▼NLIEF | LIEF namespace |
►NART | Namespace related to the LIEF's ART module |
►Ndetails | |
►NART_17 | |
►NJava | Namespace related to the Java part of ART 17 |
Cbrooks_read_barrier_t | |
Cjobject_t | |
Cjobject_t< no_brooks_read_barrier_t > | |
Cno_brooks_read_barrier_t | |
CFile | |
CHash | |
CHeader | |
CParser | Class which parses an ART file and transform into a ART::File object |
►Nassembly | Namespace related to assembly/disassembly support |
►Naarch64 | AArch64 architecture-related namespace |
►Noperands | Namespace that wraps the different aarch64 operands |
CImmediate | This class represents an immediate operand (i.e. a constant) |
►CMemory | This class represents a memory operand |
Coffset_t | Wraps a memory offset as an integer offset or as a register offset |
Cshift_info_t | This structure holds shift info (type + value) |
CPCRelative | This class represents a PC-relative operand |
►CRegister | This class represents a register operand |
Creg_t | |
CInstruction | This class represents an AArch64 instruction |
►COperand | This class represents an operand for an AArch64 instruction |
CIterator | Forward iterator that outputs aarch64 Operand as std::unique_ptr |
►Narm | ARM architecture-related namespace |
CInstruction | This class represents an ARM/Thumb instruction |
►Nebpf | EBPF architecture-related namespace |
CInstruction | This class represents an eBPF instruction |
►Nmips | Mips architecture-related namespace |
CInstruction | This class represents a Mips instruction (including mips64, mips32) |
►Npowerpc | PowerPC architecture-related namespace |
CInstruction | |
►Nriscv | RISC-V architecture-related namespace |
CInstruction | This class represents a RISC-V (32 or 64 bit) instruction |
►Nx86 | X86/x86-64 architecture-related namespace |
►Noperands | Namespace that wraps the different x86/x86-64 operands |
CImmediate | This class represents an immediate operand (i.e. a constant) |
CMemory | This class represents a memory operand |
CPCRelative | This class represents a RIP/EIP-relative operand |
CRegister | This class represents a register operand |
CInstruction | This class represents a x86/x86-64 instruction |
►COperand | This class represents an operand for an x86/x86-64 instruction |
CIterator | Forward iterator that outputs x86 Operand as std::unique_ptr |
CEngine | This class interfaces the assembler/disassembler support |
►CInstruction | This class represents an assembly instruction |
CIterator | Lazy-forward iterator that outputs Instruction |
►Ndetails | |
Ccanbe_unique | |
►NDEX | |
CClass | Class which represents a DEX Class (i.e. a Java/Kotlin class) |
CCodeInfo | |
CField | Class which represent a DEX Field |
CFile | Class that represents a DEX file |
Cfill_array_data | |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF DEX objects |
CHeader | Class which represents the DEX header. This is the first structure that begins the DEX format |
CMapItem | Class which represents an element of the MapList object |
CMapList | Class which represents the map_list structure that follows the main DEX header |
CMethod | Class which represents a DEX::Method |
Cpacked_switch | |
CParser | Class which parses a DEX file to produce a DEX::File object |
CPrototype | Class which represents a DEX method prototype |
Csparse_switch | |
CType | Class which represents a DEX type as described in the format specifications: https://source.android.com/devices/tech/dalvik/dex-format#typedescriptor |
►Ndsc | Namespace related to the dyld shared cache support |
CDyldSharedCache | This class represents a dyld shared cache file |
►CDylib | This class represents a library embedded in a dyld shared cache. It mirrors the original dyld_cache_image_info structure |
Cextract_opt_t | This structure is used to tweak the extraction process while calling Dylib::get. These options allow to deoptimize the dylib and get an accurate representation of the origin Mach-O binary |
CIterator | Dylib Iterator |
►CMappingInfo | This class represents a dyld_cache_mapping_info entry |
CIterator | MappingInfo Iterator |
►CSubCache | This class represents a subcache in the case of large/split dyld shared cache |
CIterator | SubCache Iterator |
►Ndwarf | Namespace for the DWARF debug format |
►Nparameters | |
CFormal | This class represents a regular function parameter |
CTemplateType | This class represents a template type parameter |
CTemplateValue | This class represents a template value parameter |
►Ntypes | |
►CArray | This class represents a DW_TAG_array_type |
Csize_info_t | Structure that wraps information about the dimension of this array |
CAtomic | This class represents a DW_TAG_atomic_type |
CBase | This class wraps the DW_TAG_base_type type which can be used – for instance – to represent integers or primitive types |
CClass | This class represents a DWARF class type (DW_TAG_class_type ) |
►CClassLike | This class abstracts a DWARF aggregate: DW_TAG_structure_type , DW_TAG_class_type , DW_TAG_union_type |
CMember | This represents a class/struct/union attribute |
CCoarray | This class represents a DW_TAG_coarray_type |
CConst | This class represents a DW_TAG_const_type |
CDynamic | This class represents a DW_TAG_dynamic_type |
CEnum | This class represents a DW_TAG_enumeration_type |
CFile | This class represents a DW_TAG_file_type |
CImmutable | This class represents a DW_TAG_immutable_type |
CInterface | This class represents a DW_TAG_interface_type |
CPacked | This class represents a DWARF packed type (DW_TAG_packed_type ) |
CPointer | This class represents a DW_TAG_pointer_type DWARF type |
CPointerToMember | This class represents a DW_TAG_ptr_to_member_type |
CReference | This class represents a DW_TAG_reference_type |
CRestrict | This class represents a DW_TAG_restrict_type |
CRValueReference | This class represents a DW_TAG_rvalue_reference_type |
CSetTy | This class represents a DW_TAG_set_type |
CShared | This class represents a DW_TAG_shared_type |
CStringTy | This class represents a DW_TAG_string_type |
CStructure | This class represents a DWARF struct type (DW_TAG_structure_type ) |
CSubroutine | This class represents a DW_TAG_subroutine_type |
CTemplateAlias | This class represents a DW_TAG_template_alias |
CThrown | This class represents a DW_TAG_thrown_type |
CTypedef | This class represents a DW_TAG_typedef type |
CUnion | This class represents a DWARF class type (DW_TAG_union_type ) |
CVolatile | This class represents a DW_TAG_volatile_type |
►CCompilationUnit | This class represents a DWARF compilation unit |
►CIterator | |
CPointerProxy | |
CLanguage | Languages supported by the DWARF (v5) format. See: https://dwarfstd.org/languages.html |
CDebugInfo | This class represents a DWARF debug information. It can embed different compilation units which can be accessed through compilation_units() |
►CFunction | This class represents a DWARF function which can be associated with either: DW_TAG_subprogram or DW_TAG_inlined_subroutine |
►CIterator | |
CPointerProxy | |
CParameter | This class represents a DWARF parameter which can be either: |
CScope | This class materializes a scope in which Function, Variable, Type, ... can be defined |
►CType | This class represents a DWARF Type which includes: |
►CIterator | |
CPointerProxy | |
►CVariable | This class represents a DWARF variable which can be owned by a dwarf::Function or a dwarf::CompilationUnit |
►CIterator | |
CPointerProxy | |
►NELF | Namespace related to the LIEF's ELF module |
CAArch64Feature | This class represents the GNU_PROPERTY_AARCH64_FEATURE_1_AND property |
CAArch64PAuth | This class represents the GNU_PROPERTY_AARCH64_FEATURE_PAUTH property |
CAndroidIdent | Class representing the ".note.android.ident" section |
CBinary | Class which represents an ELF binary |
►CBuilder | Class which takes an ELF::Binary object and reconstructs a valid binary |
Cconfig_t | Configuration options to tweak the building process |
CCoreAuxv | Class representing core auxv object |
►CCoreFile | Class representing a core NT_FILE which describes the mapped files of the process |
Centry_t | Core file entry |
►CCorePrPsInfo | Class representing the NT_PRPSINFO core note. This kind of note represents general information about the process |
Cinfo_t | |
►CCorePrStatus | Class representing core PrPsInfo object |
Cpr_status_t | |
CRegisters | |
Csiginfo_t | |
Ctimeval_t | |
CCoreSigInfo | Class representing a core siginfo object |
CDynamicEntry | Class which represents an entry in the dynamic table These entries are located in the .dynamic section or the PT_DYNAMIC segment |
CDynamicEntryArray | Class that represent an Array in the dynamic table. This entry is associated with constructors: |
CDynamicEntryFlags | |
CDynamicEntryLibrary | Class which represents a DT_NEEDED entry in the dynamic table |
CDynamicEntryRpath | Class which represents a DT_RPATH entry. This attribute is deprecated (cf. man ld ) in favour of DT_RUNPATH (See DynamicRunPath) |
CDynamicEntryRunPath | Class that represents a DT_RUNPATH wich is used by the loader to resolve libraries (DynamicEntryLibrary) |
CDynamicSharedObject | Class which represents a DT_SONAME entry in the dynamic table This kind of entry is usually used to name the original library |
CGeneric | This class represents a property which doesn't have a concrete LIEF implementation |
CGnuHash | Class which provides a view over the GNU Hash implementation. Most of the fields are read-only since the values are re-computed by the LIEF::ELF::Builder |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF ELF objects |
CHeader | Class which represents the ELF's header. This class mirrors the raw ELF Elfxx_Ehdr structure |
CNeeded | |
CNote | Class which represents an ELF note. This class can be instantiated using the static Note::create functions |
CNoteAbi | Class that wraps the NT_GNU_ABI_TAG note |
►CNoteGnuProperty | Class that wraps the NT_GNU_PROPERTY_TYPE_0 note |
CProperty | This class wraps the different properties that can be used in a NT_GNU_PROPERTY_TYPE_0 note |
CNoteNoCopyOnProtected | This class provides an interface over the GNU_PROPERTY_NO_COPY_ON_PROTECTED property. This property indicates that the linker shouldn't copy relocations against protected symbols |
CParser | Class which parses and transforms an ELF file into a ELF::Binary object |
CParserConfig | This structure is used to tweak the ELF Parser (ELF::Parser) |
CQNXStack | Class representing the QNX QNT_STACK note |
CRelocation | Class that represents an ELF relocation |
CSection | Class wich represents an ELF Section |
CSegment | Class which represents the ELF segments |
CStackSize | This class provides an interface over the GNU_PROPERTY_STACK_SIZE property |
CSymbol | Class which represents an ELF symbol |
CSymbolVersion | Class which represents an entry defined in the DT_VERSYM dynamic entry |
CSymbolVersionAux | Class which represents an Auxiliary Symbol version |
CSymbolVersionAuxRequirement | |
CSymbolVersionDefinition | Class which represents an entry defined in DT_VERDEF or .gnu.version_d |
CSymbolVersionRequirement | Class which represents an entry in the DT_VERNEED or .gnu.version_r table |
CSysvHash | Class which represents the SYSV hash for the symbols resolution |
CX86Features | This class interfaces the different GNU_PROPERTY_X86_FEATURE_* properties which includes: |
CX86ISA | This class interfaces the different GNU_PROPERTY_X86_ISA_* properties which includes: |
►Nlogging | |
CScoped | |
►NMachO | Namespace related to the LIEF's Mach-O module |
CAtomInfo | Class which represents the LC_ATOM_INFO command |
►CBinary | Class which represents a MachO binary |
CKeyCmp | |
Crange_t | |
CBinaryParser | Class used to parse a single binary (i.e. non-FAT) |
CBindingInfo | Class that provides an interface over a binding operation |
CBindingInfoIterator | |
►CBuilder | Class used to rebuild a Mach-O file |
Cconfig_t | Options to tweak the building process |
CBuildToolVersion | Class that represents a tool's version that was involved in the build of the binary |
CBuildVersion | |
CChainedBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command |
►CChainedPointerAnalysis | |
Cdyld_chained_ptr_32_bind_t | |
Cdyld_chained_ptr_32_cache_rebase_t | |
Cdyld_chained_ptr_32_firmware_rebase_t | |
Cdyld_chained_ptr_32_rebase_t | |
Cdyld_chained_ptr_64_bind_t | |
Cdyld_chained_ptr_64_kernel_cache_rebase_t | |
Cdyld_chained_ptr_64_rebase_t | |
Cdyld_chained_ptr_arm64e_auth_bind24_t | |
Cdyld_chained_ptr_arm64e_auth_bind_t | |
Cdyld_chained_ptr_arm64e_auth_rebase_t | |
Cdyld_chained_ptr_arm64e_bind24_t | |
Cdyld_chained_ptr_arm64e_bind_t | |
Cdyld_chained_ptr_arm64e_rebase_t | |
Cunion_pointer_t | |
CCodeSignature | |
CCodeSignatureDir | |
CDataCodeEntry | Interface over an entry in the DataInCode command |
CDataInCode | Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that contain data. The slices information are stored as an array of DataCodeEntry |
CDyldBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_INFO bytecode |
►CDyldChainedFixups | Class that represents the LC_DYLD_CHAINED_FIXUPS command |
Cchained_starts_in_segment | Structure that mirrors the raw dyld_chained_starts_in_segment which aims at providing information about the chained rebase/bind fixups |
►CDyldChainedFixupsCreator | |
Cbinding_info_t | |
Creloc_info_t | |
CDyldEnvironment | Class that represents a LC_DYLD_ENVIRONMENT command which is used by the Mach-O linker/loader to initialize an environment variable |
CDyldExportsTrie | Class that represents the LC_DYLD_EXPORTS_TRIE command |
CDyldInfo | Class that represents the LC_DYLD_INFO and LC_DYLD_INFO_ONLY commands |
CDylibCommand | Class which represents a library dependency |
CDylinkerCommand | Class that represents the Mach-O linker, also named loader. Most of the time, DylinkerCommand::name() should return /usr/lib/dyld |
CDynamicSymbolCommand | Class that represents the LC_DYSYMTAB command |
CEncryptionInfo | Class that represents the LC_ENCRYPTION_INFO / LC_ENCRYPTION_INFO_64 commands |
CExportInfo | Class that provides an interface over the Dyld export info |
CFatBinary | Class which represent a Mach-O (fat) binary This object is also used for representing Mach-O binaries that are NOT FAT |
CFilesetCommand | Class associated with the LC_FILESET_ENTRY commands |
CFunctionStarts | Class which represents the LC_FUNCTION_STARTS command |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF MachO objects |
CHeader | Class that represents the Mach-O header |
CIndirectBindingInfo | This class represents a binding operation infered from the indirect symbol table |
CLinkEdit | |
CLinkerOptHint | Class which represents the LC_LINKER_OPTIMIZATION_HINT command |
CLoadCommand | Based class for the Mach-O load commands |
CMainCommand | Class that represent the LC_MAIN command. This kind of command can be used to determine the entrypoint of an executable |
CParser | The main interface to parse a Mach-O binary |
CParserConfig | This structure is used to tweak the MachO Parser (MachO::Parser) |
CRelocation | Class that represents a Mach-O relocation |
CRelocationDyld | Class that represents a relocation found in the DyldInfo structure |
CRelocationFixup | Class that represents a rebase relocation found in the LC_DYLD_CHAINED_FIXUPS command |
CRelocationObject | Class that represents a relocation presents in the MachO object file (.o ). Usually, this kind of relocation is found in the MachO::Section |
CRoutine | Class that represents the LC_ROUTINE/LC_ROUTINE64 commands. Accodring to the Mach-O loader.h documentation: |
CRPathCommand | Class that represents the LC_RPATH command |
CSection | Class that represents a Mach-O section |
CSegmentCommand | Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command |
CSegmentSplitInfo | Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command |
CSourceVersion | Class that represents the MachO LoadCommand::TYPE::SOURCE_VERSION This command is used to provide the version of the sources used to build the binary |
►CStub | This class represents a stub entry in sections like __stubs,__auth_stubs |
CIterator | |
Ctarget_info_t | |
CSubClient | Class that represents the SubClient command. Accodring to the Mach-O loader.h documentation: |
CSubFramework | Class that represents the SubFramework command. Accodring to the Mach-O loader.h documentation: |
CSymbol | Class that represents a Symbol in a Mach-O file |
CSymbolCommand | Class that represents the LC_SYMTAB command |
CThreadCommand | Class that represents the LC_THREAD / LC_UNIXTHREAD commands and that can be used to get the binary entrypoint when the LC_MAIN (MainCommand) is not present |
CTwoLevelHints | Class which represents the LC_TWOLEVEL_HINTS command |
CUnknownCommand | Generic class when the command is not recognized by LIEF |
CUUIDCommand | Class that represents the UUID command |
CVersionMin | Class that wraps the LC_VERSION_MIN_MACOSX, LC_VERSION_MIN_IPHONEOS, ... commands |
►NOAT | |
CBinary | |
CClass | |
CDexFile | |
CHash | |
►CHeader | |
Celement_t | |
CMethod | |
CParser | Class to parse an OAT file to produce an OAT::Binary |
►Nobjc | Namespace related to ObjC metadata |
►CClass | This class represents an Objective-C class (@interface ) |
►CIterator | |
CPointerProxy | |
CDeclOpt | This structure wraps options to tweak the generated output of functions like LIEF::objc::Metadata::to_decl |
►CIVar | This class represents an instance variable (ivar) |
►CIterator | |
CPointerProxy | |
CMetadata | This class is the main interface to inspect Objective-C metadata |
►CMethod | This class represents an Objective-C Method |
►CIterator | |
CPointerProxy | |
►CProperty | This class represents a @property in Objective-C |
►CIterator | |
CPointerProxy | |
►CProtocol | This class represents an Objective-C @protocol |
►CIterator | |
CPointerProxy | |
►Npdb | |
►Ntypes | |
CArray | This class represents a LF_ARRAY PDB type |
►CAttribute | This class represents an attribute (LF_MEMBER ) in an aggregate (class, struct, union, ...) |
►CIterator | |
CPointerProxy | |
CBitField | This class represents a LF_BITFIELD PDB type |
CClass | Interface for the LF_CLASS PDB type |
CClassLike | This class abstracts the following PDB types: LF_STRUCTURE , LF_INTERFACE , LF_CLASS or LF_UNION |
CEnum | This class represents a LF_ENUM PDB type |
CFunction | This class represents a LF_PROCEDURE PDB type |
CInterface | Interface for the LF_INTERFACE PDB type |
►CMethod | This class represents a Method (LF_ONEMETHOD ) that can be defined in ClassLike PDB type |
►CIterator | |
CPointerProxy | |
CModifier | This class represents a LF_MODIFIER PDB type |
CPointer | This class represents a LF_POINTER PDB type |
CSimple | This class represents a primitive types (int, float, ...) which are also named simple types in the PDB format |
CStructure | Interface for the LF_STRUCTURE PDB type |
CUnion | This class represents a LF_UNION PDB type |
►CBuildMetadata | This class wraps build metadata represented by the codeview symbols: S_COMPILE3, S_COMPILE2, S_BUILDINFO, S_ENVBLOCK |
Cbuild_info_t | This structure represents information wrapped by the S_BUILDINFO symbol |
Cversion_t | This structure represents a version for the backend or the frontend |
►CCompilationUnit | This class represents a CompilationUnit (or Module) in a PDB file |
►CIterator | |
CPointerProxy | |
CDebugInfo | This class provides an interface for PDB files. One can instantiate this class using LIEF::pdb::load() or LIEF::pdb::DebugInfo::from_file |
►CFunction | |
►CIterator | |
CPointerProxy | |
►CPublicSymbol | This class provides general information (RVA, name) about a symbol from the PDB's public symbol stream (or Public symbol hash stream) |
►CIterator | |
CPointerProxy | |
►CType | This is the base class for any PDB type |
►CIterator | |
CPointerProxy | |
►NPE | Namespace related to the LIEF's PE module |
►Nunwind_aarch64 | This namespace wraps code related to PE-ARM64 unwinding code |
CPackedFunction | This class represents a packed AArch64 exception entry |
►CUnpackedFunction | This class represents an unpacked AArch64 exception entry |
Cepilog_scope_t | This strucure describes an epilog scope |
►Nunwind_x64 | This namespace wraps code related to PE-x64 unwinding code |
CAlloc | This class represents a stack-allocation operation (UNWIND_OPCODES::ALLOC_SMALL or UNWIND_OPCODES::ALLOC_LARGE) |
CCode | Base class for all unwind operations |
CEpilog | Describes the function's epilog |
CPushMachFrame | Push a machine frame |
CPushNonVol | Push a nonvolatile integer register, decrementing RSP by 8 |
CSaveNonVolatile | Save a nonvolatile integer register on the stack using a MOV instead of a PUSH |
CSaveXMM128 | |
CSetFPReg | Establish the frame pointer register by setting the register to some offset of the current RSP |
CSpare | |
CAttribute | Interface over PKCS #7 attribute |
CAuxiliarybfAndefSymbol | |
CAuxiliaryCLRToken | |
CAuxiliaryFile | This auxiliary symbol represents a filename (auxiliary format 4) |
CAuxiliaryFunctionDefinition | This auxiliary symbols marks the beginning of a function definition |
CAuxiliarySectionDefinition | This auxiliary symbol exposes information about the associated section |
CAuxiliarySymbol | Class that represents an auxiliary symbol |
CAuxiliaryWeakExternal | "Weak externals" are a mechanism for object files that allows flexibility at link time. A module can contain an unresolved external symbol (sym1 ), but it can also include an auxiliary record that indicates that if sym1 is not present at link time, another external symbol (sym2 ) is used to resolve references instead |
CBinary | Class which represents a PE binary This is the main interface to manage and modify a PE executable |
►CBuilder | Class that is used to rebuild a raw PE binary from a PE::Binary object |
Cconfig_t | This structure is used to configure the build operation |
CCHPEMetadata | Base class for any Compiled Hybrid Portable Executable (CHPE) metadata |
►CCHPEMetadataARM64 | This class represents hybrid metadata for ARM64EC or ARM64X |
Crange_entry_t | Structure that describes architecture-specific ranges |
Credirection_entry_t | Structure that describes a redirection |
CCHPEMetadataX86 | This class represents hybrid metadata for X86 |
CCodeIntegrity | |
CCodeView | Interface for the (generic) Debug CodeView (IMAGE_DEBUG_TYPE_CODEVIEW ) |
CCodeViewPDB | CodeView PDB specialization |
CCOFFString | This class represents a string located in the COFF string table |
►CContentInfo | |
CContent | |
CContentType | Interface over the structure described by the OID 1.2.840.113549.1.9.3 (PKCS #9) |
CDataDirectory | Class that represents a PE data directory entry |
CDebug | This class represents a generic entry in the debug data directory. For known types, this class is extended to provide a dedicated API (see: CodeCodeView) |
CDelayImport | Class that represents a PE delayed import |
CDelayImportEntry | Class that represents an entry (i.e. an import) in the delay import table (DelayImport) |
CDosHeader | Class which represents the DosHeader, the first structure presents at the beginning of a PE file |
CDynamicFixup | This is the base class for any fixups located in DynamicRelocation |
►CDynamicFixupARM64Kernel | This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_ARM64_KERNEL_IMPORT_CALL_TRANSFER (8) |
Creloc_entry_t | Mirror IMAGE_IMPORT_CONTROL_TRANSFER_ARM64_RELOCATION |
►CDynamicFixupARM64X | This class represents IMAGE_DYNAMIC_RELOCATION_ARM64X |
Creloc_entry_t | |
►CDynamicFixupControlTransfer | This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_GUARD_IMPORT_CONTROL_TRANSFER (3) |
Creloc_entry_t | Mirror IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION |
CDynamicFixupGeneric | This class represents a generic entry where fixups are regular relocations (LIEF::PE::Relocation) |
CDynamicFixupUnknown | This class represents an special dynamic relocation where the format of the fixups is not supported by LIEF |
CDynamicRelocation | This is the base class for any IMAGE_DYNAMIC_RELOCATION32 , IMAGE_DYNAMIC_RELOCATION32_V2 , IMAGE_DYNAMIC_RELOCATION64 , IMAGE_DYNAMIC_RELOCATION64_V2 dynamic relocations |
CDynamicRelocationV1 | This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION32 or IMAGE_DYNAMIC_RELOCATION64 ) |
CDynamicRelocationV2 | This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION64_V2 or IMAGE_DYNAMIC_RELOCATION32_V2 ) |
CEnclaveConfiguration | This class represents the enclave configuration |
CEnclaveImport | Defines an entry in the array of images that an enclave can import |
CExceptionInfo | This class is the base class for any exception or runtime function entry |
CExDllCharacteristics | This class represents the IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS debug entry |
CExport | Class which represents a PE Export |
►CExportEntry | Class which represents a PE Export entry (cf. PE::Export) |
Cforward_information_t | |
CFactory | This factory is used to create PE from scratch |
►CFPO | This class represents the IMAGE_DEBUG_TYPE_FPO debug entry |
Centry_t | Represents the stack frame layout for a x86 function when frame pointer omission (FPO) optimization is used |
►CFunctionOverride | This class represents IMAGE_DYNAMIC_RELOCATION_FUNCTION_OVERRIDE |
Cimage_bdd_dynamic_relocation_t | Mirror IMAGE_BDD_DYNAMIC_RELOCATION |
Cimage_bdd_info_t | Mirror IMAGE_BDD_INFO |
CFunctionOverrideInfo | |
CGenericContent | |
CGenericType | Interface over an attribute for which the internal structure is not supported by LIEF |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF PE objects |
CHeader | Class that represents the PE header (which follows the DosHeader) |
CImport | Class that represents a PE import |
CImportEntry | Class that represents an entry (i.e. an import) in the import table (Import) |
►CLoadConfiguration | This class represents the load configuration data associated with the IMAGE_LOAD_CONFIG_DIRECTORY |
Cguard_function_t | |
CMsCounterSign | This class exposes the MS Counter Signature attribute |
CMsManifestBinaryID | Interface over the structure described by the OID 1.3.6.1.4.1.311.10.3.28 (szOID_PLATFORM_MANIFEST_BINARY_ID) |
CMsSpcNestedSignature | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.4.1 |
CMsSpcStatementType | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.11 |
COptionalHeader | Class which represents the PE OptionalHeader structure |
CParser | Main interface to parse PE binaries. In particular the static functions: Parser::parse should be used to get a LIEF::PE::Binary |
CParserConfig | This structure is used to tweak the PE Parser (PE::Parser) |
CPDBChecksum | This class represents the PDB Checksum debug entry which is essentially an array of bytes representing the checksum of the PDB content |
CPKCS9AtSequenceNumber | Interface over the structure described by the OID 1.2.840.113549.1.9.25.4 (PKCS #9) |
CPKCS9CounterSignature | Interface over the structure described by the OID 1.2.840.113549.1.9.6 (PKCS #9) |
CPKCS9MessageDigest | Interface over the structure described by the OID 1.2.840.113549.1.9.4 (PKCS #9) |
CPKCS9SigningTime | Interface over the structure described by the OID 1.2.840.113549.1.9.5 (PKCS #9) |
CPKCS9TSTInfo | Interface over the structure described by the OID 1.2.840.113549.1.9.16.1.4 (PKCS #9) |
CPogo | This class represents a Profile Guided Optimization entry from the debug directory (IMAGE_DEBUG_TYPE_POGO ) |
CPogoEntry | |
CRelocation | Class which represents the Base Relocation Block We usually find this structure in the .reloc section |
CRelocationEntry | Class which represents an entry of the PE relocation table |
CRepro | This class represents a reproducible build entry from the debug directory. (IMAGE_DEBUG_TYPE_REPRO ). This entry is usually generated with the undocumented /Brepro linker flag |
CResourceAccelerator | |
CResourceData | Class which represents a Data Node in the PE resources tree |
►CResourceDialog | This class is the base class for either a regular (legacy) Dialog or an extended Dialog. These different kinds of Dialogs are documented by MS at the following addresses: |
CItem | This class represents an element of the dialog. It can be for instance, a button, or a caption |
Cordinal_or_str_t | This structure wraps either an ordinal value (uint16_t ) or a string. The ordinal value should refer to an existing resource id in the resource tree |
►CResourceDialogExtended | Implementation for the new extended dialogbox format |
Cfont_t | Font information for the font to use for the text in the dialog box and its controls |
CItem | This class represents a DLGTEMPLATEEX item (DLGITEMTEMPLATEEX ) |
►CResourceDialogRegular | Implementation for a regular/legacy dialog box |
Cfont_t | This structure represents additional font information that might be embedded at the end of the DLGTEMPLATE stream |
CItem | This class represents a DLGTEMPLATE item: DLGITEMTEMPLATE |
CResourceDirectory | |
CResourceIcon | |
CResourceNode | Class which represents a Node in the resource tree |
►CResourcesManager | The Resource Manager provides an enhanced API to manipulate the resource tree |
Cstring_entry_t | This structure represent an entry in the string table (RT_STRING ) |
CResourceStringFileInfo | Representation of the StringFileInfo structure |
►CResourceStringTable | This class represents the StringTable structure. This structure can be seen as a dictionary of key, values with key and values defined a utf-16 string |
Centry_t | An entry in this table which is composed of an UTF-16 key and an UTF-16 value |
CResourceVar | This class represents an element of the ResourceVarFileInfo structure It typically contains a list of language and code page identifier pairs that the version of the application or DLL supports |
CResourceVarFileInfo | Representation of the VarFileInfo structure |
►CResourceVersion | Representation of the data associated with the RT_VERSION entry |
Cfixed_file_info_t | This structure represents the VS_FIXEDFILEINFO structure defined in verrsrc.h |
CRichEntry | Class which represents an entry associated to the RichHeader |
CRichHeader | Class which represents the not-so-documented rich header |
CRsaInfo | Object that wraps a RSA key |
CRuntimeFunctionAArch64 | This class represents an entry in the exception table (.pdata section) for the AArch64 architecture |
►CRuntimeFunctionX64 | This class represents an entry in the exception table (.pdata section) for the x86-64 architecture |
Cunwind_info_t | This structure represents the UNWIND_INFO which records the effects a function has on the stack pointer, and where the nonvolatile registers are saved on the stack |
CSection | Class which represents a PE section |
CSignature | Main interface for the PKCS #7 signature scheme |
CSignatureParser | |
CSignerInfo | |
CSigningCertificateV2 | SigningCertificateV2 ::= SEQUENCE { certs SEQUENCE OF ESSCertIDv2, policies SEQUENCE OF PolicyInformation OPTIONAL } |
CSpcIndirectData | |
CSpcRelaxedPeMarkerCheck | |
CSpcSpOpusInfo | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.12 |
CSymbol | Class that represents a PE-COFF symbol |
CTLS | Class which represents the PE Thread Local Storage |
CVCFeature | This class represents the IMAGE_DEBUG_TYPE_VC_FEATURE debug entry |
►CVolatileMetadata | This class represents volatile metadata which can be enabled at link time with /volatileMetadata |
Crange_t | |
Cx509 | Interface over a x509 certificate |
►NVDEX | |
CFile | Main class for the VDEX module which represents a VDEX file |
CHash | |
CHeader | |
CParser | Class which parse an VDEX file and transform into a VDEX::File object |
CAbstractHash | |
CASN1Reader | |
CBinary | Abstract binary that exposes an uniform API for the different executable file formats |
CBinaryStream | Class that is used to a read stream of data from different sources |
Cdebug_location_t | This structure holds a debug location (source filename & line) |
CDebugInfo | |
CFileStream | Stream interface over a std::ifstream |
Cfilter_iterator | Iterator which return a ref on container's values given predicates |
CFunction | Class that represents a function in the binary |
CHash | |
CHeader | |
Citerator_adaptor_base | CRTP base class for adapting an iterator to a different type |
Citerator_facade_base | CRTP base class which implements the entire standard iterator facade in terms of a minimal subset of the interface |
Citerator_range | |
CMemoryStream | |
CObject | |
Cok_t | Opaque structure used by ok_error_t |
Coptional | |
CParser | Main interface to parse an executable regardless of its format |
Cpointee_iterator | An iterator type that allows iterating over the pointees via some other iterator |
Cpointer_iterator | |
Crange_t | |
Cref_iterator | Iterator which returns reference on container's values |
CRelocation | Class which represents an abstracted Relocation |
CScopedStream | |
CScopeOStream | |
CSection | Class which represents an abstracted section |
CSpanStream | |
CSymbol | This class represents a symbol in an executable format |
CToggleEndianness | |
Cvector_iostream | |
CVectorStream | |
CVisitor | |
CElf_Binary_t | |
CElf_DynamicEntry_Array_t | |
CElf_DynamicEntry_Flags_t | |
CElf_DynamicEntry_Library_t | |
CElf_DynamicEntry_Rpath_t | |
CElf_DynamicEntry_RunPath_t | |
CElf_DynamicEntry_SharedObject_t | |
CElf_DynamicEntry_t | |
CElf_Header_t | |
CElf_Section_t | |
CElf_Segment_t | |
CElf_Symbol_t | |
CEnableBitMaskOperators | |
CEnableBitMaskOperators< LIEF::ELF::Section::FLAGS > | |
CEnableBitMaskOperators< LIEF::ELF::Segment::FLAGS > | |
CEnableBitMaskOperators< LIEF::Function::FLAGS > | |
CEnableBitMaskOperators< LIEF::Header::MODES > | |
CEnableBitMaskOperators< LIEF::MachO::ExportInfo::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::Header::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::Section::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::VM_PROTECTIONS > | |
CEnableBitMaskOperators< LIEF::PE::ExDllCharacteristics::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::Header::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::OptionalHeader::DLL_CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::ResourceAccelerator::FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::CONTROL_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::DIALOG_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_EXTENDED_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::RuntimeFunctionX64::UNWIND_FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::Section::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_CHECKS > | |
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::x509::VERIFICATION_FLAGS > | |
CMacho_Binary_t | LIEF::MachO::Binary C Handler |
CMacho_Command_t | |
CMacho_Header_t | |
CMacho_Section_t | |
CMacho_Segment_t | |
CMacho_Symbol_t | |
CPe_Binary_t | LIEF::PE::Binary C Handler |
CPe_DataDirectory_t | |
CPe_DosHeader_t | |
CPe_Header_t | |
CPe_Import_t | |
CPe_ImportEntry_t | |
CPe_OptionalHeader_t | |
CPe_Section_t | |