libPeConv
A library to load, manipulate, dump PE files.
Loading...
Searching...
No Matches
Public Member Functions | Protected Member Functions | Protected Attributes | List of all members
FillImportThunks Class Reference
Inheritance diagram for FillImportThunks:
Inheritance graph
[legend]

Public Member Functions

 FillImportThunks (BYTE *_modulePtr, size_t _moduleSize, t_function_resolver *func_resolver)
 
virtual bool processThunks (LPSTR lib_name, ULONG_PTR origFirstThunkPtr, ULONG_PTR firstThunkPtr)
 
- Public Member Functions inherited from peconv::ImportThunksCallback
 ImportThunksCallback (BYTE *_modulePtr, size_t _moduleSize)
 

Protected Member Functions

template<typename T_FIELD , typename T_IMAGE_THUNK_DATA >
bool processThunks_tpl (LPSTR lib_name, T_IMAGE_THUNK_DATA *desc, T_FIELD *call_via, T_FIELD ordinal_flag)
 

Protected Attributes

t_function_resolverfuncResolver
 
- Protected Attributes inherited from peconv::ImportThunksCallback
BYTEmodulePtr
 
size_t moduleSize
 
bool is64b
 

Detailed Description

Definition at line 7 of file imports_loader.cpp.

Constructor & Destructor Documentation

◆ FillImportThunks()

FillImportThunks::FillImportThunks ( BYTE * _modulePtr,
size_t _moduleSize,
t_function_resolver * func_resolver )
inline

Definition at line 10 of file imports_loader.cpp.

Member Function Documentation

◆ processThunks()

virtual bool FillImportThunks::processThunks ( LPSTR libName,
ULONG_PTR origFirstThunkPtr,
ULONG_PTR firstThunkPtr )
inlinevirtual

A callback that will be executed by process_import_table when the next imported function was found

Parameters
libName: the pointer to the DLL name
origFirstThunkPtr: the pointer to the Original First Thunk
firstThunkPtr: the pointer to the First Thunk
Returns
: true if processing succeeded, false otherwise

Implements peconv::ImportThunksCallback.

Definition at line 15 of file imports_loader.cpp.

Here is the call graph for this function:

◆ processThunks_tpl()

bool FillImportThunks::processThunks_tpl ( LPSTR lib_name,
T_IMAGE_THUNK_DATA * desc,
T_FIELD * call_via,
T_FIELD ordinal_flag )
inlineprotected

Definition at line 41 of file imports_loader.cpp.

Here is the call graph for this function:

Member Data Documentation

◆ funcResolver

t_function_resolver* FillImportThunks::funcResolver
protected

Definition at line 77 of file imports_loader.cpp.


The documentation for this class was generated from the following file: