Class List

Here are the classes, structs, unions and interfaces with brief descriptions:

NLIEF	LIEF namespace
NART	Namespace related to the LIEF's ART module
Ndetails
NART_17
NJava	Namespace related to the Java part of ART 17
Cbrooks_read_barrier_t
Cjobject_t
Cjobject_t< no_brooks_read_barrier_t >
Cno_brooks_read_barrier_t
CFile
CHash
CHeader
CParser	Class which parses an ART file and transforms it into an ART::File object
Nassembly	Namespace related to assembly/disassembly support
Naarch64	AArch64 architecture-related namespace
Noperands	Namespace that wraps the different aarch64 operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
Cshift_info_t	This structure holds shift info (type + value)
Coffset_t	Wraps a memory offset as an integer offset or as a register offset
CPCRelative	This class represents a PC-relative operand
CRegister	This class represents a register operand
Creg_t
CInstruction	This class represents an AArch64 instruction
COperand	This class represents an operand for an AArch64 instruction
CIterator	Forward iterator that lazily disassembles aarch64 Operand
Narm	ARM architecture-related namespace
CInstruction	This class represents an ARM/Thumb instruction
Nebpf	EBPF architecture-related namespace
Noperands	Namespace that wraps the different eBPF operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
CPCRelative	This class represents a PC-relative operand
CRegister	This class represents a register operand
CInstruction	This class represents an eBPF instruction
COperand	This class represents an operand for an eBPF instruction
CIterator	Forward iterator that lazily disassembles ebpf Operand
Nmips	Mips architecture-related namespace
Noperands	Namespace that wraps the different Mips operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
Coffset_t	Wraps the memory offset as either an integer displacement or an index register
CPCRelative	This class represents a PC-relative operand
CRegister	This class represents a register operand
CInstruction	This class represents a Mips instruction (including mips64, mips32)
COperand	This class represents an operand for a Mips instruction
CIterator	Forward iterator that lazily disassembles mips Operand
Npowerpc	PowerPC architecture-related namespace
Noperands	Namespace that wraps the different PowerPC operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
Coffset_t	Wraps the memory offset as either an integer displacement or an index register
CPCRelative	This class represents a PC-relative operand
CRegister	This class represents a register operand
CInstruction
COperand	This class represents an operand for a PowerPC instruction
CIterator	Forward iterator that lazily disassembles powerpc Operand
Nriscv	RISC-V architecture-related namespace
Noperands	Namespace that wraps the different RISC-V operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
CPCRelative	This class represents a PC-relative operand
CRegister	This class represents a register operand
Creg_t
CInstruction	This class represents a RISC-V (32 or 64 bit) instruction
COperand	This class represents an operand for a RISC-V instruction
CIterator	Forward iterator that lazily disassembles riscv Operand
Nx86	X86/x86-64 architecture-related namespace
Noperands	Namespace that wraps the different x86/x86-64 operands
CImmediate	This class represents an immediate operand (i.e. a constant)
CMemory	This class represents a memory operand
CPCRelative	This class represents a RIP/EIP-relative operand
CRegister	This class represents a register operand
CInstruction	This class represents a x86/x86-64 instruction
COperand	This class represents an operand for an x86/x86-64 instruction
CIterator	Forward iterator that lazily disassembles x86 Operand
CAssemblerConfig	This class exposes the different elements that can be configured to assemble code
CEngine	This class interfaces the assembler/disassembler support
CInstruction	This class represents an assembly instruction
CIterator	Lazy-forward iterator that disassembles instructions on demand
NCOFF
CAuxiliarybfAndefSymbol
CAuxiliaryCLRToken	Auxiliary symbol associated with the CLR_TOKEN storage class
CAuxiliaryFile	This auxiliary symbol represents a filename (auxiliary format 4)
CAuxiliaryFunctionDefinition	This auxiliary symbols marks the beginning of a function definition
CAuxiliarySectionDefinition	This auxiliary symbol exposes information about the associated section
CAuxiliarySymbol	Class that represents an auxiliary symbol
CAuxiliaryWeakExternal	"Weak externals" are a mechanism for object files that allows flexibility at link time. A module can contain an unresolved external symbol (sym1), but it can also include an auxiliary record that indicates that if sym1 is not present at link time, another external symbol (sym2) is used to resolve references instead
CBigObjHeader	This class represents the header for a COFF object compiled with /bigobj support (i.e. the number of sections can exceed 65536)
CBinary	Class that represents a COFF Binary
CHeader	Class that represents the COFF header. It is subclassed by LIEF::COFF::RegularHeader and LIEF::COFF::BigObjHeader for normal vs /bigobj files
CParser
CParserConfig	Class used to configure the COFF parser
CRegularHeader	This class represents the COFF header for non-bigobj
CRelocation	This class represents a COFF relocation
CSection	This class represents a COFF section
CComdatInfo	This structure wraps comdat information which is composed of the symbol associated with the comdat section and its selection flag
CString	This class represents a string located in the COFF string table
CSymbol	This class represents a COFF symbol
Cparsing_context_t
Ndetails
Ccanbe_unique
NDEX
CClass	Class which represents a DEX Class (i.e. a Java/Kotlin class)
CCodeInfo
CField	Class which represents a DEX Field
CFile	Class that represents a DEX file
Cfill_array_data
CHash	Class which implements a visitor to compute a deterministic hash for LIEF DEX objects
CHeader	Class which represents the DEX header. This is the first structure that begins the DEX format
CMapItem	Class which represents an element of the MapList object
CMapList	Class which represents the map_list structure that follows the main DEX header
CMethod	Class which represents a DEX::Method
Cpacked_switch
CParser	Class which parses a DEX file to produce a DEX::File object
CPrototype	Class which represents a DEX method prototype
Csparse_switch
CType	Class which represents a DEX type as described in the format specifications: https://source.android.com/devices/tech/dalvik/dex-format#typedescriptor
Ndsc	Namespace related to the dyld shared cache support
CDyldSharedCache	This class represents a dyld shared cache file
CDylib	This class represents a library embedded in a dyld shared cache. It mirrors the original dyld_cache_image_info structure
CIterator	Dylib Iterator
Cextract_opt_t	This structure is used to tweak the extraction process while calling Dylib::get. These options allow to deoptimize the dylib and get an accurate representation of the origin Mach-O binary
CMappingInfo	This class represents a dyld_cache_mapping_info entry
CIterator	MappingInfo Iterator
CSubCache	This class represents a subcache in the case of large/split dyld shared cache
CIterator	SubCache Iterator
Ndwarf	Namespace for the DWARF debug format
Neditor
CArrayType	This class represents an array type (DW_TAG_array_type)
CBaseType	This class represents a primitive type like int, char
CCompilationUnit	This class represents an editable DWARF compilation unit
CEnumType	This class represents an editable enum type (DW_TAG_enumeration_type)
CValue	This class represents an enum value
CFunction	This class represents an editable DWARF function (DW_TAG_subprogram)
Crange_t
CParameter	This class represents a parameter of the current function (DW_TAG_formal_parameter)
CLexicalBlock	This class mirrors the DW_TAG_lexical_block DWARF tag
CLabel	This class mirrors the DW_TAG_label DWARF tag
CFunctionType	This class represents a function type (DW_TAG_subroutine_type)
CParameter	This class represents a function's parameter
CPointerType	This class represents a pointer to another type
CStructType	This class represents a struct-like type which can be:
CMember	This class represents a member of the struct-like
CType	This class is the base class for any types created when editing DWARF debug info
CTypeDef	This class represents a typedef (DW_TAG_typedef)
CVariable	This class represents an editable DWARF variable which can be scoped by a function or a compilation unit (DW_TAG_variable)
Nparameters
CFormal	This class represents a regular function parameter
CTemplateValue	This class represents a template value parameter
CTemplateType	This class represents a template type parameter
Ntypes
CArray	This class represents a DW_TAG_array_type
Csize_info_t	Structure that wraps information about the dimension of this array
CAtomic	This class represents a DW_TAG_atomic_type
CBase	This class wraps the DW_TAG_base_type type which can be used – for instance – to represent integers or primitive types
CClass	This class represents a DWARF class type (DW_TAG_class_type)
CClassLike	This class abstracts a DWARF aggregate: DW_TAG_structure_type, DW_TAG_class_type, DW_TAG_union_type
CMember	This represents a class/struct/union attribute
CCoarray	This class represents a DW_TAG_coarray_type
CConst	This class represents a DW_TAG_const_type
CDynamic	This class represents a DW_TAG_dynamic_type
CEnum	This class represents a DW_TAG_enumeration_type
CEntry	This class represents an enum entry which is essentially composed of a name and its value (integer)
CFile	This class represents a DW_TAG_file_type
CImmutable	This class represents a DW_TAG_immutable_type
CInterface	This class represents a DW_TAG_interface_type
CPacked	This class represents a DWARF packed type (DW_TAG_packed_type)
CPointer	This class represents a DW_TAG_pointer_type DWARF type
CPointerToMember	This class represents a DW_TAG_ptr_to_member_type
CReference	This class represents a DW_TAG_reference_type
CRestrict	This class represents a DW_TAG_restrict_type
CRValueReference	This class represents a DW_TAG_rvalue_reference_type
CSetTy	This class represents a DW_TAG_set_type
CShared	This class represents a DW_TAG_shared_type
CStringTy	This class represents a DW_TAG_string_type
CStructure	This class represents a DWARF struct type (DW_TAG_structure_type)
CSubroutine	This class represents a DW_TAG_subroutine_type
CTemplateAlias	This class represents a DW_TAG_template_alias
CThrown	This class represents a DW_TAG_thrown_type
CTypedef	This class represents a DW_TAG_typedef type
CUnion	This class represents a DWARF union type (DW_TAG_union_type)
CVolatile	This class represents a DW_TAG_volatile_type
CCompilationUnit	This class represents a DWARF compilation unit
CIterator
CLanguage	Languages supported by the DWARF (v5) format. See: https://dwarfstd.org/languages.html
CDebugInfo	This class represents a DWARF debug information. It can embed different compilation units which can be accessed through compilation_units()
CEditor	This class exposes the main API to create DWARF information
CFunction	This class represents a DWARF function which can be associated with either: DW_TAG_subprogram or DW_TAG_inlined_subroutine
CIterator
CLexicalBlock	This class represents a DWARF lexical block (DW_TAG_lexical_block)
CIterator
CParameter	This class represents a DWARF parameter which can be either:
CLocation	This class exposes information about the location of a parameter
CRegisterLoc	This class represents a register location
CScope	This class materializes a scope in which Function, Variable, Type, ... can be defined
CType	This class represents a DWARF Type which includes:
CIterator
CVariable	This class represents a DWARF variable which can be owned by a dwarf::Function or a dwarf::CompilationUnit
CIterator
NELF	Namespace related to the LIEF's ELF module
CAArch64Feature	This class represents the GNU_PROPERTY_AARCH64_FEATURE_1_AND property
CAArch64PAuth	This class represents the GNU_PROPERTY_AARCH64_FEATURE_PAUTH property
CAndroidIdent	Class representing the ".note.android.ident" section
CBinary	Class which represents an ELF binary
CBuilder	Class which takes an ELF::Binary object and reconstructs a valid binary
Cconfig_t	Configuration options to tweak the building process
CCoreAuxv	Class representing core auxv object
CCoreFile	Class representing a core NT_FILE which describes the mapped files of the process
Centry_t	Core file entry
CCorePrPsInfo	Class representing the NT_PRPSINFO core note. This kind of note represents general information about the process
Cinfo_t
CCorePrStatus	Class representing core PrPsInfo object
Csiginfo_t
Ctimeval_t
Cpr_status_t	Status information from a core dump
CRegisters
CCoreSigInfo	Class representing a core siginfo object
CDynamicEntry	Class which represents an entry in the dynamic table These entries are located in the .dynamic section or the PT_DYNAMIC segment
CDynamicEntryArray	Class that represent an Array in the dynamic table. This entry is associated with constructors:
CDynamicEntryAuxiliary	Class which represents a DT_AUXILIARY entry in the dynamic table This kind of entry is used to specify a shared object that should be loaded before the current one
CDynamicEntryFilter	Class which represents a DT_FILTER entry in the dynamic table This kind of entry is used to specify a shared object for which the current one is a filter
CDynamicEntryFlags
CDynamicEntryLibrary	Class which represents a DT_NEEDED entry in the dynamic table
CDynamicEntryRpath	Class which represents a DT_RPATH entry. This attribute is deprecated (cf. man ld) in favor of DT_RUNPATH (See DynamicEntryRunPath)
CDynamicEntryRunPath	Class that represents a DT_RUNPATH which is used by the loader to resolve libraries (DynamicEntryLibrary)
CDynamicSharedObject	Class which represents a DT_SONAME entry in the dynamic table This kind of entry is usually used to name the original library
CGeneric	This class represents a property which doesn't have a concrete LIEF implementation
CGnuHash	Class which provides a view over the GNU Hash implementation. Most of the fields are read-only since the values are re-computed by the LIEF::ELF::Builder
CHash	Class which implements a visitor to compute a deterministic hash for LIEF ELF objects
CHeader	Class which represents the ELF's header. This class mirrors the raw ELF Elfxx_Ehdr structure
CNeeded	This class represents the GNU_PROPERTY_1_NEEDED note property
CNote	Class which represents an ELF note. This class can be instantiated using the static Note::create functions
CNoteAbi	Class that wraps the NT_GNU_ABI_TAG note
CNoteGnuProperty	Class that wraps the NT_GNU_PROPERTY_TYPE_0 note
CProperty	This class wraps the different properties that can be used in a NT_GNU_PROPERTY_TYPE_0 note
CNoteNoCopyOnProtected	This class provides an interface over the GNU_PROPERTY_NO_COPY_ON_PROTECTED property. This property indicates that the linker shouldn't copy relocations against protected symbols
CParser	Class which parses and transforms an ELF file into a ELF::Binary object
CParserConfig	This structure is used to tweak the ELF Parser (ELF::Parser)
CQNXStack	Class representing the QNX QNT_STACK note
CRelocation	Class that represents an ELF relocation
CSection	Class which represents an ELF Section
CSegment	Class which represents the ELF segments
CStackSize	This class provides an interface over the GNU_PROPERTY_STACK_SIZE property
CSymbol	Class which represents an ELF symbol
CSymbolVersion	Class which represents an entry defined in the DT_VERSYM dynamic entry
CSymbolVersionAux	Class which represents an Auxiliary Symbol version
CSymbolVersionAuxRequirement
CSymbolVersionDefinition	Class which represents an entry defined in DT_VERDEF or .gnu.version_d
CSymbolVersionRequirement	Class which represents an entry in the DT_VERNEED or .gnu.version_r table
CSysvHash	Class which represents the SYSV hash for the symbols resolution
CX86Features	This class interfaces the different GNU_PROPERTY_X86_FEATURE_* properties which includes:
CX86ISA	This class interfaces the different GNU_PROPERTY_X86_ISA_* properties which includes:
Nlogging
CScoped
NMachO	Namespace related to the LIEF's Mach-O module
Ndetails
Cfunction_variant_fixup_t
Cruntime_table_entry_t
CAtomInfo	Class which represents the LC_ATOM_INFO command
CBinary	Class which represents a MachO binary
Crange_t
CKeyCmp
CBinaryParser	Class used to parse a single binary (i.e. non-FAT)
CBindingInfo	Class that provides an interface over a binding operation
CBindingInfoIterator
CBuilder	Class used to rebuild a Mach-O file
Cconfig_t	Options to tweak the building process
CBuildToolVersion	Class that represents a tool's version that was involved in the build of the binary
CBuildVersion
CChainedBindingInfo	This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command
CChainedPointerAnalysis
Cdyld_chained_ptr_arm64e_rebase_t
Cdyld_chained_ptr_arm64e_bind_t
Cdyld_chained_ptr_arm64e_auth_rebase_t
Cdyld_chained_ptr_arm64e_auth_bind_t
Cdyld_chained_ptr_64_rebase_t
Cdyld_chained_ptr_arm64e_bind24_t
Cdyld_chained_ptr_arm64e_auth_bind24_t
Cdyld_chained_ptr_64_bind_t
Cdyld_chained_ptr_64_kernel_cache_rebase_t
Cdyld_chained_ptr_32_rebase_t
Cdyld_chained_ptr_32_bind_t
Cdyld_chained_ptr_32_cache_rebase_t
Cdyld_chained_ptr_32_firmware_rebase_t
Cdyld_chained_ptr_arm64e_segmented_rebase_t
Cdyld_chained_ptr_arm64e_auth_segmented_rebase_t
Cunion_pointer_t
CCodeSignature
CCodeSignatureDir
CDataCodeEntry	Interface over an entry in the DataInCode command
CDataInCode	Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that contain data. The slices information are stored as an array of DataCodeEntry
CDyldBindingInfo	This class represents a symbol binding operation associated with the LC_DYLD_INFO bytecode
CDyldChainedFixups	Class that represents the LC_DYLD_CHAINED_FIXUPS command
Cchained_starts_in_segment	Structure that mirrors the raw dyld_chained_starts_in_segment which aims at providing information about the chained rebase/bind fixups
CDyldChainedFixupsCreator
Cbinding_info_t
Creloc_info_t
CDyldEnvironment	Class that represents a LC_DYLD_ENVIRONMENT command which is used by the Mach-O linker/loader to initialize an environment variable
CDyldExportsTrie	Class that represents the LC_DYLD_EXPORTS_TRIE command
CDyldInfo	Class that represents the LC_DYLD_INFO and LC_DYLD_INFO_ONLY commands
CDylibCommand	Class which represents a library dependency
CDylinkerCommand	Class that represents the Mach-O linker, also named loader. Most of the time, DylinkerCommand::name() should return /usr/lib/dyld
CDynamicSymbolCommand	Class that represents the LC_DYSYMTAB command
CEncryptionInfo	Class that represents the LC_ENCRYPTION_INFO / LC_ENCRYPTION_INFO_64 commands
CExportInfo	Class that provides an interface over the Dyld export info
CFatBinary	Class which represents a Mach-O (fat) binary This object is also used for representing Mach-O binaries that are NOT FAT
CFilesetCommand	Class associated with the LC_FILESET_ENTRY commands
CFunctionStarts	Class which represents the LC_FUNCTION_STARTS command
CFunctionVariantFixups	Class which represents the LC_FUNCTION_VARIANT_FIXUPS command
CFixup	A single relocation associated with a function-variant. It mirrors the FunctionVariantFixups::InternalFixup structure used by dyld and describes a slot that must be fixed up to point to the variant referenced by variant_index()
CFunctionVariants	Class representing the LC_FUNCTION_VARIANTS load command
CRuntimeTableEntry	This class exposes information about a given implementation
CRuntimeTable	Represents a runtime table of function variants sharing a common namespace (referred to internally as FunctionVariantsRuntimeTable in dyld)
CHash	Class which implements a visitor to compute a deterministic hash for LIEF MachO objects
CHeader	Class that represents the Mach-O header
CIndirectBindingInfo	This class represents a binding operation inferred from the indirect symbol table
CLazyLoadDylibInfo	Class representing the LC_LAZY_LOAD_DYLIB_INFO load command
CFixup	A single lazy-binding fixup decoded from the chain referenced by chain_start_image_offset and decoded according to pointer_format
CLinkEdit
CLinkerOptHint	Class which represents the LC_LINKER_OPTIMIZATION_HINT command
CLoadCommand	Base class for the Mach-O load commands
CMainCommand	Class that represents the LC_MAIN command. This kind of command can be used to determine the entrypoint of an executable
CNoteCommand	Class that represents the LC_NOTE command
CParser	The main interface to parse a Mach-O binary
CParserConfig	This structure is used to tweak the MachO Parser (MachO::Parser)
CRelocation	Class that represents a Mach-O relocation
CRelocationDyld	Class that represents a relocation found in the DyldInfo structure
CRelocationFixup	Class that represents a rebase relocation found in the LC_DYLD_CHAINED_FIXUPS command
CRelocationObject	Class that represents a relocation present in the MachO object file (.o). Usually, this kind of relocation is found in the MachO::Section
CRoutine	Class that represents the LC_ROUTINE/LC_ROUTINE64 commands. According to the Mach-O loader.h documentation:
CRPathCommand	Class that represents the LC_RPATH command
CSection	Class that represents a Mach-O section
CSegmentCommand	Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command
CSegmentSplitInfo	Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command
CSourceVersion	Class that represents the MachO LoadCommand::TYPE::SOURCE_VERSION This command is used to provide the version of the sources used to build the binary
CStub	This class represents a stub entry in sections like __stubs,__auth_stubs
Ctarget_info_t
CIterator
CSubClient	Class that represents the SubClient command. According to the Mach-O loader.h documentation:
CSubFramework	Class that represents the SubFramework command. According to the Mach-O loader.h documentation:
CSymbol	Class that represents a Symbol in a Mach-O file
CSymbolCommand	Class that represents the LC_SYMTAB command
CThreadCommand	Class that represents the LC_THREAD / LC_UNIXTHREAD commands and that can be used to get the binary entrypoint when the LC_MAIN (MainCommand) is not present
CThreadLocalVariables	This class represents a MachO section with type Section::TYPE::THREAD_LOCAL_VARIABLES (S_THREAD_LOCAL_VARIABLES)
CThunk	Descriptor for a single thread-local variable
CIterator	Random-access iterator that materializes Thunk values on the fly from the raw section content
CTwoLevelHints	Class which represents the LC_TWOLEVEL_HINTS command
CUnknownCommand	Generic class when the command is not recognized by LIEF
CUUIDCommand	Class that represents the UUID command
CVersionMin	Class that wraps the LC_VERSION_MIN_MACOSX, LC_VERSION_MIN_IPHONEOS, ... commands
NOAT
CBinary
CClass
CDexFile
CHash
CHeader
Celement_t
CMethod
CParser	Class to parse an OAT file to produce an OAT::Binary
Nobjc	Namespace related to ObjC metadata
CCategory	This class represents an Objective-C category (e.g. @interface NSString (MyAdditions))
CIterator
CClass	This class represents an Objective-C class (@interface)
CIterator
CDeclOpt	This structure wraps options to tweak the generated output of functions like LIEF::objc::Metadata::to_decl
CIVar	This class represents an instance variable (ivar)
CIterator
CMetadata	This class is the main interface to inspect Objective-C metadata
CMethod	This class represents an Objective-C Method
CIterator
CProperty	This class represents a @property in Objective-C
CIterator
CProtocol	This class represents an Objective-C @protocol
CIterator
Npdb
Ntypes
CArray	This class represents a LF_ARRAY PDB type
CAttribute	This class represents an attribute (LF_MEMBER) in an aggregate (class, struct, union, ...)
CIterator
CBitField	This class represents a LF_BITFIELD PDB type
CClass	Interface for the LF_CLASS PDB type
CClassLike	This class abstracts the following PDB types: LF_STRUCTURE, LF_INTERFACE, LF_CLASS or LF_UNION
CEnum	This class represents a LF_ENUM PDB type
CEntry	This class represents an enum entry which is essentially composed of a name and its value (integer)
CFunction	This class represents a LF_PROCEDURE PDB type
CInterface	Interface for the LF_INTERFACE PDB type
CMethod	This class represents a Method (LF_ONEMETHOD) that can be defined in a ClassLike PDB type (Class, Structure, Union, Interface)
CIterator
CModifier	This class represents a LF_MODIFIER PDB type
CPointer	This class represents a LF_POINTER PDB type
CSimple	This class represents primitive types (int, float, ...) which are also named simple types in the PDB format
CStructure	Interface for the LF_STRUCTURE PDB type
CUnion	This class represents a LF_UNION PDB type
CBuildMetadata	This class wraps build metadata represented by the codeview symbols: S_COMPILE3, S_COMPILE2, S_BUILDINFO, S_ENVBLOCK
Cversion_t	This structure represents a version for the backend or the frontend
Cbuild_info_t	This structure represents information wrapped by the S_BUILDINFO symbol
CCompilationUnit	This class represents a CompilationUnit (or Module) in a PDB file
CIterator
CDebugInfo	This class provides an interface for PDB files. One can instantiate this class using LIEF::pdb::load() or LIEF::pdb::DebugInfo::from_file
CFunction
CIterator
CPublicSymbol	This class provides general information (RVA, name) about a symbol from the PDB's public symbol stream (or Public symbol hash stream)
CIterator
CType	This is the base class for any PDB type
CIterator
NPE	Namespace related to the LIEF's PE module
Ndetails
Carm64_epilog_scope_t
Carm64_packed_t
Carm64_unpacked_t
Cunwind_code_t
Nunwind_aarch64	This namespace wraps code related to PE-ARM64 unwinding code
CPackedFunction	This class represents a packed AArch64 exception entry
CUnpackedFunction	This class represents an unpacked AArch64 exception entry
Cepilog_scope_t	This structure describes an epilog scope
Nunwind_x64	This namespace wraps code related to PE-x64 unwinding code
CCode	Base class for all unwind operations
CAlloc	This class represents a stack-allocation operation (UNWIND_OPCODES::ALLOC_SMALL or UNWIND_OPCODES::ALLOC_LARGE)
CPushNonVol	Push a nonvolatile integer register, decrementing RSP by 8
CPushMachFrame	Push a machine frame
CSetFPReg	Establish the frame pointer register by setting the register to some offset of the current RSP
CSaveNonVolatile	Save a nonvolatile integer register on the stack using a MOV instead of a PUSH
CSaveXMM128
CEpilog	Describes the function's epilog
CSpare
CAttribute	Interface over PKCS #7 attribute
CBinary	Class which represents a PE binary This is the main interface to manage and modify a PE executable
CBuilder	Class that is used to rebuild a raw PE binary from a PE::Binary object
Cconfig_t	This structure is used to configure the build operation
CCHPEMetadata	Base class for any Compiled Hybrid Portable Executable (CHPE) metadata
CCHPEMetadataARM64	This class represents ARM64-specific metadata used in CHPE (Compatible Hybrid PE) binaries, particularly for hybrid architectures like ARM64EC and ARM64X
Crange_entry_t	Structure that describes architecture-specific ranges
Credirection_entry_t	Structure that describes a redirection
Ccode_range_entry_point_t	Mirror of IMAGE_ARM64EC_CODE_RANGE_ENTRY_POINT: Represents a mapping between code range and its entry point
CCHPEMetadataX86	This class represents hybrid metadata for X86
CCodeIntegrity
CCodeView	Interface for the (generic) Debug CodeView (IMAGE_DEBUG_TYPE_CODEVIEW)
CCodeViewPDB	CodeView PDB specialization
CContentInfo
CContent
CContentType	Interface over the structure described by the OID 1.2.840.113549.1.9.3 (PKCS #9)
CDataDirectory	Class that represents a PE data directory entry
CDebug	This class represents a generic entry in the debug data directory. For known types, this class is extended to provide a dedicated API (see: CodeView)
CDelayImport	Class that represents a PE delayed import
CDelayImportEntry	Class that represents an entry (i.e. an import) in the delay import table (DelayImport)
CDosHeader	Class which represents the DosHeader, the first structure present at the beginning of a PE file
CDynamicFixup	This is the base class for any fixups located in DynamicRelocation
CDynamicFixupARM64Kernel	This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_ARM64_KERNEL_IMPORT_CALL_TRANSFER (8)
Creloc_entry_t	Mirror IMAGE_IMPORT_CONTROL_TRANSFER_ARM64_RELOCATION
CDynamicFixupARM64X	This class represents IMAGE_DYNAMIC_RELOCATION_ARM64X
Creloc_entry_t
CDynamicFixupControlTransfer	This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_GUARD_IMPORT_CONTROL_TRANSFER (3)
Creloc_entry_t	Mirror IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION
CDynamicFixupGeneric	This class represents a generic entry where fixups are regular relocations (LIEF::PE::Relocation)
CDynamicFixupUnknown	This class represents a special dynamic relocation where the format of the fixups is not supported by LIEF
CDynamicRelocation	This is the base class for any IMAGE_DYNAMIC_RELOCATION32, IMAGE_DYNAMIC_RELOCATION32_V2, IMAGE_DYNAMIC_RELOCATION64, IMAGE_DYNAMIC_RELOCATION64_V2 dynamic relocations
CDynamicRelocationV1	This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION32 or IMAGE_DYNAMIC_RELOCATION64)
CDynamicRelocationV2	This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION64_V2 or IMAGE_DYNAMIC_RELOCATION32_V2)
CEnclaveConfiguration	This class represents the enclave configuration
CEnclaveImport	Defines an entry in the array of images that an enclave can import
CExceptionInfo	This class is the base class for any exception or runtime function entry
CExDllCharacteristics	This class represents the IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS debug entry
CExport	Class which represents a PE Export
CExportEntry	Class which represents a PE Export entry (cf. PE::Export)
Cforward_information_t
CFactory	This factory is used to create PE from scratch
CFPO	This class represents the IMAGE_DEBUG_TYPE_FPO debug entry
Centry_t	Represents the stack frame layout for a x86 function when frame pointer omission (FPO) optimization is used
CFunctionOverride	This class represents IMAGE_DYNAMIC_RELOCATION_FUNCTION_OVERRIDE
Cimage_bdd_dynamic_relocation_t	Mirror IMAGE_BDD_DYNAMIC_RELOCATION
Cimage_bdd_info_t	Mirror IMAGE_BDD_INFO
CFunctionOverrideInfo
CGenericContent
CGenericType	Interface over an attribute for which the internal structure is not supported by LIEF
CHash	Class which implements a visitor to compute a deterministic hash for LIEF PE objects
CHeader	Class that represents the PE header (which follows the DosHeader)
CImport	Class that represents a PE import
CImportEntry	Class that represents an entry (i.e. an import) in the import table (Import)
CLoadConfiguration	This class represents the load configuration data associated with the IMAGE_LOAD_CONFIG_DIRECTORY
Cguard_function_t
CMsCounterSign	This class exposes the MS Counter Signature attribute
CMsManifestBinaryID	Interface over the structure described by the OID 1.3.6.1.4.1.311.10.3.28 (szOID_PLATFORM_MANIFEST_BINARY_ID)
CMsSpcNestedSignature	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.4.1
CMsSpcStatementType	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.11
COptionalHeader	Class which represents the PE OptionalHeader structure
CParser	Main interface to parse PE binaries. In particular, the static Parser::parse functions should be used to get a LIEF::PE::Binary instance
CParserConfig	This structure is used to configure the behavior of the PE Parser (PE::Parser)
CPDBChecksum	This class represents the PDB Checksum debug entry which is essentially an array of bytes representing the checksum of the PDB content
CPKCS9AtSequenceNumber	Interface over the structure described by the OID 1.2.840.113549.1.9.25.4 (PKCS #9)
CPKCS9CounterSignature	Interface over the structure described by the OID 1.2.840.113549.1.9.6 (PKCS #9)
CPKCS9MessageDigest	Interface over the structure described by the OID 1.2.840.113549.1.9.4 (PKCS #9)
CPKCS9SigningTime	Interface over the structure described by the OID 1.2.840.113549.1.9.5 (PKCS #9)
CPKCS9TSTInfo	Interface over the structure described by the OID 1.2.840.113549.1.9.16.1.4 (PKCS #9)
CPogo	This class represents a Profile Guided Optimization entry from the debug directory (IMAGE_DEBUG_TYPE_POGO)
CPogoEntry
CRelocation	Class which represents the Base Relocation Block We usually find this structure in the .reloc section
CRelocationEntry	Class which represents an entry of the PE relocation table
CRepro	This class represents a reproducible build entry from the debug directory. (IMAGE_DEBUG_TYPE_REPRO). This entry is usually generated with the undocumented /Brepro linker flag
CResourceAccelerator
CResourceData	Class which represents a Data Node in the PE resources tree
CResourceDialog	This class is the base class for either a regular (legacy) Dialog or an extended Dialog. These different kinds of Dialogs are documented by MS at the following addresses:
Cordinal_or_str_t	This structure wraps either an ordinal value (uint16_t) or a string. The ordinal value should refer to an existing resource id in the resource tree
CItem	This class represents an element of the dialog. It can be for instance, a button, or a caption
CResourceDialogExtended	Implementation for the new extended dialogbox format
CItem	This class represents a DLGTEMPLATEEX item (DLGITEMTEMPLATEEX)
Cfont_t	Font information for the font to use for the text in the dialog box and its controls
CResourceDialogRegular	Implementation for a regular/legacy dialog box
CItem	This class represents a DLGTEMPLATE item: DLGITEMTEMPLATE
Cfont_t	This structure represents additional font information that might be embedded at the end of the DLGTEMPLATE stream
CResourceDirectory
CResourceIcon
CResourceNode	Class which represents a Node in the resource tree
CResourcesManager	The Resource Manager provides an enhanced API to manipulate the resource tree
Cstring_entry_t	This structure represent an entry in the string table (RT_STRING)
CResourceStringFileInfo	Representation of the StringFileInfo structure
CResourceStringTable	This class represents the StringTable structure. This structure can be seen as a dictionary of key-value pairs with keys and values defined as UTF-16 strings
Centry_t	An entry in this table which is composed of an UTF-16 key and an UTF-16 value
CResourceVar	This class represents an element of the ResourceVarFileInfo structure It typically contains a list of language and code page identifier pairs that the version of the application or DLL supports
CResourceVarFileInfo	Representation of the VarFileInfo structure
CResourceVersion	Representation of the data associated with the RT_VERSION entry
Cfixed_file_info_t	This structure represents the VS_FIXEDFILEINFO structure defined in verrsrc.h
CRichEntry	Class which represents an entry associated to the RichHeader
CRichHeader	Class which represents the not-so-documented rich header
CRsaInfo	Object that wraps a RSA key
CRuntimeFunctionAArch64	This class represents an entry in the exception table (.pdata section) for the AArch64 architecture
CRuntimeFunctionX64	This class represents an entry in the exception table (.pdata section) for the x86-64 architecture
Cunwind_info_t	This structure represents the UNWIND_INFO which records the effects a function has on the stack pointer, and where the nonvolatile registers are saved on the stack
CSection	Class which represents a PE section
CSignature	Main interface for the PKCS #7 signature scheme
CSignatureParser
CSignerInfo
CSigningCertificateV2	SigningCertificateV2 ::= SEQUENCE { certs SEQUENCE OF ESSCertIDv2, policies SEQUENCE OF PolicyInformation OPTIONAL }
CSpcIndirectData
CSpcRelaxedPeMarkerCheck
CSpcSpOpusInfo	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.12
CTLS	Class which represents the PE Thread Local Storage
CVCFeature	This class represents the IMAGE_DEBUG_TYPE_VC_FEATURE debug entry
CVolatileMetadata	This class represents volatile metadata which can be enabled at link time with /volatileMetadata
Crange_t
Cx509	Interface over a x509 certificate
Nruntime
Nandroid
CHost	This class exposes Android-specific host information
CModule	This class exposes Android-specific API for a module
CProcess	This class exposes Android-specific API for the current process
CProperty	This class represents an Android property such as ro.boot.hardware
NLinux
CHost	This class exposes Linux-specific host information
CModule	This class exposes a Linux-specific API for a module
CProcess	This class exposes Linux-specific API for the current process
Nosx
CHost
Cversion_t
CModule	This class exposes an OSX-specific API for a module
CProcess	This class exposes OSX-specific API for the current process
Nwindows
CHost	This class exposes Windows-specific host information
Cversion_t
Cinjection_context_t	Describes how to spawn a new process and inject a library into it
CLdrDataTableEntry	This class exposes a user-friendly interface over a LDR_DATA_TABLE_ENTRY, the structure used by the Windows loader to describe a module loaded in the current process
CIterator	Bidirectional iterator over the LdrDataTableEntry mirroring the doubly-linked list used by Windows
CModule	This class exposes a Windows-specific API for a module
CPEB	This class exposes a user-friendly interface over the Process Environment Block (PEB) of the current process
CProcess	This class exposes Windows-specific API for the current process
CHost	This class represents the current host
CMemory	This class exposes API to access and manage memory
CChunk	Represents a contiguous chunk of memory allocated or inspected by the runtime
CScopedPermissions	RAII interface to change the permission within a determined scope
CModule	This class represents an in-memory module which can be an executable or a library
CIterator
CProcess	This structure represents the current process and provides functions to query process-level information
CEnvVars	This structure wraps environment variables
NVDEX
CFile	Main class for the VDEX module which represents a VDEX file
CHash
CHeader
CParser	Class which parses a VDEX file and transforms it into a VDEX::File object
CAbstractHash
CASN1Reader
CBinary	Generic interface representing a binary executable
CBinaryStream	Class that is used to a read stream of data from different sources
Cdebug_location_t	This structure holds a debug location (source filename & line)
CDebugInfo	This class provides a generic interface for accessing debug information from different formats such as DWARF and PDB
CDeclOpt	Configuration options for generated code from debug info
CDumpStream	This stream interface provides facilities to parse a dumped binary
CFileStream	Stream interface over a std::ifstream
Cfilter_iterator	Iterator which returns a ref on container's values given predicates
CFunction	Class that represents a function in the binary
CHash
CHeader
Citerator_adaptor_base	CRTP base class for adapting an iterator to a different type
Citerator_facade_base	CRTP base class which implements the entire standard iterator facade in terms of a minimal subset of the interface
Citerator_range
CReferenceProxy
Clief_version_t
CMemoryStream
CObject
Cok_error_t	Opaque structure that is used by LIEF to avoid writing result<void> f(...). Instead, it makes the output explicit such as:
Cok_t	Opaque structure used by ok_error_t
Coptional
CParser	Main interface to parse an executable regardless of its format
Cpointee_iterator	An iterator type that allows iterating over the pointees via some other iterator
Cpointer_iterator
Crange_t
Cref_iterator	Iterator which returns reference on container's values
CRelocation	Class which represents an abstracted Relocation
Cresult	Wrapper that contains an Object (T) or an error
CScopedStream
CScopeOStream
CSection	Class which represents an abstracted section
CSpanStream
CSymbol	This class represents a symbol in an executable format
CToggleEndianness
Cvector_iostream
CVectorStream
CVisitor
CElf_Binary_t
CElf_DynamicEntry_Array_t
CElf_DynamicEntry_Auxiliary_t
CElf_DynamicEntry_Filter_t
CElf_DynamicEntry_Flags_t
CElf_DynamicEntry_Library_t
CElf_DynamicEntry_Rpath_t
CElf_DynamicEntry_RunPath_t
CElf_DynamicEntry_SharedObject_t
CElf_DynamicEntry_t
CElf_Header_t
CElf_Section_t
CElf_Segment_t
CElf_Symbol_t
CEnableBitMaskOperators
CEnableBitMaskOperators< LIEF::ELF::Section::FLAGS >
CEnableBitMaskOperators< LIEF::ELF::Segment::FLAGS >
CEnableBitMaskOperators< LIEF::Function::FLAGS >
CEnableBitMaskOperators< LIEF::Header::MODES >
CEnableBitMaskOperators< LIEF::MachO::ExportInfo::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::Header::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::Section::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::VM_PROTECTIONS >
CEnableBitMaskOperators< LIEF::PE::ExDllCharacteristics::CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::Header::CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::OptionalHeader::DLL_CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::ResourceAccelerator::FLAGS >
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::CONTROL_STYLES >
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::DIALOG_STYLES >
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_EXTENDED_STYLES >
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_STYLES >
CEnableBitMaskOperators< LIEF::PE::RuntimeFunctionX64::UNWIND_FLAGS >
CEnableBitMaskOperators< LIEF::PE::Section::CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_CHECKS >
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_FLAGS >
CEnableBitMaskOperators< LIEF::PE::x509::VERIFICATION_FLAGS >
CMacho_Binary_t	LIEF::MachO::Binary C Handler
CMacho_Command_t
CMacho_Header_t
CMacho_Section_t
CMacho_Segment_t
CMacho_Symbol_t
CPe_Binary_t	LIEF::PE::Binary C Handler
CPe_DataDirectory_t
CPe_DosHeader_t
CPe_Header_t
CPe_Import_t
CPe_ImportEntry_t
CPe_OptionalHeader_t
CPe_Section_t