Loads a module from the disk, corresponding to the module in the scanned process' memory.
A base class of all the reports detailing on the output of the performed module's scan.
A base class for all the scanners operating on module data.
virtual ModuleScanReport * scanRemote()=0
RemoteModuleData & remoteModData
ModuleScanner(HANDLE _procHndl, ModuleData &_moduleData, RemoteModuleData &_remoteModData)
A base class for all the scanners checking appropriate process' features.
Buffers the data from the module loaded in the scanned process into the local memory.
size_t fill_iat(BYTE *vBuf, size_t vBufSize, IN const peconv::ExportsMapper *exportsMap, IN OUT IATBlock &iat, IN ThunkFoundCallback *callback)