BearParser
Portable Executable parsing library (from PE-bear)
Loading...
Searching...
No Matches
Executable Member List

This is the complete list of members for Executable, including all inherited members.

AbstractByteBuffer()AbstractByteBufferinline
addr_type enum nameExecutable
ARCH_ARM enum valueExecutable
ARCH_INTEL enum valueExecutable
ARCH_UNKNOWN enum valueExecutable
bitModeExecutableprotected
BITS_16 enum valueExecutable
BITS_32 enum valueExecutable
BITS_64 enum valueExecutable
bufExecutableprotected
containsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)Executablevirtual
detectAddrType(offset_t addr, Executable::addr_type hintType)Executable
dumpFragment(offset_t offset, bufsize_t size, QString fileName)Executablevirtual
exe_arch enum nameExecutable
exe_bits enum nameExecutable
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode)Executableprotected
fillContent(BYTE filling)AbstractByteBuffer
getAlignment(Executable::addr_type aType) const =0Executablepure virtual
getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)Executableinlinevirtual
getArch()=0Executablepure virtual
getBitMode()Executableinlinevirtual
getContent()Executableinlinevirtual
getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)Executableinlinevirtual
getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false)Executablevirtual
getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)Executableinlinevirtual
getContentSize()Executableinlinevirtual
getEntryPoint(Executable::addr_type aType=Executable::RVA)=0Executablepure virtual
getFileBuffer() constExecutableinline
getFileName()Executable
getFileSize() constExecutable
getImageBase(bool recalculate=false)=0Executablepure virtual
getImageSize()Executableinlinevirtual
getMappedSize(Executable::addr_type aType)=0Executablepure virtual
getMaxSizeFromOffset(offset_t startOffset)AbstractByteBuffer
getMaxSizeFromPtr(BYTE *ptr)AbstractByteBufferinline
getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer
getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual
getRawSize() constExecutableinlinevirtual
getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer
getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer
getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer
intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
isBit32(Executable *exe)Executableinlinestatic
isBit32()Executableinline
isBit64(Executable *exe)Executableinlinestatic
isBit64()Executableinline
isResized()Executableinlinevirtual
isTruncated()Executableinlinevirtual
isValid(AbstractByteBuffer *buf)AbstractByteBufferstatic
isValidAddr(offset_t addr, addr_type addrType)Executablevirtual
isValidVA(offset_t va)Executableinlinevirtual
NOT_ADDR enum valueExecutable
operator[](size_t idx)AbstractByteBuffer
pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)AbstractByteBuffer
RAW enum valueExecutable
rawToRva(offset_t raw)=0Executablepure virtual
resize(bufsize_t newSize)Executableinlinevirtual
RVA enum valueExecutable
rvaToRaw(offset_t rva)=0Executablepure virtual
rvaToVa(offset_t rva)Executableinlinevirtual
setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)AbstractByteBuffervirtual
setNumValue(offset_t offset, bufsize_t size, uint64_t newVal)AbstractByteBuffer
setStringValue(offset_t rawOffset, QString newText)AbstractByteBuffer
setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0)AbstractByteBuffer
substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn)AbstractByteBuffer
toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)Executablevirtual
UNKNOWN enum valueExecutable
VA enum valueExecutable
vaToRaw(offset_t va)Executableinlinevirtual
VaToRva(offset_t va, bool autodetect=false)Executablevirtual
~AbstractByteBuffer()AbstractByteBufferinlinevirtual
~Executable(void)Executableinlinevirtual