-
Notifications
You must be signed in to change notification settings - Fork 116
Expand file tree
/
Copy pathImportTable.h
More file actions
31 lines (21 loc) · 765 Bytes
/
ImportTable.h
File metadata and controls
31 lines (21 loc) · 765 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
#pragma once
typedef HMODULE(WINAPI* MM_IAT_RESOLVER_ENTRY)(LPCSTR lpModuleName);
typedef BOOL(WINAPI* MM_IAT_FREE_ENTRY)(HMODULE hModule);
typedef struct _MM_IAT_RESOLVER {
LIST_ENTRY InMmpIatResolverList;
MM_IAT_RESOLVER_ENTRY LoadLibraryProv;
MM_IAT_FREE_ENTRY FreeLibraryProv;
DWORD ReferenceCount;
}MM_IAT_RESOLVER, * PMM_IAT_RESOLVER;
VOID MemoryFreeImportTable(_In_ PMEMORYMODULE hMemoryModule);
NTSTATUS MemoryResolveImportTable(
_In_ LPBYTE base,
_In_ PIMAGE_NT_HEADERS lpNtHeaders,
_In_ PMEMORYMODULE hMemoryModule
);
HANDLE WINAPI MmRegisterImportTableResolver(
_In_ MM_IAT_RESOLVER_ENTRY LoadLibraryProv,
_In_ MM_IAT_FREE_ENTRY FreeLibraryProv
);
_Success_(return)
BOOL WINAPI MmRemoveImportTableResolver(_In_ HANDLE hMmIatResolver);