Method updateImportsWithPluginResult

Scylla/DllInjectionPlugin.cpp:254–303

}

void DllInjectionPlugin::updateImportsWithPluginResult( PUNRESOLVED_IMPORT firstUnresImp, std::map<DWORD_PTR, ImportModuleThunk> & moduleList )
{
	std::map<DWORD_PTR, ImportModuleThunk>::iterator iterator1;
	std::map<DWORD_PTR, ImportThunk>::iterator iterator2;
	ImportModuleThunk * moduleThunk = 0;
	ImportThunk * importThunk = 0;
	ApiInfo * apiInfo = 0;
	bool isSuspect = 0;

	iterator1 = moduleList.begin();

	while (iterator1 != moduleList.end())
	{
		moduleThunk = &(iterator1->second);

		iterator2 = moduleThunk->thunkList.begin();

		while (iterator2 != moduleThunk->thunkList.end())
		{
			importThunk = &(iterator2->second);

			if (importThunk->valid == false)
			{
				if (apiReader->isApiAddressValid(firstUnresImp->InvalidApiAddress))
				{
					apiInfo = apiReader->getApiByVirtualAddress(firstUnresImp->InvalidApiAddress,&isSuspect);

					importThunk->suspect = isSuspect;
					importThunk->valid = true;
					importThunk->apiAddressVA = firstUnresImp->InvalidApiAddress;
					importThunk->hint = (WORD)apiInfo->hint;
					importThunk->ordinal = apiInfo->ordinal;
					strcpy_s(importThunk->name, apiInfo->name);
					wcscpy_s(importThunk->moduleName, apiInfo->module->getFilename());

					if (moduleThunk->moduleName[0] == L'?')
					{
						wcscpy_s(moduleThunk->moduleName, _countof(importThunk->moduleName), apiInfo->module->getFilename());
					}
				}
				
				firstUnresImp++;
			}

			iterator2++;
		}

		iterator1++;
	}
}