|
BearParser
Portable Executable parsing library (from PE-bear)
|
#include <DelayImpDirWrapper.h>

Public Types | |
| enum | FieldID { NONE = FIELD_NONE , NAMETHUNK_ADDR , IAT_ADDR , BOUND_IAT_ADDR , UNLOAD_IAT_ADDR , FIELD_COUNTER } |
Public Member Functions | |
| DelayImpFuncWrapper (PEFile *pe, DelayImpEntryWrapper *parentDir, size_t entryNumber) | |
| virtual void * | getPtr () |
| virtual bufsize_t | getSize () |
| virtual size_t | getFieldsCount () |
| virtual size_t | getSubFieldsCount () |
| virtual void * | getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE) |
| virtual bufsize_t | getFieldSize (size_t fieldId, size_t subField=FIELD_NONE) |
| virtual QString | getFieldName (size_t fieldId) |
| virtual Executable::addr_type | containsAddrType (size_t fieldId, size_t subField) |
| char * | getFunctionName () |
| uint16_t | getHint () |
| bool | isByOrdinal () |
| virtual uint64_t | getOrdinal () |
| offset_t | callVia () |
Public Member Functions inherited from ImportBaseFuncWrapper | |
| ImportBaseFuncWrapper (PEFile *pe, ImportBaseEntryWrapper *parentLib, size_t entryNumber) | |
| virtual QString | getName () |
| QString | getShortName () |
| QString | getLibName () |
| virtual bool | isValid () |
| bufsize_t | getAddrSize () |
| bufsize_t | getThunkValSize () |
Public Member Functions inherited from PENodeWrapper | |
| PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL) | |
| PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber) | |
| virtual | ~PENodeWrapper () |
| PEFile * | getPE () |
| virtual PENodeWrapper * | getParentNode () |
Public Member Functions inherited from ExeNodeWrapper | |
| ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL) | |
| ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber) | |
| virtual | ~ExeNodeWrapper () |
| virtual bool | wrap () |
| virtual void | reloadMapping () |
| virtual ExeNodeWrapper * | getEntryAt (size_t fieldId) |
| virtual size_t | getEntriesCount () |
| virtual size_t | getEntriesNum () |
| size_t | getEntryId () |
| virtual void * | getSubfieldPtr (size_t fieldId, size_t subField) |
| virtual bufsize_t | getSubfieldSize (size_t fieldId, size_t subField) |
| virtual QString | getSubfieldName (size_t fieldId, size_t subField) |
| virtual bool | canAddEntry () |
| virtual ExeNodeWrapper * | addEntry (ExeNodeWrapper *entry) |
| ExeNodeWrapper * | getLastEntry () |
| virtual offset_t | getNextEntryOffset () |
| virtual bufsize_t | geEntrySize () |
Public Member Functions inherited from ExeElementWrapper | |
| ExeElementWrapper (Executable *exe) | |
| virtual | ~ExeElementWrapper () |
| virtual bufsize_t | getContentSize () |
| virtual BYTE * | getContent () |
| virtual offset_t | getOffset () |
| virtual offset_t | getOffset (void *ptr, bool allowExceptions=false) |
| void * | getFieldPtr (size_t fieldId) |
| virtual offset_t | getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE) |
| virtual QString | translateFieldContent (size_t fieldId) |
| virtual bool | hasSubfieldWrapper (size_t parentType) |
| virtual WrappedValue | getWrappedValue (size_t fieldId, size_t subField) |
| virtual WrappedValue | getWrappedValue (size_t fieldId) |
| virtual WrappedValue::data_type | containsDataType (size_t fieldId, size_t subField=FIELD_NONE) |
| virtual uint64_t | getNumValue (size_t fieldId, size_t subField, bool *isOk) |
| uint64_t | getNumValue (size_t fieldId, bool *isOk) |
| virtual bool | setNumValue (size_t fieldId, size_t subField, uint64_t val) |
| bool | setNumValue (size_t fieldId, uint64_t val) |
| Executable * | getExe () |
| bool | isBit64 () |
| bool | isBit32 () |
Public Member Functions inherited from AbstractByteBuffer | |
| AbstractByteBuffer () | |
| virtual | ~AbstractByteBuffer () |
| virtual bool | isTruncated () |
| virtual bool | isResized () |
| BYTE | operator[] (size_t idx) |
| virtual BYTE * | getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false) |
| virtual BYTE * | getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false) |
| virtual bool | setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) |
| bool | setStringValue (offset_t rawOffset, QString newText) |
| QString | getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) |
| QString | getWStringValue (offset_t rawOffset, bufsize_t len) |
| QString | getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) |
| bufsize_t | getMaxSizeFromOffset (offset_t startOffset) |
| bufsize_t | getMaxSizeFromPtr (BYTE *ptr) |
| bool | isAreaEmpty (offset_t rawOffset, bufsize_t size) |
| bool | fillContent (BYTE filling) |
| bool | pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) |
| bool | containsBlock (offset_t rawOffset, bufsize_t size) |
| bool | intersectsBlock (offset_t rawOffset, bufsize_t size) |
| uint64_t | getNumValue (offset_t offset, bufsize_t size, bool *isOk) |
| bool | setNumValue (offset_t offset, bufsize_t size, uint64_t newVal) |
| bool | setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0) |
| virtual bool | resize (bufsize_t newSize) |
| offset_t | substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn) |
Additional Inherited Members | |
Static Public Member Functions inherited from AbstractByteBuffer | |
| static bool | isValid (AbstractByteBuffer *buf) |
Protected Member Functions inherited from ExeNodeWrapper | |
| size_t | getEntriesCount (std::vector< ExeNodeWrapper * > &_entries) |
| ExeNodeWrapper * | getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId) |
| virtual void | clear () |
| virtual void | addMapping (ExeNodeWrapper *entry) |
| virtual bool | loadNextEntry (size_t entryNum) |
| virtual ExeNodeWrapper * | addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset) |
| virtual bool | isMyEntryType (ExeNodeWrapper *entry) |
Protected Member Functions inherited from ExeElementWrapper | |
| virtual bool | canCopyToOffset (offset_t rawOffset) |
| bool | copyToOffset (offset_t rawOffset) |
Protected Attributes inherited from PENodeWrapper | |
| PEFile * | m_PE |
| PENodeWrapper * | peParentNode |
Protected Attributes inherited from ExeNodeWrapper | |
| ExeNodeWrapper * | parentNode |
| size_t | entryNum |
| std::vector< ExeNodeWrapper * > | entries |
Protected Attributes inherited from ExeElementWrapper | |
| Executable * | m_Exe |
Definition at line 71 of file DelayImpDirWrapper.h.
| Enumerator | |
|---|---|
| NONE | |
| NAMETHUNK_ADDR | |
| IAT_ADDR | |
| BOUND_IAT_ADDR | |
| UNLOAD_IAT_ADDR | |
| FIELD_COUNTER | |
Definition at line 75 of file DelayImpDirWrapper.h.
|
inline |
|
virtual |
Implements ImportBaseFuncWrapper.
Definition at line 287 of file DelayImpDirWrapper.cpp.
|
virtual |
Reimplemented from ExeElementWrapper.
Definition at line 318 of file DelayImpDirWrapper.cpp.

|
virtual |
Implements ExeNodeWrapper.
Definition at line 298 of file DelayImpDirWrapper.cpp.
|
virtual |
Implements ExeElementWrapper.
Definition at line 257 of file DelayImpDirWrapper.cpp.

|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 92 of file DelayImpDirWrapper.h.
|
virtual |
Reimplemented from ExeElementWrapper.
Definition at line 309 of file DelayImpDirWrapper.cpp.
|
virtual |
Implements ImportBaseFuncWrapper.
Definition at line 236 of file DelayImpDirWrapper.cpp.

| uint16_t DelayImpFuncWrapper::getHint | ( | ) |
|
virtual |
Implements ImportBaseFuncWrapper.
Definition at line 223 of file DelayImpDirWrapper.cpp.

|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 88 of file DelayImpDirWrapper.h.

|
inlinevirtual |
Implements ExeElementWrapper.
Definition at line 89 of file DelayImpDirWrapper.h.
|
inlinevirtual |
Reimplemented from ExeNodeWrapper.
Definition at line 93 of file DelayImpDirWrapper.h.
|
virtual |
Implements ImportBaseFuncWrapper.
Definition at line 208 of file DelayImpDirWrapper.cpp.
