|
BearParser
Portable Executable parsing library (from PE-bear)
|
This is the complete list of members for PEFile, including all inherited members.
| _canAddNewSection() | PEFile | protected |
| _createSectionView(SectionHdrWrapper *sec) | PEFile | protected |
| _getLastMapped(Executable::addr_type aType) | PEFile | protected |
| _getLastSection() | PEFile | protected |
| _getSecHdr(size_t index) const | PEFile | inlineprotected |
| _getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inlineprotected |
| _getSecIndex(SectionHdrWrapper *sec) const | PEFile | inlineprotected |
| _getSectionsCount(bool useMapped=true) const | PEFile | protected |
| _init(AbstractByteBuffer *v_buf) | PEFile | protected |
| _secHdrsEndOffset() | PEFile | inlineprotected |
| AbstractByteBuffer() | AbstractByteBuffer | inline |
| addNewSection(QString name, bufsize_t size, bufsize_t v_size=0) | PEFile | |
| addr_type enum name | Executable | |
| album | PEFile | protected |
| ARCH_ARM enum value | Executable | |
| ARCH_INTEL enum value | Executable | |
| ARCH_UNKNOWN enum value | Executable | |
| bitMode | Executable | protected |
| BITS_16 enum value | Executable | |
| BITS_32 enum value | Executable | |
| BITS_64 enum value | Executable | |
| buf | Executable | protected |
| canAddNewSection() | PEFile | inline |
| canResize(bufsize_t newSize) | PEFile | inlinevirtual |
| clearContent(SectionHdrWrapper *sec) | PEFile | inline |
| clearWrappers() | PEFile | protectedvirtual |
| computeChecksum(const BYTE *buffer, size_t bufferSize, offset_t checksumOffset) | PEFile | static |
| containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType) | Executable | virtual |
| core | PEFile | protected |
| COUNT_WRAPPERS enum value | PEFile | |
| createSectionView(size_t secNum) | PEFile | |
| dataDirEntries | PEFile | protected |
| detectAddrType(offset_t addr, Executable::addr_type hintType) | Executable | |
| dosHdrWrapper | PEFile | protected |
| dumpFragment(offset_t offset, bufsize_t size, QString fileName) | Executable | virtual |
| dumpSection(SectionHdrWrapper *sec, QString fileName) | PEFile | |
| exe_arch enum name | Executable | |
| exe_bits enum name | Executable | |
| Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | Executable | protected |
| ExeWrappersContainer() | ExeWrappersContainer | inline |
| extendLastSection(bufsize_t addedSize) | PEFile | |
| fHdr | PEFile | protected |
| fillContent(BYTE filling) | AbstractByteBuffer | |
| getAlignment(Executable::addr_type aType) const | PEFile | inlinevirtual |
| getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | inlinevirtual |
| getArch() | PEFile | inlinevirtual |
| getBitMode() | PEFile | inlinevirtual |
| getBoundImportsDir() | PEFile | inline |
| getClsDir() | PEFile | inline |
| getContent() | Executable | inlinevirtual |
| getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false) | Executable | virtual |
| getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
| getContentSize() | Executable | inlinevirtual |
| getDataDirectory() | PEFile | |
| getDataDirEntry(pe::dir_entry eType) | PEFile | |
| getDataDirWrapper() | PEFile | inline |
| getDebugDir() | PEFile | inline |
| getDelayedImportsDir() | PEFile | inline |
| getDosHdrWrapper() | PEFile | inline |
| getEntryPoint(Executable::addr_type addrType=Executable::RVA) | PEFile | virtual |
| getEntrySection() | PEFile | inline |
| getExceptionsDir() | PEFile | inline |
| getExportsDir() | PEFile | inline |
| getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | protected |
| getFileAlignment() const | PEFile | inline |
| getFileBuffer() const | Executable | inline |
| getFileHdrWrapper() | PEFile | inline |
| getFileName() | Executable | |
| getFileSize() const | Executable | |
| getHdrArch() | PEFile | inline |
| getHdrBitMode() | PEFile | inline |
| getImageBase(bool recalculate=false) | PEFile | inlinevirtual |
| getImageSize() | Executable | inlinevirtual |
| getImportsDir() | PEFile | inline |
| getLastMapped(Executable::addr_type aType) | PEFile | inline |
| getLastSection() | PEFile | inline |
| getLoadConfigDir() | PEFile | inline |
| getMappedSize(Executable::addr_type aType) | PEFile | virtual |
| getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
| getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
| getMinSecRVA() | PEFile | |
| getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
| getOffset(void *ptr, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| getOptHdrWrapper() | PEFile | inline |
| getRawSize() const | Executable | inlinevirtual |
| getRelocsDir() | PEFile | inline |
| getResourcesAlbum() const | PEFile | inline |
| getResourcesDir() | PEFile | inline |
| getResourcesOfType(pe::resource_type typeId) | PEFile | inline |
| getRichHdrWrapper() | PEFile | inline |
| getRichHeaderBgn(pe::RICH_SIGNATURE *sign) | PEFile | |
| getRichHeaderSign() | PEFile | |
| getSecContent(SectionHdrWrapper *sec) | PEFile | inline |
| getSecHdr(size_t index) | PEFile | inline |
| getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inline |
| getSecIndex(SectionHdrWrapper *sec) | PEFile | inline |
| getSectionAlignment() const | PEFile | inline |
| getSectionsCount(bool useMapped=true) | PEFile | inline |
| getSecurityDir() | PEFile | inline |
| getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getTlsDir() | PEFile | inline |
| getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
| getWrapper(size_t wrapperId) | ExeWrappersContainer | virtual |
| getWrapperName(size_t id) | ExeWrappersContainer | |
| getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
| hasDirectory(const pe::dir_entry &dirNum) | PEFile | inline |
| hdrSectionsNum() const | PEFile | |
| hdrsSize() | PEFile | inline |
| initDirEntries() | PEFile | protected |
| intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
| isBit32(Executable *exe) | Executable | inlinestatic |
| isBit32() | Executable | inline |
| isBit64(Executable *exe) | Executable | inlinestatic |
| isBit64() | Executable | inline |
| isReproBuild() | PEFile | inline |
| isResized() | Executable | inlinevirtual |
| isTruncated() | Executable | inlinevirtual |
| isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
| isValidAddr(offset_t addr, addr_type addrType) | Executable | virtual |
| isValidVA(offset_t va) | Executable | inlinevirtual |
| m_peMutex | PEFile | protected |
| MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | MappedExe | inlineprotected |
| moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW) | PEFile | |
| NOT_ADDR enum value | Executable | |
| operator[](size_t idx) | AbstractByteBuffer | |
| optHdr | PEFile | protected |
| pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) | AbstractByteBuffer | |
| peDataDirOffset() | PEFile | |
| PEFile(AbstractByteBuffer *v_buf) | PEFile | |
| peFileHdrOffset() const | PEFile | inline |
| peNtHdrOffset() const | PEFile | inline |
| peNtHeadersSize() const | PEFile | inline |
| peOptHdrOffset() const | PEFile | inline |
| RAW enum value | Executable | |
| rawToRva(offset_t raw) | PEFile | virtual |
| resize(bufsize_t newSize) | MappedExe | inlinevirtual |
| RVA enum value | Executable | |
| rvaToRaw(offset_t rva) | PEFile | virtual |
| rvaToVa(offset_t rva) | Executable | inlinevirtual |
| secHdrsEndOffset() | PEFile | inline |
| secHdrsOffset() const | PEFile | inline |
| SectHdrsWrapper class | PEFile | friend |
| SectionHdrWrapper class | PEFile | friend |
| sects | PEFile | protected |
| setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
| setEntryPoint(offset_t entry, Executable::addr_type aType) | PEFile | |
| setHdrSectionsNum(size_t newNum) | PEFile | protected |
| setImageSize(bufsize_t newSize) | PEFile | inline |
| setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
| setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
| setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
| setVirtualSize(bufsize_t newSize) | PEFile | protected |
| substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
| toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false) | Executable | virtual |
| unbindImports() | PEFile | |
| UNKNOWN enum value | Executable | |
| VA enum value | Executable | |
| vaToRaw(offset_t va) | Executable | inlinevirtual |
| VaToRva(offset_t va, bool autodetect=false) | Executable | virtual |
| WR_DATADIR enum value | PEFile | |
| WR_DIR_ENTRY enum value | PEFile | |
| WR_DIR_ENTRY_END enum value | PEFile | |
| WR_DOS_HDR enum value | PEFile | |
| WR_FILE_HDR enum value | PEFile | |
| WR_NONE enum value | PEFile | |
| WR_OPTIONAL_HDR enum value | PEFile | |
| WR_RICH_HDR enum value | PEFile | |
| WR_SECTIONS enum value | PEFile | |
| wrap() | PEFile | virtual |
| wrapCore() | PEFile | protected |
| wrapDataDirs() | PEFile | |
| WRAPPERS enum name | PEFile | |
| wrappers | ExeWrappersContainer | protected |
| wrappersCount() | ExeWrappersContainer | inline |
| ~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
| ~Executable(void) | Executable | inlinevirtual |
| ~ExeWrappersContainer(void) | ExeWrappersContainer | inlinevirtual |
| ~MappedExe(void) | MappedExe | inlineprotectedvirtual |
| ~PEFile() | PEFile | inlinevirtual |