ImportsHandling.h
No OneTemporary
Actions

Size

2 KB

Subscribers

None

ImportsHandling.h
View Options

	#pragma once

	#include "Thunks.h"

	#include <atlbase.h>
	#include <atlapp.h>
	#include <atlctrls.h>

	class ImportsHandling
	{
	public:
	std::map<DWORD_PTR, ImportModuleThunk> moduleList;
	std::map<DWORD_PTR, ImportModuleThunk> moduleListNew;

	//bool addFunction(WCHAR * moduleName, char * name, DWORD_PTR va, DWORD_PTR rva, DWORD_PTR ordinal, bool valid, bool suspect);
	//bool addModule(WCHAR * moduleName, DWORD_PTR firstThunk);
	//
	ImportsHandling(CTreeViewCtrl& TreeImports) : TreeImports(TreeImports) { }

	void displayAllImports();
	void showImports(bool invalid, bool suspect);
	bool invalidateFunction(HTREEITEM selectedTreeNode);
	bool cutThunk( HTREEITEM selectedTreeNode );
	bool deleteTreeNode( HTREEITEM selectedTreeNode );

	void updateImportInTreeView(ImportThunk * importThunk);
	void updateModuleInTreeView(ImportModuleThunk * importThunk);
	DWORD_PTR getApiAddressByNode( HTREEITEM selectedTreeNode );
	void scanAndFixModuleList();
	void expandAllTreeNodes();
	void collapseAllTreeNodes();

	private:
	DWORD numberOfFunctions;

	WCHAR stringBuffer[600]; // o_O

	WCHAR tempString[300];

	CTreeViewCtrl& TreeImports;

	TV_INSERTSTRUCT tvInsert;
	HTREEITEM m_hItemFirstSel;

	HTREEITEM addDllToTreeView(CTreeViewCtrl& idTreeView, const WCHAR * dllName, DWORD_PTR firstThunk, size_t numberOfFunctions, bool valid);
	HTREEITEM addApiToTreeView(CTreeViewCtrl& idTreeView, HTREEITEM parentDll, ImportThunk * importThunk);


	bool isItemSelected(CTreeViewCtrl& hwndTV, HTREEITEM hItem);
	void unselectItem(CTreeViewCtrl& hwndTV, HTREEITEM htItem);
	bool selectItem(CTreeViewCtrl& hwndTV, HTREEITEM hItem, bool select = true);
	void setFocus(CTreeViewCtrl& hwndTV, HTREEITEM htItem);
	bool findNewModules( std::map<DWORD_PTR, ImportThunk> & thunkList );

	bool addModuleToModuleList(const WCHAR * moduleName, DWORD_PTR firstThunk);
	void addUnknownModuleToModuleList(DWORD_PTR firstThunk);
	bool addNotFoundApiToModuleList(ImportThunk * apiNotFound);
	bool addFunctionToModuleList(ImportThunk * apiFound);
	bool isNewModule(const WCHAR * moduleName);

	void changeExpandStateOfTreeNodes(UINT flag);


	};

File Metadata

Mime Type: text/x-c++
Expires: Sun, May 10, 4:26 PM (5 h, 33 m)
Storage Engine: local-disk
Storage Format: Raw Data
Storage Handle: ed/9f/657bef47c7b20cffcf6498f32f66

ImportsHandling.hNo OneTemporaryActions

ImportsHandling.hView Options

File Metadata

Event Timeline

ImportsHandling.h
No OneTemporary
Actions

ImportsHandling.h
View Options