introvirt::windows::pe::PE Class Reference

Parser for Windows Portable Executable (PE) headers. More...

#include <PE.hh>

Public Member Functions
virtual const DOS_HEADER &	dos_header () const =0
virtual const IMAGE_FILE_HEADER &	file_header () const =0
virtual const IMAGE_OPTIONAL_HEADER &	optional_header () const =0
virtual const IMAGE_EXPORT_DIRECTORY *	export_directory () const =0
virtual const std::vector< std::unique_ptr< const IMAGE_SECTION_HEADER > > &	sections () const =0
	Get the sections in this PE.
virtual const mspdb::PDB &	pdb () const =0
	Get the debug symbols for this PE.
virtual guest_ptr< void >	ptr () const =0
virtual	~PE ()=default

Static Public Member Functions
static std::unique_ptr< PE >	make_unique (const guest_ptr< void > &ptr)

Detailed Description

Parser for Windows Portable Executable (PE) headers.

Examples

ivprocinfo.cc.

Constructor & Destructor Documentation

~PE()

virtual introvirt::windows::pe::PE::~PE ( )

virtualdefault

Member Function Documentation

dos_header()

virtual const DOS_HEADER & introvirt::windows::pe::PE::dos_header ( ) const

pure virtual

Returns

The DOS_HEADER member of the PE

export_directory()

virtual const IMAGE_EXPORT_DIRECTORY * introvirt::windows::pe::PE::export_directory ( ) const

pure virtual

Returns

The IMAGE_EXPORT_DIRECTORY of this PE, or NULL if one does not exist

file_header()

virtual const IMAGE_FILE_HEADER & introvirt::windows::pe::PE::file_header ( ) const

pure virtual

Returns

The IMAGE_FILE_HEADER of this PE

make_unique()

static std::unique_ptr< PE > introvirt::windows::pe::PE::make_unique ( const guest_ptr< void > &  ptr )

static

optional_header()

virtual const IMAGE_OPTIONAL_HEADER & introvirt::windows::pe::PE::optional_header ( ) const

pure virtual

Returns

The IMAGE_OPTIONAL_HEADER of this PE

Examples

ivguestinfo.cc, and ivprocinfo.cc.

pdb()

virtual const mspdb::PDB & introvirt::windows::pe::PE::pdb ( ) const

pure virtual

Get the debug symbols for this PE.

Returns

The debug symbols for this PE

Exceptions

PeException

if the PDB symbols could not be loaded

ptr()

virtual guest_ptr< void > introvirt::windows::pe::PE::ptr ( ) const

pure virtual

Returns

The base address of the image

sections()

virtual const std::vector< std::unique_ptr< const IMAGE_SECTION_HEADER > > & introvirt::windows::pe::PE::sections ( ) const

pure virtual

Get the sections in this PE.

Returns

const std::vector<const IMAGE_SECTION_HEADER>&

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/pe/PE.hh