Definitions of the used buffer types. Functions for their allocation and deallocation.
Functions related to finding caves in the loaded PE file.
Parsing and filling the Delayload Import Table.
Functions related to Exceptions Table.
Searching specific functions in PE's Exports Table.
A definition of ExportsMapper class. Creates a lookup of all the exported functions from the supplied...
Functions related to finding a base to which the module was relocated.
Functions and classes responsible for fixing Import Table. A definition of ImportedDllCoverage class.
Definitions of basic Imports Resolver classes. They can be used for filling imports when the PE is lo...
Functions related to hooking the loaded PE. Reditecting/replacing a functions with another.
Parsing and filling the Import Table.
Fetching Load Config Directory and recognizing its version.
Dumping PE from the memory buffer into a file.
Wrappers over various fields in the PE header. Read, write, parse PE headers.
Loading PE from a file with the help of the custom loader.
Detecting in which mode is the PE in the supplied buffer (i.e. raw, virtual). Analyzes PE features ty...
Converting PE from raw to virtual format.
Converting PE from virtual to raw format.
Functions for retrieving process information from PEB.
Operating on PE file's relocations table.
Reading from a PE module that is loaded within a remote process.
Parsing PE's resource directory.
Functions related to TLS Callbacks.
Miscellaneous utility functions.