fix_imports.h

Go to the documentation of this file.

 
#pragma once
 
#include <windows.h>
 
#include <string>
 
#include <set>
#include <map>
 
#include <iterator>
 
#include "pe_hdrs_helper.h"
#include "exports_lookup.h"
#include "exports_mapper.h"
 
#define MIN_DLL_LEN 5
 
namespace peconv {
 
    class ImpsNotCovered
    {
    public:
        ImpsNotCovered() {}
        ~ImpsNotCovered() {}
        
        /*
        Number of stored records
        */
        size_t count() { return thunkToAddr.size();  }
 
        void insert(DWORD thunkRVA, ULONGLONG searchedAddr);
 
        std::map<DWORD, ULONGLONG> thunkToAddr; //addresses of not recovered functions with their thunks (call_via)
    };
 
    bool fix_imports(IN OUT PVOID modulePtr, IN size_t moduleSize, IN const peconv::ExportsMapper& exportsMap, OUT OPTIONAL peconv::ImpsNotCovered* notCovered);
    
    class ImportedDllCoverage
    {
    public:
        ImportedDllCoverage(std::set<ULONGLONG>& _addresses, const peconv::ExportsMapper& _exportsMap)
            : addresses(_addresses), exportsMap(_exportsMap)
        {
        }
 
        bool findCoveringDll();
 
        size_t mapAddressesToFunctions(const std::string &_mappedDllName);
 
        bool isMappingComplete() { return (addresses.size() == addrToFunc.size()) ? true : false; }
 
        std::map<ULONGLONG, std::set<ExportedFunc>> addrToFunc;
 
        std::set<ULONGLONG> notFound;
 
        std::string dllName;
 
    protected:
        std::string mappedDllName;
 
        std::set<ULONGLONG> &addresses;
 
        const peconv::ExportsMapper& exportsMap;
    };
}