MCPcopy Create free account
hub / github.com/NtQuery/Scylla / findDirectIatReferencePush

Method findDirectIatReferencePush

Scylla/IATReferenceScan.cpp:503–514  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

501}
502
503void IATReferenceScan::findDirectIatReferencePush( _DInst * instruction )
504{
505 IATReference ref;
506 ref.type = IAT_REFERENCE_DIRECT_PUSH;
507
508 if (instruction->size >= 5 && instruction->opcode == I_PUSH)
509 {
510 ref.targetAddressInIat = (DWORD_PTR)instruction->imm.qword;
511
512 checkMemoryRangeAndAddToList(&ref, instruction);
513 }
514}
515
516void IATReferenceScan::findDirectIatReferenceLea( _DInst * instruction )
517{

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected