BearParser
Portable Executable parsing library (from PE-bear)
Loading...
Searching...
No Matches
PEFile Member List

This is the complete list of members for PEFile, including all inherited members.

_canAddNewSection()PEFileprotected
_createSectionView(SectionHdrWrapper *sec)PEFileprotected
_getLastMapped(Executable::addr_type aType)PEFileprotected
_getLastSection()PEFileprotected
_getSecHdr(size_t index) constPEFileinlineprotected
_getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)PEFileinlineprotected
_getSecIndex(SectionHdrWrapper *sec) constPEFileinlineprotected
_getSectionsCount(bool useMapped=true) constPEFileprotected
_init(AbstractByteBuffer *v_buf)PEFileprotected
_secHdrsEndOffset()PEFileinlineprotected
AbstractByteBuffer()AbstractByteBufferinline
addNewSection(QString name, bufsize_t size, bufsize_t v_size=0)PEFile
addr_type enum nameExecutable
albumPEFileprotected
ARCH_ARM enum valueExecutable
ARCH_INTEL enum valueExecutable
ARCH_UNKNOWN enum valueExecutable
bitModeExecutableprotected
BITS_16 enum valueExecutable
BITS_32 enum valueExecutable
BITS_64 enum valueExecutable
bufExecutableprotected
canAddNewSection()PEFileinline
canResize(bufsize_t newSize)PEFileinlinevirtual
clearContent(SectionHdrWrapper *sec)PEFileinline
clearWrappers()PEFileprotectedvirtual
computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset)PEFilestatic
containsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType)Executablevirtual
corePEFileprotected
COUNT_WRAPPERS enum valuePEFile
createSectionView(size_t secNum)PEFile
dataDirEntriesPEFileprotected
detectAddrType(offset_t addr, Executable::addr_type hintType)Executable
dosHdrWrapperPEFileprotected
dumpFragment(offset_t offset, bufsize_t size, QString fileName)Executablevirtual
dumpSection(SectionHdrWrapper *sec, QString fileName)PEFile
exe_arch enum nameExecutable
exe_bits enum nameExecutable
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode)Executableprotected
ExeWrappersContainer()ExeWrappersContainerinline
extendLastSection(bufsize_t addedSize)PEFile
fHdrPEFileprotected
fillContent(BYTE filling)AbstractByteBuffer
getAlignment(Executable::addr_type aType) constPEFileinlinevirtual
getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)PEFileinlinevirtual
getArch()PEFileinlinevirtual
getBitMode()PEFileinlinevirtual
getBoundImportsDir()PEFileinline
getClsDir()PEFileinline
getContent()Executableinlinevirtual
getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)Executableinlinevirtual
getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false)Executablevirtual
getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false)Executableinlinevirtual
getContentSize()Executableinlinevirtual
getDataDirectory()PEFile
getDataDirEntry(pe::dir_entry eType)PEFile
getDebugDir()PEFileinline
getDelayedImportsDir()PEFileinline
getEntryPoint(Executable::addr_type addrType=Executable::RVA)PEFilevirtual
getEntrySection()PEFileinline
getExceptionsDir()PEFileinline
getExportsDir()PEFileinline
getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA)PEFileprotected
getFileAlignment() constPEFileinline
getFileBuffer() constExecutableinline
getFileName()Executable
getFileSize() constExecutable
getHdrArch()PEFileinline
getHdrBitMode()PEFileinline
getImageBase(bool recalculate=false)PEFileinlinevirtual
getImageSize()Executableinlinevirtual
getImportsDir()PEFileinline
getLastMapped(Executable::addr_type aType)PEFileinline
getLastSection()PEFileinline
getLoadConfigDir()PEFileinline
getMappedSize(Executable::addr_type aType)PEFilevirtual
getMaxSizeFromOffset(offset_t startOffset)AbstractByteBuffer
getMaxSizeFromPtr(BYTE *ptr)AbstractByteBufferinline
getMinSecRVA()PEFile
getNumValue(offset_t offset, bufsize_t size, bool *isOk)AbstractByteBuffer
getOffset(void *ptr, bool allowExceptions=false)AbstractByteBuffervirtual
getRawSize() constExecutableinlinevirtual
getRelocsDir()PEFileinline
getResourcesAlbum() constPEFileinline
getResourcesDir()PEFileinline
getResourcesOfType(pe::resource_type typeId)PEFileinline
getRichHeaderBgn(pe::RICH_SIGNATURE *sign)PEFile
getRichHeaderSign()PEFile
getSecContent(SectionHdrWrapper *sec)PEFileinline
getSecHdr(size_t index)PEFileinline
getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false)PEFileinline
getSecIndex(SectionHdrWrapper *sec)PEFileinline
getSectionAlignment() constPEFileinline
getSectionsCount(bool useMapped=true)PEFileinline
getSecurityDir()PEFileinline
getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)AbstractByteBuffer
getTlsDir()PEFileinline
getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)AbstractByteBuffer
getWrapper(size_t wrapperId)ExeWrappersContainervirtual
getWrapperName(size_t id)ExeWrappersContainer
getWStringValue(offset_t rawOffset, bufsize_t len)AbstractByteBuffer
hasDirectory(pe::dir_entry dirNum)PEFileinline
hdrSectionsNum() constPEFile
hdrsSize()PEFileinline
initDirEntries()PEFileprotected
intersectsBlock(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
isAreaEmpty(offset_t rawOffset, bufsize_t size)AbstractByteBuffer
isBit32(Executable *exe)Executableinlinestatic
isBit32()Executableinline
isBit64(Executable *exe)Executableinlinestatic
isBit64()Executableinline
isReproBuild()PEFileinline
isResized()Executableinlinevirtual
isTruncated()Executableinlinevirtual
isValid(AbstractByteBuffer *buf)AbstractByteBufferstatic
isValidAddr(offset_t addr, addr_type addrType)Executablevirtual
isValidVA(offset_t va)Executableinlinevirtual
m_peMutexPEFileprotected
MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode)MappedExeinlineprotected
moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW)PEFile
NOT_ADDR enum valueExecutable
operator[](size_t idx)AbstractByteBuffer
optHdrPEFileprotected
pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)AbstractByteBuffer
peDataDirOffset()PEFile
PEFile(AbstractByteBuffer *v_buf)PEFile
peFileHdrOffset() constPEFileinline
peNtHdrOffset() constPEFileinline
peNtHeadersSize() constPEFileinline
peOptHdrOffset() constPEFileinline
RAW enum valueExecutable
rawToRva(offset_t raw)PEFilevirtual
resize(bufsize_t newSize)MappedExeinlinevirtual
RVA enum valueExecutable
rvaToRaw(offset_t rva)PEFilevirtual
rvaToVa(offset_t rva)Executableinlinevirtual
secHdrsEndOffset()PEFileinline
secHdrsOffset() constPEFileinline
SectHdrsWrapper classPEFilefriend
SectionHdrWrapper classPEFilefriend
sectsPEFileprotected
setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)AbstractByteBuffervirtual
setEntryPoint(offset_t entry, Executable::addr_type aType)PEFile
setHdrSectionsNum(size_t newNum)PEFileprotected
setImageSize(size_t newSize)PEFileinline
setNumValue(offset_t offset, bufsize_t size, uint64_t newVal)AbstractByteBuffer
setStringValue(offset_t rawOffset, QString newText)AbstractByteBuffer
setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0)AbstractByteBuffer
setVirtualSize(bufsize_t newSize)PEFileprotected
substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn)AbstractByteBuffer
toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false)Executablevirtual
unbindImports()PEFile
UNKNOWN enum valueExecutable
VA enum valueExecutable
vaToRaw(offset_t va)Executableinlinevirtual
VaToRva(offset_t va, bool autodetect=false)Executablevirtual
WR_DATADIR enum valuePEFile
WR_DIR_ENTRY enum valuePEFile
WR_DIR_ENTRY_END enum valuePEFile
WR_DOS_HDR enum valuePEFile
WR_FILE_HDR enum valuePEFile
WR_NONE enum valuePEFile
WR_OPTIONAL_HDR enum valuePEFile
WR_RICH_HDR enum valuePEFile
WR_SECTIONS enum valuePEFile
wrap()PEFilevirtual
wrapCore()PEFileprotected
wrapDataDirs()PEFile
WRAPPERS enum namePEFile
wrappersExeWrappersContainerprotected
wrappersCount()ExeWrappersContainerinline
~AbstractByteBuffer()AbstractByteBufferinlinevirtual
~Executable(void)Executableinlinevirtual
~ExeWrappersContainer(void)ExeWrappersContainerinlinevirtual
~MappedExe(void)MappedExeinlineprotectedvirtual
~PEFile()PEFileinlinevirtual