BearParser
Portable Executable parsing library (from PE-bear)
|
This is the complete list of members for DataDirWrapper, including all inherited members.
AbstractByteBuffer() | AbstractByteBuffer | inline |
ADDRESS enum value | DataDirWrapper | |
canCopyToOffset(offset_t rawOffset) | ExeElementWrapper | protectedvirtual |
containsAddrType(size_t fieldId, size_t subField=FIELD_NONE) | DataDirWrapper | virtual |
containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
containsDataType(size_t fieldId, size_t subField=FIELD_NONE) | ExeElementWrapper | inlinevirtual |
copyToOffset(offset_t rawOffset) | ExeElementWrapper | protected |
COUNTER enum value | DataDirWrapper | |
DataDirSID enum name | DataDirWrapper | |
DataDirWrapper(PEFile *pe) | DataDirWrapper | inline |
ExeElementWrapper(Executable *exe) | ExeElementWrapper | |
fillContent(BYTE filling) | AbstractByteBuffer | |
getContent() | ExeElementWrapper | inlinevirtual |
getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | AbstractByteBuffer | virtual |
getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | AbstractByteBuffer | virtual |
getContentSize() | ExeElementWrapper | inlinevirtual |
getDirsCount() | DataDirWrapper | |
getExe() | ExeElementWrapper | inline |
getFieldName(size_t fieldId) | DataDirWrapper | virtual |
getFieldOffset(size_t fieldId, size_t subField=FIELD_NONE) | ExeElementWrapper | virtual |
getFieldPtr(size_t fieldId, size_t subField) | DataDirWrapper | virtual |
PEElementWrapper::getFieldPtr(size_t fieldId) | ExeElementWrapper | inline |
getFieldsCount() | DataDirWrapper | inlinevirtual |
getFieldSize(size_t fieldId, size_t subField) | DataDirWrapper | virtual |
getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
getName() | DataDirWrapper | inlinevirtual |
getNumValue(size_t fieldId, size_t subField, bool *isOk) | ExeElementWrapper | virtual |
getNumValue(size_t fieldId, bool *isOk) | ExeElementWrapper | inline |
AbstractByteBuffer::getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
getOffset() | ExeElementWrapper | virtual |
getOffset(void *ptr, bool allowExceptions=false) | ExeElementWrapper | virtual |
getPE() | PEElementWrapper | inline |
getPtr() | DataDirWrapper | virtual |
getSize() | DataDirWrapper | virtual |
getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getSubFieldsCount() | DataDirWrapper | inlinevirtual |
getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getWrappedValue(size_t fieldId, size_t subField) | ExeElementWrapper | virtual |
getWrappedValue(size_t fieldId) | ExeElementWrapper | inlinevirtual |
getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
hasSubfieldWrapper(size_t parentType) | ExeElementWrapper | inlinevirtual |
intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isBit32() | ExeElementWrapper | inline |
isBit64() | ExeElementWrapper | inline |
isResized() | AbstractByteBuffer | inlinevirtual |
isTruncated() | AbstractByteBuffer | inlinevirtual |
isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
m_Exe | ExeElementWrapper | protected |
m_PE | PEElementWrapper | protected |
NONE enum value | DataDirWrapper | |
operator[](size_t idx) | AbstractByteBuffer | |
pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) | AbstractByteBuffer | |
PEElementWrapper(PEFile *pe) | PEElementWrapper | |
resize(bufsize_t newSize) | AbstractByteBuffer | inlinevirtual |
setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
setNumValue(size_t fieldId, size_t subField, uint64_t val) | ExeElementWrapper | virtual |
setNumValue(size_t fieldId, uint64_t val) | ExeElementWrapper | inline |
AbstractByteBuffer::setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
SIZE enum value | DataDirWrapper | |
substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
translateFieldContent(size_t fieldId) | ExeElementWrapper | inlinevirtual |
wrap() | ExeElementWrapper | inlinevirtual |
~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
~ExeElementWrapper() | ExeElementWrapper | inlinevirtual |
~PEElementWrapper() | PEElementWrapper | inlinevirtual |