
+
RelocEntryWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:247
+
RelocEntryWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:261
+
RelocEntryWrapper::getDelta
static WORD getDelta(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:273
+
RelocEntryWrapper::getType
static WORD getType(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:267
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
WrappedValue::COMPLEX
@ COMPLEX
Definition WrappedValue.h:20
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_reloc_dir_wrapper_8h.html b/_reloc_dir_wrapper_8h.html index eab0c588..a5a1873e 100644 --- a/_reloc_dir_wrapper_8h.html +++ b/_reloc_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/RelocDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_reloc_dir_wrapper_8h_source.html b/_reloc_dir_wrapper_8h_source.html index 9e7bf81c..7318cc54 100644 --- a/_reloc_dir_wrapper_8h_source.html +++ b/_reloc_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/RelocDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -229,61 +231,61 @@ $(document).ready(function() { init_codefold(0); });
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
PEFile
Definition PEFile.h:41
-
RelocBlockWrapper
Definition RelocDirWrapper.h:39
+
RelocBlockWrapper
Definition RelocDirWrapper.h:39
RelocBlockWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.cpp:181
RelocBlockWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:200
RelocBlockWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RelocDirWrapper.cpp:164
-
RelocBlockWrapper::RelocBlockWrapper
RelocBlockWrapper(Executable *pe, RelocDirWrapper *parentDir, size_t entryNumber)
Definition RelocDirWrapper.h:50
+
RelocBlockWrapper::RelocBlockWrapper
RelocBlockWrapper(Executable *pe, RelocDirWrapper *parentDir, size_t entryNumber)
Definition RelocDirWrapper.h:50
RelocBlockWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:72
RelocBlockWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:98
-
RelocBlockWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:59
-
RelocBlockWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:58
+
RelocBlockWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:59
+
RelocBlockWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:58
RelocBlockWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:153
RelocBlockWrapper::maxEntriesNumInBlock
size_t maxEntriesNumInBlock()
Definition RelocDirWrapper.cpp:221
RelocBlockWrapper::getEntriesPtr
void * getEntriesPtr()
Definition RelocDirWrapper.cpp:208
-
RelocBlockWrapper::RelocBlockFID
RelocBlockFID
Definition RelocDirWrapper.h:42
-
RelocBlockWrapper::NONE
@ NONE
Definition RelocDirWrapper.h:43
-
RelocBlockWrapper::PAGE_VA
@ PAGE_VA
Definition RelocDirWrapper.h:44
-
RelocBlockWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RelocDirWrapper.h:47
-
RelocBlockWrapper::ENTRIES_PTR
@ ENTRIES_PTR
Definition RelocDirWrapper.h:46
-
RelocBlockWrapper::BLOCK_SIZE
@ BLOCK_SIZE
Definition RelocDirWrapper.h:45
+
RelocBlockWrapper::RelocBlockFID
RelocBlockFID
Definition RelocDirWrapper.h:42
+
RelocBlockWrapper::NONE
@ NONE
Definition RelocDirWrapper.h:43
+
RelocBlockWrapper::PAGE_VA
@ PAGE_VA
Definition RelocDirWrapper.h:44
+
RelocBlockWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RelocDirWrapper.h:47
+
RelocBlockWrapper::ENTRIES_PTR
@ ENTRIES_PTR
Definition RelocDirWrapper.h:46
+
RelocBlockWrapper::BLOCK_SIZE
@ BLOCK_SIZE
Definition RelocDirWrapper.h:45
RelocBlockWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.cpp:191
-
RelocBlockWrapper::myReloc
IMAGE_BASE_RELOCATION * myReloc()
Definition RelocDirWrapper.h:70
-
RelocDirWrapper
Definition RelocDirWrapper.h:10
+
RelocBlockWrapper::myReloc
IMAGE_BASE_RELOCATION * myReloc()
Definition RelocDirWrapper.h:70
+
RelocDirWrapper
Definition RelocDirWrapper.h:10
RelocDirWrapper::wrap
bool wrap()
Definition RelocDirWrapper.cpp:34
-
RelocDirWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:20
-
RelocDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:23
-
RelocDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:26
-
RelocDirWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.h:19
-
RelocDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.h:25
-
RelocDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:24
-
RelocDirWrapper::RelocDirWrapper
RelocDirWrapper(PEFile *pe)
Definition RelocDirWrapper.h:12
-
RelocDirWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.h:17
+
RelocDirWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:20
+
RelocDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:23
+
RelocDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:26
+
RelocDirWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.h:19
+
RelocDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.h:25
+
RelocDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:24
+
RelocDirWrapper::RelocDirWrapper
RelocDirWrapper(PEFile *pe)
Definition RelocDirWrapper.h:12
+
RelocDirWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.h:17
RelocDirWrapper::reloc
IMAGE_BASE_RELOCATION * reloc()
Definition RelocDirWrapper.cpp:59
-
RelocDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:21
-
RelocEntryWrapper
Definition RelocDirWrapper.h:83
+
RelocDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:21
+
RelocEntryWrapper
Definition RelocDirWrapper.h:83
RelocEntryWrapper::deltaToRVA
offset_t deltaToRVA(WORD delta)
Definition RelocDirWrapper.cpp:295
-
RelocEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition RelocDirWrapper.h:100
+
RelocEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition RelocDirWrapper.h:100
RelocEntryWrapper::translateType
static QString translateType(WORD type)
Definition RelocDirWrapper.cpp:279
-
RelocEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:105
-
RelocEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:99
-
RelocEntryWrapper::FieldID
FieldID
Definition RelocDirWrapper.h:86
-
RelocEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RelocDirWrapper.h:89
-
RelocEntryWrapper::RELOC_ENTRY_VAL
@ RELOC_ENTRY_VAL
Definition RelocDirWrapper.h:88
-
RelocEntryWrapper::NONE
@ NONE
Definition RelocDirWrapper.h:87
+
RelocEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition RelocDirWrapper.h:105
+
RelocEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RelocDirWrapper.h:99
+
RelocEntryWrapper::FieldID
FieldID
Definition RelocDirWrapper.h:86
+
RelocEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RelocDirWrapper.h:89
+
RelocEntryWrapper::RELOC_ENTRY_VAL
@ RELOC_ENTRY_VAL
Definition RelocDirWrapper.h:88
+
RelocEntryWrapper::NONE
@ NONE
Definition RelocDirWrapper.h:87
RelocEntryWrapper::getPtr
virtual void * getPtr()
Definition RelocDirWrapper.cpp:247
-
RelocEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RelocDirWrapper.h:103
+
RelocEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RelocDirWrapper.h:103
RelocEntryWrapper::getSize
virtual bufsize_t getSize()
Definition RelocDirWrapper.cpp:261
RelocEntryWrapper::getDelta
static WORD getDelta(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:273
-
RelocEntryWrapper::RelocEntryWrapper
RelocEntryWrapper(Executable *pe, RelocBlockWrapper *parentDir, size_t entryNumber)
Definition RelocDirWrapper.h:92
-
RelocEntryWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:98
-
RelocEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.h:104
+
RelocEntryWrapper::RelocEntryWrapper
RelocEntryWrapper(Executable *pe, RelocBlockWrapper *parentDir, size_t entryNumber)
Definition RelocDirWrapper.h:92
+
RelocEntryWrapper::getName
virtual QString getName()
Definition RelocDirWrapper.h:98
+
RelocEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RelocDirWrapper.h:104
RelocEntryWrapper::getType
static WORD getType(WORD relocEntryVal)
Definition RelocDirWrapper.cpp:267
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_factory_8cpp.html b/_resource_content_factory_8cpp.html index baf13efc..7e1521b9 100644 --- a/_resource_content_factory_8cpp.html +++ b/_resource_content_factory_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceContentFactory.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_factory_8cpp_source.html b/_resource_content_factory_8cpp_source.html index 908815ee..17ca3903 100644 --- a/_resource_content_factory_8cpp_source.html +++ b/_resource_content_factory_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceContentFactory.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -124,7 +126,7 @@ $(document).ready(function() { init_codefold(0); });
Executable
Definition Executable.h:26
ReourceHTMLWrapper
Definition ResourceContentWrapper.h:60
ReourceManifestWrapper
Definition ResourceContentWrapper.h:48
-
ResourceContentFactory::makeResContentWrapper
static ResourceContentWrapper * makeResContentWrapper(pe::resource_type typeId, ResourceLeafWrapper *leaf)
Definition ResourceContentFactory.cpp:5
+
ResourceContentFactory::makeResContentWrapper
static ResourceContentWrapper * makeResContentWrapper(pe::resource_type typeId, ResourceLeafWrapper *leaf)
Definition ResourceContentFactory.cpp:5
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
ResourceStringsWrapper
Definition ResourceStringsWrapper.h:56
@@ -132,7 +134,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_factory_8h.html b/_resource_content_factory_8h.html index c7cbe1a1..4f4a5873 100644 --- a/_resource_content_factory_8h.html +++ b/_resource_content_factory_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceContentFactory.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_factory_8h_source.html b/_resource_content_factory_8h_source.html index 251a0c55..10c9c8ee 100644 --- a/_resource_content_factory_8h_source.html +++ b/_resource_content_factory_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceContentFactory.h Source File + + @@ -30,7 +32,7 @@ - + @@ -96,14 +98,14 @@ $(document).ready(function() { init_codefold(0); });
10
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
ResourceContentWrapper.h
-
ResourceContentFactory
Definition ResourceContentFactory.h:6
+
ResourceContentFactory
Definition ResourceContentFactory.h:6
ResourceContentFactory::makeResContentWrapper
static ResourceContentWrapper * makeResContentWrapper(pe::resource_type typeId, ResourceLeafWrapper *leaf)
Definition ResourceContentFactory.cpp:5
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_wrapper_8cpp.html b/_resource_content_wrapper_8cpp.html index 1602d12c..981c2a1c 100644 --- a/_resource_content_wrapper_8cpp.html +++ b/_resource_content_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceContentWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_wrapper_8cpp_source.html b/_resource_content_wrapper_8cpp_source.html index c6ef3930..6355f5e1 100644 --- a/_resource_content_wrapper_8cpp_source.html +++ b/_resource_content_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceContentWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -193,18 +195,18 @@ $(document).ready(function() { init_codefold(0); });
Executable::toRaw
virtual offset_t toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)
Definition Executable.cpp:85
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
Executable::detectAddrType
Executable::addr_type detectAddrType(offset_t addr, Executable::addr_type hintType)
Definition Executable.cpp:125
-
ResourceContentWrapper::translateType
static QString translateType(pe::resource_type type)
Definition ResourceContentWrapper.cpp:3
-
ResourceContentWrapper::getContentAt
BYTE * getContentAt(offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
Definition ResourceContentWrapper.cpp:81
-
ResourceContentWrapper::getContentRaw
offset_t getContentRaw()
Definition ResourceContentWrapper.cpp:68
+
ResourceContentWrapper::translateType
static QString translateType(pe::resource_type type)
Definition ResourceContentWrapper.cpp:3
+
ResourceContentWrapper::getContentAt
BYTE * getContentAt(offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
Definition ResourceContentWrapper.cpp:81
+
ResourceContentWrapper::getContentRaw
offset_t getContentRaw()
Definition ResourceContentWrapper.cpp:68
ResourceContentWrapper::myLeaf
ResourceLeafWrapper * myLeaf
Definition ResourceContentWrapper.h:40
-
ResourceContentWrapper::getResContentPtr
void * getResContentPtr()
Definition ResourceContentWrapper.cpp:34
-
ResourceContentWrapper::getResContentSize
bufsize_t getResContentSize()
Definition ResourceContentWrapper.cpp:53
+
ResourceContentWrapper::getResContentPtr
void * getResContentPtr()
Definition ResourceContentWrapper.cpp:34
+
ResourceContentWrapper::getResContentSize
bufsize_t getResContentSize()
Definition ResourceContentWrapper.cpp:53
ResourceLeafWrapper::leafEntryPtr
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr()
Definition ResourceDirWrapper.cpp:341
ResourceLeafWrapper::getExe
Executable * getExe()
Definition ResourceLeafWrapper.h:42
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_wrapper_8h.html b/_resource_content_wrapper_8h.html index a704d440..084a0d5d 100644 --- a/_resource_content_wrapper_8h.html +++ b/_resource_content_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceContentWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_content_wrapper_8h_source.html b/_resource_content_wrapper_8h_source.html index c96bdf86..76976886 100644 --- a/_resource_content_wrapper_8h_source.html +++ b/_resource_content_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceContentWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,8 +86,8 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../../ExeElementWrapper.h"
-
4#include "../ResourceLeafWrapper.h"
+
3#include "../../ExeElementWrapper.h"
+
4#include "../ResourceLeafWrapper.h"
5#include "../pe_formats.h"
6
7class ResourceContentFactory;
@@ -167,35 +169,37 @@ $(document).ready(function() { init_codefold(0); });
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
+
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
+ - -
ReourceHTMLWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:62
-
ReourceHTMLWrapper::ReourceHTMLWrapper
ReourceHTMLWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceContentWrapper.h:65
- -
ReourceManifestWrapper::ReourceManifestWrapper
ReourceManifestWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceContentWrapper.h:53
-
ReourceManifestWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:50
+ +
ReourceHTMLWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:62
+
ReourceHTMLWrapper::ReourceHTMLWrapper
ReourceHTMLWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceContentWrapper.h:65
+ +
ReourceManifestWrapper::ReourceManifestWrapper
ReourceManifestWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceContentWrapper.h:53
+
ReourceManifestWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:50
ResourceContentFactory
Definition ResourceContentFactory.h:6
-
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
-
ResourceContentWrapper::ResourceContentWrapper
ResourceContentWrapper(Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
Definition ResourceContentWrapper.h:35
-
ResourceContentWrapper::getPtr
virtual void * getPtr()
Definition ResourceContentWrapper.h:22
+
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
+
ResourceContentWrapper::ResourceContentWrapper
ResourceContentWrapper(Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
Definition ResourceContentWrapper.h:35
+
ResourceContentWrapper::getPtr
virtual void * getPtr()
Definition ResourceContentWrapper.h:22
ResourceContentWrapper::translateType
static QString translateType(pe::resource_type type)
Definition ResourceContentWrapper.cpp:3
ResourceContentWrapper::getContentAt
BYTE * getContentAt(offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
Definition ResourceContentWrapper.cpp:81
ResourceContentWrapper::getContentRaw
offset_t getContentRaw()
Definition ResourceContentWrapper.cpp:68
-
ResourceContentWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceContentWrapper.h:30
-
ResourceContentWrapper::~ResourceContentWrapper
virtual ~ResourceContentWrapper()
Definition ResourceContentWrapper.h:14
-
ResourceContentWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceContentWrapper.h:31
-
ResourceContentWrapper::getName
virtual QString getName()
Definition ResourceContentWrapper.h:25
-
ResourceContentWrapper::myLeaf
ResourceLeafWrapper * myLeaf
Definition ResourceContentWrapper.h:40
-
ResourceContentWrapper::getType
pe::resource_type getType()
Definition ResourceContentWrapper.h:20
+
ResourceContentWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceContentWrapper.h:30
+
ResourceContentWrapper::~ResourceContentWrapper
virtual ~ResourceContentWrapper()
Definition ResourceContentWrapper.h:14
+
ResourceContentWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceContentWrapper.h:31
+
ResourceContentWrapper::getName
virtual QString getName()
Definition ResourceContentWrapper.h:25
+
ResourceContentWrapper::myLeaf
ResourceLeafWrapper * myLeaf
Definition ResourceContentWrapper.h:40
+
ResourceContentWrapper::getType
pe::resource_type getType()
Definition ResourceContentWrapper.h:20
ResourceContentWrapper::getResContentPtr
void * getResContentPtr()
Definition ResourceContentWrapper.cpp:34
-
ResourceContentWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceContentWrapper.h:26
-
ResourceContentWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceContentWrapper.h:27
-
ResourceContentWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceContentWrapper.h:23
-
ResourceContentWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:32
-
ResourceContentWrapper::typeId
pe::resource_type typeId
Definition ResourceContentWrapper.h:41
+
ResourceContentWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceContentWrapper.h:26
+
ResourceContentWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceContentWrapper.h:27
+
ResourceContentWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceContentWrapper.h:23
+
ResourceContentWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceContentWrapper.h:32
+
ResourceContentWrapper::typeId
pe::resource_type typeId
Definition ResourceContentWrapper.h:41
ResourceContentWrapper::getResContentSize
bufsize_t getResContentSize()
Definition ResourceContentWrapper.cpp:53
@@ -204,7 +208,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_dir_wrapper_8cpp.html b/_resource_dir_wrapper_8cpp.html index 5625bc6a..23077764 100644 --- a/_resource_dir_wrapper_8cpp.html +++ b/_resource_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ResourceDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -86,9 +88,9 @@ $(function() { - + - +

Macros

#define MAX_ENTRIES   50
#define MAX_ENTRIES   50
 
#define MAX_DEPTH   5
#define MAX_DEPTH   5
 

Macro Definition Documentation

@@ -127,7 +129,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_dir_wrapper_8cpp_source.html b/_resource_dir_wrapper_8cpp_source.html index a52e1391..430432a7 100644 --- a/_resource_dir_wrapper_8cpp_source.html +++ b/_resource_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/ResourceDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -506,8 +508,8 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
PEFile.h
-
MAX_DEPTH
#define MAX_DEPTH
Definition ResourceDirWrapper.cpp:5
-
MAX_ENTRIES
#define MAX_ENTRIES
Definition ResourceDirWrapper.cpp:4
+
MAX_DEPTH
#define MAX_DEPTH
Definition ResourceDirWrapper.cpp:5
+
MAX_ENTRIES
#define MAX_ENTRIES
Definition ResourceDirWrapper.cpp:4
ResourceDirWrapper.h
TOP_ENTRY_ROOT
#define TOP_ENTRY_ROOT
Definition ResourcesAlbum.h:3
DataDirEntryWrapper::getDirEntryAddress
offset_t getDirEntryAddress()
Definition DataDirEntryWrapper.cpp:19
@@ -526,44 +528,44 @@ $(document).ready(function() { init_codefold(0); });
PENodeWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:36
ResourceDirWrapper
Definition ResourceDirWrapper.h:14
ResourceDirWrapper::getDepth
long getDepth()
Definition ResourceDirWrapper.h:53
-
ResourceDirWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceDirWrapper.cpp:108
+
ResourceDirWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceDirWrapper.cpp:108
ResourceDirWrapper::TIMESTAMP
@ TIMESTAMP
Definition ResourceDirWrapper.h:20
ResourceDirWrapper::ID_ENTRIES_NUM
@ ID_ENTRIES_NUM
Definition ResourceDirWrapper.h:24
ResourceDirWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition ResourceDirWrapper.h:19
ResourceDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition ResourceDirWrapper.h:21
ResourceDirWrapper::MINOR_VER
@ MINOR_VER
Definition ResourceDirWrapper.h:22
ResourceDirWrapper::NAMED_ENTRIES_NUM
@ NAMED_ENTRIES_NUM
Definition ResourceDirWrapper.h:23
-
ResourceDirWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:73
-
ResourceDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:146
-
ResourceDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:116
+
ResourceDirWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:73
+
ResourceDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:146
+
ResourceDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:116
ResourceDirWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:37
-
ResourceDirWrapper::mainResourceDir
IMAGE_RESOURCE_DIRECTORY * mainResourceDir()
Definition ResourceDirWrapper.cpp:57
-
ResourceDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:132
+
ResourceDirWrapper::mainResourceDir
IMAGE_RESOURCE_DIRECTORY * mainResourceDir()
Definition ResourceDirWrapper.cpp:57
+
ResourceDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:132
ResourceDirWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:40
ResourceDirWrapper::getEntriesAreaSize
bufsize_t getEntriesAreaSize()
Definition ResourceDirWrapper.h:48
ResourceEntryWrapper
Definition ResourceDirWrapper.h:67
-
ResourceEntryWrapper::getID
WORD getID()
Definition ResourceDirWrapper.cpp:305
-
ResourceEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:226
-
ResourceEntryWrapper::getChildAddress
offset_t getChildAddress()
Definition ResourceDirWrapper.cpp:326
-
ResourceEntryWrapper::getEntryPtr
IMAGE_RESOURCE_DIRECTORY_ENTRY * getEntryPtr()
Definition ResourceDirWrapper.cpp:197
-
ResourceEntryWrapper::getNameOffset
offset_t getNameOffset()
Definition ResourceDirWrapper.cpp:253
-
ResourceEntryWrapper::clear
virtual void clear()
Definition ResourceDirWrapper.cpp:167
-
ResourceEntryWrapper::isDir
bool isDir()
Definition ResourceDirWrapper.cpp:245
-
ResourceEntryWrapper::translateType
static QString translateType(WORD id)
Definition ResourceDirWrapper.cpp:276
-
ResourceEntryWrapper::isByName
bool isByName()
Definition ResourceDirWrapper.cpp:237
+
ResourceEntryWrapper::getID
WORD getID()
Definition ResourceDirWrapper.cpp:305
+
ResourceEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:226
+
ResourceEntryWrapper::getChildAddress
offset_t getChildAddress()
Definition ResourceDirWrapper.cpp:326
+
ResourceEntryWrapper::getEntryPtr
IMAGE_RESOURCE_DIRECTORY_ENTRY * getEntryPtr()
Definition ResourceDirWrapper.cpp:197
+
ResourceEntryWrapper::getNameOffset
offset_t getNameOffset()
Definition ResourceDirWrapper.cpp:253
+
ResourceEntryWrapper::clear
virtual void clear()
Definition ResourceDirWrapper.cpp:167
+
ResourceEntryWrapper::isDir
bool isDir()
Definition ResourceDirWrapper.cpp:245
+
ResourceEntryWrapper::translateType
static QString translateType(WORD id)
Definition ResourceDirWrapper.cpp:276
+
ResourceEntryWrapper::isByName
bool isByName()
Definition ResourceDirWrapper.cpp:237
ResourceEntryWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:93
-
ResourceEntryWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:176
-
ResourceEntryWrapper::getNameStr
IMAGE_RESOURCE_DIRECTORY_STRING * getNameStr()
Definition ResourceDirWrapper.cpp:266
-
ResourceEntryWrapper::getChildOffsetToDirectory
offset_t getChildOffsetToDirectory()
Definition ResourceDirWrapper.cpp:314
+
ResourceEntryWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:176
+
ResourceEntryWrapper::getNameStr
IMAGE_RESOURCE_DIRECTORY_STRING * getNameStr()
Definition ResourceDirWrapper.cpp:266
+
ResourceEntryWrapper::getChildOffsetToDirectory
offset_t getChildOffsetToDirectory()
Definition ResourceDirWrapper.cpp:314
ResourceEntryWrapper::NAME_ID_ADDR
@ NAME_ID_ADDR
Definition ResourceDirWrapper.h:72
ResourceEntryWrapper::OFFSET_TO_DATA
@ OFFSET_TO_DATA
Definition ResourceDirWrapper.h:73
ResourceEntryWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:90
-
ResourceEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceDirWrapper.cpp:212
+
ResourceEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceDirWrapper.cpp:212
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
-
ResourceLeafWrapper::leafEntryPtr
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr()
Definition ResourceDirWrapper.cpp:341
-
ResourceLeafWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:349
+
ResourceLeafWrapper::leafEntryPtr
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr()
Definition ResourceDirWrapper.cpp:341
+
ResourceLeafWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:349
ResourceLeafWrapper::offset
offset_t offset
Definition ResourceLeafWrapper.h:45
-
ResourceLeafWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:363
+
ResourceLeafWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:363
ResourceLeafWrapper::DATA_SIZE
@ DATA_SIZE
Definition ResourceLeafWrapper.h:16
ResourceLeafWrapper::RESERVED
@ RESERVED
Definition ResourceLeafWrapper.h:18
ResourceLeafWrapper::CODE_PAGE
@ CODE_PAGE
Definition ResourceLeafWrapper.h:17
@@ -574,7 +576,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_dir_wrapper_8h.html b/_resource_dir_wrapper_8h.html index 474539c4..02a969d0 100644 --- a/_resource_dir_wrapper_8h.html +++ b/_resource_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ResourceDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -98,7 +100,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_dir_wrapper_8h_source.html b/_resource_dir_wrapper_8h_source.html index f80df3ed..6dab8615 100644 --- a/_resource_dir_wrapper_8h_source.html +++ b/_resource_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ResourceDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -237,38 +239,38 @@ $(document).ready(function() { init_codefold(0); });
Executable::NOT_ADDR
@ NOT_ADDR
Definition Executable.h:36
PEFile
Definition PEFile.h:41
PENodeWrapper
Definition PENodeWrapper.h:25
-
ResourceDirWrapper
Definition ResourceDirWrapper.h:14
-
ResourceDirWrapper::getDepth
long getDepth()
Definition ResourceDirWrapper.h:53
-
ResourceDirWrapper::ResourceDirWrapper
ResourceDirWrapper(PEFile *pe, ResourcesAlbum *resAlbum=NULL, offset_t rawOffset=0, long depth=0, long topEntryId=TOP_ENTRY_ROOT)
Definition ResourceDirWrapper.h:28
+
ResourceDirWrapper
Definition ResourceDirWrapper.h:14
+
ResourceDirWrapper::getDepth
long getDepth()
Definition ResourceDirWrapper.h:53
+
ResourceDirWrapper::ResourceDirWrapper
ResourceDirWrapper(PEFile *pe, ResourcesAlbum *resAlbum=NULL, offset_t rawOffset=0, long depth=0, long topEntryId=TOP_ENTRY_ROOT)
Definition ResourceDirWrapper.h:28
ResourceDirWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceDirWrapper.cpp:108
-
ResourceDirWrapper::ResourceDirFID
ResourceDirFID
Definition ResourceDirWrapper.h:17
-
ResourceDirWrapper::TIMESTAMP
@ TIMESTAMP
Definition ResourceDirWrapper.h:20
-
ResourceDirWrapper::ID_ENTRIES_NUM
@ ID_ENTRIES_NUM
Definition ResourceDirWrapper.h:24
-
ResourceDirWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition ResourceDirWrapper.h:19
-
ResourceDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ResourceDirWrapper.h:25
-
ResourceDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition ResourceDirWrapper.h:21
-
ResourceDirWrapper::MINOR_VER
@ MINOR_VER
Definition ResourceDirWrapper.h:22
-
ResourceDirWrapper::NONE
@ NONE
Definition ResourceDirWrapper.h:18
-
ResourceDirWrapper::NAMED_ENTRIES_NUM
@ NAMED_ENTRIES_NUM
Definition ResourceDirWrapper.h:23
+
ResourceDirWrapper::ResourceDirFID
ResourceDirFID
Definition ResourceDirWrapper.h:17
+
ResourceDirWrapper::TIMESTAMP
@ TIMESTAMP
Definition ResourceDirWrapper.h:20
+
ResourceDirWrapper::ID_ENTRIES_NUM
@ ID_ENTRIES_NUM
Definition ResourceDirWrapper.h:24
+
ResourceDirWrapper::CHARACTERISTIC
@ CHARACTERISTIC
Definition ResourceDirWrapper.h:19
+
ResourceDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ResourceDirWrapper.h:25
+
ResourceDirWrapper::MAJOR_VER
@ MAJOR_VER
Definition ResourceDirWrapper.h:21
+
ResourceDirWrapper::MINOR_VER
@ MINOR_VER
Definition ResourceDirWrapper.h:22
+
ResourceDirWrapper::NONE
@ NONE
Definition ResourceDirWrapper.h:18
+
ResourceDirWrapper::NAMED_ENTRIES_NUM
@ NAMED_ENTRIES_NUM
Definition ResourceDirWrapper.h:23
ResourceDirWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:73
ResourceDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:146
-
ResourceDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceDirWrapper.h:42
+
ResourceDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceDirWrapper.h:42
ResourceDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:116
-
ResourceDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceDirWrapper.h:41
-
ResourceDirWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:37
+
ResourceDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceDirWrapper.h:41
+
ResourceDirWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:37
ResourceDirWrapper::mainResourceDir
IMAGE_RESOURCE_DIRECTORY * mainResourceDir()
Definition ResourceDirWrapper.cpp:57
ResourceDirWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:132
-
ResourceDirWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:40
-
ResourceDirWrapper::getEntriesAreaSize
bufsize_t getEntriesAreaSize()
Definition ResourceDirWrapper.h:48
-
ResourceDirWrapper::getAlbumPtr
ResourcesAlbum * getAlbumPtr()
Definition ResourceDirWrapper.h:56
-
ResourceEntryWrapper
Definition ResourceDirWrapper.h:67
+
ResourceDirWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:40
+
ResourceDirWrapper::getEntriesAreaSize
bufsize_t getEntriesAreaSize()
Definition ResourceDirWrapper.h:48
+
ResourceDirWrapper::getAlbumPtr
ResourcesAlbum * getAlbumPtr()
Definition ResourceDirWrapper.h:56
+
ResourceEntryWrapper
Definition ResourceDirWrapper.h:67
ResourceEntryWrapper::getID
WORD getID()
Definition ResourceDirWrapper.cpp:305
ResourceEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:226
-
ResourceEntryWrapper::getAlbumPtr
ResourcesAlbum * getAlbumPtr()
Definition ResourceDirWrapper.h:113
-
ResourceEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceDirWrapper.h:94
-
ResourceEntryWrapper::getTopEntryID
long getTopEntryID()
Definition ResourceDirWrapper.h:114
-
ResourceEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.h:100
-
ResourceEntryWrapper::~ResourceEntryWrapper
virtual ~ResourceEntryWrapper()
Definition ResourceDirWrapper.h:86
+
ResourceEntryWrapper::getAlbumPtr
ResourcesAlbum * getAlbumPtr()
Definition ResourceDirWrapper.h:113
+
ResourceEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceDirWrapper.h:94
+
ResourceEntryWrapper::getTopEntryID
long getTopEntryID()
Definition ResourceDirWrapper.h:114
+
ResourceEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.h:100
+
ResourceEntryWrapper::~ResourceEntryWrapper
virtual ~ResourceEntryWrapper()
Definition ResourceDirWrapper.h:86
ResourceEntryWrapper::getChildAddress
offset_t getChildAddress()
Definition ResourceDirWrapper.cpp:326
ResourceEntryWrapper::getEntryPtr
IMAGE_RESOURCE_DIRECTORY_ENTRY * getEntryPtr()
Definition ResourceDirWrapper.cpp:197
ResourceEntryWrapper::getNameOffset
offset_t getNameOffset()
Definition ResourceDirWrapper.cpp:253
@@ -276,26 +278,26 @@ $(document).ready(function() { init_codefold(0); });
ResourceEntryWrapper::isDir
bool isDir()
Definition ResourceDirWrapper.cpp:245
ResourceEntryWrapper::translateType
static QString translateType(WORD id)
Definition ResourceDirWrapper.cpp:276
ResourceEntryWrapper::isByName
bool isByName()
Definition ResourceDirWrapper.cpp:237
-
ResourceEntryWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:93
+
ResourceEntryWrapper::getName
virtual QString getName()
Definition ResourceDirWrapper.h:93
ResourceEntryWrapper::wrap
bool wrap()
Definition ResourceDirWrapper.cpp:176
ResourceEntryWrapper::getNameStr
IMAGE_RESOURCE_DIRECTORY_STRING * getNameStr()
Definition ResourceDirWrapper.cpp:266
-
ResourceEntryWrapper::ResourceEntryWrapper
ResourceEntryWrapper(PEFile *pe, ResourceDirWrapper *parentDir, size_t entryNumber, long topEntryId, ResourcesAlbum *resAlbum)
Definition ResourceDirWrapper.h:79
+
ResourceEntryWrapper::ResourceEntryWrapper
ResourceEntryWrapper(PEFile *pe, ResourceDirWrapper *parentDir, size_t entryNumber, long topEntryId, ResourcesAlbum *resAlbum)
Definition ResourceDirWrapper.h:79
ResourceEntryWrapper::getChildOffsetToDirectory
offset_t getChildOffsetToDirectory()
Definition ResourceDirWrapper.cpp:314
-
ResourceEntryWrapper::FieldID
FieldID
Definition ResourceDirWrapper.h:70
-
ResourceEntryWrapper::NONE
@ NONE
Definition ResourceDirWrapper.h:71
-
ResourceEntryWrapper::NAME_ID_ADDR
@ NAME_ID_ADDR
Definition ResourceDirWrapper.h:72
-
ResourceEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ResourceDirWrapper.h:74
-
ResourceEntryWrapper::OFFSET_TO_DATA
@ OFFSET_TO_DATA
Definition ResourceDirWrapper.h:73
-
ResourceEntryWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:90
-
ResourceEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceDirWrapper.h:95
+
ResourceEntryWrapper::FieldID
FieldID
Definition ResourceDirWrapper.h:70
+
ResourceEntryWrapper::NONE
@ NONE
Definition ResourceDirWrapper.h:71
+
ResourceEntryWrapper::NAME_ID_ADDR
@ NAME_ID_ADDR
Definition ResourceDirWrapper.h:72
+
ResourceEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition ResourceDirWrapper.h:74
+
ResourceEntryWrapper::OFFSET_TO_DATA
@ OFFSET_TO_DATA
Definition ResourceDirWrapper.h:73
+
ResourceEntryWrapper::getPtr
virtual void * getPtr()
Definition ResourceDirWrapper.h:90
+
ResourceEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceDirWrapper.h:95
ResourceEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceDirWrapper.cpp:212
-
ResourceEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceDirWrapper.h:91
+
ResourceEntryWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceDirWrapper.h:91
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
ResourcesAlbum
Definition ResourcesAlbum.h:27
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_leaf_wrapper_8h.html b/_resource_leaf_wrapper_8h.html index 7c8507fb..03372962 100644 --- a/_resource_leaf_wrapper_8h.html +++ b/_resource_leaf_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ResourceLeafWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_leaf_wrapper_8h_source.html b/_resource_leaf_wrapper_8h_source.html index 17ab0915..f366a979 100644 --- a/_resource_leaf_wrapper_8h_source.html +++ b/_resource_leaf_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/ResourceLeafWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../ExeNodeWrapper.h"
+
3#include "../ExeNodeWrapper.h"
4
5#include <map>
6#include <vector>
@@ -143,37 +145,38 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
+ - +
ResourceLeafWrapper::leafEntryPtr
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr()
Definition ResourceDirWrapper.cpp:341
- +
ResourceLeafWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceDirWrapper.cpp:349
-
ResourceLeafWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceLeafWrapper.h:31
-
ResourceLeafWrapper::getPtr
virtual void * getPtr()
Definition ResourceLeafWrapper.h:27
- +
ResourceLeafWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceLeafWrapper.h:31
+
ResourceLeafWrapper::getPtr
virtual void * getPtr()
Definition ResourceLeafWrapper.h:27
+
ResourceLeafWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceDirWrapper.cpp:363
- - - - - - - -
ResourceLeafWrapper::ResourceLeafWrapper
ResourceLeafWrapper(Executable *pe, offset_t rawOffset, long topEntryId)
Definition ResourceLeafWrapper.h:22
-
ResourceLeafWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceLeafWrapper.h:28
-
ResourceLeafWrapper::getName
virtual QString getName()
Definition ResourceLeafWrapper.h:30
-
ResourceLeafWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ResourceLeafWrapper.h:35
- - + + + + + + + +
ResourceLeafWrapper::ResourceLeafWrapper
ResourceLeafWrapper(Executable *pe, offset_t rawOffset, long topEntryId)
Definition ResourceLeafWrapper.h:22
+
ResourceLeafWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceLeafWrapper.h:28
+
ResourceLeafWrapper::getName
virtual QString getName()
Definition ResourceLeafWrapper.h:30
+
ResourceLeafWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition ResourceLeafWrapper.h:35
+ +
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_strings_wrapper_8cpp.html b/_resource_strings_wrapper_8cpp.html index a8fa0dac..7f7dc11f 100644 --- a/_resource_strings_wrapper_8cpp.html +++ b/_resource_strings_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceStringsWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_strings_wrapper_8cpp_source.html b/_resource_strings_wrapper_8cpp_source.html index 685210cd..20910f00 100644 --- a/_resource_strings_wrapper_8cpp_source.html +++ b/_resource_strings_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceStringsWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -230,13 +232,13 @@ $(document).ready(function() { init_codefold(0); });
Executable::RAW
@ RAW
Definition Executable.h:37
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
ResString
Definition ResourceStringsWrapper.h:7
-
ResString::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:34
-
ResString::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:20
-
ResString::getFieldSize
virtual bufsize_t getFieldSize(size_t fId, size_t subField)
Definition ResourceStringsWrapper.cpp:43
-
ResString::getSize
virtual bufsize_t getSize()
Definition ResourceStringsWrapper.cpp:8
-
ResString::getPtr
virtual void * getPtr()
Definition ResourceStringsWrapper.cpp:3
+
ResString::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:34
+
ResString::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:20
+
ResString::getFieldSize
virtual bufsize_t getFieldSize(size_t fId, size_t subField)
Definition ResourceStringsWrapper.cpp:43
+
ResString::getSize
virtual bufsize_t getSize()
Definition ResourceStringsWrapper.cpp:8
+
ResString::getPtr
virtual void * getPtr()
Definition ResourceStringsWrapper.cpp:3
ResString::getQString
QString getQString()
Definition ResourceStringsWrapper.h:31
-
ResString::getName
virtual QString getName()
Definition ResourceStringsWrapper.cpp:14
+
ResString::getName
virtual QString getName()
Definition ResourceStringsWrapper.cpp:14
ResString::offset
offset_t offset
Definition ResourceStringsWrapper.h:52
ResString::sizePtr
WORD * sizePtr
Definition ResourceStringsWrapper.h:51
ResString::STR_LEN
@ STR_LEN
Definition ResourceStringsWrapper.h:11
@@ -247,15 +249,15 @@ $(document).ready(function() { init_codefold(0); });
ResourceContentWrapper::myLeaf
ResourceLeafWrapper * myLeaf
Definition ResourceContentWrapper.h:40
ResourceContentWrapper::getSize
virtual bufsize_t getSize()
Definition ResourceContentWrapper.h:23
ResourceLeafWrapper::getExe
Executable * getExe()
Definition ResourceLeafWrapper.h:42
-
ResourceStringsWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:106
-
ResourceStringsWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceStringsWrapper.cpp:112
-
ResourceStringsWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:101
+
ResourceStringsWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:106
+
ResourceStringsWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceStringsWrapper.cpp:112
+
ResourceStringsWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:101
ResourceStringsWrapper::parsedSize
size_t parsedSize
Definition ResourceStringsWrapper.h:101
-
ResourceStringsWrapper::wrap
bool wrap()
Definition ResourceStringsWrapper.cpp:58
+
ResourceStringsWrapper::wrap
bool wrap()
Definition ResourceStringsWrapper.cpp:58
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_strings_wrapper_8h.html b/_resource_strings_wrapper_8h.html index da1f5fc0..d69a4136 100644 --- a/_resource_strings_wrapper_8h.html +++ b/_resource_strings_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceStringsWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_strings_wrapper_8h_source.html b/_resource_strings_wrapper_8h_source.html index 611bcf83..18787e26 100644 --- a/_resource_strings_wrapper_8h_source.html +++ b/_resource_strings_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceStringsWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
-
2#include "../ResourceLeafWrapper.h"
+
2#include "../ResourceLeafWrapper.h"
3#include "ResourceContentWrapper.h"
4
5#include <vector>
@@ -215,52 +217,53 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
ResourceContentWrapper.h
+
ExeNodeWrapper::entries
std::vector< ExeNodeWrapper * > entries
Definition ExeNodeWrapper.h:56
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
- +
ResString::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:34
ResString::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:20
ResString::getFieldSize
virtual bufsize_t getFieldSize(size_t fId, size_t subField)
Definition ResourceStringsWrapper.cpp:43
ResString::getSize
virtual bufsize_t getSize()
Definition ResourceStringsWrapper.cpp:8
ResString::getPtr
virtual void * getPtr()
Definition ResourceStringsWrapper.cpp:3
- +
ResString::getName
virtual QString getName()
Definition ResourceStringsWrapper.cpp:14
- -
ResString::getStrLen
virtual size_t getStrLen()
Definition ResourceStringsWrapper.h:42
- -
ResString::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceStringsWrapper.h:24
- -
ResString::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceStringsWrapper.h:23
-
ResString::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.h:43
- - - - - -
ResString::ResString
ResString(WORD *v_ptr, WORD *v_sizePtr, offset_t v_offset, Executable *v_exe)
Definition ResourceStringsWrapper.h:16
+ +
ResString::getStrLen
virtual size_t getStrLen()
Definition ResourceStringsWrapper.h:42
+ +
ResString::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition ResourceStringsWrapper.h:24
+ +
ResString::getFieldsCount
virtual size_t getFieldsCount()
Definition ResourceStringsWrapper.h:23
+
ResString::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.h:43
+ + + + + +
ResString::ResString
ResString(WORD *v_ptr, WORD *v_sizePtr, offset_t v_offset, Executable *v_exe)
Definition ResourceStringsWrapper.h:16
ResourceContentFactory
Definition ResourceContentFactory.h:6
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
- +
ResourceStringsWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.cpp:106
-
ResourceStringsWrapper::ResourceStringsWrapper
ResourceStringsWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceStringsWrapper.h:96
- - - - - -
ResourceStringsWrapper::getResStringAt
ResString * getResStringAt(size_t index)
Definition ResourceStringsWrapper.h:72
- +
ResourceStringsWrapper::ResourceStringsWrapper
ResourceStringsWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceStringsWrapper.h:96
+ + + + + +
ResourceStringsWrapper::getResStringAt
ResString * getResStringAt(size_t index)
Definition ResourceStringsWrapper.h:72
+
ResourceStringsWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceStringsWrapper.cpp:112
ResourceStringsWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceStringsWrapper.cpp:101
-
ResourceStringsWrapper::getQStringAt
QString getQStringAt(size_t index)
Definition ResourceStringsWrapper.h:79
- - -
ResourceStringsWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.h:87
+
ResourceStringsWrapper::getQStringAt
QString getQStringAt(size_t index)
Definition ResourceStringsWrapper.h:79
+ + +
ResourceStringsWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField)
Definition ResourceStringsWrapper.h:87
@@ -269,7 +272,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_version_wrapper_8cpp.html b/_resource_version_wrapper_8cpp.html index 993714a6..fd3f6810 100644 --- a/_resource_version_wrapper_8cpp.html +++ b/_resource_version_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceVersionWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_version_wrapper_8cpp_source.html b/_resource_version_wrapper_8cpp_source.html index a2eab1e0..5ef0aa96 100644 --- a/_resource_version_wrapper_8cpp_source.html +++ b/_resource_version_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourceVersionWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -215,9 +217,9 @@ $(document).ready(function() { init_codefold(0); });
ResourceContentWrapper::getResContentPtr
void * getResContentPtr()
Definition ResourceContentWrapper.cpp:34
ResourceContentWrapper::getResContentSize
bufsize_t getResContentSize()
Definition ResourceContentWrapper.cpp:53
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
-
ResourceVersionWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceVersionWrapper.cpp:111
-
ResourceVersionWrapper::ResourceVersionWrapper
ResourceVersionWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceVersionWrapper.cpp:3
-
ResourceVersionWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceVersionWrapper.cpp:77
+
ResourceVersionWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceVersionWrapper.cpp:111
+
ResourceVersionWrapper::ResourceVersionWrapper
ResourceVersionWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceVersionWrapper.cpp:3
+
ResourceVersionWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceVersionWrapper.cpp:77
ResourceVersionWrapper::PRODUCT_VER_1
@ PRODUCT_VER_1
Definition ResourceVersionWrapper.h:21
ResourceVersionWrapper::FLAGS_MASK
@ FLAGS_MASK
Definition ResourceVersionWrapper.h:22
ResourceVersionWrapper::VAL_LEN
@ VAL_LEN
Definition ResourceVersionWrapper.h:13
@@ -236,15 +238,15 @@ $(document).ready(function() { init_codefold(0); });
ResourceVersionWrapper::FLAGS
@ FLAGS
Definition ResourceVersionWrapper.h:23
ResourceVersionWrapper::TIMESTAMP_0
@ TIMESTAMP_0
Definition ResourceVersionWrapper.h:27
ResourceVersionWrapper::STRUCT_LEN
@ STRUCT_LEN
Definition ResourceVersionWrapper.h:12
-
ResourceVersionWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceVersionWrapper.cpp:48
-
ResourceVersionWrapper::getVersionInfo
pe::version_info * getVersionInfo()
Definition ResourceVersionWrapper.cpp:36
+
ResourceVersionWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceVersionWrapper.cpp:48
+
ResourceVersionWrapper::getVersionInfo
pe::version_info * getVersionInfo()
Definition ResourceVersionWrapper.cpp:36
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
WrappedValue::WSTRING
@ WSTRING
Definition WrappedValue.h:19
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_version_wrapper_8h.html b/_resource_version_wrapper_8h.html index 0779c1de..467edf7b 100644 --- a/_resource_version_wrapper_8h.html +++ b/_resource_version_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceVersionWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resource_version_wrapper_8h_source.html b/_resource_version_wrapper_8h_source.html index cb0aefc0..e7a66493 100644 --- a/_resource_version_wrapper_8h_source.html +++ b/_resource_version_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourceVersionWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(document).ready(function() { init_codefold(0); });
Go to the documentation of this file.
1#pragma once
2
-
3#include "../ResourceLeafWrapper.h"
+
3#include "../ResourceLeafWrapper.h"
4#include "ResourceContentWrapper.h"
5#include "../pe_formats.h"
6
@@ -117,7 +119,7 @@ $(document).ready(function() { init_codefold(0); });
31 };
32
-
33 ResourceVersionWrapper(Executable *pe, ResourceLeafWrapper* v_leaf);
+
33 ResourceVersionWrapper(Executable *pe, ResourceLeafWrapper* v_leaf);
34
35 /* full structure boundatries */
36 virtual void* getPtr() { return getVersionInfo(); }
@@ -157,47 +159,49 @@ $(document).ready(function() { init_codefold(0); });
bufsize_t
uint32_t bufsize_t
Definition AbstractByteBuffer.h:14
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
ResourceContentWrapper.h
+
ResourceContentFactory
Definition ResourceContentFactory.h:6
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
- +
ResourceVersionWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition ResourceVersionWrapper.cpp:111
- - - - +
ResourceVersionWrapper::ResourceVersionWrapper
ResourceVersionWrapper(Executable *pe, ResourceLeafWrapper *v_leaf)
Definition ResourceVersionWrapper.cpp:3
+ + + +
ResourceVersionWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition ResourceVersionWrapper.cpp:77
- - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + +
ResourceVersionWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition ResourceVersionWrapper.cpp:48
- +
ResourceVersionWrapper::getVersionInfo
pe::version_info * getVersionInfo()
Definition ResourceVersionWrapper.cpp:36
- +
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resources_album_8cpp.html b/_resources_album_8cpp.html index 5116d3c7..8d6efa2a 100644 --- a/_resources_album_8cpp.html +++ b/_resources_album_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourcesAlbum.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resources_album_8cpp_source.html b/_resources_album_8cpp_source.html index a22a11e1..5e7689a4 100644 --- a/_resources_album_8cpp_source.html +++ b/_resources_album_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc/ResourcesAlbum.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -246,31 +248,31 @@ $(document).ready(function() { init_codefold(0); });
ResourceContentFactory::makeResContentWrapper
static ResourceContentWrapper * makeResContentWrapper(pe::resource_type typeId, ResourceLeafWrapper *leaf)
Definition ResourceContentFactory.cpp:5
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
-
ResourcesAlbum::entriesCountAt
size_t entriesCountAt(long topEntryId)
Definition ResourcesAlbum.cpp:89
-
ResourcesAlbum::clear
void clear()
Definition ResourcesAlbum.cpp:45
+
ResourcesAlbum::entriesCountAt
size_t entriesCountAt(long topEntryId)
Definition ResourcesAlbum.cpp:89
+
ResourcesAlbum::clear
void clear()
Definition ResourcesAlbum.cpp:45
ResourcesAlbum::leafToContentWrapper
std::map< ResourceLeafWrapper *, ResourceContentWrapper * > leafToContentWrapper
Definition ResourcesAlbum.h:61
-
ResourcesAlbum::clearLeafsContent
void clearLeafsContent()
Definition ResourcesAlbum.cpp:35
-
ResourcesAlbum::wrapLeafsContent
void wrapLeafsContent()
Definition ResourcesAlbum.cpp:66
-
ResourcesAlbum::initResourceTypes
void initResourceTypes()
Definition ResourcesAlbum.cpp:113
+
ResourcesAlbum::clearLeafsContent
void clearLeafsContent()
Definition ResourcesAlbum.cpp:35
+
ResourcesAlbum::wrapLeafsContent
void wrapLeafsContent()
Definition ResourcesAlbum.cpp:66
+
ResourcesAlbum::initResourceTypes
void initResourceTypes()
Definition ResourcesAlbum.cpp:113
ResourcesAlbum::allTypes
std::vector< pe::resource_type > allTypes
Definition ResourcesAlbum.h:56
-
ResourcesAlbum::putLeaf
void putLeaf(ResourceLeafWrapper *leaf, long topEntryId)
Definition ResourcesAlbum.cpp:60
+
ResourcesAlbum::putLeaf
void putLeaf(ResourceLeafWrapper *leaf, long topEntryId)
Definition ResourcesAlbum.cpp:60
ResourcesAlbum::allLeafs
std::map< long, std::vector< ResourceLeafWrapper * > > allLeafs
Definition ResourcesAlbum.h:58
-
ResourcesAlbum::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition ResourcesAlbum.cpp:105
+
ResourcesAlbum::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition ResourcesAlbum.cpp:105
ResourcesAlbum::hasTopEntry
bool hasTopEntry(long topEntryId)
Definition ResourcesAlbum.h:54
-
ResourcesAlbum::entriesAt
std::vector< ResourceLeafWrapper * > * entriesAt(long topEntryId)
Definition ResourcesAlbum.cpp:97
+
ResourcesAlbum::entriesAt
std::vector< ResourceLeafWrapper * > * entriesAt(long topEntryId)
Definition ResourcesAlbum.cpp:97
ResourcesAlbum::idToLeafType
std::map< long, pe::resource_type > idToLeafType
Definition ResourcesAlbum.h:60
ResourcesAlbum::hasType
bool hasType(pe::resource_type typeId)
Definition ResourcesAlbum.h:46
ResourcesAlbum::allWrappers
std::map< pe::resource_type, ResourcesContainer > allWrappers
Definition ResourcesAlbum.h:57
ResourcesContainer
Definition ResourcesAlbum.h:12
ResourcesContainer::count
size_t count()
Definition ResourcesAlbum.h:20
-
ResourcesContainer::putWrapper
void putWrapper(ResourceContentWrapper *wrapper)
Definition ResourcesAlbum.cpp:5
-
ResourcesContainer::getWrapperAt
ResourceContentWrapper * getWrapperAt(size_t index)
Definition ResourcesAlbum.cpp:12
-
ResourcesContainer::entriesCount
size_t entriesCount()
Definition ResourcesAlbum.cpp:18
+
ResourcesContainer::putWrapper
void putWrapper(ResourceContentWrapper *wrapper)
Definition ResourcesAlbum.cpp:5
+
ResourcesContainer::getWrapperAt
ResourceContentWrapper * getWrapperAt(size_t index)
Definition ResourcesAlbum.cpp:12
+
ResourcesContainer::entriesCount
size_t entriesCount()
Definition ResourcesAlbum.cpp:18
ResourcesContainer::wrappers
std::vector< ResourceContentWrapper * > wrappers
Definition ResourcesAlbum.h:24
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resources_album_8h.html b/_resources_album_8h.html index 9f85d0ad..14a81de4 100644 --- a/_resources_album_8h.html +++ b/_resources_album_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourcesAlbum.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ Classes - +

Macros

#define TOP_ENTRY_ROOT   long(-1)
#define TOP_ENTRY_ROOT   long(-1)
 

Macro Definition Documentation

@@ -120,7 +122,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_resources_album_8h_source.html b/_resources_album_8h_source.html index 306c6467..993c7e1d 100644 --- a/_resources_album_8h_source.html +++ b/_resources_album_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc/ResourcesAlbum.h Source File + + @@ -30,7 +32,7 @@ - + @@ -86,8 +88,8 @@ $(document).ready(function() { init_codefold(0); });
2
3#define TOP_ENTRY_ROOT long(-1)
4
-
5#include "../../ExeNodeWrapper.h"
-
6#include "../ResourceLeafWrapper.h"
+
5#include "../../ExeNodeWrapper.h"
+
6#include "../ResourceLeafWrapper.h"
7#include "ResourceContentFactory.h"
8
9#include <map>
@@ -151,44 +153,46 @@ $(document).ready(function() { init_codefold(0); });
64
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
+
ExeNodeWrapper.h
ResourceContentFactory.h
+
ResourceLeafWrapper.h
Executable
Definition Executable.h:26
ResourceContentWrapper
Definition ResourceContentWrapper.h:10
ResourceLeafWrapper
Definition ResourceLeafWrapper.h:10
-
ResourcesAlbum
Definition ResourcesAlbum.h:27
+
ResourcesAlbum
Definition ResourcesAlbum.h:27
ResourcesAlbum::entriesCountAt
size_t entriesCountAt(long topEntryId)
Definition ResourcesAlbum.cpp:89
-
ResourcesAlbum::ResourcesAlbum
ResourcesAlbum(Executable *pe)
Definition ResourcesAlbum.h:30
+
ResourcesAlbum::ResourcesAlbum
ResourcesAlbum(Executable *pe)
Definition ResourcesAlbum.h:30
ResourcesAlbum::clear
void clear()
Definition ResourcesAlbum.cpp:45
-
ResourcesAlbum::leafToContentWrapper
std::map< ResourceLeafWrapper *, ResourceContentWrapper * > leafToContentWrapper
Definition ResourcesAlbum.h:61
-
ResourcesAlbum::dirsCount
size_t dirsCount()
Definition ResourcesAlbum.h:37
+
ResourcesAlbum::leafToContentWrapper
std::map< ResourceLeafWrapper *, ResourceContentWrapper * > leafToContentWrapper
Definition ResourcesAlbum.h:61
+
ResourcesAlbum::dirsCount
size_t dirsCount()
Definition ResourcesAlbum.h:37
ResourcesAlbum::clearLeafsContent
void clearLeafsContent()
Definition ResourcesAlbum.cpp:35
ResourcesAlbum::wrapLeafsContent
void wrapLeafsContent()
Definition ResourcesAlbum.cpp:66
ResourcesAlbum::initResourceTypes
void initResourceTypes()
Definition ResourcesAlbum.cpp:113
-
ResourcesAlbum::allTypes
std::vector< pe::resource_type > allTypes
Definition ResourcesAlbum.h:56
-
ResourcesAlbum::mapIdToLeafType
void mapIdToLeafType(long topId, pe::resource_type leafType)
Definition ResourcesAlbum.h:42
+
ResourcesAlbum::allTypes
std::vector< pe::resource_type > allTypes
Definition ResourcesAlbum.h:56
+
ResourcesAlbum::mapIdToLeafType
void mapIdToLeafType(long topId, pe::resource_type leafType)
Definition ResourcesAlbum.h:42
ResourcesAlbum::putLeaf
void putLeaf(ResourceLeafWrapper *leaf, long topEntryId)
Definition ResourcesAlbum.cpp:60
-
ResourcesAlbum::getContentWrapper
ResourceContentWrapper * getContentWrapper(ResourceLeafWrapper *leaf)
Definition ResourcesAlbum.h:44
-
ResourcesAlbum::allLeafs
std::map< long, std::vector< ResourceLeafWrapper * > > allLeafs
Definition ResourcesAlbum.h:58
+
ResourcesAlbum::getContentWrapper
ResourceContentWrapper * getContentWrapper(ResourceLeafWrapper *leaf)
Definition ResourcesAlbum.h:44
+
ResourcesAlbum::allLeafs
std::map< long, std::vector< ResourceLeafWrapper * > > allLeafs
Definition ResourcesAlbum.h:58
ResourcesAlbum::getResourcesOfType
ResourcesContainer * getResourcesOfType(pe::resource_type typeId)
Definition ResourcesAlbum.cpp:105
-
ResourcesAlbum::hasTopEntry
bool hasTopEntry(long topEntryId)
Definition ResourcesAlbum.h:54
+
ResourcesAlbum::hasTopEntry
bool hasTopEntry(long topEntryId)
Definition ResourcesAlbum.h:54
ResourcesAlbum::entriesAt
std::vector< ResourceLeafWrapper * > * entriesAt(long topEntryId)
Definition ResourcesAlbum.cpp:97
-
ResourcesAlbum::getResourceTypes
std::vector< pe::resource_type > getResourceTypes() const
Definition ResourcesAlbum.h:48
-
ResourcesAlbum::idToLeafType
std::map< long, pe::resource_type > idToLeafType
Definition ResourcesAlbum.h:60
-
ResourcesAlbum::~ResourcesAlbum
virtual ~ResourcesAlbum()
Definition ResourcesAlbum.h:32
-
ResourcesAlbum::hasType
bool hasType(pe::resource_type typeId)
Definition ResourcesAlbum.h:46
-
ResourcesAlbum::allWrappers
std::map< pe::resource_type, ResourcesContainer > allWrappers
Definition ResourcesAlbum.h:57
-
ResourcesContainer
Definition ResourcesAlbum.h:12
-
ResourcesContainer::count
size_t count()
Definition ResourcesAlbum.h:20
+
ResourcesAlbum::getResourceTypes
std::vector< pe::resource_type > getResourceTypes() const
Definition ResourcesAlbum.h:48
+
ResourcesAlbum::idToLeafType
std::map< long, pe::resource_type > idToLeafType
Definition ResourcesAlbum.h:60
+
ResourcesAlbum::~ResourcesAlbum
virtual ~ResourcesAlbum()
Definition ResourcesAlbum.h:32
+
ResourcesAlbum::hasType
bool hasType(pe::resource_type typeId)
Definition ResourcesAlbum.h:46
+
ResourcesAlbum::allWrappers
std::map< pe::resource_type, ResourcesContainer > allWrappers
Definition ResourcesAlbum.h:57
+
ResourcesContainer
Definition ResourcesAlbum.h:12
+
ResourcesContainer::count
size_t count()
Definition ResourcesAlbum.h:20
ResourcesContainer::putWrapper
void putWrapper(ResourceContentWrapper *wrapper)
Definition ResourcesAlbum.cpp:5
ResourcesContainer::getWrapperAt
ResourceContentWrapper * getWrapperAt(size_t index)
Definition ResourcesAlbum.cpp:12
ResourcesContainer::entriesCount
size_t entriesCount()
Definition ResourcesAlbum.cpp:18
-
ResourcesContainer::wrappers
std::vector< ResourceContentWrapper * > wrappers
Definition ResourcesAlbum.h:24
-
ResourcesContainer::ResourcesContainer
ResourcesContainer()
Definition ResourcesAlbum.h:14
-
ResourcesContainer::~ResourcesContainer
virtual ~ResourcesContainer()
Definition ResourcesAlbum.h:15
+
ResourcesContainer::wrappers
std::vector< ResourceContentWrapper * > wrappers
Definition ResourcesAlbum.h:24
+
ResourcesContainer::ResourcesContainer
ResourcesContainer()
Definition ResourcesAlbum.h:14
+
ResourcesContainer::~ResourcesContainer
virtual ~ResourcesContainer()
Definition ResourcesAlbum.h:15
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_rich_hdr_wrapper_8cpp.html b/_rich_hdr_wrapper_8cpp.html index 1d49f126..da23b951 100644 --- a/_rich_hdr_wrapper_8cpp.html +++ b/_rich_hdr_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/RichHdrWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -87,11 +89,11 @@ $(function() { - + - + - +

Functions

DWORD rol32 (DWORD temp, DWORD i)
DWORD rol32 (DWORD temp, DWORD i)
 
const QString RichHdr_ProdIdToVSversion (WORD i)
const QString RichHdr_ProdIdToVSversion (WORD i)
 
const QString RichHdr_translateProdId (WORD prodId)
const QString RichHdr_translateProdId (WORD prodId)
 

Function Documentation

@@ -104,8 +106,7 @@ Functions const QString RichHdr_ProdIdToVSversion ( - WORD  - i) + WORD i) @@ -134,8 +135,7 @@ Here is the call graph for this function: const QString RichHdr_translateProdId ( - WORD  - prodId) + WORD prodId) @@ -167,19 +167,12 @@ Here is the call graph for this function: DWORD rol32 ( - DWORD  - temp, + DWORD temp, - DWORD  - i  - - - - ) - + DWORD i ) @@ -206,7 +199,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_rich_hdr_wrapper_8cpp_source.html b/_rich_hdr_wrapper_8cpp_source.html index 664cdc0f..b3cdf6db 100644 --- a/_rich_hdr_wrapper_8cpp_source.html +++ b/_rich_hdr_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/RichHdrWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -659,9 +661,9 @@ $(document).ready(function() { init_codefold(0); });
INVALID_ADDR
const offset_t INVALID_ADDR
Definition AbstractByteBuffer.h:18
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
PEFile.h
-
RichHdr_translateProdId
const QString RichHdr_translateProdId(WORD prodId)
Definition RichHdrWrapper.cpp:265
-
rol32
DWORD rol32(DWORD temp, DWORD i)
Definition RichHdrWrapper.cpp:153
-
RichHdr_ProdIdToVSversion
const QString RichHdr_ProdIdToVSversion(WORD i)
Definition RichHdrWrapper.cpp:231
+
RichHdr_translateProdId
const QString RichHdr_translateProdId(WORD prodId)
Definition RichHdrWrapper.cpp:265
+
rol32
DWORD rol32(DWORD temp, DWORD i)
Definition RichHdrWrapper.cpp:153
+
RichHdr_ProdIdToVSversion
const QString RichHdr_ProdIdToVSversion(WORD i)
Definition RichHdrWrapper.cpp:231
RichHdrWrapper.h
ExeElementWrapper::getOffset
virtual offset_t getOffset()
Definition ExeElementWrapper.cpp:39
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
@@ -673,9 +675,9 @@ $(document).ready(function() { init_codefold(0); });
PEElementWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:17
PEFile::getRichHeaderBgn
pe::RICH_DANS_HEADER * getRichHeaderBgn(pe::RICH_SIGNATURE *sign)
Definition PEFile.cpp:193
PEFile::getRichHeaderSign
pe::RICH_SIGNATURE * getRichHeaderSign()
Definition PEFile.cpp:220
-
RichHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
-
RichHdrWrapper::getPtr
virtual void * getPtr()
Definition RichHdrWrapper.cpp:18
-
RichHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:57
+
RichHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
+
RichHdrWrapper::getPtr
virtual void * getPtr()
Definition RichHdrWrapper.cpp:18
+
RichHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:57
RichHdrWrapper::DANS_ID
@ DANS_ID
Definition RichHdrWrapper.h:15
RichHdrWrapper::CPAD2
@ CPAD2
Definition RichHdrWrapper.h:18
RichHdrWrapper::CHECKSUM
@ CHECKSUM
Definition RichHdrWrapper.h:21
@@ -686,20 +688,20 @@ $(document).ready(function() { init_codefold(0); });
RichHdrWrapper::COMP_ID_1
@ COMP_ID_1
Definition RichHdrWrapper.h:19
RichHdrWrapper::dansHdr
pe::RICH_DANS_HEADER * dansHdr
Definition RichHdrWrapper.h:50
RichHdrWrapper::compIdCounter
size_t compIdCounter
Definition RichHdrWrapper.h:51
-
RichHdrWrapper::wrap
virtual bool wrap()
Definition RichHdrWrapper.cpp:6
-
RichHdrWrapper::getSize
virtual bufsize_t getSize()
Definition RichHdrWrapper.cpp:37
-
RichHdrWrapper::getCompId
pe::RICH_COMP_ID getCompId(size_t fieldId)
Definition RichHdrWrapper.cpp:129
-
RichHdrWrapper::calcChecksum
DWORD calcChecksum()
Definition RichHdrWrapper.cpp:158
-
RichHdrWrapper::compIdCount
size_t compIdCount()
Definition RichHdrWrapper.cpp:26
-
RichHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:83
-
RichHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RichHdrWrapper.cpp:51
-
RichHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RichHdrWrapper.cpp:109
+
RichHdrWrapper::wrap
virtual bool wrap()
Definition RichHdrWrapper.cpp:6
+
RichHdrWrapper::getSize
virtual bufsize_t getSize()
Definition RichHdrWrapper.cpp:37
+
RichHdrWrapper::getCompId
pe::RICH_COMP_ID getCompId(size_t fieldId)
Definition RichHdrWrapper.cpp:129
+
RichHdrWrapper::calcChecksum
DWORD calcChecksum()
Definition RichHdrWrapper.cpp:158
+
RichHdrWrapper::compIdCount
size_t compIdCount()
Definition RichHdrWrapper.cpp:26
+
RichHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:83
+
RichHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RichHdrWrapper.cpp:51
+
RichHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RichHdrWrapper.cpp:109
RichHdrWrapper::richSign
pe::RICH_SIGNATURE * richSign
Definition RichHdrWrapper.h:49
-
RichHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition RichHdrWrapper.cpp:191
+
RichHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition RichHdrWrapper.cpp:191
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_rich_hdr_wrapper_8h.html b/_rich_hdr_wrapper_8h.html index d593d159..d6fa864c 100644 --- a/_rich_hdr_wrapper_8h.html +++ b/_rich_hdr_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/RichHdrWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -92,9 +94,9 @@ Classes - + - +

Functions

const QString RichHdr_ProdIdToVSversion (WORD prodId)
const QString RichHdr_ProdIdToVSversion (WORD prodId)
 
const QString RichHdr_translateProdId (WORD prodId)
const QString RichHdr_translateProdId (WORD prodId)
 

Function Documentation

@@ -107,8 +109,7 @@ Functions const QString RichHdr_ProdIdToVSversion ( - WORD  - prodId) + WORD prodId) @@ -137,8 +138,7 @@ Here is the call graph for this function: const QString RichHdr_translateProdId ( - WORD  - prodId) + WORD prodId) @@ -161,7 +161,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_rich_hdr_wrapper_8h_source.html b/_rich_hdr_wrapper_8h_source.html index 8d55f517..89afe32d 100644 --- a/_rich_hdr_wrapper_8h_source.html +++ b/_rich_hdr_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/RichHdrWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -151,38 +153,38 @@ $(document).ready(function() { init_codefold(0); });
Executable::addr_type
addr_type
Definition Executable.h:35
PEElementWrapper
Definition PENodeWrapper.h:9
PEFile
Definition PEFile.h:41
-
RichHdrWrapper
Definition RichHdrWrapper.h:10
+
RichHdrWrapper
Definition RichHdrWrapper.h:10
RichHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(uint32_t fieldId, uint32_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:186
RichHdrWrapper::getPtr
virtual void * getPtr()
Definition RichHdrWrapper.cpp:18
RichHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:57
-
RichHdrWrapper::FieldID
FieldID
Definition RichHdrWrapper.h:13
-
RichHdrWrapper::DANS_ID
@ DANS_ID
Definition RichHdrWrapper.h:15
-
RichHdrWrapper::CPAD2
@ CPAD2
Definition RichHdrWrapper.h:18
-
RichHdrWrapper::CHECKSUM
@ CHECKSUM
Definition RichHdrWrapper.h:21
-
RichHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RichHdrWrapper.h:22
-
RichHdrWrapper::CPAD1
@ CPAD1
Definition RichHdrWrapper.h:17
-
RichHdrWrapper::CPAD0
@ CPAD0
Definition RichHdrWrapper.h:16
-
RichHdrWrapper::RICH_ID
@ RICH_ID
Definition RichHdrWrapper.h:20
-
RichHdrWrapper::COMP_ID_1
@ COMP_ID_1
Definition RichHdrWrapper.h:19
-
RichHdrWrapper::NONE
@ NONE
Definition RichHdrWrapper.h:14
-
RichHdrWrapper::dansHdr
pe::RICH_DANS_HEADER * dansHdr
Definition RichHdrWrapper.h:50
-
RichHdrWrapper::RichHdrWrapper
RichHdrWrapper(PEFile *pe)
Definition RichHdrWrapper.h:25
-
RichHdrWrapper::compIdCounter
size_t compIdCounter
Definition RichHdrWrapper.h:51
+
RichHdrWrapper::FieldID
FieldID
Definition RichHdrWrapper.h:13
+
RichHdrWrapper::DANS_ID
@ DANS_ID
Definition RichHdrWrapper.h:15
+
RichHdrWrapper::CPAD2
@ CPAD2
Definition RichHdrWrapper.h:18
+
RichHdrWrapper::CHECKSUM
@ CHECKSUM
Definition RichHdrWrapper.h:21
+
RichHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition RichHdrWrapper.h:22
+
RichHdrWrapper::CPAD1
@ CPAD1
Definition RichHdrWrapper.h:17
+
RichHdrWrapper::CPAD0
@ CPAD0
Definition RichHdrWrapper.h:16
+
RichHdrWrapper::RICH_ID
@ RICH_ID
Definition RichHdrWrapper.h:20
+
RichHdrWrapper::COMP_ID_1
@ COMP_ID_1
Definition RichHdrWrapper.h:19
+
RichHdrWrapper::NONE
@ NONE
Definition RichHdrWrapper.h:14
+
RichHdrWrapper::dansHdr
pe::RICH_DANS_HEADER * dansHdr
Definition RichHdrWrapper.h:50
+
RichHdrWrapper::RichHdrWrapper
RichHdrWrapper(PEFile *pe)
Definition RichHdrWrapper.h:25
+
RichHdrWrapper::compIdCounter
size_t compIdCounter
Definition RichHdrWrapper.h:51
RichHdrWrapper::wrap
virtual bool wrap()
Definition RichHdrWrapper.cpp:6
RichHdrWrapper::getSize
virtual bufsize_t getSize()
Definition RichHdrWrapper.cpp:37
RichHdrWrapper::getCompId
pe::RICH_COMP_ID getCompId(size_t fieldId)
Definition RichHdrWrapper.cpp:129
-
RichHdrWrapper::getName
virtual QString getName()
Definition RichHdrWrapper.h:34
+
RichHdrWrapper::getName
virtual QString getName()
Definition RichHdrWrapper.h:34
RichHdrWrapper::calcChecksum
DWORD calcChecksum()
Definition RichHdrWrapper.cpp:158
RichHdrWrapper::compIdCount
size_t compIdCount()
Definition RichHdrWrapper.cpp:26
RichHdrWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)
Definition RichHdrWrapper.cpp:83
RichHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition RichHdrWrapper.cpp:51
RichHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition RichHdrWrapper.cpp:109
-
RichHdrWrapper::richSign
pe::RICH_SIGNATURE * richSign
Definition RichHdrWrapper.h:49
+
RichHdrWrapper::richSign
pe::RICH_SIGNATURE * richSign
Definition RichHdrWrapper.h:49
RichHdrWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition RichHdrWrapper.cpp:191
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_sect_hdrs_wrapper_8cpp.html b/_sect_hdrs_wrapper_8cpp.html index bcf6ad61..dedb8d5d 100644 --- a/_sect_hdrs_wrapper_8cpp.html +++ b/_sect_hdrs_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/SectHdrsWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_sect_hdrs_wrapper_8cpp_source.html b/_sect_hdrs_wrapper_8cpp_source.html index 9c1639fc..0eb59e7f 100644 --- a/_sect_hdrs_wrapper_8cpp_source.html +++ b/_sect_hdrs_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/SectHdrsWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -774,30 +776,30 @@ $(document).ready(function() { init_codefold(0); });
PEFile::getAlignment
virtual bufsize_t getAlignment(Executable::addr_type aType) const
Definition PEFile.h:70
PENodeWrapper::m_PE
PEFile * m_PE
Definition PENodeWrapper.h:36
SectHdrsWrapper::rSec
std::map< offset_t, SectionHdrWrapper * > rSec
Definition SectHdrsWrapper.h:170
-
SectHdrsWrapper::printSectionsMapping
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:563
-
SectHdrsWrapper::addEntry
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
-
SectHdrsWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:496
-
SectHdrsWrapper::canAddEntry
bool canAddEntry()
Definition SectHdrsWrapper.cpp:377
-
SectHdrsWrapper::loadNextEntry
virtual bool loadNextEntry(size_t entryNum)
Definition SectHdrsWrapper.cpp:411
-
SectHdrsWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:518
-
SectHdrsWrapper::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
-
SectHdrsWrapper::isMyEntryType
bool isMyEntryType(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:368
-
SectHdrsWrapper::reloadMapping
virtual void reloadMapping()
Definition SectHdrsWrapper.cpp:460
-
SectHdrsWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:490
+
SectHdrsWrapper::printSectionsMapping
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:563
+
SectHdrsWrapper::addEntry
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
+
SectHdrsWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:496
+
SectHdrsWrapper::canAddEntry
bool canAddEntry()
Definition SectHdrsWrapper.cpp:377
+
SectHdrsWrapper::loadNextEntry
virtual bool loadNextEntry(size_t entryNum)
Definition SectHdrsWrapper.cpp:411
+
SectHdrsWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:518
+
SectHdrsWrapper::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
+
SectHdrsWrapper::isMyEntryType
bool isMyEntryType(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:368
+
SectHdrsWrapper::reloadMapping
virtual void reloadMapping()
Definition SectHdrsWrapper.cpp:460
+
SectHdrsWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:490
SectHdrsWrapper::SECT_COUNT_MAX
static size_t SECT_COUNT_MAX
Definition SectHdrsWrapper.h:118
SectHdrsWrapper::vSec
std::map< offset_t, SectionHdrWrapper * > vSec
Definition SectHdrsWrapper.h:169
-
SectHdrsWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:473
-
SectHdrsWrapper::addMapping
void addMapping(SectionHdrWrapper *sec)
Definition SectHdrsWrapper.cpp:426
-
SectHdrsWrapper::clear
void clear()
Definition SectHdrsWrapper.cpp:404
+
SectHdrsWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:473
+
SectHdrsWrapper::addMapping
void addMapping(SectionHdrWrapper *sec)
Definition SectHdrsWrapper.cpp:426
+
SectHdrsWrapper::clear
void clear()
Definition SectHdrsWrapper.cpp:404
SectHdrsWrapper::SECT_INVALID_INDEX
static size_t SECT_INVALID_INDEX
Definition SectHdrsWrapper.h:119
-
SectHdrsWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SectHdrsWrapper.cpp:485
+
SectHdrsWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SectHdrsWrapper.cpp:485
SectionHdrWrapper
Definition SectHdrsWrapper.h:8
-
SectionHdrWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:69
-
SectionHdrWrapper::splitCharacteristics
static std::vector< DWORD > splitCharacteristics(DWORD characteristics)
Definition SectHdrsWrapper.cpp:42
-
SectionHdrWrapper::getMappedVirtualSize
bufsize_t getMappedVirtualSize()
Definition SectHdrsWrapper.cpp:297
-
SectionHdrWrapper::getName
virtual QString getName()
Definition SectHdrsWrapper.cpp:124
-
SectionHdrWrapper::reloadName
bool reloadName()
Definition SectHdrsWrapper.cpp:95
-
SectionHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:154
+
SectionHdrWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:69
+
SectionHdrWrapper::splitCharacteristics
static std::vector< DWORD > splitCharacteristics(DWORD characteristics)
Definition SectHdrsWrapper.cpp:42
+
SectionHdrWrapper::getMappedVirtualSize
bufsize_t getMappedVirtualSize()
Definition SectHdrsWrapper.cpp:297
+
SectionHdrWrapper::getName
virtual QString getName()
Definition SectHdrsWrapper.cpp:124
+
SectionHdrWrapper::reloadName
bool reloadName()
Definition SectHdrsWrapper.cpp:95
+
SectionHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:154
SectionHdrWrapper::RELOC_PTR
@ RELOC_PTR
Definition SectHdrsWrapper.h:27
SectionHdrWrapper::VPTR
@ VPTR
Definition SectHdrsWrapper.h:22
SectionHdrWrapper::RSIZE
@ RSIZE
Definition SectHdrsWrapper.h:24
@@ -808,23 +810,23 @@ $(document).ready(function() { init_codefold(0); });
SectionHdrWrapper::NAME
@ NAME
Definition SectHdrsWrapper.h:20
SectionHdrWrapper::RELOC_NUM
@ RELOC_NUM
Definition SectHdrsWrapper.h:30
SectionHdrWrapper::CHARACT
@ CHARACT
Definition SectHdrsWrapper.h:33
-
SectionHdrWrapper::getContentDeclaredOffset
offset_t getContentDeclaredOffset(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:193
-
SectionHdrWrapper::initSecCharacter
static void initSecCharacter(std::map< DWORD, QString > &secHdrCharact)
Definition SectHdrsWrapper.cpp:26
+
SectionHdrWrapper::getContentDeclaredOffset
offset_t getContentDeclaredOffset(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:193
+
SectionHdrWrapper::initSecCharacter
static void initSecCharacter(std::map< DWORD, QString > &secHdrCharact)
Definition SectHdrsWrapper.cpp:26
SectionHdrWrapper::sectNum
size_t sectNum
Definition SectHdrsWrapper.h:104
-
SectionHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:131
-
SectionHdrWrapper::getContentDeclaredSize
bufsize_t getContentDeclaredSize(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:238
-
SectionHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:172
-
SectionHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition SectHdrsWrapper.cpp:57
-
SectionHdrWrapper::getContentEndOffset
offset_t getContentEndOffset(Executable::addr_type aType, bool roundup)
Definition SectHdrsWrapper.cpp:227
-
SectionHdrWrapper::getContentOffset
offset_t getContentOffset(Executable::addr_type aType, bool useMapped=true)
Definition SectHdrsWrapper.cpp:206
-
SectionHdrWrapper::getSecHdrAccessRightsDesc
static QString getSecHdrAccessRightsDesc(DWORD characteristics)
Definition SectHdrsWrapper.cpp:13
-
SectionHdrWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:79
-
SectionHdrWrapper::getMappedRawSize
bufsize_t getMappedRawSize()
Definition SectHdrsWrapper.cpp:252
+
SectionHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:131
+
SectionHdrWrapper::getContentDeclaredSize
bufsize_t getContentDeclaredSize(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:238
+
SectionHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:172
+
SectionHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition SectHdrsWrapper.cpp:57
+
SectionHdrWrapper::getContentEndOffset
offset_t getContentEndOffset(Executable::addr_type aType, bool roundup)
Definition SectHdrsWrapper.cpp:227
+
SectionHdrWrapper::getContentOffset
offset_t getContentOffset(Executable::addr_type aType, bool useMapped=true)
Definition SectHdrsWrapper.cpp:206
+
SectionHdrWrapper::getSecHdrAccessRightsDesc
static QString getSecHdrAccessRightsDesc(DWORD characteristics)
Definition SectHdrsWrapper.cpp:13
+
SectionHdrWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:79
+
SectionHdrWrapper::getMappedRawSize
bufsize_t getMappedRawSize()
Definition SectHdrsWrapper.cpp:252
SectionHdrWrapper::mappedName
QString mappedName
Definition SectHdrsWrapper.h:88
SectionHdrWrapper::SECNAME_LEN
static const size_t SECNAME_LEN
Definition SectHdrsWrapper.h:10
-
SectionHdrWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:183
+
SectionHdrWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:183
SectionHdrWrapper::name
char * name
Definition SectHdrsWrapper.h:103
-
SectionHdrWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:118
+
SectionHdrWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:118
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
WrappedValue::STRING
@ STRING
Definition WrappedValue.h:18
@@ -836,7 +838,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_sect_hdrs_wrapper_8h.html b/_sect_hdrs_wrapper_8h.html index 39a2d2a4..906b454f 100644 --- a/_sect_hdrs_wrapper_8h.html +++ b/_sect_hdrs_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/SectHdrsWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_sect_hdrs_wrapper_8h_source.html b/_sect_hdrs_wrapper_8h_source.html index b6b4e6f8..59da44ef 100644 --- a/_sect_hdrs_wrapper_8h_source.html +++ b/_sect_hdrs_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/SectHdrsWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -286,10 +288,10 @@ $(document).ready(function() { init_codefold(0); });
Executable::addr_type
addr_type
Definition Executable.h:35
PEFile
Definition PEFile.h:41
PENodeWrapper
Definition PENodeWrapper.h:25
-
SectHdrsWrapper
Definition SectHdrsWrapper.h:116
-
SectHdrsWrapper::SectHdrsWrapper
SectHdrsWrapper(PEFile *pe)
Definition SectHdrsWrapper.h:122
-
SectHdrsWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:134
-
SectHdrsWrapper::rSec
std::map< offset_t, SectionHdrWrapper * > rSec
Definition SectHdrsWrapper.h:170
+
SectHdrsWrapper
Definition SectHdrsWrapper.h:116
+
SectHdrsWrapper::SectHdrsWrapper
SectHdrsWrapper(PEFile *pe)
Definition SectHdrsWrapper.h:122
+
SectHdrsWrapper::getFieldSize
virtual bufsize_t getFieldSize(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:134
+
SectHdrsWrapper::rSec
std::map< offset_t, SectionHdrWrapper * > rSec
Definition SectHdrsWrapper.h:170
SectHdrsWrapper::printSectionsMapping
void printSectionsMapping(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:563
SectHdrsWrapper::addEntry
ExeNodeWrapper * addEntry(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:388
SectHdrsWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:496
@@ -299,50 +301,50 @@ $(document).ready(function() { init_codefold(0); });
SectHdrsWrapper::getSecHdrAtOffset
SectionHdrWrapper * getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
Definition SectHdrsWrapper.cpp:524
SectHdrsWrapper::isMyEntryType
bool isMyEntryType(ExeNodeWrapper *entry)
Definition SectHdrsWrapper.cpp:368
SectHdrsWrapper::reloadMapping
virtual void reloadMapping()
Definition SectHdrsWrapper.cpp:460
-
SectHdrsWrapper::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition SectHdrsWrapper.h:153
+
SectHdrsWrapper::getSecHdr
SectionHdrWrapper * getSecHdr(size_t index) const
Definition SectHdrsWrapper.h:153
SectHdrsWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:490
-
SectHdrsWrapper::SECT_COUNT_MAX
static size_t SECT_COUNT_MAX
Definition SectHdrsWrapper.h:118
-
SectHdrsWrapper::vSec
std::map< offset_t, SectionHdrWrapper * > vSec
Definition SectHdrsWrapper.h:169
-
SectHdrsWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:133
+
SectHdrsWrapper::SECT_COUNT_MAX
static size_t SECT_COUNT_MAX
Definition SectHdrsWrapper.h:118
+
SectHdrsWrapper::vSec
std::map< offset_t, SectionHdrWrapper * > vSec
Definition SectHdrsWrapper.h:169
+
SectHdrsWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SectHdrsWrapper.h:133
SectHdrsWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:473
-
SectHdrsWrapper::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:141
+
SectHdrsWrapper::getSecIndex
size_t getSecIndex(SectionHdrWrapper *sec) const
Definition SectHdrsWrapper.h:141
SectHdrsWrapper::addMapping
void addMapping(SectionHdrWrapper *sec)
Definition SectHdrsWrapper.cpp:426
SectHdrsWrapper::clear
void clear()
Definition SectHdrsWrapper.cpp:404
-
SectHdrsWrapper::getName
virtual QString getName()
Definition SectHdrsWrapper.h:129
-
SectHdrsWrapper::SECT_INVALID_INDEX
static size_t SECT_INVALID_INDEX
Definition SectHdrsWrapper.h:119
+
SectHdrsWrapper::getName
virtual QString getName()
Definition SectHdrsWrapper.h:129
+
SectHdrsWrapper::SECT_INVALID_INDEX
static size_t SECT_INVALID_INDEX
Definition SectHdrsWrapper.h:119
SectHdrsWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SectHdrsWrapper.cpp:485
-
SectionHdrWrapper
Definition SectHdrsWrapper.h:8
+
SectionHdrWrapper
Definition SectHdrsWrapper.h:8
SectionHdrWrapper::wrap
bool wrap()
Definition SectHdrsWrapper.cpp:69
-
SectionHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SectHdrsWrapper.h:53
-
SectionHdrWrapper::getRawPtr
DWORD getRawPtr()
Definition SectHdrsWrapper.h:71
+
SectionHdrWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SectHdrsWrapper.h:53
+
SectionHdrWrapper::getRawPtr
DWORD getRawPtr()
Definition SectHdrsWrapper.h:71
SectionHdrWrapper::splitCharacteristics
static std::vector< DWORD > splitCharacteristics(DWORD characteristics)
Definition SectHdrsWrapper.cpp:42
-
SectionHdrWrapper::getCharacteristics
DWORD getCharacteristics()
Definition SectHdrsWrapper.h:69
-
SectionHdrWrapper::~SectionHdrWrapper
~SectionHdrWrapper()
Definition SectHdrsWrapper.h:40
+
SectionHdrWrapper::getCharacteristics
DWORD getCharacteristics()
Definition SectHdrsWrapper.h:69
+
SectionHdrWrapper::~SectionHdrWrapper
~SectionHdrWrapper()
Definition SectHdrsWrapper.h:40
SectionHdrWrapper::getMappedVirtualSize
bufsize_t getMappedVirtualSize()
Definition SectHdrsWrapper.cpp:297
SectionHdrWrapper::getName
virtual QString getName()
Definition SectHdrsWrapper.cpp:124
-
SectionHdrWrapper::setCharacteristics
bool setCharacteristics(DWORD newCharacteristics)
Definition SectHdrsWrapper.h:77
-
SectionHdrWrapper::SectionHdrWrapper
SectionHdrWrapper(PEFile *pe, size_t sectionNumber)
Definition SectHdrsWrapper.h:37
+
SectionHdrWrapper::setCharacteristics
bool setCharacteristics(DWORD newCharacteristics)
Definition SectHdrsWrapper.h:77
+
SectionHdrWrapper::SectionHdrWrapper
SectionHdrWrapper(PEFile *pe, size_t sectionNumber)
Definition SectHdrsWrapper.h:37
SectionHdrWrapper::reloadName
bool reloadName()
Definition SectHdrsWrapper.cpp:95
SectionHdrWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SectHdrsWrapper.cpp:154
-
SectionHdrWrapper::SecFieldId
SecFieldId
Definition SectHdrsWrapper.h:19
-
SectionHdrWrapper::RELOC_PTR
@ RELOC_PTR
Definition SectHdrsWrapper.h:27
-
SectionHdrWrapper::VPTR
@ VPTR
Definition SectHdrsWrapper.h:22
-
SectionHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition SectHdrsWrapper.h:34
-
SectionHdrWrapper::RSIZE
@ RSIZE
Definition SectHdrsWrapper.h:24
-
SectionHdrWrapper::LINENUM_PTR
@ LINENUM_PTR
Definition SectHdrsWrapper.h:28
-
SectionHdrWrapper::LINENUM_NUM
@ LINENUM_NUM
Definition SectHdrsWrapper.h:31
-
SectionHdrWrapper::VSIZE
@ VSIZE
Definition SectHdrsWrapper.h:21
-
SectionHdrWrapper::RPTR
@ RPTR
Definition SectHdrsWrapper.h:25
-
SectionHdrWrapper::NAME
@ NAME
Definition SectHdrsWrapper.h:20
-
SectionHdrWrapper::RELOC_NUM
@ RELOC_NUM
Definition SectHdrsWrapper.h:30
-
SectionHdrWrapper::CHARACT
@ CHARACT
Definition SectHdrsWrapper.h:33
+
SectionHdrWrapper::SecFieldId
SecFieldId
Definition SectHdrsWrapper.h:19
+
SectionHdrWrapper::RELOC_PTR
@ RELOC_PTR
Definition SectHdrsWrapper.h:27
+
SectionHdrWrapper::VPTR
@ VPTR
Definition SectHdrsWrapper.h:22
+
SectionHdrWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition SectHdrsWrapper.h:34
+
SectionHdrWrapper::RSIZE
@ RSIZE
Definition SectHdrsWrapper.h:24
+
SectionHdrWrapper::LINENUM_PTR
@ LINENUM_PTR
Definition SectHdrsWrapper.h:28
+
SectionHdrWrapper::LINENUM_NUM
@ LINENUM_NUM
Definition SectHdrsWrapper.h:31
+
SectionHdrWrapper::VSIZE
@ VSIZE
Definition SectHdrsWrapper.h:21
+
SectionHdrWrapper::RPTR
@ RPTR
Definition SectHdrsWrapper.h:25
+
SectionHdrWrapper::NAME
@ NAME
Definition SectHdrsWrapper.h:20
+
SectionHdrWrapper::RELOC_NUM
@ RELOC_NUM
Definition SectHdrsWrapper.h:30
+
SectionHdrWrapper::CHARACT
@ CHARACT
Definition SectHdrsWrapper.h:33
SectionHdrWrapper::getContentDeclaredOffset
offset_t getContentDeclaredOffset(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:193
SectionHdrWrapper::initSecCharacter
static void initSecCharacter(std::map< DWORD, QString > &secHdrCharact)
Definition SectHdrsWrapper.cpp:26
-
SectionHdrWrapper::sectNum
size_t sectNum
Definition SectHdrsWrapper.h:104
-
SectionHdrWrapper::SectionHdrWrapper
SectionHdrWrapper(PEFile *pe, IMAGE_SECTION_HEADER *v_header)
Definition SectHdrsWrapper.h:91
+
SectionHdrWrapper::sectNum
size_t sectNum
Definition SectHdrsWrapper.h:104
+
SectionHdrWrapper::SectionHdrWrapper
SectionHdrWrapper(PEFile *pe, IMAGE_SECTION_HEADER *v_header)
Definition SectHdrsWrapper.h:91
SectionHdrWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:131
-
SectionHdrWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition SectHdrsWrapper.h:54
-
SectionHdrWrapper::getVirtualPtr
DWORD getVirtualPtr()
Definition SectHdrsWrapper.h:73
+
SectionHdrWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition SectHdrsWrapper.h:54
+
SectionHdrWrapper::getVirtualPtr
DWORD getVirtualPtr()
Definition SectHdrsWrapper.h:73
SectionHdrWrapper::getContentDeclaredSize
bufsize_t getContentDeclaredSize(Executable::addr_type aType)
Definition SectHdrsWrapper.cpp:238
SectionHdrWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:172
SectionHdrWrapper::translateCharacteristics
static QString translateCharacteristics(DWORD charact)
Definition SectHdrsWrapper.cpp:57
@@ -351,16 +353,16 @@ $(document).ready(function() { init_codefold(0); });
SectionHdrWrapper::getSecHdrAccessRightsDesc
static QString getSecHdrAccessRightsDesc(DWORD characteristics)
Definition SectHdrsWrapper.cpp:13
SectionHdrWrapper::getPtr
virtual void * getPtr()
Definition SectHdrsWrapper.cpp:79
SectionHdrWrapper::getMappedRawSize
bufsize_t getMappedRawSize()
Definition SectHdrsWrapper.cpp:252
-
SectionHdrWrapper::mappedName
QString mappedName
Definition SectHdrsWrapper.h:88
-
SectionHdrWrapper::SECNAME_LEN
static const size_t SECNAME_LEN
Definition SectHdrsWrapper.h:10
+
SectionHdrWrapper::mappedName
QString mappedName
Definition SectHdrsWrapper.h:88
+
SectionHdrWrapper::SECNAME_LEN
static const size_t SECNAME_LEN
Definition SectHdrsWrapper.h:10
SectionHdrWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SectHdrsWrapper.cpp:183
-
SectionHdrWrapper::name
char * name
Definition SectHdrsWrapper.h:103
+
SectionHdrWrapper::name
char * name
Definition SectHdrsWrapper.h:103
SectionHdrWrapper::getSize
virtual bufsize_t getSize()
Definition SectHdrsWrapper.cpp:118
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_security_dir_wrapper_8cpp.html b/_security_dir_wrapper_8cpp.html index 41c1a994..fcdc6078 100644 --- a/_security_dir_wrapper_8cpp.html +++ b/_security_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/SecurityDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_security_dir_wrapper_8cpp_source.html b/_security_dir_wrapper_8cpp_source.html index f6b98d83..c92eba9b 100644 --- a/_security_dir_wrapper_8cpp_source.html +++ b/_security_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/SecurityDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -214,26 +216,26 @@ $(document).ready(function() { init_codefold(0); });
ExeElementWrapper::m_Exe
Executable * m_Exe
Definition ExeElementWrapper.h:65
Executable::RAW
@ RAW
Definition Executable.h:37
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
-
SecurityDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition SecurityDirWrapper.cpp:97
+
SecurityDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition SecurityDirWrapper.cpp:97
SecurityDirWrapper::TYPE
@ TYPE
Definition SecurityDirWrapper.h:22
SecurityDirWrapper::CERT_LEN
@ CERT_LEN
Definition SecurityDirWrapper.h:20
SecurityDirWrapper::REVISION
@ REVISION
Definition SecurityDirWrapper.h:21
SecurityDirWrapper::CERT_CONTENT
@ CERT_CONTENT
Definition SecurityDirWrapper.h:23
-
SecurityDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SecurityDirWrapper.cpp:67
-
SecurityDirWrapper::getPtr
virtual void * getPtr()
Definition SecurityDirWrapper.cpp:35
-
SecurityDirWrapper::getSize
virtual bufsize_t getSize()
Definition SecurityDirWrapper.cpp:40
-
SecurityDirWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SecurityDirWrapper.cpp:78
+
SecurityDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SecurityDirWrapper.cpp:67
+
SecurityDirWrapper::getPtr
virtual void * getPtr()
Definition SecurityDirWrapper.cpp:35
+
SecurityDirWrapper::getSize
virtual bufsize_t getSize()
Definition SecurityDirWrapper.cpp:40
+
SecurityDirWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SecurityDirWrapper.cpp:78
SecurityDirWrapper::getName
virtual QString getName()
Definition SecurityDirWrapper.h:40
-
SecurityDirWrapper::translateType
QString translateType(int type)
Definition SecurityDirWrapper.cpp:86
-
SecurityDirWrapper::wrap
bool wrap()
Definition SecurityDirWrapper.cpp:14
-
SecurityDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SecurityDirWrapper.cpp:53
+
SecurityDirWrapper::translateType
QString translateType(int type)
Definition SecurityDirWrapper.cpp:86
+
SecurityDirWrapper::wrap
bool wrap()
Definition SecurityDirWrapper.cpp:14
+
SecurityDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SecurityDirWrapper.cpp:53
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
WrappedValue::COMPLEX
@ COMPLEX
Definition WrappedValue.h:20
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_security_dir_wrapper_8h.html b/_security_dir_wrapper_8h.html index 05768e2d..99266ae4 100644 --- a/_security_dir_wrapper_8h.html +++ b/_security_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/SecurityDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_security_dir_wrapper_8h_source.html b/_security_dir_wrapper_8h_source.html index 993941aa..552558d8 100644 --- a/_security_dir_wrapper_8h_source.html +++ b/_security_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/SecurityDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -150,32 +152,32 @@ $(document).ready(function() { init_codefold(0); });
FIELD_NONE
#define FIELD_NONE
Definition ExeElementWrapper.h:9
DataDirEntryWrapper
Definition DataDirEntryWrapper.h:9
PEFile
Definition PEFile.h:41
-
SecurityDirWrapper
Definition SecurityDirWrapper.h:15
+
SecurityDirWrapper
Definition SecurityDirWrapper.h:15
SecurityDirWrapper::translateFieldContent
virtual QString translateFieldContent(size_t fieldId)
Definition SecurityDirWrapper.cpp:97
-
SecurityDirWrapper::SecurityDirFID
SecurityDirFID
Definition SecurityDirWrapper.h:18
-
SecurityDirWrapper::TYPE
@ TYPE
Definition SecurityDirWrapper.h:22
-
SecurityDirWrapper::NONE
@ NONE
Definition SecurityDirWrapper.h:19
-
SecurityDirWrapper::CERT_LEN
@ CERT_LEN
Definition SecurityDirWrapper.h:20
-
SecurityDirWrapper::REVISION
@ REVISION
Definition SecurityDirWrapper.h:21
-
SecurityDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition SecurityDirWrapper.h:24
-
SecurityDirWrapper::CERT_CONTENT
@ CERT_CONTENT
Definition SecurityDirWrapper.h:23
+
SecurityDirWrapper::SecurityDirFID
SecurityDirFID
Definition SecurityDirWrapper.h:18
+
SecurityDirWrapper::TYPE
@ TYPE
Definition SecurityDirWrapper.h:22
+
SecurityDirWrapper::NONE
@ NONE
Definition SecurityDirWrapper.h:19
+
SecurityDirWrapper::CERT_LEN
@ CERT_LEN
Definition SecurityDirWrapper.h:20
+
SecurityDirWrapper::REVISION
@ REVISION
Definition SecurityDirWrapper.h:21
+
SecurityDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition SecurityDirWrapper.h:24
+
SecurityDirWrapper::CERT_CONTENT
@ CERT_CONTENT
Definition SecurityDirWrapper.h:23
SecurityDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition SecurityDirWrapper.cpp:67
SecurityDirWrapper::getPtr
virtual void * getPtr()
Definition SecurityDirWrapper.cpp:35
-
SecurityDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SecurityDirWrapper.h:41
-
SecurityDirWrapper::SecurityDirWrapper
SecurityDirWrapper(PEFile *pe)
Definition SecurityDirWrapper.h:27
-
SecurityDirWrapper::~SecurityDirWrapper
~SecurityDirWrapper()
Definition SecurityDirWrapper.h:33
+
SecurityDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition SecurityDirWrapper.h:41
+
SecurityDirWrapper::SecurityDirWrapper
SecurityDirWrapper(PEFile *pe)
Definition SecurityDirWrapper.h:27
+
SecurityDirWrapper::~SecurityDirWrapper
~SecurityDirWrapper()
Definition SecurityDirWrapper.h:33
SecurityDirWrapper::getSize
virtual bufsize_t getSize()
Definition SecurityDirWrapper.cpp:40
SecurityDirWrapper::containsDataType
virtual WrappedValue::data_type containsDataType(size_t fieldId, size_t subField=FIELD_NONE)
Definition SecurityDirWrapper.cpp:78
-
SecurityDirWrapper::getName
virtual QString getName()
Definition SecurityDirWrapper.h:40
+
SecurityDirWrapper::getName
virtual QString getName()
Definition SecurityDirWrapper.h:40
SecurityDirWrapper::translateType
QString translateType(int type)
Definition SecurityDirWrapper.cpp:86
-
SecurityDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition SecurityDirWrapper.h:42
+
SecurityDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition SecurityDirWrapper.h:42
SecurityDirWrapper::wrap
bool wrap()
Definition SecurityDirWrapper.cpp:14
SecurityDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition SecurityDirWrapper.cpp:53
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_tls_dir_wrapper_8cpp.html b/_tls_dir_wrapper_8cpp.html index 0f27de29..6acab46a 100644 --- a/_tls_dir_wrapper_8cpp.html +++ b/_tls_dir_wrapper_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/TlsDirWrapper.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_tls_dir_wrapper_8cpp_source.html b/_tls_dir_wrapper_8cpp_source.html index 7bf72cec..b004c20f 100644 --- a/_tls_dir_wrapper_8cpp_source.html +++ b/_tls_dir_wrapper_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/TlsDirWrapper.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -261,26 +263,26 @@ $(document).ready(function() { init_codefold(0); });
Executable::toRaw
virtual offset_t toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)
Definition Executable.cpp:85
Executable::getContentAt
BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition Executable.h:57
TlsDirWrapper::getName
virtual QString getName()
Definition TlsDirWrapper.h:32
-
TlsDirWrapper::wrap
bool wrap()
Definition TlsDirWrapper.cpp:4
-
TlsDirWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:35
-
TlsDirWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:27
+
TlsDirWrapper::wrap
bool wrap()
Definition TlsDirWrapper.cpp:4
+
TlsDirWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:35
+
TlsDirWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:27
TlsDirWrapper::CALLBACKS_ADDR
@ CALLBACKS_ADDR
Definition TlsDirWrapper.h:18
TlsDirWrapper::ZEROF_SIZE
@ ZEROF_SIZE
Definition TlsDirWrapper.h:19
TlsDirWrapper::END_ADDR
@ END_ADDR
Definition TlsDirWrapper.h:16
TlsDirWrapper::INDEX_ADDR
@ INDEX_ADDR
Definition TlsDirWrapper.h:17
TlsDirWrapper::CHARACT
@ CHARACT
Definition TlsDirWrapper.h:20
TlsDirWrapper::START_ADDR
@ START_ADDR
Definition TlsDirWrapper.h:15
-
TlsDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition TlsDirWrapper.cpp:71
-
TlsDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition TlsDirWrapper.cpp:89
-
TlsDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition TlsDirWrapper.cpp:102
+
TlsDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition TlsDirWrapper.cpp:71
+
TlsDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition TlsDirWrapper.cpp:89
+
TlsDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition TlsDirWrapper.cpp:102
TlsEntryWrapper
Definition TlsDirWrapper.h:48
-
TlsEntryWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:134
-
TlsEntryWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:115
+
TlsEntryWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:134
+
TlsEntryWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:115
TlsEntryWrapper::CALLBACK_ADDR
@ CALLBACK_ADDR
Definition TlsDirWrapper.h:53
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_tls_dir_wrapper_8h.html b/_tls_dir_wrapper_8h.html index fc85fffe..a3698328 100644 --- a/_tls_dir_wrapper_8h.html +++ b/_tls_dir_wrapper_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/TlsDirWrapper.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_tls_dir_wrapper_8h_source.html b/_tls_dir_wrapper_8h_source.html index bf123f7c..ab23730c 100644 --- a/_tls_dir_wrapper_8h_source.html +++ b/_tls_dir_wrapper_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/TlsDirWrapper.h Source File + + @@ -30,7 +32,7 @@ - + @@ -181,44 +183,44 @@ $(document).ready(function() { init_codefold(0); });
Executable::addr_type
addr_type
Definition Executable.h:35
Executable::VA
@ VA
Definition Executable.h:39
PEFile
Definition PEFile.h:41
-
TlsDirWrapper
Definition TlsDirWrapper.h:10
-
TlsDirWrapper::getName
virtual QString getName()
Definition TlsDirWrapper.h:32
+
TlsDirWrapper
Definition TlsDirWrapper.h:10
+
TlsDirWrapper::getName
virtual QString getName()
Definition TlsDirWrapper.h:32
TlsDirWrapper::wrap
bool wrap()
Definition TlsDirWrapper.cpp:4
TlsDirWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:35
-
TlsDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition TlsDirWrapper.h:33
+
TlsDirWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition TlsDirWrapper.h:33
TlsDirWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:27
-
TlsDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition TlsDirWrapper.h:34
-
TlsDirWrapper::TlsDirFID
TlsDirFID
Definition TlsDirWrapper.h:13
-
TlsDirWrapper::CALLBACKS_ADDR
@ CALLBACKS_ADDR
Definition TlsDirWrapper.h:18
-
TlsDirWrapper::ZEROF_SIZE
@ ZEROF_SIZE
Definition TlsDirWrapper.h:19
-
TlsDirWrapper::END_ADDR
@ END_ADDR
Definition TlsDirWrapper.h:16
-
TlsDirWrapper::INDEX_ADDR
@ INDEX_ADDR
Definition TlsDirWrapper.h:17
-
TlsDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition TlsDirWrapper.h:21
-
TlsDirWrapper::CHARACT
@ CHARACT
Definition TlsDirWrapper.h:20
-
TlsDirWrapper::NONE
@ NONE
Definition TlsDirWrapper.h:14
-
TlsDirWrapper::START_ADDR
@ START_ADDR
Definition TlsDirWrapper.h:15
-
TlsDirWrapper::TlsDirWrapper
TlsDirWrapper(PEFile *pe)
Definition TlsDirWrapper.h:24
+
TlsDirWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition TlsDirWrapper.h:34
+
TlsDirWrapper::TlsDirFID
TlsDirFID
Definition TlsDirWrapper.h:13
+
TlsDirWrapper::CALLBACKS_ADDR
@ CALLBACKS_ADDR
Definition TlsDirWrapper.h:18
+
TlsDirWrapper::ZEROF_SIZE
@ ZEROF_SIZE
Definition TlsDirWrapper.h:19
+
TlsDirWrapper::END_ADDR
@ END_ADDR
Definition TlsDirWrapper.h:16
+
TlsDirWrapper::INDEX_ADDR
@ INDEX_ADDR
Definition TlsDirWrapper.h:17
+
TlsDirWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition TlsDirWrapper.h:21
+
TlsDirWrapper::CHARACT
@ CHARACT
Definition TlsDirWrapper.h:20
+
TlsDirWrapper::NONE
@ NONE
Definition TlsDirWrapper.h:14
+
TlsDirWrapper::START_ADDR
@ START_ADDR
Definition TlsDirWrapper.h:15
+
TlsDirWrapper::TlsDirWrapper
TlsDirWrapper(PEFile *pe)
Definition TlsDirWrapper.h:24
TlsDirWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField)
Definition TlsDirWrapper.cpp:71
TlsDirWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition TlsDirWrapper.cpp:89
TlsDirWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)
Definition TlsDirWrapper.cpp:102
-
TlsEntryWrapper
Definition TlsDirWrapper.h:48
-
TlsEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition TlsDirWrapper.h:70
-
TlsEntryWrapper::getName
virtual QString getName()
Definition TlsDirWrapper.h:64
+
TlsEntryWrapper
Definition TlsDirWrapper.h:48
+
TlsEntryWrapper::getFieldName
virtual QString getFieldName(size_t fieldId)
Definition TlsDirWrapper.h:70
+
TlsEntryWrapper::getName
virtual QString getName()
Definition TlsDirWrapper.h:64
TlsEntryWrapper::getSize
virtual bufsize_t getSize()
Definition TlsDirWrapper.cpp:134
TlsEntryWrapper::getPtr
virtual void * getPtr()
Definition TlsDirWrapper.cpp:115
-
TlsEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition TlsDirWrapper.h:71
-
TlsEntryWrapper::FieldID
FieldID
Definition TlsDirWrapper.h:51
-
TlsEntryWrapper::NONE
@ NONE
Definition TlsDirWrapper.h:52
-
TlsEntryWrapper::CALLBACK_ADDR
@ CALLBACK_ADDR
Definition TlsDirWrapper.h:53
-
TlsEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition TlsDirWrapper.h:54
-
TlsEntryWrapper::TlsEntryWrapper
TlsEntryWrapper(Executable *pe, TlsDirWrapper *parentDir, size_t entryNumber)
Definition TlsDirWrapper.h:57
-
TlsEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition TlsDirWrapper.h:69
-
TlsEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition TlsDirWrapper.h:65
-
TlsEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition TlsDirWrapper.h:66
+
TlsEntryWrapper::containsAddrType
virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)
Definition TlsDirWrapper.h:71
+
TlsEntryWrapper::FieldID
FieldID
Definition TlsDirWrapper.h:51
+
TlsEntryWrapper::NONE
@ NONE
Definition TlsDirWrapper.h:52
+
TlsEntryWrapper::CALLBACK_ADDR
@ CALLBACK_ADDR
Definition TlsDirWrapper.h:53
+
TlsEntryWrapper::FIELD_COUNTER
@ FIELD_COUNTER
Definition TlsDirWrapper.h:54
+
TlsEntryWrapper::TlsEntryWrapper
TlsEntryWrapper(Executable *pe, TlsDirWrapper *parentDir, size_t entryNumber)
Definition TlsDirWrapper.h:57
+
TlsEntryWrapper::getFieldPtr
virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)
Definition TlsDirWrapper.h:69
+
TlsEntryWrapper::getFieldsCount
virtual size_t getFieldsCount()
Definition TlsDirWrapper.h:65
+
TlsEntryWrapper::getSubFieldsCount
virtual size_t getSubFieldsCount()
Definition TlsDirWrapper.h:66
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_util_8cpp.html b/_util_8cpp.html index b1b565a8..a8dc4d78 100644 --- a/_util_8cpp.html +++ b/_util_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/Util.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -87,12 +89,12 @@ $(function() { - +

Macros

#define MAX_LINE   255
#define MAX_LINE   255
 
- +

Functions

bool _isFuncChar (const char c)
bool _isFuncChar (const char c)
 

Macro Definition Documentation

@@ -122,8 +124,7 @@ Functions bool _isFuncChar ( - const char  - c) + const char c) @@ -146,7 +147,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_util_8cpp_source.html b/_util_8cpp_source.html index a61bdb50..18e8f9dd 100644 --- a/_util_8cpp_source.html +++ b/_util_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/Util.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -138,7 +140,7 @@ $(document).ready(function() { init_codefold(0); });
49 for (; i < maxInp; i++) {
50 const char c = inp[i];
51 if (c == '\0') return i; //end of string
-
52 if (!IS_PRINTABLE(c) && !IS_ENDLINE(c)) return 0;
+
52 if (!IS_PRINTABLE(c) && !IS_ENDLINE(c)) break;
53 }
54 if (acceptNotTerminated) return i;
55 return 0;
@@ -152,7 +154,7 @@ $(document).ready(function() { init_codefold(0); });
61 for (; i < maxInp; i++) {
62 const WORD w = inp[i];
63 if (w == 0) return i; //end of string
-
64 if (!IS_PRINTABLE(w) && !IS_ENDLINE(w)) return 0;
+
64 if (!IS_PRINTABLE(w) && !IS_ENDLINE(w)) break;
65 }
66 if (acceptNotTerminated) return i;
67 return 0;
@@ -310,32 +312,32 @@ $(document).ready(function() { init_codefold(0); });
199}
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
MAX_LINE
#define MAX_LINE
Definition Util.cpp:6
-
_isFuncChar
bool _isFuncChar(const char c)
Definition Util.cpp:81
+
MAX_LINE
#define MAX_LINE
Definition Util.cpp:6
+
_isFuncChar
bool _isFuncChar(const char c)
Definition Util.cpp:81
Util.h
IS_ENDLINE
#define IS_ENDLINE(c)
Definition Util.h:12
IS_PRINTABLE
#define IS_PRINTABLE(c)
Definition Util.h:11
DBG_LVL
#define DBG_LVL
Definition Util.h:18
-
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
+
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
Logger::dbg_level
dbg_level
Definition Util.h:25
Logger::D_LVL_COUNT
@ D_LVL_COUNT
Definition Util.h:26
Logger::D_ERROR
@ D_ERROR
Definition Util.h:26
pe_util
Definition Util.h:31
-
pe_util::hasNonPrintable
bool hasNonPrintable(const char *ptr, size_t maxInp)
Definition Util.cpp:70
-
pe_util::forwarderNameLen
size_t forwarderNameLen(const char *ptr, size_t max_len)
Definition Util.cpp:113
-
pe_util::getAsciiLen
size_t getAsciiLen(const char *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:46
-
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition Util.cpp:38
-
pe_util::noWhiteCount
size_t noWhiteCount(char *buf, size_t bufSize)
Definition Util.cpp:136
-
pe_util::validateFuncName
bool validateFuncName(const char *fPtr, size_t bufSize)
Definition Util.cpp:99
-
pe_util::hexdump
void hexdump(BYTE *buf, size_t bufSize, size_t pad)
Definition Util.cpp:177
-
pe_util::isSpaceClear
bool isSpaceClear(void *ptr, uint64_t size)
Definition Util.cpp:158
-
pe_util::getAsciiLenW
size_t getAsciiLenW(const WORD *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:58
-
pe_util::isHexChar
bool isHexChar(char c)
Definition Util.cpp:169
-
pe_util::endsWith
bool endsWith(std::string string, std::string endStr)
Definition Util.cpp:188
+
pe_util::hasNonPrintable
bool hasNonPrintable(const char *ptr, size_t maxInp)
Definition Util.cpp:70
+
pe_util::forwarderNameLen
size_t forwarderNameLen(const char *ptr, size_t max_len)
Definition Util.cpp:113
+
pe_util::getAsciiLen
size_t getAsciiLen(const char *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:46
+
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition Util.cpp:38
+
pe_util::noWhiteCount
size_t noWhiteCount(char *buf, size_t bufSize)
Definition Util.cpp:136
+
pe_util::validateFuncName
bool validateFuncName(const char *fPtr, size_t bufSize)
Definition Util.cpp:99
+
pe_util::hexdump
void hexdump(BYTE *buf, size_t bufSize, size_t pad)
Definition Util.cpp:177
+
pe_util::isSpaceClear
bool isSpaceClear(void *ptr, uint64_t size)
Definition Util.cpp:158
+
pe_util::getAsciiLenW
size_t getAsciiLenW(const WORD *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:58
+
pe_util::isHexChar
bool isHexChar(char c)
Definition Util.cpp:169
+
pe_util::endsWith
bool endsWith(std::string string, std::string endStr)
Definition Util.cpp:188
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_util_8h.html b/_util_8h.html index aabb5941..4cca64f6 100644 --- a/_util_8h.html +++ b/_util_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Util.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -100,17 +102,17 @@ Namespaces - + - + - + - + - + - +

Macros

#define DEFAULT_BUFSIZE   0xFF
#define DEFAULT_BUFSIZE   0xFF
 
#define IS_PRINTABLE(c)   (c >= 0x20 && c < 0x7f)
#define IS_PRINTABLE(c)   (c >= 0x20 && c < 0x7f)
 
#define IS_ENDLINE(c)   (c == 0x0A || c == 0xD)
#define IS_ENDLINE(c)   (c == 0x0A || c == 0xD)
 
#define DBG_LVL   0
#define DBG_LVL   0
 
#define TRACE()   if (DBG_LVL) printf(">%s line: %d [%s]\n", __FUNCTION__, __LINE__, __FILE__);
#define TRACE()   if (DBG_LVL) printf(">%s line: %d [%s]\n", __FUNCTION__, __LINE__, __FILE__);
 
#define LOG(msg)   if (DBG_LVL) printf("%s: %s\n", __FUNCTION__,msg);
#define LOG(msg)   if (DBG_LVL) printf("%s: %s\n", __FUNCTION__,msg);
 
- - +

@@ -199,8 +201,7 @@ Functions

#define IS_ENDLINE ( c) c)    (c == 0x0A || c == 0xD)
@@ -219,8 +220,7 @@ Functions #define IS_PRINTABLE ( -   - c) + c)    (c >= 0x20 && c < 0x7f) @@ -239,9 +239,8 @@ Functions #define LOG ( -   - msg) -    if (DBG_LVL) printf("%s: %s\n", __FUNCTION__,msg); + msg) +    if (DBG_LVL) printf("%s: %s\n", __FUNCTION__,msg);
@@ -259,8 +258,8 @@ Functions #define TRACE ( - ) -    if (DBG_LVL) printf(">%s line: %d [%s]\n", __FUNCTION__, __LINE__, __FILE__); + ) +    if (DBG_LVL) printf(">%s line: %d [%s]\n", __FUNCTION__, __LINE__, __FILE__);
@@ -272,7 +271,7 @@ Functions
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_util_8h_source.html b/_util_8h_source.html index 10e3b9ec..a5c55295 100644 --- a/_util_8h_source.html +++ b/_util_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/Util.h Source File + + @@ -30,7 +32,7 @@ - + @@ -161,33 +163,33 @@ $(document).ready(function() { init_codefold(0); });
68
_getNumValue
INT_TYPE _getNumValue(void *ptr)
Definition AbstractByteBuffer.cpp:291
-
IS_PRINTABLE
#define IS_PRINTABLE(c)
Definition Util.h:11
-
Logger
Definition Util.h:24
+
IS_PRINTABLE
#define IS_PRINTABLE(c)
Definition Util.h:11
+
Logger
Definition Util.h:24
Logger::append
bool append(dbg_level lvl, const char *format,...)
Definition Util.cpp:8
-
Logger::dbg_level
dbg_level
Definition Util.h:25
-
Logger::D_LVL_COUNT
@ D_LVL_COUNT
Definition Util.h:26
-
Logger::D_ERROR
@ D_ERROR
Definition Util.h:26
-
Logger::D_WARNING
@ D_WARNING
Definition Util.h:26
-
Logger::D_INFO
@ D_INFO
Definition Util.h:26
-
pe_util
Definition Util.h:31
+
Logger::dbg_level
dbg_level
Definition Util.h:25
+
Logger::D_LVL_COUNT
@ D_LVL_COUNT
Definition Util.h:26
+
Logger::D_ERROR
@ D_ERROR
Definition Util.h:26
+
Logger::D_WARNING
@ D_WARNING
Definition Util.h:26
+
Logger::D_INFO
@ D_INFO
Definition Util.h:26
+
pe_util
Definition Util.h:31
pe_util::hasNonPrintable
bool hasNonPrintable(const char *ptr, size_t maxInp)
Definition Util.cpp:70
pe_util::forwarderNameLen
size_t forwarderNameLen(const char *ptr, size_t max_len)
Definition Util.cpp:113
pe_util::getAsciiLen
size_t getAsciiLen(const char *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:46
-
pe_util::unitsCount
size_t unitsCount(uint64_t value, uint64_t unit, bool roundup=true)
Definition Util.h:47
+
pe_util::unitsCount
size_t unitsCount(uint64_t value, uint64_t unit, bool roundup=true)
Definition Util.h:47
pe_util::isStrLonger
bool isStrLonger(const char *inp, size_t maxLen)
Definition Util.cpp:38
pe_util::noWhiteCount
size_t noWhiteCount(char *buf, size_t bufSize)
Definition Util.cpp:136
pe_util::validateFuncName
bool validateFuncName(const char *fPtr, size_t bufSize)
Definition Util.cpp:99
pe_util::hexdump
void hexdump(BYTE *buf, size_t bufSize, size_t pad)
Definition Util.cpp:177
pe_util::isSpaceClear
bool isSpaceClear(void *ptr, uint64_t size)
Definition Util.cpp:158
-
pe_util::roundup
uint64_t roundup(uint64_t value, uint64_t unit)
Definition Util.h:57
-
pe_util::isPrintable
bool isPrintable(char c)
Definition Util.h:32
+
pe_util::roundup
uint64_t roundup(uint64_t value, uint64_t unit)
Definition Util.h:57
+
pe_util::isPrintable
bool isPrintable(char c)
Definition Util.h:32
pe_util::getAsciiLenW
size_t getAsciiLenW(const WORD *ptr, size_t maxCount, bool acceptNotTerminated=false)
Definition Util.cpp:58
pe_util::isHexChar
bool isHexChar(char c)
Definition Util.cpp:169
pe_util::endsWith
bool endsWith(std::string string, std::string endStr)
Definition Util.cpp:188
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_wrapped_value_8cpp.html b/_wrapped_value_8cpp.html index 90b2e7aa..365dc429 100644 --- a/_wrapped_value_8cpp.html +++ b/_wrapped_value_8cpp.html @@ -3,12 +3,14 @@ - + BearParser: parser/WrappedValue.cpp File Reference + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_wrapped_value_8cpp_source.html b/_wrapped_value_8cpp_source.html index 28ac7836..e3bd53be 100644 --- a/_wrapped_value_8cpp_source.html +++ b/_wrapped_value_8cpp_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/WrappedValue.cpp Source File + + @@ -30,7 +32,7 @@ - + @@ -152,7 +154,7 @@ $(document).ready(function() { init_codefold(0); });
WrappedValue.h
AbstractByteBuffer::getContentAt
virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)
Definition AbstractByteBuffer.cpp:57
AbstractByteBuffer::getNumValue
uint64_t getNumValue(offset_t offset, bufsize_t size, bool *isOk)
Definition AbstractByteBuffer.cpp:297
-
WrappedValue::getQVariant
QVariant getQVariant()
Definition WrappedValue.cpp:3
+
WrappedValue::getQVariant
QVariant getQVariant()
Definition WrappedValue.cpp:3
WrappedValue::m_Owner
AbstractByteBuffer * m_Owner
Definition WrappedValue.h:39
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
WrappedValue::NONE
@ NONE
Definition WrappedValue.h:16
@@ -160,14 +162,14 @@ $(document).ready(function() { init_codefold(0); });
WrappedValue::COMPLEX
@ COMPLEX
Definition WrappedValue.h:20
WrappedValue::STRING
@ STRING
Definition WrappedValue.h:18
WrappedValue::m_Offset
offset_t m_Offset
Definition WrappedValue.h:40
-
WrappedValue::toQString
QString toQString()
Definition WrappedValue.cpp:32
+
WrappedValue::toQString
QString toQString()
Definition WrappedValue.cpp:32
WrappedValue::m_Size
bufsize_t m_Size
Definition WrappedValue.h:41
-
WrappedValue::getIntFormat
virtual QString getIntFormat()
Definition WrappedValue.cpp:26
+
WrappedValue::getIntFormat
virtual QString getIntFormat()
Definition WrappedValue.cpp:26
WrappedValue::m_Type
data_type m_Type
Definition WrappedValue.h:38
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_wrapped_value_8h.html b/_wrapped_value_8h.html index 159d3da2..6c66fa7c 100644 --- a/_wrapped_value_8h.html +++ b/_wrapped_value_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/WrappedValue.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Classes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/_wrapped_value_8h_source.html b/_wrapped_value_8h_source.html index 684850c7..04b8f183 100644 --- a/_wrapped_value_8h_source.html +++ b/_wrapped_value_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/WrappedValue.h Source File + + @@ -30,7 +32,7 @@ - + @@ -139,29 +141,29 @@ $(document).ready(function() { init_codefold(0); });
offset_t
uint64_t offset_t
Definition AbstractByteBuffer.h:17
CustomException.h
AbstractByteBuffer
Definition AbstractByteBuffer.h:32
-
WrappedValue
Definition WrappedValue.h:12
+
WrappedValue
Definition WrappedValue.h:12
WrappedValue::getQVariant
QVariant getQVariant()
Definition WrappedValue.cpp:3
-
WrappedValue::WrappedValue
WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)
Definition WrappedValue.h:27
-
WrappedValue::getDataType
data_type getDataType()
Definition WrappedValue.h:30
-
WrappedValue::isValid
bool isValid()
Definition WrappedValue.h:33
-
WrappedValue::m_Owner
AbstractByteBuffer * m_Owner
Definition WrappedValue.h:39
-
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
-
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
-
WrappedValue::NONE
@ NONE
Definition WrappedValue.h:16
-
WrappedValue::WSTRING
@ WSTRING
Definition WrappedValue.h:19
-
WrappedValue::COMPLEX
@ COMPLEX
Definition WrappedValue.h:20
-
WrappedValue::DATATYPE_COUNT
@ DATATYPE_COUNT
Definition WrappedValue.h:21
-
WrappedValue::STRING
@ STRING
Definition WrappedValue.h:18
-
WrappedValue::m_Offset
offset_t m_Offset
Definition WrappedValue.h:40
+
WrappedValue::WrappedValue
WrappedValue(AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)
Definition WrappedValue.h:27
+
WrappedValue::getDataType
data_type getDataType()
Definition WrappedValue.h:30
+
WrappedValue::isValid
bool isValid()
Definition WrappedValue.h:33
+
WrappedValue::m_Owner
AbstractByteBuffer * m_Owner
Definition WrappedValue.h:39
+
WrappedValue::data_type
data_type
Definition WrappedValue.h:15
+
WrappedValue::INT
@ INT
Definition WrappedValue.h:17
+
WrappedValue::NONE
@ NONE
Definition WrappedValue.h:16
+
WrappedValue::WSTRING
@ WSTRING
Definition WrappedValue.h:19
+
WrappedValue::COMPLEX
@ COMPLEX
Definition WrappedValue.h:20
+
WrappedValue::DATATYPE_COUNT
@ DATATYPE_COUNT
Definition WrappedValue.h:21
+
WrappedValue::STRING
@ STRING
Definition WrappedValue.h:18
+
WrappedValue::m_Offset
offset_t m_Offset
Definition WrappedValue.h:40
WrappedValue::toQString
QString toQString()
Definition WrappedValue.cpp:32
-
WrappedValue::WrappedValue
WrappedValue()
Definition WrappedValue.h:24
-
WrappedValue::m_Size
bufsize_t m_Size
Definition WrappedValue.h:41
+
WrappedValue::WrappedValue
WrappedValue()
Definition WrappedValue.h:24
+
WrappedValue::m_Size
bufsize_t m_Size
Definition WrappedValue.h:41
WrappedValue::getIntFormat
virtual QString getIntFormat()
Definition WrappedValue.cpp:26
-
WrappedValue::m_Type
data_type m_Type
Definition WrappedValue.h:38
+
WrappedValue::m_Type
data_type m_Type
Definition WrappedValue.h:38
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/annotated.html b/annotated.html index ae2c80a0..c6a41e99 100644 --- a/annotated.html +++ b/annotated.html @@ -3,12 +3,14 @@ - + BearParser: Class List + + @@ -30,7 +32,7 @@ - + @@ -161,7 +163,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/bearparser_8h.html b/bearparser_8h.html index 313aff8c..0d2b048e 100644 --- a/bearparser_8h.html +++ b/bearparser_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/bearparser.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -86,7 +88,7 @@ $(function() { - +

Macros

#define BEARPARSER_VERSION   "0.3"
#define BEARPARSER_VERSION   "0.3"
 

Macro Definition Documentation

@@ -109,7 +111,7 @@ Macros
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/bearparser_8h_source.html b/bearparser_8h_source.html index b8d8227f..a7acb280 100644 --- a/bearparser_8h_source.html +++ b/bearparser_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/bearparser.h Source File + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_byte_buffer-members.html b/class_abstract_byte_buffer-members.html index 9944038c..6893b8ec 100644 --- a/class_abstract_byte_buffer-members.html +++ b/class_abstract_byte_buffer-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -87,8 +89,8 @@ $(function() { getMaxSizeFromPtr(BYTE *ptr)AbstractByteBufferinline getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -107,7 +109,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_byte_buffer.html b/class_abstract_byte_buffer.html index 5f2a0486..fb2cfeee 100644 --- a/class_abstract_byte_buffer.html +++ b/class_abstract_byte_buffer.html @@ -3,12 +3,14 @@ - + BearParser: AbstractByteBuffer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -82,64 +84,64 @@ $(function() { - + - + - + - + - + - + - + - + - + - + - + - + - - - + + + - - - + + + - + - + - + - + - + - + - + - + - + - + - +

Public Member Functions

 AbstractByteBuffer ()
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
virtual ~AbstractByteBuffer ()
 
virtual bufsize_t getContentSize ()=0
virtual bufsize_t getContentSize ()=0
 
virtual BYTE * getContent ()=0
virtual BYTE * getContent ()=0
 
virtual bool isTruncated ()
virtual bool isTruncated ()
 
virtual bool isResized ()
virtual bool isResized ()
 
BYTE operator[] (size_t idx)
BYTE operator[] (size_t idx)
 
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
 
virtual BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
virtual BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
 
virtual BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
virtual BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
 
virtual bool setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
virtual bool setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
 
bool setStringValue (offset_t rawOffset, QString newText)
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
bool isAreaEmpty (offset_t rawOffset, bufsize_t size)
bool isAreaEmpty (offset_t rawOffset, bufsize_t size)
 
bool fillContent (BYTE filling)
bool fillContent (BYTE filling)
 
bool pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
bool pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
 
bool containsBlock (offset_t rawOffset, bufsize_t size)
bool containsBlock (offset_t rawOffset, bufsize_t size)
 
bool intersectsBlock (offset_t rawOffset, bufsize_t size)
bool intersectsBlock (offset_t rawOffset, bufsize_t size)
 
uint64_t getNumValue (offset_t offset, bufsize_t size, bool *isOk)
uint64_t getNumValue (offset_t offset, bufsize_t size, bool *isOk)
 
bool setNumValue (offset_t offset, bufsize_t size, uint64_t newVal)
bool setNumValue (offset_t offset, bufsize_t size, uint64_t newVal)
 
bool setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0)
bool setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0)
 
virtual bool resize (bufsize_t newSize)
virtual bool resize (bufsize_t newSize)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- +

Static Public Member Functions

static bool isValid (AbstractByteBuffer *buf)
static bool isValid (AbstractByteBuffer *buf)
 

Detailed Description

@@ -158,7 +160,7 @@ Static Public Member Functions AbstractByteBuffer::AbstractByteBuffer ( - ) + ) @@ -185,7 +187,7 @@ Static Public Member Functions virtual AbstractByteBuffer::~AbstractByteBuffer ( - ) + ) @@ -210,19 +212,12 @@ Static Public Member Functions bool AbstractByteBuffer::containsBlock ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - size  - - - - ) - + bufsize_t size )
@@ -256,8 +251,7 @@ Here is the call graph for this function:
bool AbstractByteBuffer::fillContent ( - BYTE  - filling) + BYTE filling) @@ -291,7 +285,7 @@ Here is the call graph for this function: virtual BYTE * AbstractByteBuffer::getContent ( - ) + ) @@ -318,25 +312,17 @@ Here is the call graph for this function: BYTE * AbstractByteBuffer::getContentAt ( - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -376,25 +362,17 @@ Here is the call graph for this function: BYTE * AbstractByteBuffer::getContentAtPtr ( - BYTE *  - ptr, + BYTE * ptr, - bufsize_t  - size, + bufsize_t size, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -440,7 +418,7 @@ Here is the call graph for this function: virtual bufsize_t AbstractByteBuffer::getContentSize ( - ) + ) @@ -464,8 +442,7 @@ Here is the call graph for this function: bufsize_t AbstractByteBuffer::getMaxSizeFromOffset ( - offset_t  - startOffset) + offset_t startOffset) @@ -497,8 +474,7 @@ Here is the call graph for this function: bufsize_t AbstractByteBuffer::getMaxSizeFromPtr ( - BYTE *  - ptr) + BYTE * ptr) @@ -539,25 +515,17 @@ Here is the call graph for this function: uint64_t AbstractByteBuffer::getNumValue ( - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - bool *  - isOk  - - - - ) - + bool * isOk )
@@ -594,19 +562,12 @@ Here is the call graph for this function:
offset_t AbstractByteBuffer::getOffset ( - void *  - ptr, + void * ptr, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -634,8 +595,8 @@ Here is the call graph for this function: - -

◆ getStringValue()

+ +

◆ getStringValue()

@@ -643,19 +604,17 @@ Here is the call graph for this function:
QString AbstractByteBuffer::getStringValue ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - len = BUFSIZE_MAX  + bufsize_t len = BUFSIZE_MAX, + - ) - + bool acceptNonTerminated = false )
@@ -664,8 +623,8 @@ Here is the call graph for this function:
Here is the call graph for this function:
-
- +
+ @@ -683,8 +642,8 @@ Here is the call graph for this function:
- -

◆ getWAsciiStringValue()

+ +

◆ getWAsciiStringValue()

@@ -692,19 +651,17 @@ Here is the call graph for this function:
QString AbstractByteBuffer::getWAsciiStringValue ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - len  + bufsize_t len, + - ) - + bool acceptNonTerminated = false )
@@ -713,8 +670,8 @@ Here is the call graph for this function:
Here is the call graph for this function:
-
- +
+ @@ -740,19 +697,12 @@ Here is the call graph for this function:
QString AbstractByteBuffer::getWStringValue ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - len  - - - - ) - + bufsize_t len )
@@ -784,19 +734,12 @@ Here is the call graph for this function:
bool AbstractByteBuffer::intersectsBlock ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - size  - - - - ) - + bufsize_t size )
@@ -834,19 +777,12 @@ Here is the call graph for this function:
bool AbstractByteBuffer::isAreaEmpty ( - offset_t  - rawOffset, + offset_t rawOffset, - bufsize_t  - size  - - - - ) - + bufsize_t size )
@@ -881,7 +817,7 @@ Here is the call graph for this function:
virtual bool AbstractByteBuffer::isResized ( - ) + ) @@ -910,7 +846,7 @@ Here is the call graph for this function: virtual bool AbstractByteBuffer::isTruncated ( - ) + ) @@ -939,8 +875,7 @@ Here is the call graph for this function: bool AbstractByteBuffer::isValid ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -976,8 +911,7 @@ Here is the call graph for this function: BYTE AbstractByteBuffer::operator[] ( - size_t  - idx) + size_t idx) @@ -1008,25 +942,17 @@ Here is the call graph for this function: bool AbstractByteBuffer::pasteBuffer ( - offset_t  - rawOffset, + offset_t rawOffset, - AbstractByteBuffer *  - buf, + AbstractByteBuffer * buf, - bool  - allowTrunc  - - - - ) - + bool allowTrunc )
@@ -1071,8 +997,7 @@ Here is the call graph for this function:
virtual bool AbstractByteBuffer::resize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -1101,37 +1026,27 @@ Here is the call graph for this function: bool AbstractByteBuffer::setBufferedValue ( - BYTE *  - dstPtr, + BYTE * dstPtr, - BYTE *  - srcPtr, + BYTE * srcPtr, - bufsize_t  - srcSize, + bufsize_t srcSize, - bufsize_t  - paddingSize, + bufsize_t paddingSize, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -1169,25 +1084,17 @@ Here is the call graph for this function: bool AbstractByteBuffer::setNumValue ( - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - uint64_t  - newVal  - - - - ) - + uint64_t newVal )
@@ -1227,19 +1134,12 @@ Here is the call graph for this function:
bool AbstractByteBuffer::setStringValue ( - offset_t  - rawOffset, + offset_t rawOffset, - QString  - newText  - - - - ) - + QString newText )
@@ -1278,25 +1178,17 @@ Here is the call graph for this function:
bool AbstractByteBuffer::setTextValue ( - char *  - textPtr, + char * textPtr, - std::string  - newText, + std::string newText, - size_t  - fieldLimitLen = 0  - - - - ) - + size_t fieldLimitLen = 0 )
@@ -1334,25 +1226,17 @@ Here is the call graph for this function:
offset_t AbstractByteBuffer::substFragmentByFile ( - offset_t  - offset, + offset_t offset, - bufsize_t  - contentSize, + bufsize_t contentSize, - QFile &  - fIn  - - - - ) - + QFile & fIn )
@@ -1384,7 +1268,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.map b/class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.map similarity index 100% rename from class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.map rename to class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.map diff --git a/class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.md5 b/class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.md5 similarity index 100% rename from class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.md5 rename to class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.md5 diff --git a/class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.png b/class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.png similarity index 100% rename from class_abstract_byte_buffer_a265e3794703e57d0208feb007c6f79ec_cgraph.png rename to class_abstract_byte_buffer_a1b2b8f6c4056609a33cef548e848e7a4_cgraph.png diff --git a/class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.map b/class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.map similarity index 100% rename from class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.map rename to class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.map diff --git a/class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.md5 b/class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.md5 similarity index 100% rename from class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.md5 rename to class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.md5 diff --git a/class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.png b/class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.png similarity index 100% rename from class_abstract_byte_buffer_aced00c06952e4829ce0549a0af3739ea_cgraph.png rename to class_abstract_byte_buffer_af42b7e4acd2e6d9b1ef6213ce494a45a_cgraph.png diff --git a/class_abstract_file_buffer-members.html b/class_abstract_file_buffer-members.html index 785c613b..25bbb927 100644 --- a/class_abstract_file_buffer-members.html +++ b/class_abstract_file_buffer-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -88,7 +90,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_file_buffer.html b/class_abstract_file_buffer.html index 5d07ee7b..8e7ca3b4 100644 --- a/class_abstract_file_buffer.html +++ b/class_abstract_file_buffer.html @@ -3,12 +3,14 @@ - + BearParser: AbstractFileBuffer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -85,35 +87,35 @@ $(function() { - +

Public Member Functions

QString getFileName ()
QString getFileName ()
 
- + - + - + - +

Static Public Member Functions

static ByteBuffer * read (QString &file, bufsize_t minBufSize, const bool allowTruncate)
static ByteBuffer * read (QString &file, bufsize_t minBufSize, const bool allowTruncate)
 
static bufsize_t getReadableSize (QFile &fIn)
static bufsize_t getReadableSize (QFile &fIn)
 
static bufsize_t getReadableSize (const QString &path)
static bufsize_t getReadableSize (const QString &path)
 
static bufsize_t dump (const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
static bufsize_t dump (const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
 
- +

Protected Member Functions

 AbstractFileBuffer (QString v_fileName)
 AbstractFileBuffer (QString v_fileName)
 
- +

Static Protected Member Functions

static ByteBuffer * read (QFile &fIn, bufsize_t minBufSize, const bool allowTruncate)
static ByteBuffer * read (QFile &fIn, bufsize_t minBufSize, const bool allowTruncate)
 
- + - +

Protected Attributes

QString fileName
QString fileName
 
qint64 fileSize
qint64 fileSize
 

Detailed Description

@@ -132,8 +134,7 @@ Protected Attributes AbstractFileBuffer::AbstractFileBuffer ( - QString  - v_fileName) + QString v_fileName) @@ -161,25 +162,17 @@ Protected Attributes bufsize_t AbstractFileBuffer::dump ( - const QString &  - fileName, + const QString & fileName, - AbstractByteBuffer &  - buf, + AbstractByteBuffer & buf, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -215,7 +208,7 @@ Here is the call graph for this function: QString AbstractFileBuffer::getFileName ( - ) + ) @@ -242,8 +235,7 @@ Here is the call graph for this function: bufsize_t AbstractFileBuffer::getReadableSize ( - const QString &  - path) + const QString & path) @@ -283,8 +275,7 @@ Here is the call graph for this function: bufsize_t AbstractFileBuffer::getReadableSize ( - QFile &  - fIn) + QFile & fIn) @@ -321,25 +312,17 @@ Here is the call graph for this function: ByteBuffer * AbstractFileBuffer::read ( - QFile &  - fIn, + QFile & fIn, - bufsize_t  - minBufSize, + bufsize_t minBufSize, - const bool  - allowTruncate  - - - - ) - + const bool allowTruncate ) @@ -381,25 +364,17 @@ Here is the call graph for this function: ByteBuffer * AbstractFileBuffer::read ( - QString &  - file, + QString & file, - bufsize_t  - minBufSize, + bufsize_t minBufSize, - const bool  - allowTruncate  - - - - ) - + const bool allowTruncate ) @@ -480,7 +455,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_formatter-members.html b/class_abstract_formatter-members.html index 93dda16a..b5f8e507 100644 --- a/class_abstract_formatter-members.html +++ b/class_abstract_formatter-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_abstract_formatter.html b/class_abstract_formatter.html index e0ecb3d4..9ef32874 100644 --- a/class_abstract_formatter.html +++ b/class_abstract_formatter.html @@ -3,12 +3,14 @@ - + BearParser: AbstractFormatter Class Reference + + @@ -30,7 +32,7 @@ - + @@ -92,16 +94,16 @@ Collaboration diagram for AbstractFormatter: - + - + - +

Public Member Functions

 AbstractFormatter (AbstractByteBuffer *v_buf)
 AbstractFormatter (AbstractByteBuffer *v_buf)
 
virtual ~AbstractFormatter ()
virtual ~AbstractFormatter ()
 
virtual const QString operator[] (std::size_t idx) const =0
virtual const QString operator[] (std::size_t idx) const =0
 
- +

Protected Attributes

AbstractByteBuffer * buf
AbstractByteBuffer * buf
 

Detailed Description

@@ -117,8 +119,7 @@ Protected Attributes AbstractFormatter::AbstractFormatter ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -150,7 +151,7 @@ Here is the call graph for this function: virtual AbstractFormatter::~AbstractFormatter ( - ) + ) @@ -178,8 +179,7 @@ Here is the call graph for this function: virtual const QString AbstractFormatter::operator[] ( - std::size_t  - idx) + std::size_t idx) const @@ -226,7 +226,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_bound_entry_wrapper-members.html b/class_bound_entry_wrapper-members.html index c684d4fc..11d2cb1a 100644 --- a/class_bound_entry_wrapper-members.html +++ b/class_bound_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,12 +130,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()BoundEntryWrappervirtual getSize()BoundEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()BoundEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -173,7 +175,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_bound_entry_wrapper.html b/class_bound_entry_wrapper.html index 9ddc3ff6..bee0e991 100644 --- a/class_bound_entry_wrapper.html +++ b/class_bound_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: BoundEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,40 +103,40 @@ Collaboration diagram for BoundEntryWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, TIMESTAMP -, MODULE_NAME_OFFSET -, MODULE_FORWARDERS_NUM +
enum  FieldID {
+  NONE = FIELD_NONE +, TIMESTAMP +, MODULE_NAME_OFFSET +, MODULE_FORWARDERS_NUM ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + @@ -171,7 +173,7 @@ Public Member Functions - + @@ -216,7 +218,7 @@ Public Member Functions - + @@ -235,12 +237,12 @@ Public Member Functions - - + + - - + + @@ -268,10 +270,10 @@ Public Member Functions

Public Member Functions

 BoundEntryWrapper (Executable *pe, BoundImpDirWrapper *parent, size_t entryNum)
 BoundEntryWrapper (Executable *pe, BoundImpDirWrapper *parent, size_t entryNum)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual char * getLibraryName ()
virtual char * getLibraryName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -286,19 +288,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -313,7 +315,7 @@ Additional Inherited Members
- +
enum BoundEntryWrapper::FieldIDenum BoundEntryWrapper::FieldID
@@ -342,25 +344,17 @@ Additional Inherited Members BoundEntryWrapper::BoundEntryWrapper ( - Executable *  - pe, + Executable * pe, - BoundImpDirWrapper *  - parent, + BoundImpDirWrapper * parent, - size_t  - entryNum  - - - - ) - + size_t entryNum ) @@ -387,8 +381,7 @@ Additional Inherited Members QString BoundEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -498,19 +491,12 @@ Here is the call graph for this function:
void * BoundEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -611,7 +597,7 @@ Here is the call graph for this function: virtual size_t BoundEntryWrapper::getFieldsCount ( - ) + ) @@ -640,7 +626,7 @@ Here is the call graph for this function: char * BoundEntryWrapper::getLibraryName ( - ) + ) @@ -743,7 +729,7 @@ Here is the call graph for this function: QString BoundEntryWrapper::getName ( - ) + ) @@ -851,7 +837,7 @@ Here is the call graph for this function: void * BoundEntryWrapper::getPtr ( - ) + ) @@ -949,7 +935,7 @@ Here is the call graph for this function: bufsize_t BoundEntryWrapper::getSize ( - ) + ) @@ -1050,7 +1036,7 @@ Here is the call graph for this function: virtual size_t BoundEntryWrapper::getSubFieldsCount ( - ) + ) @@ -1079,7 +1065,7 @@ Here is the call graph for this function: bool BoundEntryWrapper::wrap ( - ) + ) @@ -1103,7 +1089,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_bound_imp_dir_wrapper-members.html b/class_bound_imp_dir_wrapper-members.html index e5cd4b47..f7baf9ad 100644 --- a/class_bound_imp_dir_wrapper-members.html +++ b/class_bound_imp_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -135,12 +137,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()BoundImpDirWrapperinlinevirtual getSize()BoundImpDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -182,7 +184,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_bound_imp_dir_wrapper.html b/class_bound_imp_dir_wrapper.html index dc483e0b..50464dd0 100644 --- a/class_bound_imp_dir_wrapper.html +++ b/class_bound_imp_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: BoundImpDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -136,27 +138,27 @@ Collaboration diagram for BoundImpDirWrapper: - + - + - + - + - + - + - + - + - + - + - + @@ -165,7 +167,7 @@ Public Member Functions - + @@ -176,7 +178,7 @@ Public Member Functions - + @@ -213,7 +215,7 @@ Public Member Functions - + @@ -256,7 +258,7 @@ Public Member Functions - + @@ -275,12 +277,12 @@ Public Member Functions - - + + - - + + @@ -308,14 +310,14 @@ Public Member Functions

Public Member Functions

 BoundImpDirWrapper (PEFile *pe)
 BoundImpDirWrapper (PEFile *pe)
 
virtual bool wrap ()
virtual bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + @@ -328,7 +330,7 @@ Protected Member Functions - + @@ -336,35 +338,35 @@ Protected Member Functions

Protected Member Functions

bool loadNextEntry (size_t entryNum)
bool loadNextEntry (size_t entryNum)
 
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp ()
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp ()
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - +

Protected Attributes

size_t importsCount
size_t importsCount
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class BoundEntryWrapper
class BoundEntryWrapper
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -384,8 +386,7 @@ Additional Inherited Members BoundImpDirWrapper::BoundImpDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -438,7 +439,7 @@ Here is the call graph for this function: IMAGE_BOUND_IMPORT_DESCRIPTOR * BoundImpDirWrapper::boundImp ( - ) + ) @@ -527,8 +528,7 @@ Here is the call graph for this function: virtual QString BoundImpDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -568,19 +568,12 @@ Here is the call graph for this function: virtual QString BoundImpDirWrapper::getFieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -622,19 +615,12 @@ Here is the call graph for this function: virtual void * BoundImpDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -678,7 +664,7 @@ Here is the call graph for this function: virtual size_t BoundImpDirWrapper::getFieldsCount ( - ) + ) @@ -707,19 +693,12 @@ Here is the call graph for this function: virtual bufsize_t BoundImpDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -763,7 +742,7 @@ Here is the call graph for this function: virtual QString BoundImpDirWrapper::getName ( - ) + ) @@ -792,7 +771,7 @@ Here is the call graph for this function: virtual void * BoundImpDirWrapper::getPtr ( - ) + ) @@ -885,7 +864,7 @@ Here is the call graph for this function: bufsize_t BoundImpDirWrapper::getSize ( - ) + ) @@ -981,8 +960,7 @@ Here is the call graph for this function: bool BoundImpDirWrapper::loadNextEntry ( - size_t  - entryNum) + size_t entryNum) @@ -1021,7 +999,7 @@ Here is the call graph for this function: bool BoundImpDirWrapper::wrap ( - ) + ) @@ -1118,7 +1096,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_buffer_exception-members.html b/class_buffer_exception-members.html index 699731c4..6e2d7962 100644 --- a/class_buffer_exception-members.html +++ b/class_buffer_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_buffer_exception.html b/class_buffer_exception.html index c277733f..1946a09c 100644 --- a/class_buffer_exception.html +++ b/class_buffer_exception.html @@ -3,12 +3,14 @@ - + BearParser: BufferException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,9 +95,9 @@ Collaboration diagram for BufferException: - + - + @@ -111,10 +113,10 @@ Public Member Functions

Public Member Functions

 BufferException (const QString info)
 BufferException (const QString info)
 
- Public Member Functions inherited from CustomException
- Public Member Functions inherited from CustomException
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
- + - + @@ -138,8 +140,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Protected Member Functions inherited from CustomException
- Protected Member Functions inherited from CustomException
virtual QString codeToString ()
 
- Protected Attributes inherited from CustomException
- Protected Attributes inherited from CustomException
QString m_info
 
std::string m_strInfo
BufferException::BufferException (const QString info)const QString info)
@@ -160,7 +161,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_buffer_view-members.html b/class_buffer_view-members.html index 6bb53944..0e244a1f 100644 --- a/class_buffer_view-members.html +++ b/class_buffer_view-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -89,8 +91,8 @@ $(function() { getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getRequestedSize() constBufferViewinline - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -113,7 +115,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_buffer_view.html b/class_buffer_view.html index 0d503b65..63edf044 100644 --- a/class_buffer_view.html +++ b/class_buffer_view.html @@ -3,12 +3,14 @@ - + BearParser: BufferView Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,17 +95,17 @@ Collaboration diagram for BufferView: - + - + - + - + - + - + @@ -124,12 +126,12 @@ Public Member Functions - - + + - - + + @@ -157,16 +159,16 @@ Public Member Functions

Public Member Functions

 BufferView (AbstractByteBuffer *parent, offset_t offset, bufsize_t size)
 BufferView (AbstractByteBuffer *parent, offset_t offset, bufsize_t size)
 
virtual ~BufferView ()
virtual ~BufferView ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
bufsize_t getRequestedSize () const
bufsize_t getRequestedSize () const
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Protected Attributes

AbstractByteBuffer * parent
AbstractByteBuffer * parent
 
offset_t offset
offset_t offset
 
bufsize_t size
bufsize_t size
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -183,25 +185,17 @@ Additional Inherited Members BufferView::BufferView ( - AbstractByteBuffer *  - parent, + AbstractByteBuffer * parent, - offset_t  - offset, + offset_t offset, - bufsize_t  - size  - - - - ) - + bufsize_t size )
@@ -232,7 +226,7 @@ Here is the call graph for this function:
virtual BufferView::~BufferView ( - ) + ) @@ -260,7 +254,7 @@ Here is the call graph for this function: BYTE * BufferView::getContent ( - ) + ) @@ -308,7 +302,7 @@ Here is the call graph for this function: bufsize_t BufferView::getContentSize ( - ) + ) @@ -349,7 +343,7 @@ Here is the call graph for this function: bufsize_t BufferView::getRequestedSize ( - ) + ) const @@ -444,7 +438,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_byte_buffer-members.html b/class_byte_buffer-members.html index b9f49ec3..34353ac2 100644 --- a/class_byte_buffer-members.html +++ b/class_byte_buffer-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -93,8 +95,8 @@ $(function() { getMaxSizeFromPtr(BYTE *ptr)AbstractByteBufferinline getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -116,7 +118,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_byte_buffer.html b/class_byte_buffer.html index ad50ff28..eea421eb 100644 --- a/class_byte_buffer.html +++ b/class_byte_buffer.html @@ -3,12 +3,14 @@ - + BearParser: ByteBuffer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,23 +95,23 @@ Collaboration diagram for ByteBuffer: - + - + - + - + - + - + - + - + - + @@ -128,12 +130,12 @@ Public Member Functions - - + + - - + + @@ -159,23 +161,23 @@ Public Member Functions

Public Member Functions

 ByteBuffer (bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
 ByteBuffer (bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
 
 ByteBuffer (BYTE *v_content, bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
 ByteBuffer (BYTE *v_content, bufsize_t v_size, bufsize_t padding=DEFAULT_PADDING)
 
 ByteBuffer (AbstractByteBuffer *sourceBuf, offset_t offset, bufsize_t size, bufsize_t padding=DEFAULT_PADDING)
 ByteBuffer (AbstractByteBuffer *sourceBuf, offset_t offset, bufsize_t size, bufsize_t padding=DEFAULT_PADDING)
 
virtual ~ByteBuffer ()
virtual ~ByteBuffer ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
virtual bool resize (bufsize_t newSize)
virtual bool resize (bufsize_t newSize)
 
virtual bool isResized ()
virtual bool isResized ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- +

Protected Member Functions

BYTE * allocContent (bufsize_t v_size, bufsize_t padding)
BYTE * allocContent (bufsize_t v_size, bufsize_t padding)
 
- + - + - + - +

Protected Attributes

BYTE * content
BYTE * content
 
bufsize_t contentSize
bufsize_t contentSize
 
bufsize_t padding
bufsize_t padding
 
bufsize_t originalSize
bufsize_t originalSize
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -192,19 +194,12 @@ Additional Inherited Members ByteBuffer::ByteBuffer ( - bufsize_t  - v_size, + bufsize_t v_size, - bufsize_t  - padding = DEFAULT_PADDING  - - - - ) - + bufsize_t padding = DEFAULT_PADDING )
@@ -235,25 +230,17 @@ Here is the call graph for this function:
ByteBuffer::ByteBuffer ( - BYTE *  - v_content, + BYTE * v_content, - bufsize_t  - v_size, + bufsize_t v_size, - bufsize_t  - padding = DEFAULT_PADDING  - - - - ) - + bufsize_t padding = DEFAULT_PADDING )
@@ -284,31 +271,22 @@ Here is the call graph for this function:
ByteBuffer::ByteBuffer ( - AbstractByteBuffer *  - sourceBuf, + AbstractByteBuffer * sourceBuf, - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - bufsize_t  - padding = DEFAULT_PADDING  - - - - ) - + bufsize_t padding = DEFAULT_PADDING )
@@ -342,7 +320,7 @@ Here is the call graph for this function:
ByteBuffer::~ByteBuffer ( - ) + ) @@ -370,19 +348,12 @@ Here is the call graph for this function: BYTE * ByteBuffer::allocContent ( - bufsize_t  - v_size, + bufsize_t v_size, - bufsize_t  - padding  - - - - ) - + bufsize_t padding ) @@ -418,7 +389,7 @@ Here is the call graph for this function: virtual BYTE * ByteBuffer::getContent ( - ) + ) @@ -447,7 +418,7 @@ Here is the call graph for this function: virtual bufsize_t ByteBuffer::getContentSize ( - ) + ) @@ -476,7 +447,7 @@ Here is the call graph for this function: virtual bool ByteBuffer::isResized ( - ) + ) @@ -505,8 +476,7 @@ Here is the call graph for this function: bool ByteBuffer::resize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -640,7 +610,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_clr_dir_wrapper-members.html b/class_clr_dir_wrapper-members.html index 9d259450..4fb95c1d 100644 --- a/class_clr_dir_wrapper-members.html +++ b/class_clr_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -141,12 +143,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()ClrDirWrappervirtual getSize()ClrDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ClrDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -202,7 +204,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_clr_dir_wrapper.html b/class_clr_dir_wrapper.html index a300a9ac..6fcc6284 100644 --- a/class_clr_dir_wrapper.html +++ b/class_clr_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ClrDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,64 +137,64 @@ Collaboration diagram for ClrDirWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, CB = 0 -, MAJOR_RUNTIME_VER -, MINOR_RUNTIME_VER +
enum  FieldID {
+  NONE = FIELD_NONE +, CB = 0 +, MAJOR_RUNTIME_VER +, MINOR_RUNTIME_VER ,
-  META_DATA_VA -, META_DATA_SIZE -, FLAGS -, ENTRY_POINT +  META_DATA_VA +, META_DATA_SIZE +, FLAGS +, ENTRY_POINT ,
-  RESOURCES_VA -, RESOURCES_SIZE -, STRONG_NAME_SIGNATURE_VA -, STRONG_NAME_SIGNATURE_SIZE +  RESOURCES_VA +, RESOURCES_SIZE +, STRONG_NAME_SIGNATURE_VA +, STRONG_NAME_SIGNATURE_SIZE ,
-  CODE_MANAGER_TABLE_VA -, CODE_MANAGER_TABLE_SIZE -, VTABLE_FIXUPS_VA -, VTABLE_FIXUPS_SIZE +  CODE_MANAGER_TABLE_VA +, CODE_MANAGER_TABLE_SIZE +, VTABLE_FIXUPS_VA +, VTABLE_FIXUPS_SIZE ,
-  EXPORT_ADDR_TABLE_JMPS_VA -, EXPORT_ADDR_TABLE_JMPS_SIZE -, MANAGED_NATIVE_HDR_VA -, MANAGED_NATIVE_HDR_SIZE +  EXPORT_ADDR_TABLE_JMPS_VA +, EXPORT_ADDR_TABLE_JMPS_SIZE +, MANAGED_NATIVE_HDR_VA +, MANAGED_NATIVE_HDR_SIZE ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + @@ -201,7 +203,7 @@ Public Member Functions - + @@ -212,7 +214,7 @@ Public Member Functions - + @@ -247,7 +249,7 @@ Public Member Functions - + @@ -288,7 +290,7 @@ Public Member Functions - + @@ -307,12 +309,12 @@ Public Member Functions - - + + - - + + @@ -340,20 +342,20 @@ Public Member Functions

Public Member Functions

 ClrDirWrapper (PEFile *pe)
 ClrDirWrapper (PEFile *pe)
 
 ~ClrDirWrapper ()
 ~ClrDirWrapper ()
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
QString translateFieldContent (size_t fieldId)
QString translateFieldContent (size_t fieldId)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Static Public Member Functions

static QString translateFlag (DWORD value)
static QString translateFlag (DWORD value)
 
static std::set< DWORD > getFlagsSet (DWORD flags)
static std::set< DWORD > getFlagsSet (DWORD flags)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + @@ -366,27 +368,27 @@ Additional Inherited Members - + - + - + - + - +

Additional Inherited Members

- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -401,7 +403,7 @@ Additional Inherited Members
- +
enum ClrDirWrapper::FieldIDenum ClrDirWrapper::FieldID
@@ -446,8 +448,7 @@ Additional Inherited Members ClrDirWrapper::ClrDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -484,7 +485,7 @@ Here is the call graph for this function:
ClrDirWrapper::~ClrDirWrapper ( - ) + ) @@ -512,19 +513,12 @@ Here is the call graph for this function: Executable::addr_type ClrDirWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -562,8 +556,7 @@ Here is the call graph for this function: QString ClrDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -604,19 +597,12 @@ Here is the call graph for this function: void * ClrDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -656,7 +642,7 @@ Here is the call graph for this function: size_t ClrDirWrapper::getFieldsCount ( - ) + ) @@ -695,8 +681,7 @@ Here is the call graph for this function: std::set< DWORD > ClrDirWrapper::getFlagsSet ( - DWORD  - flags) + DWORD flags) @@ -733,7 +718,7 @@ Here is the call graph for this function: QString ClrDirWrapper::getName ( - ) + ) @@ -762,7 +747,7 @@ Here is the call graph for this function: void * ClrDirWrapper::getPtr ( - ) + ) @@ -791,7 +776,7 @@ Here is the call graph for this function: bufsize_t ClrDirWrapper::getSize ( - ) + ) @@ -830,7 +815,7 @@ Here is the call graph for this function: virtual size_t ClrDirWrapper::getSubFieldsCount ( - ) + ) @@ -859,8 +844,7 @@ Here is the call graph for this function: QString ClrDirWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -905,8 +889,7 @@ Here is the call graph for this function: QString ClrDirWrapper::translateFlag ( - DWORD  - value) + DWORD value) @@ -943,7 +926,7 @@ Here is the call graph for this function: bool ClrDirWrapper::wrap ( - ) + ) @@ -967,7 +950,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_lookup-members.html b/class_common_ordinals_lookup-members.html index b361045b..887bb56c 100644 --- a/class_common_ordinals_lookup-members.html +++ b/class_common_ordinals_lookup-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_lookup.html b/class_common_ordinals_lookup.html index ec6b0630..36ff0a41 100644 --- a/class_common_ordinals_lookup.html +++ b/class_common_ordinals_lookup.html @@ -3,12 +3,14 @@ - + BearParser: CommonOrdinalsLookup Class Reference + + @@ -30,7 +32,7 @@ - + @@ -82,18 +84,18 @@ $(function() { - + - + - + - +

Public Member Functions

 CommonOrdinalsLookup ()
 CommonOrdinalsLookup ()
 
QString findFuncName (QString dllName, int ordinal)
QString findFuncName (QString dllName, int ordinal)
 
void init ()
void init ()
 
void clear ()
void clear ()
 
- +

Protected Attributes

QMap< QString, CommonOrdinalsMap * > listsMap
QMap< QString, CommonOrdinalsMap * > listsMap
 

Detailed Description

@@ -112,7 +114,7 @@ Protected Attributes CommonOrdinalsLookup::CommonOrdinalsLookup ( - ) + ) @@ -150,7 +152,7 @@ Here is the call graph for this function: void CommonOrdinalsLookup::clear ( - ) + ) @@ -187,19 +189,12 @@ Here is the call graph for this function: QString CommonOrdinalsLookup::findFuncName ( - QString  - dllName, + QString dllName, - int  - ordinal  - - - - ) - + int ordinal ) @@ -235,7 +230,7 @@ Here is the call graph for this function: void CommonOrdinalsLookup::init ( - ) + ) @@ -281,7 +276,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_map-members.html b/class_common_ordinals_map-members.html index fa02396e..f2731418 100644 --- a/class_common_ordinals_map-members.html +++ b/class_common_ordinals_map-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_map.html b/class_common_ordinals_map.html index 6660b03d..da4f26e6 100644 --- a/class_common_ordinals_map.html +++ b/class_common_ordinals_map.html @@ -3,12 +3,14 @@ - + BearParser: CommonOrdinalsMap Class Reference + + @@ -30,7 +32,7 @@ - + @@ -82,16 +84,16 @@ $(function() { - + - +

Public Member Functions

 CommonOrdinalsMap ()
 CommonOrdinalsMap ()
 
 CommonOrdinalsMap (QString _dllName)
 CommonOrdinalsMap (QString _dllName)
 
- + - +

Public Attributes

QString dllName
QString dllName
 
QMap< int, QString > ord_names
QMap< int, QString > ord_names
 

Detailed Description

@@ -110,7 +112,7 @@ Public Attributes CommonOrdinalsMap::CommonOrdinalsMap ( - ) + ) @@ -137,8 +139,7 @@ Public Attributes CommonOrdinalsMap::CommonOrdinalsMap ( - QString  - _dllName) + QString _dllName) @@ -192,7 +193,7 @@ Public Attributes
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_oleaut32-members.html b/class_common_ordinals_oleaut32-members.html index d9b7fab8..c8c7d94e 100644 --- a/class_common_ordinals_oleaut32-members.html +++ b/class_common_ordinals_oleaut32-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_oleaut32.html b/class_common_ordinals_oleaut32.html index 09bfad1a..d36eb47c 100644 --- a/class_common_ordinals_oleaut32.html +++ b/class_common_ordinals_oleaut32.html @@ -3,12 +3,14 @@ - + BearParser: CommonOrdinalsOleaut32 Class Reference + + @@ -30,7 +32,7 @@ - + @@ -91,9 +93,9 @@ Collaboration diagram for CommonOrdinalsOleaut32: - + - + @@ -101,7 +103,7 @@ Public Member Functions

Public Member Functions

 CommonOrdinalsOleaut32 ()
 CommonOrdinalsOleaut32 ()
 
- Public Member Functions inherited from CommonOrdinalsMap
- Public Member Functions inherited from CommonOrdinalsMap
 CommonOrdinalsMap ()
 
 CommonOrdinalsMap (QString _dllName)
- + @@ -123,7 +125,7 @@ Additional Inherited Members - +

Additional Inherited Members

- Public Attributes inherited from CommonOrdinalsMap
- Public Attributes inherited from CommonOrdinalsMap
QString dllName
 
QMap< int, QString > ord_names
CommonOrdinalsOleaut32::CommonOrdinalsOleaut32 ())
@@ -144,7 +146,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_w_s2__32-members.html b/class_common_ordinals_w_s2__32-members.html index 4ecb1fc5..f63f45d0 100644 --- a/class_common_ordinals_w_s2__32-members.html +++ b/class_common_ordinals_w_s2__32-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_common_ordinals_w_s2__32.html b/class_common_ordinals_w_s2__32.html index 61df9a32..01ed2677 100644 --- a/class_common_ordinals_w_s2__32.html +++ b/class_common_ordinals_w_s2__32.html @@ -3,12 +3,14 @@ - + BearParser: CommonOrdinalsWS2_32 Class Reference + + @@ -30,7 +32,7 @@ - + @@ -91,9 +93,9 @@ Collaboration diagram for CommonOrdinalsWS2_32: - + - + @@ -101,7 +103,7 @@ Public Member Functions

Public Member Functions

 CommonOrdinalsWS2_32 ()
 CommonOrdinalsWS2_32 ()
 
- Public Member Functions inherited from CommonOrdinalsMap
- Public Member Functions inherited from CommonOrdinalsMap
 CommonOrdinalsMap ()
 
 CommonOrdinalsMap (QString _dllName)
- + @@ -123,7 +125,7 @@ Additional Inherited Members - +

Additional Inherited Members

- Public Attributes inherited from CommonOrdinalsMap
- Public Attributes inherited from CommonOrdinalsMap
QString dllName
 
QMap< int, QString > ord_names
CommonOrdinalsWS2_32::CommonOrdinalsWS2_32 ())
@@ -144,7 +146,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_custom_exception-members.html b/class_custom_exception-members.html index 51e4ab2c..e9183467 100644 --- a/class_custom_exception-members.html +++ b/class_custom_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -89,7 +91,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_custom_exception.html b/class_custom_exception.html index a7fa96ab..d877833c 100644 --- a/class_custom_exception.html +++ b/class_custom_exception.html @@ -3,12 +3,14 @@ - + BearParser: CustomException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,31 +95,31 @@ Collaboration diagram for CustomException: - + - + - + - + - + - +

Public Member Functions

 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
 CustomException (const int32_t code)
 
virtual ~CustomException () throw ()
virtual ~CustomException () throw ()
 
QString getInfo ()
QString getInfo ()
 
int getCode ()
int getCode ()
 
virtual const char * what () const throw ()
virtual const char * what () const throw ()
 
- +

Protected Member Functions

virtual QString codeToString ()
virtual QString codeToString ()
 
- + - + - +

Protected Attributes

QString m_info
QString m_info
 
std::string m_strInfo
std::string m_strInfo
 
const int m_code
const int m_code
 

Detailed Description

@@ -136,19 +138,12 @@ Protected Attributes CustomException::CustomException ( - const QString  - info, + const QString info, - const int32_t  - code = UNKNOWN_EXCEPTION  - - - - ) - + const int32_t code = UNKNOWN_EXCEPTION ) @@ -184,8 +179,7 @@ Here is the call graph for this function: CustomException::CustomException ( - const int32_t  - code) + const int32_t code) @@ -212,14 +206,11 @@ Here is the call graph for this function: virtual CustomException::~CustomException ( - ) + ) - throw ( - - - ) + throw ( ) @@ -246,7 +237,7 @@ Here is the call graph for this function: virtual QString CustomException::codeToString ( - ) + ) @@ -273,7 +264,7 @@ Here is the call graph for this function: int CustomException::getCode ( - ) + ) @@ -300,7 +291,7 @@ Here is the call graph for this function: QString CustomException::getInfo ( - ) + ) @@ -337,14 +328,11 @@ Here is the call graph for this function: virtual const char * CustomException::what ( - ) + ) const - throw ( - - - ) + throw ( ) @@ -437,7 +425,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_d_o_s_exe-members.html b/class_d_o_s_exe-members.html index a7d67a78..c3729a34 100644 --- a/class_d_o_s_exe-members.html +++ b/class_d_o_s_exe-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -118,8 +120,8 @@ $(function() { getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getRawSize() constExecutableinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrapper(size_t wrapperId)ExeWrappersContainervirtual getWrapperName(size_t id)ExeWrappersContainer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -172,7 +174,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_d_o_s_exe.html b/class_d_o_s_exe.html index bebc1004..097a420b 100644 --- a/class_d_o_s_exe.html +++ b/class_d_o_s_exe.html @@ -3,12 +3,14 @@ - + BearParser: DOSExe Class Reference + + @@ -30,7 +32,7 @@ - + @@ -107,12 +109,12 @@ Collaboration diagram for DOSExe: - - + , VA = 3 } - + @@ -133,34 +135,34 @@ Public Types

Public Types

enum  WRAPPERS { WR_NONE = MappedExe::WR_NONE -, WR_DOS_HDR = 0 -, COUNT_WRAPPERS +
enum  WRAPPERS { WR_NONE = MappedExe::WR_NONE +, WR_DOS_HDR = 0 +, COUNT_WRAPPERS }
 
- Public Types inherited from Executable
- Public Types inherited from Executable
enum  exe_bits { UNKNOWN = 0 , BITS_16 = 16 , BITS_32 = 32 @@ -125,7 +127,7 @@ Public Types
 
- Public Types inherited from ExeWrappersContainer
- Public Types inherited from ExeWrappersContainer
enum  WRAPPERS { WR_NONE = size_t(-1) , COUNT_WRAPPERS = 0 }
- + - + - + - + - + - + - + - + - + - + - + - + @@ -213,7 +215,7 @@ Public Member Functions - + @@ -226,12 +228,12 @@ Public Member Functions - - + + - - + + @@ -254,7 +256,7 @@ Public Member Functions - + @@ -268,47 +270,47 @@ Public Member Functions

Public Member Functions

 DOSExe (AbstractByteBuffer *v_buf)
 DOSExe (AbstractByteBuffer *v_buf)
 
virtual ~DOSExe ()
virtual ~DOSExe ()
 
virtual offset_t rawToRva (offset_t raw)
virtual offset_t rawToRva (offset_t raw)
 
virtual offset_t rvaToRaw (offset_t rva)
virtual offset_t rvaToRaw (offset_t rva)
 
virtual bufsize_t getMappedSize (Executable::addr_type aType)
virtual bufsize_t getMappedSize (Executable::addr_type aType)
 
virtual bufsize_t getAlignment (Executable::addr_type aType) const
virtual bufsize_t getAlignment (Executable::addr_type aType) const
 
virtual offset_t getImageBase (bool recalculate=false)
virtual offset_t getImageBase (bool recalculate=false)
 
virtual offset_t getEntryPoint (Executable::addr_type aType=Executable::RVA)
virtual offset_t getEntryPoint (Executable::addr_type aType=Executable::RVA)
 
virtual offset_t dosHeaderOffset ()
virtual offset_t dosHeaderOffset ()
 
offset_t peSignatureOffset ()
offset_t peSignatureOffset ()
 
- Public Member Functions inherited from MappedExe
- Public Member Functions inherited from MappedExe
virtual void wrap ()
 
virtual bool canResize (bufsize_t newSize)
 
virtual bool resize (bufsize_t newSize)
 
- Public Member Functions inherited from Executable
- Public Member Functions inherited from Executable
bool isBit64 ()
 
bool isBit32 ()
 
virtual bool dumpFragment (offset_t offset, bufsize_t size, QString fileName)
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- Public Member Functions inherited from ExeWrappersContainer
- Public Member Functions inherited from ExeWrappersContainer
 ExeWrappersContainer ()
 
virtual ~ExeWrappersContainer (void)
- + - + - + - + - + - +

Protected Member Functions

offset_t codeOffset ()
offset_t codeOffset ()
 
bufsize_t moduleSize ()
bufsize_t moduleSize ()
 
virtual void wrap (AbstractByteBuffer *v_buf)
virtual void wrap (AbstractByteBuffer *v_buf)
 
- Protected Member Functions inherited from MappedExe
- Protected Member Functions inherited from MappedExe
 MappedExe (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
virtual ~MappedExe (void)
 
- Protected Member Functions inherited from Executable
- Protected Member Functions inherited from Executable
 Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
- Protected Member Functions inherited from ExeWrappersContainer
- Protected Member Functions inherited from ExeWrappersContainer
void clearWrappers ()
 
- + - + - + - +

Protected Attributes

DosHdrWrapper * dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
 
IMAGE_DOS_HEADER * m_dosHdr
IMAGE_DOS_HEADER * m_dosHdr
 
- Protected Attributes inherited from Executable
- Protected Attributes inherited from Executable
exe_bits bitMode
 
AbstractByteBuffer * buf
 
- Protected Attributes inherited from ExeWrappersContainer
- Protected Attributes inherited from ExeWrappersContainer
std::map< size_t, ExeElementWrapper * > wrappers
 
- + - +

Additional Inherited Members

- Static Public Member Functions inherited from Executable
- Static Public Member Functions inherited from Executable
static bool isBit64 (Executable *exe)
 
static bool isBit32 (Executable *exe)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -323,7 +325,7 @@ Additional Inherited Members
- +
enum DOSExe::WRAPPERSenum DOSExe::WRAPPERS
@@ -347,8 +349,7 @@ Additional Inherited Members DOSExe::DOSExe ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -381,7 +382,7 @@ Here is the call graph for this function:
virtual DOSExe::~DOSExe ( - ) + ) @@ -409,7 +410,7 @@ Here is the call graph for this function: offset_t DOSExe::codeOffset ( - ) + ) @@ -436,7 +437,7 @@ Here is the call graph for this function: virtual offset_t DOSExe::dosHeaderOffset ( - ) + ) @@ -463,8 +464,7 @@ Here is the call graph for this function: virtual bufsize_t DOSExe::getAlignment ( - Executable::addr_type  - aType) + Executable::addr_type aType) const @@ -493,8 +493,7 @@ Here is the call graph for this function: virtual offset_t DOSExe::getEntryPoint ( - Executable::addr_type  - aType = Executable::RVA) + Executable::addr_type aType = Executable::RVA) @@ -533,8 +532,7 @@ Here is the call graph for this function: virtual offset_t DOSExe::getImageBase ( - bool  - recalculate = false) + bool recalculate = false) @@ -563,8 +561,7 @@ Here is the call graph for this function: virtual bufsize_t DOSExe::getMappedSize ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -612,7 +609,7 @@ Here is the call graph for this function: bufsize_t DOSExe::moduleSize ( - ) + ) @@ -646,7 +643,7 @@ Here is the call graph for this function: offset_t DOSExe::peSignatureOffset ( - ) + ) @@ -690,8 +687,7 @@ Here is the call graph for this function: virtual offset_t DOSExe::rawToRva ( - offset_t  - raw) + offset_t raw) @@ -732,8 +728,7 @@ Here is the call graph for this function: virtual offset_t DOSExe::rvaToRaw ( - offset_t  - rva) + offset_t rva) @@ -774,8 +769,7 @@ Here is the call graph for this function: void DOSExe::wrap ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -879,7 +873,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_d_o_s_exe_builder-members.html b/class_d_o_s_exe_builder-members.html index a7bab70b..4db3be17 100644 --- a/class_d_o_s_exe_builder-members.html +++ b/class_d_o_s_exe_builder-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_d_o_s_exe_builder.html b/class_d_o_s_exe_builder.html index 5f5d2785..b7dd9172 100644 --- a/class_d_o_s_exe_builder.html +++ b/class_d_o_s_exe_builder.html @@ -3,12 +3,14 @@ - + BearParser: DOSExeBuilder Class Reference + + @@ -30,7 +32,7 @@ - + @@ -91,15 +93,15 @@ Collaboration diagram for DOSExeBuilder: - + - + - + - + - + @@ -121,7 +123,7 @@ Public Member Functions - +

Public Member Functions

 DOSExeBuilder ()
 DOSExeBuilder ()
 
virtual bool signatureMatches (AbstractByteBuffer *buf)
virtual bool signatureMatches (AbstractByteBuffer *buf)
 
virtual Executable * build (AbstractByteBuffer *buf)
virtual Executable * build (AbstractByteBuffer *buf)
 
QString typeName ()
QString typeName ()
 
- Public Member Functions inherited from ExeBuilder
- Public Member Functions inherited from ExeBuilder
 ExeBuilder ()
 
virtual ~ExeBuilder ()
DOSExeBuilder::DOSExeBuilder ())
@@ -149,8 +151,7 @@ Public Member Functions Executable * DOSExeBuilder::build ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -198,8 +199,7 @@ Here is the call graph for this function: bool DOSExeBuilder::signatureMatches ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -244,7 +244,7 @@ Here is the call graph for this function: QString DOSExeBuilder::typeName ( - ) + ) @@ -268,7 +268,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_data_dir_entry_wrapper-members.html b/class_data_dir_entry_wrapper-members.html index 9933984f..6bd777f6 100644 --- a/class_data_dir_entry_wrapper-members.html +++ b/class_data_dir_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -131,12 +133,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -178,7 +180,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_data_dir_entry_wrapper.html b/class_data_dir_entry_wrapper.html index be073474..5bbade29 100644 --- a/class_data_dir_entry_wrapper.html +++ b/class_data_dir_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DataDirEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,15 +136,15 @@ Collaboration diagram for DataDirEntryWrapper: - + - + - + - + - + @@ -153,7 +155,7 @@ Public Member Functions - + @@ -194,7 +196,7 @@ Public Member Functions - + @@ -249,7 +251,7 @@ Public Member Functions - + @@ -268,12 +270,12 @@ Public Member Functions - - + + - - + + @@ -301,9 +303,9 @@ Public Member Functions

Public Member Functions

IMAGE_DATA_DIRECTORY * getDataDirectory ()
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
offset_t getDirEntryAddress ()
 
bufsize_t getDirEntrySize (bool trimToExeSize=false)
bufsize_t getDirEntrySize (bool trimToExeSize=false)
 
int getDirEntryType ()
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -318,7 +320,7 @@ Protected Member Functions - + @@ -326,32 +328,32 @@ Protected Member Functions

Protected Member Functions

 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - +

Protected Attributes

int entryType
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class PEFile
class PEFile
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -371,19 +373,12 @@ Additional Inherited Members DataDirEntryWrapper::DataDirEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - pe::dir_entry  - v_entryType  - - - - ) - + pe::dir_entry v_entryType ) @@ -417,7 +412,7 @@ Here is the call graph for this function: IMAGE_DATA_DIRECTORY * DataDirEntryWrapper::getDataDirectory ( - ) + ) @@ -449,7 +444,7 @@ Here is the call graph for this function: offset_t DataDirEntryWrapper::getDirEntryAddress ( - ) + ) @@ -523,8 +518,7 @@ Here is the call graph for this function: bufsize_t DataDirEntryWrapper::getDirEntrySize ( - bool  - trimToExeSize = false) + bool trimToExeSize = false) @@ -606,7 +600,7 @@ Here is the call graph for this function: int DataDirEntryWrapper::getDirEntryType ( - ) + ) @@ -678,7 +672,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_data_dir_wrapper-members.html b/class_data_dir_wrapper-members.html index b61c0f8d..4789f442 100644 --- a/class_data_dir_wrapper-members.html +++ b/class_data_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -111,9 +113,9 @@ $(function() { getPE()PEElementWrapperinline getPtr()DataDirWrappervirtual getSize()DataDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()DataDirWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -148,7 +150,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_data_dir_wrapper.html b/class_data_dir_wrapper.html index 00316647..85e9c29a 100644 --- a/class_data_dir_wrapper.html +++ b/class_data_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DataDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,45 +136,45 @@ Collaboration diagram for DataDirWrapper: -

Public Types

enum  DataDirSID { NONE = FIELD_NONE -, ADDRESS = 0 -, SIZE = 1 -, COUNTER +
enum  DataDirSID { NONE = FIELD_NONE +, ADDRESS = 0 +, SIZE = 1 +, COUNTER }
 
- + - + - + - + - + - + - + - + - + - + - + - + - + @@ -215,7 +217,7 @@ Public Member Functions - + @@ -234,12 +236,12 @@ Public Member Functions - - + + - - + + @@ -267,18 +269,18 @@ Public Member Functions

Public Member Functions

 DataDirWrapper (PEFile *pe)
 DataDirWrapper (PEFile *pe)
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
size_t getDirsCount ()
size_t getDirsCount ()
 
- Public Member Functions inherited from PEElementWrapper
- Public Member Functions inherited from PEElementWrapper
 PEElementWrapper (PEFile *pe)
 
virtual ~PEElementWrapper ()
 
PEFile * getPE ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from PEElementWrapper
- Protected Attributes inherited from PEElementWrapper
PEFile * m_PE
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -293,7 +295,7 @@ Additional Inherited Members
- +
enum DataDirWrapper::DataDirSIDenum DataDirWrapper::DataDirSID
@@ -321,8 +323,7 @@ Additional Inherited Members DataDirWrapper::DataDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -350,19 +351,12 @@ Additional Inherited Members Executable::addr_type DataDirWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -397,7 +391,7 @@ Here is the call graph for this function:
size_t DataDirWrapper::getDirsCount ( - ) + ) @@ -464,8 +458,7 @@ Here is the call graph for this function: QString DataDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -504,19 +497,12 @@ Here is the call graph for this function: void * DataDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -607,7 +593,7 @@ Here is the call graph for this function: virtual size_t DataDirWrapper::getFieldsCount ( - ) + ) @@ -683,19 +669,12 @@ Here is the call graph for this function: bufsize_t DataDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -787,7 +766,7 @@ Here is the call graph for this function: virtual QString DataDirWrapper::getName ( - ) + ) @@ -816,7 +795,7 @@ Here is the call graph for this function: void * DataDirWrapper::getPtr ( - ) + ) @@ -904,7 +883,7 @@ Here is the call graph for this function: bufsize_t DataDirWrapper::getSize ( - ) + ) @@ -981,7 +960,7 @@ Here is the call graph for this function: virtual size_t DataDirWrapper::getSubFieldsCount ( - ) + ) @@ -1005,7 +984,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_c_v_entry_wrapper-members.html b/class_debug_dir_c_v_entry_wrapper-members.html index 30717b73..85025ab6 100644 --- a/class_debug_dir_c_v_entry_wrapper-members.html +++ b/class_debug_dir_c_v_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -133,12 +135,12 @@ $(function() { getPtr()DebugDirCVEntryWrappervirtual getSignature()DebugDirCVEntryWrapper getSize()DebugDirCVEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()DebugDirCVEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -175,7 +177,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_c_v_entry_wrapper.html b/class_debug_dir_c_v_entry_wrapper.html index 1a528d3a..ad34c5aa 100644 --- a/class_debug_dir_c_v_entry_wrapper.html +++ b/class_debug_dir_c_v_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DebugDirCVEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,45 +103,45 @@ Collaboration diagram for DebugDirCVEntryWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, F_CVDBG_SIGN -, F_CVDBG_GUID -, F_CVDBG_AGE +
enum  FieldID {
+  NONE = FIELD_NONE +, F_CVDBG_SIGN +, F_CVDBG_GUID +, F_CVDBG_AGE ,
-  F_CVDBG_PDB -, FIELD_COUNTER +  F_CVDBG_PDB +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + @@ -178,7 +180,7 @@ Public Member Functions - + @@ -219,7 +221,7 @@ Public Member Functions - + @@ -238,12 +240,12 @@ Public Member Functions - - + + - - + + @@ -271,10 +273,10 @@ Public Member Functions

Public Member Functions

 DebugDirCVEntryWrapper (Executable *pe, DebugDirEntryWrapper *_parentDir)
 DebugDirCVEntryWrapper (Executable *pe, DebugDirEntryWrapper *_parentDir)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
QString translateFieldContent (size_t fieldId)
QString translateFieldContent (size_t fieldId)
 
QString getGuidString ()
QString getGuidString ()
 
QString getSignature ()
QString getSignature ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -289,19 +291,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -316,7 +318,7 @@ Additional Inherited Members
- +
enum DebugDirCVEntryWrapper::FieldIDenum DebugDirCVEntryWrapper::FieldID
@@ -346,19 +348,12 @@ Additional Inherited Members DebugDirCVEntryWrapper::DebugDirCVEntryWrapper ( - Executable *  - pe, + Executable * pe, - DebugDirEntryWrapper *  - _parentDir  - - - - ) - + DebugDirEntryWrapper * _parentDir ) @@ -395,19 +390,12 @@ Here is the call graph for this function:
virtual Executable::addr_type DebugDirCVEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -435,8 +423,7 @@ Here is the call graph for this function: QString DebugDirCVEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -475,19 +462,12 @@ Here is the call graph for this function: void * DebugDirCVEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -596,7 +576,7 @@ Here is the call graph for this function: virtual size_t DebugDirCVEntryWrapper::getFieldsCount ( - ) + ) @@ -705,7 +685,7 @@ Here is the call graph for this function: QString DebugDirCVEntryWrapper::getGuidString ( - ) + ) @@ -808,7 +788,7 @@ Here is the call graph for this function: virtual QString DebugDirCVEntryWrapper::getName ( - ) + ) @@ -837,7 +817,7 @@ Here is the call graph for this function: void * DebugDirCVEntryWrapper::getPtr ( - ) + ) @@ -944,7 +924,7 @@ Here is the call graph for this function: QString DebugDirCVEntryWrapper::getSignature ( - ) + ) @@ -1050,7 +1030,7 @@ Here is the call graph for this function: bufsize_t DebugDirCVEntryWrapper::getSize ( - ) + ) @@ -1147,7 +1127,7 @@ Here is the call graph for this function: virtual size_t DebugDirCVEntryWrapper::getSubFieldsCount ( - ) + ) @@ -1176,8 +1156,7 @@ Here is the call graph for this function: QString DebugDirCVEntryWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1295,7 +1274,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_entry_wrapper-members.html b/class_debug_dir_entry_wrapper-members.html index 9f1f1099..35f5c977 100644 --- a/class_debug_dir_entry_wrapper-members.html +++ b/class_debug_dir_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -136,12 +138,12 @@ $(function() { getPtr()DebugDirEntryWrappervirtual getRDSI()DebugDirEntryWrapperprotected getSize()DebugDirEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()DebugDirEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -191,7 +193,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_entry_wrapper.html b/class_debug_dir_entry_wrapper.html index 21232d8c..89cbdde3 100644 --- a/class_debug_dir_entry_wrapper.html +++ b/class_debug_dir_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DebugDirEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -140,52 +142,52 @@ Collaboration diagram for DebugDirEntryWrapper: -

Public Types

enum  DebugDirFID {
-  NONE = FIELD_NONE -, CHARACTERISTIC -, TIMESTAMP -, MAJOR_VER +
enum  DebugDirFID {
+  NONE = FIELD_NONE +, CHARACTERISTIC +, TIMESTAMP +, MAJOR_VER ,
-  MINOR_VER -, TYPE -, DATA_SIZE -, RAW_DATA_ADDR +  MINOR_VER +, TYPE +, DATA_SIZE +, RAW_DATA_ADDR ,
-  RAW_DATA_PTR -, FIELD_COUNTER +  RAW_DATA_PTR +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -196,7 +198,7 @@ Public Member Functions - + @@ -231,7 +233,7 @@ Public Member Functions - + @@ -272,7 +274,7 @@ Public Member Functions - + @@ -291,12 +293,12 @@ Public Member Functions - - + + - - + + @@ -324,15 +326,15 @@ Public Member Functions

Public Member Functions

 DebugDirEntryWrapper (PEFile *pe, DebugDirWrapper *rootDir, size_t entryNumber)
 DebugDirEntryWrapper (PEFile *pe, DebugDirWrapper *rootDir, size_t entryNumber)
 
 ~DebugDirEntryWrapper ()
 ~DebugDirEntryWrapper ()
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
QString translateType (int type)
QString translateType (int type)
 
QString translateFieldContent (size_t fieldId)
QString translateFieldContent (size_t fieldId)
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + @@ -347,7 +349,7 @@ Protected Member Functions - + @@ -355,32 +357,32 @@ Protected Member Functions

Protected Member Functions

IMAGE_DEBUG_DIRECTORY * debugDir ()
IMAGE_DEBUG_DIRECTORY * debugDir ()
 
BYTE * getDebugStruct ()
BYTE * getDebugStruct ()
 
pe::DEBUG_RSDSI * getRDSI ()
pe::DEBUG_RSDSI * getRDSI ()
 
pe::DEBUG_NB10 * getNB10 ()
pe::DEBUG_NB10 * getNB10 ()
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - +

Protected Attributes

DebugDirWrapper * dbgRootDir
DebugDirWrapper * dbgRootDir
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class DebugDirCVEntryWrapper
class DebugDirCVEntryWrapper
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -395,7 +397,7 @@ Additional Inherited Members
- +
enum DebugDirEntryWrapper::DebugDirFIDenum DebugDirEntryWrapper::DebugDirFID
@@ -429,25 +431,17 @@ Additional Inherited Members DebugDirEntryWrapper::DebugDirEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - DebugDirWrapper *  - rootDir, + DebugDirWrapper * rootDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -547,7 +541,7 @@ Here is the call graph for this function:
DebugDirEntryWrapper::~DebugDirEntryWrapper ( - ) + ) @@ -588,19 +582,12 @@ Here is the call graph for this function: Executable::addr_type DebugDirEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -638,7 +625,7 @@ Here is the call graph for this function: IMAGE_DEBUG_DIRECTORY * DebugDirEntryWrapper::debugDir ( - ) + ) @@ -730,7 +717,7 @@ Here is the call graph for this function: BYTE * DebugDirEntryWrapper::getDebugStruct ( - ) + ) @@ -826,8 +813,7 @@ Here is the call graph for this function: QString DebugDirEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -933,19 +919,12 @@ Here is the call graph for this function: void * DebugDirEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1044,7 +1023,7 @@ Here is the call graph for this function: virtual size_t DebugDirEntryWrapper::getFieldsCount ( - ) + ) @@ -1073,7 +1052,7 @@ Here is the call graph for this function: virtual QString DebugDirEntryWrapper::getName ( - ) + ) @@ -1173,7 +1152,7 @@ Here is the call graph for this function: pe::DEBUG_NB10 * DebugDirEntryWrapper::getNB10 ( - ) + ) @@ -1273,7 +1252,7 @@ Here is the call graph for this function: void * DebugDirEntryWrapper::getPtr ( - ) + ) @@ -1369,7 +1348,7 @@ Here is the call graph for this function: DEBUG_RSDSI * DebugDirEntryWrapper::getRDSI ( - ) + ) @@ -1469,7 +1448,7 @@ Here is the call graph for this function: bufsize_t DebugDirEntryWrapper::getSize ( - ) + ) @@ -1568,7 +1547,7 @@ Here is the call graph for this function: virtual size_t DebugDirEntryWrapper::getSubFieldsCount ( - ) + ) @@ -1597,8 +1576,7 @@ Here is the call graph for this function: QString DebugDirEntryWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1695,8 +1673,7 @@ Here is the call graph for this function: QString DebugDirEntryWrapper::translateType ( - int  - type) + int type) @@ -1728,7 +1705,7 @@ Here is the call graph for this function: bool DebugDirEntryWrapper::wrap ( - ) + ) @@ -1874,7 +1851,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_wrapper-members.html b/class_debug_dir_wrapper-members.html index cf926351..de78314f 100644 --- a/class_debug_dir_wrapper-members.html +++ b/class_debug_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -135,12 +137,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()DebugDirWrapperinlinevirtual getSize()DebugDirWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -182,7 +184,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_debug_dir_wrapper.html b/class_debug_dir_wrapper.html index 594245c0..b0f63ff1 100644 --- a/class_debug_dir_wrapper.html +++ b/class_debug_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DebugDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,27 +137,27 @@ Collaboration diagram for DebugDirWrapper: - + - + - + - + - + - + - + - + - + - + - + @@ -164,7 +166,7 @@ Public Member Functions - + @@ -175,7 +177,7 @@ Public Member Functions - + @@ -212,7 +214,7 @@ Public Member Functions - + @@ -255,7 +257,7 @@ Public Member Functions - + @@ -274,12 +276,12 @@ Public Member Functions - - + + - - + + @@ -307,16 +309,16 @@ Public Member Functions

Public Member Functions

 DebugDirWrapper (PEFile *pe)
 DebugDirWrapper (PEFile *pe)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
bool isRepro ()
bool isRepro ()
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + @@ -329,7 +331,7 @@ Protected Member Functions - + @@ -337,30 +339,30 @@ Protected Member Functions

Protected Member Functions

bool wrap ()
bool wrap ()
 
virtual bool loadNextEntry (size_t cntr)
virtual bool loadNextEntry (size_t cntr)
 
IMAGE_DEBUG_DIRECTORY * getDebugDir (size_t index=0)
IMAGE_DEBUG_DIRECTORY * getDebugDir (size_t index=0)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class DebugDirEntryWrapper
class DebugDirEntryWrapper
 
- + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -380,8 +382,7 @@ Additional Inherited Members DebugDirWrapper::DebugDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -484,8 +485,7 @@ Here is the call graph for this function: IMAGE_DEBUG_DIRECTORY * DebugDirWrapper::getDebugDir ( - size_t  - index = 0) + size_t index = 0) @@ -574,8 +574,7 @@ Here is the call graph for this function: virtual QString DebugDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -615,19 +614,12 @@ Here is the call graph for this function: virtual QString DebugDirWrapper::getFieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -669,19 +661,12 @@ Here is the call graph for this function: virtual void * DebugDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -725,7 +710,7 @@ Here is the call graph for this function: virtual size_t DebugDirWrapper::getFieldsCount ( - ) + ) @@ -754,19 +739,12 @@ Here is the call graph for this function: virtual bufsize_t DebugDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -810,7 +788,7 @@ Here is the call graph for this function: virtual QString DebugDirWrapper::getName ( - ) + ) @@ -839,7 +817,7 @@ Here is the call graph for this function: virtual void * DebugDirWrapper::getPtr ( - ) + ) @@ -932,7 +910,7 @@ Here is the call graph for this function: virtual bufsize_t DebugDirWrapper::getSize ( - ) + ) @@ -1020,7 +998,7 @@ Here is the call graph for this function: bool DebugDirWrapper::isRepro ( - ) + ) @@ -1084,8 +1062,7 @@ Here is the call graph for this function: bool DebugDirWrapper::loadNextEntry ( - size_t  - cntr) + size_t cntr) @@ -1179,7 +1156,7 @@ Here is the call graph for this function: bool DebugDirWrapper::wrap ( - ) + ) @@ -1301,7 +1278,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_dir_wrapper-members.html b/class_delay_imp_dir_wrapper-members.html index fd997ae0..142c134b 100644 --- a/class_delay_imp_dir_wrapper-members.html +++ b/class_delay_imp_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -138,13 +140,13 @@ $(function() { getPE()PENodeWrapperinline getPtr()DelayImpDirWrappervirtual getSize()DelayImpDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getThunksList()ImportBaseDirWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -197,7 +199,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_dir_wrapper.html b/class_delay_imp_dir_wrapper.html index aec1ad47..cb4fae9d 100644 --- a/class_delay_imp_dir_wrapper.html +++ b/class_delay_imp_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DelayImpDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,15 +139,15 @@ Collaboration diagram for DelayImpDirWrapper: - + - + - + - + - + @@ -172,7 +174,7 @@ Public Member Functions - + @@ -181,7 +183,7 @@ Public Member Functions - + @@ -192,7 +194,7 @@ Public Member Functions - + @@ -227,7 +229,7 @@ Public Member Functions - + @@ -270,7 +272,7 @@ Public Member Functions - + @@ -289,12 +291,12 @@ Public Member Functions - - + + - - + + @@ -322,29 +324,29 @@ Public Member Functions

Public Member Functions

 DelayImpDirWrapper (PEFile *pe)
 DelayImpDirWrapper (PEFile *pe)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
- Public Member Functions inherited from ImportBaseDirWrapper
- Public Member Functions inherited from ImportBaseDirWrapper
virtual bool wrap ()
 
virtual void clearMapping ()
 
ImportBaseFuncWrapper * thunkToFunction (offset_t thunk)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - + - + - + - + @@ -355,7 +357,7 @@ Protected Member Functions - + @@ -363,40 +365,40 @@ Protected Member Functions

Protected Member Functions

virtual bool loadNextEntry (size_t cntr)
virtual bool loadNextEntry (size_t cntr)
 
bool is64 ()
bool is64 ()
 
bool is32 ()
bool is32 ()
 
pe::IMAGE_DELAY_LOAD * firstDelayLd ()
pe::IMAGE_DELAY_LOAD * firstDelayLd ()
 
void * firstDelayLd (bufsize_t size)
void * firstDelayLd (bufsize_t size)
 
bufsize_t getEntrySize ()
bufsize_t getEntrySize ()
 
- Protected Member Functions inherited from ImportBaseDirWrapper
- Protected Member Functions inherited from ImportBaseDirWrapper
 ImportBaseDirWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
void addMapping (ExeNodeWrapper *func)
 
ImportBaseEntryWrapper * thunkToLib (offset_t thunk)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class DelayImpEntryWrapper
class DelayImpEntryWrapper
 
- + - + - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from ImportBaseDirWrapper
- Static Public Member Functions inherited from ImportBaseDirWrapper
static bufsize_t thunkSize (Executable::exe_bits bits)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from ImportBaseDirWrapper
- Protected Attributes inherited from ImportBaseDirWrapper
std::map< offset_t, size_t > thunkToLibMap
 
QList< offset_t > thunksList
 
size_t importsCount
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -416,8 +418,7 @@ Additional Inherited Members DelayImpDirWrapper::DelayImpDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -471,7 +472,7 @@ Here is the call graph for this function: pe::IMAGE_DELAY_LOAD * DelayImpDirWrapper::firstDelayLd ( - ) + ) @@ -507,8 +508,7 @@ Here is the call graph for this function: void * DelayImpDirWrapper::firstDelayLd ( - bufsize_t  - size) + bufsize_t size) @@ -597,7 +597,7 @@ Here is the call graph for this function: bufsize_t DelayImpDirWrapper::getEntrySize ( - ) + ) @@ -624,7 +624,7 @@ Here is the call graph for this function: virtual QString DelayImpDirWrapper::getName ( - ) + ) @@ -653,7 +653,7 @@ Here is the call graph for this function: void * DelayImpDirWrapper::getPtr ( - ) + ) @@ -695,7 +695,7 @@ Here is the call graph for this function: bufsize_t DelayImpDirWrapper::getSize ( - ) + ) @@ -739,7 +739,7 @@ Here is the call graph for this function: bool DelayImpDirWrapper::is32 ( - ) + ) @@ -780,7 +780,7 @@ Here is the call graph for this function: bool DelayImpDirWrapper::is64 ( - ) + ) @@ -819,8 +819,7 @@ Here is the call graph for this function: bool DelayImpDirWrapper::loadNextEntry ( - size_t  - cntr) + size_t cntr) @@ -879,7 +878,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_entry_wrapper-members.html b/class_delay_imp_entry_wrapper-members.html index e42cbdfd..fdc6abac 100644 --- a/class_delay_imp_entry_wrapper-members.html +++ b/class_delay_imp_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -134,12 +136,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()DelayImpEntryWrappervirtual getSize()DelayImpEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ImportBaseEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -191,7 +193,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_entry_wrapper.html b/class_delay_imp_entry_wrapper.html index 3c7a4509..10dadc39 100644 --- a/class_delay_imp_entry_wrapper.html +++ b/class_delay_imp_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DelayImpEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -141,51 +143,51 @@ Collaboration diagram for DelayImpEntryWrapper: -

Public Types

enum  DelayImpDirFID {
-  NONE = FIELD_NONE -, ATTRS -, NAME -, MOD +
enum  DelayImpDirFID {
+  NONE = FIELD_NONE +, ATTRS +, NAME +, MOD ,
-  IAT -, INT -, BOUND_IAT -, UNLOAD_IAT +  IAT +, INT +, BOUND_IAT +, UNLOAD_IAT ,
-  TIMESTAMP -, FIELD_COUNTER +  TIMESTAMP +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + @@ -196,7 +198,7 @@ Public Member Functions - + @@ -229,7 +231,7 @@ Public Member Functions - + @@ -272,7 +274,7 @@ Public Member Functions - + @@ -291,12 +293,12 @@ Public Member Functions - - + + - - + + @@ -324,16 +326,16 @@ Public Member Functions

Public Member Functions

 DelayImpEntryWrapper (PEFile *pe, DelayImpDirWrapper *importsDir, size_t entryNumber)
 DelayImpEntryWrapper (PEFile *pe, DelayImpDirWrapper *importsDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual char * getLibraryName ()
virtual char * getLibraryName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from ImportBaseEntryWrapper
- Public Member Functions inherited from ImportBaseEntryWrapper
virtual size_t getSubFieldsCount ()
 
bool wrap ()
 
virtual bool isValid ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bufsize_t geEntrySize ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + @@ -344,7 +346,7 @@ Protected Member Functions - + @@ -352,37 +354,37 @@ Protected Member Functions

Protected Member Functions

bool loadNextEntry (size_t entryNum)
bool loadNextEntry (size_t entryNum)
 
virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr ()
virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr ()
 
- Protected Member Functions inherited from ImportBaseEntryWrapper
- Protected Member Functions inherited from ImportBaseEntryWrapper
 ImportBaseEntryWrapper (PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
 
void addMapping (ExeNodeWrapper *func)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - +

Friends

class DelayImpFuncWrapper
class DelayImpFuncWrapper
 
class DelayImpDirWrapper
class DelayImpDirWrapper
 
- + - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Static Public Attributes inherited from ImportBaseEntryWrapper
- Static Public Attributes inherited from ImportBaseEntryWrapper
static bufsize_t NameLenLimit = 0xFF
 
- Protected Attributes inherited from ImportBaseEntryWrapper
- Protected Attributes inherited from ImportBaseEntryWrapper
std::map< offset_t, size_t > thunkToFuncMap
 
ImportBaseDirWrapper * impDir
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -397,7 +399,7 @@ Additional Inherited Members
- +
enum DelayImpEntryWrapper::DelayImpDirFIDenum DelayImpEntryWrapper::DelayImpDirFID
@@ -431,25 +433,17 @@ Additional Inherited Members DelayImpEntryWrapper::DelayImpEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - DelayImpDirWrapper *  - importsDir, + DelayImpDirWrapper * importsDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -522,19 +516,12 @@ Here is the call graph for this function:
Executable::addr_type DelayImpEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -614,8 +601,7 @@ Here is the call graph for this function: QString DelayImpEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -709,19 +695,12 @@ Here is the call graph for this function: void * DelayImpEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -780,7 +759,7 @@ Here is the call graph for this function: virtual size_t DelayImpEntryWrapper::getFieldsCount ( - ) + ) @@ -809,7 +788,7 @@ Here is the call graph for this function: IMAGE_IMPORT_BY_NAME * DelayImpEntryWrapper::getFirstImpByNamePtr ( - ) + ) @@ -896,7 +875,7 @@ Here is the call graph for this function: char * DelayImpEntryWrapper::getLibraryName ( - ) + ) @@ -985,7 +964,7 @@ Here is the call graph for this function: QString DelayImpEntryWrapper::getName ( - ) + ) @@ -1077,7 +1056,7 @@ Here is the call graph for this function: void * DelayImpEntryWrapper::getPtr ( - ) + ) @@ -1134,7 +1113,7 @@ Here is the call graph for this function: bufsize_t DelayImpEntryWrapper::getSize ( - ) + ) @@ -1194,8 +1173,7 @@ Here is the call graph for this function: bool DelayImpEntryWrapper::loadNextEntry ( - size_t  - entryNum) + size_t entryNum) @@ -1285,7 +1263,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_func_wrapper-members.html b/class_delay_imp_func_wrapper-members.html index 6217595a..298d6150 100644 --- a/class_delay_imp_func_wrapper-members.html +++ b/class_delay_imp_func_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -136,13 +138,13 @@ $(function() { getPtr()DelayImpFuncWrapperinlinevirtual getShortName()ImportBaseFuncWrapper getSize()DelayImpFuncWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()DelayImpFuncWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getThunkValSize()ImportBaseFuncWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -189,7 +191,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_delay_imp_func_wrapper.html b/class_delay_imp_func_wrapper.html index c75c4b7e..2d3e3ba8 100644 --- a/class_delay_imp_func_wrapper.html +++ b/class_delay_imp_func_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DelayImpFuncWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -136,49 +138,49 @@ Collaboration diagram for DelayImpFuncWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, NAMETHUNK_ADDR -, IAT_ADDR -, BOUND_IAT_ADDR +
enum  FieldID {
+  NONE = FIELD_NONE +, NAMETHUNK_ADDR +, IAT_ADDR +, BOUND_IAT_ADDR ,
-  UNLOAD_IAT_ADDR -, FIELD_COUNTER +  UNLOAD_IAT_ADDR +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -191,7 +193,7 @@ Public Member Functions - + @@ -202,7 +204,7 @@ Public Member Functions - + @@ -239,7 +241,7 @@ Public Member Functions - + @@ -280,7 +282,7 @@ Public Member Functions - + @@ -299,12 +301,12 @@ Public Member Functions - - + + - - + + @@ -332,10 +334,10 @@ Public Member Functions

Public Member Functions

 DelayImpFuncWrapper (PEFile *pe, DelayImpEntryWrapper *parentDir, size_t entryNumber)
 DelayImpFuncWrapper (PEFile *pe, DelayImpEntryWrapper *parentDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
char * getFunctionName ()
char * getFunctionName ()
 
uint16_t getHint ()
uint16_t getHint ()
 
bool isByOrdinal ()
bool isByOrdinal ()
 
virtual uint64_t getOrdinal ()
virtual uint64_t getOrdinal ()
 
offset_t callVia ()
offset_t callVia ()
 
- Public Member Functions inherited from ImportBaseFuncWrapper
- Public Member Functions inherited from ImportBaseFuncWrapper
 ImportBaseFuncWrapper (PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
 
virtual QString getName ()
 
bufsize_t getThunkValSize ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -350,24 +352,24 @@ Additional Inherited Members - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -382,7 +384,7 @@ Additional Inherited Members
- +
enum DelayImpFuncWrapper::FieldIDenum DelayImpFuncWrapper::FieldID
@@ -412,25 +414,17 @@ Additional Inherited Members DelayImpFuncWrapper::DelayImpFuncWrapper ( - PEFile *  - pe, + PEFile * pe, - DelayImpEntryWrapper *  - parentDir, + DelayImpEntryWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -457,7 +451,7 @@ Additional Inherited Members offset_t DelayImpFuncWrapper::callVia ( - ) + ) @@ -528,19 +522,12 @@ Here is the call graph for this function:
Executable::addr_type DelayImpFuncWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -620,8 +607,7 @@ Here is the call graph for this function: QString DelayImpFuncWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -660,19 +646,12 @@ Here is the call graph for this function: void * DelayImpFuncWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -767,7 +746,7 @@ Here is the call graph for this function: virtual size_t DelayImpFuncWrapper::getFieldsCount ( - ) + ) @@ -796,19 +775,12 @@ Here is the call graph for this function: bufsize_t DelayImpFuncWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -848,7 +820,7 @@ Here is the call graph for this function: char * DelayImpFuncWrapper::getFunctionName ( - ) + ) @@ -924,7 +896,7 @@ Here is the call graph for this function: uint16_t DelayImpFuncWrapper::getHint ( - ) + ) @@ -996,7 +968,7 @@ Here is the call graph for this function: uint64_t DelayImpFuncWrapper::getOrdinal ( - ) + ) @@ -1067,7 +1039,7 @@ Here is the call graph for this function: virtual void * DelayImpFuncWrapper::getPtr ( - ) + ) @@ -1163,7 +1135,7 @@ Here is the call graph for this function: virtual bufsize_t DelayImpFuncWrapper::getSize ( - ) + ) @@ -1202,7 +1174,7 @@ Here is the call graph for this function: virtual size_t DelayImpFuncWrapper::getSubFieldsCount ( - ) + ) @@ -1231,7 +1203,7 @@ Here is the call graph for this function: bool DelayImpFuncWrapper::isByOrdinal ( - ) + ) @@ -1302,7 +1274,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_dos_hdr_wrapper-members.html b/class_dos_hdr_wrapper-members.html index d34be457..e4d288de 100644 --- a/class_dos_hdr_wrapper-members.html +++ b/class_dos_hdr_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -114,9 +116,9 @@ $(function() { getOffset(void *ptr, bool allowExceptions=false)ExeElementWrappervirtual getPtr()DosHdrWrapperinlinevirtual getSize()DosHdrWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -160,7 +162,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_dos_hdr_wrapper.html b/class_dos_hdr_wrapper.html index f67e22ea..6dc0221b 100644 --- a/class_dos_hdr_wrapper.html +++ b/class_dos_hdr_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: DosHdrWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -98,56 +100,56 @@ Collaboration diagram for DosHdrWrapper: -

Public Types

enum  DosFieldId {
-  NONE = FIELD_NONE -, MAGIC = 0 -, CBLP -, CP +
enum  DosFieldId {
+  NONE = FIELD_NONE +, MAGIC = 0 +, CBLP +, CP ,
-  CRLC -, CPARHDR -, MINALLOC -, MAXALLOC +  CRLC +, CPARHDR +, MINALLOC +, MAXALLOC ,
-  SS -, SP -, CSUM -, IP +  SS +, SP +, CSUM +, IP ,
-  CS -, LFARLC -, OVNO -, RES +  CS +, LFARLC +, OVNO +, RES ,
-  OEMID -, OEMINFO -, RES2 -, LFNEW +  OEMID +, OEMINFO +, RES2 +, LFNEW ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + @@ -194,7 +196,7 @@ Public Member Functions - + @@ -213,12 +215,12 @@ Public Member Functions - - + + - - + + @@ -246,15 +248,15 @@ Public Member Functions

Public Member Functions

 DosHdrWrapper (Executable *dosExe)
 DosHdrWrapper (Executable *dosExe)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -269,7 +271,7 @@ Additional Inherited Members
- +
enum DosHdrWrapper::DosFieldIdenum DosHdrWrapper::DosFieldId
@@ -314,8 +316,7 @@ Additional Inherited Members DosHdrWrapper::DosHdrWrapper ( - Executable *  - dosExe) + Executable * dosExe) @@ -343,19 +344,12 @@ Additional Inherited Members Executable::addr_type DosHdrWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -393,8 +387,7 @@ Here is the call graph for this function:
QString DosHdrWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -433,19 +426,12 @@ Here is the call graph for this function: void * DosHdrWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -492,7 +478,7 @@ Here is the call graph for this function: virtual size_t DosHdrWrapper::getFieldsCount ( - ) + ) @@ -521,7 +507,7 @@ Here is the call graph for this function: virtual QString DosHdrWrapper::getName ( - ) + ) @@ -550,7 +536,7 @@ Here is the call graph for this function: virtual void * DosHdrWrapper::getPtr ( - ) + ) @@ -591,7 +577,7 @@ Here is the call graph for this function: virtual bufsize_t DosHdrWrapper::getSize ( - ) + ) @@ -625,7 +611,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exception_dir_wrapper-members.html b/class_exception_dir_wrapper-members.html index f3c71d72..47d3b91e 100644 --- a/class_exception_dir_wrapper-members.html +++ b/class_exception_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -135,12 +137,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()ExceptionDirWrapperinlinevirtual getSize()ExceptionDirWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -181,7 +183,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exception_dir_wrapper.html b/class_exception_dir_wrapper.html index 8eb12d80..948ff4c5 100644 --- a/class_exception_dir_wrapper.html +++ b/class_exception_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExceptionDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,25 +137,25 @@ Collaboration diagram for ExceptionDirWrapper: - + - + - + - + - + - + - + - + - + - + @@ -162,7 +164,7 @@ Public Member Functions - + @@ -173,7 +175,7 @@ Public Member Functions - + @@ -210,7 +212,7 @@ Public Member Functions - + @@ -255,7 +257,7 @@ Public Member Functions - + @@ -274,12 +276,12 @@ Public Member Functions - - + + - - + + @@ -307,12 +309,12 @@ Public Member Functions

Public Member Functions

 ExceptionDirWrapper (PEFile *pe)
 ExceptionDirWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -327,7 +329,7 @@ Protected Member Functions - + @@ -335,30 +337,30 @@ Protected Member Functions

Protected Member Functions

IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * exceptFunc64 ()
IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * exceptFunc64 ()
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class ExceptionEntryWrapper
class ExceptionEntryWrapper
 
- + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -378,8 +380,7 @@ Additional Inherited Members ExceptionDirWrapper::ExceptionDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -492,7 +493,7 @@ Here is the call graph for this function: IMAGE_IA64_RUNTIME_FUNCTION_ENTRY * ExceptionDirWrapper::exceptFunc64 ( - ) + ) @@ -581,8 +582,7 @@ Here is the call graph for this function: virtual QString ExceptionDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -611,19 +611,12 @@ Here is the call graph for this function: virtual QString ExceptionDirWrapper::getFieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -665,19 +658,12 @@ Here is the call graph for this function: virtual void * ExceptionDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -721,7 +707,7 @@ Here is the call graph for this function: virtual size_t ExceptionDirWrapper::getFieldsCount ( - ) + ) @@ -750,7 +736,7 @@ Here is the call graph for this function: virtual QString ExceptionDirWrapper::getName ( - ) + ) @@ -779,7 +765,7 @@ Here is the call graph for this function: virtual void * ExceptionDirWrapper::getPtr ( - ) + ) @@ -872,7 +858,7 @@ Here is the call graph for this function: virtual bufsize_t ExceptionDirWrapper::getSize ( - ) + ) @@ -901,7 +887,7 @@ Here is the call graph for this function: bool ExceptionDirWrapper::wrap ( - ) + ) @@ -1033,7 +1019,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exception_entry_wrapper-members.html b/class_exception_entry_wrapper-members.html index 4a68aab7..83969e0c 100644 --- a/class_exception_entry_wrapper-members.html +++ b/class_exception_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -129,12 +131,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()ExceptionEntryWrappervirtual getSize()ExceptionEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExceptionEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -172,7 +174,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exception_entry_wrapper.html b/class_exception_entry_wrapper.html index f4b91441..9a3a4191 100644 --- a/class_exception_entry_wrapper.html +++ b/class_exception_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExceptionEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,40 +103,40 @@ Collaboration diagram for ExceptionEntryWrapper: -

Public Types

enum  ExceptionBlockFID {
-  NONE = FIELD_NONE -, BEGIN_ADDR -, END_ADDR -, UNWIND_INFO_ADDR +
enum  ExceptionBlockFID {
+  NONE = FIELD_NONE +, BEGIN_ADDR +, END_ADDR +, UNWIND_INFO_ADDR ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + @@ -171,7 +173,7 @@ Public Member Functions - + @@ -214,7 +216,7 @@ Public Member Functions - + @@ -233,12 +235,12 @@ Public Member Functions - - + + - - + + @@ -266,10 +268,10 @@ Public Member Functions

Public Member Functions

 ExceptionEntryWrapper (Executable *pe, ExceptionDirWrapper *parentDir, size_t entryNumber)
 ExceptionEntryWrapper (Executable *pe, ExceptionDirWrapper *parentDir, size_t entryNumber)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -284,19 +286,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -311,7 +313,7 @@ Additional Inherited Members
- +
enum ExceptionEntryWrapper::ExceptionBlockFIDenum ExceptionEntryWrapper::ExceptionBlockFID
@@ -340,25 +342,17 @@ Additional Inherited Members ExceptionEntryWrapper::ExceptionEntryWrapper ( - Executable *  - pe, + Executable * pe, - ExceptionDirWrapper *  - parentDir, + ExceptionDirWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -385,19 +379,12 @@ Additional Inherited Members Executable::addr_type ExceptionEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -435,8 +422,7 @@ Here is the call graph for this function:
QString ExceptionEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -477,19 +463,12 @@ Here is the call graph for this function: void * ExceptionEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -587,7 +566,7 @@ Here is the call graph for this function: virtual size_t ExceptionEntryWrapper::getFieldsCount ( - ) + ) @@ -616,7 +595,7 @@ Here is the call graph for this function: virtual QString ExceptionEntryWrapper::getName ( - ) + ) @@ -645,7 +624,7 @@ Here is the call graph for this function: void * ExceptionEntryWrapper::getPtr ( - ) + ) @@ -741,7 +720,7 @@ Here is the call graph for this function: bufsize_t ExceptionEntryWrapper::getSize ( - ) + ) @@ -840,7 +819,7 @@ Here is the call graph for this function: virtual size_t ExceptionEntryWrapper::getSubFieldsCount ( - ) + ) @@ -869,7 +848,7 @@ Here is the call graph for this function: bool ExceptionEntryWrapper::wrap ( - ) + ) @@ -893,7 +872,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_builder-members.html b/class_exe_builder-members.html index 3e96ab4e..5183dfc4 100644 --- a/class_exe_builder-members.html +++ b/class_exe_builder-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_builder.html b/class_exe_builder.html index 1a9becac..2640b09a 100644 --- a/class_exe_builder.html +++ b/class_exe_builder.html @@ -3,12 +3,14 @@ - + BearParser: ExeBuilder Class Reference + + @@ -30,7 +32,7 @@ - + @@ -81,15 +83,15 @@ $(function() { - + - + - + - + - +

Public Member Functions

 ExeBuilder ()
 ExeBuilder ()
 
virtual ~ExeBuilder ()
virtual ~ExeBuilder ()
 
virtual bool signatureMatches (AbstractByteBuffer *buf)=0
virtual bool signatureMatches (AbstractByteBuffer *buf)=0
 
virtual Executable * build (AbstractByteBuffer *buf)=0
virtual Executable * build (AbstractByteBuffer *buf)=0
 
virtual QString typeName ()=0
virtual QString typeName ()=0
 

Detailed Description

@@ -108,7 +110,7 @@ Public Member Functions ExeBuilder::ExeBuilder ( - ) + ) @@ -135,7 +137,7 @@ Public Member Functions virtual ExeBuilder::~ExeBuilder ( - ) + ) @@ -163,8 +165,7 @@ Public Member Functions virtual Executable * ExeBuilder::build ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -191,8 +192,7 @@ Public Member Functions virtual bool ExeBuilder::signatureMatches ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -219,7 +219,7 @@ Public Member Functions virtual QString ExeBuilder::typeName ( - ) + ) @@ -240,7 +240,7 @@ Public Member Functions
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_element_wrapper-members.html b/class_exe_element_wrapper-members.html index 7f99aeb8..3ac273e5 100644 --- a/class_exe_element_wrapper-members.html +++ b/class_exe_element_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -106,9 +108,9 @@ $(function() { getOffset(void *ptr, bool allowExceptions=false)ExeElementWrappervirtual getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -138,7 +140,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_element_wrapper.html b/class_exe_element_wrapper.html index 99218302..e0ebc9ba 100644 --- a/class_exe_element_wrapper.html +++ b/class_exe_element_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExeElementWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -98,67 +100,67 @@ Collaboration diagram for ExeElementWrapper: - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -177,12 +179,12 @@ Public Member Functions - - + + - - + + @@ -210,24 +212,24 @@ Public Member Functions

Public Member Functions

 ExeElementWrapper (Executable *exe)
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
virtual ~ExeElementWrapper ()
 
virtual bool wrap ()
virtual bool wrap ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
virtual void * getPtr ()=0
virtual void * getPtr ()=0
 
virtual bufsize_t getSize ()=0
virtual bufsize_t getSize ()=0
 
virtual QString getName ()=0
virtual QString getName ()=0
 
virtual size_t getFieldsCount ()=0
virtual size_t getFieldsCount ()=0
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual offset_t getOffset ()
virtual offset_t getOffset ()
 
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)=0
virtual void * getFieldPtr (size_t fieldId, size_t subField)=0
 
void * getFieldPtr (size_t fieldId)
void * getFieldPtr (size_t fieldId)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual offset_t getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE)
virtual offset_t getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
virtual bool hasSubfieldWrapper (size_t parentType)
virtual bool hasSubfieldWrapper (size_t parentType)
 
virtual QString getFieldName (size_t fieldId)=0
virtual QString getFieldName (size_t fieldId)=0
 
virtual WrappedValue getWrappedValue (size_t fieldId, size_t subField)
virtual WrappedValue getWrappedValue (size_t fieldId, size_t subField)
 
virtual WrappedValue getWrappedValue (size_t fieldId)
virtual WrappedValue getWrappedValue (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual uint64_t getNumValue (size_t fieldId, size_t subField, bool *isOk)
virtual uint64_t getNumValue (size_t fieldId, size_t subField, bool *isOk)
 
uint64_t getNumValue (size_t fieldId, bool *isOk)
uint64_t getNumValue (size_t fieldId, bool *isOk)
 
virtual bool setNumValue (size_t fieldId, size_t subField, uint64_t val)
virtual bool setNumValue (size_t fieldId, size_t subField, uint64_t val)
 
bool setNumValue (size_t fieldId, uint64_t val)
bool setNumValue (size_t fieldId, uint64_t val)
 
Executable * getExe ()
Executable * getExe ()
 
bool isBit64 ()
bool isBit64 ()
 
bool isBit32 ()
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Protected Member Functions

virtual bool canCopyToOffset (offset_t rawOffset)
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
bool copyToOffset (offset_t rawOffset)
 
- +

Protected Attributes

Executable * m_Exe
Executable * m_Exe
 
- +

Friends

class Executable
class Executable
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -244,8 +246,7 @@ Additional Inherited Members ExeElementWrapper::ExeElementWrapper ( - Executable *  - exe) + Executable * exe) @@ -280,7 +281,7 @@ Here is the call graph for this function: virtual ExeElementWrapper::~ExeElementWrapper ( - ) + ) @@ -308,8 +309,7 @@ Here is the call graph for this function: bool ExeElementWrapper::canCopyToOffset ( - offset_t  - rawOffset) + offset_t rawOffset) @@ -356,19 +356,12 @@ Here is the call graph for this function: virtual Executable::addr_type ExeElementWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -396,19 +389,12 @@ Here is the call graph for this function: virtual WrappedValue::data_type ExeElementWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -436,8 +422,7 @@ Here is the call graph for this function: bool ExeElementWrapper::copyToOffset ( - offset_t  - rawOffset) + offset_t rawOffset) @@ -500,7 +485,7 @@ Here is the call graph for this function: virtual BYTE * ExeElementWrapper::getContent ( - ) + ) @@ -541,7 +526,7 @@ Here is the call graph for this function: virtual bufsize_t ExeElementWrapper::getContentSize ( - ) + ) @@ -580,7 +565,7 @@ Here is the call graph for this function: Executable * ExeElementWrapper::getExe ( - ) + ) @@ -607,8 +592,7 @@ Here is the call graph for this function: virtual QString ExeElementWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -635,19 +619,12 @@ Here is the call graph for this function: offset_t ExeElementWrapper::getFieldOffset ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -691,8 +668,7 @@ Here is the call graph for this function: void * ExeElementWrapper::getFieldPtr ( - size_t  - fieldId) + size_t fieldId) @@ -730,19 +706,12 @@ Here is the call graph for this function: virtual void * ExeElementWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -768,7 +737,7 @@ Here is the call graph for this function: virtual size_t ExeElementWrapper::getFieldsCount ( - ) + ) @@ -795,19 +764,12 @@ Here is the call graph for this function: bufsize_t ExeElementWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -853,7 +815,7 @@ Here is the call graph for this function: virtual QString ExeElementWrapper::getName ( - ) + ) @@ -880,19 +842,12 @@ Here is the call graph for this function: uint64_t ExeElementWrapper::getNumValue ( - size_t  - fieldId, + size_t fieldId, - bool *  - isOk  - - - - ) - + bool * isOk ) @@ -929,25 +884,17 @@ Here is the call graph for this function: uint64_t ExeElementWrapper::getNumValue ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField, + size_t subField, - bool *  - isOk  - - - - ) - + bool * isOk ) @@ -1012,7 +959,7 @@ Here is the call graph for this function: offset_t ExeElementWrapper::getOffset ( - ) + ) @@ -1052,19 +999,12 @@ Here is the call graph for this function: offset_t ExeElementWrapper::getOffset ( - void *  - ptr, + void * ptr, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -1108,7 +1048,7 @@ Here is the call graph for this function: virtual void * ExeElementWrapper::getPtr ( - ) + ) @@ -1135,7 +1075,7 @@ Here is the call graph for this function: virtual bufsize_t ExeElementWrapper::getSize ( - ) + ) @@ -1162,7 +1102,7 @@ Here is the call graph for this function: virtual size_t ExeElementWrapper::getSubFieldsCount ( - ) + ) @@ -1191,8 +1131,7 @@ Here is the call graph for this function: virtual WrappedValue ExeElementWrapper::getWrappedValue ( - size_t  - fieldId) + size_t fieldId) @@ -1230,19 +1169,12 @@ Here is the call graph for this function: WrappedValue ExeElementWrapper::getWrappedValue ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1297,8 +1229,7 @@ Here is the call graph for this function: virtual bool ExeElementWrapper::hasSubfieldWrapper ( - size_t  - parentType) + size_t parentType) @@ -1327,7 +1258,7 @@ Here is the call graph for this function: bool ExeElementWrapper::isBit32 ( - ) + ) @@ -1365,7 +1296,7 @@ Here is the call graph for this function: bool ExeElementWrapper::isBit64 ( - ) + ) @@ -1403,25 +1334,17 @@ Here is the call graph for this function: bool ExeElementWrapper::setNumValue ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField, + size_t subField, - uint64_t  - val  - - - - ) - + uint64_t val ) @@ -1492,19 +1415,12 @@ Here is the call graph for this function: bool ExeElementWrapper::setNumValue ( - size_t  - fieldId, + size_t fieldId, - uint64_t  - val  - - - - ) - + uint64_t val ) @@ -1541,8 +1457,7 @@ Here is the call graph for this function: virtual QString ExeElementWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1571,7 +1486,7 @@ Here is the call graph for this function: virtual bool ExeElementWrapper::wrap ( - ) + ) @@ -1645,7 +1560,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_exception-members.html b/class_exe_exception-members.html index 415c19e0..fc9f2fed 100644 --- a/class_exe_exception-members.html +++ b/class_exe_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_exception.html b/class_exe_exception.html index 0b25b182..f4813f82 100644 --- a/class_exe_exception.html +++ b/class_exe_exception.html @@ -3,12 +3,14 @@ - + BearParser: ExeException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,9 +95,9 @@ Collaboration diagram for ExeException: - + - + @@ -111,10 +113,10 @@ Public Member Functions

Public Member Functions

 ExeException (const QString info)
 ExeException (const QString info)
 
- Public Member Functions inherited from CustomException
- Public Member Functions inherited from CustomException
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
- + - + @@ -138,8 +140,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Protected Member Functions inherited from CustomException
- Protected Member Functions inherited from CustomException
virtual QString codeToString ()
 
- Protected Attributes inherited from CustomException
- Protected Attributes inherited from CustomException
QString m_info
 
std::string m_strInfo
ExeException::ExeException (const QString info)const QString info)
@@ -160,7 +161,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_factory-members.html b/class_exe_factory-members.html index a1c3f46b..2c051959 100644 --- a/class_exe_factory-members.html +++ b/class_exe_factory-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_factory.html b/class_exe_factory.html index 3a558aad..71e654bc 100644 --- a/class_exe_factory.html +++ b/class_exe_factory.html @@ -3,12 +3,14 @@ - + BearParser: ExeFactory Class Reference + + @@ -30,7 +32,7 @@ - + @@ -83,29 +85,29 @@ $(function() { -

Public Types

enum  exe_type { NONE = 0 -, PE = 1 -, MZ -, TYPES_COUNT +
enum  exe_type { NONE = 0 +, PE = 1 +, MZ +, TYPES_COUNT }
 
- + - + - + - + - +

Static Public Member Functions

static void init ()
static void init ()
 
static void destroy ()
static void destroy ()
 
static exe_type findMatching (AbstractByteBuffer *buf)
static exe_type findMatching (AbstractByteBuffer *buf)
 
static Executable * build (AbstractByteBuffer *buf, exe_type type)
static Executable * build (AbstractByteBuffer *buf, exe_type type)
 
static QString getTypeName (exe_type type)
static QString getTypeName (exe_type type)
 
- +

Static Protected Attributes

static std::map< exe_type, ExeBuilder * > builders
static std::map< exe_type, ExeBuilder * > builders
 

Detailed Description

@@ -119,7 +121,7 @@ Static Protected Attributes
- +
enum ExeFactory::exe_typeenum ExeFactory::exe_type
@@ -147,19 +149,12 @@ Static Protected Attributes Executable * ExeFactory::build ( - AbstractByteBuffer *  - buf, + AbstractByteBuffer * buf, - exe_type  - type  - - - - ) - + exe_type type ) @@ -199,7 +194,7 @@ Here is the call graph for this function:
void ExeFactory::destroy ( - ) + ) @@ -234,10 +229,9 @@ Here is the call graph for this function: - + - - +
ExeFactory::exe_type ExeFactory::findMatching ExeFactory::exe_type ExeFactory::findMatching (AbstractByteBuffer * buf)AbstractByteBuffer * buf)
@@ -276,8 +270,7 @@ Here is the call graph for this function: QString ExeFactory::getTypeName ( - exe_type  - type) + exe_type type) @@ -318,7 +311,7 @@ Here is the call graph for this function: void ExeFactory::init ( - ) + ) @@ -344,7 +337,7 @@ Here is the call graph for this function: - +
std::map< ExeFactory::exe_type, ExeBuilder * > ExeFactory::buildersstd::map< ExeFactory::exe_type, ExeBuilder * > ExeFactory::builders
@@ -365,7 +358,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_factory_exception-members.html b/class_exe_factory_exception-members.html index 5165dddc..8d681ced 100644 --- a/class_exe_factory_exception-members.html +++ b/class_exe_factory_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_factory_exception.html b/class_exe_factory_exception.html index aeddf73d..71a3174c 100644 --- a/class_exe_factory_exception.html +++ b/class_exe_factory_exception.html @@ -3,12 +3,14 @@ - + BearParser: ExeFactoryException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,9 +95,9 @@ Collaboration diagram for ExeFactoryException: - + - + @@ -111,10 +113,10 @@ Public Member Functions

Public Member Functions

 ExeFactoryException (const QString info)
 ExeFactoryException (const QString info)
 
- Public Member Functions inherited from CustomException
- Public Member Functions inherited from CustomException
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
- + - + @@ -138,8 +140,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Protected Member Functions inherited from CustomException
- Protected Member Functions inherited from CustomException
virtual QString codeToString ()
 
- Protected Attributes inherited from CustomException
- Protected Attributes inherited from CustomException
QString m_info
 
std::string m_strInfo
ExeFactoryException::ExeFactoryException (const QString info)const QString info)
@@ -160,7 +161,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_node_wrapper-members.html b/class_exe_node_wrapper-members.html index 68e43e0d..9fc73cd6 100644 --- a/class_exe_node_wrapper-members.html +++ b/class_exe_node_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -124,12 +126,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -165,7 +167,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_node_wrapper.html b/class_exe_node_wrapper.html index e4a9086f..12f384ce 100644 --- a/class_exe_node_wrapper.html +++ b/class_exe_node_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExeNodeWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -100,49 +102,49 @@ Collaboration diagram for ExeNodeWrapper: - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -197,7 +199,7 @@ Public Member Functions - + @@ -216,12 +218,12 @@ Public Member Functions - - + + - - + + @@ -249,21 +251,21 @@ Public Member Functions

Public Member Functions

 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual ~ExeNodeWrapper ()
virtual ~ExeNodeWrapper ()
 
virtual bool wrap ()
virtual bool wrap ()
 
virtual void reloadMapping ()
virtual void reloadMapping ()
 
virtual ExeNodeWrapper * getEntryAt (size_t fieldId)
virtual ExeNodeWrapper * getEntryAt (size_t fieldId)
 
virtual size_t getEntriesCount ()
virtual size_t getEntriesCount ()
 
virtual size_t getEntriesNum ()
virtual size_t getEntriesNum ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual ExeNodeWrapper * getParentNode ()
virtual ExeNodeWrapper * getParentNode ()
 
size_t getEntryId ()
size_t getEntryId ()
 
virtual void * getSubfieldPtr (size_t fieldId, size_t subField)
virtual void * getSubfieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getSubfieldSize (size_t fieldId, size_t subField)
virtual bufsize_t getSubfieldSize (size_t fieldId, size_t subField)
 
virtual QString getSubfieldName (size_t fieldId, size_t subField)
virtual QString getSubfieldName (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)=0
virtual QString getFieldName (size_t fieldId)=0
 
virtual bool canAddEntry ()
virtual bool canAddEntry ()
 
virtual ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
virtual ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
 
ExeNodeWrapper * getLastEntry ()
ExeNodeWrapper * getLastEntry ()
 
virtual offset_t getNextEntryOffset ()
virtual offset_t getNextEntryOffset ()
 
virtual bufsize_t geEntrySize ()
virtual bufsize_t geEntrySize ()
 
virtual bool isValid ()
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - + - + - + @@ -271,19 +273,19 @@ Protected Member Functions

Protected Member Functions

size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual void clear ()
virtual void clear ()
 
virtual void addMapping (ExeNodeWrapper *entry)
virtual void addMapping (ExeNodeWrapper *entry)
 
virtual bool loadNextEntry (size_t entryNum)
virtual bool loadNextEntry (size_t entryNum)
 
virtual ExeNodeWrapper * addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)
virtual ExeNodeWrapper * addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - +

Protected Attributes

ExeNodeWrapper * parentNode
ExeNodeWrapper * parentNode
 
size_t entryNum
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -300,19 +302,12 @@ Additional Inherited Members ExeNodeWrapper::ExeNodeWrapper ( - Executable *  - pe, + Executable * pe, - ExeNodeWrapper *  - parent = NULL  - - - - ) - + ExeNodeWrapper * parent = NULL )
@@ -340,25 +335,17 @@ Here is the call graph for this function:
ExeNodeWrapper::ExeNodeWrapper ( - Executable *  - pe, + Executable * pe, - ExeNodeWrapper *  - parent, + ExeNodeWrapper * parent, - size_t  - entryNumber  - - - - ) - + size_t entryNumber )
@@ -389,7 +376,7 @@ Here is the call graph for this function:
virtual ExeNodeWrapper::~ExeNodeWrapper ( - ) + ) @@ -430,8 +417,7 @@ Here is the call graph for this function: ExeNodeWrapper * ExeNodeWrapper::addEntry ( - ExeNodeWrapper *  - entry) + ExeNodeWrapper * entry) @@ -524,19 +510,12 @@ Here is the call graph for this function: ExeNodeWrapper * ExeNodeWrapper::addEntryAt ( - ExeNodeWrapper *  - entry, + ExeNodeWrapper * entry, - offset_t  - nextOffset  - - - - ) - + offset_t nextOffset ) @@ -622,8 +601,7 @@ Here is the call graph for this function: virtual void ExeNodeWrapper::addMapping ( - ExeNodeWrapper *  - entry) + ExeNodeWrapper * entry) @@ -652,7 +630,7 @@ Here is the call graph for this function: bool ExeNodeWrapper::canAddEntry ( - ) + ) @@ -718,7 +696,7 @@ Here is the call graph for this function: void ExeNodeWrapper::clear ( - ) + ) @@ -758,7 +736,7 @@ Here is the call graph for this function: bufsize_t ExeNodeWrapper::geEntrySize ( - ) + ) @@ -806,7 +784,7 @@ Here is the call graph for this function: virtual size_t ExeNodeWrapper::getEntriesCount ( - ) + ) @@ -842,8 +820,7 @@ Here is the call graph for this function: size_t ExeNodeWrapper::getEntriesCount ( - std::vector< ExeNodeWrapper * > &  - _entries) + std::vector< ExeNodeWrapper * > & _entries) @@ -880,7 +857,7 @@ Here is the call graph for this function: virtual size_t ExeNodeWrapper::getEntriesNum ( - ) + ) @@ -918,8 +895,7 @@ Here is the call graph for this function: ExeNodeWrapper * ExeNodeWrapper::getEntryAt ( - size_t  - fieldId) + size_t fieldId) @@ -955,19 +931,12 @@ Here is the call graph for this function: ExeNodeWrapper * ExeNodeWrapper::getEntryAt ( - std::vector< ExeNodeWrapper * > &  - _entries, + std::vector< ExeNodeWrapper * > & _entries, - size_t  - fieldId  - - - - ) - + size_t fieldId ) @@ -1003,7 +972,7 @@ Here is the call graph for this function: size_t ExeNodeWrapper::getEntryId ( - ) + ) @@ -1030,8 +999,7 @@ Here is the call graph for this function: virtual QString ExeNodeWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -1057,7 +1025,7 @@ Here is the call graph for this function: ExeNodeWrapper * ExeNodeWrapper::getLastEntry ( - ) + ) @@ -1095,7 +1063,7 @@ Here is the call graph for this function: offset_t ExeNodeWrapper::getNextEntryOffset ( - ) + ) @@ -1143,7 +1111,7 @@ Here is the call graph for this function: virtual ExeNodeWrapper * ExeNodeWrapper::getParentNode ( - ) + ) @@ -1172,19 +1140,12 @@ Here is the call graph for this function: QString ExeNodeWrapper::getSubfieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1223,19 +1184,12 @@ Here is the call graph for this function: void * ExeNodeWrapper::getSubfieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1274,7 +1228,7 @@ Here is the call graph for this function: virtual size_t ExeNodeWrapper::getSubFieldsCount ( - ) + ) @@ -1305,19 +1259,12 @@ Here is the call graph for this function: bufsize_t ExeNodeWrapper::getSubfieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1356,8 +1303,7 @@ Here is the call graph for this function: bool ExeNodeWrapper::isMyEntryType ( - ExeNodeWrapper *  - entry) + ExeNodeWrapper * entry) @@ -1396,7 +1342,7 @@ Here is the call graph for this function: virtual bool ExeNodeWrapper::isValid ( - ) + ) @@ -1425,8 +1371,7 @@ Here is the call graph for this function: virtual bool ExeNodeWrapper::loadNextEntry ( - size_t  - entryNum) + size_t entryNum) @@ -1455,7 +1400,7 @@ Here is the call graph for this function: virtual void ExeNodeWrapper::reloadMapping ( - ) + ) @@ -1484,7 +1429,7 @@ Here is the call graph for this function: virtual bool ExeNodeWrapper::wrap ( - ) + ) @@ -1583,7 +1528,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_wrappers_container-members.html b/class_exe_wrappers_container-members.html index 420b0bb0..b62b4f8b 100644 --- a/class_exe_wrappers_container-members.html +++ b/class_exe_wrappers_container-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_exe_wrappers_container.html b/class_exe_wrappers_container.html index adef5723..a6c93a65 100644 --- a/class_exe_wrappers_container.html +++ b/class_exe_wrappers_container.html @@ -3,12 +3,14 @@ - + BearParser: ExeWrappersContainer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -84,34 +86,34 @@ $(function() { -

Public Types

enum  WRAPPERS { WR_NONE = size_t(-1) -, COUNT_WRAPPERS = 0 +
enum  WRAPPERS { WR_NONE = size_t(-1) +, COUNT_WRAPPERS = 0 }
 
- + - + - + - + - +

Public Member Functions

 ExeWrappersContainer ()
 ExeWrappersContainer ()
 
virtual ~ExeWrappersContainer (void)
virtual ~ExeWrappersContainer (void)
 
virtual ExeElementWrapper * getWrapper (size_t wrapperId)
virtual ExeElementWrapper * getWrapper (size_t wrapperId)
 
size_t wrappersCount ()
size_t wrappersCount ()
 
QString getWrapperName (size_t id)
QString getWrapperName (size_t id)
 
- + - +

Protected Member Functions

virtual void wrap (AbstractByteBuffer *v_buf)=0
virtual void wrap (AbstractByteBuffer *v_buf)=0
 
void clearWrappers ()
void clearWrappers ()
 
- +

Protected Attributes

std::map< size_t, ExeElementWrapper * > wrappers
std::map< size_t, ExeElementWrapper * > wrappers
 

Detailed Description

@@ -125,7 +127,7 @@ Protected Attributes
- +
enum ExeWrappersContainer::WRAPPERSenum ExeWrappersContainer::WRAPPERS
@@ -151,7 +153,7 @@ Protected Attributes ExeWrappersContainer::ExeWrappersContainer ( - ) + ) @@ -178,8 +180,7 @@ Protected Attributes virtual ExeWrappersContainer::~ExeWrappersContainer ( - void  - ) + void ) @@ -219,7 +220,7 @@ Here is the call graph for this function:
void ExeWrappersContainer::clearWrappers ( - ) + ) @@ -256,8 +257,7 @@ Here is the call graph for this function: ExeElementWrapper * ExeWrappersContainer::getWrapper ( - size_t  - wrapperId) + size_t wrapperId) @@ -291,8 +291,7 @@ Here is the call graph for this function: QString ExeWrappersContainer::getWrapperName ( - size_t  - id) + size_t id) @@ -326,8 +325,7 @@ Here is the call graph for this function: virtual void ExeWrappersContainer::wrap ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -354,7 +352,7 @@ Here is the call graph for this function: size_t ExeWrappersContainer::wrappersCount ( - ) + ) @@ -401,7 +399,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_executable-members.html b/class_executable-members.html index 661e4a29..068f32c5 100644 --- a/class_executable-members.html +++ b/class_executable-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -110,8 +112,8 @@ $(function() { getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getRawSize() constExecutableinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -148,7 +150,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_executable.html b/class_executable.html index 0ac2d29a..484a3851 100644 --- a/class_executable.html +++ b/class_executable.html @@ -3,12 +3,14 @@ - + BearParser: Executable Class Reference + + @@ -30,7 +32,7 @@ - + @@ -96,88 +98,88 @@ Collaboration diagram for Executable: - -

Public Types

enum  exe_bits { UNKNOWN = 0 -, BITS_16 = 16 -, BITS_32 = 32 -, BITS_64 = 64 +
enum  exe_bits { UNKNOWN = 0 +, BITS_16 = 16 +, BITS_32 = 32 +, BITS_64 = 64 }
 
enum  addr_type { NOT_ADDR = 0 -, RAW = 1 -, RVA = 2 -, VA = 3 +
enum  addr_type { NOT_ADDR = 0 +, RAW = 1 +, RVA = 2 +, VA = 3 }
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -190,12 +192,12 @@ Public Member Functions - - + + - - + + @@ -221,24 +223,24 @@ Public Member Functions

Public Member Functions

bool isBit64 ()
bool isBit64 ()
 
bool isBit32 ()
bool isBit32 ()
 
virtual ~Executable (void)
virtual ~Executable (void)
 
virtual exe_bits getBitMode ()
virtual exe_bits getBitMode ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
virtual offset_t getRawSize () const
virtual offset_t getRawSize () const
 
BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
 
BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
 
virtual BYTE * getContentAt (offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false)
virtual BYTE * getContentAt (offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false)
 
virtual bufsize_t getMappedSize (Executable::addr_type aType)=0
virtual bufsize_t getMappedSize (Executable::addr_type aType)=0
 
virtual bufsize_t getAlignment (Executable::addr_type aType) const =0
virtual bufsize_t getAlignment (Executable::addr_type aType) const =0
 
virtual offset_t getImageBase (bool recalculate=false)=0
virtual offset_t getImageBase (bool recalculate=false)=0
 
virtual offset_t getEntryPoint (Executable::addr_type aType=Executable::RVA)=0
virtual offset_t getEntryPoint (Executable::addr_type aType=Executable::RVA)=0
 
virtual bufsize_t getImageSize ()
virtual bufsize_t getImageSize ()
 
virtual size_t getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
virtual size_t getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
 
virtual bool isValidAddr (offset_t addr, addr_type addrType)
virtual bool isValidAddr (offset_t addr, addr_type addrType)
 
virtual bool isValidVA (offset_t va)
virtual bool isValidVA (offset_t va)
 
virtual offset_t convertAddr (offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)
virtual offset_t convertAddr (offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)
 
virtual offset_t toRaw (offset_t offset, addr_type addrType, bool allowExceptions=false)
virtual offset_t toRaw (offset_t offset, addr_type addrType, bool allowExceptions=false)
 
Executable::addr_type detectAddrType (offset_t addr, Executable::addr_type hintType)
Executable::addr_type detectAddrType (offset_t addr, Executable::addr_type hintType)
 
virtual offset_t rawToRva (offset_t raw)=0
virtual offset_t rawToRva (offset_t raw)=0
 
virtual offset_t rvaToRaw (offset_t rva)=0
virtual offset_t rvaToRaw (offset_t rva)=0
 
virtual offset_t VaToRva (offset_t va, bool autodetect=false)
virtual offset_t VaToRva (offset_t va, bool autodetect=false)
 
virtual offset_t rvaToVa (offset_t rva)
virtual offset_t rvaToVa (offset_t rva)
 
virtual offset_t vaToRaw (offset_t va)
virtual offset_t vaToRaw (offset_t va)
 
QString getFileName ()
QString getFileName ()
 
virtual bool resize (bufsize_t newSize)
virtual bool resize (bufsize_t newSize)
 
virtual bool isResized ()
virtual bool isResized ()
 
virtual bool isTruncated ()
virtual bool isTruncated ()
 
AbstractByteBuffer * getFileBuffer () const
AbstractByteBuffer * getFileBuffer () const
 
bufsize_t getFileSize () const
bufsize_t getFileSize () const
 
virtual bool dumpFragment (offset_t offset, bufsize_t size, QString fileName)
virtual bool dumpFragment (offset_t offset, bufsize_t size, QString fileName)
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Static Public Member Functions

static bool isBit64 (Executable *exe)
static bool isBit64 (Executable *exe)
 
static bool isBit32 (Executable *exe)
static bool isBit32 (Executable *exe)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- +

Protected Member Functions

 Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
- + - +

Protected Attributes

exe_bits bitMode
exe_bits bitMode
 
AbstractByteBuffer * buf
AbstractByteBuffer * buf
 

Detailed Description

@@ -252,7 +254,7 @@ Protected Attributes
- +
enum Executable::addr_typeenum Executable::addr_type
@@ -274,7 +276,7 @@ Protected Attributes
- +
enum Executable::exe_bitsenum Executable::exe_bits
@@ -302,8 +304,7 @@ Protected Attributes virtual Executable::~Executable ( - void  - ) + void ) @@ -330,19 +331,12 @@ Protected Attributes Executable::Executable ( - AbstractByteBuffer *  - v_buf, + AbstractByteBuffer * v_buf, - exe_bits  - v_bitMode  - - - - ) - + exe_bits v_bitMode ) @@ -379,25 +373,17 @@ Here is the call graph for this function:
offset_t Executable::convertAddr ( - offset_t  - inAddr, + offset_t inAddr, - Executable::addr_type  - inType, + Executable::addr_type inType, - Executable::addr_type  - outType  - - - - ) - + Executable::addr_type outType ) @@ -440,21 +426,14 @@ Here is the call graph for this function:
- + - - + - - - - - - - +
Executable::addr_type Executable::detectAddrType Executable::addr_type Executable::detectAddrType (offset_t addr, offset_t addr,
Executable::addr_type hintType 
)Executable::addr_type hintType )
@@ -492,25 +471,17 @@ Here is the call graph for this function:
bool Executable::dumpFragment ( - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - QString  - fileName  - - - - ) - + QString fileName ) @@ -549,8 +520,7 @@ Here is the call graph for this function: virtual bufsize_t Executable::getAlignment ( - Executable::addr_type  - aType) + Executable::addr_type aType) const @@ -577,19 +547,12 @@ Here is the call graph for this function: virtual size_t Executable::getAllEntryPoints ( - QMap< offset_t, QString > &  - entrypoints, + QMap< offset_t, QString > & entrypoints, - Executable::addr_type  - aType = Executable::RVA  - - - - ) - + Executable::addr_type aType = Executable::RVA ) @@ -627,9 +590,9 @@ Here is the call graph for this function: - + - +
virtual exe_bits Executable::getBitMode virtual exe_bits Executable::getBitMode ())
@@ -658,7 +621,7 @@ Here is the call graph for this function: virtual BYTE * Executable::getContent ( - ) + ) @@ -697,25 +660,17 @@ Here is the call graph for this function: BYTE * Executable::getContentAt ( - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -759,31 +714,22 @@ Here is the call graph for this function: BYTE * Executable::getContentAt ( - offset_t  - offset, + offset_t offset, - Executable::addr_type  - aType, + Executable::addr_type aType, - bufsize_t  - size, + bufsize_t size, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -848,25 +794,17 @@ Here is the call graph for this function: BYTE * Executable::getContentAtPtr ( - BYTE *  - ptr, + BYTE * ptr, - bufsize_t  - size, + bufsize_t size, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -916,7 +854,7 @@ Here is the call graph for this function: virtual bufsize_t Executable::getContentSize ( - ) + ) @@ -955,8 +893,7 @@ Here is the call graph for this function: virtual offset_t Executable::getEntryPoint ( - Executable::addr_type  - aType = Executable::RVA) + Executable::addr_type aType = Executable::RVA) @@ -983,7 +920,7 @@ Here is the call graph for this function: AbstractByteBuffer * Executable::getFileBuffer ( - ) + ) const @@ -1007,7 +944,7 @@ Here is the call graph for this function: QString Executable::getFileName ( - ) + ) @@ -1038,7 +975,7 @@ Here is the call graph for this function: bufsize_t Executable::getFileSize ( - ) + ) const @@ -1074,8 +1011,7 @@ Here is the call graph for this function: virtual offset_t Executable::getImageBase ( - bool  - recalculate = false) + bool recalculate = false) @@ -1102,7 +1038,7 @@ Here is the call graph for this function: virtual bufsize_t Executable::getImageSize ( - ) + ) @@ -1139,8 +1075,7 @@ Here is the call graph for this function: virtual bufsize_t Executable::getMappedSize ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -1167,7 +1102,7 @@ Here is the call graph for this function: virtual offset_t Executable::getRawSize ( - ) + ) const @@ -1204,7 +1139,7 @@ Here is the call graph for this function: bool Executable::isBit32 ( - ) + ) @@ -1240,8 +1175,7 @@ Here is the call graph for this function: static bool Executable::isBit32 ( - Executable *  - exe) + Executable * exe) @@ -1278,7 +1212,7 @@ Here is the call graph for this function: bool Executable::isBit64 ( - ) + ) @@ -1314,8 +1248,7 @@ Here is the call graph for this function: static bool Executable::isBit64 ( - Executable *  - exe) + Executable * exe) @@ -1352,7 +1285,7 @@ Here is the call graph for this function: virtual bool Executable::isResized ( - ) + ) @@ -1391,7 +1324,7 @@ Here is the call graph for this function: virtual bool Executable::isTruncated ( - ) + ) @@ -1430,19 +1363,12 @@ Here is the call graph for this function: bool Executable::isValidAddr ( - offset_t  - addr, + offset_t addr, - addr_type  - addrType  - - - - ) - + addr_type addrType ) @@ -1482,8 +1408,7 @@ Here is the call graph for this function: virtual bool Executable::isValidVA ( - offset_t  - va) + offset_t va) @@ -1527,8 +1452,7 @@ Here is the call graph for this function: virtual offset_t Executable::rawToRva ( - offset_t  - raw) + offset_t raw) @@ -1555,8 +1479,7 @@ Here is the call graph for this function: virtual bool Executable::resize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -1599,8 +1522,7 @@ Here is the call graph for this function: virtual offset_t Executable::rvaToRaw ( - offset_t  - rva) + offset_t rva) @@ -1627,8 +1549,7 @@ Here is the call graph for this function: virtual offset_t Executable::rvaToVa ( - offset_t  - rva) + offset_t rva) @@ -1667,25 +1588,17 @@ Here is the call graph for this function: offset_t Executable::toRaw ( - offset_t  - offset, + offset_t offset, - addr_type  - addrType, + addr_type addrType, - bool  - allowExceptions = false  - - - - ) - + bool allowExceptions = false ) @@ -1742,8 +1655,7 @@ Here is the call graph for this function: virtual offset_t Executable::vaToRaw ( - offset_t  - va) + offset_t va) @@ -1794,19 +1706,12 @@ Here is the call graph for this function: offset_t Executable::VaToRva ( - offset_t  - va, + offset_t va, - bool  - autodetect = false  - - - - ) - + bool autodetect = false ) @@ -1850,7 +1755,7 @@ Here is the call graph for this function: - +
exe_bits Executable::bitModeexe_bits Executable::bitMode
@@ -1895,7 +1800,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_export_dir_wrapper-members.html b/class_export_dir_wrapper-members.html index 28973bbb..f7f2f0de 100644 --- a/class_export_dir_wrapper-members.html +++ b/class_export_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -143,12 +145,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()ExportDirWrapperinlinevirtual getSize()ExportDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExportDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -198,7 +200,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_export_dir_wrapper.html b/class_export_dir_wrapper.html index 99da140b..6392dfd1 100644 --- a/class_export_dir_wrapper.html +++ b/class_export_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExportDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,52 +139,52 @@ Collaboration diagram for ExportDirWrapper: -

Public Types

enum  ExportDirFID {
-  NONE = FIELD_NONE -, CHARACTERISTIC -, TIMESTAMP -, MAJOR_VER +
enum  ExportDirFID {
+  NONE = FIELD_NONE +, CHARACTERISTIC +, TIMESTAMP +, MAJOR_VER ,
-  MINOR_VER -, NAME_RVA -, BASE -, FUNCTIONS_NUM +  MINOR_VER +, NAME_RVA +, BASE +, FUNCTIONS_NUM ,
-  NAMES_NUM -, FUNCTIONS_RVA -, FUNC_NAMES_RVA -, NAMES_ORDINALS_RVA +  NAMES_NUM +, FUNCTIONS_RVA +, FUNC_NAMES_RVA +, NAMES_ORDINALS_RVA ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + @@ -191,7 +193,7 @@ Public Member Functions - + @@ -202,7 +204,7 @@ Public Member Functions - + @@ -237,7 +239,7 @@ Public Member Functions - + @@ -280,7 +282,7 @@ Public Member Functions - + @@ -299,12 +301,12 @@ Public Member Functions - - + + - - + + @@ -332,18 +334,18 @@ Public Member Functions

Public Member Functions

 ExportDirWrapper (PEFile *pe)
 ExportDirWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual QString getLibraryName ()
virtual QString getLibraryName ()
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - + @@ -356,7 +358,7 @@ Protected Member Functions - + @@ -364,35 +366,35 @@ Protected Member Functions

Protected Member Functions

char * _getLibraryName ()
char * _getLibraryName ()
 
void clear ()
void clear ()
 
size_t mapNames ()
size_t mapNames ()
 
IMAGE_EXPORT_DIRECTORY * exportDir ()
IMAGE_EXPORT_DIRECTORY * exportDir ()
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - +

Protected Attributes

std::map< WORD, DWORD > ordToNameId
std::map< WORD, DWORD > ordToNameId
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class ExportEntryWrapper
class ExportEntryWrapper
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -407,7 +409,7 @@ Additional Inherited Members
- +
enum ExportDirWrapper::ExportDirFIDenum ExportDirWrapper::ExportDirFID
@@ -444,8 +446,7 @@ Additional Inherited Members ExportDirWrapper::ExportDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -551,7 +552,7 @@ Here is the call graph for this function:
char * ExportDirWrapper::_getLibraryName ( - ) + ) @@ -627,7 +628,7 @@ Here is the call graph for this function: void ExportDirWrapper::clear ( - ) + ) @@ -669,19 +670,12 @@ Here is the call graph for this function: Executable::addr_type ExportDirWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -719,7 +713,7 @@ Here is the call graph for this function: IMAGE_EXPORT_DIRECTORY * ExportDirWrapper::exportDir ( - ) + ) @@ -808,8 +802,7 @@ Here is the call graph for this function: QString ExportDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -902,19 +895,12 @@ Here is the call graph for this function: void * ExportDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -1010,7 +996,7 @@ Here is the call graph for this function: virtual size_t ExportDirWrapper::getFieldsCount ( - ) + ) @@ -1039,7 +1025,7 @@ Here is the call graph for this function: QString ExportDirWrapper::getLibraryName ( - ) + ) @@ -1121,7 +1107,7 @@ Here is the call graph for this function: QString ExportDirWrapper::getName ( - ) + ) @@ -1208,7 +1194,7 @@ Here is the call graph for this function: virtual void * ExportDirWrapper::getPtr ( - ) + ) @@ -1301,7 +1287,7 @@ Here is the call graph for this function: bufsize_t ExportDirWrapper::getSize ( - ) + ) @@ -1397,7 +1383,7 @@ Here is the call graph for this function: virtual size_t ExportDirWrapper::getSubFieldsCount ( - ) + ) @@ -1426,7 +1412,7 @@ Here is the call graph for this function: size_t ExportDirWrapper::mapNames ( - ) + ) @@ -1519,7 +1505,7 @@ Here is the call graph for this function: bool ExportDirWrapper::wrap ( - ) + ) @@ -1669,7 +1655,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_export_entry_wrapper-members.html b/class_export_entry_wrapper-members.html index 5d71e5e8..5871703a 100644 --- a/class_export_entry_wrapper-members.html +++ b/class_export_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -134,13 +136,13 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()ExportEntryWrapperinlinevirtual getSize()ExportEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExportEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getuncNameStr()ExportEntryWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -179,7 +181,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_export_entry_wrapper.html b/class_export_entry_wrapper.html index fc8dd80f..c124e9b0 100644 --- a/class_export_entry_wrapper.html +++ b/class_export_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ExportEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,52 +103,52 @@ Collaboration diagram for ExportEntryWrapper: -

Public Types

enum  FieldID { NONE = FIELD_NONE -, FUNCTION_RVA -, NAME_RVA -, FIELD_COUNTER +
enum  FieldID { NONE = FIELD_NONE +, FUNCTION_RVA +, NAME_RVA +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -185,7 +187,7 @@ Public Member Functions - + @@ -226,7 +228,7 @@ Public Member Functions - + @@ -245,12 +247,12 @@ Public Member Functions - - + + - - + + @@ -278,10 +280,10 @@ Public Member Functions

Public Member Functions

 ExportEntryWrapper (Executable *pe, ExportDirWrapper *parentDir, size_t entryNumber)
 ExportEntryWrapper (Executable *pe, ExportDirWrapper *parentDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
bool isByOrdinal ()
bool isByOrdinal ()
 
uint32_t getOrdinal ()
uint32_t getOrdinal ()
 
offset_t getFuncRva ()
offset_t getFuncRva ()
 
offset_t getFuncNameRva ()
offset_t getFuncNameRva ()
 
char * getFuncName ()
char * getFuncName ()
 
QString getuncNameStr ()
QString getuncNameStr ()
 
char * getForwarder ()
char * getForwarder ()
 
QString getForwarderStr ()
QString getForwarderStr ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -296,19 +298,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -323,7 +325,7 @@ Additional Inherited Members
- +
enum ExportEntryWrapper::FieldIDenum ExportEntryWrapper::FieldID
@@ -351,25 +353,17 @@ Additional Inherited Members ExportEntryWrapper::ExportEntryWrapper ( - Executable *  - pe, + Executable * pe, - ExportDirWrapper *  - parentDir, + ExportDirWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -396,19 +390,12 @@ Additional Inherited Members virtual Executable::addr_type ExportEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -436,8 +423,7 @@ Additional Inherited Members QString ExportEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -476,19 +462,12 @@ Here is the call graph for this function:
void * ExportEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -528,7 +507,7 @@ Here is the call graph for this function: virtual size_t ExportEntryWrapper::getFieldsCount ( - ) + ) @@ -557,19 +536,12 @@ Here is the call graph for this function: virtual bufsize_t ExportEntryWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -604,7 +576,7 @@ Here is the call graph for this function: char * ExportEntryWrapper::getForwarder ( - ) + ) @@ -705,7 +677,7 @@ Here is the call graph for this function: QString ExportEntryWrapper::getForwarderStr ( - ) + ) @@ -811,7 +783,7 @@ Here is the call graph for this function: char * ExportEntryWrapper::getFuncName ( - ) + ) @@ -852,7 +824,7 @@ Here is the call graph for this function: offset_t ExportEntryWrapper::getFuncNameRva ( - ) + ) @@ -881,7 +853,7 @@ Here is the call graph for this function: offset_t ExportEntryWrapper::getFuncRva ( - ) + ) @@ -913,7 +885,7 @@ Here is the call graph for this function: QString ExportEntryWrapper::getName ( - ) + ) @@ -1018,7 +990,7 @@ Here is the call graph for this function: uint32_t ExportEntryWrapper::getOrdinal ( - ) + ) @@ -1105,7 +1077,7 @@ Here is the call graph for this function: virtual void * ExportEntryWrapper::getPtr ( - ) + ) @@ -1134,7 +1106,7 @@ Here is the call graph for this function: bufsize_t ExportEntryWrapper::getSize ( - ) + ) @@ -1228,7 +1200,7 @@ Here is the call graph for this function: virtual size_t ExportEntryWrapper::getSubFieldsCount ( - ) + ) @@ -1257,7 +1229,7 @@ Here is the call graph for this function: QString ExportEntryWrapper::getuncNameStr ( - ) + ) @@ -1305,7 +1277,7 @@ Here is the call graph for this function: bool ExportEntryWrapper::isByOrdinal ( - ) + ) @@ -1347,7 +1319,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_buffer-members.html b/class_file_buffer-members.html index aaa12e19..e3507af5 100644 --- a/class_file_buffer-members.html +++ b/class_file_buffer-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -96,8 +98,8 @@ $(function() { getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getReadableSize(QFile &fIn)AbstractFileBufferstatic getReadableSize(const QString &path)AbstractFileBufferstatic - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -120,7 +122,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_buffer.html b/class_file_buffer.html index 5da0d71d..3330197e 100644 --- a/class_file_buffer.html +++ b/class_file_buffer.html @@ -3,12 +3,14 @@ - + BearParser: FileBuffer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -97,23 +99,23 @@ Collaboration diagram for FileBuffer: - + - + - + - + - + - + - + - + - + @@ -130,12 +132,12 @@ Public Member Functions - - + + - - + + @@ -158,15 +160,15 @@ Public Member Functions - +

Public Member Functions

 FileBuffer (QString &fileName, bufsize_t minSize, bool allowTruncate)
 FileBuffer (QString &fileName, bufsize_t minSize, bool allowTruncate)
 
virtual ~FileBuffer ()
virtual ~FileBuffer ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
offset_t getFileSize ()
offset_t getFileSize ()
 
bool resize (bufsize_t newSize)
bool resize (bufsize_t newSize)
 
virtual bool isResized ()
virtual bool isResized ()
 
virtual bool isTruncated ()
virtual bool isTruncated ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- Public Member Functions inherited from AbstractFileBuffer
- Public Member Functions inherited from AbstractFileBuffer
QString getFileName ()
 
- + - + @@ -174,10 +176,10 @@ Protected Attributes

Protected Attributes

ByteBuffer * m_Buf
ByteBuffer * m_Buf
 
- Protected Attributes inherited from AbstractFileBuffer
- Protected Attributes inherited from AbstractFileBuffer
QString fileName
 
qint64 fileSize
- + - + @@ -186,10 +188,10 @@ Additional Inherited Members - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Static Public Member Functions inherited from AbstractFileBuffer
- Static Public Member Functions inherited from AbstractFileBuffer
static ByteBuffer * read (QString &file, bufsize_t minBufSize, const bool allowTruncate)
 
static bufsize_t getReadableSize (QFile &fIn)
 
static bufsize_t dump (const QString &fileName, AbstractByteBuffer &buf, bool allowExceptions=false)
 
- Protected Member Functions inherited from AbstractFileBuffer
- Protected Member Functions inherited from AbstractFileBuffer
 AbstractFileBuffer (QString v_fileName)
 
- Static Protected Member Functions inherited from AbstractFileBuffer
- Static Protected Member Functions inherited from AbstractFileBuffer
static ByteBuffer * read (QFile &fIn, bufsize_t minBufSize, const bool allowTruncate)
 
@@ -209,25 +211,17 @@ Additional Inherited Members FileBuffer::FileBuffer ( - QString &  - fileName, + QString & fileName, - bufsize_t  - minSize, + bufsize_t minSize, - bool  - allowTruncate  - - - - ) - + bool allowTruncate ) @@ -267,7 +261,7 @@ Here is the call graph for this function: virtual FileBuffer::~FileBuffer ( - ) + ) @@ -295,7 +289,7 @@ Here is the call graph for this function: virtual BYTE * FileBuffer::getContent ( - ) + ) @@ -336,7 +330,7 @@ Here is the call graph for this function: virtual bufsize_t FileBuffer::getContentSize ( - ) + ) @@ -377,7 +371,7 @@ Here is the call graph for this function: offset_t FileBuffer::getFileSize ( - ) + ) @@ -404,7 +398,7 @@ Here is the call graph for this function: virtual bool FileBuffer::isResized ( - ) + ) @@ -443,7 +437,7 @@ Here is the call graph for this function: virtual bool FileBuffer::isTruncated ( - ) + ) @@ -482,8 +476,7 @@ Here is the call graph for this function: bool FileBuffer::resize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -547,7 +540,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_buffer_exception-members.html b/class_file_buffer_exception-members.html index cd40ea93..c2af0e9b 100644 --- a/class_file_buffer_exception-members.html +++ b/class_file_buffer_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_buffer_exception.html b/class_file_buffer_exception.html index 2c8a9010..6a7a98dd 100644 --- a/class_file_buffer_exception.html +++ b/class_file_buffer_exception.html @@ -3,12 +3,14 @@ - + BearParser: FileBufferException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -95,12 +97,12 @@ Collaboration diagram for FileBufferException: - + - + - + @@ -116,10 +118,10 @@ Public Member Functions

Public Member Functions

 FileBufferException (const QString info)
 FileBufferException (const QString info)
 
- Public Member Functions inherited from BufferException
- Public Member Functions inherited from BufferException
 BufferException (const QString info)
 
- Public Member Functions inherited from CustomException
- Public Member Functions inherited from CustomException
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
- + - + @@ -143,8 +145,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Protected Member Functions inherited from CustomException
- Protected Member Functions inherited from CustomException
virtual QString codeToString ()
 
- Protected Attributes inherited from CustomException
- Protected Attributes inherited from CustomException
QString m_info
 
std::string m_strInfo
FileBufferException::FileBufferException (const QString info)const QString info)
@@ -165,7 +166,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_hdr_wrapper-members.html b/class_file_hdr_wrapper-members.html index f7f5f30f..e553554e 100644 --- a/class_file_hdr_wrapper-members.html +++ b/class_file_hdr_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -110,9 +112,9 @@ $(function() { getPE()PEElementWrapperinline getPtr()FileHdrWrappervirtual getSize()FileHdrWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -159,7 +161,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_hdr_wrapper.html b/class_file_hdr_wrapper.html index edad95fc..d51f65d7 100644 --- a/class_file_hdr_wrapper.html +++ b/class_file_hdr_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: FileHdrWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,52 +136,52 @@ Collaboration diagram for FileHdrWrapper: -

Public Types

enum  FieldID {
-  NONE = -1 -, MACHINE = 0 -, SEC_NUM -, TIMESTAMP +
enum  FieldID {
+  NONE = -1 +, MACHINE = 0 +, SEC_NUM +, TIMESTAMP ,
-  SYMBOL_PTR -, SYMBOL_NUM -, OPTHDR_SIZE -, CHARACT +  SYMBOL_PTR +, SYMBOL_NUM +, OPTHDR_SIZE +, CHARACT ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + @@ -222,7 +224,7 @@ Public Member Functions - + @@ -241,12 +243,12 @@ Public Member Functions - - + + - - + + @@ -274,38 +276,38 @@ Public Member Functions

Public Member Functions

 FileHdrWrapper (PEFile *pe)
 FileHdrWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
- Public Member Functions inherited from PEElementWrapper
- Public Member Functions inherited from PEElementWrapper
 PEElementWrapper (PEFile *pe)
 
virtual ~PEElementWrapper ()
 
PEFile * getPE ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - +

Static Public Member Functions

static void initCharact ()
static void initCharact ()
 
static std::vector< DWORD > splitCharact (DWORD characteristics)
static std::vector< DWORD > splitCharact (DWORD characteristics)
 
static QString translateCharacteristics (DWORD charact)
static QString translateCharacteristics (DWORD charact)
 
static void initMachine ()
static void initMachine ()
 
static QString translateMachine (DWORD val)
static QString translateMachine (DWORD val)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - +

Static Public Attributes

static std::map< DWORD, QString > s_fHdrCharact
static std::map< DWORD, QString > s_fHdrCharact
 
static std::map< DWORD, QString > s_machine
static std::map< DWORD, QString > s_machine
 
- + - + - +

Additional Inherited Members

- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from PEElementWrapper
- Protected Attributes inherited from PEElementWrapper
PEFile * m_PE
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -320,7 +322,7 @@ Additional Inherited Members
- +
enum FileHdrWrapper::FieldIDenum FileHdrWrapper::FieldID
@@ -353,8 +355,7 @@ Additional Inherited Members FileHdrWrapper::FileHdrWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -382,19 +383,12 @@ Additional Inherited Members Executable::addr_type FileHdrWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -422,8 +416,7 @@ Additional Inherited Members QString FileHdrWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -465,19 +458,12 @@ Here is the call graph for this function:
void * FileHdrWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -534,7 +520,7 @@ Here is the call graph for this function: virtual size_t FileHdrWrapper::getFieldsCount ( - ) + ) @@ -563,7 +549,7 @@ Here is the call graph for this function: virtual QString FileHdrWrapper::getName ( - ) + ) @@ -592,7 +578,7 @@ Here is the call graph for this function: void * FileHdrWrapper::getPtr ( - ) + ) @@ -647,7 +633,7 @@ Here is the call graph for this function: virtual bufsize_t FileHdrWrapper::getSize ( - ) + ) @@ -686,7 +672,7 @@ Here is the call graph for this function: void FileHdrWrapper::initCharact ( - ) + ) @@ -723,7 +709,7 @@ Here is the call graph for this function: void FileHdrWrapper::initMachine ( - ) + ) @@ -760,8 +746,7 @@ Here is the call graph for this function: std::vector< DWORD > FileHdrWrapper::splitCharact ( - DWORD  - characteristics) + DWORD characteristics) @@ -801,8 +786,7 @@ Here is the call graph for this function: QString FileHdrWrapper::translateCharacteristics ( - DWORD  - charact) + DWORD charact) @@ -842,8 +826,7 @@ Here is the call graph for this function: QString FileHdrWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -913,8 +896,7 @@ Here is the call graph for this function: QString FileHdrWrapper::translateMachine ( - DWORD  - val) + DWORD val) @@ -954,7 +936,7 @@ Here is the call graph for this function: bool FileHdrWrapper::wrap ( - ) + ) @@ -1056,7 +1038,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_view-members.html b/class_file_view-members.html index 10cb4ae1..ee7b7e48 100644 --- a/class_file_view-members.html +++ b/class_file_view-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -98,8 +100,8 @@ $(function() { getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getReadableSize(QFile &fIn)AbstractFileBufferstatic getReadableSize(const QString &path)AbstractFileBufferstatic - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer @@ -123,7 +125,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_file_view.html b/class_file_view.html index 143b4120..107ba1d6 100644 --- a/class_file_view.html +++ b/class_file_view.html @@ -3,12 +3,14 @@ - + BearParser: FileView Class Reference + + @@ -30,7 +32,7 @@ - + @@ -95,19 +97,19 @@ Collaboration diagram for FileView: - + - + - + - + - + - + - + @@ -126,12 +128,12 @@ Public Member Functions - - + + - - + + @@ -156,18 +158,18 @@ Public Member Functions - +

Public Member Functions

 FileView (QString &fileName, bufsize_t maxSize=FILE_MAXSIZE)
 FileView (QString &fileName, bufsize_t maxSize=FILE_MAXSIZE)
 
virtual ~FileView ()
virtual ~FileView ()
 
virtual bufsize_t getContentSize ()
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
virtual BYTE * getContent ()
 
bufsize_t getMappableSize ()
bufsize_t getMappableSize ()
 
virtual bool isTruncated ()
virtual bool isTruncated ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- Public Member Functions inherited from AbstractFileBuffer
- Public Member Functions inherited from AbstractFileBuffer
QString getFileName ()
 
- + - + - + @@ -179,13 +181,13 @@ Static Public Member Functions

Static Public Member Functions

static bufsize_t getMappableSize (QFile &fIn)
static bufsize_t getMappableSize (QFile &fIn)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Static Public Member Functions inherited from AbstractFileBuffer
- Static Public Member Functions inherited from AbstractFileBuffer
static ByteBuffer * read (QString &file, bufsize_t minBufSize, const bool allowTruncate)
 
static bufsize_t getReadableSize (QFile &fIn)
- + - + - + - + @@ -193,10 +195,10 @@ Protected Attributes

Protected Attributes

BYTE * mappedContent
BYTE * mappedContent
 
bufsize_t mappedSize
bufsize_t mappedSize
 
QFile fIn
QFile fIn
 
- Protected Attributes inherited from AbstractFileBuffer
- Protected Attributes inherited from AbstractFileBuffer
QString fileName
 
qint64 fileSize
- + - +

Additional Inherited Members

- Protected Member Functions inherited from AbstractFileBuffer
- Protected Member Functions inherited from AbstractFileBuffer
 AbstractFileBuffer (QString v_fileName)
 
- Static Protected Member Functions inherited from AbstractFileBuffer
- Static Protected Member Functions inherited from AbstractFileBuffer
static ByteBuffer * read (QFile &fIn, bufsize_t minBufSize, const bool allowTruncate)
 
@@ -213,19 +215,12 @@ Additional Inherited Members FileView::FileView ( - QString &  - fileName, + QString & fileName, - bufsize_t  - maxSize = FILE_MAXSIZE  - - - - ) - + bufsize_t maxSize = FILE_MAXSIZE )
@@ -259,7 +254,7 @@ Here is the call graph for this function:
FileView::~FileView ( - ) + ) @@ -297,7 +292,7 @@ Here is the call graph for this function: virtual BYTE * FileView::getContent ( - ) + ) @@ -326,7 +321,7 @@ Here is the call graph for this function: virtual bufsize_t FileView::getContentSize ( - ) + ) @@ -355,7 +350,7 @@ Here is the call graph for this function: bufsize_t FileView::getMappableSize ( - ) + ) @@ -391,8 +386,7 @@ Here is the call graph for this function: bufsize_t FileView::getMappableSize ( - QFile &  - fIn) + QFile & fIn) @@ -431,7 +425,7 @@ Here is the call graph for this function: virtual bool FileView::isTruncated ( - ) + ) @@ -528,7 +522,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_formatter-members.html b/class_formatter-members.html index d9df628b..3827e42a 100644 --- a/class_formatter-members.html +++ b/class_formatter-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -88,7 +90,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_formatter.html b/class_formatter.html index 8c7743e6..55b80b69 100644 --- a/class_formatter.html +++ b/class_formatter.html @@ -3,12 +3,14 @@ - + BearParser: Formatter Class Reference + + @@ -30,7 +32,7 @@ - + @@ -94,15 +96,15 @@ Collaboration diagram for Formatter: - + - + - + - + - + @@ -110,11 +112,11 @@ Public Member Functions

Public Member Functions

 Formatter (AbstractByteBuffer *buf, bool _isHex=false, bool _isSkipNonprintable=false)
 Formatter (AbstractByteBuffer *buf, bool _isHex=false, bool _isSkipNonprintable=false)
 
void setHex (bool isEnabled)
void setHex (bool isEnabled)
 
void setSkipNonPrintable (bool isEnabled)
void setSkipNonPrintable (bool isEnabled)
 
const QString operator[] (std::size_t idx) const
const QString operator[] (std::size_t idx) const
 
- Public Member Functions inherited from AbstractFormatter
- Public Member Functions inherited from AbstractFormatter
 AbstractFormatter (AbstractByteBuffer *v_buf)
 
virtual ~AbstractFormatter ()
- + - + - +

Protected Attributes

bool isHex
bool isHex
 
bool isSkipNonprintable
bool isSkipNonprintable
 
- Protected Attributes inherited from AbstractFormatter
- Protected Attributes inherited from AbstractFormatter
AbstractByteBuffer * buf
 
@@ -134,25 +136,17 @@ Protected Attributes Formatter::Formatter ( - AbstractByteBuffer *  - buf, + AbstractByteBuffer * buf, - bool  - _isHex = false, + bool _isHex = false, - bool  - _isSkipNonprintable = false  - - - - ) - + bool _isSkipNonprintable = false ) @@ -179,8 +173,7 @@ Protected Attributes const QString Formatter::operator[] ( - std::size_t  - idx) + std::size_t idx) const @@ -222,8 +215,7 @@ Here is the call graph for this function: void Formatter::setHex ( - bool  - isEnabled) + bool isEnabled) @@ -260,8 +252,7 @@ Here is the call graph for this function: void Formatter::setSkipNonPrintable ( - bool  - isEnabled) + bool isEnabled) @@ -342,7 +333,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_hex_formatter-members.html b/class_hex_formatter-members.html index 6573292e..6cbbc1a5 100644 --- a/class_hex_formatter-members.html +++ b/class_hex_formatter-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -89,7 +91,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_hex_formatter.html b/class_hex_formatter.html index 0a8cc7b2..756870e6 100644 --- a/class_hex_formatter.html +++ b/class_hex_formatter.html @@ -3,12 +3,14 @@ - + BearParser: HexFormatter Class Reference + + @@ -30,7 +32,7 @@ - + @@ -95,9 +97,9 @@ Collaboration diagram for HexFormatter: - + - + @@ -106,7 +108,7 @@ Public Member Functions - + @@ -114,12 +116,12 @@ Public Member Functions

Public Member Functions

 HexFormatter (AbstractByteBuffer *buf)
 HexFormatter (AbstractByteBuffer *buf)
 
- Public Member Functions inherited from Formatter
- Public Member Functions inherited from Formatter
 Formatter (AbstractByteBuffer *buf, bool _isHex=false, bool _isSkipNonprintable=false)
 
void setHex (bool isEnabled)
 
const QString operator[] (std::size_t idx) const
 
- Public Member Functions inherited from AbstractFormatter
- Public Member Functions inherited from AbstractFormatter
 AbstractFormatter (AbstractByteBuffer *v_buf)
 
virtual ~AbstractFormatter ()
- + - +

Additional Inherited Members

- Protected Attributes inherited from Formatter
- Protected Attributes inherited from Formatter
bool isHex
 
bool isSkipNonprintable
 
- Protected Attributes inherited from AbstractFormatter
- Protected Attributes inherited from AbstractFormatter
AbstractByteBuffer * buf
 
@@ -139,8 +141,7 @@ Additional Inherited Members HexFormatter::HexFormatter ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -161,7 +162,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_dir_wrapper-members.html b/class_import_base_dir_wrapper-members.html index a1428115..88e19c12 100644 --- a/class_import_base_dir_wrapper-members.html +++ b/class_import_base_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -133,13 +135,13 @@ $(function() { getPE()PENodeWrapperinline getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getThunksList()ImportBaseDirWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -191,7 +193,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_dir_wrapper.html b/class_import_base_dir_wrapper.html index a5e151d0..59b554e3 100644 --- a/class_import_base_dir_wrapper.html +++ b/class_import_base_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportBaseDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,33 +139,33 @@ Collaboration diagram for ImportBaseDirWrapper: - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -172,7 +174,7 @@ Public Member Functions - + @@ -183,7 +185,7 @@ Public Member Functions - + @@ -218,7 +220,7 @@ Public Member Functions - + @@ -267,7 +269,7 @@ Public Member Functions - + @@ -286,12 +288,12 @@ Public Member Functions - - + + - - + + @@ -319,24 +321,24 @@ Public Member Functions

Public Member Functions

virtual bool wrap ()
virtual bool wrap ()
 
virtual void clearMapping ()
virtual void clearMapping ()
 
virtual void reloadMapping ()
virtual void reloadMapping ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
QString thunkToFuncName (offset_t thunk, bool shortName=true)
QString thunkToFuncName (offset_t thunk, bool shortName=true)
 
QString thunkToLibName (offset_t thunk)
QString thunkToLibName (offset_t thunk)
 
QList< offset_t > getThunksList ()
QList< offset_t > getThunksList ()
 
bool hasThunk (offset_t thunk)
bool hasThunk (offset_t thunk)
 
ImportBaseFuncWrapper * thunkToFunction (offset_t thunk)
ImportBaseFuncWrapper * thunkToFunction (offset_t thunk)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Static Public Member Functions

static bufsize_t thunkSize (Executable::exe_bits bits)
static bufsize_t thunkSize (Executable::exe_bits bits)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + - + - + - + @@ -349,7 +351,7 @@ Protected Member Functions - + @@ -357,34 +359,34 @@ Protected Member Functions

Protected Member Functions

 ImportBaseDirWrapper (PEFile *pe, pe::dir_entry v_entryType)
 ImportBaseDirWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
void addMapping (ExeNodeWrapper *func)
void addMapping (ExeNodeWrapper *func)
 
ImportBaseEntryWrapper * thunkToLib (offset_t thunk)
ImportBaseEntryWrapper * thunkToLib (offset_t thunk)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - + - + - +

Protected Attributes

std::map< offset_t, size_t > thunkToLibMap
std::map< offset_t, size_t > thunkToLibMap
 
QList< offset_t > thunksList
QList< offset_t > thunksList
 
size_t importsCount
size_t importsCount
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class ImportBaseEntryWrapper
class ImportBaseEntryWrapper
 

Detailed Description

@@ -403,19 +405,12 @@ Friends ImportBaseDirWrapper::ImportBaseDirWrapper ( - PEFile *  - pe, + PEFile * pe, - pe::dir_entry  - v_entryType  - - - - ) - + pe::dir_entry v_entryType ) @@ -442,8 +437,7 @@ Friends void ImportBaseDirWrapper::addMapping ( - ExeNodeWrapper *  - func) + ExeNodeWrapper * func) @@ -486,7 +480,7 @@ Here is the call graph for this function: void ImportBaseDirWrapper::clearMapping ( - ) + ) @@ -513,8 +507,7 @@ Here is the call graph for this function: virtual QString ImportBaseDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -554,19 +547,12 @@ Here is the call graph for this function: virtual QString ImportBaseDirWrapper::getFieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -608,19 +594,12 @@ Here is the call graph for this function: virtual void * ImportBaseDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -664,7 +643,7 @@ Here is the call graph for this function: virtual size_t ImportBaseDirWrapper::getFieldsCount ( - ) + ) @@ -693,19 +672,12 @@ Here is the call graph for this function: virtual bufsize_t ImportBaseDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -749,7 +721,7 @@ Here is the call graph for this function: QList< offset_t > ImportBaseDirWrapper::getThunksList ( - ) + ) @@ -776,8 +748,7 @@ Here is the call graph for this function: bool ImportBaseDirWrapper::hasThunk ( - offset_t  - thunk) + offset_t thunk) @@ -814,7 +785,7 @@ Here is the call graph for this function: void ImportBaseDirWrapper::reloadMapping ( - ) + ) @@ -865,8 +836,7 @@ Here is the call graph for this function: bufsize_t ImportBaseDirWrapper::thunkSize ( - Executable::exe_bits  - bits) + Executable::exe_bits bits) @@ -900,19 +870,12 @@ Here is the call graph for this function: QString ImportBaseDirWrapper::thunkToFuncName ( - offset_t  - thunk, + offset_t thunk, - bool  - shortName = true  - - - - ) - + bool shortName = true )
@@ -949,8 +912,7 @@ Here is the call graph for this function:
ImportBaseFuncWrapper * ImportBaseDirWrapper::thunkToFunction ( - offset_t  - thunk) + offset_t thunk) @@ -988,8 +950,7 @@ Here is the call graph for this function: ImportBaseEntryWrapper * ImportBaseDirWrapper::thunkToLib ( - offset_t  - thunk) + offset_t thunk) @@ -1026,8 +987,7 @@ Here is the call graph for this function: QString ImportBaseDirWrapper::thunkToLibName ( - offset_t  - thunk) + offset_t thunk) @@ -1065,7 +1025,7 @@ Here is the call graph for this function: bool ImportBaseDirWrapper::wrap ( - ) + ) @@ -1211,7 +1171,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_entry_wrapper-members.html b/class_import_base_entry_wrapper-members.html index 57671396..287f0e58 100644 --- a/class_import_base_entry_wrapper-members.html +++ b/class_import_base_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -126,12 +128,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ImportBaseEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -177,7 +179,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_entry_wrapper.html b/class_import_base_entry_wrapper.html index a38f3aa9..d030cbfd 100644 --- a/class_import_base_entry_wrapper.html +++ b/class_import_base_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportBaseEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -140,15 +142,15 @@ Collaboration diagram for ImportBaseEntryWrapper: - + - + - + - + - + @@ -159,7 +161,7 @@ Public Member Functions - + @@ -194,7 +196,7 @@ Public Member Functions - + @@ -249,7 +251,7 @@ Public Member Functions - + @@ -268,12 +270,12 @@ Public Member Functions - - + + - - + + @@ -301,16 +303,16 @@ Public Member Functions

Public Member Functions

virtual char * getLibraryName ()=0
virtual char * getLibraryName ()=0
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
bool wrap ()
bool wrap ()
 
virtual bool isValid ()
virtual bool isValid ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bufsize_t geEntrySize ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- +

Static Public Attributes

static bufsize_t NameLenLimit = 0xFF
static bufsize_t NameLenLimit = 0xFF
 
- + - + - + @@ -323,7 +325,7 @@ Protected Member Functions - + @@ -331,34 +333,34 @@ Protected Member Functions

Protected Member Functions

 ImportBaseEntryWrapper (PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
 ImportBaseEntryWrapper (PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
 
void addMapping (ExeNodeWrapper *func)
void addMapping (ExeNodeWrapper *func)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - +

Protected Attributes

std::map< offset_t, size_t > thunkToFuncMap
std::map< offset_t, size_t > thunkToFuncMap
 
ImportBaseDirWrapper * impDir
ImportBaseDirWrapper * impDir
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class ImportBaseDirWrapper
class ImportBaseDirWrapper
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -378,25 +380,17 @@ Additional Inherited Members ImportBaseEntryWrapper::ImportBaseEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - ImportBaseDirWrapper *  - importsDir, + ImportBaseDirWrapper * importsDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -423,8 +417,7 @@ Additional Inherited Members void ImportBaseEntryWrapper::addMapping ( - ExeNodeWrapper *  - func) + ExeNodeWrapper * func) @@ -470,7 +463,7 @@ Here is the call graph for this function: virtual char * ImportBaseEntryWrapper::getLibraryName ( - ) + ) @@ -497,7 +490,7 @@ Here is the call graph for this function: virtual size_t ImportBaseEntryWrapper::getSubFieldsCount ( - ) + ) @@ -526,7 +519,7 @@ Here is the call graph for this function: bool ImportBaseEntryWrapper::isValid ( - ) + ) @@ -588,7 +581,7 @@ Here is the call graph for this function: bool ImportBaseEntryWrapper::wrap ( - ) + ) @@ -754,7 +747,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_func_wrapper-members.html b/class_import_base_func_wrapper-members.html index f2dea911..41effef7 100644 --- a/class_import_base_func_wrapper-members.html +++ b/class_import_base_func_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -131,13 +133,13 @@ $(function() { getPtr()=0ExeElementWrapperpure virtual getShortName()ImportBaseFuncWrapper getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getThunkValSize()ImportBaseFuncWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -181,7 +183,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_base_func_wrapper.html b/class_import_base_func_wrapper.html index 780604f8..7808f298 100644 --- a/class_import_base_func_wrapper.html +++ b/class_import_base_func_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportBaseFuncWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,27 +136,27 @@ Collaboration diagram for ImportBaseFuncWrapper: - + - + - + - + - + - + - + - + - + - + - + @@ -165,7 +167,7 @@ Public Member Functions - + @@ -206,7 +208,7 @@ Public Member Functions - + @@ -259,7 +261,7 @@ Public Member Functions - + @@ -278,12 +280,12 @@ Public Member Functions - - + + - - + + @@ -311,15 +313,15 @@ Public Member Functions

Public Member Functions

 ImportBaseFuncWrapper (PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
 ImportBaseFuncWrapper (PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
 
virtual QString getName ()
virtual QString getName ()
 
QString getShortName ()
QString getShortName ()
 
QString getLibName ()
QString getLibName ()
 
virtual bool isByOrdinal ()=0
virtual bool isByOrdinal ()=0
 
virtual uint64_t getOrdinal ()=0
virtual uint64_t getOrdinal ()=0
 
virtual char * getFunctionName ()=0
virtual char * getFunctionName ()=0
 
virtual offset_t callVia ()=0
virtual offset_t callVia ()=0
 
bufsize_t getAddrSize ()
bufsize_t getAddrSize ()
 
bufsize_t getThunkValSize ()
bufsize_t getThunkValSize ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- +

Friends

class ImportBaseDirWrapper
class ImportBaseDirWrapper
 
- + - + @@ -334,24 +336,24 @@ Additional Inherited Members - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -371,25 +373,17 @@ Additional Inherited Members ImportBaseFuncWrapper::ImportBaseFuncWrapper ( - PEFile *  - pe, + PEFile * pe, - ImportBaseEntryWrapper *  - parentLib, + ImportBaseEntryWrapper * parentLib, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -416,7 +410,7 @@ Additional Inherited Members virtual offset_t ImportBaseFuncWrapper::callVia ( - ) + ) @@ -443,7 +437,7 @@ Additional Inherited Members bufsize_t ImportBaseFuncWrapper::getAddrSize ( - ) + ) @@ -485,7 +479,7 @@ Here is the call graph for this function: virtual char * ImportBaseFuncWrapper::getFunctionName ( - ) + ) @@ -509,7 +503,7 @@ Here is the call graph for this function: QString ImportBaseFuncWrapper::getLibName ( - ) + ) @@ -545,7 +539,7 @@ Here is the call graph for this function: QString ImportBaseFuncWrapper::getName ( - ) + ) @@ -600,7 +594,7 @@ Here is the call graph for this function: virtual uint64_t ImportBaseFuncWrapper::getOrdinal ( - ) + ) @@ -624,7 +618,7 @@ Here is the call graph for this function: QString ImportBaseFuncWrapper::getShortName ( - ) + ) @@ -662,7 +656,7 @@ Here is the call graph for this function: bufsize_t ImportBaseFuncWrapper::getThunkValSize ( - ) + ) @@ -706,7 +700,7 @@ Here is the call graph for this function: virtual bool ImportBaseFuncWrapper::isByOrdinal ( - ) + ) @@ -753,7 +747,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_dir_wrapper-members.html b/class_import_dir_wrapper-members.html index 683f536e..95de0c39 100644 --- a/class_import_dir_wrapper-members.html +++ b/class_import_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -134,13 +136,13 @@ $(function() { getPE()PENodeWrapperinline getPtr()ImportDirWrapperinlinevirtual getSize()ImportDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getThunksList()ImportBaseDirWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -193,7 +195,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_dir_wrapper.html b/class_import_dir_wrapper.html index 1f1b995c..af441055 100644 --- a/class_import_dir_wrapper.html +++ b/class_import_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,15 +139,15 @@ Collaboration diagram for ImportDirWrapper: - + - + - + - + - + @@ -172,7 +174,7 @@ Public Member Functions - + @@ -181,7 +183,7 @@ Public Member Functions - + @@ -192,7 +194,7 @@ Public Member Functions - + @@ -227,7 +229,7 @@ Public Member Functions - + @@ -270,7 +272,7 @@ Public Member Functions - + @@ -289,12 +291,12 @@ Public Member Functions - - + + - - + + @@ -322,23 +324,23 @@ Public Member Functions

Public Member Functions

 ImportDirWrapper (PEFile *pe)
 ImportDirWrapper (PEFile *pe)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
- Public Member Functions inherited from ImportBaseDirWrapper
- Public Member Functions inherited from ImportBaseDirWrapper
virtual bool wrap ()
 
virtual void clearMapping ()
 
ImportBaseFuncWrapper * thunkToFunction (offset_t thunk)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - + @@ -349,7 +351,7 @@ Protected Member Functions - + @@ -357,40 +359,40 @@ Protected Member Functions

Protected Member Functions

virtual bool loadNextEntry (size_t cntr)
virtual bool loadNextEntry (size_t cntr)
 
IMAGE_DATA_DIRECTORY * getDataDirectory ()
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
IMAGE_IMPORT_DESCRIPTOR * firstDescriptor ()
IMAGE_IMPORT_DESCRIPTOR * firstDescriptor ()
 
- Protected Member Functions inherited from ImportBaseDirWrapper
- Protected Member Functions inherited from ImportBaseDirWrapper
 ImportBaseDirWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
void addMapping (ExeNodeWrapper *func)
 
ImportBaseEntryWrapper * thunkToLib (offset_t thunk)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class ImportEntryWrapper
class ImportEntryWrapper
 
- + - + - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from ImportBaseDirWrapper
- Static Public Member Functions inherited from ImportBaseDirWrapper
static bufsize_t thunkSize (Executable::exe_bits bits)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from ImportBaseDirWrapper
- Protected Attributes inherited from ImportBaseDirWrapper
std::map< offset_t, size_t > thunkToLibMap
 
QList< offset_t > thunksList
 
size_t importsCount
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -410,8 +412,7 @@ Additional Inherited Members ImportDirWrapper::ImportDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -465,7 +466,7 @@ Here is the call graph for this function: IMAGE_IMPORT_DESCRIPTOR * ImportDirWrapper::firstDescriptor ( - ) + ) @@ -540,7 +541,7 @@ Here is the call graph for this function: IMAGE_DATA_DIRECTORY * ImportDirWrapper::getDataDirectory ( - ) + ) @@ -580,7 +581,7 @@ Here is the call graph for this function: virtual QString ImportDirWrapper::getName ( - ) + ) @@ -609,7 +610,7 @@ Here is the call graph for this function: virtual void * ImportDirWrapper::getPtr ( - ) + ) @@ -688,7 +689,7 @@ Here is the call graph for this function: bufsize_t ImportDirWrapper::getSize ( - ) + ) @@ -729,8 +730,7 @@ Here is the call graph for this function: bool ImportDirWrapper::loadNextEntry ( - size_t  - cntr) + size_t cntr) @@ -789,7 +789,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_entry_wrapper-members.html b/class_import_entry_wrapper-members.html index b0845346..c77a79cd 100644 --- a/class_import_entry_wrapper-members.html +++ b/class_import_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -130,12 +132,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()ImportEntryWrappervirtual getSize()ImportEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ImportBaseEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -187,7 +189,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_import_entry_wrapper.html b/class_import_entry_wrapper.html index 4550b211..36e6aa14 100644 --- a/class_import_entry_wrapper.html +++ b/class_import_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -141,53 +143,53 @@ Collaboration diagram for ImportEntryWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, ORIG_FIRST_THUNK -, TIMESTAMP -, FORWARDER +
enum  FieldID {
+  NONE = FIELD_NONE +, ORIG_FIRST_THUNK +, TIMESTAMP +, FORWARDER ,
-  NAME -, FIRST_THUNK -, FIELD_COUNTER +  NAME +, FIRST_THUNK +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -198,7 +200,7 @@ Public Member Functions - + @@ -227,7 +229,7 @@ Public Member Functions - + @@ -270,7 +272,7 @@ Public Member Functions - + @@ -289,12 +291,12 @@ Public Member Functions - - + + - - + + @@ -322,14 +324,14 @@ Public Member Functions

Public Member Functions

 ImportEntryWrapper (PEFile *pe, ImportDirWrapper *importsDir, size_t entryNumber)
 ImportEntryWrapper (PEFile *pe, ImportDirWrapper *importsDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
bool isBound ()
bool isBound ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
bufsize_t geEntrySize ()
bufsize_t geEntrySize ()
 
virtual offset_t getNextEntryOffset ()
virtual offset_t getNextEntryOffset ()
 
char * getLibraryName ()
char * getLibraryName ()
 
- Public Member Functions inherited from ImportBaseEntryWrapper
- Public Member Functions inherited from ImportBaseEntryWrapper
virtual size_t getSubFieldsCount ()
 
bool wrap ()
 
virtual bool isValid ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
ExeNodeWrapper * getLastEntry ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -340,7 +342,7 @@ Protected Member Functions - + @@ -348,35 +350,35 @@ Protected Member Functions

Protected Member Functions

bool loadNextEntry (size_t entryNum)
bool loadNextEntry (size_t entryNum)
 
- Protected Member Functions inherited from ImportBaseEntryWrapper
- Protected Member Functions inherited from ImportBaseEntryWrapper
 ImportBaseEntryWrapper (PEFile *pe, ImportBaseDirWrapper *importsDir, size_t entryNumber)
 
void addMapping (ExeNodeWrapper *func)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class ImportDirWrapper
class ImportDirWrapper
 
- + - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Static Public Attributes inherited from ImportBaseEntryWrapper
- Static Public Attributes inherited from ImportBaseEntryWrapper
static bufsize_t NameLenLimit = 0xFF
 
- Protected Attributes inherited from ImportBaseEntryWrapper
- Protected Attributes inherited from ImportBaseEntryWrapper
std::map< offset_t, size_t > thunkToFuncMap
 
ImportBaseDirWrapper * impDir
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -391,7 +393,7 @@ Additional Inherited Members
- +
enum ImportEntryWrapper::FieldIDenum ImportEntryWrapper::FieldID
@@ -422,25 +424,17 @@ Additional Inherited Members ImportEntryWrapper::ImportEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - ImportDirWrapper *  - importsDir, + ImportDirWrapper * importsDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -513,19 +507,12 @@ Here is the call graph for this function:
Executable::addr_type ImportEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -563,7 +550,7 @@ Here is the call graph for this function: bufsize_t ImportEntryWrapper::geEntrySize ( - ) + ) @@ -607,8 +594,7 @@ Here is the call graph for this function: QString ImportEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -705,19 +691,12 @@ Here is the call graph for this function: void * ImportEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -793,7 +772,7 @@ Here is the call graph for this function: virtual size_t ImportEntryWrapper::getFieldsCount ( - ) + ) @@ -822,7 +801,7 @@ Here is the call graph for this function: char * ImportEntryWrapper::getLibraryName ( - ) + ) @@ -914,7 +893,7 @@ Here is the call graph for this function: QString ImportEntryWrapper::getName ( - ) + ) @@ -1008,7 +987,7 @@ Here is the call graph for this function: virtual offset_t ImportEntryWrapper::getNextEntryOffset ( - ) + ) @@ -1106,7 +1085,7 @@ Here is the call graph for this function: void * ImportEntryWrapper::getPtr ( - ) + ) @@ -1180,7 +1159,7 @@ Here is the call graph for this function: bufsize_t ImportEntryWrapper::getSize ( - ) + ) @@ -1216,7 +1195,7 @@ Here is the call graph for this function: bool ImportEntryWrapper::isBound ( - ) + ) @@ -1286,8 +1265,7 @@ Here is the call graph for this function: bool ImportEntryWrapper::loadNextEntry ( - size_t  - entryNum) + size_t entryNum) @@ -1356,7 +1334,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_imported_func_wrapper-members.html b/class_imported_func_wrapper-members.html index 52fee83e..52cf8998 100644 --- a/class_imported_func_wrapper-members.html +++ b/class_imported_func_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -136,7 +138,7 @@ $(function() { getPtr()ImportedFuncWrappervirtual getShortName()ImportBaseFuncWrapper getSize()ImportedFuncWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ImportedFuncWrapperinlinevirtual @@ -144,7 +146,7 @@ $(function() { getThunkValSize()ImportBaseFuncWrapperinline getThunkValue()ImportedFuncWrapper getValuePtr(ImportEntryWrapper::FieldID fId)ImportedFuncWrapper - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -193,7 +195,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_imported_func_wrapper.html b/class_imported_func_wrapper.html index f3ab8356..3407c0bb 100644 --- a/class_imported_func_wrapper.html +++ b/class_imported_func_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ImportedFuncWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,55 +139,55 @@ Collaboration diagram for ImportedFuncWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, ORIG_THUNK -, THUNK -, FORWARDER +
enum  FieldID {
+  NONE = FIELD_NONE +, ORIG_THUNK +, THUNK +, FORWARDER ,
-  HINT -, FIELD_COUNTER +  HINT +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -198,7 +200,7 @@ Public Member Functions - + @@ -209,7 +211,7 @@ Public Member Functions - + @@ -246,7 +248,7 @@ Public Member Functions - + @@ -287,7 +289,7 @@ Public Member Functions - + @@ -306,12 +308,12 @@ Public Member Functions - - + + - - + + @@ -339,15 +341,15 @@ Public Member Functions

Public Member Functions

 ImportedFuncWrapper (PEFile *pe, ImportEntryWrapper *parentLib, size_t entryNumber)
 ImportedFuncWrapper (PEFile *pe, ImportEntryWrapper *parentLib, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr ()
virtual IMAGE_IMPORT_BY_NAME * getImportByNamePtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
uint64_t getThunkValue ()
uint64_t getThunkValue ()
 
offset_t getFieldRVA (ImportEntryWrapper::FieldID fId)
offset_t getFieldRVA (ImportEntryWrapper::FieldID fId)
 
void * getValuePtr (ImportEntryWrapper::FieldID fId)
void * getValuePtr (ImportEntryWrapper::FieldID fId)
 
virtual offset_t callVia ()
virtual offset_t callVia ()
 
bool isByOrdinal ()
bool isByOrdinal ()
 
virtual uint64_t getOrdinal ()
virtual uint64_t getOrdinal ()
 
char * getFunctionName ()
char * getFunctionName ()
 
- Public Member Functions inherited from ImportBaseFuncWrapper
- Public Member Functions inherited from ImportBaseFuncWrapper
 ImportBaseFuncWrapper (PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber)
 
virtual QString getName ()
 
bufsize_t getThunkValSize ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- +

Friends

class ImportDirWrapper
class ImportDirWrapper
 
- + - + @@ -362,24 +364,24 @@ Additional Inherited Members - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -394,7 +396,7 @@ Additional Inherited Members
- +
enum ImportedFuncWrapper::FieldIDenum ImportedFuncWrapper::FieldID
@@ -424,25 +426,17 @@ Additional Inherited Members ImportedFuncWrapper::ImportedFuncWrapper ( - PEFile *  - pe, + PEFile * pe, - ImportEntryWrapper *  - parentLib, + ImportEntryWrapper * parentLib, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -469,7 +463,7 @@ Additional Inherited Members virtual offset_t ImportedFuncWrapper::callVia ( - ) + ) @@ -557,19 +551,12 @@ Here is the call graph for this function:
Executable::addr_type ImportedFuncWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -683,8 +670,7 @@ Here is the call graph for this function: QString ImportedFuncWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -723,19 +709,12 @@ Here is the call graph for this function: void * ImportedFuncWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -857,8 +836,7 @@ Here is the call graph for this function: offset_t ImportedFuncWrapper::getFieldRVA ( - ImportEntryWrapper::FieldID  - fId) + ImportEntryWrapper::FieldID fId) @@ -937,7 +915,7 @@ Here is the call graph for this function: virtual size_t ImportedFuncWrapper::getFieldsCount ( - ) + ) @@ -966,19 +944,12 @@ Here is the call graph for this function: bufsize_t ImportedFuncWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -1021,7 +992,7 @@ Here is the call graph for this function: char * ImportedFuncWrapper::getFunctionName ( - ) + ) @@ -1142,7 +1113,7 @@ Here is the call graph for this function: IMAGE_IMPORT_BY_NAME * ImportedFuncWrapper::getImportByNamePtr ( - ) + ) @@ -1215,7 +1186,7 @@ Here is the call graph for this function: virtual uint64_t ImportedFuncWrapper::getOrdinal ( - ) + ) @@ -1333,7 +1304,7 @@ Here is the call graph for this function: void * ImportedFuncWrapper::getPtr ( - ) + ) @@ -1444,7 +1415,7 @@ Here is the call graph for this function: bufsize_t ImportedFuncWrapper::getSize ( - ) + ) @@ -1490,7 +1461,7 @@ Here is the call graph for this function: virtual size_t ImportedFuncWrapper::getSubFieldsCount ( - ) + ) @@ -1516,7 +1487,7 @@ Here is the call graph for this function: uint64_t ImportedFuncWrapper::getThunkValue ( - ) + ) @@ -1622,8 +1593,7 @@ Here is the call graph for this function: void * ImportedFuncWrapper::getValuePtr ( - ImportEntryWrapper::FieldID  - fId) + ImportEntryWrapper::FieldID fId) @@ -1725,7 +1695,7 @@ Here is the call graph for this function: bool ImportedFuncWrapper::isByOrdinal ( - ) + ) @@ -1858,7 +1828,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_ld_config_dir_wrapper-members.html b/class_ld_config_dir_wrapper-members.html index 1cfeef9a..6dbc24ec 100644 --- a/class_ld_config_dir_wrapper-members.html +++ b/class_ld_config_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -152,14 +154,14 @@ $(function() { getPE()PENodeWrapperinline getPtr()LdConfigDirWrappervirtual getSize()LdConfigDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()LdConfigDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldWrapper(size_t parentType, size_t fieldId)LdConfigDirWrapperinlinevirtual getSubfieldWrapperCount(size_t parentType)LdConfigDirWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -240,7 +242,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_ld_config_dir_wrapper.html b/class_ld_config_dir_wrapper.html index 605a6fed..34cbd003 100644 --- a/class_ld_config_dir_wrapper.html +++ b/class_ld_config_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: LdConfigDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -137,111 +139,111 @@ Collaboration diagram for LdConfigDirWrapper: -

Public Types

enum  LdConfigDirFID {
-  NONE = FIELD_NONE -, SIZE = 0 -, TIMEST -, MAJOR_VER +
enum  LdConfigDirFID {
+  NONE = FIELD_NONE +, SIZE = 0 +, TIMEST +, MAJOR_VER ,
-  MINOR_VER -, GLOBAL_FLAGS_CLEAR -, GLOBAL_FLAGS_SET -, CRITICAT_SEC_TIMEOUT +  MINOR_VER +, GLOBAL_FLAGS_CLEAR +, GLOBAL_FLAGS_SET +, CRITICAT_SEC_TIMEOUT ,
-  DECOMMIT_FREE -, DECOMMIT_TOTAL -, LOCK_PREFIX -, MAX_ALLOC +  DECOMMIT_FREE +, DECOMMIT_TOTAL +, LOCK_PREFIX +, MAX_ALLOC ,
-  VIRTUAL_MEM -, PROC_HEAP_FLAGS32 -, PROC_AFF_MASK32 -, CSD_VER +  VIRTUAL_MEM +, PROC_HEAP_FLAGS32 +, PROC_AFF_MASK32 +, CSD_VER ,
-  DEPENDENT_LOAD_FLAGS -, EDIT_LIST -, SEC_COOKIE -, SEH_TABLE +  DEPENDENT_LOAD_FLAGS +, EDIT_LIST +, SEC_COOKIE +, SEH_TABLE ,
-  SEH_COUNT -, FIELD_COUNTER_OLD -, GUARD_CHECK = FIELD_COUNTER_OLD -, GUARD_DISPATCH = GUARD_CHECK + 1 +  SEH_COUNT +, FIELD_COUNTER_OLD +, GUARD_CHECK = FIELD_COUNTER_OLD +, GUARD_DISPATCH = GUARD_CHECK + 1 ,
-  GUARD_TABLE -, GUARD_COUNT -, GUARD_FLAGS -, FIELD_COUNTER_W81 +  GUARD_TABLE +, GUARD_COUNT +, GUARD_FLAGS +, FIELD_COUNTER_W81 ,
-  CODE_INTEGRITY_FLAGS = FIELD_COUNTER_W81 -, CODE_INTEGRITY_CATALOG = CODE_INTEGRITY_FLAGS + 1 -, CODE_INTEGRITY_CATALOG_OFFSET -, CODE_INTEGRITY_RESERVED +  CODE_INTEGRITY_FLAGS = FIELD_COUNTER_W81 +, CODE_INTEGRITY_CATALOG = CODE_INTEGRITY_FLAGS + 1 +, CODE_INTEGRITY_CATALOG_OFFSET +, CODE_INTEGRITY_RESERVED ,
-  GUARD_ADDR_IAT_ENTRY_TABLE -, GUARD_ADDR_IAT_ENTRY_COUNT -, GUARD_LONG_JUMP_TABLE -, GUARD_LONG_JUMP_COUNT +  GUARD_ADDR_IAT_ENTRY_TABLE +, GUARD_ADDR_IAT_ENTRY_COUNT +, GUARD_LONG_JUMP_TABLE +, GUARD_LONG_JUMP_COUNT ,
-  DYNAMIC_VAL_RELOC -, CHPE_METADATA_PTR -, GUARD_FAILURE_ROUTINE -, GUARD_FAILURE_ROUTINE_FUNC_PTR +  DYNAMIC_VAL_RELOC +, CHPE_METADATA_PTR +, GUARD_FAILURE_ROUTINE +, GUARD_FAILURE_ROUTINE_FUNC_PTR ,
-  DYNAMIC_VAL_RELOC_TABLE_OFFSET -, DYNAMIC_VAL_RELOC_TABLE_SECTION -, RESERVED2 -, GUARD_VERIFY_STACK_PTR +  DYNAMIC_VAL_RELOC_TABLE_OFFSET +, DYNAMIC_VAL_RELOC_TABLE_SECTION +, RESERVED2 +, GUARD_VERIFY_STACK_PTR ,
-  HOT_PATCH_TABLE_OFFSET -, RESERVED3 -, ENCLAVE_CONFIG_PTR -, VOLATILE_METADATA_PTR +  HOT_PATCH_TABLE_OFFSET +, RESERVED3 +, ENCLAVE_CONFIG_PTR +, VOLATILE_METADATA_PTR ,
-  GUARD_EH_CONT_TABLE -, GUARD_EH_CONT_COUNT -, FIELD_COUNTER +  GUARD_EH_CONT_TABLE +, GUARD_EH_CONT_COUNT +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -250,7 +252,7 @@ Public Member Functions - + @@ -261,7 +263,7 @@ Public Member Functions - + @@ -296,7 +298,7 @@ Public Member Functions - + @@ -335,7 +337,7 @@ Public Member Functions - + @@ -354,12 +356,12 @@ Public Member Functions - - + + - - + + @@ -387,26 +389,26 @@ Public Member Functions

Public Member Functions

 LdConfigDirWrapper (PEFile *pe)
 LdConfigDirWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual ExeNodeWrapper * getSubfieldWrapper (size_t parentType, size_t fieldId)
virtual ExeNodeWrapper * getSubfieldWrapper (size_t parentType, size_t fieldId)
 
virtual size_t getSubfieldWrapperCount (size_t parentType)
virtual size_t getSubfieldWrapperCount (size_t parentType)
 
virtual bool hasSubfieldWrapper (size_t parentType)
virtual bool hasSubfieldWrapper (size_t parentType)
 
bool hasSupressionInfo ()
bool hasSupressionInfo ()
 
size_t metadataSize ()
size_t metadataSize ()
 
QString translateGuardFlagsContent (const QString &delim)
QString translateGuardFlagsContent (const QString &delim)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Static Public Member Functions

static std::set< DWORD > getGuardFlagsSet (DWORD flags)
static std::set< DWORD > getGuardFlagsSet (DWORD flags)
 
static QString translateGuardFlag (DWORD flags)
static QString translateGuardFlag (DWORD flags)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + - + - + - + @@ -419,7 +421,7 @@ Protected Member Functions - + @@ -427,27 +429,27 @@ Protected Member Functions

Protected Member Functions

virtual void clear ()
virtual void clear ()
 
void * firstSubEntryPtr (size_t parentId)
void * firstSubEntryPtr (size_t parentId)
 
size_t firstSubEntrySize (size_t parentId)
size_t firstSubEntrySize (size_t parentId)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class LdConfigEntryWrapper
class LdConfigEntryWrapper
 
- + - + - + - +

Additional Inherited Members

- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -462,7 +464,7 @@ Additional Inherited Members
- +
enum LdConfigDirWrapper::LdConfigDirFIDenum LdConfigDirWrapper::LdConfigDirFID
@@ -540,8 +542,7 @@ Additional Inherited Members LdConfigDirWrapper::LdConfigDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -589,7 +590,7 @@ Here is the call graph for this function:
void LdConfigDirWrapper::clear ( - ) + ) @@ -632,19 +633,12 @@ Here is the call graph for this function: Executable::addr_type LdConfigDirWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -682,8 +676,7 @@ Here is the call graph for this function: void * LdConfigDirWrapper::firstSubEntryPtr ( - size_t  - parentId) + size_t parentId) @@ -766,8 +759,7 @@ Here is the call graph for this function: size_t LdConfigDirWrapper::firstSubEntrySize ( - size_t  - parentId) + size_t parentId) @@ -839,8 +831,7 @@ Here is the call graph for this function: QString LdConfigDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -883,19 +874,12 @@ Here is the call graph for this function: void * LdConfigDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -950,7 +934,7 @@ Here is the call graph for this function: virtual size_t LdConfigDirWrapper::getFieldsCount ( - ) + ) @@ -1049,8 +1033,7 @@ Here is the call graph for this function: std::set< DWORD > LdConfigDirWrapper::getGuardFlagsSet ( - DWORD  - flags) + DWORD flags) @@ -1087,7 +1070,7 @@ Here is the call graph for this function: virtual QString LdConfigDirWrapper::getName ( - ) + ) @@ -1116,7 +1099,7 @@ Here is the call graph for this function: void * LdConfigDirWrapper::getPtr ( - ) + ) @@ -1145,7 +1128,7 @@ Here is the call graph for this function: bufsize_t LdConfigDirWrapper::getSize ( - ) + ) @@ -1239,7 +1222,7 @@ Here is the call graph for this function: virtual size_t LdConfigDirWrapper::getSubFieldsCount ( - ) + ) @@ -1268,19 +1251,12 @@ Here is the call graph for this function: virtual ExeNodeWrapper * LdConfigDirWrapper::getSubfieldWrapper ( - size_t  - parentType, + size_t parentType, - size_t  - fieldId  - - - - ) - + size_t fieldId ) @@ -1319,8 +1295,7 @@ Here is the call graph for this function: virtual size_t LdConfigDirWrapper::getSubfieldWrapperCount ( - size_t  - parentType) + size_t parentType) @@ -1360,8 +1335,7 @@ Here is the call graph for this function: virtual bool LdConfigDirWrapper::hasSubfieldWrapper ( - size_t  - parentType) + size_t parentType) @@ -1400,7 +1374,7 @@ Here is the call graph for this function: bool LdConfigDirWrapper::hasSupressionInfo ( - ) + ) @@ -1469,7 +1443,7 @@ Here is the call graph for this function: size_t LdConfigDirWrapper::metadataSize ( - ) + ) @@ -1538,8 +1512,7 @@ Here is the call graph for this function: QString LdConfigDirWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1619,8 +1592,7 @@ Here is the call graph for this function: QString LdConfigDirWrapper::translateGuardFlag ( - DWORD  - flags) + DWORD flags) @@ -1654,8 +1626,7 @@ Here is the call graph for this function: QString LdConfigDirWrapper::translateGuardFlagsContent ( - const QString &  - delim) + const QString & delim) @@ -1725,7 +1696,7 @@ Here is the call graph for this function: bool LdConfigDirWrapper::wrap ( - ) + ) @@ -1792,7 +1763,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_ld_config_entry_wrapper-members.html b/class_ld_config_entry_wrapper-members.html index 6843fce8..8caa335e 100644 --- a/class_ld_config_entry_wrapper-members.html +++ b/class_ld_config_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -126,12 +128,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()LdConfigEntryWrappervirtual getSize()LdConfigEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -171,7 +173,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_ld_config_entry_wrapper.html b/class_ld_config_entry_wrapper.html index ddce76cd..5b8914af 100644 --- a/class_ld_config_entry_wrapper.html +++ b/class_ld_config_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: LdConfigEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,34 +103,34 @@ Collaboration diagram for LdConfigEntryWrapper: -

Public Types

enum  FieldID { NONE = FIELD_NONE -, HANDLER_ADDR -, METADATA -, FIELD_COUNTER +
enum  FieldID { NONE = FIELD_NONE +, HANDLER_ADDR +, METADATA +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + @@ -169,7 +171,7 @@ Public Member Functions - + @@ -210,7 +212,7 @@ Public Member Functions - + @@ -229,12 +231,12 @@ Public Member Functions - - + + - - + + @@ -262,10 +264,10 @@ Public Member Functions

Public Member Functions

 LdConfigEntryWrapper (Executable *pe, LdConfigDirWrapper *_parentDir, size_t entryNumber, size_t _parentFieldId)
 LdConfigEntryWrapper (Executable *pe, LdConfigDirWrapper *_parentDir, size_t entryNumber, size_t _parentFieldId)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
bufsize_t getFieldSize (size_t fieldId, size_t subField)
bufsize_t getFieldSize (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -280,19 +282,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -307,7 +309,7 @@ Additional Inherited Members
- +
enum LdConfigEntryWrapper::FieldIDenum LdConfigEntryWrapper::FieldID
@@ -335,31 +337,22 @@ Additional Inherited Members LdConfigEntryWrapper::LdConfigEntryWrapper ( - Executable *  - pe, + Executable * pe, - LdConfigDirWrapper *  - _parentDir, + LdConfigDirWrapper * _parentDir, - size_t  - entryNumber, + size_t entryNumber, - size_t  - _parentFieldId  - - - - ) - + size_t _parentFieldId ) @@ -396,19 +389,12 @@ Here is the call graph for this function:
virtual Executable::addr_type LdConfigEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -446,8 +432,7 @@ Here is the call graph for this function: virtual QString LdConfigEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -486,19 +471,12 @@ Here is the call graph for this function: void * LdConfigEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -594,7 +572,7 @@ Here is the call graph for this function: virtual size_t LdConfigEntryWrapper::getFieldsCount ( - ) + ) @@ -667,19 +645,12 @@ Here is the call graph for this function: bufsize_t LdConfigEntryWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -754,7 +725,7 @@ Here is the call graph for this function: virtual QString LdConfigEntryWrapper::getName ( - ) + ) @@ -783,7 +754,7 @@ Here is the call graph for this function: void * LdConfigEntryWrapper::getPtr ( - ) + ) @@ -874,7 +845,7 @@ Here is the call graph for this function: bufsize_t LdConfigEntryWrapper::getSize ( - ) + ) @@ -964,7 +935,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_mapped_exe-members.html b/class_mapped_exe-members.html index 0f1d6715..bb6017ad 100644 --- a/class_mapped_exe-members.html +++ b/class_mapped_exe-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -114,8 +116,8 @@ $(function() { getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual getRawSize() constExecutableinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrapper(size_t wrapperId)ExeWrappersContainervirtual getWrapperName(size_t id)ExeWrappersContainer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -163,7 +165,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_mapped_exe.html b/class_mapped_exe.html index b9974c4c..efa87f38 100644 --- a/class_mapped_exe.html +++ b/class_mapped_exe.html @@ -3,12 +3,14 @@ - + BearParser: MappedExe Class Reference + + @@ -30,7 +32,7 @@ - + @@ -97,13 +99,13 @@ Collaboration diagram for MappedExe: - + - + - + - + @@ -168,7 +170,7 @@ Public Member Functions - + @@ -181,12 +183,12 @@ Public Member Functions - - + + - - + + @@ -209,7 +211,7 @@ Public Member Functions - + @@ -223,22 +225,22 @@ Public Member Functions

Public Member Functions

virtual void wrap ()
virtual void wrap ()
 
virtual bool canResize (bufsize_t newSize)
virtual bool canResize (bufsize_t newSize)
 
virtual bool resize (bufsize_t newSize)
virtual bool resize (bufsize_t newSize)
 
- Public Member Functions inherited from Executable
- Public Member Functions inherited from Executable
bool isBit64 ()
 
bool isBit32 ()
 
virtual bool dumpFragment (offset_t offset, bufsize_t size, QString fileName)
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- Public Member Functions inherited from ExeWrappersContainer
- Public Member Functions inherited from ExeWrappersContainer
 ExeWrappersContainer ()
 
virtual ~ExeWrappersContainer (void)
- + - + - + - + - +

Protected Member Functions

 MappedExe (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 MappedExe (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
virtual ~MappedExe (void)
virtual ~MappedExe (void)
 
virtual void wrap (AbstractByteBuffer *v_buf)=0
virtual void wrap (AbstractByteBuffer *v_buf)=0
 
- Protected Member Functions inherited from Executable
- Protected Member Functions inherited from Executable
 Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
- Protected Member Functions inherited from ExeWrappersContainer
- Protected Member Functions inherited from ExeWrappersContainer
void clearWrappers ()
 
- + , VA = 3 } - + - + - + - + - +

Additional Inherited Members

- Public Types inherited from Executable
- Public Types inherited from Executable
enum  exe_bits { UNKNOWN = 0 , BITS_16 = 16 , BITS_32 = 32 @@ -251,25 +253,25 @@ Additional Inherited Members
 
- Public Types inherited from ExeWrappersContainer
- Public Types inherited from ExeWrappersContainer
enum  WRAPPERS { WR_NONE = size_t(-1) , COUNT_WRAPPERS = 0 }
 
- Static Public Member Functions inherited from Executable
- Static Public Member Functions inherited from Executable
static bool isBit64 (Executable *exe)
 
static bool isBit32 (Executable *exe)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from Executable
- Protected Attributes inherited from Executable
exe_bits bitMode
 
AbstractByteBuffer * buf
 
- Protected Attributes inherited from ExeWrappersContainer
- Protected Attributes inherited from ExeWrappersContainer
std::map< size_t, ExeElementWrapper * > wrappers
 
@@ -289,19 +291,12 @@ Additional Inherited Members MappedExe::MappedExe ( - AbstractByteBuffer *  - v_buf, + AbstractByteBuffer * v_buf, - exe_bits  - v_bitMode  - - - - ) - + exe_bits v_bitMode ) @@ -327,8 +322,7 @@ Additional Inherited Members virtual MappedExe::~MappedExe ( - void  - ) + void ) @@ -356,8 +350,7 @@ Additional Inherited Members virtual bool MappedExe::canResize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -386,8 +379,7 @@ Additional Inherited Members virtual bool MappedExe::resize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -436,7 +428,7 @@ Here is the call graph for this function: virtual void MappedExe::wrap ( - ) + ) @@ -474,8 +466,7 @@ Here is the call graph for this function: virtual void MappedExe::wrap ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -498,7 +489,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_opt_hdr_wrapper-members.html b/class_opt_hdr_wrapper-members.html index 08f4ef3f..ac81aa2f 100644 --- a/class_opt_hdr_wrapper-members.html +++ b/class_opt_hdr_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -117,9 +119,9 @@ $(function() { getPE()PEElementWrapperinline getPtr()OptHdrWrappervirtual getSize()OptHdrWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -192,7 +194,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_opt_hdr_wrapper.html b/class_opt_hdr_wrapper.html index 3b3abce9..8d393688 100644 --- a/class_opt_hdr_wrapper.html +++ b/class_opt_hdr_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: OptHdrWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,90 +137,90 @@ Collaboration diagram for OptHdrWrapper: -

Public Types

enum  OptHdrFID {
-  NONE = FIELD_NONE -, MAGIC = 0 -, LINKER_MAJOR -, LINKER_MINOR +
enum  OptHdrFID {
+  NONE = FIELD_NONE +, MAGIC = 0 +, LINKER_MAJOR +, LINKER_MINOR ,
-  CODE_SIZE -, INITDATA_SIZE -, UNINITDATA_SIZE -, EP +  CODE_SIZE +, INITDATA_SIZE +, UNINITDATA_SIZE +, EP ,
-  CODE_BASE -, DATA_BASE -, IMAGE_BASE -, SEC_ALIGN +  CODE_BASE +, DATA_BASE +, IMAGE_BASE +, SEC_ALIGN ,
-  FILE_ALIGN -, OSVER_MAJOR -, OSVER_MINOR -, IMGVER_MAJOR +  FILE_ALIGN +, OSVER_MAJOR +, OSVER_MINOR +, IMGVER_MAJOR ,
-  IMGVER_MINOR -, SUBSYSVER_MAJOR -, SUBSYSVER_MINOR -, WIN32_VER +  IMGVER_MINOR +, SUBSYSVER_MAJOR +, SUBSYSVER_MINOR +, WIN32_VER ,
-  IMAGE_SIZE -, HDRS_SIZE -, CHECKSUM -, SUBSYS +  IMAGE_SIZE +, HDRS_SIZE +, CHECKSUM +, SUBSYS ,
-  DLL_CHARACT -, STACK_RSRV_SIZE -, STACK_COMMIT_SIZE -, HEAP_RSRV_SIZE +  DLL_CHARACT +, STACK_RSRV_SIZE +, STACK_COMMIT_SIZE +, HEAP_RSRV_SIZE ,
-  HEAP_COMMIT_SIZE -, LDR_FLAGS -, RVAS_SIZES_NUM -, DATA_DIR +  HEAP_COMMIT_SIZE +, LDR_FLAGS +, RVAS_SIZES_NUM +, DATA_DIR ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -259,7 +261,7 @@ Public Member Functions - + @@ -278,12 +280,12 @@ Public Member Functions - - + + - - + + @@ -311,51 +313,51 @@ Public Member Functions

Public Member Functions

 OptHdrWrapper (PEFile *pe)
 OptHdrWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
Executable::exe_bits getHdrBitMode ()
Executable::exe_bits getHdrBitMode ()
 
IMAGE_NT_HEADERS32 * nt32 ()
IMAGE_NT_HEADERS32 * nt32 ()
 
IMAGE_NT_HEADERS64 * nt64 ()
IMAGE_NT_HEADERS64 * nt64 ()
 
- Public Member Functions inherited from PEElementWrapper
- Public Member Functions inherited from PEElementWrapper
 PEElementWrapper (PEFile *pe)
 
virtual ~PEElementWrapper ()
 
PEFile * getPE ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - + - + - +

Static Public Member Functions

static void initDllCharact ()
static void initDllCharact ()
 
static std::vector< DWORD > splitDllCharact (DWORD characteristics)
static std::vector< DWORD > splitDllCharact (DWORD characteristics)
 
static QString translateDllCharacteristics (DWORD charact)
static QString translateDllCharacteristics (DWORD charact)
 
static QString translateOptMagic (DWORD magic)
static QString translateOptMagic (DWORD magic)
 
static QString translateOSVersion (WORD major, WORD minor)
static QString translateOSVersion (WORD major, WORD minor)
 
static QString translateSubsystem (DWORD subsystem)
static QString translateSubsystem (DWORD subsystem)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + - + - +

Static Public Attributes

static std::map< DWORD, QString > s_optMagic
static std::map< DWORD, QString > s_optMagic
 
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
static std::map< std::pair< WORD, WORD >, QString > s_osVersion
 
static std::map< DWORD, QString > s_dllCharact
static std::map< DWORD, QString > s_dllCharact
 
static std::map< DWORD, QString > s_subsystem
static std::map< DWORD, QString > s_subsystem
 
- + - + - + - + - +

Protected Attributes

IMAGE_OPTIONAL_HEADER32 * opt32
IMAGE_OPTIONAL_HEADER32 * opt32
 
IMAGE_OPTIONAL_HEADER64 * opt64
IMAGE_OPTIONAL_HEADER64 * opt64
 
std::vector< DWORD > dllCharact
std::vector< DWORD > dllCharact
 
- Protected Attributes inherited from PEElementWrapper
- Protected Attributes inherited from PEElementWrapper
PEFile * m_PE
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- + @@ -372,7 +374,7 @@ Additional Inherited Members

Additional Inherited Members

- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +
enum OptHdrWrapper::OptHdrFIDenum OptHdrWrapper::OptHdrFID
@@ -429,8 +431,7 @@ Additional Inherited Members OptHdrWrapper::OptHdrWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -534,19 +535,12 @@ Here is the call graph for this function:
Executable::addr_type OptHdrWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -584,8 +578,7 @@ Here is the call graph for this function: QString OptHdrWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -631,19 +624,12 @@ Here is the call graph for this function: void * OptHdrWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -715,7 +701,7 @@ Here is the call graph for this function: virtual size_t OptHdrWrapper::getFieldsCount ( - ) + ) @@ -744,19 +730,12 @@ Here is the call graph for this function: bufsize_t OptHdrWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -825,7 +804,7 @@ Here is the call graph for this function: Executable::exe_bits OptHdrWrapper::getHdrBitMode ( - ) + ) @@ -861,7 +840,7 @@ Here is the call graph for this function: virtual QString OptHdrWrapper::getName ( - ) + ) @@ -890,7 +869,7 @@ Here is the call graph for this function: void * OptHdrWrapper::getPtr ( - ) + ) @@ -958,7 +937,7 @@ Here is the call graph for this function: bufsize_t OptHdrWrapper::getSize ( - ) + ) @@ -1026,7 +1005,7 @@ Here is the call graph for this function: void OptHdrWrapper::initDllCharact ( - ) + ) @@ -1050,7 +1029,7 @@ Here is the call graph for this function: IMAGE_NT_HEADERS32 * OptHdrWrapper::nt32 ( - ) + ) @@ -1099,7 +1078,7 @@ Here is the call graph for this function: IMAGE_NT_HEADERS64 * OptHdrWrapper::nt64 ( - ) + ) @@ -1151,8 +1130,7 @@ Here is the call graph for this function: std::vector< DWORD > OptHdrWrapper::splitDllCharact ( - DWORD  - characteristics) + DWORD characteristics) @@ -1191,8 +1169,7 @@ Here is the call graph for this function: QString OptHdrWrapper::translateDllCharacteristics ( - DWORD  - charact) + DWORD charact) @@ -1231,8 +1208,7 @@ Here is the call graph for this function: QString OptHdrWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1309,8 +1285,7 @@ Here is the call graph for this function: QString OptHdrWrapper::translateOptMagic ( - DWORD  - magic) + DWORD magic) @@ -1347,19 +1322,12 @@ Here is the call graph for this function: QString OptHdrWrapper::translateOSVersion ( - WORD  - major, + WORD major, - WORD  - minor  - - - - ) - + WORD minor ) @@ -1395,8 +1363,7 @@ Here is the call graph for this function: QString OptHdrWrapper::translateSubsystem ( - DWORD  - subsystem) + DWORD subsystem) @@ -1433,7 +1400,7 @@ Here is the call graph for this function: bool OptHdrWrapper::wrap ( - ) + ) @@ -1700,7 +1667,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_core-members.html b/class_p_e_core-members.html index 0dc100ab..e07905df 100644 --- a/class_p_e_core-members.html +++ b/class_p_e_core-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -102,7 +104,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_core.html b/class_p_e_core.html index 1fc0c031..a28ed941 100644 --- a/class_p_e_core.html +++ b/class_p_e_core.html @@ -3,12 +3,14 @@ - + BearParser: PECore Class Reference + + @@ -30,7 +32,7 @@ - + @@ -94,60 +96,60 @@ Collaboration diagram for PECore: - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - +

Public Member Functions

 PECore ()
 PECore ()
 
virtual ~PECore ()
virtual ~PECore ()
 
bool wrap (AbstractByteBuffer *v_buf)
bool wrap (AbstractByteBuffer *v_buf)
 
virtual offset_t getRawSize () const
virtual offset_t getRawSize () const
 
virtual bufsize_t getAlignment (Executable::addr_type aType) const
virtual bufsize_t getAlignment (Executable::addr_type aType) const
 
virtual offset_t getImageBase (bool recalculate=false)
virtual offset_t getImageBase (bool recalculate=false)
 
virtual bufsize_t getImageSize ()
virtual bufsize_t getImageSize ()
 
Executable::exe_bits getHdrBitMode () const
Executable::exe_bits getHdrBitMode () const
 
offset_t peSignatureOffset () const
offset_t peSignatureOffset () const
 
offset_t peFileHdrOffset () const
offset_t peFileHdrOffset () const
 
offset_t secHdrsOffset () const
offset_t secHdrsOffset () const
 
offset_t peOptHdrOffset () const
offset_t peOptHdrOffset () const
 
bufsize_t peNtHeadersSize () const
bufsize_t peNtHeadersSize () const
 
bufsize_t hdrsSize () const
bufsize_t hdrsSize () const
 
void setImageSize (bufsize_t newSize)
void setImageSize (bufsize_t newSize)
 
IMAGE_FILE_HEADER * getFileHeader () const
IMAGE_FILE_HEADER * getFileHeader () const
 
- +

Protected Member Functions

void reset ()
void reset ()
 
- + - + - + - + - +

Protected Attributes

AbstractByteBuffer * buf
AbstractByteBuffer * buf
 
IMAGE_DOS_HEADER * dos
IMAGE_DOS_HEADER * dos
 
IMAGE_FILE_HEADER * fHdr
IMAGE_FILE_HEADER * fHdr
 
IMAGE_OPTIONAL_HEADER32 * opt32
IMAGE_OPTIONAL_HEADER32 * opt32
 
IMAGE_OPTIONAL_HEADER64 * opt64
IMAGE_OPTIONAL_HEADER64 * opt64
 
- +

Friends

class PEFile
class PEFile
 

Detailed Description

@@ -166,7 +168,7 @@ Friends PECore::PECore ( - ) + ) @@ -193,7 +195,7 @@ Friends virtual PECore::~PECore ( - ) + ) @@ -233,8 +235,7 @@ Here is the call graph for this function: bufsize_t PECore::getAlignment ( - Executable::addr_type  - aType) + Executable::addr_type aType) const @@ -261,7 +262,7 @@ Here is the call graph for this function: IMAGE_FILE_HEADER * PECore::getFileHeader ( - ) + ) const @@ -285,7 +286,7 @@ Here is the call graph for this function: Executable::exe_bits PECore::getHdrBitMode ( - ) + ) const @@ -307,8 +308,7 @@ Here is the call graph for this function: offset_t PECore::getImageBase ( - bool  - recalculate = false) + bool recalculate = false) @@ -348,7 +348,7 @@ Here is the call graph for this function: bufsize_t PECore::getImageSize ( - ) + ) @@ -385,7 +385,7 @@ Here is the call graph for this function: virtual offset_t PECore::getRawSize ( - ) + ) const @@ -419,7 +419,7 @@ Here is the call graph for this function: bufsize_t PECore::hdrsSize ( - ) + ) const @@ -447,7 +447,7 @@ Here is the call graph for this function: offset_t PECore::peFileHdrOffset ( - ) + ) const @@ -478,7 +478,7 @@ Here is the call graph for this function: bufsize_t PECore::peNtHeadersSize ( - ) + ) const @@ -509,7 +509,7 @@ Here is the call graph for this function: offset_t PECore::peOptHdrOffset ( - ) + ) const @@ -543,7 +543,7 @@ Here is the call graph for this function: offset_t PECore::peSignatureOffset ( - ) + ) const @@ -565,7 +565,7 @@ Here is the call graph for this function: void PECore::reset ( - ) + ) @@ -599,7 +599,7 @@ Here is the call graph for this function: offset_t PECore::secHdrsOffset ( - ) + ) const @@ -638,8 +638,7 @@ Here is the call graph for this function: void PECore::setImageSize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -673,8 +672,7 @@ Here is the call graph for this function: bool PECore::wrap ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -856,7 +854,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_element_wrapper-members.html b/class_p_e_element_wrapper-members.html index 926cb846..ee3bec46 100644 --- a/class_p_e_element_wrapper-members.html +++ b/class_p_e_element_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -106,9 +108,9 @@ $(function() { getPE()PEElementWrapperinline getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -142,7 +144,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_element_wrapper.html b/class_p_e_element_wrapper.html index 34b22b44..b936602f 100644 --- a/class_p_e_element_wrapper.html +++ b/class_p_e_element_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: PEElementWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -133,13 +135,13 @@ Collaboration diagram for PEElementWrapper: - + - + - + - + @@ -200,7 +202,7 @@ Public Member Functions - + @@ -219,12 +221,12 @@ Public Member Functions - - + + - - + + @@ -252,23 +254,23 @@ Public Member Functions

Public Member Functions

 PEElementWrapper (PEFile *pe)
 PEElementWrapper (PEFile *pe)
 
virtual ~PEElementWrapper ()
virtual ~PEElementWrapper ()
 
PEFile * getPE ()
PEFile * getPE ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Protected Attributes

PEFile * m_PE
PEFile * m_PE
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class PEFile
class PEFile
 
- + - + @@ -287,8 +289,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
PEElementWrapper::PEElementWrapper (PEFile * pe)PEFile * pe)
@@ -310,7 +311,7 @@ Additional Inherited Members virtual PEElementWrapper::~PEElementWrapper ( - ) + ) @@ -338,7 +339,7 @@ Additional Inherited Members PEFile * PEElementWrapper::getPE ( - ) + ) @@ -410,7 +411,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_file-members.html b/class_p_e_file-members.html index f24555b8..61ced9f4 100644 --- a/class_p_e_file-members.html +++ b/class_p_e_file-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -149,8 +151,8 @@ $(function() { getSecIndex(SectionHdrWrapper *sec) constPEFileinline getSectionAlignment() constPEFileinline getSectionsCount(bool useMapped=true) constPEFile - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrapper(size_t wrapperId)ExeWrappersContainervirtual getWrapperName(size_t id)ExeWrappersContainer getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -229,7 +231,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_file.html b/class_p_e_file.html index 112e9e05..24c93390 100644 --- a/class_p_e_file.html +++ b/class_p_e_file.html @@ -3,12 +3,14 @@ - + BearParser: PEFile Class Reference + + @@ -30,7 +32,7 @@ - + @@ -136,23 +138,23 @@ Collaboration diagram for PEFile: - - + , VA = 3 } - + @@ -173,118 +175,118 @@ Public Types

Public Types

enum  WRAPPERS {
-  WR_NONE = MappedExe::WR_NONE -, WR_DOS_HDR = DOSExe::WR_DOS_HDR -, WR_RICH_HDR -, WR_FILE_HDR +
enum  WRAPPERS {
+  WR_NONE = MappedExe::WR_NONE +, WR_DOS_HDR = DOSExe::WR_DOS_HDR +, WR_RICH_HDR +, WR_FILE_HDR ,
-  WR_OPTIONAL_HDR -, WR_DATADIR -, WR_SECTIONS -, WR_DIR_ENTRY +  WR_OPTIONAL_HDR +, WR_DATADIR +, WR_SECTIONS +, WR_DIR_ENTRY ,
-  WR_DIR_ENTRY_END = WR_DIR_ENTRY + pe::DIR_ENTRIES_COUNT -, COUNT_WRAPPERS +  WR_DIR_ENTRY_END = WR_DIR_ENTRY + pe::DIR_ENTRIES_COUNT +, COUNT_WRAPPERS
}
 
- Public Types inherited from Executable
- Public Types inherited from Executable
enum  exe_bits { UNKNOWN = 0 , BITS_16 = 16 , BITS_32 = 32 @@ -165,7 +167,7 @@ Public Types
 
- Public Types inherited from ExeWrappersContainer
- Public Types inherited from ExeWrappersContainer
enum  WRAPPERS { WR_NONE = size_t(-1) , COUNT_WRAPPERS = 0 }
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -333,7 +335,7 @@ Public Member Functions - + @@ -346,12 +348,12 @@ Public Member Functions - - + + - - + + @@ -374,7 +376,7 @@ Public Member Functions - + @@ -388,73 +390,73 @@ Public Member Functions

Public Member Functions

 PEFile (AbstractByteBuffer *v_buf)
 PEFile (AbstractByteBuffer *v_buf)
 
virtual ~PEFile ()
virtual ~PEFile ()
 
virtual void wrap ()
virtual void wrap ()
 
virtual offset_t rawToRva (offset_t raw)
virtual offset_t rawToRva (offset_t raw)
 
virtual offset_t rvaToRaw (offset_t rva)
virtual offset_t rvaToRaw (offset_t rva)
 
virtual bufsize_t getMappedSize (Executable::addr_type aType)
virtual bufsize_t getMappedSize (Executable::addr_type aType)
 
virtual bufsize_t getAlignment (Executable::addr_type aType) const
virtual bufsize_t getAlignment (Executable::addr_type aType) const
 
virtual offset_t getImageBase (bool recalculate=false)
virtual offset_t getImageBase (bool recalculate=false)
 
virtual offset_t getEntryPoint (Executable::addr_type addrType=Executable::RVA)
virtual offset_t getEntryPoint (Executable::addr_type addrType=Executable::RVA)
 
virtual exe_bits getBitMode ()
virtual exe_bits getBitMode ()
 
offset_t peFileHdrOffset () const
offset_t peFileHdrOffset () const
 
offset_t peNtHdrOffset () const
offset_t peNtHdrOffset () const
 
bufsize_t peNtHeadersSize () const
bufsize_t peNtHeadersSize () const
 
offset_t peOptHdrOffset () const
offset_t peOptHdrOffset () const
 
offset_t secHdrsOffset () const
offset_t secHdrsOffset () const
 
offset_t secHdrsEndOffset () const
offset_t secHdrsEndOffset () const
 
bufsize_t hdrsSize ()
bufsize_t hdrsSize ()
 
offset_t getMinSecRVA ()
offset_t getMinSecRVA ()
 
ResourcesAlbum * getResourcesAlbum () const
ResourcesAlbum * getResourcesAlbum () const
 
pe::RICH_SIGNATURE * getRichHeaderSign ()
pe::RICH_SIGNATURE * getRichHeaderSign ()
 
pe::RICH_DANS_HEADER * getRichHeaderBgn (pe::RICH_SIGNATURE *sign)
pe::RICH_DANS_HEADER * getRichHeaderBgn (pe::RICH_SIGNATURE *sign)
 
IMAGE_DATA_DIRECTORY * getDataDirectory ()
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t peDataDirOffset ()
offset_t peDataDirOffset ()
 
size_t hdrSectionsNum () const
size_t hdrSectionsNum () const
 
size_t getSectionsCount (bool useMapped=true) const
size_t getSectionsCount (bool useMapped=true) const
 
exe_bits getHdrBitMode ()
exe_bits getHdrBitMode ()
 
SectionHdrWrapper * getSecHdr (size_t index) const
SectionHdrWrapper * getSecHdr (size_t index) const
 
SectionHdrWrapper * getSecHdrAtOffset (offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
SectionHdrWrapper * getSecHdrAtOffset (offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)
 
size_t getSecIndex (SectionHdrWrapper *sec) const
size_t getSecIndex (SectionHdrWrapper *sec) const
 
ResourcesContainer * getResourcesOfType (pe::resource_type typeId)
ResourcesContainer * getResourcesOfType (pe::resource_type typeId)
 
DataDirEntryWrapper * getDataDirEntry (pe::dir_entry eType)
DataDirEntryWrapper * getDataDirEntry (pe::dir_entry eType)
 
BufferView * createSectionView (size_t secNum)
BufferView * createSectionView (size_t secNum)
 
bool setEntryPoint (offset_t entry, Executable::addr_type aType)
bool setEntryPoint (offset_t entry, Executable::addr_type aType)
 
bool moveDataDirEntry (pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
bool moveDataDirEntry (pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)
 
SectionHdrWrapper * getLastSection ()
SectionHdrWrapper * getLastSection ()
 
bool canAddNewSection ()
bool canAddNewSection ()
 
SectionHdrWrapper * addNewSection (QString name, bufsize_t size, bufsize_t v_size=0)
SectionHdrWrapper * addNewSection (QString name, bufsize_t size, bufsize_t v_size=0)
 
SectionHdrWrapper * extendLastSection (bufsize_t addedSize)
SectionHdrWrapper * extendLastSection (bufsize_t addedSize)
 
bool unbindImports ()
bool unbindImports ()
 
ImportDirWrapper * getImports ()
ImportDirWrapper * getImports ()
 
DelayImpDirWrapper * getDelayedImports ()
DelayImpDirWrapper * getDelayedImports ()
 
ExportDirWrapper * getExports ()
ExportDirWrapper * getExports ()
 
virtual size_t getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
virtual size_t getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
 
offset_t getLastMapped (Executable::addr_type aType)
offset_t getLastMapped (Executable::addr_type aType)
 
bool hasDirectory (pe::dir_entry dirNum)
bool hasDirectory (pe::dir_entry dirNum)
 
bufsize_t getFileAlignment () const
bufsize_t getFileAlignment () const
 
bufsize_t getSectionAlignment () const
bufsize_t getSectionAlignment () const
 
BYTE * getSecContent (SectionHdrWrapper *sec)
BYTE * getSecContent (SectionHdrWrapper *sec)
 
void setImageSize (size_t newSize)
void setImageSize (size_t newSize)
 
SectionHdrWrapper * getEntrySection ()
SectionHdrWrapper * getEntrySection ()
 
bool clearContent (SectionHdrWrapper *sec)
bool clearContent (SectionHdrWrapper *sec)
 
bool dumpSection (SectionHdrWrapper *sec, QString fileName)
bool dumpSection (SectionHdrWrapper *sec, QString fileName)
 
bool canResize (bufsize_t newSize)
bool canResize (bufsize_t newSize)
 
bool isReproBuild ()
bool isReproBuild ()
 
- Public Member Functions inherited from MappedExe
- Public Member Functions inherited from MappedExe
virtual bool resize (bufsize_t newSize)
 
- Public Member Functions inherited from Executable
- Public Member Functions inherited from Executable
bool isBit64 ()
 
bool isBit32 ()
 
virtual bool dumpFragment (offset_t offset, bufsize_t size, QString fileName)
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 
- Public Member Functions inherited from ExeWrappersContainer
- Public Member Functions inherited from ExeWrappersContainer
 ExeWrappersContainer ()
 
virtual ~ExeWrappersContainer (void)
- + - + - +

Static Public Member Functions

static long computeChecksum (BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
static long computeChecksum (BYTE *buffer, size_t bufferSize, offset_t checksumOffset)
 
- Static Public Member Functions inherited from Executable
- Static Public Member Functions inherited from Executable
static bool isBit64 (Executable *exe)
 
static bool isBit32 (Executable *exe)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + - + - + - + - + - + - + - + - +

Protected Member Functions

BufferView * _createSectionView (SectionHdrWrapper *sec)
BufferView * _createSectionView (SectionHdrWrapper *sec)
 
size_t getExportsMap (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
size_t getExportsMap (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)
 
virtual void clearWrappers ()
virtual void clearWrappers ()
 
virtual void wrap (AbstractByteBuffer *v_buf)
virtual void wrap (AbstractByteBuffer *v_buf)
 
void initDirEntries ()
void initDirEntries ()
 
bool setHdrSectionsNum (size_t newNum)
bool setHdrSectionsNum (size_t newNum)
 
bool setVirtualSize (bufsize_t newSize)
bool setVirtualSize (bufsize_t newSize)
 
- Protected Member Functions inherited from MappedExe
- Protected Member Functions inherited from MappedExe
 MappedExe (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
virtual ~MappedExe (void)
 
- Protected Member Functions inherited from Executable
- Protected Member Functions inherited from Executable
 Executable (AbstractByteBuffer *v_buf, exe_bits v_bitMode)
 
- Protected Member Functions inherited from ExeWrappersContainer
- Protected Member Functions inherited from ExeWrappersContainer
void clearWrappers ()
 
- + - + - + - + - + - + - + - + - +

Protected Attributes

PECore core
PECore core
 
DosHdrWrapper * dosHdrWrapper
DosHdrWrapper * dosHdrWrapper
 
FileHdrWrapper * fHdr
FileHdrWrapper * fHdr
 
OptHdrWrapper * optHdr
OptHdrWrapper * optHdr
 
SectHdrsWrapper * sects
SectHdrsWrapper * sects
 
ResourcesAlbum * album
ResourcesAlbum * album
 
DataDirEntryWrapper * dataDirEntries [pe::DIR_ENTRIES_COUNT]
DataDirEntryWrapper * dataDirEntries [pe::DIR_ENTRIES_COUNT]
 
- Protected Attributes inherited from Executable
- Protected Attributes inherited from Executable
exe_bits bitMode
 
AbstractByteBuffer * buf
 
- Protected Attributes inherited from ExeWrappersContainer
- Protected Attributes inherited from ExeWrappersContainer
std::map< size_t, ExeElementWrapper * > wrappers
 
- +

Friends

class SectHdrsWrapper
class SectHdrsWrapper
 

Detailed Description

@@ -468,7 +470,7 @@ Friends
- +
enum PEFile::WRAPPERSenum PEFile::WRAPPERS
@@ -499,8 +501,7 @@ Friends PEFile::PEFile ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -539,7 +540,7 @@ Here is the call graph for this function:
virtual PEFile::~PEFile ( - ) + ) @@ -585,8 +586,7 @@ Here is the call graph for this function: BufferView * PEFile::_createSectionView ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) @@ -625,25 +625,17 @@ Here is the call graph for this function: SectionHdrWrapper * PEFile::addNewSection ( - QString  - name, + QString name, - bufsize_t  - size, + bufsize_t size, - bufsize_t  - v_size = 0  - - - - ) - + bufsize_t v_size = 0 )
@@ -762,7 +754,7 @@ Here is the call graph for this function:
bool PEFile::canAddNewSection ( - ) + ) @@ -832,8 +824,7 @@ Here is the call graph for this function: bool PEFile::canResize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -887,8 +878,7 @@ Here is the call graph for this function: bool PEFile::clearContent ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) @@ -939,7 +929,7 @@ Here is the call graph for this function: void PEFile::clearWrappers ( - ) + ) @@ -982,25 +972,17 @@ Here is the call graph for this function: long PEFile::computeChecksum ( - BYTE *  - buffer, + BYTE * buffer, - size_t  - bufferSize, + size_t bufferSize, - offset_t  - checksumOffset  - - - - ) - + offset_t checksumOffset ) @@ -1033,8 +1015,7 @@ Here is the call graph for this function: BufferView * PEFile::createSectionView ( - size_t  - secNum) + size_t secNum) @@ -1080,19 +1061,12 @@ Here is the call graph for this function: bool PEFile::dumpSection ( - SectionHdrWrapper *  - sec, + SectionHdrWrapper * sec, - QString  - fileName  - - - - ) - + QString fileName )
@@ -1137,8 +1111,7 @@ Here is the call graph for this function:
SectionHdrWrapper * PEFile::extendLastSection ( - bufsize_t  - addedSize) + bufsize_t addedSize) @@ -1255,8 +1228,7 @@ Here is the call graph for this function: virtual bufsize_t PEFile::getAlignment ( - Executable::addr_type  - aType) + Executable::addr_type aType) const @@ -1297,19 +1269,12 @@ Here is the call graph for this function: virtual size_t PEFile::getAllEntryPoints ( - QMap< offset_t, QString > &  - entrypoints, + QMap< offset_t, QString > & entrypoints, - Executable::addr_type  - aType = Executable::RVA  - - - - ) - + Executable::addr_type aType = Executable::RVA ) @@ -1449,7 +1414,7 @@ Here is the call graph for this function: virtual exe_bits PEFile::getBitMode ( - ) + ) @@ -1487,7 +1452,7 @@ Here is the call graph for this function: IMAGE_DATA_DIRECTORY * PEFile::getDataDirectory ( - ) + ) @@ -1516,8 +1481,7 @@ Here is the call graph for this function: DataDirEntryWrapper * PEFile::getDataDirEntry ( - pe::dir_entry  - eType) + pe::dir_entry eType) @@ -1549,7 +1513,7 @@ Here is the call graph for this function: DelayImpDirWrapper * PEFile::getDelayedImports ( - ) + ) @@ -1588,8 +1552,7 @@ Here is the call graph for this function: offset_t PEFile::getEntryPoint ( - Executable::addr_type  - addrType = Executable::RVA) + Executable::addr_type addrType = Executable::RVA) @@ -1675,7 +1638,7 @@ Here is the call graph for this function: SectionHdrWrapper * PEFile::getEntrySection ( - ) + ) @@ -1768,7 +1731,7 @@ Here is the call graph for this function: ExportDirWrapper * PEFile::getExports ( - ) + ) @@ -1807,19 +1770,12 @@ Here is the call graph for this function: size_t PEFile::getExportsMap ( - QMap< offset_t, QString > &  - entrypoints, + QMap< offset_t, QString > & entrypoints, - Executable::addr_type  - aType = Executable::RVA  - - - - ) - + Executable::addr_type aType = Executable::RVA ) @@ -1949,7 +1905,7 @@ Here is the call graph for this function: bufsize_t PEFile::getFileAlignment ( - ) + ) const @@ -1990,7 +1946,7 @@ Here is the call graph for this function: exe_bits PEFile::getHdrBitMode ( - ) + ) @@ -2027,8 +1983,7 @@ Here is the call graph for this function: virtual offset_t PEFile::getImageBase ( - bool  - recalculate = false) + bool recalculate = false) @@ -2073,7 +2028,7 @@ Here is the call graph for this function: ImportDirWrapper * PEFile::getImports ( - ) + ) @@ -2109,8 +2064,7 @@ Here is the call graph for this function: offset_t PEFile::getLastMapped ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -2220,7 +2174,7 @@ Here is the call graph for this function: SectionHdrWrapper * PEFile::getLastSection ( - ) + ) @@ -2299,8 +2253,7 @@ Here is the call graph for this function: bufsize_t PEFile::getMappedSize ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -2343,7 +2296,7 @@ Here is the call graph for this function: offset_t PEFile::getMinSecRVA ( - ) + ) @@ -2422,7 +2375,7 @@ Here is the call graph for this function: ResourcesAlbum * PEFile::getResourcesAlbum ( - ) + ) const @@ -2449,8 +2402,7 @@ Here is the call graph for this function: ResourcesContainer * PEFile::getResourcesOfType ( - pe::resource_type  - typeId) + pe::resource_type typeId) @@ -2490,8 +2442,7 @@ Here is the call graph for this function: pe::RICH_DANS_HEADER * PEFile::getRichHeaderBgn ( - pe::RICH_SIGNATURE *  - sign) + pe::RICH_SIGNATURE * sign) @@ -2533,7 +2484,7 @@ Here is the call graph for this function: pe::RICH_SIGNATURE * PEFile::getRichHeaderSign ( - ) + ) @@ -2574,8 +2525,7 @@ Here is the call graph for this function: BYTE * PEFile::getSecContent ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) @@ -2627,8 +2577,7 @@ Here is the call graph for this function: SectionHdrWrapper * PEFile::getSecHdr ( - size_t  - index) + size_t index) const @@ -2668,31 +2617,22 @@ Here is the call graph for this function: SectionHdrWrapper * PEFile::getSecHdrAtOffset ( - offset_t  - offset, + offset_t offset, - Executable::addr_type  - aType, + Executable::addr_type aType, - bool  - recalculate = false, + bool recalculate = false, - bool  - verbose = false  - - - - ) - + bool verbose = false ) @@ -2731,8 +2671,7 @@ Here is the call graph for this function: size_t PEFile::getSecIndex ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) const @@ -2772,7 +2711,7 @@ Here is the call graph for this function: bufsize_t PEFile::getSectionAlignment ( - ) + ) const @@ -2810,8 +2749,7 @@ Here is the call graph for this function: size_t PEFile::getSectionsCount ( - bool  - useMapped = true) + bool useMapped = true) const @@ -2881,8 +2819,7 @@ Here is the call graph for this function: bool PEFile::hasDirectory ( - pe::dir_entry  - dirNum) + pe::dir_entry dirNum) @@ -2919,7 +2856,7 @@ Here is the call graph for this function: size_t PEFile::hdrSectionsNum ( - ) + ) const @@ -2983,7 +2920,7 @@ Here is the call graph for this function: bufsize_t PEFile::hdrsSize ( - ) + ) @@ -3021,7 +2958,7 @@ Here is the call graph for this function: void PEFile::initDirEntries ( - ) + ) @@ -3058,7 +2995,7 @@ Here is the call graph for this function: bool PEFile::isReproBuild ( - ) + ) @@ -3092,25 +3029,17 @@ Here is the call graph for this function: bool PEFile::moveDataDirEntry ( - pe::dir_entry  - id, + pe::dir_entry id, - offset_t  - newOffset, + offset_t newOffset, - Executable::addr_type  - addType = Executable::RAW  - - - - ) - + Executable::addr_type addType = Executable::RAW )
@@ -3176,7 +3105,7 @@ Here is the call graph for this function:
offset_t PEFile::peDataDirOffset ( - ) + ) @@ -3219,7 +3148,7 @@ Here is the call graph for this function: offset_t PEFile::peFileHdrOffset ( - ) + ) const @@ -3260,7 +3189,7 @@ Here is the call graph for this function: offset_t PEFile::peNtHdrOffset ( - ) + ) const @@ -3297,7 +3226,7 @@ Here is the call graph for this function: bufsize_t PEFile::peNtHeadersSize ( - ) + ) const @@ -3338,7 +3267,7 @@ Here is the call graph for this function: offset_t PEFile::peOptHdrOffset ( - ) + ) const @@ -3382,8 +3311,7 @@ Here is the call graph for this function: offset_t PEFile::rawToRva ( - offset_t  - raw) + offset_t raw) @@ -3483,8 +3411,7 @@ Here is the call graph for this function: offset_t PEFile::rvaToRaw ( - offset_t  - rva) + offset_t rva) @@ -3584,7 +3511,7 @@ Here is the call graph for this function: offset_t PEFile::secHdrsEndOffset ( - ) + ) const @@ -3674,7 +3601,7 @@ Here is the call graph for this function: offset_t PEFile::secHdrsOffset ( - ) + ) const @@ -3717,19 +3644,12 @@ Here is the call graph for this function: bool PEFile::setEntryPoint ( - offset_t  - entry, + offset_t entry, - Executable::addr_type  - aType  - - - - ) - + Executable::addr_type aType )
@@ -3813,8 +3733,7 @@ Here is the call graph for this function:
bool PEFile::setHdrSectionsNum ( - size_t  - newNum) + size_t newNum) @@ -3890,8 +3809,7 @@ Here is the call graph for this function: void PEFile::setImageSize ( - size_t  - newSize) + size_t newSize) @@ -3969,8 +3887,7 @@ Here is the call graph for this function: bool PEFile::setVirtualSize ( - bufsize_t  - newSize) + bufsize_t newSize) @@ -4043,7 +3960,7 @@ Here is the call graph for this function: bool PEFile::unbindImports ( - ) + ) @@ -4081,7 +3998,7 @@ Here is the call graph for this function: void PEFile::wrap ( - ) + ) @@ -4119,8 +4036,7 @@ Here is the call graph for this function: void PEFile::wrap ( - AbstractByteBuffer *  - v_buf) + AbstractByteBuffer * v_buf) @@ -4443,7 +4359,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_file_builder-members.html b/class_p_e_file_builder-members.html index 1fd3cd4b..d7be7cfa 100644 --- a/class_p_e_file_builder-members.html +++ b/class_p_e_file_builder-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_file_builder.html b/class_p_e_file_builder.html index f68e0929..49fded7a 100644 --- a/class_p_e_file_builder.html +++ b/class_p_e_file_builder.html @@ -3,12 +3,14 @@ - + BearParser: PEFileBuilder Class Reference + + @@ -30,7 +32,7 @@ - + @@ -91,15 +93,15 @@ Collaboration diagram for PEFileBuilder: - + - + - + - + - + @@ -121,7 +123,7 @@ Public Member Functions - +

Public Member Functions

 PEFileBuilder ()
 PEFileBuilder ()
 
virtual bool signatureMatches (AbstractByteBuffer *buf)
virtual bool signatureMatches (AbstractByteBuffer *buf)
 
virtual Executable * build (AbstractByteBuffer *buf)
virtual Executable * build (AbstractByteBuffer *buf)
 
QString typeName ()
QString typeName ()
 
- Public Member Functions inherited from ExeBuilder
- Public Member Functions inherited from ExeBuilder
 ExeBuilder ()
 
virtual ~ExeBuilder ()
PEFileBuilder::PEFileBuilder ())
@@ -149,8 +151,7 @@ Public Member Functions Executable * PEFileBuilder::build ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -198,8 +199,7 @@ Here is the call graph for this function: bool PEFileBuilder::signatureMatches ( - AbstractByteBuffer *  - buf) + AbstractByteBuffer * buf) @@ -244,7 +244,7 @@ Here is the call graph for this function: QString PEFileBuilder::typeName ( - ) + ) @@ -268,7 +268,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_node_wrapper-members.html b/class_p_e_node_wrapper-members.html index 49046157..7e04a76f 100644 --- a/class_p_e_node_wrapper-members.html +++ b/class_p_e_node_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -125,12 +127,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()=0ExeElementWrapperpure virtual getSize()=0ExeElementWrapperpure virtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -172,7 +174,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_p_e_node_wrapper.html b/class_p_e_node_wrapper.html index 5598b291..449116d9 100644 --- a/class_p_e_node_wrapper.html +++ b/class_p_e_node_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: PENodeWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -133,17 +135,17 @@ Collaboration diagram for PENodeWrapper: - + - + - + - + - + - + @@ -184,7 +186,7 @@ Public Member Functions - + @@ -239,7 +241,7 @@ Public Member Functions - + @@ -258,12 +260,12 @@ Public Member Functions - - + + - - + + @@ -291,32 +293,32 @@ Public Member Functions

Public Member Functions

 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual ~PENodeWrapper ()
virtual ~PENodeWrapper ()
 
PEFile * getPE ()
PEFile * getPE ()
 
virtual PENodeWrapper * getParentNode ()
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - +

Protected Attributes

PEFile * m_PE
PEFile * m_PE
 
PENodeWrapper * peParentNode
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class PEFile
class PEFile
 
- + - + @@ -331,7 +333,7 @@ Additional Inherited Members - + @@ -350,19 +352,12 @@ Additional Inherited Members - - + - - - - - - - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
PENodeWrapper::PENodeWrapper (PEFile * pe, PEFile * pe,
PENodeWrapper * parent = NULL 
)PENodeWrapper * parent = NULL )
@@ -390,25 +385,17 @@ Here is the call graph for this function:
PENodeWrapper::PENodeWrapper ( - PEFile *  - pe, + PEFile * pe, - PENodeWrapper *  - parent, + PENodeWrapper * parent, - size_t  - entryNumber  - - - - ) - + size_t entryNumber )
@@ -439,7 +426,7 @@ Here is the call graph for this function:
virtual PENodeWrapper::~PENodeWrapper ( - ) + ) @@ -467,7 +454,7 @@ Here is the call graph for this function: virtual PENodeWrapper * PENodeWrapper::getParentNode ( - ) + ) @@ -496,7 +483,7 @@ Here is the call graph for this function: PEFile * PENodeWrapper::getPE ( - ) + ) @@ -592,7 +579,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_parser_exception-members.html b/class_parser_exception-members.html index 3fa8bdf8..52bea66e 100644 --- a/class_parser_exception-members.html +++ b/class_parser_exception-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -90,7 +92,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_parser_exception.html b/class_parser_exception.html index 6a7b1e0b..c2e48b3e 100644 --- a/class_parser_exception.html +++ b/class_parser_exception.html @@ -3,12 +3,14 @@ - + BearParser: ParserException Class Reference + + @@ -30,7 +32,7 @@ - + @@ -93,9 +95,9 @@ Collaboration diagram for ParserException: - + - + @@ -111,10 +113,10 @@ Public Member Functions

Public Member Functions

 ParserException (const QString info)
 ParserException (const QString info)
 
- Public Member Functions inherited from CustomException
- Public Member Functions inherited from CustomException
 CustomException (const QString info, const int32_t code=UNKNOWN_EXCEPTION)
 
 CustomException (const int32_t code)
- + - + @@ -138,8 +140,7 @@ Additional Inherited Members - - +

Additional Inherited Members

- Protected Member Functions inherited from CustomException
- Protected Member Functions inherited from CustomException
virtual QString codeToString ()
 
- Protected Attributes inherited from CustomException
- Protected Attributes inherited from CustomException
QString m_info
 
std::string m_strInfo
ParserException::ParserException (const QString info)const QString info)
@@ -160,7 +161,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_block_wrapper-members.html b/class_reloc_block_wrapper-members.html index 2400ae2f..6acf922d 100644 --- a/class_reloc_block_wrapper-members.html +++ b/class_reloc_block_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,12 +130,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()RelocBlockWrappervirtual getSize()RelocBlockWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -175,7 +177,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_block_wrapper.html b/class_reloc_block_wrapper.html index 3031bae7..06d9a9eb 100644 --- a/class_reloc_block_wrapper.html +++ b/class_reloc_block_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: RelocBlockWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,46 +103,46 @@ Collaboration diagram for RelocBlockWrapper: -

Public Types

enum  RelocBlockFID {
-  NONE = FIELD_NONE -, PAGE_VA -, BLOCK_SIZE -, ENTRIES_PTR +
enum  RelocBlockFID {
+  NONE = FIELD_NONE +, PAGE_VA +, BLOCK_SIZE +, ENTRIES_PTR ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -179,7 +181,7 @@ Public Member Functions - + @@ -220,7 +222,7 @@ Public Member Functions - + @@ -239,12 +241,12 @@ Public Member Functions - - + + - - + + @@ -272,10 +274,10 @@ Public Member Functions

Public Member Functions

 RelocBlockWrapper (Executable *pe, RelocDirWrapper *parentDir, size_t entryNumber)
 RelocBlockWrapper (Executable *pe, RelocDirWrapper *parentDir, size_t entryNumber)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
 
void * getEntriesPtr ()
void * getEntriesPtr ()
 
size_t maxEntriesNumInBlock ()
size_t maxEntriesNumInBlock ()
 
IMAGE_BASE_RELOCATION * myReloc ()
IMAGE_BASE_RELOCATION * myReloc ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -290,19 +292,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -317,7 +319,7 @@ Additional Inherited Members
- +
enum RelocBlockWrapper::RelocBlockFIDenum RelocBlockWrapper::RelocBlockFID
@@ -346,25 +348,17 @@ Additional Inherited Members RelocBlockWrapper::RelocBlockWrapper ( - Executable *  - pe, + Executable * pe, - RelocDirWrapper *  - parentDir, + RelocDirWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -474,19 +468,12 @@ Here is the call graph for this function:
Executable::addr_type RelocBlockWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -524,19 +511,12 @@ Here is the call graph for this function: WrappedValue::data_type RelocBlockWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -571,7 +551,7 @@ Here is the call graph for this function: void * RelocBlockWrapper::getEntriesPtr ( - ) + ) @@ -673,8 +653,7 @@ Here is the call graph for this function: QString RelocBlockWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -715,19 +694,12 @@ Here is the call graph for this function: void * RelocBlockWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -829,7 +801,7 @@ Here is the call graph for this function: virtual size_t RelocBlockWrapper::getFieldsCount ( - ) + ) @@ -858,7 +830,7 @@ Here is the call graph for this function: virtual QString RelocBlockWrapper::getName ( - ) + ) @@ -887,7 +859,7 @@ Here is the call graph for this function: void * RelocBlockWrapper::getPtr ( - ) + ) @@ -987,7 +959,7 @@ Here is the call graph for this function: bufsize_t RelocBlockWrapper::getSize ( - ) + ) @@ -1087,7 +1059,7 @@ Here is the call graph for this function: size_t RelocBlockWrapper::maxEntriesNumInBlock ( - ) + ) @@ -1189,7 +1161,7 @@ Here is the call graph for this function: IMAGE_BASE_RELOCATION * RelocBlockWrapper::myReloc ( - ) + ) @@ -1290,7 +1262,7 @@ Here is the call graph for this function: bool RelocBlockWrapper::wrap ( - ) + ) @@ -1395,7 +1367,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_dir_wrapper-members.html b/class_reloc_dir_wrapper-members.html index 321fa8b1..38b7a9ce 100644 --- a/class_reloc_dir_wrapper-members.html +++ b/class_reloc_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -132,12 +134,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()RelocDirWrapperinlinevirtual getSize()RelocDirWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -181,7 +183,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_dir_wrapper.html b/class_reloc_dir_wrapper.html index 952b5ee4..7510b0d1 100644 --- a/class_reloc_dir_wrapper.html +++ b/class_reloc_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: RelocDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,27 +137,27 @@ Collaboration diagram for RelocDirWrapper: - + - + - + - + - + - + - + - + - + - + - + @@ -164,7 +166,7 @@ Public Member Functions - + @@ -175,7 +177,7 @@ Public Member Functions - + @@ -212,7 +214,7 @@ Public Member Functions - + @@ -255,7 +257,7 @@ Public Member Functions - + @@ -274,12 +276,12 @@ Public Member Functions - - + + - - + + @@ -307,12 +309,12 @@ Public Member Functions

Public Member Functions

 RelocDirWrapper (PEFile *pe)
 RelocDirWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -327,7 +329,7 @@ Protected Member Functions - + @@ -335,30 +337,30 @@ Protected Member Functions

Protected Member Functions

IMAGE_BASE_RELOCATION * reloc ()
IMAGE_BASE_RELOCATION * reloc ()
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class RelocBlockWrapper
class RelocBlockWrapper
 
- + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -378,8 +380,7 @@ Additional Inherited Members RelocDirWrapper::RelocDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -476,8 +477,7 @@ Here is the call graph for this function: virtual QString RelocDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -506,19 +506,12 @@ Here is the call graph for this function: virtual QString RelocDirWrapper::getFieldName ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -560,19 +553,12 @@ Here is the call graph for this function: virtual void * RelocDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -616,7 +602,7 @@ Here is the call graph for this function: virtual size_t RelocDirWrapper::getFieldsCount ( - ) + ) @@ -645,19 +631,12 @@ Here is the call graph for this function: virtual bufsize_t RelocDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -701,7 +680,7 @@ Here is the call graph for this function: virtual QString RelocDirWrapper::getName ( - ) + ) @@ -730,7 +709,7 @@ Here is the call graph for this function: virtual void * RelocDirWrapper::getPtr ( - ) + ) @@ -824,7 +803,7 @@ Here is the call graph for this function: virtual bufsize_t RelocDirWrapper::getSize ( - ) + ) @@ -853,7 +832,7 @@ Here is the call graph for this function: IMAGE_BASE_RELOCATION * RelocDirWrapper::reloc ( - ) + ) @@ -943,7 +922,7 @@ Here is the call graph for this function: bool RelocDirWrapper::wrap ( - ) + ) @@ -1059,7 +1038,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_entry_wrapper-members.html b/class_reloc_entry_wrapper-members.html index cea22d29..5688b85e 100644 --- a/class_reloc_entry_wrapper-members.html +++ b/class_reloc_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,13 +130,13 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()RelocEntryWrappervirtual getSize()RelocEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()RelocEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getType(WORD relocEntryVal)RelocEntryWrapperstatic - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -174,7 +176,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reloc_entry_wrapper.html b/class_reloc_entry_wrapper.html index a368e326..16b5f87f 100644 --- a/class_reloc_entry_wrapper.html +++ b/class_reloc_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: RelocEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -102,35 +104,35 @@ Collaboration diagram for RelocEntryWrapper: -

Public Types

enum  FieldID { NONE = FIELD_NONE -, RELOC_ENTRY_VAL -, FIELD_COUNTER +
enum  FieldID { NONE = FIELD_NONE +, RELOC_ENTRY_VAL +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + - + @@ -169,7 +171,7 @@ Public Member Functions - + @@ -212,7 +214,7 @@ Public Member Functions - + @@ -231,12 +233,12 @@ Public Member Functions - - + + - - + + @@ -264,19 +266,19 @@ Public Member Functions

Public Member Functions

 RelocEntryWrapper (Executable *pe, RelocBlockWrapper *parentDir, size_t entryNumber)
 RelocEntryWrapper (Executable *pe, RelocBlockWrapper *parentDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
offset_t deltaToRVA (WORD delta)
offset_t deltaToRVA (WORD delta)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - +

Static Public Member Functions

static WORD getType (WORD relocEntryVal)
static WORD getType (WORD relocEntryVal)
 
static WORD getDelta (WORD relocEntryVal)
static WORD getDelta (WORD relocEntryVal)
 
static QString translateType (WORD type)
static QString translateType (WORD type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + @@ -291,19 +293,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -318,7 +320,7 @@ Additional Inherited Members
- +
enum RelocEntryWrapper::FieldIDenum RelocEntryWrapper::FieldID
@@ -345,25 +347,17 @@ Additional Inherited Members RelocEntryWrapper::RelocEntryWrapper ( - Executable *  - pe, + Executable * pe, - RelocBlockWrapper *  - parentDir, + RelocBlockWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -390,19 +384,12 @@ Additional Inherited Members virtual Executable::addr_type RelocEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -427,8 +414,7 @@ Additional Inherited Members offset_t RelocEntryWrapper::deltaToRVA ( - WORD  - delta) + WORD delta) @@ -527,8 +513,7 @@ Here is the call graph for this function:
WORD RelocEntryWrapper::getDelta ( - WORD  - relocEntryVal) + WORD relocEntryVal) @@ -565,8 +550,7 @@ Here is the call graph for this function: virtual QString RelocEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -605,19 +589,12 @@ Here is the call graph for this function: virtual void * RelocEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -740,7 +717,7 @@ Here is the call graph for this function: virtual size_t RelocEntryWrapper::getFieldsCount ( - ) + ) @@ -769,7 +746,7 @@ Here is the call graph for this function: virtual QString RelocEntryWrapper::getName ( - ) + ) @@ -798,7 +775,7 @@ Here is the call graph for this function: void * RelocEntryWrapper::getPtr ( - ) + ) @@ -920,7 +897,7 @@ Here is the call graph for this function: bufsize_t RelocEntryWrapper::getSize ( - ) + ) @@ -959,7 +936,7 @@ Here is the call graph for this function: virtual size_t RelocEntryWrapper::getSubFieldsCount ( - ) + ) @@ -988,8 +965,7 @@ Here is the call graph for this function: WORD RelocEntryWrapper::getType ( - WORD  - relocEntryVal) + WORD relocEntryVal) @@ -1026,8 +1002,7 @@ Here is the call graph for this function: QString RelocEntryWrapper::translateType ( - WORD  - type) + WORD type) @@ -1059,7 +1034,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reource_h_t_m_l_wrapper-members.html b/class_reource_h_t_m_l_wrapper-members.html index c10623b5..9dae05b7 100644 --- a/class_reource_h_t_m_l_wrapper-members.html +++ b/class_reource_h_t_m_l_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,13 +130,13 @@ $(function() { getResContentPtr()ResourceContentWrapper getResContentSize()ResourceContentWrapper getSize()ResourceContentWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceContentWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getType()ResourceContentWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -177,7 +179,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reource_h_t_m_l_wrapper.html b/class_reource_h_t_m_l_wrapper.html index fd40bf60..1e3917df 100644 --- a/class_reource_h_t_m_l_wrapper.html +++ b/class_reource_h_t_m_l_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ReourceHTMLWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -107,9 +109,9 @@ Collaboration diagram for ReourceHTMLWrapper: - + - + @@ -134,7 +136,7 @@ Public Member Functions - + @@ -173,7 +175,7 @@ Public Member Functions - + @@ -216,7 +218,7 @@ Public Member Functions - + @@ -235,12 +237,12 @@ Public Member Functions - - + + - - + + @@ -268,14 +270,14 @@ Public Member Functions

Public Member Functions

virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from ResourceContentWrapper
- Public Member Functions inherited from ResourceContentWrapper
virtual ~ResourceContentWrapper ()
 
void * getResContentPtr ()
 
virtual QString getFieldName (size_t fieldId)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -290,7 +292,7 @@ Protected Member Functions - + @@ -298,30 +300,30 @@ Protected Member Functions

Protected Member Functions

 ReourceHTMLWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 ReourceHTMLWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 
- Protected Member Functions inherited from ResourceContentWrapper
- Protected Member Functions inherited from ResourceContentWrapper
 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class ResourceContentFactory
class ResourceContentFactory
 
- + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from ResourceContentWrapper
- Static Public Member Functions inherited from ResourceContentWrapper
static QString translateType (pe::resource_type type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from ResourceContentWrapper
- Protected Attributes inherited from ResourceContentWrapper
ResourceLeafWrapper * myLeaf
 
pe::resource_type typeId
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -341,19 +343,12 @@ Additional Inherited Members ReourceHTMLWrapper::ReourceHTMLWrapper ( - Executable *  - pe, + Executable * pe, - ResourceLeafWrapper *  - v_leaf  - - - - ) - + ResourceLeafWrapper * v_leaf ) @@ -380,19 +375,12 @@ Additional Inherited Members virtual WrappedValue::data_type ReourceHTMLWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -439,7 +427,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reource_manifest_wrapper-members.html b/class_reource_manifest_wrapper-members.html index a826e371..edfdb025 100644 --- a/class_reource_manifest_wrapper-members.html +++ b/class_reource_manifest_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,13 +130,13 @@ $(function() { getResContentPtr()ResourceContentWrapper getResContentSize()ResourceContentWrapper getSize()ResourceContentWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceContentWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getType()ResourceContentWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -177,7 +179,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_reource_manifest_wrapper.html b/class_reource_manifest_wrapper.html index ff6bdabc..eccc10b0 100644 --- a/class_reource_manifest_wrapper.html +++ b/class_reource_manifest_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ReourceManifestWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -107,9 +109,9 @@ Collaboration diagram for ReourceManifestWrapper: - + - + @@ -134,7 +136,7 @@ Public Member Functions - + @@ -173,7 +175,7 @@ Public Member Functions - + @@ -216,7 +218,7 @@ Public Member Functions - + @@ -235,12 +237,12 @@ Public Member Functions - - + + - - + + @@ -268,14 +270,14 @@ Public Member Functions

Public Member Functions

virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from ResourceContentWrapper
- Public Member Functions inherited from ResourceContentWrapper
virtual ~ResourceContentWrapper ()
 
void * getResContentPtr ()
 
virtual QString getFieldName (size_t fieldId)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -290,7 +292,7 @@ Protected Member Functions - + @@ -298,30 +300,30 @@ Protected Member Functions

Protected Member Functions

 ReourceManifestWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 ReourceManifestWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 
- Protected Member Functions inherited from ResourceContentWrapper
- Protected Member Functions inherited from ResourceContentWrapper
 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +

Friends

class ResourceContentFactory
class ResourceContentFactory
 
- + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from ResourceContentWrapper
- Static Public Member Functions inherited from ResourceContentWrapper
static QString translateType (pe::resource_type type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Attributes inherited from ResourceContentWrapper
- Protected Attributes inherited from ResourceContentWrapper
ResourceLeafWrapper * myLeaf
 
pe::resource_type typeId
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -341,19 +343,12 @@ Additional Inherited Members ReourceManifestWrapper::ReourceManifestWrapper ( - Executable *  - pe, + Executable * pe, - ResourceLeafWrapper *  - v_leaf  - - - - ) - + ResourceLeafWrapper * v_leaf ) @@ -380,19 +375,12 @@ Additional Inherited Members virtual WrappedValue::data_type ReourceManifestWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -439,7 +427,7 @@ Additional Inherited Members
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_res_string-members.html b/class_res_string-members.html index 7522485f..310bd9fc 100644 --- a/class_res_string-members.html +++ b/class_res_string-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -126,13 +128,13 @@ $(function() { getPtr()ResStringvirtual getQString()ResStringinline getSize()ResStringvirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getStrLen()ResStringinlinevirtual getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResStringinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -176,7 +178,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_res_string.html b/class_res_string.html index 04dbef73..726708c3 100644 --- a/class_res_string.html +++ b/class_res_string.html @@ -3,12 +3,14 @@ - + BearParser: ResString Class Reference + + @@ -30,7 +32,7 @@ - + @@ -102,40 +104,40 @@ Collaboration diagram for ResString: -

Public Types

enum  ResourceFID { NONE = FIELD_NONE -, STR_LEN -, WSTRING -, FIELD_COUNTER +
enum  ResourceFID { NONE = FIELD_NONE +, STR_LEN +, WSTRING +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + - + - + - + @@ -174,7 +176,7 @@ Public Member Functions - + @@ -215,7 +217,7 @@ Public Member Functions - + @@ -234,12 +236,12 @@ Public Member Functions - - + + - - + + @@ -267,19 +269,19 @@ Public Member Functions

Public Member Functions

 ResString (WORD *v_ptr, WORD *v_sizePtr, offset_t v_offset, Executable *v_exe)
 ResString (WORD *v_ptr, WORD *v_sizePtr, offset_t v_offset, Executable *v_exe)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual bufsize_t getFieldSize (size_t fId, size_t subField)
virtual bufsize_t getFieldSize (size_t fId, size_t subField)
 
QString getQString ()
QString getQString ()
 
virtual size_t getStrLen ()
virtual size_t getStrLen ()
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - +

Public Attributes

WORD * ptr
WORD * ptr
 
WORD * sizePtr
WORD * sizePtr
 
offset_t offset
offset_t offset
 
- + - + @@ -294,19 +296,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -321,7 +323,7 @@ Additional Inherited Members
- +
enum ResString::ResourceFIDenum ResString::ResourceFID
@@ -349,31 +351,22 @@ Additional Inherited Members ResString::ResString ( - WORD *  - v_ptr, + WORD * v_ptr, - WORD *  - v_sizePtr, + WORD * v_sizePtr, - offset_t  - v_offset, + offset_t v_offset, - Executable *  - v_exe  - - - - ) - + Executable * v_exe ) @@ -400,19 +393,12 @@ Additional Inherited Members virtual WrappedValue::data_type ResString::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -450,8 +436,7 @@ Here is the call graph for this function:
QString ResString::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -480,19 +465,12 @@ Here is the call graph for this function: void * ResString::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -541,7 +519,7 @@ Here is the call graph for this function: virtual size_t ResString::getFieldsCount ( - ) + ) @@ -570,19 +548,12 @@ Here is the call graph for this function: bufsize_t ResString::getFieldSize ( - size_t  - fId, + size_t fId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -620,7 +591,7 @@ Here is the call graph for this function: QString ResString::getName ( - ) + ) @@ -670,7 +641,7 @@ Here is the call graph for this function: void * ResString::getPtr ( - ) + ) @@ -699,7 +670,7 @@ Here is the call graph for this function: QString ResString::getQString ( - ) + ) @@ -745,7 +716,7 @@ Here is the call graph for this function: bufsize_t ResString::getSize ( - ) + ) @@ -784,7 +755,7 @@ Here is the call graph for this function: virtual size_t ResString::getStrLen ( - ) + ) @@ -821,7 +792,7 @@ Here is the call graph for this function: virtual size_t ResString::getSubFieldsCount ( - ) + ) @@ -894,7 +865,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_content_factory-members.html b/class_resource_content_factory-members.html index a82e94db..bdd33990 100644 --- a/class_resource_content_factory-members.html +++ b/class_resource_content_factory-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -80,7 +82,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_content_factory.html b/class_resource_content_factory.html index cfe133ed..0e0c91a0 100644 --- a/class_resource_content_factory.html +++ b/class_resource_content_factory.html @@ -3,12 +3,14 @@ - + BearParser: ResourceContentFactory Class Reference + + @@ -30,7 +32,7 @@ - + @@ -81,7 +83,7 @@ $(function() { - +

Static Public Member Functions

static ResourceContentWrapper * makeResContentWrapper (pe::resource_type typeId, ResourceLeafWrapper *leaf)
static ResourceContentWrapper * makeResContentWrapper (pe::resource_type typeId, ResourceLeafWrapper *leaf)
 

Detailed Description

@@ -100,19 +102,12 @@ Static Public Member Functions ResourceContentWrapper * ResourceContentFactory::makeResContentWrapper ( - pe::resource_type  - typeId, + pe::resource_type typeId, - ResourceLeafWrapper *  - leaf  - - - - ) - + ResourceLeafWrapper * leaf ) @@ -143,7 +138,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_content_wrapper-members.html b/class_resource_content_wrapper-members.html index a2a2f990..4af31390 100644 --- a/class_resource_content_wrapper-members.html +++ b/class_resource_content_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,13 +130,13 @@ $(function() { getResContentPtr()ResourceContentWrapper getResContentSize()ResourceContentWrapper getSize()ResourceContentWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceContentWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getType()ResourceContentWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -176,7 +178,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_content_wrapper.html b/class_resource_content_wrapper.html index 184a69b4..7b7283eb 100644 --- a/class_resource_content_wrapper.html +++ b/class_resource_content_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceContentWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -107,33 +109,33 @@ Collaboration diagram for ResourceContentWrapper: - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -172,7 +174,7 @@ Public Member Functions - + @@ -215,7 +217,7 @@ Public Member Functions - + @@ -234,12 +236,12 @@ Public Member Functions - - + + - - + + @@ -267,19 +269,19 @@ Public Member Functions

Public Member Functions

virtual ~ResourceContentWrapper ()
virtual ~ResourceContentWrapper ()
 
void * getResContentPtr ()
void * getResContentPtr ()
 
bufsize_t getResContentSize ()
bufsize_t getResContentSize ()
 
offset_t getContentRaw ()
offset_t getContentRaw ()
 
pe::resource_type getType ()
pe::resource_type getType ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Static Public Member Functions

static QString translateType (pe::resource_type type)
static QString translateType (pe::resource_type type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + - + @@ -294,7 +296,7 @@ Protected Member Functions - + @@ -302,24 +304,24 @@ Protected Member Functions

Protected Member Functions

 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - +

Protected Attributes

ResourceLeafWrapper * myLeaf
ResourceLeafWrapper * myLeaf
 
pe::resource_type typeId
pe::resource_type typeId
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class ResourceContentFactory
class ResourceContentFactory
 

Detailed Description

@@ -338,7 +340,7 @@ Friends virtual ResourceContentWrapper::~ResourceContentWrapper ( - ) + ) @@ -365,25 +367,17 @@ Friends ResourceContentWrapper::ResourceContentWrapper ( - Executable *  - pe, + Executable * pe, - ResourceLeafWrapper *  - v_leaf, + ResourceLeafWrapper * v_leaf, - pe::resource_type  - v_typeId  - - - - ) - + pe::resource_type v_typeId ) @@ -410,19 +404,12 @@ Friends virtual WrappedValue::data_type ResourceContentWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -452,25 +439,17 @@ Friends BYTE * ResourceContentWrapper::getContentAt ( - offset_t  - dataAddr, + offset_t dataAddr, - Executable::addr_type  - aT, + Executable::addr_type aT, - bufsize_t  - dataSize  - - - - ) - + bufsize_t dataSize ) @@ -514,7 +493,7 @@ Here is the call graph for this function: offset_t ResourceContentWrapper::getContentRaw ( - ) + ) @@ -587,8 +566,7 @@ Here is the call graph for this function: virtual QString ResourceContentWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -633,19 +611,12 @@ Here is the call graph for this function: virtual void * ResourceContentWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -731,7 +702,7 @@ Here is the call graph for this function: virtual size_t ResourceContentWrapper::getFieldsCount ( - ) + ) @@ -762,7 +733,7 @@ Here is the call graph for this function: virtual QString ResourceContentWrapper::getName ( - ) + ) @@ -805,7 +776,7 @@ Here is the call graph for this function: virtual void * ResourceContentWrapper::getPtr ( - ) + ) @@ -887,7 +858,7 @@ Here is the call graph for this function: void * ResourceContentWrapper::getResContentPtr ( - ) + ) @@ -958,7 +929,7 @@ Here is the call graph for this function: bufsize_t ResourceContentWrapper::getResContentSize ( - ) + ) @@ -1002,7 +973,7 @@ Here is the call graph for this function: virtual bufsize_t ResourceContentWrapper::getSize ( - ) + ) @@ -1057,7 +1028,7 @@ Here is the call graph for this function: virtual size_t ResourceContentWrapper::getSubFieldsCount ( - ) + ) @@ -1088,7 +1059,7 @@ Here is the call graph for this function: pe::resource_type ResourceContentWrapper::getType ( - ) + ) @@ -1115,8 +1086,7 @@ Here is the call graph for this function: QString ResourceContentWrapper::translateType ( - pe::resource_type  - type) + pe::resource_type type) @@ -1222,7 +1192,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_dir_wrapper-members.html b/class_resource_dir_wrapper-members.html index d94ce2b6..8df5b255 100644 --- a/class_resource_dir_wrapper-members.html +++ b/class_resource_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -136,12 +138,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()ResourceDirWrapperinlinevirtual getSize()ResourceDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -191,7 +193,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_dir_wrapper.html b/class_resource_dir_wrapper.html index fa0e8073..57eda8c2 100644 --- a/class_resource_dir_wrapper.html +++ b/class_resource_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,51 +136,51 @@ Collaboration diagram for ResourceDirWrapper: -

Public Types

enum  ResourceDirFID {
-  NONE = FIELD_NONE -, CHARACTERISTIC -, TIMESTAMP -, MAJOR_VER +
enum  ResourceDirFID {
+  NONE = FIELD_NONE +, CHARACTERISTIC +, TIMESTAMP +, MAJOR_VER ,
-  MINOR_VER -, NAMED_ENTRIES_NUM -, ID_ENTRIES_NUM -, FIELD_COUNTER +  MINOR_VER +, NAMED_ENTRIES_NUM +, ID_ENTRIES_NUM +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -187,7 +189,7 @@ Public Member Functions - + @@ -198,7 +200,7 @@ Public Member Functions - + @@ -233,7 +235,7 @@ Public Member Functions - + @@ -276,7 +278,7 @@ Public Member Functions - + @@ -295,12 +297,12 @@ Public Member Functions - - + + - - + + @@ -328,13 +330,13 @@ Public Member Functions

Public Member Functions

 ResourceDirWrapper (PEFile *pe, ResourcesAlbum *resAlbum=NULL, offset_t rawOffset=0, long depth=0, long topEntryId=TOP_ENTRY_ROOT)
 ResourceDirWrapper (PEFile *pe, ResourcesAlbum *resAlbum=NULL, offset_t rawOffset=0, long depth=0, long topEntryId=TOP_ENTRY_ROOT)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
bufsize_t getEntriesAreaSize ()
bufsize_t getEntriesAreaSize ()
 
long getDepth ()
long getDepth ()
 
IMAGE_RESOURCE_DIRECTORY * mainResourceDir ()
IMAGE_RESOURCE_DIRECTORY * mainResourceDir ()
 
ResourcesAlbum * getAlbumPtr ()
ResourcesAlbum * getAlbumPtr ()
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -349,27 +351,27 @@ Additional Inherited Members - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -384,7 +386,7 @@ Additional Inherited Members
- +
enum ResourceDirWrapper::ResourceDirFIDenum ResourceDirWrapper::ResourceDirFID
@@ -416,37 +418,27 @@ Additional Inherited Members ResourceDirWrapper::ResourceDirWrapper ( - PEFile *  - pe, + PEFile * pe, - ResourcesAlbum *  - resAlbum = NULL, + ResourcesAlbum * resAlbum = NULL, - offset_t  - rawOffset = 0, + offset_t rawOffset = 0, - long  - depth = 0, + long depth = 0, - long  - topEntryId = TOP_ENTRY_ROOT  - - - - ) - + long topEntryId = TOP_ENTRY_ROOT ) @@ -500,7 +492,7 @@ Here is the call graph for this function:
ResourcesAlbum * ResourceDirWrapper::getAlbumPtr ( - ) + ) @@ -527,7 +519,7 @@ Here is the call graph for this function: long ResourceDirWrapper::getDepth ( - ) + ) @@ -554,7 +546,7 @@ Here is the call graph for this function: bufsize_t ResourceDirWrapper::getEntriesAreaSize ( - ) + ) @@ -594,8 +586,7 @@ Here is the call graph for this function: QString ResourceDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -639,19 +630,12 @@ Here is the call graph for this function: void * ResourceDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -691,7 +675,7 @@ Here is the call graph for this function: virtual size_t ResourceDirWrapper::getFieldsCount ( - ) + ) @@ -720,19 +704,12 @@ Here is the call graph for this function: bufsize_t ResourceDirWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -781,7 +758,7 @@ Here is the call graph for this function: virtual QString ResourceDirWrapper::getName ( - ) + ) @@ -810,7 +787,7 @@ Here is the call graph for this function: virtual void * ResourceDirWrapper::getPtr ( - ) + ) @@ -839,7 +816,7 @@ Here is the call graph for this function: bufsize_t ResourceDirWrapper::getSize ( - ) + ) @@ -886,7 +863,7 @@ Here is the call graph for this function: virtual size_t ResourceDirWrapper::getSubFieldsCount ( - ) + ) @@ -912,7 +889,7 @@ Here is the call graph for this function: IMAGE_RESOURCE_DIRECTORY * ResourceDirWrapper::mainResourceDir ( - ) + ) @@ -996,7 +973,7 @@ Here is the call graph for this function: bool ResourceDirWrapper::wrap ( - ) + ) @@ -1045,7 +1022,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_entry_wrapper-members.html b/class_resource_entry_wrapper-members.html index cb3bc61a..c71a6424 100644 --- a/class_resource_entry_wrapper-members.html +++ b/class_resource_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -134,13 +136,13 @@ $(function() { getPE()PENodeWrapperinline getPtr()ResourceEntryWrapperinlinevirtual getSize()ResourceEntryWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getTopEntryID()ResourceEntryWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -189,7 +191,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_entry_wrapper.html b/class_resource_entry_wrapper.html index 3f8aa184..f9d8194b 100644 --- a/class_resource_entry_wrapper.html +++ b/class_resource_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -136,58 +138,58 @@ Collaboration diagram for ResourceEntryWrapper: -

Public Types

enum  FieldID { NONE = FIELD_NONE -, NAME_ID_ADDR -, OFFSET_TO_DATA -, FIELD_COUNTER +
enum  FieldID { NONE = FIELD_NONE +, NAME_ID_ADDR +, OFFSET_TO_DATA +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -198,7 +200,7 @@ Public Member Functions - + @@ -233,7 +235,7 @@ Public Member Functions - + @@ -276,7 +278,7 @@ Public Member Functions - + @@ -295,12 +297,12 @@ Public Member Functions - - + + - - + + @@ -328,17 +330,17 @@ Public Member Functions

Public Member Functions

 ResourceEntryWrapper (PEFile *pe, ResourceDirWrapper *parentDir, size_t entryNumber, long topEntryId, ResourcesAlbum *resAlbum)
 ResourceEntryWrapper (PEFile *pe, ResourceDirWrapper *parentDir, size_t entryNumber, long topEntryId, ResourcesAlbum *resAlbum)
 
virtual ~ResourceEntryWrapper ()
virtual ~ResourceEntryWrapper ()
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
bool isByName ()
bool isByName ()
 
bool isDir ()
bool isDir ()
 
WORD getID ()
WORD getID ()
 
offset_t getChildOffsetToDirectory ()
offset_t getChildOffsetToDirectory ()
 
offset_t getNameOffset ()
offset_t getNameOffset ()
 
IMAGE_RESOURCE_DIRECTORY_STRING * getNameStr ()
IMAGE_RESOURCE_DIRECTORY_STRING * getNameStr ()
 
offset_t getChildAddress ()
offset_t getChildAddress ()
 
IMAGE_RESOURCE_DIRECTORY_ENTRY * getEntryPtr ()
IMAGE_RESOURCE_DIRECTORY_ENTRY * getEntryPtr ()
 
ResourcesAlbum * getAlbumPtr ()
ResourcesAlbum * getAlbumPtr ()
 
long getTopEntryID ()
long getTopEntryID ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Static Public Member Functions

static QString translateType (WORD id)
static QString translateType (WORD id)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- + - + @@ -351,7 +353,7 @@ Protected Member Functions - + @@ -359,19 +361,19 @@ Protected Member Functions

Protected Member Functions

virtual void clear ()
virtual void clear ()
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - +

Additional Inherited Members

- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -386,7 +388,7 @@ Additional Inherited Members
- +
enum ResourceEntryWrapper::FieldIDenum ResourceEntryWrapper::FieldID
@@ -414,37 +416,27 @@ Additional Inherited Members ResourceEntryWrapper::ResourceEntryWrapper ( - PEFile *  - pe, + PEFile * pe, - ResourceDirWrapper *  - parentDir, + ResourceDirWrapper * parentDir, - size_t  - entryNumber, + size_t entryNumber, - long  - topEntryId, + long topEntryId, - ResourcesAlbum *  - resAlbum  - - - - ) - + ResourcesAlbum * resAlbum ) @@ -565,7 +557,7 @@ Here is the call graph for this function:
virtual ResourceEntryWrapper::~ResourceEntryWrapper ( - ) + ) @@ -605,7 +597,7 @@ Here is the call graph for this function: void ResourceEntryWrapper::clear ( - ) + ) @@ -644,19 +636,12 @@ Here is the call graph for this function: virtual Executable::addr_type ResourceEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -684,7 +669,7 @@ Here is the call graph for this function: ResourcesAlbum * ResourceEntryWrapper::getAlbumPtr ( - ) + ) @@ -708,7 +693,7 @@ Here is the call graph for this function: offset_t ResourceEntryWrapper::getChildAddress ( - ) + ) @@ -805,7 +790,7 @@ Here is the call graph for this function: offset_t ResourceEntryWrapper::getChildOffsetToDirectory ( - ) + ) @@ -869,7 +854,7 @@ Here is the call graph for this function: IMAGE_RESOURCE_DIRECTORY_ENTRY * ResourceEntryWrapper::getEntryPtr ( - ) + ) @@ -933,8 +918,7 @@ Here is the call graph for this function: QString ResourceEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -1020,19 +1004,12 @@ Here is the call graph for this function: void * ResourceEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -1108,7 +1085,7 @@ Here is the call graph for this function: virtual size_t ResourceEntryWrapper::getFieldsCount ( - ) + ) @@ -1134,7 +1111,7 @@ Here is the call graph for this function: WORD ResourceEntryWrapper::getID ( - ) + ) @@ -1205,7 +1182,7 @@ Here is the call graph for this function: virtual QString ResourceEntryWrapper::getName ( - ) + ) @@ -1284,7 +1261,7 @@ Here is the call graph for this function: offset_t ResourceEntryWrapper::getNameOffset ( - ) + ) @@ -1351,7 +1328,7 @@ Here is the call graph for this function: IMAGE_RESOURCE_DIRECTORY_STRING * ResourceEntryWrapper::getNameStr ( - ) + ) @@ -1425,7 +1402,7 @@ Here is the call graph for this function: virtual void * ResourceEntryWrapper::getPtr ( - ) + ) @@ -1498,7 +1475,7 @@ Here is the call graph for this function: virtual bufsize_t ResourceEntryWrapper::getSize ( - ) + ) @@ -1537,7 +1514,7 @@ Here is the call graph for this function: virtual size_t ResourceEntryWrapper::getSubFieldsCount ( - ) + ) @@ -1566,7 +1543,7 @@ Here is the call graph for this function: long ResourceEntryWrapper::getTopEntryID ( - ) + ) @@ -1590,7 +1567,7 @@ Here is the call graph for this function: bool ResourceEntryWrapper::isByName ( - ) + ) @@ -1654,7 +1631,7 @@ Here is the call graph for this function: bool ResourceEntryWrapper::isDir ( - ) + ) @@ -1721,8 +1698,7 @@ Here is the call graph for this function: QString ResourceEntryWrapper::translateType ( - WORD  - id) + WORD id) @@ -1749,7 +1725,7 @@ Here is the call graph for this function: bool ResourceEntryWrapper::wrap ( - ) + ) @@ -1866,7 +1842,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_leaf_wrapper-members.html b/class_resource_leaf_wrapper-members.html index a61afd63..0c7a0b66 100644 --- a/class_resource_leaf_wrapper-members.html +++ b/class_resource_leaf_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -128,12 +130,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()ResourceLeafWrapperinlinevirtual getSize()ResourceLeafWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -177,7 +179,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_leaf_wrapper.html b/class_resource_leaf_wrapper.html index e9254ceb..6b83b822 100644 --- a/class_resource_leaf_wrapper.html +++ b/class_resource_leaf_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceLeafWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -102,43 +104,43 @@ Collaboration diagram for ResourceLeafWrapper: -

Public Types

enum  FieldID {
-  NONE = FIELD_NONE -, OFFSET_TO_DATA -, DATA_SIZE -, CODE_PAGE +
enum  FieldID {
+  NONE = FIELD_NONE +, OFFSET_TO_DATA +, DATA_SIZE +, CODE_PAGE ,
-  RESERVED -, FIELD_COUNTER +  RESERVED +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + @@ -179,7 +181,7 @@ Public Member Functions - + @@ -222,7 +224,7 @@ Public Member Functions - + @@ -241,12 +243,12 @@ Public Member Functions - - + + - - + + @@ -274,27 +276,27 @@ Public Member Functions

Public Member Functions

 ResourceLeafWrapper (Executable *pe, offset_t rawOffset, long topEntryId)
 ResourceLeafWrapper (Executable *pe, offset_t rawOffset, long topEntryId)
 
virtual ~ResourceLeafWrapper ()
virtual ~ResourceLeafWrapper ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr ()
IMAGE_RESOURCE_DATA_ENTRY * leafEntryPtr ()
 
Executable * getExe ()
Executable * getExe ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - +

Protected Attributes

offset_t offset
offset_t offset
 
long topEntryID
long topEntryID
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- + - + @@ -309,7 +311,7 @@ Additional Inherited Members - + @@ -326,7 +328,7 @@ Additional Inherited Members

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +
enum ResourceLeafWrapper::FieldIDenum ResourceLeafWrapper::FieldID
@@ -356,25 +358,17 @@ Additional Inherited Members ResourceLeafWrapper::ResourceLeafWrapper ( - Executable *  - pe, + Executable * pe, - offset_t  - rawOffset, + offset_t rawOffset, - long  - topEntryId  - - - - ) - + long topEntryId ) @@ -400,7 +394,7 @@ Additional Inherited Members virtual ResourceLeafWrapper::~ResourceLeafWrapper ( - ) + ) @@ -428,19 +422,12 @@ Additional Inherited Members virtual Executable::addr_type ResourceLeafWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -478,7 +465,7 @@ Here is the call graph for this function:
Executable * ResourceLeafWrapper::getExe ( - ) + ) @@ -505,8 +492,7 @@ Here is the call graph for this function: QString ResourceLeafWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -545,19 +531,12 @@ Here is the call graph for this function: void * ResourceLeafWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -607,7 +586,7 @@ Here is the call graph for this function: virtual size_t ResourceLeafWrapper::getFieldsCount ( - ) + ) @@ -636,7 +615,7 @@ Here is the call graph for this function: virtual QString ResourceLeafWrapper::getName ( - ) + ) @@ -665,7 +644,7 @@ Here is the call graph for this function: virtual void * ResourceLeafWrapper::getPtr ( - ) + ) @@ -715,7 +694,7 @@ Here is the call graph for this function: virtual bufsize_t ResourceLeafWrapper::getSize ( - ) + ) @@ -751,7 +730,7 @@ Here is the call graph for this function: IMAGE_RESOURCE_DATA_ENTRY * ResourceLeafWrapper::leafEntryPtr ( - ) + ) @@ -836,7 +815,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_strings_wrapper-members.html b/class_resource_strings_wrapper-members.html index 8fa7b5c5..2c729a10 100644 --- a/class_resource_strings_wrapper-members.html +++ b/class_resource_strings_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -132,13 +134,13 @@ $(function() { getResStringAt(size_t index)ResourceStringsWrapperinline getResStringsCount()ResourceStringsWrapperinline getSize()ResourceContentWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceContentWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getType()ResourceContentWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -187,7 +189,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_strings_wrapper.html b/class_resource_strings_wrapper.html index c04c25aa..17d53b68 100644 --- a/class_resource_strings_wrapper.html +++ b/class_resource_strings_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceStringsWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -109,32 +111,32 @@ Collaboration diagram for ResourceStringsWrapper: -

Public Types

enum  ResourceFID { NONE = FIELD_NONE -, STR_LEN -, WSTRING -, FIELD_COUNTER +
enum  ResourceFID { NONE = FIELD_NONE +, STR_LEN +, WSTRING +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + @@ -153,7 +155,7 @@ Public Member Functions - + @@ -190,7 +192,7 @@ Public Member Functions - + @@ -231,7 +233,7 @@ Public Member Functions - + @@ -250,12 +252,12 @@ Public Member Functions - - + + - - + + @@ -283,16 +285,16 @@ Public Member Functions

Public Member Functions

virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
ResString * getResStringAt (size_t index)
ResString * getResStringAt (size_t index)
 
QString getQStringAt (size_t index)
QString getQStringAt (size_t index)
 
size_t getResStringsCount ()
size_t getResStringsCount ()
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from ResourceContentWrapper
- Public Member Functions inherited from ResourceContentWrapper
virtual ~ResourceContentWrapper ()
 
void * getResContentPtr ()
 
virtual size_t getSubFieldsCount ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + @@ -307,7 +309,7 @@ Protected Member Functions - + @@ -315,37 +317,37 @@ Protected Member Functions

Protected Member Functions

 ResourceStringsWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 ResourceStringsWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 
bool wrap ()
bool wrap ()
 
- Protected Member Functions inherited from ResourceContentWrapper
- Protected Member Functions inherited from ResourceContentWrapper
 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - +

Protected Attributes

size_t parsedSize
size_t parsedSize
 
- Protected Attributes inherited from ResourceContentWrapper
- Protected Attributes inherited from ResourceContentWrapper
ResourceLeafWrapper * myLeaf
 
pe::resource_type typeId
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- + - +

Friends

class ResourceContentFactory
class ResourceContentFactory
 
class ResourcesAlbum
class ResourcesAlbum
 
- + - +

Additional Inherited Members

- Static Public Member Functions inherited from ResourceContentWrapper
- Static Public Member Functions inherited from ResourceContentWrapper
static QString translateType (pe::resource_type type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -360,7 +362,7 @@ Additional Inherited Members
- +
enum ResourceStringsWrapper::ResourceFIDenum ResourceStringsWrapper::ResourceFID
@@ -388,19 +390,12 @@ Additional Inherited Members ResourceStringsWrapper::ResourceStringsWrapper ( - Executable *  - pe, + Executable * pe, - ResourceLeafWrapper *  - v_leaf  - - - - ) - + ResourceLeafWrapper * v_leaf ) @@ -509,19 +504,12 @@ Here is the call graph for this function:
virtual WrappedValue::data_type ResourceStringsWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -559,8 +547,7 @@ Here is the call graph for this function: QString ResourceStringsWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -589,19 +576,12 @@ Here is the call graph for this function: void * ResourceStringsWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -639,7 +619,7 @@ Here is the call graph for this function: virtual size_t ResourceStringsWrapper::getFieldsCount ( - ) + ) @@ -668,19 +648,12 @@ Here is the call graph for this function: bufsize_t ResourceStringsWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -718,8 +691,7 @@ Here is the call graph for this function: QString ResourceStringsWrapper::getQStringAt ( - size_t  - index) + size_t index) @@ -759,8 +731,7 @@ Here is the call graph for this function: ResString * ResourceStringsWrapper::getResStringAt ( - size_t  - index) + size_t index) @@ -797,7 +768,7 @@ Here is the call graph for this function: size_t ResourceStringsWrapper::getResStringsCount ( - ) + ) @@ -824,7 +795,7 @@ Here is the call graph for this function: bool ResourceStringsWrapper::wrap ( - ) + ) @@ -1002,7 +973,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_version_wrapper-members.html b/class_resource_version_wrapper-members.html index b536220f..49bcf510 100644 --- a/class_resource_version_wrapper-members.html +++ b/class_resource_version_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -134,7 +136,7 @@ $(function() { getResContentPtr()ResourceContentWrapper getResContentSize()ResourceContentWrapper getSize()ResourceVersionWrapperinlinevirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ResourceVersionWrapperinlinevirtual @@ -142,7 +144,7 @@ $(function() { getType()ResourceContentWrapperinline getVersionInfo()ResourceVersionWrapper getVersionText()ResourceVersionWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -200,7 +202,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resource_version_wrapper.html b/class_resource_version_wrapper.html index 3e9cd558..4d4e61aa 100644 --- a/class_resource_version_wrapper.html +++ b/class_resource_version_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: ResourceVersionWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -107,60 +109,60 @@ Collaboration diagram for ResourceVersionWrapper: -

Public Types

enum  ResourceFID {
-  NONE = FIELD_NONE -, STRUCT_LEN -, VAL_LEN -, STRUCT_TYPE +
enum  ResourceFID {
+  NONE = FIELD_NONE +, STRUCT_LEN +, VAL_LEN +, STRUCT_TYPE ,
-  INFO -, SIGNATURE -, STRUCT_VER -, FILE_VER_0 +  INFO +, SIGNATURE +, STRUCT_VER +, FILE_VER_0 ,
-  FILE_VER_1 -, PRODUCT_VER_0 -, PRODUCT_VER_1 -, FLAGS_MASK +  FILE_VER_1 +, PRODUCT_VER_0 +, PRODUCT_VER_1 +, FLAGS_MASK ,
-  FLAGS -, OS -, TYPE -, SUBTYPE +  FLAGS +, OS +, TYPE +, SUBTYPE ,
-  TIMESTAMP_0 -, TIMESTAMP_1 -, CHILDREN -, FIELD_COUNTER +  TIMESTAMP_0 +, TIMESTAMP_1 +, CHILDREN +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + @@ -171,7 +173,7 @@ Public Member Functions - + @@ -210,7 +212,7 @@ Public Member Functions - + @@ -253,7 +255,7 @@ Public Member Functions - + @@ -272,12 +274,12 @@ Public Member Functions - - + + - - + + @@ -305,23 +307,23 @@ Public Member Functions

Public Member Functions

 ResourceVersionWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 ResourceVersionWrapper (Executable *pe, ResourceLeafWrapper *v_leaf)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
pe::version_info * getVersionInfo ()
pe::version_info * getVersionInfo ()
 
QString getVersionText ()
QString getVersionText ()
 
- Public Member Functions inherited from ResourceContentWrapper
- Public Member Functions inherited from ResourceContentWrapper
virtual ~ResourceContentWrapper ()
 
void * getResContentPtr ()
 
pe::resource_type getType ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- +

Friends

class ResourceContentFactory
class ResourceContentFactory
 
- + - + - + - + @@ -336,24 +338,24 @@ Additional Inherited Members - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from ResourceContentWrapper
- Static Public Member Functions inherited from ResourceContentWrapper
static QString translateType (pe::resource_type type)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ResourceContentWrapper
- Protected Member Functions inherited from ResourceContentWrapper
 ResourceContentWrapper (Executable *pe, ResourceLeafWrapper *v_leaf, pe::resource_type v_typeId)
 
BYTE * getContentAt (offset_t dataAddr, Executable::addr_type aT, bufsize_t dataSize)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ResourceContentWrapper
- Protected Attributes inherited from ResourceContentWrapper
ResourceLeafWrapper * myLeaf
 
pe::resource_type typeId
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -368,7 +370,7 @@ Additional Inherited Members
- +
enum ResourceVersionWrapper::ResourceFIDenum ResourceVersionWrapper::ResourceFID
@@ -409,19 +411,12 @@ Additional Inherited Members ResourceVersionWrapper::ResourceVersionWrapper ( - Executable *  - pe, + Executable * pe, - ResourceLeafWrapper *  - v_leaf  - - - - ) - + ResourceLeafWrapper * v_leaf )
@@ -444,19 +439,12 @@ Additional Inherited Members WrappedValue::data_type ResourceVersionWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -494,8 +482,7 @@ Here is the call graph for this function:
QString ResourceVersionWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -534,19 +521,12 @@ Here is the call graph for this function: void * ResourceVersionWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -636,7 +616,7 @@ Here is the call graph for this function: virtual size_t ResourceVersionWrapper::getFieldsCount ( - ) + ) @@ -665,7 +645,7 @@ Here is the call graph for this function: virtual QString ResourceVersionWrapper::getName ( - ) + ) @@ -694,7 +674,7 @@ Here is the call graph for this function: virtual void * ResourceVersionWrapper::getPtr ( - ) + ) @@ -784,7 +764,7 @@ Here is the call graph for this function: virtual bufsize_t ResourceVersionWrapper::getSize ( - ) + ) @@ -875,7 +855,7 @@ Here is the call graph for this function: virtual size_t ResourceVersionWrapper::getSubFieldsCount ( - ) + ) @@ -901,7 +881,7 @@ Here is the call graph for this function: pe::version_info * ResourceVersionWrapper::getVersionInfo ( - ) + ) @@ -982,7 +962,7 @@ Here is the call graph for this function: QString ResourceVersionWrapper::getVersionText ( - ) + ) @@ -1091,7 +1071,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resources_album-members.html b/class_resources_album-members.html index 7d547422..89643594 100644 --- a/class_resources_album-members.html +++ b/class_resources_album-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -100,7 +102,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resources_album.html b/class_resources_album.html index 19679901..30f42a37 100644 --- a/class_resources_album.html +++ b/class_resources_album.html @@ -3,12 +3,14 @@ - + BearParser: ResourcesAlbum Class Reference + + @@ -30,7 +32,7 @@ - + @@ -83,53 +85,53 @@ $(function() { - + - + - + - + - + - + - + - + - + - + - + - + - +

Public Member Functions

 ResourcesAlbum (Executable *pe)
 ResourcesAlbum (Executable *pe)
 
virtual ~ResourcesAlbum ()
virtual ~ResourcesAlbum ()
 
void putLeaf (ResourceLeafWrapper *leaf, long topEntryId)
void putLeaf (ResourceLeafWrapper *leaf, long topEntryId)
 
void clear ()
void clear ()
 
size_t dirsCount ()
size_t dirsCount ()
 
size_t entriesCountAt (long topEntryId)
size_t entriesCountAt (long topEntryId)
 
std::vector< ResourceLeafWrapper * > * entriesAt (long topEntryId)
std::vector< ResourceLeafWrapper * > * entriesAt (long topEntryId)
 
void mapIdToLeafType (long topId, pe::resource_type leafType)
void mapIdToLeafType (long topId, pe::resource_type leafType)
 
void wrapLeafsContent ()
void wrapLeafsContent ()
 
ResourceContentWrapper * getContentWrapper (ResourceLeafWrapper *leaf)
ResourceContentWrapper * getContentWrapper (ResourceLeafWrapper *leaf)
 
bool hasType (pe::resource_type typeId)
bool hasType (pe::resource_type typeId)
 
ResourcesContainer * getResourcesOfType (pe::resource_type typeId)
ResourcesContainer * getResourcesOfType (pe::resource_type typeId)
 
std::vector< pe::resource_type > getResourceTypes () const
std::vector< pe::resource_type > getResourceTypes () const
 
- + - + - +

Protected Member Functions

void clearLeafsContent ()
void clearLeafsContent ()
 
void initResourceTypes ()
void initResourceTypes ()
 
bool hasTopEntry (long topEntryId)
bool hasTopEntry (long topEntryId)
 
- + - + - + - + - +

Protected Attributes

std::vector< pe::resource_type > allTypes
std::vector< pe::resource_type > allTypes
 
std::map< pe::resource_type, ResourcesContainer > allWrappers
std::map< pe::resource_type, ResourcesContainer > allWrappers
 
std::map< long, std::vector< ResourceLeafWrapper * > > allLeafs
std::map< long, std::vector< ResourceLeafWrapper * > > allLeafs
 
std::map< long, pe::resource_type > idToLeafType
std::map< long, pe::resource_type > idToLeafType
 
std::map< ResourceLeafWrapper *, ResourceContentWrapper * > leafToContentWrapper
std::map< ResourceLeafWrapper *, ResourceContentWrapper * > leafToContentWrapper
 

Detailed Description

@@ -148,8 +150,7 @@ Protected Attributes ResourcesAlbum::ResourcesAlbum ( - Executable *  - pe) + Executable * pe) @@ -176,7 +177,7 @@ Protected Attributes virtual ResourcesAlbum::~ResourcesAlbum ( - ) + ) @@ -221,7 +222,7 @@ Here is the call graph for this function: void ResourcesAlbum::clear ( - ) + ) @@ -261,7 +262,7 @@ Here is the call graph for this function: void ResourcesAlbum::clearLeafsContent ( - ) + ) @@ -302,7 +303,7 @@ Here is the call graph for this function: size_t ResourcesAlbum::dirsCount ( - ) + ) @@ -326,8 +327,7 @@ Here is the call graph for this function: std::vector< ResourceLeafWrapper * > * ResourcesAlbum::entriesAt ( - long  - topEntryId) + long topEntryId) @@ -359,8 +359,7 @@ Here is the call graph for this function: size_t ResourcesAlbum::entriesCountAt ( - long  - topEntryId) + long topEntryId) @@ -395,8 +394,7 @@ Here is the call graph for this function: ResourceContentWrapper * ResourcesAlbum::getContentWrapper ( - ResourceLeafWrapper *  - leaf) + ResourceLeafWrapper * leaf) @@ -430,8 +428,7 @@ Here is the call graph for this function: ResourcesContainer * ResourcesAlbum::getResourcesOfType ( - pe::resource_type  - typeId) + pe::resource_type typeId) @@ -466,7 +463,7 @@ Here is the call graph for this function: std::vector< pe::resource_type > ResourcesAlbum::getResourceTypes ( - ) + ) const @@ -493,8 +490,7 @@ Here is the call graph for this function: bool ResourcesAlbum::hasTopEntry ( - long  - topEntryId) + long topEntryId) @@ -531,8 +527,7 @@ Here is the call graph for this function: bool ResourcesAlbum::hasType ( - pe::resource_type  - typeId) + pe::resource_type typeId) @@ -569,7 +564,7 @@ Here is the call graph for this function: void ResourcesAlbum::initResourceTypes ( - ) + ) @@ -606,19 +601,12 @@ Here is the call graph for this function: void ResourcesAlbum::mapIdToLeafType ( - long  - topId, + long topId, - pe::resource_type  - leafType  - - - - ) - + pe::resource_type leafType ) @@ -651,19 +639,12 @@ Here is the call graph for this function: void ResourcesAlbum::putLeaf ( - ResourceLeafWrapper *  - leaf, + ResourceLeafWrapper * leaf, - long  - topEntryId  - - - - ) - + long topEntryId )
@@ -691,7 +672,7 @@ Here is the call graph for this function:
void ResourcesAlbum::wrapLeafsContent ( - ) + ) @@ -845,7 +826,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resources_container-members.html b/class_resources_container-members.html index 2d055cc7..fdd4c267 100644 --- a/class_resources_container-members.html +++ b/class_resources_container-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -86,7 +88,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_resources_container.html b/class_resources_container.html index 50a98dd4..ba569408 100644 --- a/class_resources_container.html +++ b/class_resources_container.html @@ -3,12 +3,14 @@ - + BearParser: ResourcesContainer Class Reference + + @@ -30,7 +32,7 @@ - + @@ -82,22 +84,22 @@ $(function() { - + - + - + - + - + - +

Public Member Functions

 ResourcesContainer ()
 ResourcesContainer ()
 
virtual ~ResourcesContainer ()
virtual ~ResourcesContainer ()
 
void putWrapper (ResourceContentWrapper *wrapper)
void putWrapper (ResourceContentWrapper *wrapper)
 
ResourceContentWrapper * getWrapperAt (size_t index)
ResourceContentWrapper * getWrapperAt (size_t index)
 
size_t count ()
size_t count ()
 
size_t entriesCount ()
size_t entriesCount ()
 
- +

Protected Attributes

std::vector< ResourceContentWrapper * > wrappers
std::vector< ResourceContentWrapper * > wrappers
 

Detailed Description

@@ -116,7 +118,7 @@ Protected Attributes ResourcesContainer::ResourcesContainer ( - ) + ) @@ -143,7 +145,7 @@ Protected Attributes virtual ResourcesContainer::~ResourcesContainer ( - ) + ) @@ -171,7 +173,7 @@ Protected Attributes size_t ResourcesContainer::count ( - ) + ) @@ -195,7 +197,7 @@ Protected Attributes size_t ResourcesContainer::entriesCount ( - ) + ) @@ -229,8 +231,7 @@ Here is the call graph for this function: ResourceContentWrapper * ResourcesContainer::getWrapperAt ( - size_t  - index) + size_t index) @@ -259,8 +260,7 @@ Here is the call graph for this function: void ResourcesContainer::putWrapper ( - ResourceContentWrapper *  - wrapper) + ResourceContentWrapper * wrapper) @@ -312,7 +312,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_rich_hdr_wrapper-members.html b/class_rich_hdr_wrapper-members.html index 7568de77..0aa92341 100644 --- a/class_rich_hdr_wrapper-members.html +++ b/class_rich_hdr_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -120,9 +122,9 @@ $(function() { getPE()PEElementWrapperinline getPtr()RichHdrWrappervirtual getSize()RichHdrWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubFieldsCount()ExeElementWrapperinlinevirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -159,7 +161,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_rich_hdr_wrapper.html b/class_rich_hdr_wrapper.html index ff299a83..39317104 100644 --- a/class_rich_hdr_wrapper.html +++ b/class_rich_hdr_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: RichHdrWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -135,60 +137,60 @@ Collaboration diagram for RichHdrWrapper: -

Public Types

enum  FieldID {
-  NONE = -1 -, DANS_ID = 0 -, CPAD0 -, CPAD1 +
enum  FieldID {
+  NONE = -1 +, DANS_ID = 0 +, CPAD0 +, CPAD1 ,
-  CPAD2 -, COMP_ID_1 -, RICH_ID -, CHECKSUM +  CPAD2 +, COMP_ID_1 +, RICH_ID +, CHECKSUM ,
-  FIELD_COUNTER +  FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -231,7 +233,7 @@ Public Member Functions - + @@ -250,12 +252,12 @@ Public Member Functions - - + + - - + + @@ -283,25 +285,25 @@ Public Member Functions

Public Member Functions

 RichHdrWrapper (PEFile *pe)
 RichHdrWrapper (PEFile *pe)
 
size_t compIdCount ()
size_t compIdCount ()
 
virtual bool wrap ()
virtual bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (uint32_t fieldId, uint32_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (uint32_t fieldId, uint32_t subField=FIELD_NONE)
 
pe::RICH_COMP_ID getCompId (size_t fieldId)
pe::RICH_COMP_ID getCompId (size_t fieldId)
 
DWORD calcChecksum ()
DWORD calcChecksum ()
 
- Public Member Functions inherited from PEElementWrapper
- Public Member Functions inherited from PEElementWrapper
 PEElementWrapper (PEFile *pe)
 
virtual ~PEElementWrapper ()
 
PEFile * getPE ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - +

Protected Attributes

pe::RICH_SIGNATURE * richSign
pe::RICH_SIGNATURE * richSign
 
pe::RICH_DANS_HEADER * dansHdr
pe::RICH_DANS_HEADER * dansHdr
 
size_t compIdCounter
size_t compIdCounter
 
- Protected Attributes inherited from PEElementWrapper
- Protected Attributes inherited from PEElementWrapper
PEFile * m_PE
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- + - + @@ -318,7 +320,7 @@ Additional Inherited Members

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- +
enum RichHdrWrapper::FieldIDenum RichHdrWrapper::FieldID
@@ -351,8 +353,7 @@ Additional Inherited Members RichHdrWrapper::RichHdrWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -411,7 +412,7 @@ Here is the call graph for this function:
DWORD RichHdrWrapper::calcChecksum ( - ) + ) @@ -488,7 +489,7 @@ Here is the call graph for this function: size_t RichHdrWrapper::compIdCount ( - ) + ) @@ -520,19 +521,12 @@ Here is the call graph for this function: Executable::addr_type RichHdrWrapper::containsAddrType ( - uint32_t  - fieldId, + uint32_t fieldId, - uint32_t  - subField = FIELD_NONE  - - - - ) - + uint32_t subField = FIELD_NONE ) @@ -555,8 +549,7 @@ Here is the call graph for this function: pe::RICH_COMP_ID RichHdrWrapper::getCompId ( - size_t  - fieldId) + size_t fieldId) @@ -620,8 +613,7 @@ Here is the call graph for this function: QString RichHdrWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -660,19 +652,12 @@ Here is the call graph for this function: void * RichHdrWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -710,7 +695,7 @@ Here is the call graph for this function: size_t RichHdrWrapper::getFieldsCount ( - ) + ) @@ -757,19 +742,12 @@ Here is the call graph for this function: bufsize_t RichHdrWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -807,7 +785,7 @@ Here is the call graph for this function: virtual QString RichHdrWrapper::getName ( - ) + ) @@ -836,7 +814,7 @@ Here is the call graph for this function: void * RichHdrWrapper::getPtr ( - ) + ) @@ -899,7 +877,7 @@ Here is the call graph for this function: bufsize_t RichHdrWrapper::getSize ( - ) + ) @@ -944,8 +922,7 @@ Here is the call graph for this function: QString RichHdrWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -1036,7 +1013,7 @@ Here is the call graph for this function: bool RichHdrWrapper::wrap ( - ) + ) @@ -1165,7 +1142,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_sect_hdrs_wrapper-members.html b/class_sect_hdrs_wrapper-members.html index 5ae97e3b..d82914c5 100644 --- a/class_sect_hdrs_wrapper-members.html +++ b/class_sect_hdrs_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -129,12 +131,12 @@ $(function() { getSecHdrAtOffset(offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)SectHdrsWrapper getSecIndex(SectionHdrWrapper *sec) constSectHdrsWrapperinline getSize()SectHdrsWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()ExeNodeWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -181,7 +183,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_sect_hdrs_wrapper.html b/class_sect_hdrs_wrapper.html index d4ce7f54..8d184bef 100644 --- a/class_sect_hdrs_wrapper.html +++ b/class_sect_hdrs_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: SectHdrsWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,39 +136,39 @@ Collaboration diagram for SectHdrsWrapper: - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -177,7 +179,7 @@ Public Member Functions - + @@ -208,7 +210,7 @@ Public Member Functions - + @@ -251,7 +253,7 @@ Public Member Functions - + @@ -270,12 +272,12 @@ Public Member Functions - - + + - - + + @@ -303,22 +305,22 @@ Public Member Functions

Public Member Functions

 SectHdrsWrapper (PEFile *pe)
 SectHdrsWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void reloadMapping ()
virtual void reloadMapping ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
SectionHdrWrapper * getSecHdrAtOffset (offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
SectionHdrWrapper * getSecHdrAtOffset (offset_t offset, Executable::addr_type addrType, bool roundup, bool verbose=false)
 
void printSectionsMapping (Executable::addr_type aType)
void printSectionsMapping (Executable::addr_type aType)
 
size_t getSecIndex (SectionHdrWrapper *sec) const
size_t getSecIndex (SectionHdrWrapper *sec) const
 
SectionHdrWrapper * getSecHdr (size_t index) const
SectionHdrWrapper * getSecHdr (size_t index) const
 
bool canAddEntry ()
bool canAddEntry ()
 
ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - +

Static Public Attributes

static size_t SECT_COUNT_MAX = 0x2000
static size_t SECT_COUNT_MAX = 0x2000
 
static size_t SECT_INVALID_INDEX = SIZE_MAX
static size_t SECT_INVALID_INDEX = SIZE_MAX
 
- + - + - + - + - + @@ -327,7 +329,7 @@ Protected Member Functions - + @@ -335,29 +337,29 @@ Protected Member Functions

Protected Member Functions

void clear ()
void clear ()
 
void addMapping (SectionHdrWrapper *sec)
void addMapping (SectionHdrWrapper *sec)
 
virtual bool loadNextEntry (size_t entryNum)
virtual bool loadNextEntry (size_t entryNum)
 
bool isMyEntryType (ExeNodeWrapper *entry)
bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual ExeNodeWrapper * addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - +

Protected Attributes

std::map< offset_t, SectionHdrWrapper * > vSec
std::map< offset_t, SectionHdrWrapper * > vSec
 
std::map< offset_t, SectionHdrWrapper * > rSec
std::map< offset_t, SectionHdrWrapper * > rSec
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
@@ -377,8 +379,7 @@ Additional Inherited Members SectHdrsWrapper::SectHdrsWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -468,8 +469,7 @@ Here is the call graph for this function: ExeNodeWrapper * SectHdrsWrapper::addEntry ( - ExeNodeWrapper *  - entry) + ExeNodeWrapper * entry) @@ -613,8 +613,7 @@ Here is the call graph for this function: void SectHdrsWrapper::addMapping ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) @@ -651,7 +650,7 @@ Here is the call graph for this function: bool SectHdrsWrapper::canAddEntry ( - ) + ) @@ -714,7 +713,7 @@ Here is the call graph for this function: void SectHdrsWrapper::clear ( - ) + ) @@ -756,8 +755,7 @@ Here is the call graph for this function: QString SectHdrsWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -796,19 +794,12 @@ Here is the call graph for this function: virtual void * SectHdrsWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -852,7 +843,7 @@ Here is the call graph for this function: size_t SectHdrsWrapper::getFieldsCount ( - ) + ) @@ -881,19 +872,12 @@ Here is the call graph for this function: virtual bufsize_t SectHdrsWrapper::getFieldSize ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -937,7 +921,7 @@ Here is the call graph for this function: virtual QString SectHdrsWrapper::getName ( - ) + ) @@ -966,7 +950,7 @@ Here is the call graph for this function: void * SectHdrsWrapper::getPtr ( - ) + ) @@ -1005,8 +989,7 @@ Here is the call graph for this function: SectionHdrWrapper * SectHdrsWrapper::getSecHdr ( - size_t  - index) + size_t index) const @@ -1040,31 +1023,22 @@ Here is the call graph for this function: SectionHdrWrapper * SectHdrsWrapper::getSecHdrAtOffset ( - offset_t  - offset, + offset_t offset, - Executable::addr_type  - addrType, + Executable::addr_type addrType, - bool  - roundup, + bool roundup, - bool  - verbose = false  - - - - ) - + bool verbose = false )
@@ -1095,8 +1069,7 @@ Here is the call graph for this function:
size_t SectHdrsWrapper::getSecIndex ( - SectionHdrWrapper *  - sec) + SectionHdrWrapper * sec) const @@ -1133,7 +1106,7 @@ Here is the call graph for this function: bufsize_t SectHdrsWrapper::getSize ( - ) + ) @@ -1190,8 +1163,7 @@ Here is the call graph for this function: bool SectHdrsWrapper::isMyEntryType ( - ExeNodeWrapper *  - entry) + ExeNodeWrapper * entry) @@ -1230,8 +1202,7 @@ Here is the call graph for this function: bool SectHdrsWrapper::loadNextEntry ( - size_t  - entryNum) + size_t entryNum) @@ -1273,8 +1244,7 @@ Here is the call graph for this function: void SectHdrsWrapper::printSectionsMapping ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -1306,7 +1276,7 @@ Here is the call graph for this function: void SectHdrsWrapper::reloadMapping ( - ) + ) @@ -1358,7 +1328,7 @@ Here is the call graph for this function: bool SectHdrsWrapper::wrap ( - ) + ) @@ -1539,7 +1509,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_section_hdr_wrapper-members.html b/class_section_hdr_wrapper-members.html index fe2cb8ec..1bd331d9 100644 --- a/class_section_hdr_wrapper-members.html +++ b/class_section_hdr_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -137,13 +139,13 @@ $(function() { getRawPtr()SectionHdrWrapperinline getSecHdrAccessRightsDesc(DWORD characteristics)SectionHdrWrapperstatic getSize()SectionHdrWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()SectionHdrWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual getVirtualPtr()SectionHdrWrapperinline - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -207,7 +209,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_section_hdr_wrapper.html b/class_section_hdr_wrapper.html index 36c0564f..4c666369 100644 --- a/class_section_hdr_wrapper.html +++ b/class_section_hdr_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: SectionHdrWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -140,67 +142,67 @@ Collaboration diagram for SectionHdrWrapper: -

Public Types

enum  SecFieldId {
-  NAME = 0 -, VSIZE -, VPTR -, RSIZE +
enum  SecFieldId {
+  NAME = 0 +, VSIZE +, VPTR +, RSIZE ,
-  RPTR -, RELOC_PTR -, LINENUM_PTR -, RELOC_NUM +  RPTR +, RELOC_PTR +, LINENUM_PTR +, RELOC_NUM ,
-  LINENUM_NUM -, CHARACT -, FIELD_COUNTER +  LINENUM_NUM +, CHARACT +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -211,7 +213,7 @@ Public Member Functions - + @@ -246,7 +248,7 @@ Public Member Functions - + @@ -287,7 +289,7 @@ Public Member Functions - + @@ -306,12 +308,12 @@ Public Member Functions - - + + - - + + @@ -339,41 +341,41 @@ Public Member Functions

Public Member Functions

 SectionHdrWrapper (PEFile *pe, size_t sectionNumber)
 SectionHdrWrapper (PEFile *pe, size_t sectionNumber)
 
 ~SectionHdrWrapper ()
 ~SectionHdrWrapper ()
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
offset_t getContentOffset (Executable::addr_type aType, bool useMapped=true)
offset_t getContentOffset (Executable::addr_type aType, bool useMapped=true)
 
offset_t getContentEndOffset (Executable::addr_type aType, bool roundup)
offset_t getContentEndOffset (Executable::addr_type aType, bool roundup)
 
bufsize_t getContentSize (Executable::addr_type aType, bool recalculate)
bufsize_t getContentSize (Executable::addr_type aType, bool recalculate)
 
DWORD getCharacteristics ()
DWORD getCharacteristics ()
 
DWORD getRawPtr ()
DWORD getRawPtr ()
 
DWORD getVirtualPtr ()
DWORD getVirtualPtr ()
 
bool setCharacteristics (DWORD newCharacteristics)
bool setCharacteristics (DWORD newCharacteristics)
 
bool reloadName ()
bool reloadName ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + - + - +

Static Public Member Functions

static std::vector< DWORD > splitCharacteristics (DWORD characteristics)
static std::vector< DWORD > splitCharacteristics (DWORD characteristics)
 
static QString getSecHdrAccessRightsDesc (DWORD characteristics)
static QString getSecHdrAccessRightsDesc (DWORD characteristics)
 
static void initSecCharacter (std::map< DWORD, QString > &secHdrCharact)
static void initSecCharacter (std::map< DWORD, QString > &secHdrCharact)
 
static QString translateCharacteristics (DWORD charact)
static QString translateCharacteristics (DWORD charact)
 
- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- +

Public Attributes

QString mappedName
QString mappedName
 
- +

Static Public Attributes

static const size_t SECNAME_LEN = 8
static const size_t SECNAME_LEN = 8
 
- + - + - + - + - + - + @@ -388,7 +390,7 @@ Protected Member Functions - + @@ -396,29 +398,29 @@ Protected Member Functions

Protected Member Functions

 SectionHdrWrapper (PEFile *pe, IMAGE_SECTION_HEADER *v_header)
 SectionHdrWrapper (PEFile *pe, IMAGE_SECTION_HEADER *v_header)
 
offset_t getContentDeclaredOffset (Executable::addr_type aType)
offset_t getContentDeclaredOffset (Executable::addr_type aType)
 
bufsize_t getContentDeclaredSize (Executable::addr_type aType)
bufsize_t getContentDeclaredSize (Executable::addr_type aType)
 
bufsize_t getMappedRawSize ()
bufsize_t getMappedRawSize ()
 
bufsize_t getMappedVirtualSize ()
bufsize_t getMappedVirtualSize ()
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
- + - + - + - + - +

Protected Attributes

char * name
char * name
 
size_t sectNum
size_t sectNum
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
- +

Friends

class PEFile
class PEFile
 

Detailed Description

@@ -432,7 +434,7 @@ Friends
- +
enum SectionHdrWrapper::SecFieldIdenum SectionHdrWrapper::SecFieldId
@@ -467,19 +469,12 @@ Friends SectionHdrWrapper::SectionHdrWrapper ( - PEFile *  - pe, + PEFile * pe, - size_t  - sectionNumber  - - - - ) - + size_t sectionNumber ) @@ -549,7 +544,7 @@ Here is the call graph for this function:
SectionHdrWrapper::~SectionHdrWrapper ( - ) + ) @@ -586,19 +581,12 @@ Here is the call graph for this function: SectionHdrWrapper::SectionHdrWrapper ( - PEFile *  - pe, + PEFile * pe, - IMAGE_SECTION_HEADER *  - v_header  - - - - ) - + IMAGE_SECTION_HEADER * v_header ) @@ -661,19 +649,12 @@ Here is the call graph for this function: Executable::addr_type SectionHdrWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -711,19 +692,12 @@ Here is the call graph for this function: WrappedValue::data_type SectionHdrWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -761,7 +735,7 @@ Here is the call graph for this function: DWORD SectionHdrWrapper::getCharacteristics ( - ) + ) @@ -788,8 +762,7 @@ Here is the call graph for this function: offset_t SectionHdrWrapper::getContentDeclaredOffset ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -826,8 +799,7 @@ Here is the call graph for this function: bufsize_t SectionHdrWrapper::getContentDeclaredSize ( - Executable::addr_type  - aType) + Executable::addr_type aType) @@ -861,19 +833,12 @@ Here is the call graph for this function: offset_t SectionHdrWrapper::getContentEndOffset ( - Executable::addr_type  - aType, + Executable::addr_type aType, - bool  - roundup  - - - - ) - + bool roundup )
@@ -933,19 +898,12 @@ Here is the call graph for this function:
offset_t SectionHdrWrapper::getContentOffset ( - Executable::addr_type  - aType, + Executable::addr_type aType, - bool  - useMapped = true  - - - - ) - + bool useMapped = true )
@@ -998,19 +956,12 @@ Here is the call graph for this function:
bufsize_t SectionHdrWrapper::getContentSize ( - Executable::addr_type  - aType, + Executable::addr_type aType, - bool  - recalculate  - - - - ) - + bool recalculate )
@@ -1140,8 +1091,7 @@ Here is the call graph for this function:
QString SectionHdrWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -1170,19 +1120,12 @@ Here is the call graph for this function: void * SectionHdrWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -1244,7 +1187,7 @@ Here is the call graph for this function: virtual size_t SectionHdrWrapper::getFieldsCount ( - ) + ) @@ -1273,7 +1216,7 @@ Here is the call graph for this function: bufsize_t SectionHdrWrapper::getMappedRawSize ( - ) + ) @@ -1347,7 +1290,7 @@ Here is the call graph for this function: bufsize_t SectionHdrWrapper::getMappedVirtualSize ( - ) + ) @@ -1478,7 +1421,7 @@ Here is the call graph for this function: QString SectionHdrWrapper::getName ( - ) + ) @@ -1507,7 +1450,7 @@ Here is the call graph for this function: void * SectionHdrWrapper::getPtr ( - ) + ) @@ -1567,7 +1510,7 @@ Here is the call graph for this function: DWORD SectionHdrWrapper::getRawPtr ( - ) + ) @@ -1594,8 +1537,7 @@ Here is the call graph for this function: QString SectionHdrWrapper::getSecHdrAccessRightsDesc ( - DWORD  - characteristics) + DWORD characteristics) @@ -1632,7 +1574,7 @@ Here is the call graph for this function: bufsize_t SectionHdrWrapper::getSize ( - ) + ) @@ -1671,7 +1613,7 @@ Here is the call graph for this function: virtual size_t SectionHdrWrapper::getSubFieldsCount ( - ) + ) @@ -1700,7 +1642,7 @@ Here is the call graph for this function: DWORD SectionHdrWrapper::getVirtualPtr ( - ) + ) @@ -1727,8 +1669,7 @@ Here is the call graph for this function: void SectionHdrWrapper::initSecCharacter ( - std::map< DWORD, QString > &  - secHdrCharact) + std::map< DWORD, QString > & secHdrCharact) @@ -1762,7 +1703,7 @@ Here is the call graph for this function: bool SectionHdrWrapper::reloadName ( - ) + ) @@ -1818,8 +1759,7 @@ Here is the call graph for this function: bool SectionHdrWrapper::setCharacteristics ( - DWORD  - newCharacteristics) + DWORD newCharacteristics) @@ -1856,8 +1796,7 @@ Here is the call graph for this function: std::vector< DWORD > SectionHdrWrapper::splitCharacteristics ( - DWORD  - characteristics) + DWORD characteristics) @@ -1897,8 +1836,7 @@ Here is the call graph for this function: QString SectionHdrWrapper::translateCharacteristics ( - DWORD  - charact) + DWORD charact) @@ -1938,7 +1876,7 @@ Here is the call graph for this function: bool SectionHdrWrapper::wrap ( - ) + ) @@ -2118,7 +2056,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_security_dir_wrapper-members.html b/class_security_dir_wrapper-members.html index 3e3d292c..f466955b 100644 --- a/class_security_dir_wrapper-members.html +++ b/class_security_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -133,12 +135,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()SecurityDirWrappervirtual getSize()SecurityDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()SecurityDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -186,7 +188,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_security_dir_wrapper.html b/class_security_dir_wrapper.html index 1d0f4ebf..7cf98b09 100644 --- a/class_security_dir_wrapper.html +++ b/class_security_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: SecurityDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,47 +136,47 @@ Collaboration diagram for SecurityDirWrapper: -

Public Types

enum  SecurityDirFID {
-  NONE = FIELD_NONE -, CERT_LEN = 0 -, REVISION -, TYPE +
enum  SecurityDirFID {
+  NONE = FIELD_NONE +, CERT_LEN = 0 +, REVISION +, TYPE ,
-  CERT_CONTENT -, FIELD_COUNTER +  CERT_CONTENT +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + - + - + - + @@ -183,7 +185,7 @@ Public Member Functions - + @@ -194,7 +196,7 @@ Public Member Functions - + @@ -229,7 +231,7 @@ Public Member Functions - + @@ -270,7 +272,7 @@ Public Member Functions - + @@ -289,12 +291,12 @@ Public Member Functions - - + + - - + + @@ -322,13 +324,13 @@ Public Member Functions

Public Member Functions

 SecurityDirWrapper (PEFile *pe)
 SecurityDirWrapper (PEFile *pe)
 
 ~SecurityDirWrapper ()
 ~SecurityDirWrapper ()
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
QString translateType (int type)
QString translateType (int type)
 
virtual QString translateFieldContent (size_t fieldId)
virtual QString translateFieldContent (size_t fieldId)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -341,27 +343,27 @@ Additional Inherited Members - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -376,7 +378,7 @@ Additional Inherited Members
- +
enum SecurityDirWrapper::SecurityDirFIDenum SecurityDirWrapper::SecurityDirFID
@@ -406,8 +408,7 @@ Additional Inherited Members SecurityDirWrapper::SecurityDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -466,7 +467,7 @@ Here is the call graph for this function:
SecurityDirWrapper::~SecurityDirWrapper ( - ) + ) @@ -494,19 +495,12 @@ Here is the call graph for this function: WrappedValue::data_type SecurityDirWrapper::containsDataType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -544,8 +538,7 @@ Here is the call graph for this function: QString SecurityDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -584,19 +577,12 @@ Here is the call graph for this function: void * SecurityDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -636,7 +622,7 @@ Here is the call graph for this function: virtual size_t SecurityDirWrapper::getFieldsCount ( - ) + ) @@ -665,7 +651,7 @@ Here is the call graph for this function: virtual QString SecurityDirWrapper::getName ( - ) + ) @@ -694,7 +680,7 @@ Here is the call graph for this function: void * SecurityDirWrapper::getPtr ( - ) + ) @@ -723,7 +709,7 @@ Here is the call graph for this function: bufsize_t SecurityDirWrapper::getSize ( - ) + ) @@ -762,7 +748,7 @@ Here is the call graph for this function: virtual size_t SecurityDirWrapper::getSubFieldsCount ( - ) + ) @@ -791,8 +777,7 @@ Here is the call graph for this function: QString SecurityDirWrapper::translateFieldContent ( - size_t  - fieldId) + size_t fieldId) @@ -831,8 +816,7 @@ Here is the call graph for this function: QString SecurityDirWrapper::translateType ( - int  - type) + int type) @@ -864,7 +848,7 @@ Here is the call graph for this function: bool SecurityDirWrapper::wrap ( - ) + ) @@ -918,7 +902,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_tls_dir_wrapper-members.html b/class_tls_dir_wrapper-members.html index f6b8124a..fde69e90 100644 --- a/class_tls_dir_wrapper-members.html +++ b/class_tls_dir_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -135,12 +137,12 @@ $(function() { getPE()PENodeWrapperinline getPtr()TlsDirWrappervirtual getSize()TlsDirWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()TlsDirWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -187,7 +189,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_tls_dir_wrapper.html b/class_tls_dir_wrapper.html index e75eef25..9f8d0dea 100644 --- a/class_tls_dir_wrapper.html +++ b/class_tls_dir_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: TlsDirWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -134,43 +136,43 @@ Collaboration diagram for TlsDirWrapper: -

Public Types

enum  TlsDirFID {
-  NONE = FIELD_NONE -, START_ADDR -, END_ADDR -, INDEX_ADDR +
enum  TlsDirFID {
+  NONE = FIELD_NONE +, START_ADDR +, END_ADDR +, INDEX_ADDR ,
-  CALLBACKS_ADDR -, ZEROF_SIZE -, CHARACT -, FIELD_COUNTER +  CALLBACKS_ADDR +, ZEROF_SIZE +, CHARACT +, FIELD_COUNTER
}
 
- + - + - + - + - + - + - + - + - + - + - + @@ -179,7 +181,7 @@ Public Member Functions - + @@ -190,7 +192,7 @@ Public Member Functions - + @@ -225,7 +227,7 @@ Public Member Functions - + @@ -268,7 +270,7 @@ Public Member Functions - + @@ -287,12 +289,12 @@ Public Member Functions - - + + - - + + @@ -320,13 +322,13 @@ Public Member Functions

Public Member Functions

 TlsDirWrapper (PEFile *pe)
 TlsDirWrapper (PEFile *pe)
 
bool wrap ()
bool wrap ()
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual void * getFieldPtr (size_t fieldId, size_t subField)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
- Public Member Functions inherited from DataDirEntryWrapper
- Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
 
offset_t getDirEntryAddress ()
 
int getDirEntryType ()
 
- Public Member Functions inherited from PENodeWrapper
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + - + @@ -341,27 +343,27 @@ Additional Inherited Members - + - + - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from DataDirEntryWrapper
- Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from DataDirEntryWrapper
- Protected Attributes inherited from DataDirEntryWrapper
int entryType
 
- Protected Attributes inherited from PENodeWrapper
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -376,7 +378,7 @@ Additional Inherited Members
- +
enum TlsDirWrapper::TlsDirFIDenum TlsDirWrapper::TlsDirFID
@@ -408,8 +410,7 @@ Additional Inherited Members TlsDirWrapper::TlsDirWrapper ( - PEFile *  - pe) + PEFile * pe) @@ -453,19 +454,12 @@ Here is the call graph for this function:
Executable::addr_type TlsDirWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -503,8 +497,7 @@ Here is the call graph for this function: QString TlsDirWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -543,19 +536,12 @@ Here is the call graph for this function: void * TlsDirWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -597,7 +583,7 @@ Here is the call graph for this function: virtual size_t TlsDirWrapper::getFieldsCount ( - ) + ) @@ -626,7 +612,7 @@ Here is the call graph for this function: virtual QString TlsDirWrapper::getName ( - ) + ) @@ -655,7 +641,7 @@ Here is the call graph for this function: void * TlsDirWrapper::getPtr ( - ) + ) @@ -694,7 +680,7 @@ Here is the call graph for this function: bufsize_t TlsDirWrapper::getSize ( - ) + ) @@ -738,7 +724,7 @@ Here is the call graph for this function: virtual size_t TlsDirWrapper::getSubFieldsCount ( - ) + ) @@ -767,7 +753,7 @@ Here is the call graph for this function: bool TlsDirWrapper::wrap ( - ) + ) @@ -805,7 +791,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_tls_entry_wrapper-members.html b/class_tls_entry_wrapper-members.html index a91dcb6d..77801180 100644 --- a/class_tls_entry_wrapper-members.html +++ b/class_tls_entry_wrapper-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -127,12 +129,12 @@ $(function() { getParentNode()ExeNodeWrapperinlinevirtual getPtr()TlsEntryWrappervirtual getSize()TlsEntryWrappervirtual - getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)AbstractByteBuffer + getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer getSubfieldName(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubfieldPtr(size_t fieldId, size_t subField)ExeNodeWrappervirtual getSubFieldsCount()TlsEntryWrapperinlinevirtual getSubfieldSize(size_t fieldId, size_t subField)ExeNodeWrappervirtual - getWAsciiStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer + getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer getWrappedValue(size_t fieldId, size_t subField)ExeElementWrappervirtual getWrappedValue(size_t fieldId)ExeElementWrapperinlinevirtual getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer @@ -170,7 +172,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_tls_entry_wrapper.html b/class_tls_entry_wrapper.html index e3ef8d27..34235c20 100644 --- a/class_tls_entry_wrapper.html +++ b/class_tls_entry_wrapper.html @@ -3,12 +3,14 @@ - + BearParser: TlsEntryWrapper Class Reference + + @@ -30,7 +32,7 @@ - + @@ -101,33 +103,33 @@ Collaboration diagram for TlsEntryWrapper: -

Public Types

enum  FieldID { NONE = FIELD_NONE -, CALLBACK_ADDR -, FIELD_COUNTER +
enum  FieldID { NONE = FIELD_NONE +, CALLBACK_ADDR +, FIELD_COUNTER }
 
- + - + - + - + - + - + - + - + - + - + @@ -166,7 +168,7 @@ Public Member Functions - + @@ -209,7 +211,7 @@ Public Member Functions - + @@ -228,12 +230,12 @@ Public Member Functions - - + + - - + + @@ -261,10 +263,10 @@ Public Member Functions

Public Member Functions

 TlsEntryWrapper (Executable *pe, TlsDirWrapper *parentDir, size_t entryNumber)
 TlsEntryWrapper (Executable *pe, TlsDirWrapper *parentDir, size_t entryNumber)
 
virtual void * getPtr ()
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
virtual bufsize_t getSize ()
 
virtual QString getName ()
virtual QString getName ()
 
virtual size_t getFieldsCount ()
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField)
 
- Public Member Functions inherited from ExeNodeWrapper
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
- + - + @@ -279,19 +281,19 @@ Additional Inherited Members - + - + - +

Additional Inherited Members

- Static Public Member Functions inherited from AbstractByteBuffer
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 
- Protected Member Functions inherited from ExeNodeWrapper
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 
- Protected Attributes inherited from ExeNodeWrapper
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 
@@ -306,7 +308,7 @@ Additional Inherited Members
- +
enum TlsEntryWrapper::FieldIDenum TlsEntryWrapper::FieldID
@@ -333,25 +335,17 @@ Additional Inherited Members TlsEntryWrapper::TlsEntryWrapper ( - Executable *  - pe, + Executable * pe, - TlsDirWrapper *  - parentDir, + TlsDirWrapper * parentDir, - size_t  - entryNumber  - - - - ) - + size_t entryNumber ) @@ -378,19 +372,12 @@ Additional Inherited Members virtual Executable::addr_type TlsEntryWrapper::containsAddrType ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField  - - - - ) - + size_t subField ) @@ -418,8 +405,7 @@ Additional Inherited Members virtual QString TlsEntryWrapper::getFieldName ( - size_t  - fieldId) + size_t fieldId) @@ -458,19 +444,12 @@ Here is the call graph for this function:
virtual void * TlsEntryWrapper::getFieldPtr ( - size_t  - fieldId, + size_t fieldId, - size_t  - subField = FIELD_NONE  - - - - ) - + size_t subField = FIELD_NONE ) @@ -570,7 +549,7 @@ Here is the call graph for this function: virtual size_t TlsEntryWrapper::getFieldsCount ( - ) + ) @@ -599,7 +578,7 @@ Here is the call graph for this function: virtual QString TlsEntryWrapper::getName ( - ) + ) @@ -628,7 +607,7 @@ Here is the call graph for this function: void * TlsEntryWrapper::getPtr ( - ) + ) @@ -727,7 +706,7 @@ Here is the call graph for this function: bufsize_t TlsEntryWrapper::getSize ( - ) + ) @@ -777,7 +756,7 @@ Here is the call graph for this function: virtual size_t TlsEntryWrapper::getSubFieldsCount ( - ) + ) @@ -801,7 +780,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_wrapped_value-members.html b/class_wrapped_value-members.html index 8e4f8f16..1e25666a 100644 --- a/class_wrapped_value-members.html +++ b/class_wrapped_value-members.html @@ -3,12 +3,14 @@ - + BearParser: Member List + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/class_wrapped_value.html b/class_wrapped_value.html index 80762a4c..5f68323b 100644 --- a/class_wrapped_value.html +++ b/class_wrapped_value.html @@ -3,12 +3,14 @@ - + BearParser: WrappedValue Class Reference + + @@ -30,7 +32,7 @@ - + @@ -94,47 +96,47 @@ Collaboration diagram for WrappedValue: -

Public Types

enum  data_type {
-  NONE = 0 -, INT -, STRING -, WSTRING +
enum  data_type {
+  NONE = 0 +, INT +, STRING +, WSTRING ,
-  COMPLEX -, DATATYPE_COUNT +  COMPLEX +, DATATYPE_COUNT
}
 
- + - + - + - + - + - +

Public Member Functions

 WrappedValue ()
 WrappedValue ()
 
 WrappedValue (AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)
 WrappedValue (AbstractByteBuffer *owner, offset_t offset, bufsize_t size, data_type type)
 
data_type getDataType ()
data_type getDataType ()
 
QVariant getQVariant ()
QVariant getQVariant ()
 
QString toQString ()
QString toQString ()
 
bool isValid ()
bool isValid ()
 
- +

Protected Member Functions

virtual QString getIntFormat ()
virtual QString getIntFormat ()
 
- + - + - + - +

Protected Attributes

data_type m_Type
data_type m_Type
 
AbstractByteBuffer * m_Owner
AbstractByteBuffer * m_Owner
 
offset_t m_Offset
offset_t m_Offset
 
bufsize_t m_Size
bufsize_t m_Size
 

Detailed Description

@@ -148,7 +150,7 @@ Protected Attributes
- +
enum WrappedValue::data_typeenum WrappedValue::data_type
@@ -178,7 +180,7 @@ Protected Attributes WrappedValue::WrappedValue ( - ) + ) @@ -205,31 +207,22 @@ Protected Attributes WrappedValue::WrappedValue ( - AbstractByteBuffer *  - owner, + AbstractByteBuffer * owner, - offset_t  - offset, + offset_t offset, - bufsize_t  - size, + bufsize_t size, - data_type  - type  - - - - ) - + data_type type ) @@ -254,9 +247,9 @@ Protected Attributes - + - +
data_type WrappedValue::getDataType data_type WrappedValue::getDataType ())
@@ -283,7 +276,7 @@ Protected Attributes QString WrappedValue::getIntFormat ( - ) + ) @@ -317,7 +310,7 @@ Here is the call graph for this function:
QVariant WrappedValue::getQVariant ( - ) + ) @@ -359,7 +352,7 @@ Here is the call graph for this function: bool WrappedValue::isValid ( - ) + ) @@ -383,7 +376,7 @@ Here is the call graph for this function: QString WrappedValue::toQString ( - ) + ) @@ -503,7 +496,7 @@ Here is the call graph for this function: - +
data_type WrappedValue::m_Typedata_type WrappedValue::m_Type
@@ -524,7 +517,7 @@ Here is the call graph for this function:
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/classes.html b/classes.html index 0cdaa50f..9c4e388a 100644 --- a/classes.html +++ b/classes.html @@ -3,12 +3,14 @@ - + BearParser: Class Index + + @@ -30,7 +32,7 @@ - + @@ -127,7 +129,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/clipboard.js b/clipboard.js new file mode 100644 index 00000000..42c1fb0e --- /dev/null +++ b/clipboard.js @@ -0,0 +1,61 @@ +/** + +The code below is based on the Doxygen Awesome project, see +https://github.com/jothepro/doxygen-awesome-css + +MIT License + +Copyright (c) 2021 - 2022 jothepro + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +*/ + +let clipboard_title = "Copy to clipboard" +let clipboard_icon = `` +let clipboard_successIcon = `` +let clipboard_successDuration = 1000 + +$(function() { + if(navigator.clipboard) { + const fragments = document.getElementsByClassName("fragment") + for(const fragment of fragments) { + const clipboard_div = document.createElement("div") + clipboard_div.classList.add("clipboard") + clipboard_div.innerHTML = clipboard_icon + clipboard_div.title = clipboard_title + $(clipboard_div).click(function() { + const content = this.parentNode.cloneNode(true) + // filter out line number and folded fragments from file listings + content.querySelectorAll(".lineno, .ttc, .foldclosed").forEach((node) => { node.remove() }) + let text = content.textContent + // remove trailing newlines and trailing spaces from empty lines + text = text.replace(/^\s*\n/gm,'\n').replace(/\n*$/,'') + navigator.clipboard.writeText(text); + this.classList.add("success") + this.innerHTML = clipboard_successIcon + window.setTimeout(() => { // switch back to normal icon after timeout + this.classList.remove("success") + this.innerHTML = clipboard_icon + }, clipboard_successDuration); + }) + fragment.insertBefore(clipboard_div, fragment.firstChild) + } + } +}) diff --git a/cookie.js b/cookie.js new file mode 100644 index 00000000..53ad21d9 --- /dev/null +++ b/cookie.js @@ -0,0 +1,58 @@ +/*! + Cookie helper functions + Copyright (c) 2023 Dimitri van Heesch + Released under MIT license. +*/ +let Cookie = { + cookie_namespace: 'doxygen_', + + readSetting(cookie,defVal) { + if (window.chrome) { + const val = localStorage.getItem(this.cookie_namespace+cookie) || + sessionStorage.getItem(this.cookie_namespace+cookie); + if (val) return val; + } else { + let myCookie = this.cookie_namespace+cookie+"="; + if (document.cookie) { + const index = document.cookie.indexOf(myCookie); + if (index != -1) { + const valStart = index + myCookie.length; + let valEnd = document.cookie.indexOf(";", valStart); + if (valEnd == -1) { + valEnd = document.cookie.length; + } + return document.cookie.substring(valStart, valEnd); + } + } + } + return defVal; + }, + + writeSetting(cookie,val,days=10*365) { // default days='forever', 0=session cookie, -1=delete + if (window.chrome) { + if (days==0) { + sessionStorage.setItem(this.cookie_namespace+cookie,val); + } else { + localStorage.setItem(this.cookie_namespace+cookie,val); + } + } else { + let date = new Date(); + date.setTime(date.getTime()+(days*24*60*60*1000)); + const expiration = days!=0 ? "expires="+date.toGMTString()+";" : ""; + document.cookie = this.cookie_namespace + cookie + "=" + + val + "; SameSite=Lax;" + expiration + "path=/"; + } + }, + + eraseSetting(cookie) { + if (window.chrome) { + if (localStorage.getItem(this.cookie_namespace+cookie)) { + localStorage.removeItem(this.cookie_namespace+cookie); + } else if (sessionStorage.getItem(this.cookie_namespace+cookie)) { + sessionStorage.removeItem(this.cookie_namespace+cookie); + } + } else { + this.writeSetting(cookie,'',-1); + } + }, +} diff --git a/core_8h.html b/core_8h.html index 01e931a1..5a9773e6 100644 --- a/core_8h.html +++ b/core_8h.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/core.h File Reference + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/core_8h_source.html b/core_8h_source.html index f21043bb..145cad90 100644 --- a/core_8h_source.html +++ b/core_8h_source.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/core.h Source File + + @@ -30,7 +32,7 @@ - + @@ -113,7 +115,7 @@ $(document).ready(function() { init_codefold(0); });
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000000_000004.html b/dir_000000_000004.html index 2252af47..baa21238 100644 --- a/dir_000000_000004.html +++ b/dir_000000_000004.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser -> pe Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

bearparser → pe Relation

File in parser/include/bearparserIncludes file in parser/include/bearparser/pe
pe.hrsrc / pe_rsrc.h
pe.hPEFile.h
pe / CommonOrdinalsLookup.hlookup / CommonOrdinalsMap.h
pe / CommonOrdinalsLookup.hlookup / CommonOrdinalsWS2_32.h
pe / CommonOrdinalsLookup.hlookup / CommonOrdinalsOleaut32.h
pe / PEFile.hrsrc / ResourcesAlbum.h
pe / ResourceDirWrapper.hrsrc / ResourcesAlbum.h
pe / ResourceDirWrapper.hrsrc / ResourceContentFactory.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000003_000001.html b/dir_000003_000001.html index ee8fb277..b84178a9 100644 --- a/dir_000003_000001.html +++ b/dir_000003_000001.html @@ -3,12 +3,14 @@ - + BearParser: parser -> include Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

parser → include Relation

File in parserIncludes file in parser/include
AbstractByteBuffer.cppbearparser / AbstractByteBuffer.h
ByteBuffer.cppbearparser / ByteBuffer.h
Executable.cppbearparser / Executable.h
Executable.cppbearparser / FileBuffer.h
ExeElementWrapper.cppbearparser / ExeElementWrapper.h
ExeFactory.cppbearparser / pe / DOSExe.h
ExeFactory.cppbearparser / ExeFactory.h
ExeFactory.cppbearparser / pe / PEFile.h
ExeNodeWrapper.cppbearparser / ExeNodeWrapper.h
FileBuffer.cppbearparser / FileBuffer.h
Formatter.cppbearparser / Formatter.h
Formatter.cppbearparser / Util.h
MappedExe.cppbearparser / MappedExe.h
include / bearparser / pe.hbearparser / pe / rsrc / pe_rsrc.h
include / bearparser / pe.hbearparser / pe / PEFile.h
Util.cppbearparser / Util.h
WrappedValue.cppbearparser / WrappedValue.h
include / bearparser / pe / CommonOrdinalsLookup.hbearparser / pe / lookup / CommonOrdinalsMap.h
include / bearparser / pe / CommonOrdinalsLookup.hbearparser / pe / lookup / CommonOrdinalsWS2_32.h
include / bearparser / pe / CommonOrdinalsLookup.hbearparser / pe / lookup / CommonOrdinalsOleaut32.h
include / bearparser / pe / PEFile.hbearparser / pe / rsrc / ResourcesAlbum.h
include / bearparser / pe / ResourceDirWrapper.hbearparser / pe / rsrc / ResourcesAlbum.h
include / bearparser / pe / ResourceDirWrapper.hbearparser / pe / rsrc / ResourceContentFactory.h
pe / BoundImpDirWrapper.cppbearparser / pe / BoundImpDirWrapper.h
pe / BoundImpDirWrapper.cppbearparser / pe / PEFile.h
pe / ClrDirWrapper.cppbearparser / pe / ClrDirWrapper.h
pe / DataDirEntryWrapper.cppbearparser / pe / DataDirEntryWrapper.h
pe / DataDirEntryWrapper.cppbearparser / pe / PEFile.h
pe / DataDirWrapper.cppbearparser / pe / DataDirWrapper.h
pe / DataDirWrapper.cppbearparser / pe / PEFile.h
pe / DebugDirWrapper.cppbearparser / pe / DebugDirWrapper.h
pe / DelayImpDirWrapper.cppbearparser / pe / DelayImpDirWrapper.h
pe / DelayImpDirWrapper.cppbearparser / pe / PEFile.h
pe / DOSExe.cppbearparser / pe / DOSExe.h
pe / DosHdrWrapper.cppbearparser / pe / DosHdrWrapper.h
pe / DosHdrWrapper.cppbearparser / pe / DOSExe.h
pe / ExceptionDirWrapper.cppbearparser / pe / ExceptionDirWrapper.h
pe / ExceptionDirWrapper.cppbearparser / pe / PEFile.h
pe / ExportDirWrapper.cppbearparser / pe / ExportDirWrapper.h
pe / ExportDirWrapper.cppbearparser / pe / PEFile.h
pe / FileHdrWrapper.cppbearparser / pe / FileHdrWrapper.h
pe / FileHdrWrapper.cppbearparser / pe / PEFile.h
pe / ImportBaseDirWrapper.cppbearparser / pe / ImportBaseDirWrapper.h
pe / ImportDirWrapper.cppbearparser / pe / ImportDirWrapper.h
pe / ImportDirWrapper.cppbearparser / pe / PEFile.h
pe / LdConfigDirWrapper.cppbearparser / pe / LdConfigDirWrapper.h
pe / OptHdrWrapper.cppbearparser / pe / OptHdrWrapper.h
pe / OptHdrWrapper.cppbearparser / pe / PEFile.h
pe / PECore.cppbearparser / pe / PECore.h
pe / PEFile.cppbearparser / pe / PEFile.h
pe / PEFile.cppbearparser / FileBuffer.h
pe / PENodeWrapper.cppbearparser / pe / PENodeWrapper.h
pe / PENodeWrapper.cppbearparser / pe / PEFile.h
pe / RelocDirWrapper.cppbearparser / pe / RelocDirWrapper.h
pe / RelocDirWrapper.cppbearparser / pe / PEFile.h
pe / ResourceDirWrapper.cppbearparser / pe / ResourceDirWrapper.h
pe / ResourceDirWrapper.cppbearparser / pe / PEFile.h
pe / RichHdrWrapper.cppbearparser / pe / RichHdrWrapper.h
pe / RichHdrWrapper.cppbearparser / pe / PEFile.h
pe / SectHdrsWrapper.cppbearparser / pe / SectHdrsWrapper.h
pe / SectHdrsWrapper.cppbearparser / pe / PEFile.h
pe / SecurityDirWrapper.cppbearparser / pe / SecurityDirWrapper.h
pe / SecurityDirWrapper.cppbearparser / pe / PEFile.h
pe / TlsDirWrapper.cppbearparser / pe / TlsDirWrapper.h
pe / TlsDirWrapper.cppbearparser / pe / PEFile.h
pe / rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceContentFactory.h
pe / rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
pe / rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
pe / rsrc / ResourceContentWrapper.cppbearparser / pe / rsrc / ResourceContentWrapper.h
pe / rsrc / ResourcesAlbum.cppbearparser / pe / rsrc / ResourcesAlbum.h
pe / rsrc / ResourcesAlbum.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
pe / rsrc / ResourceStringsWrapper.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
pe / rsrc / ResourceVersionWrapper.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000004_000002.html b/dir_000004_000002.html index cb5c2d30..b790b657 100644 --- a/dir_000004_000002.html +++ b/dir_000004_000002.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe -> lookup Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

pe → lookup Relation

File in parser/include/bearparser/peIncludes file in parser/include/bearparser/pe/lookup
CommonOrdinalsLookup.hCommonOrdinalsMap.h
CommonOrdinalsLookup.hCommonOrdinalsOleaut32.h
CommonOrdinalsLookup.hCommonOrdinalsWS2_32.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000004_000006.html b/dir_000004_000006.html index 8cb25769..e616d247 100644 --- a/dir_000004_000006.html +++ b/dir_000004_000006.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe -> rsrc Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

pe → rsrc Relation

File in parser/include/bearparser/peIncludes file in parser/include/bearparser/pe/rsrc
PEFile.hResourcesAlbum.h
ResourceDirWrapper.hResourceContentFactory.h
ResourceDirWrapper.hResourcesAlbum.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000005_000001.html b/dir_000005_000001.html index 30651f77..4184d2a0 100644 --- a/dir_000005_000001.html +++ b/dir_000005_000001.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe -> include Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

pe → include Relation

File in parser/peIncludes file in parser/include
BoundImpDirWrapper.cppbearparser / pe / BoundImpDirWrapper.h
BoundImpDirWrapper.cppbearparser / pe / PEFile.h
ClrDirWrapper.cppbearparser / pe / ClrDirWrapper.h
DataDirEntryWrapper.cppbearparser / pe / DataDirEntryWrapper.h
DataDirEntryWrapper.cppbearparser / pe / PEFile.h
DataDirWrapper.cppbearparser / pe / DataDirWrapper.h
DataDirWrapper.cppbearparser / pe / PEFile.h
DebugDirWrapper.cppbearparser / pe / DebugDirWrapper.h
DelayImpDirWrapper.cppbearparser / pe / DelayImpDirWrapper.h
DelayImpDirWrapper.cppbearparser / pe / PEFile.h
DOSExe.cppbearparser / pe / DOSExe.h
DosHdrWrapper.cppbearparser / pe / DOSExe.h
DosHdrWrapper.cppbearparser / pe / DosHdrWrapper.h
ExceptionDirWrapper.cppbearparser / pe / ExceptionDirWrapper.h
ExceptionDirWrapper.cppbearparser / pe / PEFile.h
ExportDirWrapper.cppbearparser / pe / ExportDirWrapper.h
ExportDirWrapper.cppbearparser / pe / PEFile.h
FileHdrWrapper.cppbearparser / pe / FileHdrWrapper.h
FileHdrWrapper.cppbearparser / pe / PEFile.h
ImportBaseDirWrapper.cppbearparser / pe / ImportBaseDirWrapper.h
ImportDirWrapper.cppbearparser / pe / ImportDirWrapper.h
ImportDirWrapper.cppbearparser / pe / PEFile.h
LdConfigDirWrapper.cppbearparser / pe / LdConfigDirWrapper.h
OptHdrWrapper.cppbearparser / pe / OptHdrWrapper.h
OptHdrWrapper.cppbearparser / pe / PEFile.h
PECore.cppbearparser / pe / PECore.h
PEFile.cppbearparser / FileBuffer.h
PEFile.cppbearparser / pe / PEFile.h
PENodeWrapper.cppbearparser / pe / PEFile.h
PENodeWrapper.cppbearparser / pe / PENodeWrapper.h
RelocDirWrapper.cppbearparser / pe / PEFile.h
RelocDirWrapper.cppbearparser / pe / RelocDirWrapper.h
ResourceDirWrapper.cppbearparser / pe / PEFile.h
ResourceDirWrapper.cppbearparser / pe / ResourceDirWrapper.h
RichHdrWrapper.cppbearparser / pe / PEFile.h
RichHdrWrapper.cppbearparser / pe / RichHdrWrapper.h
SectHdrsWrapper.cppbearparser / pe / PEFile.h
SectHdrsWrapper.cppbearparser / pe / SectHdrsWrapper.h
SecurityDirWrapper.cppbearparser / pe / PEFile.h
SecurityDirWrapper.cppbearparser / pe / SecurityDirWrapper.h
TlsDirWrapper.cppbearparser / pe / PEFile.h
TlsDirWrapper.cppbearparser / pe / TlsDirWrapper.h
rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceContentFactory.h
rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
rsrc / ResourceContentFactory.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
rsrc / ResourceContentWrapper.cppbearparser / pe / rsrc / ResourceContentWrapper.h
rsrc / ResourcesAlbum.cppbearparser / pe / rsrc / ResourcesAlbum.h
rsrc / ResourcesAlbum.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
rsrc / ResourceStringsWrapper.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
rsrc / ResourceVersionWrapper.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_000007_000001.html b/dir_000007_000001.html index a9f092d9..5f37a381 100644 --- a/dir_000007_000001.html +++ b/dir_000007_000001.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc -> include Relation + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {

rsrc → include Relation

File in parser/pe/rsrcIncludes file in parser/include
ResourceContentFactory.cppbearparser / pe / rsrc / ResourceContentFactory.h
ResourceContentFactory.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
ResourceContentFactory.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
ResourceContentWrapper.cppbearparser / pe / rsrc / ResourceContentWrapper.h
ResourcesAlbum.cppbearparser / pe / rsrc / ResourcesAlbum.h
ResourcesAlbum.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
ResourceStringsWrapper.cppbearparser / pe / rsrc / ResourceStringsWrapper.h
ResourceVersionWrapper.cppbearparser / pe / rsrc / ResourceVersionWrapper.h
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_34d82ae88b217b68a1956692d3713215.html b/dir_34d82ae88b217b68a1956692d3713215.html index 8ff418ac..bc9c4a5b 100644 --- a/dir_34d82ae88b217b68a1956692d3713215.html +++ b/dir_34d82ae88b217b68a1956692d3713215.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -158,7 +160,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_4561956d067eca565361a6c170f6be44.html b/dir_4561956d067eca565361a6c170f6be44.html index ff143edc..34b507ba 100644 --- a/dir_4561956d067eca565361a6c170f6be44.html +++ b/dir_4561956d067eca565361a6c170f6be44.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe/rsrc Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -106,7 +108,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_4a981a2c437aae818192c59915bbaa01.html b/dir_4a981a2c437aae818192c59915bbaa01.html index 6b07cbcc..82f0b8b7 100644 --- a/dir_4a981a2c437aae818192c59915bbaa01.html +++ b/dir_4a981a2c437aae818192c59915bbaa01.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/rsrc Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -105,7 +107,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_572890c148f68441e050f6560d78312b.html b/dir_572890c148f68441e050f6560d78312b.html index 927b5dc8..cd695194 100644 --- a/dir_572890c148f68441e050f6560d78312b.html +++ b/dir_572890c148f68441e050f6560d78312b.html @@ -3,12 +3,14 @@ - + BearParser: parser Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -127,7 +129,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html b/dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html index a1c20bec..edc1a8cc 100644 --- a/dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html +++ b/dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html @@ -3,12 +3,14 @@ - + BearParser: parser/pe Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -152,7 +154,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_91d1d07216ef6e2054337842b728042c.html b/dir_91d1d07216ef6e2054337842b728042c.html index 8e20ca84..af406a12 100644 --- a/dir_91d1d07216ef6e2054337842b728042c.html +++ b/dir_91d1d07216ef6e2054337842b728042c.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -131,7 +133,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_993b4b96b9d24e1e5416bf28e31c7e44.html b/dir_993b4b96b9d24e1e5416bf28e31c7e44.html index 98b46379..6e0724cd 100644 --- a/dir_993b4b96b9d24e1e5416bf28e31c7e44.html +++ b/dir_993b4b96b9d24e1e5416bf28e31c7e44.html @@ -3,12 +3,14 @@ - + BearParser: parser/include Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ Directories
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/dir_adf887ac753f7e9996998b0bcae7ad69.html b/dir_adf887ac753f7e9996998b0bcae7ad69.html index 1f9455f1..448da91f 100644 --- a/dir_adf887ac753f7e9996998b0bcae7ad69.html +++ b/dir_adf887ac753f7e9996998b0bcae7ad69.html @@ -3,12 +3,14 @@ - + BearParser: parser/include/bearparser/pe/lookup Directory Reference + + @@ -30,7 +32,7 @@ - + @@ -99,7 +101,7 @@ Files
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/doxygen.css b/doxygen.css index 009a9b55..7b7d851b 100644 --- a/doxygen.css +++ b/doxygen.css @@ -1,4 +1,4 @@ -/* The standard CSS for doxygen 1.9.8*/ +/* The standard CSS for doxygen 1.10.0*/ html { /* page base colors */ @@ -145,6 +145,7 @@ html { --fragment-lineno-link-bg-color: #D8D8D8; --fragment-lineno-link-hover-fg-color: #4665A2; --fragment-lineno-link-hover-bg-color: #C8C8C8; +--fragment-copy-ok-color: #2EC82E; --tooltip-foreground-color: black; --tooltip-background-color: white; --tooltip-border-color: gray; @@ -168,6 +169,28 @@ html { --font-family-icon: Arial,Helvetica; --font-family-tooltip: Roboto,sans-serif; +/** special sections */ +--warning-color-bg: #f8d1cc; +--warning-color-hl: #b61825; +--warning-color-text: #75070f; +--note-color-bg: #faf3d8; +--note-color-hl: #f3a600; +--note-color-text: #5f4204; +--todo-color-bg: #e4f3ff; +--todo-color-hl: #1879C4; +--todo-color-text: #274a5c; +--test-color-bg: #e8e8ff; +--test-color-hl: #3939C4; +--test-color-text: #1a1a5c; +--deprecated-color-bg: #ecf0f3; +--deprecated-color-hl: #5b6269; +--deprecated-color-text: #43454a; +--bug-color-bg: #e4dafd; +--bug-color-hl: #5b2bdd; +--bug-color-text: #2a0d72; +--invariant-color-bg: #d8f1e3; +--invariant-color-hl: #44b86f; +--invariant-color-text: #265532; } @media (prefers-color-scheme: dark) { @@ -309,7 +332,7 @@ html { --code-link-color: #79C0FF; --code-external-link-color: #79C0FF; --fragment-foreground-color: #C9D1D9; ---fragment-background-color: black; +--fragment-background-color: #090D16; --fragment-border-color: #30363D; --fragment-lineno-border-color: #30363D; --fragment-lineno-background-color: black; @@ -318,6 +341,7 @@ html { --fragment-lineno-link-bg-color: #303030; --fragment-lineno-link-hover-fg-color: #8E96A1; --fragment-lineno-link-hover-bg-color: #505050; +--fragment-copy-ok-color: #0EA80E; --tooltip-foreground-color: #C9D1D9; --tooltip-background-color: #202020; --tooltip-border-color: #C9D1D9; @@ -341,6 +365,28 @@ html { --font-family-icon: Arial,Helvetica; --font-family-tooltip: Roboto,sans-serif; +/** special sections */ +--warning-color-bg: #2e1917; +--warning-color-hl: #ad2617; +--warning-color-text: #f5b1aa; +--note-color-bg: #3b2e04; +--note-color-hl: #f1b602; +--note-color-text: #ceb670; +--todo-color-bg: #163750; +--todo-color-hl: #1982D2; +--todo-color-text: #dcf0fa; +--test-color-bg: #121258; +--test-color-hl: #4242cf; +--test-color-text: #c0c0da; +--deprecated-color-bg: #2e323b; +--deprecated-color-hl: #738396; +--deprecated-color-text: #abb0bd; +--bug-color-bg: #2a2536; +--bug-color-hl: #7661b3; +--bug-color-text: #ae9ed6; +--invariant-color-bg: #303a35; +--invariant-color-hl: #76ce96; +--invariant-color-text: #cceed5; }} body { background-color: var(--page-background-color); @@ -357,8 +403,6 @@ body, table, div, p, dl { /* @group Heading Levels */ .title { - font-weight: 400; - font-size: 14px; font-family: var(--font-family-normal); line-height: 28px; font-size: 150%; @@ -556,7 +600,13 @@ a { } a:hover { - text-decoration: underline; + text-decoration: none; + background: linear-gradient(to bottom, transparent 0,transparent calc(100% - 1px), currentColor 100%); +} + +a:hover > span.arrow { + text-decoration: none; + background : var(--nav-background-color); } a.el { @@ -632,30 +682,63 @@ ul.multicol { .fragment { text-align: left; direction: ltr; - overflow-x: auto; /*Fixed: fragment lines overlap floating elements*/ + overflow-x: auto; overflow-y: hidden; + position: relative; + min-height: 12px; + margin: 10px 0px; + padding: 10px 10px; + border: 1px solid var(--fragment-border-color); + border-radius: 4px; + background-color: var(--fragment-background-color); + color: var(--fragment-foreground-color); } pre.fragment { - border: 1px solid var(--fragment-border-color); - background-color: var(--fragment-background-color); - color: var(--fragment-foreground-color); - padding: 4px 6px; - margin: 4px 8px 4px 2px; - overflow: auto; - word-wrap: break-word; - font-size: 9pt; - line-height: 125%; - font-family: var(--font-family-monospace); - font-size: 105%; + word-wrap: break-word; + font-size: 10pt; + line-height: 125%; + font-family: var(--font-family-monospace); } -div.fragment { - padding: 0 0 1px 0; /*Fixed: last line underline overlap border*/ - margin: 4px 8px 4px 2px; - color: var(--fragment-foreground-color); - background-color: var(--fragment-background-color); - border: 1px solid var(--fragment-border-color); +.clipboard { + width: 24px; + height: 24px; + right: 5px; + top: 5px; + opacity: 0; + position: absolute; + display: inline; + overflow: auto; + fill: var(--fragment-foreground-color); + justify-content: center; + align-items: center; + cursor: pointer; +} + +.clipboard.success { + border: 1px solid var(--fragment-foreground-color); + border-radius: 4px; +} + +.fragment:hover .clipboard, .clipboard.success { + opacity: .28; +} + +.clipboard:hover, .clipboard.success { + opacity: 1 !important; +} + +.clipboard:active:not([class~=success]) svg { + transform: scale(.91); +} + +.clipboard.success svg { + fill: var(--fragment-copy-ok-color); +} + +.clipboard.success { + border-color: var(--fragment-copy-ok-color); } div.line { @@ -778,10 +861,6 @@ img.light-mode-visible { display: none; } -img.formulaDsp { - -} - img.formulaInl, img.inline { vertical-align: middle; } @@ -1081,17 +1160,25 @@ dl.reflist dd { .paramtype { white-space: nowrap; + padding: 0px; + padding-bottom: 1px; } .paramname { - color: var(--memdef-param-name-color); white-space: nowrap; + padding: 0px; + padding-bottom: 1px; + margin-left: 2px; } + .paramname em { + color: var(--memdef-param-name-color); font-style: normal; + margin-right: 1px; } -.paramname code { - line-height: 14px; + +.paramname .paramdefval { + font-family: var(--font-family-monospace); } .params, .retval, .exception, .tparams { @@ -1425,7 +1512,6 @@ table.fieldtable { { height:32px; display:block; - text-decoration: none; outline: none; color: var(--nav-text-normal-color); font-family: var(--font-family-nav); @@ -1514,7 +1600,8 @@ dl { padding: 0 0 0 0; } -/* dl.note, dl.warning, dl.attention, dl.pre, dl.post, dl.invariant, dl.deprecated, dl.todo, dl.test, dl.bug, dl.examples */ +/* + dl.section { margin-left: 0px; padding-left: 0px; @@ -1569,8 +1656,101 @@ dl.bug { border-color: #C08050; } +*/ + +dl.bug dt a, dl.deprecated dt a, dl.todo dt a, dl.test a { + font-weight: bold !important; +} + +dl.warning, dl.attention, dl.note, dl.deprecated, dl.bug, +dl.invariant, dl.pre, dl.post, dl.todo, dl.test, dl.remark { + padding: 10px; + margin: 10px 0px; + overflow: hidden; + margin-left: 0; + border-radius: 4px; +} + dl.section dd { - margin-bottom: 6px; + margin-bottom: 2px; +} + +dl.warning, dl.attention { + background: var(--warning-color-bg); + border-left: 8px solid var(--warning-color-hl); + color: var(--warning-color-text); +} + +dl.warning dt, dl.attention dt { + color: var(--warning-color-hl); +} + +dl.note, dl.remark { + background: var(--note-color-bg); + border-left: 8px solid var(--note-color-hl); + color: var(--note-color-text); +} + +dl.note dt, dl.remark dt { + color: var(--note-color-hl); +} + +dl.todo { + background: var(--todo-color-bg); + border-left: 8px solid var(--todo-color-hl); + color: var(--todo-color-text); +} + +dl.todo dt { + color: var(--todo-color-hl); +} + +dl.test { + background: var(--test-color-bg); + border-left: 8px solid var(--test-color-hl); + color: var(--test-color-text); +} + +dl.test dt { + color: var(--test-color-hl); +} + +dl.bug dt a { + color: var(--bug-color-hl) !important; +} + +dl.bug { + background: var(--bug-color-bg); + border-left: 8px solid var(--bug-color-hl); + color: var(--bug-color-text); +} + +dl.bug dt a { + color: var(--bug-color-hl) !important; +} + +dl.deprecated { + background: var(--deprecated-color-bg); + border-left: 8px solid var(--deprecated-color-hl); + color: var(--deprecated-color-text); +} + +dl.deprecated dt a { + color: var(--deprecated-color-hl) !important; +} + +dl.section dd, dl.bug dd, dl.deprecated dd, dl.todo dd, dl.test dd { + margin-inline-start: 0px; +} + +dl.invariant, dl.pre, dl.post { + background: var(--invariant-color-bg); + border-left: 8px solid var(--invariant-color-hl); + color: var(--invariant-color-text); +} + +dl.invariant dt, dl.pre dt, dl.post dt { + color: var(--invariant-color-hl); } @@ -1585,12 +1765,12 @@ dl.section dd { vertical-align: bottom; border-collapse: separate; } - + #projectlogo img -{ +{ border: 0px none; } - + #projectalign { vertical-align: middle; diff --git a/doxygen_crawl.html b/doxygen_crawl.html new file mode 100644 index 00000000..322de79c --- /dev/null +++ b/doxygen_crawl.html @@ -0,0 +1,535 @@ + + + +Validator / crawler helper + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/dynsections.js b/dynsections.js index 9b281563..24dfe9c8 100644 --- a/dynsections.js +++ b/dynsections.js @@ -22,175 +22,177 @@ @licend The above is the entire license notice for the JavaScript code in this file */ -function toggleVisibility(linkObj) -{ - var base = $(linkObj).attr('id'); - var summary = $('#'+base+'-summary'); - var content = $('#'+base+'-content'); - var trigger = $('#'+base+'-trigger'); - var src=$(trigger).attr('src'); - if (content.is(':visible')===true) { - content.hide(); - summary.show(); - $(linkObj).addClass('closed').removeClass('opened'); - $(trigger).attr('src',src.substring(0,src.length-8)+'closed.png'); - } else { - content.show(); - summary.hide(); - $(linkObj).removeClass('closed').addClass('opened'); - $(trigger).attr('src',src.substring(0,src.length-10)+'open.png'); - } - return false; -} -function updateStripes() -{ - $('table.directory tr'). - removeClass('even').filter(':visible:even').addClass('even'); - $('table.directory tr'). - removeClass('odd').filter(':visible:odd').addClass('odd'); -} +let dynsection = { -function toggleLevel(level) -{ - $('table.directory tr').each(function() { - var l = this.id.split('_').length-1; - var i = $('#img'+this.id.substring(3)); - var a = $('#arr'+this.id.substring(3)); - if (l'); - // add vertical lines to other rows - $('span[class=lineno]').not(':eq(0)').append(''); - // add toggle controls to lines with fold divs - $('div[class=foldopen]').each(function() { - // extract specific id to use - var id = $(this).attr('id').replace('foldopen',''); - // extract start and end foldable fragment attributes - var start = $(this).attr('data-start'); - var end = $(this).attr('data-end'); - // replace normal fold span with controls for the first line of a foldable fragment - $(this).find('span[class=fold]:first').replaceWith(''); - // append div for folded (closed) representation - $(this).after(''); - // extract the first line from the "open" section to represent closed content - var line = $(this).children().first().clone(); - // remove any glow that might still be active on the original line - $(line).removeClass('glow'); - if (start) { - // if line already ends with a start marker (e.g. trailing {), remove it - $(line).html($(line).html().replace(new RegExp('\\s*'+start+'\\s*$','g'),'')); - } - // replace minus with plus symbol - $(line).find('span[class=fold]').css('background-image',plusImg[relPath]); - // append ellipsis - $(line).append(' '+start+'…'+end); - // insert constructed line into closed div - $('#foldclosed'+id).html(line); - }); -} + this.updateStripes(); + }, + toggleFolder : function(id) { + // the clicked row + const currentRow = $('#row_'+id); + + // all rows after the clicked row + const rows = currentRow.nextAll("tr"); + + const re = new RegExp('^row_'+id+'\\d+_$', "i"); //only one sub + + // only match elements AFTER this one (can't hide elements before) + const childRows = rows.filter(function() { return this.id.match(re); }); + + // first row is visible we are HIDING + if (childRows.filter(':first').is(':visible')===true) { + // replace down arrow by right arrow for current row + const currentRowSpans = currentRow.find("span"); + currentRowSpans.filter(".iconfopen").removeClass("iconfopen").addClass("iconfclosed"); + currentRowSpans.filter(".arrow").html('►'); + rows.filter("[id^=row_"+id+"]").hide(); // hide all children + } else { // we are SHOWING + // replace right arrow by down arrow for current row + const currentRowSpans = currentRow.find("span"); + currentRowSpans.filter(".iconfclosed").removeClass("iconfclosed").addClass("iconfopen"); + currentRowSpans.filter(".arrow").html('▼'); + // replace down arrows by right arrows for child rows + const childRowsSpans = childRows.find("span"); + childRowsSpans.filter(".iconfopen").removeClass("iconfopen").addClass("iconfclosed"); + childRowsSpans.filter(".arrow").html('►'); + childRows.show(); //show all children + } + this.updateStripes(); + }, + + toggleInherit : function(id) { + const rows = $('tr.inherit.'+id); + const img = $('tr.inherit_header.'+id+' img'); + const src = $(img).attr('src'); + if (rows.filter(':first').is(':visible')===true) { + rows.css('display','none'); + $(img).attr('src',src.substring(0,src.length-8)+'closed.png'); + } else { + rows.css('display','table-row'); // using show() causes jump in firefox + $(img).attr('src',src.substring(0,src.length-10)+'open.png'); + } + }, +}; + +let codefold = { + opened : true, + + // in case HTML_COLORSTYLE is LIGHT or DARK the vars will be replaced, so we write them out explicitly and use double quotes + plusImg: [ "var(--fold-plus-image)", "var(--fold-plus-image-relpath)" ], + minusImg: [ "var(--fold-minus-image)", "var(--fold-minus-image-relpath)" ], + + // toggle all folding blocks + toggle_all : function(relPath) { + if (this.opened) { + $('#fold_all').css('background-image',this.plusImg[relPath]); + $('div[id^=foldopen]').hide(); + $('div[id^=foldclosed]').show(); + } else { + $('#fold_all').css('background-image',this.minusImg[relPath]); + $('div[id^=foldopen]').show(); + $('div[id^=foldclosed]').hide(); + } + this.opened=!this.opened; + }, + + // toggle single folding block + toggle : function(id) { + $('#foldopen'+id).toggle(); + $('#foldclosed'+id).toggle(); + }, + + init : function(relPath) { + $('span[class=lineno]').css({ + 'padding-right':'4px', + 'margin-right':'2px', + 'display':'inline-block', + 'width':'54px', + 'background':'linear-gradient(var(--fold-line-color),var(--fold-line-color)) no-repeat 46px/2px 100%' + }); + // add global toggle to first line + $('span[class=lineno]:first').append(''); + // add vertical lines to other rows + $('span[class=lineno]').not(':eq(0)').append(''); + // add toggle controls to lines with fold divs + $('div[class=foldopen]').each(function() { + // extract specific id to use + const id = $(this).attr('id').replace('foldopen',''); + // extract start and end foldable fragment attributes + const start = $(this).attr('data-start'); + const end = $(this).attr('data-end'); + // replace normal fold span with controls for the first line of a foldable fragment + $(this).find('span[class=fold]:first').replaceWith(''); + // append div for folded (closed) representation + $(this).after(''); + // extract the first line from the "open" section to represent closed content + const line = $(this).children().first().clone(); + // remove any glow that might still be active on the original line + $(line).removeClass('glow'); + if (start) { + // if line already ends with a start marker (e.g. trailing {), remove it + $(line).html($(line).html().replace(new RegExp('\\s*'+start+'\\s*$','g'),'')); + } + // replace minus with plus symbol + $(line).find('span[class=fold]').css('background-image',codefold.plusImg[relPath]); + // append ellipsis + $(line).append(' '+start+'…'+end); + // insert constructed line into closed div + $('#foldclosed'+id).html(line); + }); + }, +}; /* @license-end */ -$(document).ready(function() { +$(function() { $('.code,.codeRef').each(function() { $(this).data('powertip',$('#a'+$(this).attr('href').replace(/.*\//,'').replace(/[^a-z_A-Z0-9]/g,'_')).html()); $.fn.powerTip.smartPlacementLists.s = [ 's', 'n', 'ne', 'se' ]; diff --git a/files.html b/files.html index eb7fb0ac..60a45773 100644 --- a/files.html +++ b/files.html @@ -3,12 +3,14 @@ - + BearParser: File List + + @@ -30,7 +32,7 @@ - + @@ -74,16 +76,16 @@ $(function() {
Here is a list of all files with brief descriptions:
-
[detail level 123456]
- - - - - +
[detail level 123456]
 ▼ parser
 ▼ include
 ▼ bearparser
 ▼ pe
 ▼ lookup
+ + + + + - + @@ -131,8 +133,8 @@ $(function() { - - + + @@ -178,7 +180,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions.html b/functions.html index b933f8c8..03b8596e 100644 --- a/functions.html +++ b/functions.html @@ -3,12 +3,14 @@ - +BearParser: Class Members + + @@ -30,7 +32,7 @@
 ▼ parser
 ▼ include
 ▼ bearparser
 ▼ pe
 ▼ lookup
 CommonOrdinalsMap.h
 CommonOrdinalsOleaut32.h
 CommonOrdinalsWS2_32.h
 ▼ rsrc
 ▼ rsrc
 pe_rsrc.h
 ResourceContentFactory.h
 ResourceContentWrapper.h
 pe.h
 Util.h
 WrappedValue.h
 ▼ pe
 ▼ rsrc
 ▼ pe
 ▼ rsrc
 ResourceContentFactory.cpp
 ResourceContentWrapper.cpp
 ResourcesAlbum.cpp
- + @@ -79,7 +81,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_a.html b/functions_a.html index 19ba6e4e..dcb4a456 100644 --- a/functions_a.html +++ b/functions_a.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_b.html b/functions_b.html index c08c90c1..1ae583b5 100644 --- a/functions_b.html +++ b/functions_b.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_c.html b/functions_c.html index 3c884072..5a705ed7 100644 --- a/functions_c.html +++ b/functions_c.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -143,7 +145,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_d.html b/functions_d.html index 0126ce85..ba57d053 100644 --- a/functions_d.html +++ b/functions_d.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -122,7 +124,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_e.html b/functions_e.html index fb8fea74..8f1b4446 100644 --- a/functions_e.html +++ b/functions_e.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -109,7 +111,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_enum.html b/functions_enum.html index 58cccacf..b9984207 100644 --- a/functions_enum.html +++ b/functions_enum.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerations + + @@ -30,7 +32,7 @@ - + @@ -133,7 +135,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval.html b/functions_eval.html index e323ec79..b9851f3f 100644 --- a/functions_eval.html +++ b/functions_eval.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -79,7 +81,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_b.html b/functions_eval_b.html index 6d2ba105..94be527e 100644 --- a/functions_eval_b.html +++ b/functions_eval_b.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_c.html b/functions_eval_c.html index 16a17206..1db636c1 100644 --- a/functions_eval_c.html +++ b/functions_eval_c.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -111,7 +113,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_d.html b/functions_eval_d.html index d79ee5f1..82370114 100644 --- a/functions_eval_d.html +++ b/functions_eval_d.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -89,7 +91,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_e.html b/functions_eval_e.html index 2a9a2ac0..af34f4ff 100644 --- a/functions_eval_e.html +++ b/functions_eval_e.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_f.html b/functions_eval_f.html index f0d3bd64..4463609a 100644 --- a/functions_eval_f.html +++ b/functions_eval_f.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_g.html b/functions_eval_g.html index 5522ae84..8d4abf15 100644 --- a/functions_eval_g.html +++ b/functions_eval_g.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_h.html b/functions_eval_h.html index 7ba2b5aa..6532a1e2 100644 --- a/functions_eval_h.html +++ b/functions_eval_h.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_i.html b/functions_eval_i.html index 26b49782..f320e622 100644 --- a/functions_eval_i.html +++ b/functions_eval_i.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -89,7 +91,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_l.html b/functions_eval_l.html index acc29af5..10b6704e 100644 --- a/functions_eval_l.html +++ b/functions_eval_l.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_m.html b/functions_eval_m.html index 0fd1cc42..809900f3 100644 --- a/functions_eval_m.html +++ b/functions_eval_m.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -95,7 +97,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_n.html b/functions_eval_n.html index dd06637b..1d4d9f87 100644 --- a/functions_eval_n.html +++ b/functions_eval_n.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -86,7 +88,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_o.html b/functions_eval_o.html index 1e322605..a7792906 100644 --- a/functions_eval_o.html +++ b/functions_eval_o.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -87,7 +89,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_p.html b/functions_eval_p.html index 07cc2c3b..112a92c7 100644 --- a/functions_eval_p.html +++ b/functions_eval_p.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_r.html b/functions_eval_r.html index 0891f26d..23ec882b 100644 --- a/functions_eval_r.html +++ b/functions_eval_r.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -96,7 +98,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_s.html b/functions_eval_s.html index c131f183..54843720 100644 --- a/functions_eval_s.html +++ b/functions_eval_s.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -102,7 +104,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_t.html b/functions_eval_t.html index 056f0ad6..08c8bc2b 100644 --- a/functions_eval_t.html +++ b/functions_eval_t.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_u.html b/functions_eval_u.html index df6dc4d9..7052280e 100644 --- a/functions_eval_u.html +++ b/functions_eval_u.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -82,7 +84,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_v.html b/functions_eval_v.html index 4dbd919a..6d84daeb 100644 --- a/functions_eval_v.html +++ b/functions_eval_v.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_w.html b/functions_eval_w.html index 7787e8ca..546981eb 100644 --- a/functions_eval_w.html +++ b/functions_eval_w.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -88,7 +90,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_eval_z.html b/functions_eval_z.html index e20fbb8a..93f9ff5d 100644 --- a/functions_eval_z.html +++ b/functions_eval_z.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Enumerator + + @@ -30,7 +32,7 @@ - + @@ -78,7 +80,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_f.html b/functions_f.html index 76921807..4479857b 100644 --- a/functions_f.html +++ b/functions_f.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -112,7 +114,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func.html b/functions_func.html index e35048d6..92388858 100644 --- a/functions_func.html +++ b/functions_func.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -79,7 +81,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_a.html b/functions_func_a.html index dbc18905..ed74b795 100644 --- a/functions_func_a.html +++ b/functions_func_a.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -85,7 +87,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_b.html b/functions_func_b.html index 4b5af99d..acd47f2f 100644 --- a/functions_func_b.html +++ b/functions_func_b.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -84,7 +86,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_c.html b/functions_func_c.html index 7f33502a..caddfd36 100644 --- a/functions_func_c.html +++ b/functions_func_c.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -105,7 +107,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_d.html b/functions_func_d.html index 0ebffdbc..fdad9ec7 100644 --- a/functions_func_d.html +++ b/functions_func_d.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_e.html b/functions_func_e.html index dc87f8cb..83bbb147 100644 --- a/functions_func_e.html +++ b/functions_func_e.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_f.html b/functions_func_f.html index 2f6cf4ed..df1f1b5d 100644 --- a/functions_func_f.html +++ b/functions_func_f.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -89,7 +91,7 @@ $(function() {
-Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
diff --git a/functions_func_g.html b/functions_func_g.html index ed16fc12..54a21cd9 100644 --- a/functions_func_g.html +++ b/functions_func_g.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -199,7 +201,7 @@ $(function() {
  • getShortName() : ImportBaseFuncWrapper
  • getSignature() : DebugDirCVEntryWrapper
  • getSize() : BoundEntryWrapper, BoundImpDirWrapper, ClrDirWrapper, DataDirWrapper, DebugDirCVEntryWrapper, DebugDirEntryWrapper, DebugDirWrapper, DelayImpDirWrapper, DelayImpEntryWrapper, DelayImpFuncWrapper, DosHdrWrapper, ExceptionDirWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExportDirWrapper, ExportEntryWrapper, FileHdrWrapper, ImportDirWrapper, ImportedFuncWrapper, ImportEntryWrapper, LdConfigDirWrapper, LdConfigEntryWrapper, OptHdrWrapper, RelocBlockWrapper, RelocDirWrapper, RelocEntryWrapper, ResourceContentWrapper, ResourceDirWrapper, ResourceEntryWrapper, ResourceLeafWrapper, ResourceVersionWrapper, ResString, RichHdrWrapper, SectHdrsWrapper, SectionHdrWrapper, SecurityDirWrapper, TlsDirWrapper, TlsEntryWrapper
    • -
  • getStringValue() : AbstractByteBuffer
    • +
  • getStringValue() : AbstractByteBuffer
  • getStrLen() : ResString
  • getSubfieldName() : ExeNodeWrapper
  • getSubfieldPtr() : ExeNodeWrapper
    • @@ -218,7 +220,7 @@ $(function() {
  • getVersionInfo() : ResourceVersionWrapper
  • getVersionText() : ResourceVersionWrapper
  • getVirtualPtr() : SectionHdrWrapper
    • -
  • getWAsciiStringValue() : AbstractByteBuffer
    • +
  • getWAsciiStringValue() : AbstractByteBuffer
  • getWrappedValue() : ExeElementWrapper
  • getWrapper() : ExeWrappersContainer
  • getWrapperAt() : ResourcesContainer
    • @@ -228,7 +230,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_h.html b/functions_func_h.html index dddb0132..c5ab6a18 100644 --- a/functions_func_h.html +++ b/functions_func_h.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -86,7 +88,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_i.html b/functions_func_i.html index 11a2ef86..da18c199 100644 --- a/functions_func_i.html +++ b/functions_func_i.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -108,7 +110,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_l.html b/functions_func_l.html index 86daeb39..f275eae4 100644 --- a/functions_func_l.html +++ b/functions_func_l.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -81,7 +83,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_m.html b/functions_func_m.html index f2a9ed10..b8502727 100644 --- a/functions_func_m.html +++ b/functions_func_m.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -87,7 +89,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_n.html b/functions_func_n.html index c78443e4..87a2007d 100644 --- a/functions_func_n.html +++ b/functions_func_n.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -79,7 +81,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_o.html b/functions_func_o.html index ac51b580..25849305 100644 --- a/functions_func_o.html +++ b/functions_func_o.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -79,7 +81,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_p.html b/functions_func_p.html index 2b4d80b3..47674fed 100644 --- a/functions_func_p.html +++ b/functions_func_p.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -93,7 +95,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_r.html b/functions_func_r.html index fd87a50b..874a0ff6 100644 --- a/functions_func_r.html +++ b/functions_func_r.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -101,7 +103,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_s.html b/functions_func_s.html index 87d6a00e..20eb91b8 100644 --- a/functions_func_s.html +++ b/functions_func_s.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -98,7 +100,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_t.html b/functions_func_t.html index 24087d8c..068d9ff9 100644 --- a/functions_func_t.html +++ b/functions_func_t.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -98,7 +100,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_u.html b/functions_func_u.html index 0cda745c..fad94576 100644 --- a/functions_func_u.html +++ b/functions_func_u.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -78,7 +80,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_v.html b/functions_func_v.html index 51ff4169..bc99226f 100644 --- a/functions_func_v.html +++ b/functions_func_v.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -79,7 +81,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_w.html b/functions_func_w.html index 74b5b687..07587a49 100644 --- a/functions_func_w.html +++ b/functions_func_w.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -82,7 +84,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_func_~.html b/functions_func_~.html index dfef57ad..1967ccd0 100644 --- a/functions_func_~.html +++ b/functions_func_~.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Functions + + @@ -30,7 +32,7 @@ - + @@ -104,7 +106,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_g.html b/functions_g.html index 44bf44a0..21a926ca 100644 --- a/functions_g.html +++ b/functions_g.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -199,7 +201,7 @@ $(function() {
  • getShortName() : ImportBaseFuncWrapper
  • getSignature() : DebugDirCVEntryWrapper
  • getSize() : BoundEntryWrapper, BoundImpDirWrapper, ClrDirWrapper, DataDirWrapper, DebugDirCVEntryWrapper, DebugDirEntryWrapper, DebugDirWrapper, DelayImpDirWrapper, DelayImpEntryWrapper, DelayImpFuncWrapper, DosHdrWrapper, ExceptionDirWrapper, ExceptionEntryWrapper, ExeElementWrapper, ExportDirWrapper, ExportEntryWrapper, FileHdrWrapper, ImportDirWrapper, ImportedFuncWrapper, ImportEntryWrapper, LdConfigDirWrapper, LdConfigEntryWrapper, OptHdrWrapper, RelocBlockWrapper, RelocDirWrapper, RelocEntryWrapper, ResourceContentWrapper, ResourceDirWrapper, ResourceEntryWrapper, ResourceLeafWrapper, ResourceVersionWrapper, ResString, RichHdrWrapper, SectHdrsWrapper, SectionHdrWrapper, SecurityDirWrapper, TlsDirWrapper, TlsEntryWrapper
    • -
  • getStringValue() : AbstractByteBuffer
    • +
  • getStringValue() : AbstractByteBuffer
  • getStrLen() : ResString
  • getSubfieldName() : ExeNodeWrapper
  • getSubfieldPtr() : ExeNodeWrapper
    • @@ -218,7 +220,7 @@ $(function() {
  • getVersionInfo() : ResourceVersionWrapper
  • getVersionText() : ResourceVersionWrapper
  • getVirtualPtr() : SectionHdrWrapper
    • -
  • getWAsciiStringValue() : AbstractByteBuffer
    • +
  • getWAsciiStringValue() : AbstractByteBuffer
  • getWrappedValue() : ExeElementWrapper
  • getWrapper() : ExeWrappersContainer
  • getWrapperAt() : ResourcesContainer
    • @@ -244,7 +246,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_h.html b/functions_h.html index e2edbbd3..deb9e47b 100644 --- a/functions_h.html +++ b/functions_h.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_i.html b/functions_i.html index 780fc27b..ba75ec9d 100644 --- a/functions_i.html +++ b/functions_i.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -125,7 +127,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_l.html b/functions_l.html index 895b54c9..6da24c6f 100644 --- a/functions_l.html +++ b/functions_l.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -92,7 +94,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_m.html b/functions_m.html index 57400d15..ae145158 100644 --- a/functions_m.html +++ b/functions_m.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -120,7 +122,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_n.html b/functions_n.html index 16f2b211..dd314b1f 100644 --- a/functions_n.html +++ b/functions_n.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -91,7 +93,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_o.html b/functions_o.html index 9279aa33..0ba98678 100644 --- a/functions_o.html +++ b/functions_o.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_p.html b/functions_p.html index 263ac8f5..4b477f5c 100644 --- a/functions_p.html +++ b/functions_p.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -105,7 +107,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_r.html b/functions_r.html index 0b738f6e..488bbe04 100644 --- a/functions_r.html +++ b/functions_r.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -126,7 +128,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_rela.html b/functions_rela.html index 594f2776..34a2a45a 100644 --- a/functions_rela.html +++ b/functions_rela.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Related Symbols + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_s.html b/functions_s.html index 7977c6ef..66f68239 100644 --- a/functions_s.html +++ b/functions_s.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -138,7 +140,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_t.html b/functions_t.html index c8850bc4..80d73fbd 100644 --- a/functions_t.html +++ b/functions_t.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -111,7 +113,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_u.html b/functions_u.html index e9a04edf..14b0ef3f 100644 --- a/functions_u.html +++ b/functions_u.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -83,7 +85,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_v.html b/functions_v.html index c7982127..8a3ee738 100644 --- a/functions_v.html +++ b/functions_v.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -88,7 +90,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_vars.html b/functions_vars.html index 397c5e46..f8979653 100644 --- a/functions_vars.html +++ b/functions_vars.html @@ -3,12 +3,14 @@ - + BearParser: Class Members - Variables + + @@ -30,7 +32,7 @@ - + @@ -225,7 +227,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_w.html b/functions_w.html index 73de1307..51647ca4 100644 --- a/functions_w.html +++ b/functions_w.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -97,7 +99,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_z.html b/functions_z.html index e6916738..a841fa42 100644 --- a/functions_z.html +++ b/functions_z.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -78,7 +80,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/functions_~.html b/functions_~.html index 8d81d089..5b3b9f79 100644 --- a/functions_~.html +++ b/functions_~.html @@ -3,12 +3,14 @@ - + BearParser: Class Members + + @@ -30,7 +32,7 @@ - + @@ -104,7 +106,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/globals.html b/globals.html index 14f2a407..94f0c90c 100644 --- a/globals.html +++ b/globals.html @@ -3,12 +3,14 @@ - + BearParser: File Members + + @@ -30,7 +32,7 @@ - + @@ -154,7 +156,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/globals_defs.html b/globals_defs.html index 37dad8c5..e730c148 100644 --- a/globals_defs.html +++ b/globals_defs.html @@ -3,12 +3,14 @@ - + BearParser: File Members + + @@ -30,7 +32,7 @@ - + @@ -94,7 +96,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/globals_func.html b/globals_func.html index 859dd96f..704d3912 100644 --- a/globals_func.html +++ b/globals_func.html @@ -3,12 +3,14 @@ - + BearParser: File Members + + @@ -30,7 +32,7 @@ - + @@ -81,7 +83,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/globals_type.html b/globals_type.html index 9f2580a1..c7aca21f 100644 --- a/globals_type.html +++ b/globals_type.html @@ -3,12 +3,14 @@ - + BearParser: File Members + + @@ -30,7 +32,7 @@ - + @@ -77,7 +79,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/globals_vars.html b/globals_vars.html index d540eef4..b03810b4 100644 --- a/globals_vars.html +++ b/globals_vars.html @@ -3,12 +3,14 @@ - + BearParser: File Members + + @@ -30,7 +32,7 @@ - + @@ -81,7 +83,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/graph_legend.html b/graph_legend.html index 36d9b38c..412f2b60 100644 --- a/graph_legend.html +++ b/graph_legend.html @@ -3,12 +3,14 @@ - + BearParser: Graph Legend + + @@ -30,7 +32,7 @@ - + @@ -137,7 +139,7 @@ A yellow dashed arrow denotes a relation between a template instance and the tem
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/hierarchy.html b/hierarchy.html index cc48e862..5b8f7066 100644 --- a/hierarchy.html +++ b/hierarchy.html @@ -3,12 +3,14 @@ - + BearParser: Class Hierarchy + + @@ -30,7 +32,7 @@ - + @@ -76,26 +78,26 @@ $(function() {

    Go to the graphical class hierarchy

    This inheritance list is sorted roughly, but not completely, alphabetically:
    -
    [detail level 1234567]
    - +
    [detail level 1234567]
     ▼CAbstractByteBuffer
    + - + - + - - + + - + @@ -104,10 +106,10 @@ This inheritance list is sorted roughly, but not completely, alphabetically: - + - + @@ -116,46 +118,46 @@ This inheritance list is sorted roughly, but not completely, alphabetically: - + - + - - + + - + - - + + - + - - - + + + - + - + @@ -167,7 +169,7 @@ This inheritance list is sorted roughly, but not completely, alphabetically:
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/index.html b/index.html index 95faf29c..bf008b4b 100644 --- a/index.html +++ b/index.html @@ -3,12 +3,14 @@ - +BearParser: Main Page + + @@ -30,7 +32,7 @@
     ▼CAbstractByteBuffer
     CBufferView
     CByteBuffer
     ▼CExeElementWrapper
     ▼CExeElementWrapper
     CDosHdrWrapper
     ▼CExeNodeWrapper
     ▼CExeNodeWrapper
     CBoundEntryWrapper
     CDebugDirCVEntryWrapper
     CExceptionEntryWrapper
     CExportEntryWrapper
     CLdConfigEntryWrapper
     ▼CPENodeWrapper
     ▼CDataDirEntryWrapper
     ▼CPENodeWrapper
     ▼CDataDirEntryWrapper
     CBoundImpDirWrapper
     CClrDirWrapper
     CDebugDirWrapper
     CExceptionDirWrapper
     CExportDirWrapper
     ▼CImportBaseDirWrapper
     ▼CImportBaseDirWrapper
     CDelayImpDirWrapper
     CImportDirWrapper
     CLdConfigDirWrapper
     CSecurityDirWrapper
     CTlsDirWrapper
     CDebugDirEntryWrapper
     ▼CImportBaseEntryWrapper
     ▼CImportBaseEntryWrapper
     CDelayImpEntryWrapper
     CImportEntryWrapper
     ▼CImportBaseFuncWrapper
     ▼CImportBaseFuncWrapper
     CDelayImpFuncWrapper
     CImportedFuncWrapper
     CResourceEntryWrapper
     CRelocBlockWrapper
     CRelocEntryWrapper
     CResString
     ▼CResourceContentWrapper
     ▼CResourceContentWrapper
     CReourceHTMLWrapper
     CReourceManifestWrapper
     CResourceStringsWrapper
     CResourceVersionWrapper
     CResourceLeafWrapper
     CTlsEntryWrapper
     ▼CPEElementWrapper
     ▼CPEElementWrapper
     CDataDirWrapper
     CFileHdrWrapper
     COptHdrWrapper
     CRichHdrWrapper
     ▼CExecutable
     ▼CMappedExe
     ▼CExecutable
     ▼CMappedExe
     CDOSExe
     CPEFile
     CFileBuffer
     CFileView
     ▼CAbstractFileBuffer
     ▼CAbstractFileBuffer
     CFileBuffer
     CFileView
     ▼CAbstractFormatter
     ▼CFormatter
     ▼CAbstractFormatter
     ▼CFormatter
     CHexFormatter
     CCommonOrdinalsLookup
     ▼CCommonOrdinalsMap
     ▼CCommonOrdinalsMap
     CCommonOrdinalsOleaut32
     CCommonOrdinalsWS2_32
     ▼Cstd::exception
     ▼CCustomException
     ▼CBufferException
     ▼Cstd::exception
     ▼CCustomException
     ▼CBufferException
     CFileBufferException
     CExeException
     CExeFactoryException
     CParserException
     ▼CExeBuilder
     ▼CExeBuilder
     CDOSExeBuilder
     CPEFileBuilder
     CExeFactory
     ▼CExeWrappersContainer
     ▼CExeWrappersContainer
     CMappedExe
     CPECore
     CResourceContentFactory
    - + @@ -73,10 +75,11 @@ $(function() {
    BearParser Documentation
    +
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/inherits.html b/inherits.html index 50848f5f..dd6a4934 100644 --- a/inherits.html +++ b/inherits.html @@ -3,12 +3,14 @@ - + BearParser: Class Hierarchy + + @@ -30,7 +32,7 @@ - + @@ -281,7 +283,7 @@ $(function() {
    -Generated by doxygen 1.9.8 +Generated by doxygen 1.10.0
    diff --git a/menu.js b/menu.js index b0b26936..717761d0 100644 --- a/menu.js +++ b/menu.js @@ -24,13 +24,12 @@ */ function initMenu(relPath,searchEnabled,serverSide,searchPage,search) { function makeTree(data,relPath) { - var result=''; + let result=''; if ('children' in data) { result+='