libPeConv
A library to load, manipulate, dump PE files.
Loading...
Searching...
No Matches
Public Member Functions | Protected Member Functions | Protected Attributes | List of all members
FillImportThunks Class Reference
Inheritance diagram for FillImportThunks:
Inheritance graph
[legend]

Public Member Functions

 FillImportThunks (BYTE *_modulePtr, size_t _moduleSize, t_function_resolver *func_resolver)
 
virtual bool processThunks (LPSTR lib_name, ULONG_PTR origFirstThunkPtr, ULONG_PTR firstThunkPtr)
 
- Public Member Functions inherited from peconv::ImportThunksCallback
 ImportThunksCallback (BYTE *_modulePtr, size_t _moduleSize)
 
virtual bool processThunks (LPSTR libName, ULONG_PTR origFirstThunkPtr, ULONG_PTR firstThunkPtr)=0
 

Protected Member Functions

template<typename T_FIELD , typename T_IMAGE_THUNK_DATA >
bool processThunks_tpl (LPSTR lib_name, T_IMAGE_THUNK_DATA *desc, T_FIELD *call_via, T_FIELD ordinal_flag)
 

Protected Attributes

t_function_resolverfuncResolver
 
- Protected Attributes inherited from peconv::ImportThunksCallback
BYTE * modulePtr
 
size_t moduleSize
 
bool is64b
 

Detailed Description

Definition at line 7 of file imports_loader.cpp.

Constructor & Destructor Documentation

◆ FillImportThunks()

FillImportThunks::FillImportThunks ( BYTE *  _modulePtr,
size_t  _moduleSize,
t_function_resolver func_resolver 
)
inline

Definition at line 10 of file imports_loader.cpp.

Member Function Documentation

◆ processThunks()

virtual bool FillImportThunks::processThunks ( LPSTR  libName,
ULONG_PTR  origFirstThunkPtr,
ULONG_PTR  firstThunkPtr 
)
inlinevirtual

A callback that will be executed by process_import_table when the next imported function was found

Parameters
libName: the pointer to the DLL name
origFirstThunkPtr: the pointer to the Original First Thunk
firstThunkPtr: the pointer to the First Thunk
Returns
: true if processing succeeded, false otherwise

Implements peconv::ImportThunksCallback.

Definition at line 15 of file imports_loader.cpp.

◆ processThunks_tpl()

template<typename T_FIELD , typename T_IMAGE_THUNK_DATA >
bool FillImportThunks::processThunks_tpl ( LPSTR  lib_name,
T_IMAGE_THUNK_DATA *  desc,
T_FIELD *  call_via,
T_FIELD  ordinal_flag 
)
inlineprotected

Definition at line 41 of file imports_loader.cpp.

Here is the call graph for this function:

Member Data Documentation

◆ funcResolver

t_function_resolver* FillImportThunks::funcResolver
protected

Definition at line 71 of file imports_loader.cpp.


The documentation for this class was generated from the following file: