#include <ImportBaseDirWrapper.h>

Collaboration diagram for ImportBaseDirWrapper:

[legend]

Public Member Functions
virtual bool	wrap ()

virtual bool	isValid ()

virtual void	clearMapping ()

virtual void	reloadMapping ()

virtual size_t	getFieldsCount ()

virtual void *	getFieldPtr (size_t fieldId, size_t subField)

virtual QString	getFieldName (size_t fieldId, size_t subField)

virtual QString	getFieldName (size_t fieldId)

virtual bufsize_t	getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)

QString	thunkToFuncName (offset_t thunk, bool shortName=true)

QString	thunkToLibName (offset_t thunk)

QList< offset_t >	getThunksList ()

bool	hasThunk (offset_t thunk)

ImportBaseFuncWrapper *	thunkToFunction (offset_t thunk)

Public Member Functions inherited from DataDirEntryWrapper
IMAGE_DATA_DIRECTORY *	getDataDirectory ()

offset_t	getDirEntryAddress ()

bufsize_t	getDirEntrySize (bool trimToExeSize=false)

int	getDirEntryType ()

Public Member Functions inherited from PENodeWrapper
	PENodeWrapper (PEFile pe, PENodeWrapper parent=NULL)

	PENodeWrapper (PEFile pe, PENodeWrapper parent, size_t entryNumber)

virtual	~PENodeWrapper ()

PEFile *	getPE ()

virtual PENodeWrapper *	getParentNode ()

Public Member Functions inherited from ExeNodeWrapper
	ExeNodeWrapper (Executable pe, ExeNodeWrapper parent=NULL)

	ExeNodeWrapper (Executable pe, ExeNodeWrapper parent, size_t entryNumber)

virtual	~ExeNodeWrapper ()

virtual ExeNodeWrapper *	getEntryAt (size_t fieldId)

virtual size_t	getEntriesCount ()

virtual size_t	getEntriesNum ()

virtual size_t	getSubFieldsCount ()

size_t	getEntryId ()

virtual void *	getSubfieldPtr (size_t fieldId, size_t subField)

virtual bufsize_t	getSubfieldSize (size_t fieldId, size_t subField)

virtual QString	getSubfieldName (size_t fieldId, size_t subField)

virtual bool	canAddEntry ()

virtual ExeNodeWrapper *	addEntry (ExeNodeWrapper *entry)

ExeNodeWrapper *	getLastEntry ()

virtual offset_t	getNextEntryOffset ()

virtual bufsize_t	geEntrySize ()

Public Member Functions inherited from ExeElementWrapper
	ExeElementWrapper (Executable *exe)

virtual	~ExeElementWrapper ()

virtual bufsize_t	getContentSize ()

virtual BYTE *	getContent ()

virtual void *	getPtr ()=0

virtual bufsize_t	getSize ()=0

virtual QString	getName ()=0

virtual offset_t	getOffset ()

virtual offset_t	getOffset (void *ptr, bool allowExceptions=false)

void *	getFieldPtr (size_t fieldId)

virtual offset_t	getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE)

virtual QString	translateFieldContent (size_t fieldId)

virtual bool	hasSubfieldWrapper (size_t parentType)

virtual WrappedValue	getWrappedValue (size_t fieldId, size_t subField)

virtual WrappedValue	getWrappedValue (size_t fieldId)

virtual Executable::addr_type	containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)

virtual WrappedValue::data_type	containsDataType (size_t fieldId, size_t subField=FIELD_NONE)

virtual uint64_t	getNumValue (size_t fieldId, size_t subField, bool *isOk)

uint64_t	getNumValue (size_t fieldId, bool *isOk)

virtual bool	setNumValue (size_t fieldId, size_t subField, uint64_t val)

bool	setNumValue (size_t fieldId, uint64_t val)

Executable *	getExe ()

bool	isBit64 ()

bool	isBit32 ()

Public Member Functions inherited from AbstractByteBuffer
	AbstractByteBuffer ()

virtual	~AbstractByteBuffer ()

virtual bool	isTruncated ()

virtual bool	isResized ()

BYTE	operator[] (size_t idx)

virtual BYTE *	getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)

virtual BYTE *	getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)

virtual bool	setBufferedValue (BYTE dstPtr, BYTE srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)

bool	setStringValue (offset_t rawOffset, QString newText)

QString	getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)

QString	getWStringValue (offset_t rawOffset, bufsize_t len)

QString	getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)

bufsize_t	getMaxSizeFromOffset (offset_t startOffset)

bufsize_t	getMaxSizeFromPtr (BYTE *ptr)

bool	isAreaEmpty (offset_t rawOffset, bufsize_t size)

bool	fillContent (BYTE filling)

bool	pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)

bool	containsBlock (offset_t rawOffset, bufsize_t size)

bool	intersectsBlock (offset_t rawOffset, bufsize_t size)

uint64_t	getNumValue (offset_t offset, bufsize_t size, bool *isOk)

bool	setNumValue (offset_t offset, bufsize_t size, uint64_t newVal)

bool	setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0)

virtual bool	resize (bufsize_t newSize)

offset_t	substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)

Static Public Member Functions
static bufsize_t	thunkSize (Executable::exe_bits bits)

Static Public Member Functions inherited from AbstractByteBuffer
static bool	isValid (AbstractByteBuffer *buf)

Protected Member Functions
	ImportBaseDirWrapper (PEFile *pe, pe::dir_entry v_entryType)

void	addMapping (ExeNodeWrapper *func)

ImportBaseEntryWrapper *	thunkToLib (offset_t thunk)

Protected Member Functions inherited from DataDirEntryWrapper
	DataDirEntryWrapper (PEFile *pe, pe::dir_entry v_entryType)

Protected Member Functions inherited from ExeNodeWrapper
size_t	getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)

ExeNodeWrapper *	getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)

virtual void	clear ()

virtual bool	loadNextEntry (size_t entryNum)

virtual ExeNodeWrapper *	addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)

virtual bool	isMyEntryType (ExeNodeWrapper *entry)

Protected Member Functions inherited from ExeElementWrapper
virtual bool	canCopyToOffset (offset_t rawOffset)

bool	copyToOffset (offset_t rawOffset)

Protected Attributes
std::map< offset_t, size_t >	thunkToLibMap

QList< offset_t >	thunksList

size_t	importsCount

size_t	invalidEntries

Protected Attributes inherited from DataDirEntryWrapper
int	entryType

Protected Attributes inherited from PENodeWrapper
PEFile *	m_PE

PENodeWrapper *	peParentNode

Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper *	parentNode

size_t	entryNum

std::vector< ExeNodeWrapper * >	entries

Protected Attributes inherited from ExeElementWrapper
Executable *	m_Exe

Friends
class	ImportBaseEntryWrapper

Detailed Description

Definition at line 15 of file ImportBaseDirWrapper.h.

Constructor & Destructor Documentation

◆ ImportBaseDirWrapper()

ImportBaseDirWrapper::ImportBaseDirWrapper	(	PEFile *	pe,
		pe::dir_entry	v_entryType )

inlineprotected

Definition at line 45 of file ImportBaseDirWrapper.h.

Member Function Documentation

◆ addMapping()

void ImportBaseDirWrapper::addMapping ( ExeNodeWrapper * func )

protectedvirtual

Reimplemented from ExeNodeWrapper.

Definition at line 30 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ clearMapping()

void ImportBaseDirWrapper::clearMapping ( )

virtual

Definition at line 52 of file ImportBaseDirWrapper.cpp.

◆ getFieldName() [1/2]

virtual QString ImportBaseDirWrapper::getFieldName ( size_t fieldId )

inlinevirtual

Implements ExeNodeWrapper.

Definition at line 29 of file ImportBaseDirWrapper.h.

Here is the call graph for this function:

◆ getFieldName() [2/2]

virtual QString ImportBaseDirWrapper::getFieldName	(	size_t	fieldId,
		size_t	subField )

inlinevirtual

Definition at line 28 of file ImportBaseDirWrapper.h.

Here is the call graph for this function:

◆ getFieldPtr()

virtual void * ImportBaseDirWrapper::getFieldPtr	(	size_t	fieldId,
		size_t	subField )

inlinevirtual

Implements ExeElementWrapper.

Definition at line 27 of file ImportBaseDirWrapper.h.

Here is the call graph for this function:

◆ getFieldsCount()

virtual size_t ImportBaseDirWrapper::getFieldsCount ( )

inlinevirtual

Implements ExeElementWrapper.

Definition at line 25 of file ImportBaseDirWrapper.h.

◆ getFieldSize()

virtual bufsize_t ImportBaseDirWrapper::getFieldSize	(	size_t	fieldId,
		size_t	subField = FIELD_NONE )

inlinevirtual

Reimplemented from ExeElementWrapper.

Definition at line 30 of file ImportBaseDirWrapper.h.

Here is the call graph for this function:

◆ getThunksList()

QList< offset_t > ImportBaseDirWrapper::getThunksList ( )

inline

Definition at line 35 of file ImportBaseDirWrapper.h.

◆ hasThunk()

bool ImportBaseDirWrapper::hasThunk ( offset_t thunk )

inline

Definition at line 37 of file ImportBaseDirWrapper.h.

◆ isValid()

bool ImportBaseDirWrapper::isValid ( )

virtual

Reimplemented from ExeNodeWrapper.

Definition at line 149 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ reloadMapping()

void ImportBaseDirWrapper::reloadMapping ( )

virtual

Reimplemented from ExeNodeWrapper.

Definition at line 59 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ thunkSize()

bufsize_t ImportBaseDirWrapper::thunkSize ( Executable::exe_bits bits )

static

Definition at line 23 of file ImportBaseDirWrapper.cpp.

◆ thunkToFuncName()

QString ImportBaseDirWrapper::thunkToFuncName	(	offset_t	thunk,
		bool	shortName = true )

Definition at line 97 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ thunkToFunction()

ImportBaseFuncWrapper * ImportBaseDirWrapper::thunkToFunction ( offset_t thunk )

Definition at line 85 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ thunkToLib()

ImportBaseEntryWrapper * ImportBaseDirWrapper::thunkToLib ( offset_t thunk )

protected

Definition at line 75 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ thunkToLibName()

QString ImportBaseDirWrapper::thunkToLibName ( offset_t thunk )

Definition at line 107 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

◆ wrap()

bool ImportBaseDirWrapper::wrap ( )

virtual

Reimplemented from ExeNodeWrapper.

Definition at line 114 of file ImportBaseDirWrapper.cpp.

Here is the call graph for this function:

Friends And Related Symbol Documentation

◆ ImportBaseEntryWrapper

friend class ImportBaseEntryWrapper

friend

Definition at line 62 of file ImportBaseDirWrapper.h.

Member Data Documentation

◆ importsCount

size_t ImportBaseDirWrapper::importsCount

protected

Definition at line 59 of file ImportBaseDirWrapper.h.

◆ invalidEntries

size_t ImportBaseDirWrapper::invalidEntries

protected

Definition at line 60 of file ImportBaseDirWrapper.h.

◆ thunksList

QList<offset_t> ImportBaseDirWrapper::thunksList

protected

Definition at line 57 of file ImportBaseDirWrapper.h.

◆ thunkToLibMap

std::map<offset_t, size_t> ImportBaseDirWrapper::thunkToLibMap

protected

Definition at line 56 of file ImportBaseDirWrapper.h.

The documentation for this class was generated from the following files:

parser/include/bearparser/pe/ImportBaseDirWrapper.h
parser/pe/ImportBaseDirWrapper.cpp

Public Member Functions

Static Public Member Functions

Protected Member Functions

Protected Attributes

Friends

Detailed Description

Constructor & Destructor Documentation

◆ ImportBaseDirWrapper()

Member Function Documentation

◆ addMapping()

◆ clearMapping()

◆ getFieldName() [1/2]

◆ getFieldName() [2/2]

◆ getFieldPtr()

◆ getFieldsCount()

◆ getFieldSize()

◆ getThunksList()

◆ hasThunk()

◆ isValid()

◆ reloadMapping()

◆ thunkSize()

◆ thunkToFuncName()

◆ thunkToFunction()

◆ thunkToLib()

◆ thunkToLibName()

◆ wrap()

Friends And Related Symbol Documentation

◆ ImportBaseEntryWrapper

Member Data Documentation

◆ importsCount

◆ invalidEntries

◆ thunksList

◆ thunkToLibMap