BearParser
Portable Executable parsing library (from PE-bear)
Loading...
Searching...
No Matches
Public Member Functions | Protected Member Functions | Protected Attributes | Friends | List of all members
BoundImpDirWrapper Class Reference

#include <BoundImpDirWrapper.h>

Collaboration diagram for BoundImpDirWrapper:
Collaboration graph
[legend]

Public Member Functions

 BoundImpDirWrapper (PEFile *pe)
virtual bool wrap ()
virtual void * getPtr ()
virtual bufsize_t getSize ()
virtual QString getName ()
virtual size_t getFieldsCount ()
virtual void * getFieldPtr (size_t fieldId, size_t subField)
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
virtual QString getFieldName (size_t fieldId, size_t subField)
virtual QString getFieldName (size_t fieldId)
Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY * getDataDirectory ()
offset_t getDirEntryAddress ()
bufsize_t getDirEntrySize (bool trimToExeSize=false)
int getDirEntryType ()
Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
virtual ~PENodeWrapper ()
PEFile * getPE ()
virtual PENodeWrapper * getParentNode ()
Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
virtual ~ExeNodeWrapper ()
virtual void reloadMapping ()
virtual ExeNodeWrapper * getEntryAt (size_t fieldId)
virtual size_t getEntriesCount ()
virtual size_t getEntriesNum ()
virtual size_t getSubFieldsCount ()
size_t getEntryId ()
virtual void * getSubfieldPtr (size_t fieldId, size_t subField)
virtual bufsize_t getSubfieldSize (size_t fieldId, size_t subField)
virtual QString getSubfieldName (size_t fieldId, size_t subField)
virtual bool canAddEntry ()
virtual ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
ExeNodeWrapper * getLastEntry ()
virtual offset_t getNextEntryOffset ()
virtual bufsize_t geEntrySize ()
virtual bool isValid ()
Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
virtual ~ExeElementWrapper ()
virtual bufsize_t getContentSize ()
virtual BYTE * getContent ()
virtual offset_t getOffset ()
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
void * getFieldPtr (size_t fieldId)
virtual offset_t getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE)
virtual QString translateFieldContent (size_t fieldId)
virtual bool hasSubfieldWrapper (size_t parentType)
virtual WrappedValue getWrappedValue (size_t fieldId, size_t subField)
virtual WrappedValue getWrappedValue (size_t fieldId)
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
virtual uint64_t getNumValue (size_t fieldId, size_t subField, bool *isOk)
uint64_t getNumValue (size_t fieldId, bool *isOk)
virtual bool setNumValue (size_t fieldId, size_t subField, uint64_t val)
bool setNumValue (size_t fieldId, uint64_t val)
Executable * getExe ()
bool isBit64 ()
bool isBit32 ()
Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
virtual ~AbstractByteBuffer ()
virtual bool isTruncated ()
virtual bool isResized ()
BYTE operator[] (size_t idx)
virtual BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
virtual BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
virtual bool setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
bool setStringValue (offset_t rawOffset, QString newText)
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
QString getWStringValue (offset_t rawOffset, bufsize_t len)
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
bool isAreaEmpty (offset_t rawOffset, bufsize_t size)
bool fillContent (BYTE filling)
bool pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
bool containsBlock (offset_t rawOffset, bufsize_t size)
bool intersectsBlock (offset_t rawOffset, bufsize_t size)
uint64_t getNumValue (offset_t offset, bufsize_t size, bool *isOk)
bool setNumValue (offset_t offset, bufsize_t size, uint64_t newVal)
bool setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0)
virtual bool resize (bufsize_t newSize)
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)

Protected Member Functions

bool loadNextEntry (size_t entryNum)
IMAGE_BOUND_IMPORT_DESCRIPTOR * boundImp ()
Protected Member Functions inherited from DataDirEntryWrapper
 DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)
Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
virtual void clear ()
virtual void addMapping (ExeNodeWrapper *entry)
virtual ExeNodeWrapper * addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)
virtual bool isMyEntryType (ExeNodeWrapper *entry)
Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
bool copyToOffset (offset_t rawOffset)

Protected Attributes

size_t importsCount
Protected Attributes inherited from DataDirEntryWrapper
int entryType
Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
PENodeWrapper * peParentNode
Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
size_t entryNum
std::vector< ExeNodeWrapper * > entries
Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe

Friends

class BoundEntryWrapper

Additional Inherited Members

Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)

Detailed Description

Definition at line 5 of file BoundImpDirWrapper.h.

Constructor & Destructor Documentation

◆ BoundImpDirWrapper()

BoundImpDirWrapper::BoundImpDirWrapper ( PEFile * pe)
inline

Definition at line 8 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

Member Function Documentation

◆ boundImp()

IMAGE_BOUND_IMPORT_DESCRIPTOR * BoundImpDirWrapper::boundImp ( )
protected

Definition at line 20 of file BoundImpDirWrapper.cpp.

Here is the call graph for this function:

◆ getFieldName() [1/2]

virtual QString BoundImpDirWrapper::getFieldName ( size_t fieldId)
inlinevirtual

Implements ExeNodeWrapper.

Definition at line 22 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

◆ getFieldName() [2/2]

virtual QString BoundImpDirWrapper::getFieldName ( size_t fieldId,
size_t subField )
inlinevirtual

Definition at line 21 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

◆ getFieldPtr()

virtual void * BoundImpDirWrapper::getFieldPtr ( size_t fieldId,
size_t subField )
inlinevirtual

Implements ExeElementWrapper.

Definition at line 18 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

◆ getFieldsCount()

virtual size_t BoundImpDirWrapper::getFieldsCount ( )
inlinevirtual

Implements ExeElementWrapper.

Definition at line 16 of file BoundImpDirWrapper.h.

◆ getFieldSize()

virtual bufsize_t BoundImpDirWrapper::getFieldSize ( size_t fieldId,
size_t subField = FIELD_NONE )
inlinevirtual

Reimplemented from ExeElementWrapper.

Definition at line 19 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

◆ getName()

virtual QString BoundImpDirWrapper::getName ( )
inlinevirtual

Implements ExeElementWrapper.

Definition at line 15 of file BoundImpDirWrapper.h.

◆ getPtr()

virtual void * BoundImpDirWrapper::getPtr ( )
inlinevirtual

Implements ExeElementWrapper.

Definition at line 13 of file BoundImpDirWrapper.h.

Here is the call graph for this function:

◆ getSize()

bufsize_t BoundImpDirWrapper::getSize ( )
virtual

Implements ExeElementWrapper.

Definition at line 66 of file BoundImpDirWrapper.cpp.

Here is the call graph for this function:

◆ loadNextEntry()

bool BoundImpDirWrapper::loadNextEntry ( size_t entryNum)
protectedvirtual

Reimplemented from ExeNodeWrapper.

Definition at line 29 of file BoundImpDirWrapper.cpp.

Here is the call graph for this function:

◆ wrap()

bool BoundImpDirWrapper::wrap ( )
virtual

Reimplemented from ExeNodeWrapper.

Definition at line 47 of file BoundImpDirWrapper.cpp.

Here is the call graph for this function:

◆ BoundEntryWrapper

friend class BoundEntryWrapper
friend

Definition at line 30 of file BoundImpDirWrapper.h.

Member Data Documentation

◆ importsCount

size_t BoundImpDirWrapper::importsCount
protected

Definition at line 28 of file BoundImpDirWrapper.h.

The documentation for this class was generated from the following files:
Generated by doxygen 1.17.0