#include <winumcache.h>

Data Fields
RBNODE	RbNode
	RB tree node entry. More...

DWORD	Rva
	The RVA of this export. More...

DWORD	NameHashes [MAX_OFFSETS_PER_NAME]
	Hashes of the names pointing to this RVA. More...

DWORD	NameLens [MAX_OFFSETS_PER_NAME]
	Length of each name pointing to this RVA. More...

DWORD	NameOffsets [MAX_OFFSETS_PER_NAME]
	Name RVAs pointing to this exported RVA. More...

DWORD	NumberOfOffsets
	Number of symbols pointing to the exported RVA. More...

PCHAR	Names [MAX_OFFSETS_PER_NAME]
	The names pointing to this RVA. Each name will point inside the Names structure inside WINUM_CACHE_EXPORTS. More...

Detailed Description

Describes a cached exported RVA (Relative Virtual Address).

Definition at line 19 of file winumcache.h.

Field Documentation

◆ NameHashes

DWORD _WINUM_CACHE_EXPORT::NameHashes[MAX_OFFSETS_PER_NAME]

Hashes of the names pointing to this RVA.

Definition at line 24 of file winumcache.h.

Referenced by IntWinModCacheFixNamePointers().

◆ NameLens

DWORD _WINUM_CACHE_EXPORT::NameLens[MAX_OFFSETS_PER_NAME]

Length of each name pointing to this RVA.

Definition at line 25 of file winumcache.h.

Referenced by IntAlertEptFillFromVictimZone(), IntSerializeExport(), IntWinModCacheFixNamePointers(), IntWinProcHandleCopyMemory(), IntWinThrHandleQueueApc(), and IntWinThrHandleThreadHijack().

◆ NameOffsets

DWORD _WINUM_CACHE_EXPORT::NameOffsets[MAX_OFFSETS_PER_NAME]

Name RVAs pointing to this exported RVA.

Definition at line 26 of file winumcache.h.

Referenced by IntWinModCacheFixNamePointers(), and IntWinModHandleExportsInMemory().

◆ Names

PCHAR _WINUM_CACHE_EXPORT::Names[MAX_OFFSETS_PER_NAME]

The names pointing to this RVA. Each name will point inside the Names structure inside WINUM_CACHE_EXPORTS.

Definition at line 31 of file winumcache.h.

Referenced by IntAlertEptFillFromVictimZone(), IntExceptKernelUserLogWindowsInformation(), IntExceptUserLogWindowsInformation(), IntSerializeExport(), IntWinModCacheFixNamePointers(), IntWinProcHandleCopyMemory(), IntWinThrHandleQueueApc(), and IntWinThrHandleThreadHijack().

◆ NumberOfOffsets

DWORD _WINUM_CACHE_EXPORT::NumberOfOffsets

Number of symbols pointing to the exported RVA.

Definition at line 27 of file winumcache.h.

Referenced by IntAlertEptFillFromVictimZone(), IntExceptKernelUserLogWindowsInformation(), IntExceptUserLogWindowsInformation(), IntSerializeExport(), IntWinModCacheFixNamePointers(), IntWinModHandleExportsInMemory(), IntWinProcHandleCopyMemory(), IntWinThrHandleQueueApc(), and IntWinThrHandleThreadHijack().

◆ RbNode

RBNODE _WINUM_CACHE_EXPORT::RbNode

RB tree node entry.

Definition at line 21 of file winumcache.h.

Referenced by IntWinModHandleExportsInMemory(), and IntWinUmModCacheExportFind().

◆ Rva

DWORD _WINUM_CACHE_EXPORT::Rva

The RVA of this export.

Definition at line 23 of file winumcache.h.

Referenced by IntAlertEptFillFromVictimZone(), IntExceptKernelUserLogWindowsInformation(), IntExceptUserLogWindowsInformation(), IntSerializeExport(), IntWinModCacheExportNodeCompare(), IntWinModCacheExportNodeCompareWithErorr(), IntWinModCacheFixNamePointers(), IntWinModHandleExportsInMemory(), IntWinProcHandleCopyMemory(), IntWinThrHandleQueueApc(), IntWinThrHandleThreadHijack(), and IntWinUmModCacheExportFind().

The documentation for this struct was generated from the following file:

introcore/include/winumcache.h

Data Fields