AbstractByteBuffer() | AbstractByteBuffer | inline |
addEntry(ExeNodeWrapper *entry) | ExeNodeWrapper | virtual |
addEntryAt(ExeNodeWrapper *entry, offset_t nextOffset) | ExeNodeWrapper | protectedvirtual |
addMapping(ExeNodeWrapper *entry) | ExeNodeWrapper | inlineprotectedvirtual |
canAddEntry() | ExeNodeWrapper | virtual |
canCopyToOffset(offset_t rawOffset) | ExeElementWrapper | protectedvirtual |
CHPE_METADATA_PTR enum value | LdConfigDirWrapper | |
clear() | LdConfigDirWrapper | protectedvirtual |
CODE_INTEGRITY_CATALOG enum value | LdConfigDirWrapper | |
CODE_INTEGRITY_CATALOG_OFFSET enum value | LdConfigDirWrapper | |
CODE_INTEGRITY_FLAGS enum value | LdConfigDirWrapper | |
CODE_INTEGRITY_RESERVED enum value | LdConfigDirWrapper | |
containsAddrType(size_t fieldId, size_t subField=FIELD_NONE) | LdConfigDirWrapper | virtual |
containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
containsDataType(size_t fieldId, size_t subField=FIELD_NONE) | ExeElementWrapper | inlinevirtual |
copyToOffset(offset_t rawOffset) | ExeElementWrapper | protected |
CRITICAT_SEC_TIMEOUT enum value | LdConfigDirWrapper | |
CSD_VER enum value | LdConfigDirWrapper | |
DataDirEntryWrapper(PEFile *pe, pe::dir_entry v_entryType) | DataDirEntryWrapper | protected |
DECOMMIT_FREE enum value | LdConfigDirWrapper | |
DECOMMIT_TOTAL enum value | LdConfigDirWrapper | |
DEPENDENT_LOAD_FLAGS enum value | LdConfigDirWrapper | |
DYNAMIC_VAL_RELOC enum value | LdConfigDirWrapper | |
DYNAMIC_VAL_RELOC_TABLE_OFFSET enum value | LdConfigDirWrapper | |
DYNAMIC_VAL_RELOC_TABLE_SECTION enum value | LdConfigDirWrapper | |
EDIT_LIST enum value | LdConfigDirWrapper | |
ENCLAVE_CONFIG_PTR enum value | LdConfigDirWrapper | |
entries | ExeNodeWrapper | protected |
entryNum | ExeNodeWrapper | protected |
entryType | DataDirEntryWrapper | protected |
ExeElementWrapper(Executable *exe) | ExeElementWrapper | |
ExeNodeWrapper(Executable *pe, ExeNodeWrapper *parent=NULL) | ExeNodeWrapper | |
ExeNodeWrapper(Executable *pe, ExeNodeWrapper *parent, size_t entryNumber) | ExeNodeWrapper | |
FIELD_COUNTER enum value | LdConfigDirWrapper | |
FIELD_COUNTER_OLD enum value | LdConfigDirWrapper | |
FIELD_COUNTER_W81 enum value | LdConfigDirWrapper | |
fillContent(BYTE filling) | AbstractByteBuffer | |
firstSubEntryPtr(size_t parentId) | LdConfigDirWrapper | protected |
firstSubEntrySize(size_t parentId) | LdConfigDirWrapper | inlineprotected |
geEntrySize() | ExeNodeWrapper | virtual |
getContent() | ExeElementWrapper | inlinevirtual |
getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | AbstractByteBuffer | virtual |
getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | AbstractByteBuffer | virtual |
getContentSize() | ExeElementWrapper | inlinevirtual |
getDataDirectory() | DataDirEntryWrapper | |
getDirEntryAddress() | DataDirEntryWrapper | |
getDirEntrySize(bool trimToExeSize=false) | DataDirEntryWrapper | |
getDirEntryType() | DataDirEntryWrapper | inline |
getEntriesCount() | ExeNodeWrapper | inlinevirtual |
getEntriesCount(std::vector< ExeNodeWrapper * > &_entries) | ExeNodeWrapper | protected |
getEntriesNum() | ExeNodeWrapper | inlinevirtual |
getEntryAt(size_t fieldId) | ExeNodeWrapper | virtual |
getEntryAt(std::vector< ExeNodeWrapper * > &_entries, size_t fieldId) | ExeNodeWrapper | protected |
getEntryId() | ExeNodeWrapper | inline |
getExe() | ExeElementWrapper | inline |
getFieldName(size_t fieldId) | LdConfigDirWrapper | virtual |
getFieldOffset(size_t fieldId, size_t subField=FIELD_NONE) | ExeElementWrapper | virtual |
getFieldPtr(size_t fieldId, size_t subField) | LdConfigDirWrapper | virtual |
DataDirEntryWrapper::getFieldPtr(size_t fieldId) | ExeElementWrapper | inline |
getFieldsCount() | LdConfigDirWrapper | inlinevirtual |
getFieldSize(size_t fieldId, size_t subField=FIELD_NONE) | ExeElementWrapper | virtual |
getGuardFlagsSet(DWORD flags) | LdConfigDirWrapper | static |
getLastEntry() | ExeNodeWrapper | |
getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
getName() | LdConfigDirWrapper | inlinevirtual |
getNextEntryOffset() | ExeNodeWrapper | virtual |
getNumValue(size_t fieldId, size_t subField, bool *isOk) | ExeElementWrapper | virtual |
getNumValue(size_t fieldId, bool *isOk) | ExeElementWrapper | inline |
AbstractByteBuffer::getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
getOffset() | ExeElementWrapper | virtual |
getOffset(void *ptr, bool allowExceptions=false) | ExeElementWrapper | virtual |
getParentNode() | PENodeWrapper | inlinevirtual |
getPE() | PENodeWrapper | inline |
getPtr() | LdConfigDirWrapper | virtual |
getSize() | LdConfigDirWrapper | virtual |
getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getSubfieldName(size_t fieldId, size_t subField) | ExeNodeWrapper | virtual |
getSubfieldPtr(size_t fieldId, size_t subField) | ExeNodeWrapper | virtual |
getSubFieldsCount() | LdConfigDirWrapper | inlinevirtual |
getSubfieldSize(size_t fieldId, size_t subField) | ExeNodeWrapper | virtual |
getSubfieldWrapper(size_t parentType, size_t fieldId) | LdConfigDirWrapper | inlinevirtual |
getSubfieldWrapperCount(size_t parentType) | LdConfigDirWrapper | inlinevirtual |
getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getWrappedValue(size_t fieldId, size_t subField) | ExeElementWrapper | virtual |
getWrappedValue(size_t fieldId) | ExeElementWrapper | inlinevirtual |
getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
GLOBAL_FLAGS_CLEAR enum value | LdConfigDirWrapper | |
GLOBAL_FLAGS_SET enum value | LdConfigDirWrapper | |
GUARD_ADDR_IAT_ENTRY_COUNT enum value | LdConfigDirWrapper | |
GUARD_ADDR_IAT_ENTRY_TABLE enum value | LdConfigDirWrapper | |
GUARD_CHECK enum value | LdConfigDirWrapper | |
GUARD_COUNT enum value | LdConfigDirWrapper | |
GUARD_DISPATCH enum value | LdConfigDirWrapper | |
GUARD_EH_CONT_COUNT enum value | LdConfigDirWrapper | |
GUARD_EH_CONT_TABLE enum value | LdConfigDirWrapper | |
GUARD_FAILURE_ROUTINE enum value | LdConfigDirWrapper | |
GUARD_FAILURE_ROUTINE_FUNC_PTR enum value | LdConfigDirWrapper | |
GUARD_FLAGS enum value | LdConfigDirWrapper | |
GUARD_LONG_JUMP_COUNT enum value | LdConfigDirWrapper | |
GUARD_LONG_JUMP_TABLE enum value | LdConfigDirWrapper | |
GUARD_TABLE enum value | LdConfigDirWrapper | |
GUARD_VERIFY_STACK_PTR enum value | LdConfigDirWrapper | |
hasSubfieldWrapper(size_t parentType) | LdConfigDirWrapper | inlinevirtual |
hasSupressionInfo() | LdConfigDirWrapper | inline |
HOT_PATCH_TABLE_OFFSET enum value | LdConfigDirWrapper | |
intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isBit32() | ExeElementWrapper | inline |
isBit64() | ExeElementWrapper | inline |
isMyEntryType(ExeNodeWrapper *entry) | ExeNodeWrapper | protectedvirtual |
isResized() | AbstractByteBuffer | inlinevirtual |
isTruncated() | AbstractByteBuffer | inlinevirtual |
isValid() | ExeNodeWrapper | inlinevirtual |
ExeElementWrapper::isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
LdConfigDirFID enum name | LdConfigDirWrapper | |
LdConfigDirWrapper(PEFile *pe) | LdConfigDirWrapper | inline |
LdConfigEntryWrapper class | LdConfigDirWrapper | friend |
loadNextEntry(size_t entryNum) | ExeNodeWrapper | inlineprotectedvirtual |
LOCK_PREFIX enum value | LdConfigDirWrapper | |
m_Exe | ExeElementWrapper | protected |
m_PE | PENodeWrapper | protected |
MAJOR_VER enum value | LdConfigDirWrapper | |
MAX_ALLOC enum value | LdConfigDirWrapper | |
metadataSize() | LdConfigDirWrapper | inline |
MINOR_VER enum value | LdConfigDirWrapper | |
NONE enum value | LdConfigDirWrapper | |
operator[](size_t idx) | AbstractByteBuffer | |
parentNode | ExeNodeWrapper | protected |
pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) | AbstractByteBuffer | |
PENodeWrapper(PEFile *pe, PENodeWrapper *parent=NULL) | PENodeWrapper | |
PENodeWrapper(PEFile *pe, PENodeWrapper *parent, size_t entryNumber) | PENodeWrapper | |
peParentNode | PENodeWrapper | protected |
PROC_AFF_MASK32 enum value | LdConfigDirWrapper | |
PROC_HEAP_FLAGS32 enum value | LdConfigDirWrapper | |
reloadMapping() | ExeNodeWrapper | inlinevirtual |
RESERVED2 enum value | LdConfigDirWrapper | |
RESERVED3 enum value | LdConfigDirWrapper | |
resize(bufsize_t newSize) | AbstractByteBuffer | inlinevirtual |
SEC_COOKIE enum value | LdConfigDirWrapper | |
SEH_COUNT enum value | LdConfigDirWrapper | |
SEH_TABLE enum value | LdConfigDirWrapper | |
setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
setNumValue(size_t fieldId, size_t subField, uint64_t val) | ExeElementWrapper | virtual |
setNumValue(size_t fieldId, uint64_t val) | ExeElementWrapper | inline |
AbstractByteBuffer::setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
SIZE enum value | LdConfigDirWrapper | |
substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
TIMEST enum value | LdConfigDirWrapper | |
translateFieldContent(size_t fieldId) | LdConfigDirWrapper | virtual |
translateGuardFlag(DWORD flags) | LdConfigDirWrapper | static |
translateGuardFlagsContent(const QString &delim) | LdConfigDirWrapper | |
VIRTUAL_MEM enum value | LdConfigDirWrapper | |
VOLATILE_METADATA_PTR enum value | LdConfigDirWrapper | |
wrap() | LdConfigDirWrapper | virtual |
~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
~ExeElementWrapper() | ExeElementWrapper | inlinevirtual |
~ExeNodeWrapper() | ExeNodeWrapper | inlinevirtual |
~PENodeWrapper() | PENodeWrapper | inlinevirtual |