MCPcopy Create free account
hub / github.com/NtQuery/Scylla / readApisFromModuleList

Method readApisFromModuleList

Scylla/ApiReader.cpp:18–49  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

16//#define DEBUG_COMMENTS
17
18void ApiReader::readApisFromModuleList()
19{
20 if (Scylla::config[APIS_ALWAYS_FROM_DISK].isTrue())
21 {
22 readExportTableAlwaysFromDisk = true;
23 }
24 else
25 {
26 readExportTableAlwaysFromDisk = false;
27 }
28
29 for (unsigned int i = 0; i < moduleList.size();i++)
30 {
31 setModulePriority(&moduleList[i]);
32
33 if (moduleList[i].modBaseAddr + moduleList[i].modBaseSize > maxValidAddress)
34 {
35 maxValidAddress = moduleList[i].modBaseAddr + moduleList[i].modBaseSize;
36 }
37
38 Scylla::windowLog.log(L"Module parsing: %s",moduleList[i].fullPath);
39
40 if (!moduleList[i].isAlreadyParsed)
41 {
42 parseModule(&moduleList[i]);
43 }
44 }
45
46#ifdef DEBUG_COMMENTS
47 Scylla::debugLog.log(L"Address Min " PRINTF_DWORD_PTR_FULL L" Max " PRINTF_DWORD_PTR_FULL L"\nimagebase " PRINTF_DWORD_PTR_FULL L" maxValidAddress " PRINTF_DWORD_PTR_FULL, minApiAddress, maxApiAddress, targetImageBase ,maxValidAddress);
48#endif
49}
50
51void ApiReader::parseModule(ModuleInfo *module)
52{

Callers 3

ScyllaIatSearchFunction · 0.80
ScyllaIatFixAutoWFunction · 0.80

Calls 2

isTrueMethod · 0.80
logMethod · 0.80

Tested by

no test coverage detected