+
+
+
+
+
+
|
+ binlex
+
+ |
+
| ▼Nbinlex | Binlex namespace |
| CArgs | |
| CCommon | |
| CDecompiler | |
| ▼CDecompilerREV | |
| CSection | |
| CElf | |
| CIMAGE_DATA_DIRECTORY | |
| CIMAGE_DOS_HEADER | |
| CIMAGE_EXPORT_DIRECTORY | |
| CIMAGE_FILE_HEADER | |
| CIMAGE_OPTIONAL_HEADER | |
| CIMAGE_OPTIONAL_HEADER_32 | |
| CIMAGE_OPTIONAL_HEADER_64 | |
| CIMAGE_ROM_OPTIONAL_HEADER | |
| CIMAGE_SECTION_HEADER | |
| CIMAGE_TLS_DIRECTORY32 | |
| CIMAGE_TLS_DIRECTORY64 | |
| CPe | |
| CRaw |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Args, including all inherited members.
+| Args() (defined in binlex::Args) | binlex::Args | |
| check_mode(char *mode) (defined in binlex::Args) | binlex::Args | |
| help (defined in binlex::Args) | binlex::Args | |
| input (defined in binlex::Args) | binlex::Args | |
| io_type (defined in binlex::Args) | binlex::Args | |
| is_dir(const char *path) (defined in binlex::Args) | binlex::Args | |
| is_file(const char *path) (defined in binlex::Args) | binlex::Args | |
| list_modes (defined in binlex::Args) | binlex::Args | |
| mode (defined in binlex::Args) | binlex::Args | |
| modes (defined in binlex::Args) | binlex::Args | |
| options (defined in binlex::Args) | binlex::Args | |
| output (defined in binlex::Args) | binlex::Args | |
| parse(int argc, char **argv) (defined in binlex::Args) | binlex::Args | |
| pretty (defined in binlex::Args) | binlex::Args | |
| print_help() (defined in binlex::Args) | binlex::Args | |
| set_io_type(char *input) (defined in binlex::Args) | binlex::Args | |
| SetDefault() (defined in binlex::Args) | binlex::Args | |
| threads (defined in binlex::Args) | binlex::Args | |
| version (defined in binlex::Args) | binlex::Args | |
| ~Args() (defined in binlex::Args) | binlex::Args |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Common, including all inherited members.
+| GetByteSize(string s) | binlex::Common | |
| Hexdump(const char *desc, const void *addr, const int len) | binlex::Common | |
| HexdumpBE(const void *data, size_t size) | binlex::Common | |
| RemoveSpaces(string s) | binlex::Common | |
| RemoveWildcards(string trait) | binlex::Common | |
| SHA256(const char *trait) | binlex::Common | |
| TraitToChar(string trait) | binlex::Common | |
| TrimRight(const std::string &s) | binlex::Common | |
| WildcardTrait(string trait, string bytes) | binlex::Common |
1.8.17 |
+ binlex
+
+ |
+
+Public Member Functions | |
| string | SHA256 (const char *trait) |
| vector< char > | TraitToChar (string trait) |
| string | RemoveWildcards (string trait) |
| uint | GetByteSize (string s) |
| string | RemoveSpaces (string s) |
| string | WildcardTrait (string trait, string bytes) |
| string | TrimRight (const std::string &s) |
| string | HexdumpBE (const void *data, size_t size) |
| void | Hexdump (const char *desc, const void *addr, const int len) |
| uint binlex::Common::GetByteSize | +( | +string | +s | ) | ++ |
This method gets the size in bytes of a trait string (includes wildcards).
| trait | input trait string. |
| void binlex::Common::Hexdump | +( | +const char * | +desc, | +
| + | + | const void * | +addr, | +
| + | + | const int | +len | +
| + | ) | ++ |
This method prints hexdump to stdout.
| desc | A description of the data. |
| data | A pointer to the data |
| size | The size of the data to collect |
| string binlex::Common::HexdumpBE | +( | +const void * | +data, | +
| + | + | size_t | +size | +
| + | ) | ++ |
This method creates a byte string based on a pointer and its size.
| data | A pointer to the data |
| size | The size of the data to collect |
| string binlex::Common::RemoveSpaces | +( | +string | +s | ) | ++ |
This method removes spaces from a string.
| s | input string |
| string binlex::Common::RemoveWildcards | +( | +string | +trait | ) | ++ |
This method removes wildcards from a trait string.
| trait | input trait string. |
| string binlex::Common::SHA256 | +( | +const char * | +trait | ) | ++ |
This class contains methods common to binlex. This method takes an input string and returns its sha256 hash.
| trait | input string. |
| vector<char> binlex::Common::TraitToChar | +( | +string | +trait | ) | ++ |
This method takes an input trait string and returns a char vector of bytes (ignores wildcards).
| trait | input string. |
| string binlex::Common::TrimRight | +( | +const std::string & | +s | ) | ++ |
This method removes whitespace on the right.
| s | input string |
| string binlex::Common::WildcardTrait | +( | +string | +trait, | +
| + | + | string | +bytes | +
| + | ) | ++ |
This method wildcards byte strings for traits.
| trait | input trait string |
| bytes | byte string to wildcard |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Decompiler, including all inherited members.
+| Decompiler() (defined in binlex::Decompiler) | binlex::Decompiler | |
| handle (defined in binlex::Decompiler) | binlex::Decompiler | |
| pc (defined in binlex::Decompiler) | binlex::Decompiler | |
| PrintTraits(bool pretty) (defined in binlex::Decompiler) | binlex::Decompiler | |
| sections (defined in binlex::Decompiler) | binlex::Decompiler | |
| Setup(cs_arch arch, cs_mode mode) (defined in binlex::Decompiler) | binlex::Decompiler | |
| status (defined in binlex::Decompiler) | binlex::Decompiler | |
| WriteTraits(char *file_path, bool pretty) (defined in binlex::Decompiler) | binlex::Decompiler | |
| x86_64(void *data, size_t data_size, size_t data_offset, uint index) (defined in binlex::Decompiler) | binlex::Decompiler | |
| ~Decompiler() (defined in binlex::Decompiler) | binlex::Decompiler |
1.8.17 |
+ binlex
+
+ |
+
+Public Attributes | |
| +csh | handle |
| +cs_err | status |
| +uint64_t | pc |
| +struct Section | sections [DECOMPILER_MAX_SECTIONS] |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::DecompilerREV, including all inherited members.
+| AddEdges(uint count, uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| ClearBlock(uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| ClearTrait(uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| CollectBlockTrait(uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| CollectFunctionTrait(uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| common (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| Decompile(void *data, size_t data_size, size_t data_offset, uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| DecompilerREV() (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| PrintTraits(bool pretty) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| sections (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| Seek(uint offset, uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| Setup(cs_arch arch, cs_mode mode, uint index) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| WriteTraits(char *file_path, bool pretty) (defined in binlex::DecompilerREV) | binlex::DecompilerREV | |
| ~DecompilerREV() (defined in binlex::DecompilerREV) | binlex::DecompilerREV |
1.8.17 |
+ binlex
+
+ |
+
+Classes | |
| struct | Section |
+Public Attributes | |
| +struct Section | sections [DECOMPILER_REV_MAX_SECTIONS] |
| +Common | common |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Elf, including all inherited members.
+| Elf() (defined in binlex::Elf) | binlex::Elf | |
| fd (defined in binlex::Elf) | binlex::Elf | |
| header (defined in binlex::Elf) | binlex::Elf | |
| magic (defined in binlex::Elf) | binlex::Elf | |
| mode (defined in binlex::Elf) | binlex::Elf | |
| ReadFile(char *file_path) (defined in binlex::Elf) | binlex::Elf | |
| sections (defined in binlex::Elf) | binlex::Elf | |
| Setup(int input_mode) (defined in binlex::Elf) | binlex::Elf | |
| sh_str (defined in binlex::Elf) | binlex::Elf | |
| sh_table (defined in binlex::Elf) | binlex::Elf | |
| ~Elf() (defined in binlex::Elf) | binlex::Elf |
1.8.17 |
+ binlex
+
+ |
+
+Public Member Functions | |
| +bool | Setup (int input_mode) |
| +bool | ReadFile (char *file_path) |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Pe, including all inherited members.
+| coff_header (defined in binlex::Pe) | binlex::Pe | |
| dos_header (defined in binlex::Pe) | binlex::Pe | |
| fd (defined in binlex::Pe) | binlex::Pe | |
| magic_mz (defined in binlex::Pe) | binlex::Pe | |
| magic_pe (defined in binlex::Pe) | binlex::Pe | |
| mode (defined in binlex::Pe) | binlex::Pe | |
| optional_header_32 (defined in binlex::Pe) | binlex::Pe | |
| optional_header_64 (defined in binlex::Pe) | binlex::Pe | |
| Pe() (defined in binlex::Pe) | binlex::Pe | |
| pe_header_ptr (defined in binlex::Pe) | binlex::Pe | |
| ReadFile(char *file_path) (defined in binlex::Pe) | binlex::Pe | |
| section_header (defined in binlex::Pe) | binlex::Pe | |
| sections (defined in binlex::Pe) | binlex::Pe | |
| Setup(int input_mode) (defined in binlex::Pe) | binlex::Pe | |
| ~Pe() (defined in binlex::Pe) | binlex::Pe |
1.8.17 |
+ binlex
+
+ |
+
+Public Member Functions | |
| +bool | Setup (int input_mode) |
| +bool | ReadFile (char *file_path) |
+Public Attributes | |
| +char | magic_mz [2] = {0x5a, 0x4d} |
| +char | magic_pe [4] = {0x00, 0x00, 0x45, 0x50} |
| +FILE * | fd = NULL |
| +PIMAGE_DOS_HEADER | dos_header = NULL |
| +PIMAGE_COFF_HEADER | coff_header = NULL |
| +uint32_t | pe_header_ptr = 0 |
| +PIMAGE_OPTIONAL_HEADER_32 | optional_header_32 = NULL |
| +PIMAGE_OPTIONAL_HEADER_64 | optional_header_64 = NULL |
| +PIMAGE_SECTION_HEADER | section_header = NULL |
| +int | mode = PE_MODE_UNSET |
| +struct Section | sections [PE_MAX_SECTIONS] |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::Raw, including all inherited members.
+| Raw() (defined in binlex::Raw) | binlex::Raw | |
| ReadFile(char *file_path, int section_index) (defined in binlex::Raw) | binlex::Raw | |
| sections (defined in binlex::Raw) | binlex::Raw | |
| ~Raw() (defined in binlex::Raw) | binlex::Raw |
1.8.17 |
+ binlex
+
+ |
+
+Public Member Functions | |
| +bool | ReadFile (char *file_path, int section_index) |
+Public Attributes | |
| +struct Section | sections [RAW_MAX_SECTIONS] |
1.8.17 |
+ binlex
+
+ |
+
|
+DecompilerREV (binlex) | +IMAGE_DOS_HEADER (binlex) | +IMAGE_SECTION_HEADER (binlex) | +
|
+||
|
+IMAGE_EXPORT_DIRECTORY (binlex) | +IMAGE_TLS_DIRECTORY32 (binlex) | +||||
| Args (binlex) | +IMAGE_FILE_HEADER (binlex) | +IMAGE_TLS_DIRECTORY64 (binlex) | +DecompilerREV::Section (binlex) | +|||
|
+Elf (binlex) | +IMAGE_OPTIONAL_HEADER (binlex) | +
|
+|||
|
+IMAGE_OPTIONAL_HEADER_32 (binlex) | +|||||
| Common (binlex) | +IMAGE_OPTIONAL_HEADER_64 (binlex) | +Pe (binlex) | +||||
|
+IMAGE_DATA_DIRECTORY (binlex) | +IMAGE_ROM_OPTIONAL_HEADER (binlex) | +
|
+|||
| Decompiler (binlex) | +Raw (binlex) | +|||||
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
| ▼ include | |
| args.h | |
| blelf.h | |
| cil.h | |
| common.h | |
| decompiler.h | |
| decompiler_rev.h | |
| jvm.h | |
| pe.h | |
| raw.h |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
The purpose of binlex is to extract basic blocks and functions as traits from binaries for malware research, hunting and detection.
Most projects attempting this use Python to generate traits, but it is very slow.
+The design philophy behind binlex is it to keep it simple and extensable.
The simple command-line interface allows malware researchers and analysts to hunt traits across hundreds or thousands of potentially similar malware saving time and money in production environments.
+While the C++ API allows developers to get creative with their own detection solutions.
+
Get slides here.
+From Source:
+Binary Release: See the releases page.
NOTE:
tests/ directory can be extracted using the password infectedCurrently Supported Modes
+elf:x86elf:x86_64pe:x86pe:x86_64raw:x86raw:x86_64raw:cil (experimental)NOTE: The raw formats can be used on shellcode
If you are hunting using binlex you can use jq to your advantage for advanced searches.
Other queries you can do:
If you output just traits you want to stdout you can do build a yara signature on the fly with the included tool blyara:
You can also use the switch --pretty to output json to identify more properies to query.
If you have terabytes of executable files, we can leverage the power of parallel to generate traits for us.
It also allows you to name your type of dataset, i.e. goodware/malware/riskware/pua etc...
+With binlex it is up to you to remove goodware traits from your extracted traits.
There have been many questions about removing "library code", there is a make target shown below to help you with this.
+With binlex the power is in your hands, "With great power comes great responsibility", it is up to you!
Plugins:
+There has been some interest in making IDA, Ghidra and Cutter plugins for binlex.
This is something that will be started soon.
+This README.md will be updated when they are ready to use.
General Usage Information:
+Binlex is designed to do one thing and one thing only, extract genetic traits from executable code in files. This means it is up to you "the researcher" / "the data scientist" to determine which traits are good and which traits are bad. To accomplish this, you need to use your own fitness function. I encourage you to read about genetic programming to gain a better understanding of this in practice. Perhaps watching this introductory video will help your understanding.
+Again, it's up to you to implement your own algorithms for detection based on the genetic traits you extract.
+Traits will contain binary code represented in hexadecimal form and will use ?? as wild cards for memory operands or other operands subject to change.
They will also contain additional properties about the trait including its offset, edges, blocks, cyclomatic_complexity, average_instruction_per_block, bytes, trait, trait_sha256, bytes_sha256, trait_entropy, bytes_entropy, type, size, and instructions.
You can access the C++ API Documentation and everything else by building the documents using doxygen.
The documents will be available at build/docs/html/index.html.
It couldn't be any easier to leverage binlex and its C++ API to build your own applications.
See example code below:
+We hope this encourages people to build their own detection solutions based on binary genetic traits.
+jq to improve your searchesTraits will be compared amongst their common malware family, any traits not common to all samples will be discarded.
+Once completed, all remaining traits will be compared to traits from a goodware set, any traits that match the goodware set will be discarded.
+To further differ the traits from other malware families, the remaining population will be compared to other malware families, any that match will be discarded.
+The remaining population of traits will be unique to the malware family tested and not legitimate binaries or other malware families.
+This fitness model allows for accurate classification of the tested malware family.
+raw:jvm, java:jvmpe:cil and raw:cilmacho:x86_64, macho:x86If you wish to contribute to Binlex DM me on Twitter https://twitter.com/c3rb3ru5d3d53c.
+Currently looking for help on:
1.8.17 |
+ binlex
+
+ |
+
1.8.17 
|
+ binlex
+
+ |
+
the binlex namespace +More...
++Classes | |
| class | Args |
| class | Common |
| class | Decompiler |
| class | DecompilerREV |
| class | Elf |
| struct | IMAGE_DATA_DIRECTORY |
| struct | IMAGE_DOS_HEADER |
| struct | IMAGE_EXPORT_DIRECTORY |
| struct | IMAGE_FILE_HEADER |
| struct | IMAGE_OPTIONAL_HEADER |
| struct | IMAGE_OPTIONAL_HEADER_32 |
| struct | IMAGE_OPTIONAL_HEADER_64 |
| struct | IMAGE_ROM_OPTIONAL_HEADER |
| struct | IMAGE_SECTION_HEADER |
| struct | IMAGE_TLS_DIRECTORY32 |
| struct | IMAGE_TLS_DIRECTORY64 |
| class | Pe |
| class | Raw |
+Typedefs | |
| +typedef struct binlex::IMAGE_EXPORT_DIRECTORY * | PIMAGE_EXPORT_DIRECTORY |
| +typedef struct binlex::IMAGE_TLS_DIRECTORY32 * | PIMAGE_TLS_DIRECTORY32 |
| +typedef struct binlex::IMAGE_TLS_DIRECTORY64 * | PIMAGE_TLS_DIRECTORY64 |
| +typedef struct binlex::IMAGE_DATA_DIRECTORY * | PIMAGE_DATA_DIRECTORY |
| +typedef struct binlex::IMAGE_FILE_HEADER | IMAGE_COFF_HEADER |
| +typedef struct binlex::IMAGE_FILE_HEADER * | PIMAGE_FILE_HEADER |
| +typedef struct binlex::IMAGE_FILE_HEADER * | PIMAGE_COFF_HEADER |
| +typedef struct binlex::IMAGE_DOS_HEADER * | PIMAGE_DOS_HEADER |
| +typedef struct binlex::IMAGE_ROM_OPTIONAL_HEADER * | PIMAGE_ROM_OPTIONAL_HEADER |
| +typedef struct binlex::IMAGE_OPTIONAL_HEADER_32 * | PIMAGE_OPTIONAL_HEADER_32 |
| +typedef struct binlex::IMAGE_OPTIONAL_HEADER_64 * | PIMAGE_OPTIONAL_HEADER_64 |
| +typedef struct binlex::IMAGE_OPTIONAL_HEADER * | PIMAGE_OPTIONAL_HEADER |
| +typedef struct binlex::IMAGE_SECTION_HEADER * | PIMAGE_SECTION_HEADER |
the binlex namespace
+ 1.8.17 |
+ binlex
+
+ |
+
| Nbinlex | Binlex namespace |
1.8.17 
');
+}
+
+function showSyncOn(n,relpath)
+{
+ n.html('
');
+}
+
+function toggleSyncButton(relpath)
+{
+ var navSync = $('#nav-sync');
+ if (navSync.hasClass('sync')) {
+ navSync.removeClass('sync');
+ showSyncOff(navSync,relpath);
+ storeLink(stripPath2(pathName())+hashUrl());
+ } else {
+ navSync.addClass('sync');
+ showSyncOn(navSync,relpath);
+ deleteLink();
+ }
+}
+
+var loadTriggered = false;
+var readyTriggered = false;
+var loadObject,loadToRoot,loadUrl,loadRelPath;
+
+$(window).on('load',function(){
+ if (readyTriggered) { // ready first
+ navTo(loadObject,loadToRoot,loadUrl,loadRelPath);
+ showRoot();
+ }
+ loadTriggered=true;
+});
+
+function initNavTree(toroot,relpath)
+{
+ var o = new Object();
+ o.toroot = toroot;
+ o.node = new Object();
+ o.node.li = document.getElementById("nav-tree-contents");
+ o.node.childrenData = NAVTREE;
+ o.node.children = new Array();
+ o.node.childrenUL = document.createElement("ul");
+ o.node.getChildrenUL = function() { return o.node.childrenUL; };
+ o.node.li.appendChild(o.node.childrenUL);
+ o.node.depth = 0;
+ o.node.relpath = relpath;
+ o.node.expanded = false;
+ o.node.isLast = true;
+ o.node.plus_img = document.createElement("span");
+ o.node.plus_img.className = 'arrow';
+ o.node.plus_img.innerHTML = arrowRight;
+
+ if (localStorageSupported()) {
+ var navSync = $('#nav-sync');
+ if (cachedLink()) {
+ showSyncOff(navSync,relpath);
+ navSync.removeClass('sync');
+ } else {
+ showSyncOn(navSync,relpath);
+ }
+ navSync.click(function(){ toggleSyncButton(relpath); });
+ }
+
+ if (loadTriggered) { // load before ready
+ navTo(o,toroot,hashUrl(),relpath);
+ showRoot();
+ } else { // ready before load
+ loadObject = o;
+ loadToRoot = toroot;
+ loadUrl = hashUrl();
+ loadRelPath = relpath;
+ readyTriggered=true;
+ }
+
+ $(window).bind('hashchange', function(){
+ if (window.location.hash && window.location.hash.length>1){
+ var a;
+ if ($(location).attr('hash')){
+ var clslink=stripPath(pathName())+':'+hashValue();
+ a=$('.item a[class$="'+clslink.replace(/
+
+
+
+
+
+
+|
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::DecompilerREV::Section, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_DATA_DIRECTORY, including all inherited members.
+| Size (defined in binlex::IMAGE_DATA_DIRECTORY) | binlex::IMAGE_DATA_DIRECTORY | |
| VirtualAddress (defined in binlex::IMAGE_DATA_DIRECTORY) | binlex::IMAGE_DATA_DIRECTORY |
1.8.17 |
+ binlex
+
+ |
+
+Public Attributes | |
| +uint32_t | VirtualAddress |
| +uint32_t | Size |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_DOS_HEADER, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_EXPORT_DIRECTORY, including all inherited members.
+| AddressOfFunctions (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| AddressOfNameOrdinals (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| AddressOfNames (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| Base (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| Characteristics (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| MajorVersion (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| MinorVersion (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| Name (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| NumberOfFunctions (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| NumberOfNames (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY | |
| TimeDateStamp (defined in binlex::IMAGE_EXPORT_DIRECTORY) | binlex::IMAGE_EXPORT_DIRECTORY |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_FILE_HEADER, including all inherited members.
+| Characteristics (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| Machine (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| NumberOfSections (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| NumberOfSymbols (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| PointerToSymbolTable (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| Signature (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| SizeOfOptionalHeader (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER | |
| TimeDateStamp (defined in binlex::IMAGE_FILE_HEADER) | binlex::IMAGE_FILE_HEADER |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_OPTIONAL_HEADER, including all inherited members.
+| _32 (defined in binlex::IMAGE_OPTIONAL_HEADER) | binlex::IMAGE_OPTIONAL_HEADER | |
| _64 (defined in binlex::IMAGE_OPTIONAL_HEADER) | binlex::IMAGE_OPTIONAL_HEADER | |
| length (defined in binlex::IMAGE_OPTIONAL_HEADER) | binlex::IMAGE_OPTIONAL_HEADER | |
| type (defined in binlex::IMAGE_OPTIONAL_HEADER) | binlex::IMAGE_OPTIONAL_HEADER |
1.8.17 |
+ binlex
+
+ |
+
+Public Attributes | |
| +uint16_t | type |
| +size_t | length |
| +IMAGE_OPTIONAL_HEADER_32 * | _32 |
| +IMAGE_OPTIONAL_HEADER_64 * | _64 |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_OPTIONAL_HEADER_32, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
+Public Attributes | |
| +uint16_t | Magic |
| +uint8_t | MajorLinkerVersion |
| +uint8_t | MinorLinkerVersion |
| +uint32_t | SizeOfCode |
| +uint32_t | SizeOfInitializedData |
| +uint32_t | SizeOfUninitializedData |
| +uint32_t | AddressOfEntryPoint |
| +uint32_t | BaseOfCode |
| +uint32_t | BaseOfData |
| +uint32_t | ImageBase |
| +uint32_t | SectionAlignment |
| +uint32_t | FileAlignment |
| +uint16_t | MajorOperatingSystemVersion |
| +uint16_t | MinorOperatingSystemVersion |
| +uint16_t | MajorImageVersion |
| +uint16_t | MinorImageVersion |
| +uint16_t | MajorSubsystemVersion |
| +uint16_t | MinorSubsystemVersion |
| +uint32_t | Reserved1 |
| +uint32_t | SizeOfImage |
| +uint32_t | SizeOfHeaders |
| +uint32_t | CheckSum |
| +uint16_t | Subsystem |
| +uint16_t | DllCharacteristics |
| +uint32_t | SizeOfStackReserve |
| +uint32_t | SizeOfStackCommit |
| +uint32_t | SizeOfHeapReserve |
| +uint32_t | SizeOfHeapCommit |
| +uint32_t | LoaderFlags |
| +uint32_t | NumberOfRvaAndSizes |
| +IMAGE_DATA_DIRECTORY | DataDirectory [PE_MAX_DIRECTORIES] |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_OPTIONAL_HEADER_64, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
+Public Attributes | |
| +uint16_t | Magic |
| +uint8_t | MajorLinkerVersion |
| +uint8_t | MinorLinkerVersion |
| +uint32_t | SizeOfCode |
| +uint32_t | SizeOfInitializedData |
| +uint32_t | SizeOfUninitializedData |
| +uint32_t | AddressOfEntryPoint |
| +uint32_t | BaseOfCode |
| +uint64_t | ImageBase |
| +uint32_t | SectionAlignment |
| +uint32_t | FileAlignment |
| +uint16_t | MajorOperatingSystemVersion |
| +uint16_t | MinorOperatingSystemVersion |
| +uint16_t | MajorImageVersion |
| +uint16_t | MinorImageVersion |
| +uint16_t | MajorSubsystemVersion |
| +uint16_t | MinorSubsystemVersion |
| +uint32_t | Reserved1 |
| +uint32_t | SizeOfImage |
| +uint32_t | SizeOfHeaders |
| +uint32_t | CheckSum |
| +uint16_t | Subsystem |
| +uint16_t | DllCharacteristics |
| +uint64_t | SizeOfStackReserve |
| +uint64_t | SizeOfStackCommit |
| +uint64_t | SizeOfHeapReserve |
| +uint64_t | SizeOfHeapCommit |
| +uint32_t | LoaderFlags |
| +uint32_t | NumberOfRvaAndSizes |
| +IMAGE_DATA_DIRECTORY | DataDirectory [PE_MAX_DIRECTORIES] |
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_ROM_OPTIONAL_HEADER, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_SECTION_HEADER, including all inherited members.
+ 1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_TLS_DIRECTORY32, including all inherited members.
+| AddressOfCallBacks (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 | |
| AddressOfIndex (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 | |
| Characteristics (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 | |
| EndAddressOfRawData (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 | |
| SizeOfZeroFill (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 | |
| StartAddressOfRawData (defined in binlex::IMAGE_TLS_DIRECTORY32) | binlex::IMAGE_TLS_DIRECTORY32 |
1.8.17 |
+ binlex
+
+ |
+
1.8.17 |
+ binlex
+
+ |
+
This is the complete list of members for binlex::IMAGE_TLS_DIRECTORY64, including all inherited members.
+| AddressOfCallBacks (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 | |
| AddressOfIndex (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 | |
| Characteristics (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 | |
| EndAddressOfRawData (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 | |
| SizeOfZeroFill (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 | |
| StartAddressOfRawData (defined in binlex::IMAGE_TLS_DIRECTORY64) | binlex::IMAGE_TLS_DIRECTORY64 |
1.8.17 |
+ binlex
+
+ |
+
1.8.17