exceptions_parser.cpp File Reference

#include "peconv/exceptions_parser.h"
#include "peconv/pe_hdrs_helper.h"
#include "peconv/util.h"
#include "ntddk.h"
#include "peconv/logger.h"

Go to the source code of this file.

Classes
struct	peconv::_SEARCH_CONTEXT
struct	peconv::_NtVersion
struct	peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_64
struct	peconv::_RTL_INVERTED_FUNCTION_TABLE_64
struct	peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN8_PLUS_32
struct	peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32
struct	peconv::_RTL_INVERTED_FUNCTION_TABLE_WIN7_32
struct	peconv::_LDR_DDAG_NODE_WIN8
struct	peconv::_LDR_DATA_TABLE_ENTRY_WIN8

Namespaces
namespace	peconv

Macros
#define	min(a, b)   (((a) < (b)) ? (a) : (b))
#define	RTL_VERIFY_FLAGS_MAJOR_VERSION   0
#define	RTL_VERIFY_FLAGS_MINOR_VERSION   1
#define	RTL_VERIFY_FLAGS_BUILD_NUMBERS   2
#define	RTL_VERIFY_FLAGS_DEFAULT   RTL_VERIFY_FLAGS_MAJOR_VERSION|RTL_VERIFY_FLAGS_MINOR_VERSION|RTL_VERIFY_FLAGS_BUILD_NUMBERS
#define	RtlFindMemoryBlockFromModuleSection__leave   return status

Typedefs
typedef struct peconv::_SEARCH_CONTEXT	peconv::SEARCH_CONTEXT
typedef struct peconv::_SEARCH_CONTEXT *	peconv::PSEARCH_CONTEXT
typedef struct peconv::_NtVersion	peconv::NtVersion
typedef struct peconv::_NtVersion *	peconv::PNtVersion
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_64	peconv::RTL_INVERTED_FUNCTION_TABLE_ENTRY_64
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_64 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_ENTRY_64
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_64	peconv::RTL_INVERTED_FUNCTION_TABLE_64
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_64 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_64
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN8_PLUS_32	peconv::RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN8_PLUS_32
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN8_PLUS_32 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN8_PLUS_32
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32	peconv::RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_WIN7_32	peconv::RTL_INVERTED_FUNCTION_TABLE_WIN7_32
typedef struct peconv::_RTL_INVERTED_FUNCTION_TABLE_WIN7_32 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_WIN7_32
typedef RTL_INVERTED_FUNCTION_TABLE_WIN7_32	peconv::_RTL_INVERTED_FUNCTION_TABLE
typedef RTL_INVERTED_FUNCTION_TABLE_WIN7_32	peconv::RTL_INVERTED_FUNCTION_TABLE
typedef RTL_INVERTED_FUNCTION_TABLE_WIN7_32 *	peconv::PRTL_INVERTED_FUNCTION_TABLE
typedef _RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32	peconv::_RTL_INVERTED_FUNCTION_TABLE_ENTRY
typedef _RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32	peconv::RTL_INVERTED_FUNCTION_TABLE_ENTRY
typedef _RTL_INVERTED_FUNCTION_TABLE_ENTRY_WIN7_32 *	peconv::PRTL_INVERTED_FUNCTION_TABLE_ENTRY
typedef struct peconv::_LDR_DDAG_NODE_WIN8	peconv::LDR_DDAG_NODE_WIN8
typedef struct peconv::_LDR_DDAG_NODE_WIN8 *	peconv::PLDR_DDAG_NODE_WIN8
typedef struct peconv::_LDR_DATA_TABLE_ENTRY_WIN8	peconv::LDR_DATA_TABLE_ENTRY_WIN8
typedef struct peconv::_LDR_DATA_TABLE_ENTRY_WIN8 *	peconv::PLDR_DATA_TABLE_ENTRY_WIN8

Macro Definition Documentation

min

#define min	(		a,
			b
	)		(((a) < (b)) ? (a) : (b))

Definition at line 12 of file exceptions_parser.cpp.

RTL_VERIFY_FLAGS_BUILD_NUMBERS

#define RTL_VERIFY_FLAGS_BUILD_NUMBERS   2

Definition at line 19 of file exceptions_parser.cpp.

RTL_VERIFY_FLAGS_DEFAULT

#define RTL_VERIFY_FLAGS_DEFAULT   RTL_VERIFY_FLAGS_MAJOR_VERSION|RTL_VERIFY_FLAGS_MINOR_VERSION|RTL_VERIFY_FLAGS_BUILD_NUMBERS

Definition at line 20 of file exceptions_parser.cpp.

RTL_VERIFY_FLAGS_MAJOR_VERSION

#define RTL_VERIFY_FLAGS_MAJOR_VERSION   0

Definition at line 17 of file exceptions_parser.cpp.

RTL_VERIFY_FLAGS_MINOR_VERSION

#define RTL_VERIFY_FLAGS_MINOR_VERSION   1

Definition at line 18 of file exceptions_parser.cpp.

RtlFindMemoryBlockFromModuleSection__leave

#define RtlFindMemoryBlockFromModuleSection__leave   return status