mirror of
https://github.com/hasherezade/bearparser
synced 2026-06-08 14:32:38 +00:00
hasherezade
274 lines
46 KiB
HTML
274 lines
46 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.9.1"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>BearParser: parser/pe/PECore.cpp Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">BearParser
|
|
</div>
|
|
<div id="projectbrief">Portable Executable parsing library (from PE-bear)</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.9.1 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search','.html');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_572890c148f68441e050f6560d78312b.html">parser</a></li><li class="navelem"><a class="el" href="dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html">pe</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">PECore.cpp</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<a href="_p_e_core_8cpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="preprocessor">#include "<a class="code" href="_p_e_core_8h.html">pe/PECore.h</a>"</span></div>
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span>  </div>
|
|
<div class="line"><a name="l00003"></a><span class="lineno"><a class="line" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5"> 3</a></span> <span class="preprocessor">#define DEFAULT_IMGBASE 0x10000</span></div>
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span>  </div>
|
|
<div class="line"><a name="l00005"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec"> 5</a></span> <span class="keywordtype">void</span> <a class="code" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a>()</div>
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> {</div>
|
|
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span>  <a class="code" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = NULL;</div>
|
|
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span>  <a class="code" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = NULL;</div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span>  <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = NULL;</div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span>  <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = NULL;</div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span>  </div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span>  <a class="code" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> = <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span>  <a class="code" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> = <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span>  <a class="code" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> = <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span>  <a class="code" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> = <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span> }</div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span>  </div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c"> 18</a></span> <span class="keywordtype">bool</span> <a class="code" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a>(<a class="code" href="class_abstract_byte_buffer.html">AbstractByteBuffer</a> *v_buf)</div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> {</div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>  <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a> = v_buf;</div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span>  <span class="keywordtype">bool</span> allowExceptions = <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span>  <span class="comment">// reset all:</span></div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span>  <a class="code" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">reset</a>();</div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span>  </div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = 0;</div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span>  this-><a class="code" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = (IMAGE_DOS_HEADER*) <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-><a class="code" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_DOS_HEADER), allowExceptions);</div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  <span class="keywordflow">if</span> (<a class="code" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> == NULL) <span class="keywordflow">throw</span> <a class="code" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">"Could not wrap PECore: invalid DOS Header!"</span>);</div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>  </div>
|
|
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span>  offset = <a class="code" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>->e_lfanew + <span class="keyword">sizeof</span>(DWORD); <span class="comment">//skip 'PE' signature</span></div>
|
|
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span>  this-><a class="code" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = (IMAGE_FILE_HEADER*) <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-><a class="code" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER), allowExceptions);</div>
|
|
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span>  <span class="keywordflow">if</span> (<a class="code" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> == NULL) <span class="keywordflow">throw</span> <a class="code" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">"Could not wrap PECore!"</span>);</div>
|
|
<div class="line"><a name="l00032"></a><span class="lineno"> 32</span>  </div>
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>  </div>
|
|
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span>  offset = offset + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
|
|
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span>  WORD *magic = (WORD*) <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-><a class="code" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(WORD), allowExceptions);</div>
|
|
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span>  <span class="keywordflow">if</span> (magic == NULL) <span class="keywordflow">throw</span> <a class="code" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">"Could not wrap PECore: invalid FileHeader"</span>);</div>
|
|
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span>  </div>
|
|
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>  <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> mode = <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
|
|
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span>  <span class="keywordflow">if</span> ((*magic) == pe::OH_NT64) {<span class="comment">//32 = 0x10B) {</span></div>
|
|
<div class="line"><a name="l00040"></a><span class="lineno"> 40</span>  mode = <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>;</div>
|
|
<div class="line"><a name="l00041"></a><span class="lineno"> 41</span>  }</div>
|
|
<div class="line"><a name="l00042"></a><span class="lineno"> 42</span>  </div>
|
|
<div class="line"><a name="l00043"></a><span class="lineno"> 43</span>  <span class="keywordflow">if</span> (mode == <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>) {</div>
|
|
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span>  this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = (IMAGE_OPTIONAL_HEADER32*) <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-><a class="code" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER32), allowExceptions);</div>
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  </div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (mode == <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>) {</div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = (IMAGE_OPTIONAL_HEADER64*) <a class="code" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-><a class="code" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER64), allowExceptions);</div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  }</div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  <span class="keywordflow">if</span> ( this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> == NULL && this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> == NULL) {</div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>  <span class="keywordflow">throw</span> <a class="code" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">"Could not wrap PECore : invalid OptionalHeader"</span>);</div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>  }</div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span> }</div>
|
|
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  </div>
|
|
<div class="line"><a name="l00055"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2"> 55</a></span> <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> <a class="code" href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2">PECore::getHdrBitMode</a>()</div>
|
|
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span> {</div>
|
|
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>  <span class="keywordflow">if</span> (<a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
|
|
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span>  <span class="keywordflow">if</span> (<a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>;</div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  </div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>; <span class="comment">// DEFAULT</span></div>
|
|
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span> }</div>
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  </div>
|
|
<div class="line"><a name="l00063"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89"> 63</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">PECore::peSignatureOffset</a>()</div>
|
|
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span> {</div>
|
|
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>)</div>
|
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <a class="code" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> = <span class="keyword">static_cast<</span><a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">></span> (<a class="code" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>->e_lfanew);</div>
|
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a>;</div>
|
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span> }</div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  </div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"><a class="line" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc"> 70</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">PECore::peFileHdrOffset</a>()</div>
|
|
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span> {</div>
|
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
|
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">peSignatureOffset</a>();</div>
|
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> signSize = <span class="keyword">sizeof</span>(DWORD);</div>
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  <a class="code" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> = offset + signSize;</div>
|
|
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  }</div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a>;</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  </div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span> }</div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  </div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"><a class="line" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292"> 81</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">PECore::peOptHdrOffset</a>()</div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span> {</div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  <a class="code" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> = <a class="code" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">peFileHdrOffset</a>() + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  }</div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a>;</div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span> }</div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>  </div>
|
|
<div class="line"><a name="l00089"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a"> 89</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a">PECore::secHdrsOffset</a>()</div>
|
|
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span> {</div>
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">peOptHdrOffset</a>();</div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> size = <span class="keyword">static_cast<</span><a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">></span>(this-><a class="code" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>->SizeOfOptionalHeader);</div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span>  <a class="code" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> = offset + size;</div>
|
|
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  }</div>
|
|
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a>;</div>
|
|
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span> }</div>
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  </div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f"> 99</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f">PECore::getAlignment</a>(<a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aType)</div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span> {</div>
|
|
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
|
|
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span>  <span class="keywordflow">if</span> (aType == <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>->FileAlignment;</div>
|
|
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>->SectionAlignment;</div>
|
|
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  }</div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  <span class="keywordflow">if</span> (aType == <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>->FileAlignment;</div>
|
|
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>->SectionAlignment;</div>
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  }</div>
|
|
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  <span class="keywordflow">return</span> 0;</div>
|
|
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span> }</div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  </div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96"> 112</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a>()</div>
|
|
<div class="line"><a name="l00113"></a><span class="lineno"> 113</span> {</div>
|
|
<div class="line"><a name="l00114"></a><span class="lineno"> 114</span>  <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> imgSize = 0;</div>
|
|
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
|
|
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  imgSize = <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>->SizeOfImage;</div>
|
|
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  }</div>
|
|
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
|
|
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  imgSize = <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>->SizeOfImage;</div>
|
|
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  }</div>
|
|
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span>  <span class="keywordflow">return</span> imgSize;</div>
|
|
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span> }</div>
|
|
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span>  </div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111"> 124</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">PECore::hdrsSize</a>()</div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span> {</div>
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">hdrsSize</a> = 0;</div>
|
|
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
|
|
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  hdrsSize = <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>->SizeOfHeaders;</div>
|
|
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span>  }</div>
|
|
<div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
|
|
<div class="line"><a name="l00131"></a><span class="lineno"> 131</span>  hdrsSize = <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>->SizeOfHeaders;</div>
|
|
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  }</div>
|
|
<div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  <span class="keywordflow">return</span> <a class="code" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">hdrsSize</a>;</div>
|
|
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span> }</div>
|
|
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  </div>
|
|
<div class="line"><a name="l00136"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519"> 136</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519">PECore::getImageBase</a>()</div>
|
|
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span> {</div>
|
|
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> imgBase = 0;</div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
|
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  imgBase = <a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>->ImageBase;</div>
|
|
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  }</div>
|
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
|
|
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  imgBase = <a class="code" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>->ImageBase;</div>
|
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  }</div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  <span class="comment">//can be null, under XP. In this case, the binary will be relocated to 10000h</span></div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  <span class="comment">//(quote: http://code.google.com/p/corkami/wiki/PE)</span></div>
|
|
<div class="line"><a name="l00147"></a><span class="lineno"> 147</span>  <span class="keywordflow">if</span> (imgBase == 0) {</div>
|
|
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  imgBase = <a class="code" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
|
|
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  }</div>
|
|
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  </div>
|
|
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  <span class="comment">//in 32 bit PEs: it can be any value as long as ImageBase + 'SizeOfImage' < 80000000h</span></div>
|
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  <span class="comment">//if the ImageBase is bigger than that, the binary will be relocated to 10000h</span></div>
|
|
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  <span class="keywordflow">if</span> (this-><a class="code" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
|
|
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> maxOffset = this-><a class="code" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">getImageSize</a>() + imgBase;</div>
|
|
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <span class="keywordflow">if</span> (maxOffset >= 0x80000000) {</div>
|
|
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  imgBase = <a class="code" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
|
|
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  }</div>
|
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  }</div>
|
|
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  <span class="keywordflow">return</span> imgBase;</div>
|
|
<div class="line"><a name="l00160"></a><span class="lineno"> 160</span> }</div>
|
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  </div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_a9067dc831274514d508e98df05bf015d"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a></div><div class="ttdeci">uint32_t bufsize_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00014">AbstractByteBuffer.h:14</a></div></div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_ab99058386f4a8bc4e8cd07fad8198178"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a></div><div class="ttdeci">const offset_t INVALID_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00018">AbstractByteBuffer.h:18</a></div></div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_aea96e09e4ebfca2845a36a4d9882f7f6"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a></div><div class="ttdeci">uint64_t offset_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00017">AbstractByteBuffer.h:17</a></div></div>
|
|
<div class="ttc" id="a_p_e_core_8cpp_html_a8f3218e445e49b9d1cc18b39b48d2aa5"><div class="ttname"><a href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a></div><div class="ttdeci">#define DEFAULT_IMGBASE</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00003">PECore.cpp:3</a></div></div>
|
|
<div class="ttc" id="a_p_e_core_8h_html"><div class="ttname"><a href="_p_e_core_8h.html">PECore.h</a></div></div>
|
|
<div class="ttc" id="aclass_abstract_byte_buffer_html"><div class="ttname"><a href="class_abstract_byte_buffer.html">AbstractByteBuffer</a></div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00031">AbstractByteBuffer.h:32</a></div></div>
|
|
<div class="ttc" id="aclass_abstract_byte_buffer_html_a64f38e33f915741eb283ef9a34cacb6d"><div class="ttname"><a href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">AbstractByteBuffer::getContentAt</a></div><div class="ttdeci">virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8cpp_source.html#l00057">AbstractByteBuffer.cpp:57</a></div></div>
|
|
<div class="ttc" id="aclass_exe_exception_html"><div class="ttname"><a href="class_exe_exception.html">ExeException</a></div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00008">Executable.h:9</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a></div><div class="ttdeci">addr_type</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00035">Executable.h:35</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a></div><div class="ttdeci">@ RAW</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00037">Executable.h:37</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a></div><div class="ttdeci">exe_bits</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00028">Executable.h:28</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a></div><div class="ttdeci">@ BITS_32</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00031">Executable.h:31</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a></div><div class="ttdeci">@ BITS_64</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00032">Executable.h:32</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a1214a0d48a62e41e2feb52ba2d602f70"><div class="ttname"><a href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">PECore::secHdrsOff</a></div><div class="ttdeci">offset_t secHdrsOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00047">PECore.h:47</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a26f7c98feaa67ad523fc745d7c0404a2"><div class="ttname"><a href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2">PECore::getHdrBitMode</a></div><div class="ttdeci">Executable::exe_bits getHdrBitMode()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00055">PECore.cpp:55</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a2ae38f9f55db2b0ade16500364bab84f"><div class="ttname"><a href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f">PECore::getAlignment</a></div><div class="ttdeci">virtual bufsize_t getAlignment(Executable::addr_type aType)</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00099">PECore.cpp:99</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a57d02ca8214e0c9903136dc2da72ed89"><div class="ttname"><a href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">PECore::peSignatureOffset</a></div><div class="ttdeci">offset_t peSignatureOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00063">PECore.cpp:63</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a5cbff89db2c03aa6828f881962b09f2a"><div class="ttname"><a href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a">PECore::secHdrsOffset</a></div><div class="ttdeci">offset_t secHdrsOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00089">PECore.cpp:89</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a78e7bc74699074938bb07d6e17aee1eb"><div class="ttname"><a href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">PECore::opt32</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER32 * opt32</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00042">PECore.h:42</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a7d654edc4d82e1d1643e49081bc5657c"><div class="ttname"><a href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a></div><div class="ttdeci">bool wrap(AbstractByteBuffer *v_buf)</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00018">PECore.cpp:18</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a7e2c4c279eba3d3573b6a66a6832e519"><div class="ttname"><a href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519">PECore::getImageBase</a></div><div class="ttdeci">virtual offset_t getImageBase()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00136">PECore.cpp:136</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a85379f1dc8b87ff925998c9f737dc111"><div class="ttname"><a href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">PECore::hdrsSize</a></div><div class="ttdeci">bufsize_t hdrsSize()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00124">PECore.cpp:124</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a8b0fbf4bbe04a98e2573b48abe0aea18"><div class="ttname"><a href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">PECore::buf</a></div><div class="ttdeci">AbstractByteBuffer * buf</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00038">PECore.h:38</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a91d89cd5d9f8b6f84c6eab5b195dc1ec"><div class="ttname"><a href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a></div><div class="ttdeci">void reset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00005">PECore.cpp:5</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a968d53a13a783b32a6b3adbbdbd00e96"><div class="ttname"><a href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a></div><div class="ttdeci">virtual bufsize_t getImageSize()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00112">PECore.cpp:112</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_a993156c03286231a174705645c405735"><div class="ttname"><a href="class_p_e_core.html#a993156c03286231a174705645c405735">PECore::signatureOff</a></div><div class="ttdeci">offset_t signatureOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00045">PECore.h:45</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_aa7909e838ed55e1e29e12e89475aaf20"><div class="ttname"><a href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">PECore::fHdr</a></div><div class="ttdeci">IMAGE_FILE_HEADER * fHdr</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00041">PECore.h:41</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_aa9096604dc3a275b94507c62374c8292"><div class="ttname"><a href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">PECore::peOptHdrOffset</a></div><div class="ttdeci">offset_t peOptHdrOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00081">PECore.cpp:81</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_aa97e605aa1e20e0f0a48eb6eb62a3ba7"><div class="ttname"><a href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">PECore::fileHdrOff</a></div><div class="ttdeci">offset_t fileHdrOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00046">PECore.h:46</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_ac8e141e201db3fc46867b5712847a7dc"><div class="ttname"><a href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">PECore::peFileHdrOffset</a></div><div class="ttdeci">offset_t peFileHdrOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00070">PECore.cpp:70</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_ad28c19fee0317e4986f322f8fad4c97a"><div class="ttname"><a href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">PECore::opt64</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER64 * opt64</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00043">PECore.h:43</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_ad38f31eeed026f5a19c3a18ccd465e38"><div class="ttname"><a href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">PECore::optHdrOff</a></div><div class="ttdeci">offset_t optHdrOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00048">PECore.h:48</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_core_html_af99e6949cf43d775874f7e24d74fb7aa"><div class="ttname"><a href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">PECore::dos</a></div><div class="ttdeci">IMAGE_DOS_HEADER * dos</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00040">PECore.h:40</a></div></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.1
|
|
</small></address>
|
|
</body>
|
|
</html>
|