PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::IATBlock Member List

This is the complete list of members for pesieve::IATBlock, including all inherited members.

addrToFunctionVApesieve::IATBlockprotected
append(ULONGLONG offset, ULONGLONG functionVA, const peconv::ExportedFunc *exp)pesieve::IATBlockinline
appendSeries(IATThunksSeries *series)pesieve::IATBlockinline
countThunks() constpesieve::IATBlockinline
deleteThunkSeries()pesieve::IATBlockinline
functionspesieve::IATBlockprotected
IATBlock(bool _is64bit, DWORD _iat_offset)pesieve::IATBlockinline
iatOffsetpesieve::IATBlock
iatSizepesieve::IATBlock
importTableOffsetpesieve::IATBlock
ImpReconstructorpesieve::IATBlockfriend
is64bitpesieve::IATBlockprotected
isCoverageCompletepesieve::IATBlockprotected
isCovered() constpesieve::IATBlockinline
isInMainpesieve::IATBlock
isTerminatedpesieve::IATBlock
isValid() constpesieve::IATBlockinline
makeCoverage(IN const peconv::ExportsMapper *exportsMap)pesieve::IATBlock
maxDllLen()pesieve::IATBlock
operator<(const IATBlock &other) constpesieve::IATBlockinline
sizeOfDllsSpace()pesieve::IATBlock
splitSeries(IN IATThunksSeries *notCoveredSeries, IN const peconv::ExportsMapper &exportsMap)pesieve::IATBlockprotected
thunkSeriespesieve::IATBlockprotected
toString()pesieve::IATBlock
~IATBlock()pesieve::IATBlockinline