|
| PEFile (AbstractByteBuffer *v_buf) |
|
virtual | ~PEFile () |
|
virtual void | wrap () |
|
bool | wrapDataDirs () |
|
virtual bufsize_t | getMappedSize (Executable::addr_type aType) |
|
virtual bufsize_t | getAlignment (Executable::addr_type aType) const |
|
virtual offset_t | getImageBase (bool recalculate=false) |
|
virtual offset_t | getEntryPoint (Executable::addr_type addrType=Executable::RVA) |
|
virtual exe_bits | getBitMode () |
|
virtual exe_arch | getArch () |
|
offset_t | peFileHdrOffset () const |
|
offset_t | peNtHdrOffset () const |
|
bufsize_t | peNtHeadersSize () const |
|
offset_t | peOptHdrOffset () const |
|
offset_t | secHdrsOffset () const |
|
bufsize_t | hdrsSize () |
|
ResourcesAlbum * | getResourcesAlbum () const |
|
pe::RICH_SIGNATURE * | getRichHeaderSign () |
|
pe::RICH_DANS_HEADER * | getRichHeaderBgn (pe::RICH_SIGNATURE *sign) |
|
IMAGE_DATA_DIRECTORY * | getDataDirectory () |
|
offset_t | peDataDirOffset () |
|
size_t | hdrSectionsNum () const |
|
exe_bits | getHdrBitMode () |
|
exe_arch | getHdrArch () |
|
offset_t | getLastMapped (Executable::addr_type aType) |
|
virtual offset_t | rawToRva (offset_t raw) |
|
virtual offset_t | rvaToRaw (offset_t rva) |
|
offset_t | getMinSecRVA () |
|
size_t | getSectionsCount (bool useMapped=true) |
|
size_t | getSecIndex (SectionHdrWrapper *sec) |
|
SectionHdrWrapper * | getSecHdr (size_t index) |
|
SectionHdrWrapper * | getSecHdrAtOffset (offset_t offset, Executable::addr_type aType, bool recalculate=false, bool verbose=false) |
|
SectionHdrWrapper * | getEntrySection () |
|
BYTE * | getSecContent (SectionHdrWrapper *sec) |
|
BufferView * | createSectionView (size_t secNum) |
|
bool | clearContent (SectionHdrWrapper *sec) |
|
offset_t | secHdrsEndOffset () |
|
SectionHdrWrapper * | getLastSection () |
|
bool | canAddNewSection () |
|
SectionHdrWrapper * | addNewSection (QString name, bufsize_t size, bufsize_t v_size=0) |
|
SectionHdrWrapper * | extendLastSection (bufsize_t addedSize) |
|
bool | dumpSection (SectionHdrWrapper *sec, QString fileName) |
|
ResourcesContainer * | getResourcesOfType (pe::resource_type typeId) |
|
DataDirEntryWrapper * | getDataDirEntry (pe::dir_entry eType) |
|
bool | setEntryPoint (offset_t entry, Executable::addr_type aType) |
|
bool | moveDataDirEntry (pe::dir_entry id, offset_t newOffset, Executable::addr_type addType=Executable::RAW) |
|
bool | unbindImports () |
|
ImportDirWrapper * | getImportsDir () |
|
DelayImpDirWrapper * | getDelayedImportsDir () |
|
BoundImpDirWrapper * | getBoundImportsDir () |
|
DebugDirWrapper * | getDebugDir () |
|
ExportDirWrapper * | getExportsDir () |
|
SecurityDirWrapper * | getSecurityDir () |
|
TlsDirWrapper * | getTlsDir () |
|
LdConfigDirWrapper * | getLoadConfigDir () |
|
RelocDirWrapper * | getRelocsDir () |
|
ExceptionDirWrapper * | getExceptionsDir () |
|
ResourceDirWrapper * | getResourcesDir () |
|
ClrDirWrapper * | getClsDir () |
|
virtual size_t | getAllEntryPoints (QMap< offset_t, QString > &entrypoints, Executable::addr_type aType=Executable::RVA) |
|
bool | hasDirectory (pe::dir_entry dirNum) |
|
bufsize_t | getFileAlignment () const |
|
bufsize_t | getSectionAlignment () const |
|
void | setImageSize (size_t newSize) |
|
bool | canResize (bufsize_t newSize) |
|
bool | isReproBuild () |
|
virtual bool | resize (bufsize_t newSize) |
|
bool | isBit64 () |
|
bool | isBit32 () |
|
virtual | ~Executable (void) |
|
virtual bufsize_t | getContentSize () |
|
virtual BYTE * | getContent () |
|
virtual offset_t | getRawSize () const |
|
BYTE * | getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false) |
|
BYTE * | getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false) |
|
virtual BYTE * | getContentAt (offset_t offset, Executable::addr_type aType, bufsize_t size, bool allowExceptions=false) |
|
virtual bufsize_t | getImageSize () |
|
virtual bool | isValidAddr (offset_t addr, addr_type addrType) |
|
virtual bool | isValidVA (offset_t va) |
|
virtual offset_t | convertAddr (offset_t inAddr, Executable::addr_type inType, Executable::addr_type outType) |
|
virtual offset_t | toRaw (offset_t offset, addr_type addrType, bool allowExceptions=false) |
|
Executable::addr_type | detectAddrType (offset_t addr, Executable::addr_type hintType) |
|
virtual offset_t | VaToRva (offset_t va, bool autodetect=false) |
|
virtual offset_t | rvaToVa (offset_t rva) |
|
virtual offset_t | vaToRaw (offset_t va) |
|
QString | getFileName () |
|
virtual bool | isResized () |
|
virtual bool | isTruncated () |
|
AbstractByteBuffer * | getFileBuffer () const |
|
bufsize_t | getFileSize () const |
|
virtual bool | dumpFragment (offset_t offset, bufsize_t size, QString fileName) |
|
| AbstractByteBuffer () |
|
virtual | ~AbstractByteBuffer () |
|
BYTE | operator[] (size_t idx) |
|
virtual offset_t | getOffset (void *ptr, bool allowExceptions=false) |
|
virtual bool | setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false) |
|
bool | setStringValue (offset_t rawOffset, QString newText) |
|
QString | getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false) |
|
QString | getWStringValue (offset_t rawOffset, bufsize_t len) |
|
QString | getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false) |
|
bufsize_t | getMaxSizeFromOffset (offset_t startOffset) |
|
bufsize_t | getMaxSizeFromPtr (BYTE *ptr) |
|
bool | isAreaEmpty (offset_t rawOffset, bufsize_t size) |
|
bool | fillContent (BYTE filling) |
|
bool | pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc) |
|
bool | containsBlock (offset_t rawOffset, bufsize_t size) |
|
bool | intersectsBlock (offset_t rawOffset, bufsize_t size) |
|
uint64_t | getNumValue (offset_t offset, bufsize_t size, bool *isOk) |
|
bool | setNumValue (offset_t offset, bufsize_t size, uint64_t newVal) |
|
bool | setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0) |
|
offset_t | substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn) |
|
| ExeWrappersContainer () |
|
virtual | ~ExeWrappersContainer (void) |
|
virtual ExeElementWrapper * | getWrapper (size_t wrapperId) |
|
size_t | wrappersCount () |
|
QString | getWrapperName (size_t id) |
|
Definition at line 44 of file PEFile.h.