mirror of
https://github.com/hasherezade/bearparser
synced 2026-06-08 14:32:38 +00:00
hasherezade
492 lines
100 KiB
HTML
492 lines
100 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.9.1"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>BearParser: parser/pe/DelayImpDirWrapper.cpp Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">BearParser
|
|
</div>
|
|
<div id="projectbrief">Portable Executable parsing library (from PE-bear)</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.9.1 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search','.html');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_572890c148f68441e050f6560d78312b.html">parser</a></li><li class="navelem"><a class="el" href="dir_62b2e2d03bb59a70b5ceb20ba7fd6571.html">pe</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">DelayImpDirWrapper.cpp</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<a href="_delay_imp_dir_wrapper_8cpp.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="preprocessor">#include "<a class="code" href="_delay_imp_dir_wrapper_8h.html">pe/DelayImpDirWrapper.h</a>"</span></div>
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="preprocessor">#include "<a class="code" href="_p_e_file_8h.html">pe/PEFile.h</a>"</span></div>
|
|
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span>  </div>
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment">/*</span></div>
|
|
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment">typedef struct _IMAGE_DELAY_LOAD {</span></div>
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="comment"> DWORD grAttrs; // attributes - must be 0</span></div>
|
|
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="comment"> RVA rvaDLLName; // RVA to dll name</span></div>
|
|
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="comment"> RVA rvaHmod; // RVA of module handle</span></div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="comment"> RVA rvaIAT; // RVA of the IAT</span></div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="comment"> RVA rvaINT; // RVA of the INT</span></div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="comment"> RVA rvaBoundIAT; // RVA of the optional bound IAT</span></div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="comment"> RVA rvaUnloadIAT; // RVA of optional copy of original IAT</span></div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="comment"> DWORD dwTimeStamp; // 0 if not bound,</span></div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="comment"> // O.W. date/time stamp of DLL bound to (Old BIND)</span></div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="comment">} IMAGE_DELAY_LOAD, *LPIMAGE_DELAY_LOAD;</span></div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="comment">*/</span></div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span>  </div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#afbf7c046cdc591573b7f8d7f308ec966"> 18</a></span> <span class="keywordtype">bool</span> <a class="code" href="class_delay_imp_dir_wrapper.html#afbf7c046cdc591573b7f8d7f308ec966">DelayImpDirWrapper::is64</a>()</div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> {</div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>  <span class="keywordflow">if</span> (<a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#adcf60bc50efc0f27dd245baf5fab3b1b">isBit32</a>()) <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> }</div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span>  </div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#adf0e92cb99f87b14a29dcf58153b1d94"> 24</a></span> <span class="keywordtype">void</span>* <a class="code" href="class_delay_imp_dir_wrapper.html#a149fabf8dd4addebdd5683321632df91">DelayImpDirWrapper::firstDelayLd</a>(<a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> size)</div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span> {</div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span>  <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> rva = <a class="code" href="class_data_dir_entry_wrapper.html#aa3bd2e16d3fde61e1e58e5cd7377884f">getDirEntryAddress</a>();</div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  </div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>  BYTE *ptr = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(rva, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a>, size);</div>
|
|
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span>  <span class="keywordflow">if</span> (ptr == NULL) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span>  </div>
|
|
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span>  <span class="keywordflow">return</span> ptr;</div>
|
|
<div class="line"><a name="l00032"></a><span class="lineno"> 32</span> }</div>
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>  </div>
|
|
<div class="line"><a name="l00034"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#a9a65bd88e9cba04eec4d53c626e1f967"> 34</a></span> <span class="keywordtype">bool</span> <a class="code" href="class_delay_imp_dir_wrapper.html#a9a65bd88e9cba04eec4d53c626e1f967">DelayImpDirWrapper::loadNextEntry</a>(<span class="keywordtype">size_t</span> cntr)</div>
|
|
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span> {</div>
|
|
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span>  <a class="code" href="class_delay_imp_entry_wrapper.html">DelayImpEntryWrapper</a>* imp = <span class="keyword">new</span> <a class="code" href="class_delay_imp_dir_wrapper.html#abf00f0b715ea232e02a34daa7f410696">DelayImpEntryWrapper</a>(<a class="code" href="class_p_e_node_wrapper.html#ab6fa549a7490efc0a84ab0c39fe0ef95">m_PE</a>, <span class="keyword">this</span>, cntr);</div>
|
|
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span>  <span class="keywordflow">if</span> (!imp || !imp-><a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">getPtr</a>()) {</div>
|
|
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>  <span class="keyword">delete</span> imp;</div>
|
|
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00040"></a><span class="lineno"> 40</span>  }</div>
|
|
<div class="line"><a name="l00041"></a><span class="lineno"> 41</span>  <span class="comment">// TODO! do it in proper way!</span></div>
|
|
<div class="line"><a name="l00042"></a><span class="lineno"> 42</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00043"></a><span class="lineno"> 43</span>  uint64_t offset = imp-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">DelayImpEntryWrapper::NAME</a>, &isOk);</div>
|
|
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span>  <span class="keywordflow">if</span> (!isOk || offset == 0) {</div>
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  <span class="keyword">delete</span> imp;</div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  }</div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  <a class="code" href="class_exe_node_wrapper.html#a7c22babccbf1bc935ad563d06c450995">entries</a>.push_back(imp);</div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span> }</div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>  </div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#adbcd845740f2cc234fbd08bae646cbc7"> 52</a></span> <span class="keywordtype">void</span>* <a class="code" href="class_delay_imp_dir_wrapper.html#adbcd845740f2cc234fbd08bae646cbc7">DelayImpDirWrapper::getPtr</a>()</div>
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span> {</div>
|
|
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> size = <a class="code" href="class_delay_imp_dir_wrapper.html#a711d82e0717581501cb5e891518c7408">getEntrySize</a>();</div>
|
|
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span>  <span class="keywordflow">return</span> <a class="code" href="class_delay_imp_dir_wrapper.html#a149fabf8dd4addebdd5683321632df91">firstDelayLd</a>(size);</div>
|
|
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span> }</div>
|
|
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>  </div>
|
|
<div class="line"><a name="l00058"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#aa430d309e6f9fc7c6eba0727305e1b6a"> 58</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_delay_imp_dir_wrapper.html#aa430d309e6f9fc7c6eba0727305e1b6a">DelayImpDirWrapper::getSize</a>()</div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span> {</div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> entriesNum = <span class="keyword">static_cast<</span><a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a><span class="keyword">></span>(this-><a class="code" href="class_exe_node_wrapper.html#aacbf801e0cf579c0e16a7e27f8165693">getEntriesCount</a>()) + 1; <span class="comment">//entries + terminating field</span></div>
|
|
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span>  <span class="keywordflow">return</span> <a class="code" href="class_delay_imp_dir_wrapper.html#a711d82e0717581501cb5e891518c7408">getEntrySize</a>() * entriesNum;</div>
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span> }</div>
|
|
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>  </div>
|
|
<div class="line"><a name="l00064"></a><span class="lineno"><a class="line" href="class_delay_imp_dir_wrapper.html#a711d82e0717581501cb5e891518c7408"> 64</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_delay_imp_dir_wrapper.html#a711d82e0717581501cb5e891518c7408">DelayImpDirWrapper::getEntrySize</a>()</div>
|
|
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span> {</div>
|
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <span class="keywordflow">return</span> <span class="keyword">sizeof</span>(pe::IMAGE_DELAY_LOAD);</div>
|
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span> }</div>
|
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>  </div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span> <span class="comment">//---------------------------------------------------------------------------</span></div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>  </div>
|
|
<div class="line"><a name="l00071"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#ab16e2e700ae85ed8f249549255af18e7"> 71</a></span> IMAGE_IMPORT_BY_NAME* <a class="code" href="class_delay_imp_entry_wrapper.html#ab16e2e700ae85ed8f249549255af18e7">DelayImpEntryWrapper::getFirstImpByNamePtr</a>()</div>
|
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span> {</div>
|
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  uint64_t value = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">INT</a>, &isOk);</div>
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  <span class="keywordflow">if</span>(!isOk) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  </div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aT = <a class="code" href="class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc">containsAddrType</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">INT</a>);</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  BYTE *ptr = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(value, aT, <span class="keyword">sizeof</span>(IMAGE_IMPORT_BY_NAME));</div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <span class="keywordflow">return</span> (IMAGE_IMPORT_BY_NAME*) ptr;</div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span> }</div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>  </div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#abd79b0c4556c89d51d65d60d947629ee"> 82</a></span> <span class="keywordtype">bool</span> <a class="code" href="class_delay_imp_entry_wrapper.html#abd79b0c4556c89d51d65d60d947629ee">DelayImpEntryWrapper::loadNextEntry</a>(<span class="keywordtype">size_t</span> entryNum)</div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  {</div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  <a class="code" href="class_delay_imp_func_wrapper.html">DelayImpFuncWrapper</a>* entry = <span class="keyword">new</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ac408ba898150ee41cdce32ec872e7500">DelayImpFuncWrapper</a>(this-><a class="code" href="class_p_e_node_wrapper.html#ab6fa549a7490efc0a84ab0c39fe0ef95">m_PE</a>, <span class="keyword">this</span>, entryNum);</div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  <span class="keywordflow">if</span> (entry-><a class="code" href="class_delay_imp_func_wrapper.html#af9b4d288d23e5b483eb88016c5e5cb92">getPtr</a>() == NULL) {</div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  <span class="keyword">delete</span> entry;</div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>  }</div>
|
|
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span>  uint64_t thunk = entry-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">DelayImpFuncWrapper::NAMETHUNK_ADDR</a>, &isOk);</div>
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  <span class="keywordflow">if</span> (!isOk || thunk == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a> || thunk == 0) {</div>
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <span class="keyword">delete</span> entry;</div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span>  }</div>
|
|
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  this-><a class="code" href="class_exe_node_wrapper.html#a7c22babccbf1bc935ad563d06c450995">entries</a>.push_back(entry);</div>
|
|
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  </div>
|
|
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  <a class="code" href="class_delay_imp_dir_wrapper.html">DelayImpDirWrapper</a> *<a class="code" href="class_import_base_entry_wrapper.html#a320f9410912954ad911d42603a05ed2b">impDir</a> = <span class="keyword">dynamic_cast<</span><a class="code" href="class_delay_imp_dir_wrapper.html">DelayImpDirWrapper</a>*<span class="keyword">></span>(this-><a class="code" href="class_exe_node_wrapper.html#a9c3516076bbc1fd16c9222fb56e36f57">parentNode</a>);</div>
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  <span class="keywordflow">if</span> (impDir) <a class="code" href="class_import_base_entry_wrapper.html#a320f9410912954ad911d42603a05ed2b">impDir</a>-><a class="code" href="class_import_base_dir_wrapper.html#ae3401167a9ee3eee123cb42728d90b42">addMapping</a>(entry);</div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  }</div>
|
|
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  </div>
|
|
<div class="line"><a name="l00102"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362"> 102</a></span> <span class="keywordtype">void</span>* <a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">DelayImpEntryWrapper::getPtr</a>()</div>
|
|
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span> {</div>
|
|
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  <a class="code" href="class_delay_imp_dir_wrapper.html">DelayImpDirWrapper</a> *parent = <span class="keyword">dynamic_cast<</span><a class="code" href="class_delay_imp_dir_wrapper.html">DelayImpDirWrapper</a>*<span class="keyword">></span>(this-><a class="code" href="class_exe_node_wrapper.html#a9c3516076bbc1fd16c9222fb56e36f57">parentNode</a>);</div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordflow">if</span> (!parent) {</div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  }</div>
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  </div>
|
|
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  <span class="keyword">const</span> <span class="keywordtype">size_t</span> DL_SIZE = <span class="keyword">sizeof</span>(pe::IMAGE_DELAY_LOAD);</div>
|
|
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  pe::IMAGE_DELAY_LOAD* first = (pe::IMAGE_DELAY_LOAD*) parent-><a class="code" href="class_delay_imp_dir_wrapper.html#a149fabf8dd4addebdd5683321632df91">firstDelayLd</a>(DL_SIZE);</div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  <span class="keywordflow">if</span> (!first) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  </div>
|
|
<div class="line"><a name="l00113"></a><span class="lineno"> 113</span>  uint64_t descAddr = parent-><a class="code" href="class_exe_element_wrapper.html#a98ca205ec6f2d2deacd32327409a3539">getOffset</a>(first);</div>
|
|
<div class="line"><a name="l00114"></a><span class="lineno"> 114</span>  <span class="keywordflow">if</span> (descAddr == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  </div>
|
|
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  uint64_t entryOffset = descAddr + (this-><a class="code" href="class_exe_node_wrapper.html#aaf023e7c90b9e9c90ab69e6ae7ea2b65">entryNum</a> * DL_SIZE);</div>
|
|
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  <span class="keywordflow">if</span> (entryOffset == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  </div>
|
|
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  BYTE *content = this-><a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(entryOffset, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a>, DL_SIZE);</div>
|
|
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  <span class="keywordflow">if</span> (!content) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span>  </div>
|
|
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  <span class="keywordflow">return</span> (pe::IMAGE_DELAY_LOAD*) content;</div>
|
|
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span> }</div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  </div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a9b2dd20f330a44d5e22c9ef3beed5bd3"> 125</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_delay_imp_entry_wrapper.html#a9b2dd20f330a44d5e22c9ef3beed5bd3">DelayImpEntryWrapper::getSize</a>()</div>
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span> {</div>
|
|
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  <span class="keywordflow">if</span> (<a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">getPtr</a>() == NULL) <span class="keywordflow">return</span> 0;</div>
|
|
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  <span class="keywordflow">return</span> <span class="keyword">sizeof</span>(pe::IMAGE_DELAY_LOAD);</div>
|
|
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span> }</div>
|
|
<div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  </div>
|
|
<div class="line"><a name="l00131"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#ae74d7479281a025c5bb1092f007e91f9"> 131</a></span> QString <a class="code" href="class_delay_imp_entry_wrapper.html#ae74d7479281a025c5bb1092f007e91f9">DelayImpEntryWrapper::getName</a>()</div>
|
|
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span> {</div>
|
|
<div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  <span class="keywordtype">char</span>* name = <a class="code" href="class_delay_imp_entry_wrapper.html#a59ca36c4ce27892ea6e8a6debf3d6343">getLibraryName</a>();</div>
|
|
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  <span class="keywordflow">if</span> (!name) <span class="keywordflow">return</span> <span class="stringliteral">""</span>;</div>
|
|
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  <span class="keywordflow">return</span> QString(name);</div>
|
|
<div class="line"><a name="l00136"></a><span class="lineno"> 136</span> }</div>
|
|
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  </div>
|
|
<div class="line"><a name="l00138"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a59ca36c4ce27892ea6e8a6debf3d6343"> 138</a></span> <span class="keywordtype">char</span>* <a class="code" href="class_delay_imp_entry_wrapper.html#a59ca36c4ce27892ea6e8a6debf3d6343">DelayImpEntryWrapper::getLibraryName</a>()</div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span> {</div>
|
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  uint64_t offset = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">DelayImpEntryWrapper::NAME</a>, &isOk);</div>
|
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <span class="keywordflow">if</span> (!isOk) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  </div>
|
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aT = <a class="code" href="class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc">containsAddrType</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">NAME</a>);</div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  <span class="keywordflow">if</span> (aT == <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a>) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  </div>
|
|
<div class="line"><a name="l00147"></a><span class="lineno"> 147</span>  <span class="keywordtype">char</span> *ptr = (<span class="keywordtype">char</span>*) <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(offset, aT, 1);</div>
|
|
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  <span class="keywordflow">if</span> (!ptr) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  </div>
|
|
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  <span class="keywordflow">return</span> ptr;</div>
|
|
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span> }</div>
|
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  </div>
|
|
<div class="line"><a name="l00153"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a13d4f9e687a61aa68741f039b2158d1e"> 153</a></span> <span class="keywordtype">void</span>* <a class="code" href="class_delay_imp_entry_wrapper.html#a13d4f9e687a61aa68741f039b2158d1e">DelayImpEntryWrapper::getFieldPtr</a>(<span class="keywordtype">size_t</span> fId, <span class="keywordtype">size_t</span> subField)</div>
|
|
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span> {</div>
|
|
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  pe::IMAGE_DELAY_LOAD* dLd = (pe::IMAGE_DELAY_LOAD*) this-><a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">getPtr</a>();</div>
|
|
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  <span class="keywordflow">if</span> (dLd == NULL) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  </div>
|
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  <span class="keywordflow">switch</span> (fId) {</div>
|
|
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa89a76d323dd34b635c8cf3fa80e65f92">ATTRS</a> : <span class="keywordflow">return</span> &dLd->grAttrs;</div>
|
|
<div class="line"><a name="l00160"></a><span class="lineno"> 160</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">NAME</a> : <span class="keywordflow">return</span> &dLd->szName;</div>
|
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa77e5f11a0a737dd5444a5a8c9c82a50b">MOD</a> : <span class="keywordflow">return</span> &dLd->phmod;</div>
|
|
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">IAT</a> : <span class="keywordflow">return</span> &dLd->pIAT;</div>
|
|
<div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">INT</a> : <span class="keywordflow">return</span> &dLd->pINT;</div>
|
|
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23">BOUND_IAT</a> : <span class="keywordflow">return</span> &dLd->pBoundIAT;</div>
|
|
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab">UNLOAD_IAT</a> : <span class="keywordflow">return</span> &dLd->pUnloadIAT;</div>
|
|
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3125918209e5d5416b0a87b0b46a3086">TIMESTAMP</a> : <span class="keywordflow">return</span> &dLd->dwTimestamp;</div>
|
|
<div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  }</div>
|
|
<div class="line"><a name="l00168"></a><span class="lineno"> 168</span>  <span class="keywordflow">return</span> this-><a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">getPtr</a>();</div>
|
|
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span> }</div>
|
|
<div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  </div>
|
|
<div class="line"><a name="l00171"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a2a59df1fa18dcac641c18820d67ba4ab"> 171</a></span> QString <a class="code" href="class_delay_imp_entry_wrapper.html#a2a59df1fa18dcac641c18820d67ba4ab">DelayImpEntryWrapper::getFieldName</a>(<span class="keywordtype">size_t</span> fieldId)</div>
|
|
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span> {</div>
|
|
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  <span class="keywordflow">switch</span> (fieldId) {</div>
|
|
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa89a76d323dd34b635c8cf3fa80e65f92">ATTRS</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Attributes"</span>;</div>
|
|
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">NAME</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Name Addr."</span>;</div>
|
|
<div class="line"><a name="l00176"></a><span class="lineno"> 176</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa77e5f11a0a737dd5444a5a8c9c82a50b">MOD</a> : <span class="keywordflow">return</span> <span class="stringliteral">"ModuleHandle"</span>;</div>
|
|
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">IAT</a> : <span class="keywordflow">return</span> <span class="stringliteral">"IAT"</span>;</div>
|
|
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">INT</a> : <span class="keywordflow">return</span> <span class="stringliteral">"ImportNameTable"</span>;</div>
|
|
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23">BOUND_IAT</a> : <span class="keywordflow">return</span> <span class="stringliteral">"BoundIAT"</span>;</div>
|
|
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab">UNLOAD_IAT</a> : <span class="keywordflow">return</span> <span class="stringliteral">"UnloadIAT"</span>;</div>
|
|
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3125918209e5d5416b0a87b0b46a3086">TIMESTAMP</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Timestamp"</span>;</div>
|
|
<div class="line"><a name="l00182"></a><span class="lineno"> 182</span>  }</div>
|
|
<div class="line"><a name="l00183"></a><span class="lineno"> 183</span>  <span class="keywordflow">return</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ae74d7479281a025c5bb1092f007e91f9">getName</a>();</div>
|
|
<div class="line"><a name="l00184"></a><span class="lineno"> 184</span> }</div>
|
|
<div class="line"><a name="l00185"></a><span class="lineno"> 185</span>  </div>
|
|
<div class="line"><a name="l00186"></a><span class="lineno"><a class="line" href="class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc"> 186</a></span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> <a class="code" href="class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc">DelayImpEntryWrapper::containsAddrType</a>(<span class="keywordtype">size_t</span> fieldId, <span class="keywordtype">size_t</span> subField)</div>
|
|
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span> {</div>
|
|
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  <span class="keywordflow">switch</span> (fieldId) {</div>
|
|
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">NAME</a> :</div>
|
|
<div class="line"><a name="l00190"></a><span class="lineno"> 190</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa77e5f11a0a737dd5444a5a8c9c82a50b">MOD</a> :</div>
|
|
<div class="line"><a name="l00191"></a><span class="lineno"> 191</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">IAT</a> :</div>
|
|
<div class="line"><a name="l00192"></a><span class="lineno"> 192</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">INT</a> :</div>
|
|
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23">BOUND_IAT</a> :</div>
|
|
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab">UNLOAD_IAT</a> :</div>
|
|
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  {</div>
|
|
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>  uint64_t offset = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(fieldId, &isOk);</div>
|
|
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span>  <span class="keywordflow">if</span> (!isOk) <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a>;</div>
|
|
<div class="line"><a name="l00199"></a><span class="lineno"> 199</span>  </div>
|
|
<div class="line"><a name="l00200"></a><span class="lineno"> 200</span>  <span class="keywordflow">return</span> <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#ab8d6133f42ed4b4f4267f60dde4a3646">detectAddrType</a>(offset, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a>);</div>
|
|
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  }</div>
|
|
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  }</div>
|
|
<div class="line"><a name="l00203"></a><span class="lineno"> 203</span>  <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a>;</div>
|
|
<div class="line"><a name="l00204"></a><span class="lineno"> 204</span> }</div>
|
|
<div class="line"><a name="l00205"></a><span class="lineno"> 205</span>  </div>
|
|
<div class="line"><a name="l00206"></a><span class="lineno"> 206</span> <span class="comment">//---------------------------------------------------------------------------</span></div>
|
|
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span>  </div>
|
|
<div class="line"><a name="l00208"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a3b4e8d96c151873ca97513c0165348b6"> 208</a></span> <span class="keywordtype">bool</span> <a class="code" href="class_delay_imp_func_wrapper.html#a3b4e8d96c151873ca97513c0165348b6">DelayImpFuncWrapper::isByOrdinal</a>()</div>
|
|
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span> {</div>
|
|
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  uint64_t addr = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a>, &isOk);</div>
|
|
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  <span class="keywordflow">if</span> (!isOk || addr == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  </div>
|
|
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  <span class="keywordflow">if</span> (<a class="code" href="class_exe_element_wrapper.html#a85682570009a6c69fb22f035763a3c56">isBit64</a>()) {</div>
|
|
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span>  <span class="keywordflow">if</span> (addr & ORDINAL_FLAG64) <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span>  </div>
|
|
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  } <span class="keywordflow">else</span> {</div>
|
|
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span>  <span class="keywordflow">if</span> (addr & ORDINAL_FLAG32) <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>  }</div>
|
|
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span> }</div>
|
|
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span>  </div>
|
|
<div class="line"><a name="l00223"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a8653063030b2fc79c04fcce9b6ae158b"> 223</a></span> uint64_t <a class="code" href="class_delay_imp_func_wrapper.html#a8653063030b2fc79c04fcce9b6ae158b">DelayImpFuncWrapper::getOrdinal</a>()</div>
|
|
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span> {</div>
|
|
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  uint64_t addr = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a>, &isOk);</div>
|
|
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  <span class="keywordflow">if</span> (!isOk || addr == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) <span class="keywordflow">return</span> <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  </div>
|
|
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>  <span class="keywordtype">size_t</span> fieldSize = this->ptrLen() * 8; <span class="comment">// in bits!</span></div>
|
|
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>  <span class="keywordtype">size_t</span> shiftSize = (<span class="keyword">sizeof</span>(addr) - fieldSize) + 1;</div>
|
|
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  </div>
|
|
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  uint64_t shiftedVal = (addr << shiftSize) >> shiftSize;</div>
|
|
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  <span class="keywordflow">return</span> shiftedVal;</div>
|
|
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span> }</div>
|
|
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  </div>
|
|
<div class="line"><a name="l00236"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a2671ee0a9df826576e3746f625de7ace"> 236</a></span> <span class="keywordtype">char</span>* <a class="code" href="class_delay_imp_func_wrapper.html#a2671ee0a9df826576e3746f625de7ace">DelayImpFuncWrapper::getFunctionName</a>()</div>
|
|
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span> {</div>
|
|
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>  <span class="comment">//check</span></div>
|
|
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>  <span class="keywordflow">if</span> (<a class="code" href="class_delay_imp_func_wrapper.html#a3b4e8d96c151873ca97513c0165348b6">isByOrdinal</a>() == <span class="keyword">true</span>) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00240"></a><span class="lineno"> 240</span>  </div>
|
|
<div class="line"><a name="l00241"></a><span class="lineno"> 241</span>  IMAGE_IMPORT_BY_NAME* ptr = getImportByNamePtr();</div>
|
|
<div class="line"><a name="l00242"></a><span class="lineno"> 242</span>  <span class="keywordflow">if</span> (ptr == NULL) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00243"></a><span class="lineno"> 243</span>  </div>
|
|
<div class="line"><a name="l00244"></a><span class="lineno"> 244</span>  <span class="keywordflow">return</span> (<span class="keywordtype">char</span>*) &ptr->Name;</div>
|
|
<div class="line"><a name="l00245"></a><span class="lineno"> 245</span> }</div>
|
|
<div class="line"><a name="l00246"></a><span class="lineno"> 246</span>  </div>
|
|
<div class="line"><a name="l00247"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#aa968185cdc031dd53fce5f96e763cc26"> 247</a></span> uint16_t <a class="code" href="class_delay_imp_func_wrapper.html#aa968185cdc031dd53fce5f96e763cc26">DelayImpFuncWrapper::getHint</a>()</div>
|
|
<div class="line"><a name="l00248"></a><span class="lineno"> 248</span> {</div>
|
|
<div class="line"><a name="l00249"></a><span class="lineno"> 249</span>  <span class="keywordflow">if</span> (<a class="code" href="class_delay_imp_func_wrapper.html#a3b4e8d96c151873ca97513c0165348b6">isByOrdinal</a>() == <span class="keyword">true</span>) <span class="keywordflow">return</span> 0;</div>
|
|
<div class="line"><a name="l00250"></a><span class="lineno"> 250</span>  </div>
|
|
<div class="line"><a name="l00251"></a><span class="lineno"> 251</span>  IMAGE_IMPORT_BY_NAME* ptr = getImportByNamePtr();</div>
|
|
<div class="line"><a name="l00252"></a><span class="lineno"> 252</span>  <span class="keywordflow">if</span> (ptr == NULL) <span class="keywordflow">return</span> 0;</div>
|
|
<div class="line"><a name="l00253"></a><span class="lineno"> 253</span>  </div>
|
|
<div class="line"><a name="l00254"></a><span class="lineno"> 254</span>  <span class="keywordflow">return</span> ptr->Hint;</div>
|
|
<div class="line"><a name="l00255"></a><span class="lineno"> 255</span> }</div>
|
|
<div class="line"><a name="l00256"></a><span class="lineno"> 256</span>  </div>
|
|
<div class="line"><a name="l00257"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#aa3070cc1b024432ee1d3b589662af725"> 257</a></span> <span class="keywordtype">void</span>* <a class="code" href="class_delay_imp_func_wrapper.html#aa3070cc1b024432ee1d3b589662af725">DelayImpFuncWrapper::getFieldPtr</a>(<span class="keywordtype">size_t</span> fId, <span class="keywordtype">size_t</span> subField)</div>
|
|
<div class="line"><a name="l00258"></a><span class="lineno"> 258</span> {</div>
|
|
<div class="line"><a name="l00259"></a><span class="lineno"> 259</span>  <span class="keywordflow">if</span> (this->parentDir == NULL) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00260"></a><span class="lineno"> 260</span>  </div>
|
|
<div class="line"><a name="l00261"></a><span class="lineno"> 261</span>  <span class="keywordflow">if</span> (parentDir-><a class="code" href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">getPtr</a>() == NULL) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00262"></a><span class="lineno"> 262</span>  </div>
|
|
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span>  uint64_t offset = <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00264"></a><span class="lineno"> 264</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00265"></a><span class="lineno"> 265</span>  </div>
|
|
<div class="line"><a name="l00266"></a><span class="lineno"> 266</span>  <span class="keywordflow">switch</span> (fId) {</div>
|
|
<div class="line"><a name="l00267"></a><span class="lineno"> 267</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a> :</div>
|
|
<div class="line"><a name="l00268"></a><span class="lineno"> 268</span>  offset = parentDir-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">DelayImpEntryWrapper::INT</a>, &isOk); <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a name="l00269"></a><span class="lineno"> 269</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246aa7886fa29e29a13ef5e137c0c79c0e07">IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00270"></a><span class="lineno"> 270</span>  offset = parentDir-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">DelayImpEntryWrapper::IAT</a>, &isOk); <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a name="l00271"></a><span class="lineno"> 271</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246a3da94eaca46f2f4e5d7174d814303d41">BOUND_IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00272"></a><span class="lineno"> 272</span>  offset = parentDir-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23">DelayImpEntryWrapper::BOUND_IAT</a>, &isOk); <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a name="l00273"></a><span class="lineno"> 273</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ad88d0de1a744fdd3a23e5c98fa597147">UNLOAD_IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00274"></a><span class="lineno"> 274</span>  offset = parentDir-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab">DelayImpEntryWrapper::UNLOAD_IAT</a>, &isOk); <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a name="l00275"></a><span class="lineno"> 275</span>  <span class="keywordflow">default</span>: <span class="keywordflow">return</span> <a class="code" href="class_delay_imp_func_wrapper.html#af9b4d288d23e5b483eb88016c5e5cb92">getPtr</a>();</div>
|
|
<div class="line"><a name="l00276"></a><span class="lineno"> 276</span>  }</div>
|
|
<div class="line"><a name="l00277"></a><span class="lineno"> 277</span>  </div>
|
|
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span>  <span class="keywordflow">if</span> (isOk && offset != <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a> && offset != 0) {</div>
|
|
<div class="line"><a name="l00279"></a><span class="lineno"> 279</span>  offset += (this-><a class="code" href="class_exe_node_wrapper.html#aaf023e7c90b9e9c90ab69e6ae7ea2b65">entryNum</a> * ptrLen());</div>
|
|
<div class="line"><a name="l00280"></a><span class="lineno"> 280</span>  <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aT = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#ab8d6133f42ed4b4f4267f60dde4a3646">detectAddrType</a>(offset, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a>);</div>
|
|
<div class="line"><a name="l00281"></a><span class="lineno"> 281</span>  BYTE *ptr = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(offset, aT, <span class="keyword">static_cast<</span><a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a><span class="keyword">></span>(ptrLen()));</div>
|
|
<div class="line"><a name="l00282"></a><span class="lineno"> 282</span>  <span class="keywordflow">return</span> ptr;</div>
|
|
<div class="line"><a name="l00283"></a><span class="lineno"> 283</span>  }</div>
|
|
<div class="line"><a name="l00284"></a><span class="lineno"> 284</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00285"></a><span class="lineno"> 285</span> }</div>
|
|
<div class="line"><a name="l00286"></a><span class="lineno"> 286</span>  </div>
|
|
<div class="line"><a name="l00287"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#aea462a1e1a003bc6069bcda415c90d95"> 287</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a> <a class="code" href="class_delay_imp_func_wrapper.html#aea462a1e1a003bc6069bcda415c90d95">DelayImpFuncWrapper::callVia</a>()</div>
|
|
<div class="line"><a name="l00288"></a><span class="lineno"> 288</span> {</div>
|
|
<div class="line"><a name="l00289"></a><span class="lineno"> 289</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00290"></a><span class="lineno"> 290</span>  uint64_t offset = parentDir-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">DelayImpEntryWrapper::IAT</a>, &isOk);</div>
|
|
<div class="line"><a name="l00291"></a><span class="lineno"> 291</span>  <span class="keywordflow">if</span> (isOk && offset != <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a> && offset != 0) {</div>
|
|
<div class="line"><a name="l00292"></a><span class="lineno"> 292</span>  offset += (this-><a class="code" href="class_exe_node_wrapper.html#aaf023e7c90b9e9c90ab69e6ae7ea2b65">entryNum</a> * ptrLen());</div>
|
|
<div class="line"><a name="l00293"></a><span class="lineno"> 293</span>  <span class="keywordflow">return</span> offset;</div>
|
|
<div class="line"><a name="l00294"></a><span class="lineno"> 294</span>  }</div>
|
|
<div class="line"><a name="l00295"></a><span class="lineno"> 295</span>  <span class="keywordflow">return</span> <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>;</div>
|
|
<div class="line"><a name="l00296"></a><span class="lineno"> 296</span> }</div>
|
|
<div class="line"><a name="l00297"></a><span class="lineno"> 297</span>  </div>
|
|
<div class="line"><a name="l00298"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a9330c125070aa2495091042307c8100d"> 298</a></span> QString <a class="code" href="class_delay_imp_func_wrapper.html#a9330c125070aa2495091042307c8100d">DelayImpFuncWrapper::getFieldName</a>(<span class="keywordtype">size_t</span> fId)</div>
|
|
<div class="line"><a name="l00299"></a><span class="lineno"> 299</span> {</div>
|
|
<div class="line"><a name="l00300"></a><span class="lineno"> 300</span>  <span class="keywordflow">switch</span> (fId) {</div>
|
|
<div class="line"><a name="l00301"></a><span class="lineno"> 301</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Name Addr."</span>;</div>
|
|
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246aa7886fa29e29a13ef5e137c0c79c0e07">IAT_ADDR</a> : <span class="keywordflow">return</span> <span class="stringliteral">"IAT Addr."</span>;</div>
|
|
<div class="line"><a name="l00303"></a><span class="lineno"> 303</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246a3da94eaca46f2f4e5d7174d814303d41">BOUND_IAT_ADDR</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Bound IAT"</span>;</div>
|
|
<div class="line"><a name="l00304"></a><span class="lineno"> 304</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ad88d0de1a744fdd3a23e5c98fa597147">UNLOAD_IAT_ADDR</a> : <span class="keywordflow">return</span> <span class="stringliteral">"Unload IAT"</span>;</div>
|
|
<div class="line"><a name="l00305"></a><span class="lineno"> 305</span>  }</div>
|
|
<div class="line"><a name="l00306"></a><span class="lineno"> 306</span>  <span class="keywordflow">return</span> <span class="stringliteral">""</span>;</div>
|
|
<div class="line"><a name="l00307"></a><span class="lineno"> 307</span> }</div>
|
|
<div class="line"><a name="l00308"></a><span class="lineno"> 308</span>  </div>
|
|
<div class="line"><a name="l00309"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a8523b0b40770d614fe67ee6175d538d2"> 309</a></span> <a class="code" href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a> <a class="code" href="class_delay_imp_func_wrapper.html#a8523b0b40770d614fe67ee6175d538d2">DelayImpFuncWrapper::getFieldSize</a>(<span class="keywordtype">size_t</span> fieldId, <span class="keywordtype">size_t</span> subField)</div>
|
|
<div class="line"><a name="l00310"></a><span class="lineno"> 310</span> {</div>
|
|
<div class="line"><a name="l00311"></a><span class="lineno"> 311</span>  <span class="keywordflow">if</span> (!<a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>) <span class="keywordflow">return</span> 0;</div>
|
|
<div class="line"><a name="l00312"></a><span class="lineno"> 312</span>  <span class="keywordflow">if</span> (<a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a2f2044788eb57c73903dca8e6a0477c2">getBitMode</a>() == <a class="code" href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a>) {</div>
|
|
<div class="line"><a name="l00313"></a><span class="lineno"> 313</span>  <span class="keywordflow">return</span> <span class="keyword">sizeof</span> (ULONGLONG);</div>
|
|
<div class="line"><a name="l00314"></a><span class="lineno"> 314</span>  }</div>
|
|
<div class="line"><a name="l00315"></a><span class="lineno"> 315</span>  <span class="keywordflow">return</span> <span class="keyword">sizeof</span> (DWORD);</div>
|
|
<div class="line"><a name="l00316"></a><span class="lineno"> 316</span> }</div>
|
|
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  </div>
|
|
<div class="line"><a name="l00318"></a><span class="lineno"><a class="line" href="class_delay_imp_func_wrapper.html#a2d8546adf2b32cd7895bf3e5191f808d"> 318</a></span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> <a class="code" href="class_delay_imp_func_wrapper.html#a2d8546adf2b32cd7895bf3e5191f808d">DelayImpFuncWrapper::containsAddrType</a>(<span class="keywordtype">size_t</span> fId, <span class="keywordtype">size_t</span> subField)</div>
|
|
<div class="line"><a name="l00319"></a><span class="lineno"> 319</span> {</div>
|
|
<div class="line"><a name="l00320"></a><span class="lineno"> 320</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00321"></a><span class="lineno"> 321</span>  uint64_t offset = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(fId, &isOk);</div>
|
|
<div class="line"><a name="l00322"></a><span class="lineno"> 322</span>  <span class="keywordflow">if</span> (!isOk || offset == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a> || offset == 0) <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a>;</div>
|
|
<div class="line"><a name="l00323"></a><span class="lineno"> 323</span>  </div>
|
|
<div class="line"><a name="l00324"></a><span class="lineno"> 324</span>  <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aT = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#ab8d6133f42ed4b4f4267f60dde4a3646">detectAddrType</a>(offset, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a>);</div>
|
|
<div class="line"><a name="l00325"></a><span class="lineno"> 325</span>  <span class="keywordflow">switch</span> (fId) {</div>
|
|
<div class="line"><a name="l00326"></a><span class="lineno"> 326</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246aa7886fa29e29a13ef5e137c0c79c0e07">IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00327"></a><span class="lineno"> 327</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a> :</div>
|
|
<div class="line"><a name="l00328"></a><span class="lineno"> 328</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246a3da94eaca46f2f4e5d7174d814303d41">BOUND_IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00329"></a><span class="lineno"> 329</span>  <span class="keywordflow">case</span> <a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ad88d0de1a744fdd3a23e5c98fa597147">UNLOAD_IAT_ADDR</a> :</div>
|
|
<div class="line"><a name="l00330"></a><span class="lineno"> 330</span>  <span class="keywordflow">return</span> aT;</div>
|
|
<div class="line"><a name="l00331"></a><span class="lineno"> 331</span>  }</div>
|
|
<div class="line"><a name="l00332"></a><span class="lineno"> 332</span>  <span class="keywordflow">return</span> <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a>;</div>
|
|
<div class="line"><a name="l00333"></a><span class="lineno"> 333</span> }</div>
|
|
<div class="line"><a name="l00334"></a><span class="lineno"> 334</span>  </div>
|
|
<div class="line"><a name="l00335"></a><span class="lineno"> 335</span> IMAGE_IMPORT_BY_NAME* DelayImpFuncWrapper::getImportByNamePtr()</div>
|
|
<div class="line"><a name="l00336"></a><span class="lineno"> 336</span> {</div>
|
|
<div class="line"><a name="l00337"></a><span class="lineno"> 337</span>  <span class="keywordtype">bool</span> isOk = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00338"></a><span class="lineno"> 338</span>  uint64_t addr = this-><a class="code" href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">getNumValue</a>(<a class="code" href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">NAMETHUNK_ADDR</a>, &isOk);</div>
|
|
<div class="line"><a name="l00339"></a><span class="lineno"> 339</span>  <span class="keywordflow">if</span> (!isOk || addr == <a class="code" href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a>) <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00340"></a><span class="lineno"> 340</span>  </div>
|
|
<div class="line"><a name="l00341"></a><span class="lineno"> 341</span>  <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a> aT = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#ab8d6133f42ed4b4f4267f60dde4a3646">detectAddrType</a>(addr, <a class="code" href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a>);</div>
|
|
<div class="line"><a name="l00342"></a><span class="lineno"> 342</span>  BYTE *ptr = <a class="code" href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">m_Exe</a>-><a class="code" href="class_executable.html#a050187f305af627175d854d9e96f3c5e">getContentAt</a>(addr, aT, <span class="keyword">sizeof</span>(IMAGE_IMPORT_BY_NAME));</div>
|
|
<div class="line"><a name="l00343"></a><span class="lineno"> 343</span>  <span class="keywordflow">return</span> (IMAGE_IMPORT_BY_NAME*) ptr;</div>
|
|
<div class="line"><a name="l00344"></a><span class="lineno"> 344</span> }</div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_a9067dc831274514d508e98df05bf015d"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#a9067dc831274514d508e98df05bf015d">bufsize_t</a></div><div class="ttdeci">uint32_t bufsize_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00014">AbstractByteBuffer.h:14</a></div></div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_ab99058386f4a8bc4e8cd07fad8198178"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#ab99058386f4a8bc4e8cd07fad8198178">INVALID_ADDR</a></div><div class="ttdeci">const offset_t INVALID_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00018">AbstractByteBuffer.h:18</a></div></div>
|
|
<div class="ttc" id="a_abstract_byte_buffer_8h_html_aea96e09e4ebfca2845a36a4d9882f7f6"><div class="ttname"><a href="_abstract_byte_buffer_8h.html#aea96e09e4ebfca2845a36a4d9882f7f6">offset_t</a></div><div class="ttdeci">uint64_t offset_t</div><div class="ttdef"><b>Definition:</b> <a href="_abstract_byte_buffer_8h_source.html#l00017">AbstractByteBuffer.h:17</a></div></div>
|
|
<div class="ttc" id="a_delay_imp_dir_wrapper_8h_html"><div class="ttname"><a href="_delay_imp_dir_wrapper_8h.html">DelayImpDirWrapper.h</a></div></div>
|
|
<div class="ttc" id="a_p_e_file_8h_html"><div class="ttname"><a href="_p_e_file_8h.html">PEFile.h</a></div></div>
|
|
<div class="ttc" id="aclass_data_dir_entry_wrapper_html_aa3bd2e16d3fde61e1e58e5cd7377884f"><div class="ttname"><a href="class_data_dir_entry_wrapper.html#aa3bd2e16d3fde61e1e58e5cd7377884f">DataDirEntryWrapper::getDirEntryAddress</a></div><div class="ttdeci">offset_t getDirEntryAddress()</div><div class="ttdef"><b>Definition:</b> <a href="_data_dir_entry_wrapper_8cpp_source.html#l00019">DataDirEntryWrapper.cpp:19</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html">DelayImpDirWrapper</a></div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00008">DelayImpDirWrapper.h:9</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_a149fabf8dd4addebdd5683321632df91"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#a149fabf8dd4addebdd5683321632df91">DelayImpDirWrapper::firstDelayLd</a></div><div class="ttdeci">pe::IMAGE_DELAY_LOAD * firstDelayLd()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00024">DelayImpDirWrapper.h:24</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_a711d82e0717581501cb5e891518c7408"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#a711d82e0717581501cb5e891518c7408">DelayImpDirWrapper::getEntrySize</a></div><div class="ttdeci">bufsize_t getEntrySize()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00064">DelayImpDirWrapper.cpp:64</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_a9a65bd88e9cba04eec4d53c626e1f967"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#a9a65bd88e9cba04eec4d53c626e1f967">DelayImpDirWrapper::loadNextEntry</a></div><div class="ttdeci">virtual bool loadNextEntry(size_t cntr)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00034">DelayImpDirWrapper.cpp:34</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_aa430d309e6f9fc7c6eba0727305e1b6a"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#aa430d309e6f9fc7c6eba0727305e1b6a">DelayImpDirWrapper::getSize</a></div><div class="ttdeci">virtual bufsize_t getSize()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00058">DelayImpDirWrapper.cpp:58</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_abf00f0b715ea232e02a34daa7f410696"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#abf00f0b715ea232e02a34daa7f410696">DelayImpDirWrapper::DelayImpEntryWrapper</a></div><div class="ttdeci">friend class DelayImpEntryWrapper</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00028">DelayImpDirWrapper.h:28</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_adbcd845740f2cc234fbd08bae646cbc7"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#adbcd845740f2cc234fbd08bae646cbc7">DelayImpDirWrapper::getPtr</a></div><div class="ttdeci">virtual void * getPtr()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00052">DelayImpDirWrapper.cpp:52</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_dir_wrapper_html_afbf7c046cdc591573b7f8d7f308ec966"><div class="ttname"><a href="class_delay_imp_dir_wrapper.html#afbf7c046cdc591573b7f8d7f308ec966">DelayImpDirWrapper::is64</a></div><div class="ttdeci">bool is64()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00018">DelayImpDirWrapper.cpp:18</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html">DelayImpEntryWrapper</a></div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00031">DelayImpDirWrapper.h:32</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a13d4f9e687a61aa68741f039b2158d1e"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a13d4f9e687a61aa68741f039b2158d1e">DelayImpEntryWrapper::getFieldPtr</a></div><div class="ttdeci">virtual void * getFieldPtr(size_t fieldId, size_t subField)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00153">DelayImpDirWrapper.cpp:153</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a2a59df1fa18dcac641c18820d67ba4ab"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a2a59df1fa18dcac641c18820d67ba4ab">DelayImpEntryWrapper::getFieldName</a></div><div class="ttdeci">virtual QString getFieldName(size_t fieldId)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00171">DelayImpDirWrapper.cpp:171</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a4fb7884c5a6a8dbcaa4122d55bf4e2fc"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a4fb7884c5a6a8dbcaa4122d55bf4e2fc">DelayImpEntryWrapper::containsAddrType</a></div><div class="ttdeci">virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField=FIELD_NONE)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00186">DelayImpDirWrapper.cpp:186</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a59ca36c4ce27892ea6e8a6debf3d6343"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a59ca36c4ce27892ea6e8a6debf3d6343">DelayImpEntryWrapper::getLibraryName</a></div><div class="ttdeci">virtual char * getLibraryName()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00138">DelayImpDirWrapper.cpp:138</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a5cb33569a5f44b551d507ea95ac09362"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a5cb33569a5f44b551d507ea95ac09362">DelayImpEntryWrapper::getPtr</a></div><div class="ttdeci">virtual void * getPtr()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00102">DelayImpDirWrapper.cpp:102</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_a9b2dd20f330a44d5e22c9ef3beed5bd3"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#a9b2dd20f330a44d5e22c9ef3beed5bd3">DelayImpEntryWrapper::getSize</a></div><div class="ttdeci">virtual bufsize_t getSize()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00125">DelayImpDirWrapper.cpp:125</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab16e2e700ae85ed8f249549255af18e7"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab16e2e700ae85ed8f249549255af18e7">DelayImpEntryWrapper::getFirstImpByNamePtr</a></div><div class="ttdeci">virtual IMAGE_IMPORT_BY_NAME * getFirstImpByNamePtr()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00071">DelayImpDirWrapper.cpp:71</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa3125918209e5d5416b0a87b0b46a3086"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3125918209e5d5416b0a87b0b46a3086">DelayImpEntryWrapper::TIMESTAMP</a></div><div class="ttdeci">@ TIMESTAMP</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00043">DelayImpDirWrapper.h:43</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa3f88f0a8b5a0f8079b649a79033e0b23">DelayImpEntryWrapper::BOUND_IAT</a></div><div class="ttdeci">@ BOUND_IAT</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00041">DelayImpDirWrapper.h:41</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa5e00e2edc06b6b23b2d5486b376929ab">DelayImpEntryWrapper::UNLOAD_IAT</a></div><div class="ttdeci">@ UNLOAD_IAT</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00042">DelayImpDirWrapper.h:42</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa61ae1d2caf3631cd703e702c62bafa5d">DelayImpEntryWrapper::IAT</a></div><div class="ttdeci">@ IAT</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00039">DelayImpDirWrapper.h:39</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa77e5f11a0a737dd5444a5a8c9c82a50b"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa77e5f11a0a737dd5444a5a8c9c82a50b">DelayImpEntryWrapper::MOD</a></div><div class="ttdeci">@ MOD</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00038">DelayImpDirWrapper.h:38</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa89a76d323dd34b635c8cf3fa80e65f92"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa89a76d323dd34b635c8cf3fa80e65f92">DelayImpEntryWrapper::ATTRS</a></div><div class="ttdeci">@ ATTRS</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00036">DelayImpDirWrapper.h:36</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faa9f9a920f0b75abb118b86d05998f0767">DelayImpEntryWrapper::NAME</a></div><div class="ttdeci">@ NAME</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00037">DelayImpDirWrapper.h:37</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ab3020a74b9682cd49e18c1da1e8096faaf33d85056a643117a360425f97dd5d0f">DelayImpEntryWrapper::INT</a></div><div class="ttdeci">@ INT</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00040">DelayImpDirWrapper.h:40</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_abd79b0c4556c89d51d65d60d947629ee"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#abd79b0c4556c89d51d65d60d947629ee">DelayImpEntryWrapper::loadNextEntry</a></div><div class="ttdeci">bool loadNextEntry(size_t entryNum)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00082">DelayImpDirWrapper.cpp:82</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ac408ba898150ee41cdce32ec872e7500"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ac408ba898150ee41cdce32ec872e7500">DelayImpEntryWrapper::DelayImpFuncWrapper</a></div><div class="ttdeci">friend class DelayImpFuncWrapper</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00067">DelayImpDirWrapper.h:67</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_entry_wrapper_html_ae74d7479281a025c5bb1092f007e91f9"><div class="ttname"><a href="class_delay_imp_entry_wrapper.html#ae74d7479281a025c5bb1092f007e91f9">DelayImpEntryWrapper::getName</a></div><div class="ttdeci">virtual QString getName()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00131">DelayImpDirWrapper.cpp:131</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html"><div class="ttname"><a href="class_delay_imp_func_wrapper.html">DelayImpFuncWrapper</a></div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00071">DelayImpDirWrapper.h:72</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a2671ee0a9df826576e3746f625de7ace"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a2671ee0a9df826576e3746f625de7ace">DelayImpFuncWrapper::getFunctionName</a></div><div class="ttdeci">char * getFunctionName()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00236">DelayImpDirWrapper.cpp:236</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a2d8546adf2b32cd7895bf3e5191f808d"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a2d8546adf2b32cd7895bf3e5191f808d">DelayImpFuncWrapper::containsAddrType</a></div><div class="ttdeci">virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00318">DelayImpDirWrapper.cpp:318</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a3b4e8d96c151873ca97513c0165348b6"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a3b4e8d96c151873ca97513c0165348b6">DelayImpFuncWrapper::isByOrdinal</a></div><div class="ttdeci">bool isByOrdinal()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00208">DelayImpDirWrapper.cpp:208</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a4286619e7718b72b4df710d488829246a3da94eaca46f2f4e5d7174d814303d41"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246a3da94eaca46f2f4e5d7174d814303d41">DelayImpFuncWrapper::BOUND_IAT_ADDR</a></div><div class="ttdeci">@ BOUND_IAT_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00079">DelayImpDirWrapper.h:79</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a4286619e7718b72b4df710d488829246aa7886fa29e29a13ef5e137c0c79c0e07"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246aa7886fa29e29a13ef5e137c0c79c0e07">DelayImpFuncWrapper::IAT_ADDR</a></div><div class="ttdeci">@ IAT_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00078">DelayImpDirWrapper.h:78</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ab2b8e8d90868fc502f6d8d43dac3cf9f">DelayImpFuncWrapper::NAMETHUNK_ADDR</a></div><div class="ttdeci">@ NAMETHUNK_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00077">DelayImpDirWrapper.h:77</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a4286619e7718b72b4df710d488829246ad88d0de1a744fdd3a23e5c98fa597147"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a4286619e7718b72b4df710d488829246ad88d0de1a744fdd3a23e5c98fa597147">DelayImpFuncWrapper::UNLOAD_IAT_ADDR</a></div><div class="ttdeci">@ UNLOAD_IAT_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00080">DelayImpDirWrapper.h:80</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a8523b0b40770d614fe67ee6175d538d2"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a8523b0b40770d614fe67ee6175d538d2">DelayImpFuncWrapper::getFieldSize</a></div><div class="ttdeci">virtual bufsize_t getFieldSize(size_t fieldId, size_t subField=FIELD_NONE)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00309">DelayImpDirWrapper.cpp:309</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a8653063030b2fc79c04fcce9b6ae158b"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a8653063030b2fc79c04fcce9b6ae158b">DelayImpFuncWrapper::getOrdinal</a></div><div class="ttdeci">virtual uint64_t getOrdinal()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00223">DelayImpDirWrapper.cpp:223</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_a9330c125070aa2495091042307c8100d"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#a9330c125070aa2495091042307c8100d">DelayImpFuncWrapper::getFieldName</a></div><div class="ttdeci">virtual QString getFieldName(size_t fieldId)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00298">DelayImpDirWrapper.cpp:298</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_aa3070cc1b024432ee1d3b589662af725"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#aa3070cc1b024432ee1d3b589662af725">DelayImpFuncWrapper::getFieldPtr</a></div><div class="ttdeci">virtual void * getFieldPtr(size_t fieldId, size_t subField=FIELD_NONE)</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00257">DelayImpDirWrapper.cpp:257</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_aa968185cdc031dd53fce5f96e763cc26"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#aa968185cdc031dd53fce5f96e763cc26">DelayImpFuncWrapper::getHint</a></div><div class="ttdeci">uint16_t getHint()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00247">DelayImpDirWrapper.cpp:247</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_aea462a1e1a003bc6069bcda415c90d95"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#aea462a1e1a003bc6069bcda415c90d95">DelayImpFuncWrapper::callVia</a></div><div class="ttdeci">offset_t callVia()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8cpp_source.html#l00287">DelayImpDirWrapper.cpp:287</a></div></div>
|
|
<div class="ttc" id="aclass_delay_imp_func_wrapper_html_af9b4d288d23e5b483eb88016c5e5cb92"><div class="ttname"><a href="class_delay_imp_func_wrapper.html#af9b4d288d23e5b483eb88016c5e5cb92">DelayImpFuncWrapper::getPtr</a></div><div class="ttdeci">virtual void * getPtr()</div><div class="ttdef"><b>Definition:</b> <a href="_delay_imp_dir_wrapper_8h_source.html#l00088">DelayImpDirWrapper.h:88</a></div></div>
|
|
<div class="ttc" id="aclass_exe_element_wrapper_html_a85682570009a6c69fb22f035763a3c56"><div class="ttname"><a href="class_exe_element_wrapper.html#a85682570009a6c69fb22f035763a3c56">ExeElementWrapper::isBit64</a></div><div class="ttdeci">bool isBit64()</div><div class="ttdef"><b>Definition:</b> <a href="_exe_element_wrapper_8h_source.html#l00058">ExeElementWrapper.h:58</a></div></div>
|
|
<div class="ttc" id="aclass_exe_element_wrapper_html_a98ca205ec6f2d2deacd32327409a3539"><div class="ttname"><a href="class_exe_element_wrapper.html#a98ca205ec6f2d2deacd32327409a3539">ExeElementWrapper::getOffset</a></div><div class="ttdeci">offset_t getOffset()</div><div class="ttdef"><b>Definition:</b> <a href="_exe_element_wrapper_8cpp_source.html#l00039">ExeElementWrapper.cpp:39</a></div></div>
|
|
<div class="ttc" id="aclass_exe_element_wrapper_html_ad5100967cd4bb4831c0e96de7659d53e"><div class="ttname"><a href="class_exe_element_wrapper.html#ad5100967cd4bb4831c0e96de7659d53e">ExeElementWrapper::m_Exe</a></div><div class="ttdeci">Executable * m_Exe</div><div class="ttdef"><b>Definition:</b> <a href="_exe_element_wrapper_8h_source.html#l00065">ExeElementWrapper.h:65</a></div></div>
|
|
<div class="ttc" id="aclass_exe_element_wrapper_html_af742979e13e19e532cc42ab72b2a0f80"><div class="ttname"><a href="class_exe_element_wrapper.html#af742979e13e19e532cc42ab72b2a0f80">ExeElementWrapper::getNumValue</a></div><div class="ttdeci">virtual uint64_t getNumValue(size_t fieldId, size_t subField, bool *isOk)</div><div class="ttdef"><b>Definition:</b> <a href="_exe_element_wrapper_8cpp_source.html#l00073">ExeElementWrapper.cpp:73</a></div></div>
|
|
<div class="ttc" id="aclass_exe_node_wrapper_html_a7c22babccbf1bc935ad563d06c450995"><div class="ttname"><a href="class_exe_node_wrapper.html#a7c22babccbf1bc935ad563d06c450995">ExeNodeWrapper::entries</a></div><div class="ttdeci">std::vector< ExeNodeWrapper * > entries</div><div class="ttdef"><b>Definition:</b> <a href="_exe_node_wrapper_8h_source.html#l00054">ExeNodeWrapper.h:54</a></div></div>
|
|
<div class="ttc" id="aclass_exe_node_wrapper_html_a9c3516076bbc1fd16c9222fb56e36f57"><div class="ttname"><a href="class_exe_node_wrapper.html#a9c3516076bbc1fd16c9222fb56e36f57">ExeNodeWrapper::parentNode</a></div><div class="ttdeci">ExeNodeWrapper * parentNode</div><div class="ttdef"><b>Definition:</b> <a href="_exe_node_wrapper_8h_source.html#l00051">ExeNodeWrapper.h:51</a></div></div>
|
|
<div class="ttc" id="aclass_exe_node_wrapper_html_aacbf801e0cf579c0e16a7e27f8165693"><div class="ttname"><a href="class_exe_node_wrapper.html#aacbf801e0cf579c0e16a7e27f8165693">ExeNodeWrapper::getEntriesCount</a></div><div class="ttdeci">virtual size_t getEntriesCount()</div><div class="ttdef"><b>Definition:</b> <a href="_exe_node_wrapper_8h_source.html#l00020">ExeNodeWrapper.h:20</a></div></div>
|
|
<div class="ttc" id="aclass_exe_node_wrapper_html_aaf023e7c90b9e9c90ab69e6ae7ea2b65"><div class="ttname"><a href="class_exe_node_wrapper.html#aaf023e7c90b9e9c90ab69e6ae7ea2b65">ExeNodeWrapper::entryNum</a></div><div class="ttdeci">size_t entryNum</div><div class="ttdef"><b>Definition:</b> <a href="_exe_node_wrapper_8h_source.html#l00052">ExeNodeWrapper.h:52</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a050187f305af627175d854d9e96f3c5e"><div class="ttname"><a href="class_executable.html#a050187f305af627175d854d9e96f3c5e">Executable::getContentAt</a></div><div class="ttdeci">BYTE * getContentAt(offset_t offset, bufsize_t size, bool allowExceptions=false)</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00057">Executable.h:57</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5b">Executable::addr_type</a></div><div class="ttdeci">addr_type</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00035">Executable.h:35</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5ba3f1414297193a39037e1f72a7d46ec2f">Executable::NOT_ADDR</a></div><div class="ttdeci">@ NOT_ADDR</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00036">Executable.h:36</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5bab09fbc5c56c2c2f13f0318d67c72b8be">Executable::RVA</a></div><div class="ttdeci">@ RVA</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00038">Executable.h:38</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b"><div class="ttname"><a href="class_executable.html#a2202e0db9d88f3be2b26fc138ddd3b5badb8a64acd3f74166ea450698d025db3b">Executable::RAW</a></div><div class="ttdeci">@ RAW</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00037">Executable.h:37</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f"><div class="ttname"><a href="class_executable.html#a2f0aa130b569d7d8f56ec7c746d08684af342c76941072be4cee293757559587f">Executable::BITS_64</a></div><div class="ttdeci">@ BITS_64</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00032">Executable.h:32</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_a2f2044788eb57c73903dca8e6a0477c2"><div class="ttname"><a href="class_executable.html#a2f2044788eb57c73903dca8e6a0477c2">Executable::getBitMode</a></div><div class="ttdeci">virtual exe_bits getBitMode()</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00049">Executable.h:49</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_ab8d6133f42ed4b4f4267f60dde4a3646"><div class="ttname"><a href="class_executable.html#ab8d6133f42ed4b4f4267f60dde4a3646">Executable::detectAddrType</a></div><div class="ttdeci">Executable::addr_type detectAddrType(offset_t addr, Executable::addr_type hintType)</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8cpp_source.html#l00122">Executable.cpp:122</a></div></div>
|
|
<div class="ttc" id="aclass_executable_html_adcf60bc50efc0f27dd245baf5fab3b1b"><div class="ttname"><a href="class_executable.html#adcf60bc50efc0f27dd245baf5fab3b1b">Executable::isBit32</a></div><div class="ttdeci">static bool isBit32(Executable *exe)</div><div class="ttdef"><b>Definition:</b> <a href="_executable_8h_source.html#l00042">Executable.h:42</a></div></div>
|
|
<div class="ttc" id="aclass_import_base_dir_wrapper_html_ae3401167a9ee3eee123cb42728d90b42"><div class="ttname"><a href="class_import_base_dir_wrapper.html#ae3401167a9ee3eee123cb42728d90b42">ImportBaseDirWrapper::addMapping</a></div><div class="ttdeci">void addMapping(ExeNodeWrapper *func)</div><div class="ttdef"><b>Definition:</b> <a href="_import_base_dir_wrapper_8cpp_source.html#l00033">ImportBaseDirWrapper.cpp:33</a></div></div>
|
|
<div class="ttc" id="aclass_import_base_entry_wrapper_html_a320f9410912954ad911d42603a05ed2b"><div class="ttname"><a href="class_import_base_entry_wrapper.html#a320f9410912954ad911d42603a05ed2b">ImportBaseEntryWrapper::impDir</a></div><div class="ttdeci">ImportBaseDirWrapper * impDir</div><div class="ttdef"><b>Definition:</b> <a href="_import_base_dir_wrapper_8h_source.html#l00077">ImportBaseDirWrapper.h:77</a></div></div>
|
|
<div class="ttc" id="aclass_p_e_node_wrapper_html_ab6fa549a7490efc0a84ab0c39fe0ef95"><div class="ttname"><a href="class_p_e_node_wrapper.html#ab6fa549a7490efc0a84ab0c39fe0ef95">PENodeWrapper::m_PE</a></div><div class="ttdeci">PEFile * m_PE</div><div class="ttdef"><b>Definition:</b> <a href="_p_e_node_wrapper_8h_source.html#l00036">PENodeWrapper.h:36</a></div></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.1
|
|
</small></address>
|
|
</body>
|
|
</html>
|