|
libPeConv
A library to load, manipulate, dump PE files.
|

Files | |
| file | buffer_util.h [code] |
| Definitions of the used buffer types. Functions for their allocation and deallocation. | |
| file | caves.h [code] |
| Functions related to finding caves in the loaded PE file. | |
| file | delayed_imports_loader.h [code] |
| Parsing and filling the Delayload Import Table. | |
| file | exceptions_parser.h [code] |
| Functions related to Exceptions Table. | |
| file | exported_func.h [code] |
| A definition of ExportedFunc class - used for storing the details of the exported function. Helper functions related to the export parsing. | |
| file | exports_lookup.h [code] |
| Searching specific functions in PE's Exports Table. | |
| file | exports_mapper.h [code] |
| A definition of ExportsMapper class. Creates a lookup of all the exported functions from the supplied DLLs. Allows to associate an address with a corresponding function. | |
| file | file_util.h [code] |
| Functions related to operations on files. Wrappers for read/write. | |
| file | find_base.h [code] |
| Functions related to finding a base to which the module was relocated. | |
| file | fix_imports.h [code] |
| Functions and classes responsible for fixing Import Table. A definition of ImportedDllCoverage class. | |
| file | function_resolver.h [code] |
| Definitions of basic Imports Resolver classes. They can be used for filling imports when the PE is loaded. | |
| file | hooks.h [code] |
| Functions related to hooking the loaded PE. Reditecting/replacing a functions with another. | |
| file | imports_loader.h [code] |
| Parsing and filling the Import Table. | |
| file | imports_uneraser.h [code] |
| A definition of ImportsUneraser class - for recovery of a partialy erased Import Table. | |
| file | load_config_defs.h [code] |
| Definitions of various versions of Load Config Directory (new fields added with new versions for Windows). | |
| file | load_config_util.h [code] |
| Fetching Load Config Directory and recognizing its version. | |
| file | logger.h [code] |
| Compile-time configurable logging macros for peconv. | |
| file | pe_dumper.h [code] |
| Dumping PE from the memory buffer into a file. | |
| file | pe_hdrs_helper.h [code] |
| Wrappers over various fields in the PE header. Read, write, parse PE headers. | |
| file | pe_loader.h [code] |
| Loading PE from a file with the help of the custom loader. | |
| file | pe_mode_detector.h [code] |
| Detecting in which mode is the PE in the supplied buffer (i.e. raw, virtual). Analyzes PE features typical for particular modes. | |
| file | pe_raw_to_virtual.h [code] |
| Converting PE from raw to virtual format. | |
| file | pe_virtual_to_raw.h [code] |
| Converting PE from virtual to raw format. | |
| file | peb_lookup.h [code] |
| Functions for retrieving process information from PEB. | |
| file | relocate.h [code] |
| Operating on PE file's relocations table. | |
| file | remote_pe_reader.h [code] |
| Reading from a PE module that is loaded within a remote process. | |
| file | resource_parser.h [code] |
| Parsing PE's resource directory. | |
| file | resource_util.h [code] |
| Functions related to manual retrieving of PE resources. | |
| file | tls_parser.h [code] |
| Functions related to TLS Callbacks. | |
| file | unicode.h [code] |
| file | util.h [code] |
| Miscellaneous utility functions. | |