BearParser
Portable Executable parsing library (from PE-bear)
|
This is the complete list of members for PEFile, including all inherited members.
_canAddNewSection() | PEFile | protected |
_createSectionView(SectionHdrWrapper *sec) | PEFile | protected |
_getLastMapped(Executable::addr_type aType) | PEFile | protected |
_getLastSection() | PEFile | protected |
_getSecHdr(size_t index) const | PEFile | inlineprotected |
_getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inlineprotected |
_getSecIndex(SectionHdrWrapper *sec) const | PEFile | inlineprotected |
_getSectionsCount(bool useMapped=true) const | PEFile | protected |
_init(AbstractByteBuffer *v_buf) | PEFile | protected |
_secHdrsEndOffset() | PEFile | inlineprotected |
AbstractByteBuffer() | AbstractByteBuffer | inline |
addNewSection(QString name, bufsize_t size, bufsize_t v_size=0) | PEFile | |
addr_type enum name | Executable | |
album | PEFile | protected |
ARCH_ARM enum value | Executable | |
ARCH_INTEL enum value | Executable | |
ARCH_UNKNOWN enum value | Executable | |
bitMode | Executable | protected |
BITS_16 enum value | Executable | |
BITS_32 enum value | Executable | |
BITS_64 enum value | Executable | |
buf | Executable | protected |
canAddNewSection() | PEFile | inline |
canResize(bufsize_t newSize) | PEFile | inlinevirtual |
clearContent(SectionHdrWrapper *sec) | PEFile | inline |
clearWrappers() | PEFile | protectedvirtual |
computeChecksum(BYTE *buffer, size_t bufferSize, offset_t checksumOffset) | PEFile | static |
containsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
convertAddr(offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType) | Executable | virtual |
core | PEFile | protected |
COUNT_WRAPPERS enum value | PEFile | |
createSectionView(size_t secNum) | PEFile | |
dataDirEntries | PEFile | protected |
detectAddrType(offset_t addr, Executable::addr_type hintType) | Executable | |
dosHdrWrapper | PEFile | protected |
dumpFragment(offset_t offset, bufsize_t size, QString fileName) | Executable | virtual |
dumpSection(SectionHdrWrapper *sec, QString fileName) | PEFile | |
exe_arch enum name | Executable | |
exe_bits enum name | Executable | |
Executable(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | Executable | protected |
ExeWrappersContainer() | ExeWrappersContainer | inline |
extendLastSection(bufsize_t addedSize) | PEFile | |
fHdr | PEFile | protected |
fillContent(BYTE filling) | AbstractByteBuffer | |
getAlignment(Executable::addr_type aType) const | PEFile | inlinevirtual |
getAllEntryPoints(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | inlinevirtual |
getArch() | PEFile | inlinevirtual |
getBitMode() | PEFile | inlinevirtual |
getBoundImportsDir() | PEFile | inline |
getClsDir() | PEFile | inline |
getContent() | Executable | inlinevirtual |
getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
getContentAt(offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false) | Executable | virtual |
getContentAtPtr(BYTE *ptr, bufsize_t size, bool allowExceptions=false) | Executable | inlinevirtual |
getContentSize() | Executable | inlinevirtual |
getDataDirectory() | PEFile | |
getDataDirEntry(pe::dir_entry eType) | PEFile | |
getDebugDir() | PEFile | inline |
getDelayedImportsDir() | PEFile | inline |
getEntryPoint(Executable::addr_type addrType=Executable::RVA) | PEFile | virtual |
getEntrySection() | PEFile | inline |
getExceptionsDir() | PEFile | inline |
getExportsDir() | PEFile | inline |
getExportsMap(QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) | PEFile | protected |
getFileAlignment() const | PEFile | inline |
getFileBuffer() const | Executable | inline |
getFileName() | Executable | |
getFileSize() const | Executable | |
getHdrArch() | PEFile | inline |
getHdrBitMode() | PEFile | inline |
getImageBase(bool recalculate=false) | PEFile | inlinevirtual |
getImageSize() | Executable | inlinevirtual |
getImportsDir() | PEFile | inline |
getLastMapped(Executable::addr_type aType) | PEFile | inline |
getLastSection() | PEFile | inline |
getLoadConfigDir() | PEFile | inline |
getMappedSize(Executable::addr_type aType) | PEFile | virtual |
getMaxSizeFromOffset(offset_t startOffset) | AbstractByteBuffer | |
getMaxSizeFromPtr(BYTE *ptr) | AbstractByteBuffer | inline |
getMinSecRVA() | PEFile | |
getNumValue(offset_t offset, bufsize_t size, bool *isOk) | AbstractByteBuffer | |
getOffset(void *ptr, bool allowExceptions=false) | AbstractByteBuffer | virtual |
getRawSize() const | Executable | inlinevirtual |
getRelocsDir() | PEFile | inline |
getResourcesAlbum() const | PEFile | inline |
getResourcesDir() | PEFile | inline |
getResourcesOfType(pe::resource_type typeId) | PEFile | inline |
getRichHeaderBgn(pe::RICH_SIGNATURE *sign) | PEFile | |
getRichHeaderSign() | PEFile | |
getSecContent(SectionHdrWrapper *sec) | PEFile | inline |
getSecHdr(size_t index) | PEFile | inline |
getSecHdrAtOffset(offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) | PEFile | inline |
getSecIndex(SectionHdrWrapper *sec) | PEFile | inline |
getSectionAlignment() const | PEFile | inline |
getSectionsCount(bool useMapped=true) | PEFile | inline |
getSecurityDir() | PEFile | inline |
getStringValue(offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getTlsDir() | PEFile | inline |
getWAsciiStringValue(offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) | AbstractByteBuffer | |
getWrapper(size_t wrapperId) | ExeWrappersContainer | virtual |
getWrapperName(size_t id) | ExeWrappersContainer | |
getWStringValue(offset_t rawOffset, bufsize_t len) | AbstractByteBuffer | |
hasDirectory(pe::dir_entry dirNum) | PEFile | inline |
hdrSectionsNum() const | PEFile | |
hdrsSize() | PEFile | inline |
initDirEntries() | PEFile | protected |
intersectsBlock(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isAreaEmpty(offset_t rawOffset, bufsize_t size) | AbstractByteBuffer | |
isBit32(Executable *exe) | Executable | inlinestatic |
isBit32() | Executable | inline |
isBit64(Executable *exe) | Executable | inlinestatic |
isBit64() | Executable | inline |
isReproBuild() | PEFile | inline |
isResized() | Executable | inlinevirtual |
isTruncated() | Executable | inlinevirtual |
isValid(AbstractByteBuffer *buf) | AbstractByteBuffer | static |
isValidAddr(offset_t addr, addr_type addrType) | Executable | virtual |
isValidVA(offset_t va) | Executable | inlinevirtual |
m_peMutex | PEFile | protected |
MappedExe(AbstractByteBuffer *v_buf, exe_bits v_bitMode) | MappedExe | inlineprotected |
moveDataDirEntry(pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW) | PEFile | |
NOT_ADDR enum value | Executable | |
operator[](size_t idx) | AbstractByteBuffer | |
optHdr | PEFile | protected |
pasteBuffer(offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) | AbstractByteBuffer | |
peDataDirOffset() | PEFile | |
PEFile(AbstractByteBuffer *v_buf) | PEFile | |
peFileHdrOffset() const | PEFile | inline |
peNtHdrOffset() const | PEFile | inline |
peNtHeadersSize() const | PEFile | inline |
peOptHdrOffset() const | PEFile | inline |
RAW enum value | Executable | |
rawToRva(offset_t raw) | PEFile | virtual |
resize(bufsize_t newSize) | MappedExe | inlinevirtual |
RVA enum value | Executable | |
rvaToRaw(offset_t rva) | PEFile | virtual |
rvaToVa(offset_t rva) | Executable | inlinevirtual |
secHdrsEndOffset() | PEFile | inline |
secHdrsOffset() const | PEFile | inline |
SectHdrsWrapper class | PEFile | friend |
SectionHdrWrapper class | PEFile | friend |
sects | PEFile | protected |
setBufferedValue(BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) | AbstractByteBuffer | virtual |
setEntryPoint(offset_t entry, Executable::addr_type aType) | PEFile | |
setHdrSectionsNum(size_t newNum) | PEFile | protected |
setImageSize(size_t newSize) | PEFile | inline |
setNumValue(offset_t offset, bufsize_t size, uint64_t newVal) | AbstractByteBuffer | |
setStringValue(offset_t rawOffset, QString newText) | AbstractByteBuffer | |
setTextValue(char *textPtr, std::string newText, size_t fieldLimitLen=0) | AbstractByteBuffer | |
setVirtualSize(bufsize_t newSize) | PEFile | protected |
substFragmentByFile(offset_t offset, bufsize_t contentSize, QFile &fIn) | AbstractByteBuffer | |
toRaw(offset_t offset, addr_type addrType, bool allowExceptions=false) | Executable | virtual |
unbindImports() | PEFile | |
UNKNOWN enum value | Executable | |
VA enum value | Executable | |
vaToRaw(offset_t va) | Executable | inlinevirtual |
VaToRva(offset_t va, bool autodetect=false) | Executable | virtual |
WR_DATADIR enum value | PEFile | |
WR_DIR_ENTRY enum value | PEFile | |
WR_DIR_ENTRY_END enum value | PEFile | |
WR_DOS_HDR enum value | PEFile | |
WR_FILE_HDR enum value | PEFile | |
WR_NONE enum value | PEFile | |
WR_OPTIONAL_HDR enum value | PEFile | |
WR_RICH_HDR enum value | PEFile | |
WR_SECTIONS enum value | PEFile | |
wrap() | PEFile | virtual |
wrapCore() | PEFile | protected |
wrapDataDirs() | PEFile | |
WRAPPERS enum name | PEFile | |
wrappers | ExeWrappersContainer | protected |
wrappersCount() | ExeWrappersContainer | inline |
~AbstractByteBuffer() | AbstractByteBuffer | inlinevirtual |
~Executable(void) | Executable | inlinevirtual |
~ExeWrappersContainer(void) | ExeWrappersContainer | inlinevirtual |
~MappedExe(void) | MappedExe | inlineprotectedvirtual |
~PEFile() | PEFile | inlinevirtual |