BearParser
Portable Executable parsing library (from PE-bear)
Loading...
Searching...
No Matches
PECore Class Reference

#include <PECore.h>

Collaboration diagram for PECore:

Public Member Functions

 PECore ()
 
virtual ~PECore ()
 
bool wrap (AbstractByteBuffer *v_buf)
 
virtual offset_t getRawSize () const
 
virtual bufsize_t getAlignment (Executable::addr_type aType) const
 
virtual offset_t getImageBase (bool recalculate=false)
 
virtual bufsize_t getImageSize ()
 
Executable::exe_bits getHdrBitMode () const
 
Executable::exe_arch getHdrArch () const
 
offset_t peSignatureOffset () const
 
offset_t peFileHdrOffset () const
 
offset_t secHdrsOffset () const
 
offset_t peOptHdrOffset () const
 
bufsize_t peNtHeadersSize () const
 
bufsize_t hdrsSize () const
 
void setImageSize (bufsize_t newSize)
 
IMAGE_FILE_HEADER * getFileHeader () const
 

Protected Member Functions

void reset ()
 

Protected Attributes

AbstractByteBufferbuf
 
IMAGE_DOS_HEADER * dos
 
IMAGE_FILE_HEADER * fHdr
 
IMAGE_OPTIONAL_HEADER32 * opt32
 
IMAGE_OPTIONAL_HEADER64 * opt64
 

Friends

class PEFile
 

Detailed Description

Definition at line 7 of file PECore.h.

Constructor & Destructor Documentation

◆ PECore()

PECore::PECore ( )
inline

Definition at line 11 of file PECore.h.

◆ ~PECore()

virtual PECore::~PECore ( )
inlinevirtual

Definition at line 14 of file PECore.h.

Here is the call graph for this function:

Member Function Documentation

◆ getAlignment()

bufsize_t PECore::getAlignment ( Executable::addr_type aType) const
virtual

Definition at line 119 of file PECore.cpp.

◆ getFileHeader()

IMAGE_FILE_HEADER * PECore::getFileHeader ( ) const
inline

Definition at line 46 of file PECore.h.

◆ getHdrArch()

Executable::exe_arch PECore::getHdrArch ( ) const

Definition at line 59 of file PECore.cpp.

◆ getHdrBitMode()

Executable::exe_bits PECore::getHdrBitMode ( ) const

Definition at line 51 of file PECore.cpp.

◆ getImageBase()

offset_t PECore::getImageBase ( bool recalculate = false)
virtual

Definition at line 156 of file PECore.cpp.

Here is the call graph for this function:

◆ getImageSize()

bufsize_t PECore::getImageSize ( )
virtual

Definition at line 132 of file PECore.cpp.

◆ getRawSize()

virtual offset_t PECore::getRawSize ( ) const
inlinevirtual

Definition at line 21 of file PECore.h.

Here is the call graph for this function:

◆ hdrsSize()

bufsize_t PECore::hdrsSize ( ) const

Definition at line 144 of file PECore.cpp.

Here is the call graph for this function:

◆ peFileHdrOffset()

offset_t PECore::peFileHdrOffset ( ) const

Definition at line 79 of file PECore.cpp.

Here is the call graph for this function:

◆ peNtHeadersSize()

bufsize_t PECore::peNtHeadersSize ( ) const

Definition at line 98 of file PECore.cpp.

Here is the call graph for this function:

◆ peOptHdrOffset()

offset_t PECore::peOptHdrOffset ( ) const

Definition at line 89 of file PECore.cpp.

Here is the call graph for this function:

◆ peSignatureOffset()

offset_t PECore::peSignatureOffset ( ) const

Definition at line 73 of file PECore.cpp.

◆ reset()

void PECore::reset ( )
protected

Definition at line 5 of file PECore.cpp.

◆ secHdrsOffset()

offset_t PECore::secHdrsOffset ( ) const

Definition at line 106 of file PECore.cpp.

Here is the call graph for this function:

◆ setImageSize()

void PECore::setImageSize ( bufsize_t newSize)
inline

Definition at line 36 of file PECore.h.

◆ wrap()

bool PECore::wrap ( AbstractByteBuffer * v_buf)

Definition at line 13 of file PECore.cpp.

Here is the call graph for this function:

Friends And Related Symbol Documentation

◆ PEFile

friend class PEFile
friend

Definition at line 60 of file PECore.h.

Member Data Documentation

◆ buf

AbstractByteBuffer* PECore::buf
protected

Definition at line 53 of file PECore.h.

◆ dos

IMAGE_DOS_HEADER* PECore::dos
protected

Definition at line 55 of file PECore.h.

◆ fHdr

IMAGE_FILE_HEADER* PECore::fHdr
protected

Definition at line 56 of file PECore.h.

◆ opt32

IMAGE_OPTIONAL_HEADER32* PECore::opt32
protected

Definition at line 57 of file PECore.h.

◆ opt64

IMAGE_OPTIONAL_HEADER64* PECore::opt64
protected

Definition at line 58 of file PECore.h.


The documentation for this class was generated from the following files: