libPeConv
A library to load, manipulate, dump PE files.
Loading...
Searching...
No Matches
Public Member Functions | Protected Member Functions | Protected Attributes | List of all members
ListImportNames Class Reference
Inheritance diagram for ListImportNames:
Inheritance graph
[legend]

Public Member Functions

 ListImportNames (BYTE *_modulePtr, size_t _moduleSize, std::map< std::string, DWORD > &name_to_addr)
 
virtual bool processThunks (LPSTR lib_name, ULONG_PTR origFirstThunkPtr, ULONG_PTR firstThunkPtr)
 
- Public Member Functions inherited from peconv::ImportThunksCallback
 ImportThunksCallback (BYTE *_modulePtr, size_t _moduleSize)
 
virtual ~ImportThunksCallback ()
 
virtual bool processThunks (LPSTR libName, ULONG_PTR origFirstThunkPtr, ULONG_PTR firstThunkPtr)=0
 

Protected Member Functions

template<typename T_FIELD , typename T_IMAGE_THUNK_DATA >
bool processThunks_tpl (LPSTR lib_name, const T_IMAGE_THUNK_DATA *desc, const T_FIELD *call_via, const T_FIELD ordinal_flag)
 

Protected Attributes

std::map< std::string, DWORD > & nameToAddr
 
- Protected Attributes inherited from peconv::ImportThunksCallback
BYTE * modulePtr
 
size_t moduleSize
 
bool is64b
 

Detailed Description

Definition at line 7 of file fix_dot_net_ep.cpp.

Constructor & Destructor Documentation

◆ ListImportNames()

ListImportNames::ListImportNames ( BYTE *  _modulePtr,
size_t  _moduleSize,
std::map< std::string, DWORD > &  name_to_addr 
)
inline

Definition at line 10 of file fix_dot_net_ep.cpp.

Member Function Documentation

◆ processThunks()

virtual bool ListImportNames::processThunks ( LPSTR  libName,
ULONG_PTR  origFirstThunkPtr,
ULONG_PTR  firstThunkPtr 
)
inlinevirtual

A callback that will be executed by process_import_table when the next imported function was found

Parameters
libName: the pointer to the DLL name
origFirstThunkPtr: the pointer to the Original First Thunk
firstThunkPtr: the pointer to the First Thunk
Returns
: true if processing succeeded, false otherwise

Implements peconv::ImportThunksCallback.

Definition at line 15 of file fix_dot_net_ep.cpp.

◆ processThunks_tpl()

template<typename T_FIELD , typename T_IMAGE_THUNK_DATA >
bool ListImportNames::processThunks_tpl ( LPSTR  lib_name,
const T_IMAGE_THUNK_DATA *  desc,
const T_FIELD *  call_via,
const T_FIELD  ordinal_flag 
)
inlineprotected

Definition at line 29 of file fix_dot_net_ep.cpp.

Here is the call graph for this function:

Member Data Documentation

◆ nameToAddr

std::map<std::string, DWORD>& ListImportNames::nameToAddr
protected

Definition at line 51 of file fix_dot_net_ep.cpp.


The documentation for this class was generated from the following file: