You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
255 lines
13 KiB
255 lines
13 KiB
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.9.1"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>VMProfiler: vmp2::v3::file_header Struct Reference</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectlogo"><img alt="Logo" src="icon.png"/></td>
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">VMProfiler
|
|
 <span id="projectnumber">v1.8</span>
|
|
</div>
|
|
<div id="projectbrief">vmprofiler is a c++ library which is used to statically analyze VMProtect 2 polymorphic virtual machines. This project is inherited in vmprofiler-qt, vmprofiler-cli, and vmemu.</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.9.1 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search','.html');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="namespacevmp2.html">vmp2</a></li><li class="navelem"><a class="el" href="namespacevmp2_1_1v3.html">v3</a></li><li class="navelem"><a class="el" href="structvmp2_1_1v3_1_1file__header.html">file_header</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div class="header">
|
|
<div class="summary">
|
|
<a href="#pub-attribs">Public Attributes</a> |
|
|
<a href="structvmp2_1_1v3_1_1file__header-members.html">List of all members</a> </div>
|
|
<div class="headertitle">
|
|
<div class="title">vmp2::v3::file_header Struct Reference</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
|
|
<p><code>#include <<a class="el" href="vmp2_8hpp_source.html">vmp2.hpp</a>></code></p>
|
|
<table class="memberdecls">
|
|
<tr class="heading"><td colspan="2"><h2 class="groupheader"><a name="pub-attribs"></a>
|
|
Public Attributes</h2></td></tr>
|
|
<tr class="memitem:a4d9c6ee3fbb00ded1d3f1952e70d9ab2"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#a4d9c6ee3fbb00ded1d3f1952e70d9ab2">magic</a></td></tr>
|
|
<tr class="separator:a4d9c6ee3fbb00ded1d3f1952e70d9ab2"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:adab57c587431f54d55c160a5895d9dfb"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#adab57c587431f54d55c160a5895d9dfb">epoch_time</a></td></tr>
|
|
<tr class="separator:adab57c587431f54d55c160a5895d9dfb"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:ad5b0868596548490caca7609cbf7a040"><td class="memItemLeft" align="right" valign="top"><a class="el" href="namespacevmp2.html#a144e081c8a268c0bfc9f738f32f19579">version_t</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#ad5b0868596548490caca7609cbf7a040">version</a></td></tr>
|
|
<tr class="separator:ad5b0868596548490caca7609cbf7a040"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:aa3ff84434ca579d5ac5730e991eade61"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#aa3ff84434ca579d5ac5730e991eade61">module_base</a></td></tr>
|
|
<tr class="separator:aa3ff84434ca579d5ac5730e991eade61"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:ab4930fa2c29a3020bafbbb1de5cfe400"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#ab4930fa2c29a3020bafbbb1de5cfe400">image_base</a></td></tr>
|
|
<tr class="separator:ab4930fa2c29a3020bafbbb1de5cfe400"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:aea15e18f812d2d3239f3e466e85c68c4"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#aea15e18f812d2d3239f3e466e85c68c4">vm_entry_rva</a></td></tr>
|
|
<tr class="separator:aea15e18f812d2d3239f3e466e85c68c4"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:a6106a4ebc9e2f7ba730e3aa4106cf787"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#a6106a4ebc9e2f7ba730e3aa4106cf787">module_offset</a></td></tr>
|
|
<tr class="separator:a6106a4ebc9e2f7ba730e3aa4106cf787"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:aa73a51bb4a303d12227420d353bd2db2"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#aa73a51bb4a303d12227420d353bd2db2">module_size</a></td></tr>
|
|
<tr class="separator:aa73a51bb4a303d12227420d353bd2db2"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:a5114dc45569676f5d392832dfee2a46b"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#a5114dc45569676f5d392832dfee2a46b">code_block_offset</a></td></tr>
|
|
<tr class="separator:a5114dc45569676f5d392832dfee2a46b"><td class="memSeparator" colspan="2"> </td></tr>
|
|
<tr class="memitem:a24a59e4770152a60ba08b7e838fec2d4"><td class="memItemLeft" align="right" valign="top"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> </td><td class="memItemRight" valign="bottom"><a class="el" href="structvmp2_1_1v3_1_1file__header.html#a24a59e4770152a60ba08b7e838fec2d4">code_block_count</a></td></tr>
|
|
<tr class="separator:a24a59e4770152a60ba08b7e838fec2d4"><td class="memSeparator" colspan="2"> </td></tr>
|
|
</table>
|
|
<h2 class="groupheader">Member Data Documentation</h2>
|
|
<a id="a24a59e4770152a60ba08b7e838fec2d4"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#a24a59e4770152a60ba08b7e838fec2d4">◆ </a></span>code_block_count</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> vmp2::v3::file_header::code_block_count</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="a5114dc45569676f5d392832dfee2a46b"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#a5114dc45569676f5d392832dfee2a46b">◆ </a></span>code_block_offset</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> vmp2::v3::file_header::code_block_offset</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="adab57c587431f54d55c160a5895d9dfb"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#adab57c587431f54d55c160a5895d9dfb">◆ </a></span>epoch_time</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> vmp2::v3::file_header::epoch_time</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="ab4930fa2c29a3020bafbbb1de5cfe400"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#ab4930fa2c29a3020bafbbb1de5cfe400">◆ </a></span>image_base</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> vmp2::v3::file_header::image_base</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="a4d9c6ee3fbb00ded1d3f1952e70d9ab2"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#a4d9c6ee3fbb00ded1d3f1952e70d9ab2">◆ </a></span>magic</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> vmp2::v3::file_header::magic</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="aa3ff84434ca579d5ac5730e991eade61"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#aa3ff84434ca579d5ac5730e991eade61">◆ </a></span>module_base</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> vmp2::v3::file_header::module_base</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="a6106a4ebc9e2f7ba730e3aa4106cf787"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#a6106a4ebc9e2f7ba730e3aa4106cf787">◆ </a></span>module_offset</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> vmp2::v3::file_header::module_offset</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="aa73a51bb4a303d12227420d353bd2db2"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#aa73a51bb4a303d12227420d353bd2db2">◆ </a></span>module_size</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a5b58b50033aff6031759d9708b5156f2">u32</a> vmp2::v3::file_header::module_size</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="ad5b0868596548490caca7609cbf7a040"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#ad5b0868596548490caca7609cbf7a040">◆ </a></span>version</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="namespacevmp2.html#a144e081c8a268c0bfc9f738f32f19579">version_t</a> vmp2::v3::file_header::version</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<a id="aea15e18f812d2d3239f3e466e85c68c4"></a>
|
|
<h2 class="memtitle"><span class="permalink"><a href="#aea15e18f812d2d3239f3e466e85c68c4">◆ </a></span>vm_entry_rva</h2>
|
|
|
|
<div class="memitem">
|
|
<div class="memproto">
|
|
<table class="memname">
|
|
<tr>
|
|
<td class="memname"><a class="el" href="vmutils_8hpp.html#a4870a1025a59df53c952b95ac2c85bf6">u64</a> vmp2::v3::file_header::vm_entry_rva</td>
|
|
</tr>
|
|
</table>
|
|
</div><div class="memdoc">
|
|
|
|
</div>
|
|
</div>
|
|
<hr/>The documentation for this struct was generated from the following file:<ul>
|
|
<li>D:/vmprofiler-qt/dependencies/vmprofiler/include/<a class="el" href="vmp2_8hpp_source.html">vmp2.hpp</a></li>
|
|
</ul>
|
|
</div><!-- contents -->
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.1
|
|
</small></address>
|
|
</body>
|
|
</html>
|