BearParser
Portable Executable parsing library (from PE-bear)
Loading...
Searching...
No Matches
Public Types | Public Member Functions | Static Public Member Functions | Public Attributes | Static Public Attributes | Protected Member Functions | Protected Attributes | Friends | List of all members
SectionHdrWrapper Class Reference

#include <SectHdrsWrapper.h>

Collaboration diagram for SectionHdrWrapper:
Collaboration graph
[legend]

Public Types

enum  SecFieldId {
  NAME = 0 , VSIZE , VPTR , RSIZE ,
  RPTR , RELOC_PTR , LINENUM_PTR , RELOC_NUM ,
  LINENUM_NUM , CHARACT , FIELD_COUNTER
}
 

Public Member Functions

 SectionHdrWrapper (PEFile *pe, size_t sectionNumber)
 
 ~SectionHdrWrapper ()
 
bool wrap ()
 
virtual void * getPtr ()
 
virtual bufsize_t getSize ()
 
virtual QString getName ()
 
virtual size_t getFieldsCount ()
 
virtual size_t getSubFieldsCount ()
 
virtual void * getFieldPtr (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString getFieldName (size_t fieldId)
 
virtual Executable::addr_type containsAddrType (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual WrappedValue::data_type containsDataType (size_t fieldId, size_t subField=FIELD_NONE)
 
offset_t getContentOffset (Executable::addr_type aType, bool useMapped=true)
 
offset_t getContentEndOffset (Executable::addr_type aType, bool roundup)
 
bufsize_t getContentSize (Executable::addr_type aType, bool recalculate)
 
DWORD getCharacteristics ()
 
DWORD getRawPtr ()
 
DWORD getVirtualPtr ()
 
bool setCharacteristics (DWORD newCharacteristics)
 
bool reloadName ()
 
- Public Member Functions inherited from PENodeWrapper
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent=NULL)
 
 PENodeWrapper (PEFile *pe, PENodeWrapper *parent, size_t entryNumber)
 
virtual ~PENodeWrapper ()
 
PEFile * getPE ()
 
virtual PENodeWrapper * getParentNode ()
 
- Public Member Functions inherited from ExeNodeWrapper
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent=NULL)
 
 ExeNodeWrapper (Executable *pe, ExeNodeWrapper *parent, size_t entryNumber)
 
virtual ~ExeNodeWrapper ()
 
virtual void reloadMapping ()
 
virtual ExeNodeWrapper * getEntryAt (size_t fieldId)
 
virtual size_t getEntriesCount ()
 
virtual size_t getEntriesNum ()
 
size_t getEntryId ()
 
virtual void * getSubfieldPtr (size_t fieldId, size_t subField)
 
virtual bufsize_t getSubfieldSize (size_t fieldId, size_t subField)
 
virtual QString getSubfieldName (size_t fieldId, size_t subField)
 
virtual bool canAddEntry ()
 
virtual ExeNodeWrapper * addEntry (ExeNodeWrapper *entry)
 
ExeNodeWrapper * getLastEntry ()
 
virtual offset_t getNextEntryOffset ()
 
virtual bufsize_t geEntrySize ()
 
virtual bool isValid ()
 
- Public Member Functions inherited from ExeElementWrapper
 ExeElementWrapper (Executable *exe)
 
virtual ~ExeElementWrapper ()
 
virtual bufsize_t getContentSize ()
 
virtual BYTE * getContent ()
 
virtual offset_t getOffset ()
 
virtual offset_t getOffset (void *ptr, bool allowExceptions=false)
 
void * getFieldPtr (size_t fieldId)
 
virtual bufsize_t getFieldSize (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual offset_t getFieldOffset (size_t fieldId, size_t subField=FIELD_NONE)
 
virtual QString translateFieldContent (size_t fieldId)
 
virtual bool hasSubfieldWrapper (size_t parentType)
 
virtual WrappedValue getWrappedValue (size_t fieldId, size_t subField)
 
virtual WrappedValue getWrappedValue (size_t fieldId)
 
virtual uint64_t getNumValue (size_t fieldId, size_t subField, bool *isOk)
 
uint64_t getNumValue (size_t fieldId, bool *isOk)
 
virtual bool setNumValue (size_t fieldId, size_t subField, uint64_t val)
 
bool setNumValue (size_t fieldId, uint64_t val)
 
Executable * getExe ()
 
bool isBit64 ()
 
bool isBit32 ()
 
- Public Member Functions inherited from AbstractByteBuffer
 AbstractByteBuffer ()
 
virtual ~AbstractByteBuffer ()
 
virtual bool isTruncated ()
 
virtual bool isResized ()
 
BYTE operator[] (size_t idx)
 
virtual BYTE * getContentAt (offset_t offset, bufsize_t size, bool allowExceptions=false)
 
virtual BYTE * getContentAtPtr (BYTE *ptr, bufsize_t size, bool allowExceptions=false)
 
virtual bool setBufferedValue (BYTE *dstPtr, BYTE *srcPtr, bufsize_t srcSize, bufsize_t paddingSize, bool allowExceptions=false)
 
bool setStringValue (offset_t rawOffset, QString newText)
 
QString getStringValue (offset_t rawOffset, bufsize_t len=BUFSIZE_MAX, bool acceptNonTerminated=false)
 
QString getWStringValue (offset_t rawOffset, bufsize_t len)
 
QString getWAsciiStringValue (offset_t rawOffset, bufsize_t len, bool acceptNonTerminated=false)
 
bufsize_t getMaxSizeFromOffset (offset_t startOffset)
 
bufsize_t getMaxSizeFromPtr (BYTE *ptr)
 
bool isAreaEmpty (offset_t rawOffset, bufsize_t size)
 
bool fillContent (BYTE filling)
 
bool pasteBuffer (offset_t rawOffset, AbstractByteBuffer *buf, bool allowTrunc)
 
bool containsBlock (offset_t rawOffset, bufsize_t size)
 
bool intersectsBlock (offset_t rawOffset, bufsize_t size)
 
uint64_t getNumValue (offset_t offset, bufsize_t size, bool *isOk)
 
bool setNumValue (offset_t offset, bufsize_t size, uint64_t newVal)
 
bool setTextValue (char *textPtr, std::string newText, size_t fieldLimitLen=0)
 
virtual bool resize (bufsize_t newSize)
 
offset_t substFragmentByFile (offset_t offset, bufsize_t contentSize, QFile &fIn)
 

Static Public Member Functions

static std::vector< DWORD > splitCharacteristics (DWORD characteristics)
 
static QString getSecHdrAccessRightsDesc (DWORD characteristics)
 
static void initSecCharacter (std::map< DWORD, QString > &secHdrCharact)
 
static QString translateCharacteristics (DWORD charact)
 
- Static Public Member Functions inherited from AbstractByteBuffer
static bool isValid (AbstractByteBuffer *buf)
 

Public Attributes

QString mappedName
 

Static Public Attributes

static const size_t SECNAME_LEN = 8
 

Protected Member Functions

 SectionHdrWrapper (PEFile *pe, IMAGE_SECTION_HEADER *v_header)
 
offset_t getContentDeclaredOffset (Executable::addr_type aType)
 
bufsize_t getContentDeclaredSize (Executable::addr_type aType)
 
bufsize_t getMappedRawSize ()
 
bufsize_t getMappedVirtualSize ()
 
- Protected Member Functions inherited from ExeNodeWrapper
size_t getEntriesCount (std::vector< ExeNodeWrapper * > &_entries)
 
ExeNodeWrapper * getEntryAt (std::vector< ExeNodeWrapper * > &_entries, size_t fieldId)
 
virtual void clear ()
 
virtual void addMapping (ExeNodeWrapper *entry)
 
virtual bool loadNextEntry (size_t entryNum)
 
virtual ExeNodeWrapper * addEntryAt (ExeNodeWrapper *entry, offset_t nextOffset)
 
virtual bool isMyEntryType (ExeNodeWrapper *entry)
 
- Protected Member Functions inherited from ExeElementWrapper
virtual bool canCopyToOffset (offset_t rawOffset)
 
bool copyToOffset (offset_t rawOffset)
 

Protected Attributes

char * name
 
size_t sectNum
 
- Protected Attributes inherited from PENodeWrapper
PEFile * m_PE
 
PENodeWrapper * peParentNode
 
- Protected Attributes inherited from ExeNodeWrapper
ExeNodeWrapper * parentNode
 
size_t entryNum
 
std::vector< ExeNodeWrapper * > entries
 
- Protected Attributes inherited from ExeElementWrapper
Executable * m_Exe
 

Friends

class PEFile
 

Detailed Description

Definition at line 11 of file SectHdrsWrapper.h.

Member Enumeration Documentation

◆ SecFieldId

enum SectionHdrWrapper::SecFieldId
Enumerator
NAME 
VSIZE 
VPTR 
RSIZE 
RPTR 
RELOC_PTR 
LINENUM_PTR 
RELOC_NUM 
LINENUM_NUM 
CHARACT 
FIELD_COUNTER 

Definition at line 23 of file SectHdrsWrapper.h.

Constructor & Destructor Documentation

◆ SectionHdrWrapper() [1/2]

SectionHdrWrapper::SectionHdrWrapper ( PEFile * pe,
size_t sectionNumber )
inline

Definition at line 41 of file SectHdrsWrapper.h.

Here is the call graph for this function:

◆ ~SectionHdrWrapper()

SectionHdrWrapper::~SectionHdrWrapper ( )
inline

Definition at line 44 of file SectHdrsWrapper.h.

◆ SectionHdrWrapper() [2/2]

SectionHdrWrapper::SectionHdrWrapper ( PEFile * pe,
IMAGE_SECTION_HEADER * v_header )
inlineprotected

Definition at line 95 of file SectHdrsWrapper.h.

Here is the call graph for this function:

Member Function Documentation

◆ containsAddrType()

Executable::addr_type SectionHdrWrapper::containsAddrType ( size_t fieldId,
size_t subField = FIELD_NONE )
virtual

Reimplemented from ExeElementWrapper.

Definition at line 172 of file SectHdrsWrapper.cpp.

◆ containsDataType()

WrappedValue::data_type SectionHdrWrapper::containsDataType ( size_t fieldId,
size_t subField = FIELD_NONE )
virtual

Reimplemented from ExeElementWrapper.

Definition at line 183 of file SectHdrsWrapper.cpp.

◆ getCharacteristics()

DWORD SectionHdrWrapper::getCharacteristics ( )
inline

Definition at line 73 of file SectHdrsWrapper.h.

◆ getContentDeclaredOffset()

offset_t SectionHdrWrapper::getContentDeclaredOffset ( Executable::addr_type aType)
protected

Definition at line 193 of file SectHdrsWrapper.cpp.

◆ getContentDeclaredSize()

bufsize_t SectionHdrWrapper::getContentDeclaredSize ( Executable::addr_type aType)
protected

Definition at line 238 of file SectHdrsWrapper.cpp.

◆ getContentEndOffset()

offset_t SectionHdrWrapper::getContentEndOffset ( Executable::addr_type aType,
bool roundup )

Definition at line 227 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getContentOffset()

offset_t SectionHdrWrapper::getContentOffset ( Executable::addr_type aType,
bool useMapped = true )

Definition at line 206 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getContentSize()

bufsize_t SectionHdrWrapper::getContentSize ( Executable::addr_type aType,
bool recalculate )

Definition at line 349 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getFieldName()

QString SectionHdrWrapper::getFieldName ( size_t fieldId)
virtual

Implements ExeNodeWrapper.

Definition at line 154 of file SectHdrsWrapper.cpp.

◆ getFieldPtr()

void * SectionHdrWrapper::getFieldPtr ( size_t fieldId,
size_t subField = FIELD_NONE )
virtual

Implements ExeElementWrapper.

Definition at line 131 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getFieldsCount()

virtual size_t SectionHdrWrapper::getFieldsCount ( )
inlinevirtual

Implements ExeElementWrapper.

Definition at line 57 of file SectHdrsWrapper.h.

◆ getMappedRawSize()

bufsize_t SectionHdrWrapper::getMappedRawSize ( )
protected

Definition at line 252 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getMappedVirtualSize()

bufsize_t SectionHdrWrapper::getMappedVirtualSize ( )
protected

Definition at line 300 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ getName()

QString SectionHdrWrapper::getName ( )
virtual

Implements ExeElementWrapper.

Definition at line 124 of file SectHdrsWrapper.cpp.

◆ getPtr()

void * SectionHdrWrapper::getPtr ( )
virtual

Implements ExeElementWrapper.

Definition at line 79 of file SectHdrsWrapper.cpp.

◆ getRawPtr()

DWORD SectionHdrWrapper::getRawPtr ( )
inline

Definition at line 75 of file SectHdrsWrapper.h.

◆ getSecHdrAccessRightsDesc()

QString SectionHdrWrapper::getSecHdrAccessRightsDesc ( DWORD characteristics)
static

Definition at line 13 of file SectHdrsWrapper.cpp.

◆ getSize()

bufsize_t SectionHdrWrapper::getSize ( )
virtual

Implements ExeElementWrapper.

Definition at line 118 of file SectHdrsWrapper.cpp.

◆ getSubFieldsCount()

virtual size_t SectionHdrWrapper::getSubFieldsCount ( )
inlinevirtual

Reimplemented from ExeNodeWrapper.

Definition at line 58 of file SectHdrsWrapper.h.

◆ getVirtualPtr()

DWORD SectionHdrWrapper::getVirtualPtr ( )
inline

Definition at line 77 of file SectHdrsWrapper.h.

◆ initSecCharacter()

void SectionHdrWrapper::initSecCharacter ( std::map< DWORD, QString > & secHdrCharact)
static

Definition at line 26 of file SectHdrsWrapper.cpp.

◆ reloadName()

bool SectionHdrWrapper::reloadName ( )

Definition at line 95 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ setCharacteristics()

bool SectionHdrWrapper::setCharacteristics ( DWORD newCharacteristics)
inline

Definition at line 81 of file SectHdrsWrapper.h.

◆ splitCharacteristics()

std::vector< DWORD > SectionHdrWrapper::splitCharacteristics ( DWORD characteristics)
static

Definition at line 42 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ translateCharacteristics()

QString SectionHdrWrapper::translateCharacteristics ( DWORD charact)
static

Definition at line 57 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

◆ wrap()

bool SectionHdrWrapper::wrap ( )
virtual

Reimplemented from ExeNodeWrapper.

Definition at line 69 of file SectHdrsWrapper.cpp.

Here is the call graph for this function:

Friends And Related Symbol Documentation

◆ PEFile

friend class PEFile
friend

Definition at line 114 of file SectHdrsWrapper.h.

Member Data Documentation

◆ mappedName

QString SectionHdrWrapper::mappedName

Definition at line 92 of file SectHdrsWrapper.h.

◆ name

char* SectionHdrWrapper::name
protected

Definition at line 107 of file SectHdrsWrapper.h.

◆ SECNAME_LEN

const size_t SectionHdrWrapper::SECNAME_LEN = 8
static

Definition at line 14 of file SectHdrsWrapper.h.

◆ sectNum

size_t SectionHdrWrapper::sectNum
protected

Definition at line 108 of file SectHdrsWrapper.h.

The documentation for this class was generated from the following files:
Generated by doxygen 1.13.2