admin/hasherezade-bearparser
1
0
Fork 0
mirror of https://github.com/hasherezade/bearparser synced 2026-06-08 14:32:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
gh-pages
hasherezade-bearparser/_p_e_core_8cpp_source.html
T
hasherezade 442119e5b8 deploy: c18e939d7e
2026-06-03 14:23:09 +00:00

357 lines
55 KiB
HTML
Raw Permalink Blame History

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=11"/>
<meta name="generator" content="Doxygen 1.17.0"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>BearParser: parser/pe/PECore.cpp Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="codefolding.js"></script>
<script type="text/javascript" src="clipboard.js"></script>
<script type="text/javascript" src="cookie.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<script type="module">
import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';
const theme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'default';
mermaid.initialize({ startOnLoad: true, theme: theme });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr id="projectrow">
<td id="projectalign">
<div id="projectname">BearParser
</div>
<div id="projectbrief">Portable Executable parsing library (from PE-bear)</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.17.0 -->
<script type="text/javascript">
let searchBox = new SearchBox("searchBox", "search/",'.html');
</script>
<script type="text/javascript">
document.addEventListener('DOMContentLoaded', codefold.init);
</script>
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
document.addEventListener('DOMContentLoaded', () => {
initMenu('',false);
init_search();
});
</script>
<div id="main-nav-mobile">
<div class="sm sm-dox"><input id="main-menu-state" type="checkbox"/>
<label class="main-menu-btn" for="main-menu-state">
<span class="main-menu-btn-icon"></span> Toggle main menu visibility</label>
<span id="searchBoxPos1" style="position:absolute;right:8px;top:8px;height:36px;"></span>
</div>
</div><!-- main-nav-mobile -->
<div id="main-nav">
<ul class="sm sm-dox" id="main-menu">
<li id="searchBoxPos2" style="float:right">
<div id="MSearchBox" class="MSearchBoxInactive">
<span class="left">
<span id="MSearchSelect" class="search-icon" onmouseover="return searchBox.OnSearchSelectShow()" onmouseout="return searchBox.OnSearchSelectHide()"><span class="search-icon-dropdown"></span></span>
<input type="text" id="MSearchField" value="" placeholder="Search" accesskey="S"
onfocus="searchBox.OnSearchFieldFocus(true)"
onblur="searchBox.OnSearchFieldFocus(false)"
onkeyup="searchBox.OnSearchFieldChange(event)"/>
</span><span class="right">
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><div id="MSearchCloseImg" class="close-icon"></div></a>
</span>
</div>
</li>
</ul>
</div><!-- main-nav -->
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<div id="MSearchResults">
<div class="SRPage">
<div id="SRIndex">
<div id="SRResults"></div>
<div class="SRStatus" id="Loading">Loading...</div>
<div class="SRStatus" id="Searching">Searching...</div>
<div class="SRStatus" id="NoMatches">No Matches</div>
</div>
</div>
</div>
</div>
<div id="nav-path" class="navpath">
<ul>
<li class="navelem"><a href="dir_572890c148f68441e050f6560d78312b.html">parser</a></li><li class="navelem"><a href="dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html">pe</a></li> </ul>
</div>
</div><!-- top -->
<div id="doc-content">
<div class="header">
<div class="headertitle"><div class="title">PECore.cpp</div></div>
</div><!--header-->
<div class="contents">
<a href="_p_e_core_8cpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a id="l00001" name="l00001"></a><span class="lineno"> 1</span><span class="preprocessor">#include &quot;<a class="code" href="_p_e_core_8h.html">pe/PECore.h</a>&quot;</span></div>
<div class="line"><a id="l00002" name="l00002"></a><span class="lineno"> 2</span> </div>
<div class="line"><a id="l00003" name="l00003"></a><span class="lineno"><a class="line" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5"> 3</a></span><span class="preprocessor">#define DEFAULT_IMGBASE 0x10000</span></div>
<div class="line"><a id="l00004" name="l00004"></a><span class="lineno"> 4</span> </div>
<div class="foldopen" id="foldopen00005" data-start="{" data-end="}">
<div class="line"><a id="l00005" name="l00005"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec"> 5</a></span><span class="keywordtype">void</span> <a class="code hl_function" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a>()</div>
<div class="line"><a id="l00006" name="l00006"></a><span class="lineno"> 6</span>{</div>
<div class="line"><a id="l00007" name="l00007"></a><span class="lineno"> 7</span> <a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = NULL;</div>
<div class="line"><a id="l00008" name="l00008"></a><span class="lineno"> 8</span> <a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = NULL;</div>
<div class="line"><a id="l00009" name="l00009"></a><span class="lineno"> 9</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = NULL;</div>
<div class="line"><a id="l00010" name="l00010"></a><span class="lineno"> 10</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = NULL;</div>
<div class="line"><a id="l00011" name="l00011"></a><span class="lineno"> 11</span>}</div>
</div>
<div class="line"><a id="l00012" name="l00012"></a><span class="lineno"> 12</span> </div>
<div class="foldopen" id="foldopen00013" data-start="{" data-end="}">
<div class="line"><a id="l00013" name="l00013"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c"> 13</a></span><span class="keywordtype">bool</span> <a class="code hl_function" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a>(<a class="code hl_class" href="class_abstract_byte_buffer.html">AbstractByteBuffer</a> *v_buf)</div>
<div class="line"><a id="l00014" name="l00014"></a><span class="lineno"> 14</span>{</div>
<div class="line"><a id="l00015" name="l00015"></a><span class="lineno"> 15</span> <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a> = v_buf;</div>
<div class="line"><a id="l00016" name="l00016"></a><span class="lineno"> 16</span> <span class="keyword">const</span> <span class="keywordtype">bool</span> allowExceptionsFromBuffer = <span class="keyword">false</span>;</div>
<div class="line"><a id="l00017" name="l00017"></a><span class="lineno"> 17</span> </div>
<div class="line"><a id="l00018" name="l00018"></a><span class="lineno"> 18</span> <span class="comment">// reset all:</span></div>
<div class="line"><a id="l00019" name="l00019"></a><span class="lineno"> 19</span> <a class="code hl_function" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">reset</a>();</div>
<div class="line"><a id="l00020" name="l00020"></a><span class="lineno"> 20</span> </div>
<div class="line"><a id="l00021" name="l00021"></a><span class="lineno"> 21</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = 0;</div>
<div class="line"><a id="l00022" name="l00022"></a><span class="lineno"> 22</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = (IMAGE_DOS_HEADER*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;getContentAt(offset, <span class="keyword">sizeof</span>(IMAGE_DOS_HEADER), allowExceptionsFromBuffer);</div>
<div class="line"><a id="l00023" name="l00023"></a><span class="lineno"> 23</span> <span class="keywordflow">if</span> (!<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore: invalid DOS Header!&quot;</span>);</div>
<div class="line"><a id="l00024" name="l00024"></a><span class="lineno"> 24</span> </div>
<div class="line"><a id="l00025" name="l00025"></a><span class="lineno"> 25</span> offset = <a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>-&gt;e_lfanew + <span class="keyword">sizeof</span>(DWORD); <span class="comment">//skip &#39;PE&#39; signature</span></div>
<div class="line"><a id="l00026" name="l00026"></a><span class="lineno"> 26</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = (IMAGE_FILE_HEADER*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;getContentAt(offset, <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER), allowExceptionsFromBuffer);</div>
<div class="line"><a id="l00027" name="l00027"></a><span class="lineno"> 27</span> <span class="keywordflow">if</span> (!<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore!&quot;</span>);</div>
<div class="line"><a id="l00028" name="l00028"></a><span class="lineno"> 28</span> </div>
<div class="line"><a id="l00029" name="l00029"></a><span class="lineno"> 29</span> offset = offset + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
<div class="line"><a id="l00030" name="l00030"></a><span class="lineno"> 30</span> WORD *magic = (WORD*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;getContentAt(offset, <span class="keyword">sizeof</span>(WORD), allowExceptionsFromBuffer);</div>
<div class="line"><a id="l00031" name="l00031"></a><span class="lineno"> 31</span> <span class="keywordflow">if</span> (!magic) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore: invalid FileHeader&quot;</span>);</div>
<div class="line"><a id="l00032" name="l00032"></a><span class="lineno"> 32</span> </div>
<div class="line"><a id="l00033" name="l00033"></a><span class="lineno"> 33</span> <span class="keyword">const</span> <a class="code hl_enumeration" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> mode = ((*magic) == pe::OH_NT64) ? <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a> : <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
<div class="line"><a id="l00034" name="l00034"></a><span class="lineno"> 34</span> <span class="keyword">const</span> <span class="keywordtype">size_t</span> ntHdrSize = (mode == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>) ? <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER32) : <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER64);</div>
<div class="line"><a id="l00035" name="l00035"></a><span class="lineno"> 35</span> BYTE *ntHdrPtr = <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;getContentAt(offset, ntHdrSize, allowExceptionsFromBuffer);</div>
<div class="line"><a id="l00036" name="l00036"></a><span class="lineno"> 36</span> </div>
<div class="line"><a id="l00037" name="l00037"></a><span class="lineno"> 37</span> <span class="keywordflow">if</span> (ntHdrPtr) {</div>
<div class="line"><a id="l00038" name="l00038"></a><span class="lineno"> 38</span> <span class="keywordflow">if</span> (mode == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>) {</div>
<div class="line"><a id="l00039" name="l00039"></a><span class="lineno"> 39</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = (IMAGE_OPTIONAL_HEADER32*)ntHdrPtr;</div>
<div class="line"><a id="l00040" name="l00040"></a><span class="lineno"> 40</span> }</div>
<div class="line"><a id="l00041" name="l00041"></a><span class="lineno"> 41</span> <span class="keywordflow">else</span> <span class="keywordflow">if</span> (mode == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>) {</div>
<div class="line"><a id="l00042" name="l00042"></a><span class="lineno"> 42</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = (IMAGE_OPTIONAL_HEADER64*)ntHdrPtr;</div>
<div class="line"><a id="l00043" name="l00043"></a><span class="lineno"> 43</span> }</div>
<div class="line"><a id="l00044" name="l00044"></a><span class="lineno"> 44</span> }</div>
<div class="line"><a id="l00045" name="l00045"></a><span class="lineno"> 45</span> <span class="keywordflow">if</span> (!this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> &amp;&amp; !this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00046" name="l00046"></a><span class="lineno"> 46</span> <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore: invalid OptionalHeader&quot;</span>);</div>
<div class="line"><a id="l00047" name="l00047"></a><span class="lineno"> 47</span> }</div>
<div class="line"><a id="l00048" name="l00048"></a><span class="lineno"> 48</span> <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
<div class="line"><a id="l00049" name="l00049"></a><span class="lineno"> 49</span>}</div>
</div>
<div class="line"><a id="l00050" name="l00050"></a><span class="lineno"> 50</span> </div>
<div class="foldopen" id="foldopen00051" data-start="{" data-end="}">
<div class="line"><a id="l00051" name="l00051"></a><span class="lineno"><a class="line" href="class_p_e_core.html#ae19b9fc1ba78c32982baeda811479de1"> 51</a></span><a class="code hl_enumeration" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> <a class="code hl_function" href="class_p_e_core.html#ae19b9fc1ba78c32982baeda811479de1">PECore::getHdrBitMode</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00052" name="l00052"></a><span class="lineno"> 52</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00053" name="l00053"></a><span class="lineno"> 53</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
<div class="line"><a id="l00054" name="l00054"></a><span class="lineno"> 54</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>;</div>
<div class="line"><a id="l00055" name="l00055"></a><span class="lineno"> 55</span> </div>
<div class="line"><a id="l00056" name="l00056"></a><span class="lineno"> 56</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>; <span class="comment">// DEFAULT</span></div>
<div class="line"><a id="l00057" name="l00057"></a><span class="lineno"> 57</span>}</div>
</div>
<div class="line"><a id="l00058" name="l00058"></a><span class="lineno"> 58</span> </div>
<div class="foldopen" id="foldopen00059" data-start="{" data-end="}">
<div class="line"><a id="l00059" name="l00059"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a00f6d0de42b02aecf689fd649997caa1"> 59</a></span><a class="code hl_enumeration" href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186">Executable::exe_arch</a> <a class="code hl_function" href="class_p_e_core.html#a00f6d0de42b02aecf689fd649997caa1">PECore::getHdrArch</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00060" name="l00060"></a><span class="lineno"> 60</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00061" name="l00061"></a><span class="lineno"> 61</span> <span class="keywordflow">if</span> (!this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>) {</div>
<div class="line"><a id="l00062" name="l00062"></a><span class="lineno"> 62</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186a3b36fcfbe78f5f2320d8f0d68f7947b8">Executable::ARCH_UNKNOWN</a>;</div>
<div class="line"><a id="l00063" name="l00063"></a><span class="lineno"> 63</span> }</div>
<div class="line"><a id="l00064" name="l00064"></a><span class="lineno"> 64</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>-&gt;Machine == M_I386 || this-&gt;fHdr-&gt;Machine == M_AMD64) {</div>
<div class="line"><a id="l00065" name="l00065"></a><span class="lineno"> 65</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186ad4e524138a13dd7b5d94fcdf007fdc0f">Executable::ARCH_INTEL</a>;</div>
<div class="line"><a id="l00066" name="l00066"></a><span class="lineno"> 66</span> }</div>
<div class="line"><a id="l00067" name="l00067"></a><span class="lineno"> 67</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>-&gt;Machine == M_ARM || this-&gt;fHdr-&gt;Machine == M_ARM64LE) {</div>
<div class="line"><a id="l00068" name="l00068"></a><span class="lineno"> 68</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186aae269d4846788edce37e4dc8d721b067">Executable::ARCH_ARM</a>;</div>
<div class="line"><a id="l00069" name="l00069"></a><span class="lineno"> 69</span> }</div>
<div class="line"><a id="l00070" name="l00070"></a><span class="lineno"> 70</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186a3b36fcfbe78f5f2320d8f0d68f7947b8">Executable::ARCH_UNKNOWN</a>;</div>
<div class="line"><a id="l00071" name="l00071"></a><span class="lineno"> 71</span>}</div>
</div>
<div class="line"><a id="l00072" name="l00072"></a><span class="lineno"> 72</span> </div>
<div class="foldopen" id="foldopen00073" data-start="{" data-end="}">
<div class="line"><a id="l00073" name="l00073"></a><span class="lineno"><a class="line" href="class_p_e_core.html#aa2ff4665d8b56b2a5e1e1e00bc446b18"> 73</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#aa2ff4665d8b56b2a5e1e1e00bc446b18">PECore::peSignatureOffset</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00074" name="l00074"></a><span class="lineno"> 74</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00075" name="l00075"></a><span class="lineno"> 75</span> <span class="keywordflow">if</span> (!<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>) <span class="keywordflow">return</span> <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00076" name="l00076"></a><span class="lineno"> 76</span> <span class="keywordflow">return</span> <span class="keyword">static_cast&lt;</span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">&gt;</span> (<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>-&gt;e_lfanew);</div>
<div class="line"><a id="l00077" name="l00077"></a><span class="lineno"> 77</span>}</div>
</div>
<div class="line"><a id="l00078" name="l00078"></a><span class="lineno"> 78</span> </div>
<div class="foldopen" id="foldopen00079" data-start="{" data-end="}">
<div class="line"><a id="l00079" name="l00079"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a809ce6d61e968f409e6d630514b224bb"> 79</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a809ce6d61e968f409e6d630514b224bb">PECore::peFileHdrOffset</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00080" name="l00080"></a><span class="lineno"> 80</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00081" name="l00081"></a><span class="lineno"> 81</span> <span class="keyword">const</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code hl_function" href="class_p_e_core.html#aa2ff4665d8b56b2a5e1e1e00bc446b18">peSignatureOffset</a>();</div>
<div class="line"><a id="l00082" name="l00082"></a><span class="lineno"> 82</span> <span class="keywordflow">if</span> (offset == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00083" name="l00083"></a><span class="lineno"> 83</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00084" name="l00084"></a><span class="lineno"> 84</span> }</div>
<div class="line"><a id="l00085" name="l00085"></a><span class="lineno"> 85</span> <span class="keyword">const</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> signSize = <span class="keyword">sizeof</span>(DWORD);</div>
<div class="line"><a id="l00086" name="l00086"></a><span class="lineno"> 86</span> <span class="keywordflow">return</span> offset + signSize;</div>
<div class="line"><a id="l00087" name="l00087"></a><span class="lineno"> 87</span>}</div>
</div>
<div class="line"><a id="l00088" name="l00088"></a><span class="lineno"> 88</span> </div>
<div class="foldopen" id="foldopen00089" data-start="{" data-end="}">
<div class="line"><a id="l00089" name="l00089"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a6bf58c2b373385ac5ce05aa676dc43b7"> 89</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a6bf58c2b373385ac5ce05aa676dc43b7">PECore::peOptHdrOffset</a>()<span class="keyword"> const </span></div>
<div class="line"><a id="l00090" name="l00090"></a><span class="lineno"> 90</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00091" name="l00091"></a><span class="lineno"> 91</span> <span class="keyword">const</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code hl_function" href="class_p_e_core.html#a809ce6d61e968f409e6d630514b224bb">peFileHdrOffset</a>();</div>
<div class="line"><a id="l00092" name="l00092"></a><span class="lineno"> 92</span> <span class="keywordflow">if</span> (offset == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00093" name="l00093"></a><span class="lineno"> 93</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00094" name="l00094"></a><span class="lineno"> 94</span> }</div>
<div class="line"><a id="l00095" name="l00095"></a><span class="lineno"> 95</span> <span class="keywordflow">return</span> offset + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
<div class="line"><a id="l00096" name="l00096"></a><span class="lineno"> 96</span>}</div>
</div>
<div class="line"><a id="l00097" name="l00097"></a><span class="lineno"> 97</span> </div>
<div class="foldopen" id="foldopen00098" data-start="{" data-end="}">
<div class="line"><a id="l00098" name="l00098"></a><span class="lineno"><a class="line" href="class_p_e_core.html#aa9c0035f661485e8c24fc548a0a233c1"> 98</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#aa9c0035f661485e8c24fc548a0a233c1">PECore::peNtHeadersSize</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00099" name="l00099"></a><span class="lineno"> 99</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00100" name="l00100"></a><span class="lineno"> 100</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_function" href="class_p_e_core.html#ae19b9fc1ba78c32982baeda811479de1">getHdrBitMode</a>() == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>)</div>
<div class="line"><a id="l00101" name="l00101"></a><span class="lineno"> 101</span> <span class="keywordflow">return</span> <span class="keyword">sizeof</span>(IMAGE_NT_HEADERS64);</div>
<div class="line"><a id="l00102" name="l00102"></a><span class="lineno"> 102</span> </div>
<div class="line"><a id="l00103" name="l00103"></a><span class="lineno"> 103</span> <span class="keywordflow">return</span> <span class="keyword">sizeof</span>(IMAGE_NT_HEADERS32);</div>
<div class="line"><a id="l00104" name="l00104"></a><span class="lineno"> 104</span>}</div>
</div>
<div class="line"><a id="l00105" name="l00105"></a><span class="lineno"> 105</span> </div>
<div class="foldopen" id="foldopen00106" data-start="{" data-end="}">
<div class="line"><a id="l00106" name="l00106"></a><span class="lineno"><a class="line" href="class_p_e_core.html#ac2d793b316b1ee2a64fa8ed606e028b8"> 106</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#ac2d793b316b1ee2a64fa8ed606e028b8">PECore::secHdrsOffset</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00107" name="l00107"></a><span class="lineno"> 107</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00108" name="l00108"></a><span class="lineno"> 108</span> <span class="keyword">const</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code hl_function" href="class_p_e_core.html#a6bf58c2b373385ac5ce05aa676dc43b7">peOptHdrOffset</a>();</div>
<div class="line"><a id="l00109" name="l00109"></a><span class="lineno"> 109</span> <span class="keywordflow">if</span> (offset == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00110" name="l00110"></a><span class="lineno"> 110</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00111" name="l00111"></a><span class="lineno"> 111</span> }</div>
<div class="line"><a id="l00112" name="l00112"></a><span class="lineno"> 112</span> <span class="keywordflow">if</span> (!<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>) {</div>
<div class="line"><a id="l00113" name="l00113"></a><span class="lineno"> 113</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00114" name="l00114"></a><span class="lineno"> 114</span> }</div>
<div class="line"><a id="l00115" name="l00115"></a><span class="lineno"> 115</span> <span class="keyword">const</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> size = <span class="keyword">static_cast&lt;</span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">&gt;</span>(this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>-&gt;SizeOfOptionalHeader);</div>
<div class="line"><a id="l00116" name="l00116"></a><span class="lineno"> 116</span> <span class="keywordflow">return</span> offset + size;</div>
<div class="line"><a id="l00117" name="l00117"></a><span class="lineno"> 117</span>}</div>
</div>
<div class="line"><a id="l00118" name="l00118"></a><span class="lineno"> 118</span> </div>
<div class="foldopen" id="foldopen00119" data-start="{" data-end="}">
<div class="line"><a id="l00119" name="l00119"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a4acc20ded3755cb301f284b0de0b0652"> 119</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a4acc20ded3755cb301f284b0de0b0652">PECore::getAlignment</a>(<a class="code hl_enumeration" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aType)<span class="keyword"> const</span></div>
<div class="line"><a id="l00120" name="l00120"></a><span class="lineno"> 120</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00121" name="l00121"></a><span class="lineno"> 121</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00122" name="l00122"></a><span class="lineno"> 122</span> <span class="keywordflow">if</span> (aType == <a class="code hl_enumvalue" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;FileAlignment;</div>
<div class="line"><a id="l00123" name="l00123"></a><span class="lineno"> 123</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SectionAlignment;</div>
<div class="line"><a id="l00124" name="l00124"></a><span class="lineno"> 124</span> }</div>
<div class="line"><a id="l00125" name="l00125"></a><span class="lineno"> 125</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00126" name="l00126"></a><span class="lineno"> 126</span> <span class="keywordflow">if</span> (aType == <a class="code hl_enumvalue" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;FileAlignment;</div>
<div class="line"><a id="l00127" name="l00127"></a><span class="lineno"> 127</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SectionAlignment;</div>
<div class="line"><a id="l00128" name="l00128"></a><span class="lineno"> 128</span> }</div>
<div class="line"><a id="l00129" name="l00129"></a><span class="lineno"> 129</span> <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00130" name="l00130"></a><span class="lineno"> 130</span>}</div>
</div>
<div class="line"><a id="l00131" name="l00131"></a><span class="lineno"> 131</span> </div>
<div class="foldopen" id="foldopen00132" data-start="{" data-end="}">
<div class="line"><a id="l00132" name="l00132"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96"> 132</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a>()</div>
<div class="line"><a id="l00133" name="l00133"></a><span class="lineno"> 133</span>{</div>
<div class="line"><a id="l00134" name="l00134"></a><span class="lineno"> 134</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> imgSize = 0;</div>
<div class="line"><a id="l00135" name="l00135"></a><span class="lineno"> 135</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00136" name="l00136"></a><span class="lineno"> 136</span> imgSize = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SizeOfImage;</div>
<div class="line"><a id="l00137" name="l00137"></a><span class="lineno"> 137</span> }</div>
<div class="line"><a id="l00138" name="l00138"></a><span class="lineno"> 138</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00139" name="l00139"></a><span class="lineno"> 139</span> imgSize = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SizeOfImage;</div>
<div class="line"><a id="l00140" name="l00140"></a><span class="lineno"> 140</span> }</div>
<div class="line"><a id="l00141" name="l00141"></a><span class="lineno"> 141</span> <span class="keywordflow">return</span> imgSize;</div>
<div class="line"><a id="l00142" name="l00142"></a><span class="lineno"> 142</span>}</div>
</div>
<div class="line"><a id="l00143" name="l00143"></a><span class="lineno"> 143</span> </div>
<div class="foldopen" id="foldopen00144" data-start="{" data-end="}">
<div class="line"><a id="l00144" name="l00144"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2"> 144</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">PECore::hdrsSize</a>()<span class="keyword"> const</span></div>
<div class="line"><a id="l00145" name="l00145"></a><span class="lineno"> 145</span><span class="keyword"></span>{</div>
<div class="line"><a id="l00146" name="l00146"></a><span class="lineno"> 146</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">hdrsSize</a> = 0;</div>
<div class="line"><a id="l00147" name="l00147"></a><span class="lineno"> 147</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00148" name="l00148"></a><span class="lineno"> 148</span> <a class="code hl_function" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">hdrsSize</a> = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SizeOfHeaders;</div>
<div class="line"><a id="l00149" name="l00149"></a><span class="lineno"> 149</span> }</div>
<div class="line"><a id="l00150" name="l00150"></a><span class="lineno"> 150</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00151" name="l00151"></a><span class="lineno"> 151</span> <a class="code hl_function" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">hdrsSize</a> = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SizeOfHeaders;</div>
<div class="line"><a id="l00152" name="l00152"></a><span class="lineno"> 152</span> }</div>
<div class="line"><a id="l00153" name="l00153"></a><span class="lineno"> 153</span> <span class="keywordflow">return</span> <a class="code hl_function" href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">hdrsSize</a>;</div>
<div class="line"><a id="l00154" name="l00154"></a><span class="lineno"> 154</span>}</div>
</div>
<div class="line"><a id="l00155" name="l00155"></a><span class="lineno"> 155</span> </div>
<div class="foldopen" id="foldopen00156" data-start="{" data-end="}">
<div class="line"><a id="l00156" name="l00156"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7de22e67191aa4cc85a13d4647e1d926"> 156</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a7de22e67191aa4cc85a13d4647e1d926">PECore::getImageBase</a>(<span class="keywordtype">bool</span> recalculate)</div>
<div class="line"><a id="l00157" name="l00157"></a><span class="lineno"> 157</span>{</div>
<div class="line"><a id="l00158" name="l00158"></a><span class="lineno"> 158</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> imgBase = 0;</div>
<div class="line"><a id="l00159" name="l00159"></a><span class="lineno"> 159</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00160" name="l00160"></a><span class="lineno"> 160</span> imgBase = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;ImageBase;</div>
<div class="line"><a id="l00161" name="l00161"></a><span class="lineno"> 161</span> }</div>
<div class="line"><a id="l00162" name="l00162"></a><span class="lineno"> 162</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00163" name="l00163"></a><span class="lineno"> 163</span> imgBase = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;ImageBase;</div>
<div class="line"><a id="l00164" name="l00164"></a><span class="lineno"> 164</span> }</div>
<div class="line"><a id="l00165" name="l00165"></a><span class="lineno"> 165</span> <span class="comment">//can be null, under XP. In this case, the binary will be relocated to 10000h</span></div>
<div class="line"><a id="l00166" name="l00166"></a><span class="lineno"> 166</span> <span class="comment">//(quote: http://code.google.com/p/corkami/wiki/PE)</span></div>
<div class="line"><a id="l00167" name="l00167"></a><span class="lineno"> 167</span> <span class="keywordflow">if</span> (imgBase == 0 &amp;&amp; recalculate) {</div>
<div class="line"><a id="l00168" name="l00168"></a><span class="lineno"> 168</span> imgBase = <a class="code hl_define" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
<div class="line"><a id="l00169" name="l00169"></a><span class="lineno"> 169</span> }</div>
<div class="line"><a id="l00170" name="l00170"></a><span class="lineno"> 170</span> <span class="comment">//in 32 bit PEs: it can be any value as long as ImageBase + &#39;SizeOfImage&#39; &lt; 80000000h</span></div>
<div class="line"><a id="l00171" name="l00171"></a><span class="lineno"> 171</span> <span class="comment">//if the ImageBase is bigger than that, the binary will be relocated to 10000h</span></div>
<div class="line"><a id="l00172" name="l00172"></a><span class="lineno"> 172</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00173" name="l00173"></a><span class="lineno"> 173</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> maxOffset = this-&gt;<a class="code hl_function" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">getImageSize</a>() + imgBase;</div>
<div class="line"><a id="l00174" name="l00174"></a><span class="lineno"> 174</span> <span class="keywordflow">if</span> (maxOffset &gt;= 0x80000000 &amp;&amp; recalculate) {</div>
<div class="line"><a id="l00175" name="l00175"></a><span class="lineno"> 175</span> imgBase = <a class="code hl_define" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
<div class="line"><a id="l00176" name="l00176"></a><span class="lineno"> 176</span> }</div>
<div class="line"><a id="l00177" name="l00177"></a><span class="lineno"> 177</span> }</div>
<div class="line"><a id="l00178" name="l00178"></a><span class="lineno"> 178</span> <span class="keywordflow">return</span> imgBase;</div>
<div class="line"><a id="l00179" name="l00179"></a><span class="lineno"> 179</span>}</div>
</div>
<div class="line"><a id="l00180" name="l00180"></a><span class="lineno"> 180</span> </div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_ab99058386f4a8bc4e8cd07fad8198178"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a></div><div class="ttdeci">const offset_t INVALID_ADDR</div><div class="ttdef"><b>Definition</b> <a href="_abstract_byte_buffer_8h_source.html#l00021">AbstractByteBuffer.h:21</a></div></div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_aea96e09e4ebfca2845a36a4d9882f7f6"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a></div><div class="ttdeci">uint64_t offset_t</div><div class="ttdef"><b>Definition</b> <a href="_abstract_byte_buffer_8h_source.html#l00020">AbstractByteBuffer.h:20</a></div></div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_afedfa40fa58dd4bc7148024a7ad12c76"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#afedfa40fa58dd4bc7148024a7ad12c76">bufsize_t</a></div><div class="ttdeci">size_t bufsize_t</div><div class="ttdef"><b>Definition</b> <a href="_abstract_byte_buffer_8h_source.html#l00017">AbstractByteBuffer.h:17</a></div></div>
<div class="ttc" id="a_p_e_core_8cpp_html_a8f3218e445e49b9d1cc18b39b48d2aa5"><div class="ttname"><a href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a></div><div class="ttdeci">#define DEFAULT_IMGBASE</div><div class="ttdef"><b>Definition</b> <a href="#l00003">PECore.cpp:3</a></div></div>
<div class="ttc" id="a_p_e_core_8h_html"><div class="ttname"><a href="_p_e_core_8h.html">PECore.h</a></div></div>
<div class="ttc" id="aclass_abstract_byte_buffer_html"><div class="ttname"><a href="class_abstract_byte_buffer.html">AbstractByteBuffer</a></div><div class="ttdef"><b>Definition</b> <a href="_abstract_byte_buffer_8h_source.html#l00035">AbstractByteBuffer.h:36</a></div></div>
<div class="ttc" id="aclass_exe_exception_html"><div class="ttname"><a href="class_exe_exception.html">ExeException</a></div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00008">Executable.h:9</a></div></div>
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a></div><div class="ttdeci">addr_type</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00042">Executable.h:42</a></div></div>
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a></div><div class="ttdeci">@ RAW</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00044">Executable.h:44</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a></div><div class="ttdeci">exe_bits</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00028">Executable.h:28</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a></div><div class="ttdeci">@ BITS_32</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00031">Executable.h:31</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a></div><div class="ttdeci">@ BITS_64</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00032">Executable.h:32</a></div></div>
<div class="ttc" id="aclass_executable_html_ae50d17f8bc9d8a8bf520593f81803186"><div class="ttname"><a href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186">Executable::exe_arch</a></div><div class="ttdeci">exe_arch</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00035">Executable.h:35</a></div></div>
<div class="ttc" id="aclass_executable_html_ae50d17f8bc9d8a8bf520593f81803186a3b36fcfbe78f5f2320d8f0d68f7947b8"><div class="ttname"><a href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186a3b36fcfbe78f5f2320d8f0d68f7947b8">Executable::ARCH_UNKNOWN</a></div><div class="ttdeci">@ ARCH_UNKNOWN</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00036">Executable.h:36</a></div></div>
<div class="ttc" id="aclass_executable_html_ae50d17f8bc9d8a8bf520593f81803186aae269d4846788edce37e4dc8d721b067"><div class="ttname"><a href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186aae269d4846788edce37e4dc8d721b067">Executable::ARCH_ARM</a></div><div class="ttdeci">@ ARCH_ARM</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00038">Executable.h:38</a></div></div>
<div class="ttc" id="aclass_executable_html_ae50d17f8bc9d8a8bf520593f81803186ad4e524138a13dd7b5d94fcdf007fdc0f"><div class="ttname"><a href="class_executable.html#ae50d17f8bc9d8a8bf520593f81803186ad4e524138a13dd7b5d94fcdf007fdc0f">Executable::ARCH_INTEL</a></div><div class="ttdeci">@ ARCH_INTEL</div><div class="ttdef"><b>Definition</b> <a href="_executable_8h_source.html#l00037">Executable.h:37</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a00f6d0de42b02aecf689fd649997caa1"><div class="ttname"><a href="class_p_e_core.html#a00f6d0de42b02aecf689fd649997caa1">PECore::getHdrArch</a></div><div class="ttdeci">Executable::exe_arch getHdrArch() const</div><div class="ttdef"><b>Definition</b> <a href="#l00059">PECore.cpp:59</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a4acc20ded3755cb301f284b0de0b0652"><div class="ttname"><a href="class_p_e_core.html#a4acc20ded3755cb301f284b0de0b0652">PECore::getAlignment</a></div><div class="ttdeci">virtual bufsize_t getAlignment(Executable::addr_type aType) const</div><div class="ttdef"><b>Definition</b> <a href="#l00119">PECore.cpp:119</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a67867e96974c5141d1fb894c62626fa2"><div class="ttname"><a href="class_p_e_core.html#a67867e96974c5141d1fb894c62626fa2">PECore::hdrsSize</a></div><div class="ttdeci">bufsize_t hdrsSize() const</div><div class="ttdef"><b>Definition</b> <a href="#l00144">PECore.cpp:144</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a6bf58c2b373385ac5ce05aa676dc43b7"><div class="ttname"><a href="class_p_e_core.html#a6bf58c2b373385ac5ce05aa676dc43b7">PECore::peOptHdrOffset</a></div><div class="ttdeci">offset_t peOptHdrOffset() const</div><div class="ttdef"><b>Definition</b> <a href="#l00089">PECore.cpp:89</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a78e7bc74699074938bb07d6e17aee1eb"><div class="ttname"><a href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">PECore::opt32</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER32 * opt32</div><div class="ttdef"><b>Definition</b> <a href="_p_e_core_8h_source.html#l00057">PECore.h:57</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a7d654edc4d82e1d1643e49081bc5657c"><div class="ttname"><a href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a></div><div class="ttdeci">bool wrap(AbstractByteBuffer *v_buf)</div><div class="ttdef"><b>Definition</b> <a href="#l00013">PECore.cpp:13</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a7de22e67191aa4cc85a13d4647e1d926"><div class="ttname"><a href="class_p_e_core.html#a7de22e67191aa4cc85a13d4647e1d926">PECore::getImageBase</a></div><div class="ttdeci">virtual offset_t getImageBase(bool recalculate=false)</div><div class="ttdef"><b>Definition</b> <a href="#l00156">PECore.cpp:156</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a809ce6d61e968f409e6d630514b224bb"><div class="ttname"><a href="class_p_e_core.html#a809ce6d61e968f409e6d630514b224bb">PECore::peFileHdrOffset</a></div><div class="ttdeci">offset_t peFileHdrOffset() const</div><div class="ttdef"><b>Definition</b> <a href="#l00079">PECore.cpp:79</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a8b0fbf4bbe04a98e2573b48abe0aea18"><div class="ttname"><a href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">PECore::buf</a></div><div class="ttdeci">AbstractByteBuffer * buf</div><div class="ttdef"><b>Definition</b> <a href="_p_e_core_8h_source.html#l00053">PECore.h:53</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a91d89cd5d9f8b6f84c6eab5b195dc1ec"><div class="ttname"><a href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a></div><div class="ttdeci">void reset()</div><div class="ttdef"><b>Definition</b> <a href="#l00005">PECore.cpp:5</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a968d53a13a783b32a6b3adbbdbd00e96"><div class="ttname"><a href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a></div><div class="ttdeci">virtual bufsize_t getImageSize()</div><div class="ttdef"><b>Definition</b> <a href="#l00132">PECore.cpp:132</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa2ff4665d8b56b2a5e1e1e00bc446b18"><div class="ttname"><a href="class_p_e_core.html#aa2ff4665d8b56b2a5e1e1e00bc446b18">PECore::peSignatureOffset</a></div><div class="ttdeci">offset_t peSignatureOffset() const</div><div class="ttdef"><b>Definition</b> <a href="#l00073">PECore.cpp:73</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa7909e838ed55e1e29e12e89475aaf20"><div class="ttname"><a href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">PECore::fHdr</a></div><div class="ttdeci">IMAGE_FILE_HEADER * fHdr</div><div class="ttdef"><b>Definition</b> <a href="_p_e_core_8h_source.html#l00056">PECore.h:56</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa9c0035f661485e8c24fc548a0a233c1"><div class="ttname"><a href="class_p_e_core.html#aa9c0035f661485e8c24fc548a0a233c1">PECore::peNtHeadersSize</a></div><div class="ttdeci">bufsize_t peNtHeadersSize() const</div><div class="ttdef"><b>Definition</b> <a href="#l00098">PECore.cpp:98</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ac2d793b316b1ee2a64fa8ed606e028b8"><div class="ttname"><a href="class_p_e_core.html#ac2d793b316b1ee2a64fa8ed606e028b8">PECore::secHdrsOffset</a></div><div class="ttdeci">offset_t secHdrsOffset() const</div><div class="ttdef"><b>Definition</b> <a href="#l00106">PECore.cpp:106</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ad28c19fee0317e4986f322f8fad4c97a"><div class="ttname"><a href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">PECore::opt64</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER64 * opt64</div><div class="ttdef"><b>Definition</b> <a href="_p_e_core_8h_source.html#l00058">PECore.h:58</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ae19b9fc1ba78c32982baeda811479de1"><div class="ttname"><a href="class_p_e_core.html#ae19b9fc1ba78c32982baeda811479de1">PECore::getHdrBitMode</a></div><div class="ttdeci">Executable::exe_bits getHdrBitMode() const</div><div class="ttdef"><b>Definition</b> <a href="#l00051">PECore.cpp:51</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_af99e6949cf43d775874f7e24d74fb7aa"><div class="ttname"><a href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">PECore::dos</a></div><div class="ttdeci">IMAGE_DOS_HEADER * dos</div><div class="ttdef"><b>Definition</b> <a href="_p_e_core_8h_source.html#l00055">PECore.h:55</a></div></div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated by&#160;<a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.17.0
</small></address>
</div><!-- doc-content -->
</body>
</html>
Reference in New Issue View Git Blame Copy Permalink