admin/hasherezade-bearparser
1
0
Fork 0
mirror of https://github.com/hasherezade/bearparser synced 2026-06-08 14:32:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
da79552fb34f33433c4a637b518ccd7fd80fdb55
hasherezade-bearparser/_p_e_core_8cpp_source.html
T
hasherezade da79552fb3 deploy: f99ddb85ef
2022-02-18 02:34:34 +00:00

274 lines
48 KiB
HTML
Raw Blame History

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=11"/>
<meta name="generator" content="Doxygen 1.9.3"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>BearParser: parser/pe/PECore.cpp Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr id="projectrow">
<td id="projectalign">
<div id="projectname">BearParser
</div>
<div id="projectbrief">Portable Executable parsing library (from PE-bear)</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.9.3 -->
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
var searchBox = new SearchBox("searchBox", "search",'Search','.html');
/* @license-end */
</script>
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
$(function() {
initMenu('',true,false,'search.php','Search');
$(document).ready(function() { init_search(); });
});
/* @license-end */
</script>
<div id="main-nav"></div>
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div id="nav-path" class="navpath">
<ul>
<li class="navelem"><a class="el" href="dir_572890c148f68441e050f6560d78312b.html">parser</a></li><li class="navelem"><a class="el" href="dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html">pe</a></li> </ul>
</div>
</div><!-- top -->
<div class="header">
<div class="headertitle"><div class="title">PECore.cpp</div></div>
</div><!--header-->
<div class="contents">
<a href="_p_e_core_8cpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a id="l00001" name="l00001"></a><span class="lineno"> 1</span><span class="preprocessor">#include &quot;<a class="code" href="_p_e_core_8h.html">pe/PECore.h</a>&quot;</span></div>
<div class="line"><a id="l00002" name="l00002"></a><span class="lineno"> 2</span> </div>
<div class="line"><a id="l00003" name="l00003"></a><span class="lineno"><a class="line" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5"> 3</a></span><span class="preprocessor">#define DEFAULT_IMGBASE 0x10000</span></div>
<div class="line"><a id="l00004" name="l00004"></a><span class="lineno"> 4</span> </div>
<div class="line"><a id="l00005" name="l00005"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec"> 5</a></span><span class="keywordtype">void</span> <a class="code hl_function" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a>()</div>
<div class="line"><a id="l00006" name="l00006"></a><span class="lineno"> 6</span>{</div>
<div class="line"><a id="l00007" name="l00007"></a><span class="lineno"> 7</span> <a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = NULL;</div>
<div class="line"><a id="l00008" name="l00008"></a><span class="lineno"> 8</span> <a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = NULL;</div>
<div class="line"><a id="l00009" name="l00009"></a><span class="lineno"> 9</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = NULL;</div>
<div class="line"><a id="l00010" name="l00010"></a><span class="lineno"> 10</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = NULL;</div>
<div class="line"><a id="l00011" name="l00011"></a><span class="lineno"> 11</span> </div>
<div class="line"><a id="l00012" name="l00012"></a><span class="lineno"> 12</span> <a class="code hl_variable" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> = <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00013" name="l00013"></a><span class="lineno"> 13</span> <a class="code hl_variable" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> = <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00014" name="l00014"></a><span class="lineno"> 14</span> <a class="code hl_variable" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> = <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00015" name="l00015"></a><span class="lineno"> 15</span> <a class="code hl_variable" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> = <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
<div class="line"><a id="l00016" name="l00016"></a><span class="lineno"> 16</span>}</div>
<div class="line"><a id="l00017" name="l00017"></a><span class="lineno"> 17</span> </div>
<div class="line"><a id="l00018" name="l00018"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c"> 18</a></span><span class="keywordtype">bool</span> <a class="code hl_function" href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a>(<a class="code hl_class" href="class_abstract_byte_buffer.html">AbstractByteBuffer</a> *v_buf)</div>
<div class="line"><a id="l00019" name="l00019"></a><span class="lineno"> 19</span>{</div>
<div class="line"><a id="l00020" name="l00020"></a><span class="lineno"> 20</span> <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a> = v_buf;</div>
<div class="line"><a id="l00021" name="l00021"></a><span class="lineno"> 21</span> <span class="keywordtype">bool</span> allowExceptions = <span class="keyword">true</span>;</div>
<div class="line"><a id="l00022" name="l00022"></a><span class="lineno"> 22</span> <span class="comment">// reset all:</span></div>
<div class="line"><a id="l00023" name="l00023"></a><span class="lineno"> 23</span> <a class="code hl_function" href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">reset</a>();</div>
<div class="line"><a id="l00024" name="l00024"></a><span class="lineno"> 24</span> </div>
<div class="line"><a id="l00025" name="l00025"></a><span class="lineno"> 25</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = 0;</div>
<div class="line"><a id="l00026" name="l00026"></a><span class="lineno"> 26</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> = (IMAGE_DOS_HEADER*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;<a class="code hl_function" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_DOS_HEADER), allowExceptions);</div>
<div class="line"><a id="l00027" name="l00027"></a><span class="lineno"> 27</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a> == NULL) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore: invalid DOS Header!&quot;</span>);</div>
<div class="line"><a id="l00028" name="l00028"></a><span class="lineno"> 28</span> </div>
<div class="line"><a id="l00029" name="l00029"></a><span class="lineno"> 29</span> offset = <a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>-&gt;e_lfanew + <span class="keyword">sizeof</span>(DWORD); <span class="comment">//skip &#39;PE&#39; signature</span></div>
<div class="line"><a id="l00030" name="l00030"></a><span class="lineno"> 30</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> = (IMAGE_FILE_HEADER*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;<a class="code hl_function" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER), allowExceptions);</div>
<div class="line"><a id="l00031" name="l00031"></a><span class="lineno"> 31</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a> == NULL) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore!&quot;</span>);</div>
<div class="line"><a id="l00032" name="l00032"></a><span class="lineno"> 32</span> </div>
<div class="line"><a id="l00033" name="l00033"></a><span class="lineno"> 33</span> </div>
<div class="line"><a id="l00034" name="l00034"></a><span class="lineno"> 34</span> offset = offset + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
<div class="line"><a id="l00035" name="l00035"></a><span class="lineno"> 35</span> WORD *magic = (WORD*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;<a class="code hl_function" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(WORD), allowExceptions);</div>
<div class="line"><a id="l00036" name="l00036"></a><span class="lineno"> 36</span> <span class="keywordflow">if</span> (magic == NULL) <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore: invalid FileHeader&quot;</span>);</div>
<div class="line"><a id="l00037" name="l00037"></a><span class="lineno"> 37</span> </div>
<div class="line"><a id="l00038" name="l00038"></a><span class="lineno"> 38</span> <a class="code hl_enumeration" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> mode = <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
<div class="line"><a id="l00039" name="l00039"></a><span class="lineno"> 39</span> <span class="keywordflow">if</span> ((*magic) == pe::OH_NT64) {<span class="comment">//32 = 0x10B) {</span></div>
<div class="line"><a id="l00040" name="l00040"></a><span class="lineno"> 40</span> mode = <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>;</div>
<div class="line"><a id="l00041" name="l00041"></a><span class="lineno"> 41</span> }</div>
<div class="line"><a id="l00042" name="l00042"></a><span class="lineno"> 42</span> </div>
<div class="line"><a id="l00043" name="l00043"></a><span class="lineno"> 43</span> <span class="keywordflow">if</span> (mode == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>) {</div>
<div class="line"><a id="l00044" name="l00044"></a><span class="lineno"> 44</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> = (IMAGE_OPTIONAL_HEADER32*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;<a class="code hl_function" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER32), allowExceptions);</div>
<div class="line"><a id="l00045" name="l00045"></a><span class="lineno"> 45</span> </div>
<div class="line"><a id="l00046" name="l00046"></a><span class="lineno"> 46</span> } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (mode == <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>) {</div>
<div class="line"><a id="l00047" name="l00047"></a><span class="lineno"> 47</span> this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> = (IMAGE_OPTIONAL_HEADER64*) <a class="code hl_variable" href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">buf</a>-&gt;<a class="code hl_function" href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">getContentAt</a>(offset, <span class="keyword">sizeof</span>(IMAGE_OPTIONAL_HEADER64), allowExceptions);</div>
<div class="line"><a id="l00048" name="l00048"></a><span class="lineno"> 48</span> }</div>
<div class="line"><a id="l00049" name="l00049"></a><span class="lineno"> 49</span> <span class="keywordflow">if</span> ( this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a> == NULL &amp;&amp; this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a> == NULL) {</div>
<div class="line"><a id="l00050" name="l00050"></a><span class="lineno"> 50</span> <span class="keywordflow">throw</span> <a class="code hl_class" href="class_exe_exception.html">ExeException</a>(<span class="stringliteral">&quot;Could not wrap PECore : invalid OptionalHeader&quot;</span>);</div>
<div class="line"><a id="l00051" name="l00051"></a><span class="lineno"> 51</span> }</div>
<div class="line"><a id="l00052" name="l00052"></a><span class="lineno"> 52</span> <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
<div class="line"><a id="l00053" name="l00053"></a><span class="lineno"> 53</span>}</div>
<div class="line"><a id="l00054" name="l00054"></a><span class="lineno"> 54</span> </div>
<div class="line"><a id="l00055" name="l00055"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2"> 55</a></span><a class="code hl_enumeration" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a> <a class="code hl_function" href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2">PECore::getHdrBitMode</a>()</div>
<div class="line"><a id="l00056" name="l00056"></a><span class="lineno"> 56</span>{</div>
<div class="line"><a id="l00057" name="l00057"></a><span class="lineno"> 57</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>;</div>
<div class="line"><a id="l00058" name="l00058"></a><span class="lineno"> 58</span> <span class="keywordflow">if</span> (<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>;</div>
<div class="line"><a id="l00059" name="l00059"></a><span class="lineno"> 59</span> </div>
<div class="line"><a id="l00060" name="l00060"></a><span class="lineno"> 60</span> <span class="keywordflow">return</span> <a class="code hl_enumvalue" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a>; <span class="comment">// DEFAULT</span></div>
<div class="line"><a id="l00061" name="l00061"></a><span class="lineno"> 61</span>}</div>
<div class="line"><a id="l00062" name="l00062"></a><span class="lineno"> 62</span> </div>
<div class="line"><a id="l00063" name="l00063"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89"> 63</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">PECore::peSignatureOffset</a>()</div>
<div class="line"><a id="l00064" name="l00064"></a><span class="lineno"> 64</span>{</div>
<div class="line"><a id="l00065" name="l00065"></a><span class="lineno"> 65</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>)</div>
<div class="line"><a id="l00066" name="l00066"></a><span class="lineno"> 66</span> <a class="code hl_variable" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a> = <span class="keyword">static_cast&lt;</span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">&gt;</span> (<a class="code hl_variable" href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">dos</a>-&gt;e_lfanew);</div>
<div class="line"><a id="l00067" name="l00067"></a><span class="lineno"> 67</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a993156c03286231a174705645c405735">signatureOff</a>;</div>
<div class="line"><a id="l00068" name="l00068"></a><span class="lineno"> 68</span>}</div>
<div class="line"><a id="l00069" name="l00069"></a><span class="lineno"> 69</span> </div>
<div class="line"><a id="l00070" name="l00070"></a><span class="lineno"><a class="line" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc"> 70</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">PECore::peFileHdrOffset</a>()</div>
<div class="line"><a id="l00071" name="l00071"></a><span class="lineno"> 71</span>{</div>
<div class="line"><a id="l00072" name="l00072"></a><span class="lineno"> 72</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00073" name="l00073"></a><span class="lineno"> 73</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code hl_function" href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">peSignatureOffset</a>();</div>
<div class="line"><a id="l00074" name="l00074"></a><span class="lineno"> 74</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> signSize = <span class="keyword">sizeof</span>(DWORD);</div>
<div class="line"><a id="l00075" name="l00075"></a><span class="lineno"> 75</span> <a class="code hl_variable" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a> = offset + signSize;</div>
<div class="line"><a id="l00076" name="l00076"></a><span class="lineno"> 76</span> }</div>
<div class="line"><a id="l00077" name="l00077"></a><span class="lineno"> 77</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">fileHdrOff</a>;</div>
<div class="line"><a id="l00078" name="l00078"></a><span class="lineno"> 78</span> </div>
<div class="line"><a id="l00079" name="l00079"></a><span class="lineno"> 79</span>}</div>
<div class="line"><a id="l00080" name="l00080"></a><span class="lineno"> 80</span> </div>
<div class="line"><a id="l00081" name="l00081"></a><span class="lineno"><a class="line" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292"> 81</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">PECore::peOptHdrOffset</a>()</div>
<div class="line"><a id="l00082" name="l00082"></a><span class="lineno"> 82</span>{</div>
<div class="line"><a id="l00083" name="l00083"></a><span class="lineno"> 83</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00084" name="l00084"></a><span class="lineno"> 84</span> <a class="code hl_variable" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a> = <a class="code hl_function" href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">peFileHdrOffset</a>() + <span class="keyword">sizeof</span>(IMAGE_FILE_HEADER);</div>
<div class="line"><a id="l00085" name="l00085"></a><span class="lineno"> 85</span> }</div>
<div class="line"><a id="l00086" name="l00086"></a><span class="lineno"> 86</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">optHdrOff</a>;</div>
<div class="line"><a id="l00087" name="l00087"></a><span class="lineno"> 87</span>}</div>
<div class="line"><a id="l00088" name="l00088"></a><span class="lineno"> 88</span> </div>
<div class="line"><a id="l00089" name="l00089"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a"> 89</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a">PECore::secHdrsOffset</a>()</div>
<div class="line"><a id="l00090" name="l00090"></a><span class="lineno"> 90</span>{</div>
<div class="line"><a id="l00091" name="l00091"></a><span class="lineno"> 91</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> == <a class="code hl_variable" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) {</div>
<div class="line"><a id="l00092" name="l00092"></a><span class="lineno"> 92</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> offset = <a class="code hl_function" href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">peOptHdrOffset</a>();</div>
<div class="line"><a id="l00093" name="l00093"></a><span class="lineno"> 93</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> size = <span class="keyword">static_cast&lt;</span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a><span class="keyword">&gt;</span>(this-&gt;<a class="code hl_variable" href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">fHdr</a>-&gt;SizeOfOptionalHeader);</div>
<div class="line"><a id="l00094" name="l00094"></a><span class="lineno"> 94</span> <a class="code hl_variable" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a> = offset + size;</div>
<div class="line"><a id="l00095" name="l00095"></a><span class="lineno"> 95</span> }</div>
<div class="line"><a id="l00096" name="l00096"></a><span class="lineno"> 96</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">secHdrsOff</a>;</div>
<div class="line"><a id="l00097" name="l00097"></a><span class="lineno"> 97</span>}</div>
<div class="line"><a id="l00098" name="l00098"></a><span class="lineno"> 98</span> </div>
<div class="line"><a id="l00099" name="l00099"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f"> 99</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f">PECore::getAlignment</a>(<a class="code hl_enumeration" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aType)</div>
<div class="line"><a id="l00100" name="l00100"></a><span class="lineno"> 100</span>{</div>
<div class="line"><a id="l00101" name="l00101"></a><span class="lineno"> 101</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00102" name="l00102"></a><span class="lineno"> 102</span> <span class="keywordflow">if</span> (aType == <a class="code hl_enumvalue" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;FileAlignment;</div>
<div class="line"><a id="l00103" name="l00103"></a><span class="lineno"> 103</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SectionAlignment;</div>
<div class="line"><a id="l00104" name="l00104"></a><span class="lineno"> 104</span> }</div>
<div class="line"><a id="l00105" name="l00105"></a><span class="lineno"> 105</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00106" name="l00106"></a><span class="lineno"> 106</span> <span class="keywordflow">if</span> (aType == <a class="code hl_enumvalue" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>) <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;FileAlignment;</div>
<div class="line"><a id="l00107" name="l00107"></a><span class="lineno"> 107</span> <span class="keywordflow">return</span> <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SectionAlignment;</div>
<div class="line"><a id="l00108" name="l00108"></a><span class="lineno"> 108</span> }</div>
<div class="line"><a id="l00109" name="l00109"></a><span class="lineno"> 109</span> <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00110" name="l00110"></a><span class="lineno"> 110</span>}</div>
<div class="line"><a id="l00111" name="l00111"></a><span class="lineno"> 111</span> </div>
<div class="line"><a id="l00112" name="l00112"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96"> 112</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a>()</div>
<div class="line"><a id="l00113" name="l00113"></a><span class="lineno"> 113</span>{</div>
<div class="line"><a id="l00114" name="l00114"></a><span class="lineno"> 114</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> imgSize = 0;</div>
<div class="line"><a id="l00115" name="l00115"></a><span class="lineno"> 115</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00116" name="l00116"></a><span class="lineno"> 116</span> imgSize = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SizeOfImage;</div>
<div class="line"><a id="l00117" name="l00117"></a><span class="lineno"> 117</span> }</div>
<div class="line"><a id="l00118" name="l00118"></a><span class="lineno"> 118</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00119" name="l00119"></a><span class="lineno"> 119</span> imgSize = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SizeOfImage;</div>
<div class="line"><a id="l00120" name="l00120"></a><span class="lineno"> 120</span> }</div>
<div class="line"><a id="l00121" name="l00121"></a><span class="lineno"> 121</span> <span class="keywordflow">return</span> imgSize;</div>
<div class="line"><a id="l00122" name="l00122"></a><span class="lineno"> 122</span>}</div>
<div class="line"><a id="l00123" name="l00123"></a><span class="lineno"> 123</span> </div>
<div class="line"><a id="l00124" name="l00124"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111"> 124</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">PECore::hdrsSize</a>()</div>
<div class="line"><a id="l00125" name="l00125"></a><span class="lineno"> 125</span>{</div>
<div class="line"><a id="l00126" name="l00126"></a><span class="lineno"> 126</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code hl_function" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">hdrsSize</a> = 0;</div>
<div class="line"><a id="l00127" name="l00127"></a><span class="lineno"> 127</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00128" name="l00128"></a><span class="lineno"> 128</span> hdrsSize = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;SizeOfHeaders;</div>
<div class="line"><a id="l00129" name="l00129"></a><span class="lineno"> 129</span> }</div>
<div class="line"><a id="l00130" name="l00130"></a><span class="lineno"> 130</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00131" name="l00131"></a><span class="lineno"> 131</span> hdrsSize = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;SizeOfHeaders;</div>
<div class="line"><a id="l00132" name="l00132"></a><span class="lineno"> 132</span> }</div>
<div class="line"><a id="l00133" name="l00133"></a><span class="lineno"> 133</span> <span class="keywordflow">return</span> <a class="code hl_function" href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">hdrsSize</a>;</div>
<div class="line"><a id="l00134" name="l00134"></a><span class="lineno"> 134</span>}</div>
<div class="line"><a id="l00135" name="l00135"></a><span class="lineno"> 135</span> </div>
<div class="line"><a id="l00136" name="l00136"></a><span class="lineno"><a class="line" href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519"> 136</a></span><a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code hl_function" href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519">PECore::getImageBase</a>()</div>
<div class="line"><a id="l00137" name="l00137"></a><span class="lineno"> 137</span>{</div>
<div class="line"><a id="l00138" name="l00138"></a><span class="lineno"> 138</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> imgBase = 0;</div>
<div class="line"><a id="l00139" name="l00139"></a><span class="lineno"> 139</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00140" name="l00140"></a><span class="lineno"> 140</span> imgBase = <a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>-&gt;ImageBase;</div>
<div class="line"><a id="l00141" name="l00141"></a><span class="lineno"> 141</span> }</div>
<div class="line"><a id="l00142" name="l00142"></a><span class="lineno"> 142</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>) {</div>
<div class="line"><a id="l00143" name="l00143"></a><span class="lineno"> 143</span> imgBase = <a class="code hl_variable" href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">opt64</a>-&gt;ImageBase;</div>
<div class="line"><a id="l00144" name="l00144"></a><span class="lineno"> 144</span> }</div>
<div class="line"><a id="l00145" name="l00145"></a><span class="lineno"> 145</span> <span class="comment">//can be null, under XP. In this case, the binary will be relocated to 10000h</span></div>
<div class="line"><a id="l00146" name="l00146"></a><span class="lineno"> 146</span> <span class="comment">//(quote: http://code.google.com/p/corkami/wiki/PE)</span></div>
<div class="line"><a id="l00147" name="l00147"></a><span class="lineno"> 147</span> <span class="keywordflow">if</span> (imgBase == 0) {</div>
<div class="line"><a id="l00148" name="l00148"></a><span class="lineno"> 148</span> imgBase = <a class="code hl_define" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
<div class="line"><a id="l00149" name="l00149"></a><span class="lineno"> 149</span> }</div>
<div class="line"><a id="l00150" name="l00150"></a><span class="lineno"> 150</span> </div>
<div class="line"><a id="l00151" name="l00151"></a><span class="lineno"> 151</span> <span class="comment">//in 32 bit PEs: it can be any value as long as ImageBase + &#39;SizeOfImage&#39; &lt; 80000000h</span></div>
<div class="line"><a id="l00152" name="l00152"></a><span class="lineno"> 152</span> <span class="comment">//if the ImageBase is bigger than that, the binary will be relocated to 10000h</span></div>
<div class="line"><a id="l00153" name="l00153"></a><span class="lineno"> 153</span> <span class="keywordflow">if</span> (this-&gt;<a class="code hl_variable" href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">opt32</a>) {</div>
<div class="line"><a id="l00154" name="l00154"></a><span class="lineno"> 154</span> <a class="code hl_typedef" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> maxOffset = this-&gt;<a class="code hl_function" href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">getImageSize</a>() + imgBase;</div>
<div class="line"><a id="l00155" name="l00155"></a><span class="lineno"> 155</span> <span class="keywordflow">if</span> (maxOffset &gt;= 0x80000000) {</div>
<div class="line"><a id="l00156" name="l00156"></a><span class="lineno"> 156</span> imgBase = <a class="code hl_define" href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a>;</div>
<div class="line"><a id="l00157" name="l00157"></a><span class="lineno"> 157</span> }</div>
<div class="line"><a id="l00158" name="l00158"></a><span class="lineno"> 158</span> }</div>
<div class="line"><a id="l00159" name="l00159"></a><span class="lineno"> 159</span> <span class="keywordflow">return</span> imgBase;</div>
<div class="line"><a id="l00160" name="l00160"></a><span class="lineno"> 160</span>}</div>
<div class="line"><a id="l00161" name="l00161"></a><span class="lineno"> 161</span> </div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_a9067dc831274514d508e98df05bf015d"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a></div><div class="ttdeci">uint32_t bufsize_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00014">AbstractByteBuffer.h:14</a></div></div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_ab99058386f4a8bc4e8cd07fad8198178"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a></div><div class="ttdeci">const offset_t INVALID_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00018">AbstractByteBuffer.h:18</a></div></div>
<div class="ttc" id="a_abstract_byte_buffer_8h_html_aea96e09e4ebfca2845a36a4d9882f7f6"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a></div><div class="ttdeci">uint64_t offset_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00017">AbstractByteBuffer.h:17</a></div></div>
<div class="ttc" id="a_p_e_core_8cpp_html_a8f3218e445e49b9d1cc18b39b48d2aa5"><div class="ttname"><a href="_p_e_core_8cpp.html#a8f3218e445e49b9d1cc18b39b48d2aa5">DEFAULT_IMGBASE</a></div><div class="ttdeci">#define DEFAULT_IMGBASE</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00003">PECore.cpp:3</a></div></div>
<div class="ttc" id="a_p_e_core_8h_html"><div class="ttname"><a href="_p_e_core_8h.html">PECore.h</a></div></div>
<div class="ttc" id="aclass_abstract_byte_buffer_html"><div class="ttname"><a href="class_abstract_byte_buffer.html">AbstractByteBuffer</a></div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00031">AbstractByteBuffer.h:32</a></div></div>
<div class="ttc" id="aclass_abstract_byte_buffer_html_a64f38e33f915741eb283ef9a34cacb6d"><div class="ttname"><a href="class_abstract_byte_buffer.html#a64f38e33f915741eb283ef9a34cacb6d">AbstractByteBuffer::getContentAt</a></div><div class="ttdeci">virtual BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8cpp_source.html#l00057">AbstractByteBuffer.cpp:57</a></div></div>
<div class="ttc" id="aclass_exe_exception_html"><div class="ttname"><a href="class_exe_exception.html">ExeException</a></div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00008">Executable.h:9</a></div></div>
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a></div><div class="ttdeci">addr_type</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00035">Executable.h:35</a></div></div>
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a></div><div class="ttdeci">@ RAW</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00037">Executable.h:37</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684">Executable::exe_bits</a></div><div class="ttdeci">exe_bits</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00028">Executable.h:28</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684ade6e5cfe04548ba12f4eb9646b9b091f">Executable::BITS_32</a></div><div class="ttdeci">@ BITS_32</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00031">Executable.h:31</a></div></div>
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a></div><div class="ttdeci">@ BITS_64</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00032">Executable.h:32</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a1214a0d48a62e41e2feb52ba2d602f70"><div class="ttname"><a href="class_p_e_core.html#a1214a0d48a62e41e2feb52ba2d602f70">PECore::secHdrsOff</a></div><div class="ttdeci">offset_t secHdrsOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00047">PECore.h:47</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a26f7c98feaa67ad523fc745d7c0404a2"><div class="ttname"><a href="class_p_e_core.html#a26f7c98feaa67ad523fc745d7c0404a2">PECore::getHdrBitMode</a></div><div class="ttdeci">Executable::exe_bits getHdrBitMode()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00055">PECore.cpp:55</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a2ae38f9f55db2b0ade16500364bab84f"><div class="ttname"><a href="class_p_e_core.html#a2ae38f9f55db2b0ade16500364bab84f">PECore::getAlignment</a></div><div class="ttdeci">virtual bufsize_t getAlignment(Executable::addr_type aType)</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00099">PECore.cpp:99</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a57d02ca8214e0c9903136dc2da72ed89"><div class="ttname"><a href="class_p_e_core.html#a57d02ca8214e0c9903136dc2da72ed89">PECore::peSignatureOffset</a></div><div class="ttdeci">offset_t peSignatureOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00063">PECore.cpp:63</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a5cbff89db2c03aa6828f881962b09f2a"><div class="ttname"><a href="class_p_e_core.html#a5cbff89db2c03aa6828f881962b09f2a">PECore::secHdrsOffset</a></div><div class="ttdeci">offset_t secHdrsOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00089">PECore.cpp:89</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a78e7bc74699074938bb07d6e17aee1eb"><div class="ttname"><a href="class_p_e_core.html#a78e7bc74699074938bb07d6e17aee1eb">PECore::opt32</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER32 * opt32</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00042">PECore.h:42</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a7d654edc4d82e1d1643e49081bc5657c"><div class="ttname"><a href="class_p_e_core.html#a7d654edc4d82e1d1643e49081bc5657c">PECore::wrap</a></div><div class="ttdeci">bool wrap(AbstractByteBuffer *v_buf)</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00018">PECore.cpp:18</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a7e2c4c279eba3d3573b6a66a6832e519"><div class="ttname"><a href="class_p_e_core.html#a7e2c4c279eba3d3573b6a66a6832e519">PECore::getImageBase</a></div><div class="ttdeci">virtual offset_t getImageBase()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00136">PECore.cpp:136</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a85379f1dc8b87ff925998c9f737dc111"><div class="ttname"><a href="class_p_e_core.html#a85379f1dc8b87ff925998c9f737dc111">PECore::hdrsSize</a></div><div class="ttdeci">bufsize_t hdrsSize()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00124">PECore.cpp:124</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a8b0fbf4bbe04a98e2573b48abe0aea18"><div class="ttname"><a href="class_p_e_core.html#a8b0fbf4bbe04a98e2573b48abe0aea18">PECore::buf</a></div><div class="ttdeci">AbstractByteBuffer * buf</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00038">PECore.h:38</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a91d89cd5d9f8b6f84c6eab5b195dc1ec"><div class="ttname"><a href="class_p_e_core.html#a91d89cd5d9f8b6f84c6eab5b195dc1ec">PECore::reset</a></div><div class="ttdeci">void reset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00005">PECore.cpp:5</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a968d53a13a783b32a6b3adbbdbd00e96"><div class="ttname"><a href="class_p_e_core.html#a968d53a13a783b32a6b3adbbdbd00e96">PECore::getImageSize</a></div><div class="ttdeci">virtual bufsize_t getImageSize()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00112">PECore.cpp:112</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_a993156c03286231a174705645c405735"><div class="ttname"><a href="class_p_e_core.html#a993156c03286231a174705645c405735">PECore::signatureOff</a></div><div class="ttdeci">offset_t signatureOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00045">PECore.h:45</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa7909e838ed55e1e29e12e89475aaf20"><div class="ttname"><a href="class_p_e_core.html#aa7909e838ed55e1e29e12e89475aaf20">PECore::fHdr</a></div><div class="ttdeci">IMAGE_FILE_HEADER * fHdr</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00041">PECore.h:41</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa9096604dc3a275b94507c62374c8292"><div class="ttname"><a href="class_p_e_core.html#aa9096604dc3a275b94507c62374c8292">PECore::peOptHdrOffset</a></div><div class="ttdeci">offset_t peOptHdrOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00081">PECore.cpp:81</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_aa97e605aa1e20e0f0a48eb6eb62a3ba7"><div class="ttname"><a href="class_p_e_core.html#aa97e605aa1e20e0f0a48eb6eb62a3ba7">PECore::fileHdrOff</a></div><div class="ttdeci">offset_t fileHdrOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00046">PECore.h:46</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ac8e141e201db3fc46867b5712847a7dc"><div class="ttname"><a href="class_p_e_core.html#ac8e141e201db3fc46867b5712847a7dc">PECore::peFileHdrOffset</a></div><div class="ttdeci">offset_t peFileHdrOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8cpp_source.html#l00070">PECore.cpp:70</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ad28c19fee0317e4986f322f8fad4c97a"><div class="ttname"><a href="class_p_e_core.html#ad28c19fee0317e4986f322f8fad4c97a">PECore::opt64</a></div><div class="ttdeci">IMAGE_OPTIONAL_HEADER64 * opt64</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00043">PECore.h:43</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_ad38f31eeed026f5a19c3a18ccd465e38"><div class="ttname"><a href="class_p_e_core.html#ad38f31eeed026f5a19c3a18ccd465e38">PECore::optHdrOff</a></div><div class="ttdeci">offset_t optHdrOff</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00048">PECore.h:48</a></div></div>
<div class="ttc" id="aclass_p_e_core_html_af99e6949cf43d775874f7e24d74fb7aa"><div class="ttname"><a href="class_p_e_core.html#af99e6949cf43d775874f7e24d74fb7aa">PECore::dos</a></div><div class="ttdeci">IMAGE_DOS_HEADER * dos</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_core_8h_source.html#l00040">PECore.h:40</a></div></div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated by&#160;<a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.3
</small></address>
</body>
</html>
Reference in New Issue View Git Blame Copy Permalink