Module Description

_LdrEnumResources et cetera...

Typedefs
typedef VOID(NTAPI *	PLDR_CALLBACK) (PVOID CallbackContext, PCHAR Name)

Functions
_NTFN_EXTERN NTSTATUS	_LdrFindResource_U (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, OUT PIMAGE_RESOURCE_DATA_ENTRY *ResourceDataEntry)

_NTFN_EXTERN NTSTATUS	_LdrFindResourceDirectory_U (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, OUT PIMAGE_RESOURCE_DIRECTORY *ResourceDirectory)

_NTFN_EXTERN NTSTATUS	_LdrEnumResources (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, INOUT ULONG ResourceCount, OUT LDR_ENUM_RESOURCE_INFO Resources)

_NTFN_EXTERN NTSTATUS	_LdrAccessResource (IN PVOID BaseAddress, IN PIMAGE_RESOURCE_DATA_ENTRY ResourceDataEntry, OPTOUT PVOID *Resource, OPTOUT PULONG Size)

_NTFN_EXTERN NTSTATUS	_LdrLoadAlternateResourceModule (IN PVOID Module, IN PWSTR Buffer)

_NTFN_EXTERN BOOLEAN	_LdrUnloadAlternateResourceModule (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrEnumerateLoadedModules (IN BOOLEAN ReservedFlag, IN PLDR_ENUM_CALLBACK EnumProc, IN PVOID Context)

_NTFN_EXTERN NTSTATUS	_LdrGetProcedureAddress (IN PVOID BaseAddress, IN PANSI_STRING Name, IN ULONG Ordinal, OUT PVOID *ProcedureAddress)

_NTFN_EXTERN NTSTATUS	_LdrLockLoaderLock (IN ULONG Flags, OPTOUT PULONG Disposition, OPTOUT PULONG Cookie)

_NTFN_EXTERN NTSTATUS	_LdrUnlockLoaderLock (IN ULONG Flags, OPTIN ULONG Cookie)

_NTFN_EXTERN BOOLEAN	_LdrVerifyMappedImageMatchesChecksum (IN PVOID BaseAddress, IN SIZE_T NumberOfBytes, IN ULONG FileLength)

_NTFN_EXTERN ULONG	_LdrRelocateImage (IN PVOID NewBase, IN PCCH LoaderName, IN ULONG Success, IN ULONG Conflict, IN ULONG Invalid)

_NTFN_EXTERN PIMAGE_BASE_RELOCATION	_LdrProcessRelocationBlockLongLong (IN ULONG_PTR Address, IN ULONG Count, IN PUSHORT TypeOffset, IN LONGLONG Delta)

_NTFN_EXTERN NTSTATUS	_LdrDisableThreadCalloutsForDll (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrLoadDll (OPTIN PWSTR SearchPath, OPTIN PULONG LoadFlags, IN PUNICODE_STRING Name, OPTOUT PVOID *BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrUnloadDll (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrAddRefDll (IN ULONG Flags, IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrGetDllHandle (OPTIN PWSTR DllPath, IN PULONG DllCharacteristics, IN PUNICODE_STRING DllName, OUT HANDLE *DllHandle)

_NTFN_EXTERN NTSTATUS	_LdrGetDllHandleEx (IN ULONG Flags, OPTIN PWSTR DllPath, OPTIN PULONG DllCharacteristics, IN PUNICODE_STRING DllName, OPTOUT HANDLE *DllHandle)

_NTFN_EXTERN NTSTATUS	_LdrFindEntryForAddress (IN PVOID Address, OUT PLDR_DATA_TABLE_ENTRY *Module)

_NTFN_EXTERN NTSTATUS	_LdrQueryImageFileExecutionOptions (IN PUNICODE_STRING SubKey, IN PCWSTR ValueName, IN ULONG ValueSize, OUT PVOID Buffer, IN ULONG BufferSize, OPTOUT PULONG RetunedLength)

_NTFN_EXTERN NTSTATUS	_LdrQueryProcessModuleInformation (OPTIN PRTL_PROCESS_MODULES ModuleInformation, OPTIN ULONG Size, OUT PULONG ReturnedSize)

_NTFN_EXTERN NTSTATUS	_LdrQueryImageFileKeyOption (IN HANDLE KeyHandle, IN PCWSTR ValueName, IN ULONG Type, OUT PVOID Buffer, IN ULONG BufferSize, OPTOUT PULONG ReturnedLength)

_NTFN_EXTERN NTSTATUS	_LdrOpenImageFileOptionsKey (IN PUNICODE_STRING SubKey, IN BOOLEAN Wow64, OUT PHANDLE NewKeyHandle)

_NTFN_EXTERN VOID	_LdrSetDllManifestProber (IN PLDR_MANIFEST_PROBER_ROUTINE Routine)

_NTFN_EXTERN NTSTATUS	_LdrShutdownProcess (VOID)

_NTFN_EXTERN NTSTATUS	_LdrShutdownThread (VOID)

_NTFN_EXTERN NTSTATUS	_LdrVerifyImageMatchesChecksum (IN HANDLE FileHandle, IN PLDR_CALLBACK Callback, IN PVOID CallbackContext, OUT PUSHORT ImageCharacterstics)

_NTFN_EXTERN PIMAGE_BASE_RELOCATION	_LdrProcessRelocationBlock (IN ULONG_PTR Address, IN ULONG Count, IN PUSHORT TypeOffset, IN LONG_PTR Delta)

_NTFN_EXTERN VOID	_LdrInitializeThunk (ULONG Unknown1, ULONG Unknown2, ULONG Unknown3, ULONG Unknown4)

Typedef Documentation

◆ PLDR_CALLBACK

typedef VOID(NTAPI * PLDR_CALLBACK) (PVOID CallbackContext, PCHAR Name)

Definition at line 1687 of file NtFunc.h.

Function Documentation

◆ _LdrFindResource_U()

_NTFN_EXTERN NTSTATUS _LdrFindResource_U	(	IN PVOID	BaseAddress,
		IN PLDR_RESOURCE_INFO	ResourceInfo,
		IN ULONG	Level,
		OUT PIMAGE_RESOURCE_DATA_ENTRY *	ResourceDataEntry
	)

◆ _LdrFindResourceDirectory_U()

_NTFN_EXTERN NTSTATUS _LdrFindResourceDirectory_U	(	IN PVOID	BaseAddress,
		IN PLDR_RESOURCE_INFO	ResourceInfo,
		IN ULONG	Level,
		OUT PIMAGE_RESOURCE_DIRECTORY *	ResourceDirectory
	)

◆ _LdrEnumResources()

_NTFN_EXTERN NTSTATUS _LdrEnumResources	(	IN PVOID	BaseAddress,
		IN PLDR_RESOURCE_INFO	ResourceInfo,
		IN ULONG	Level,
		INOUT ULONG *	ResourceCount,
		OUT LDR_ENUM_RESOURCE_INFO *	Resources
	)

◆ _LdrAccessResource()

_NTFN_EXTERN NTSTATUS _LdrAccessResource	(	IN PVOID	BaseAddress,
		IN PIMAGE_RESOURCE_DATA_ENTRY	ResourceDataEntry,
		OPTOUT PVOID *	Resource,
		OPTOUT PULONG	Size
	)

◆ _LdrLoadAlternateResourceModule()

_NTFN_EXTERN NTSTATUS _LdrLoadAlternateResourceModule	(	IN PVOID	Module,
		IN PWSTR	Buffer
	)

◆ _LdrUnloadAlternateResourceModule()

_NTFN_EXTERN BOOLEAN _LdrUnloadAlternateResourceModule ( IN PVOID BaseAddress )

◆ _LdrEnumerateLoadedModules()

_NTFN_EXTERN NTSTATUS _LdrEnumerateLoadedModules	(	IN BOOLEAN	ReservedFlag,
		IN PLDR_ENUM_CALLBACK	EnumProc,
		IN PVOID	Context
	)

◆ _LdrGetProcedureAddress()

_NTFN_EXTERN NTSTATUS _LdrGetProcedureAddress	(	IN PVOID	BaseAddress,
		IN PANSI_STRING	Name,
		IN ULONG	Ordinal,
		OUT PVOID *	ProcedureAddress
	)

◆ _LdrLockLoaderLock()

_NTFN_EXTERN NTSTATUS _LdrLockLoaderLock	(	IN ULONG	Flags,
		OPTOUT PULONG	Disposition,
		OPTOUT PULONG	Cookie
	)

◆ _LdrUnlockLoaderLock()

_NTFN_EXTERN NTSTATUS _LdrUnlockLoaderLock	(	IN ULONG	Flags,
		OPTIN ULONG	Cookie
	)

◆ _LdrVerifyMappedImageMatchesChecksum()

_NTFN_EXTERN BOOLEAN _LdrVerifyMappedImageMatchesChecksum	(	IN PVOID	BaseAddress,
		IN SIZE_T	NumberOfBytes,
		IN ULONG	FileLength
	)

◆ _LdrRelocateImage()

_NTFN_EXTERN ULONG _LdrRelocateImage	(	IN PVOID	NewBase,
		IN PCCH	LoaderName,
		IN ULONG	Success,
		IN ULONG	Conflict,
		IN ULONG	Invalid
	)

◆ _LdrProcessRelocationBlockLongLong()

_NTFN_EXTERN PIMAGE_BASE_RELOCATION _LdrProcessRelocationBlockLongLong	(	IN ULONG_PTR	Address,
		IN ULONG	Count,
		IN PUSHORT	TypeOffset,
		IN LONGLONG	Delta
	)

◆ _LdrDisableThreadCalloutsForDll()

_NTFN_EXTERN NTSTATUS _LdrDisableThreadCalloutsForDll ( IN PVOID BaseAddress )

◆ _LdrLoadDll()

_NTFN_EXTERN NTSTATUS _LdrLoadDll	(	OPTIN PWSTR	SearchPath,
		OPTIN PULONG	LoadFlags,
		IN PUNICODE_STRING	Name,
		OPTOUT PVOID *	BaseAddress
	)

◆ _LdrUnloadDll()

_NTFN_EXTERN NTSTATUS _LdrUnloadDll ( IN PVOID BaseAddress )

◆ _LdrAddRefDll()

_NTFN_EXTERN NTSTATUS _LdrAddRefDll	(	IN ULONG	Flags,
		IN PVOID	BaseAddress
	)

◆ _LdrGetDllHandle()

_NTFN_EXTERN NTSTATUS _LdrGetDllHandle	(	OPTIN PWSTR	DllPath,
		IN PULONG	DllCharacteristics,
		IN PUNICODE_STRING	DllName,
		OUT HANDLE *	DllHandle
	)

◆ _LdrGetDllHandleEx()

_NTFN_EXTERN NTSTATUS _LdrGetDllHandleEx	(	IN ULONG	Flags,
		OPTIN PWSTR	DllPath,
		OPTIN PULONG	DllCharacteristics,
		IN PUNICODE_STRING	DllName,
		OPTOUT HANDLE *	DllHandle
	)

◆ _LdrFindEntryForAddress()

_NTFN_EXTERN NTSTATUS _LdrFindEntryForAddress	(	IN PVOID	Address,
		OUT PLDR_DATA_TABLE_ENTRY *	Module
	)

◆ _LdrQueryImageFileExecutionOptions()

_NTFN_EXTERN NTSTATUS _LdrQueryImageFileExecutionOptions	(	IN PUNICODE_STRING	SubKey,
		IN PCWSTR	ValueName,
		IN ULONG	ValueSize,
		OUT PVOID	Buffer,
		IN ULONG	BufferSize,
		OPTOUT PULONG	RetunedLength
	)

◆ _LdrQueryProcessModuleInformation()

_NTFN_EXTERN NTSTATUS _LdrQueryProcessModuleInformation	(	OPTIN PRTL_PROCESS_MODULES	ModuleInformation,
		OPTIN ULONG	Size,
		OUT PULONG	ReturnedSize
	)

◆ _LdrQueryImageFileKeyOption()

_NTFN_EXTERN NTSTATUS _LdrQueryImageFileKeyOption	(	IN HANDLE	KeyHandle,
		IN PCWSTR	ValueName,
		IN ULONG	Type,
		OUT PVOID	Buffer,
		IN ULONG	BufferSize,
		OPTOUT PULONG	ReturnedLength
	)

◆ _LdrOpenImageFileOptionsKey()

_NTFN_EXTERN NTSTATUS _LdrOpenImageFileOptionsKey	(	IN PUNICODE_STRING	SubKey,
		IN BOOLEAN	Wow64,
		OUT PHANDLE	NewKeyHandle
	)

◆ _LdrSetDllManifestProber()

_NTFN_EXTERN VOID _LdrSetDllManifestProber ( IN PLDR_MANIFEST_PROBER_ROUTINE Routine )

◆ _LdrShutdownProcess()

_NTFN_EXTERN NTSTATUS _LdrShutdownProcess ( VOID )

◆ _LdrShutdownThread()

_NTFN_EXTERN NTSTATUS _LdrShutdownThread ( VOID )

◆ _LdrVerifyImageMatchesChecksum()

_NTFN_EXTERN NTSTATUS _LdrVerifyImageMatchesChecksum	(	IN HANDLE	FileHandle,
		IN PLDR_CALLBACK	Callback,
		IN PVOID	CallbackContext,
		OUT PUSHORT	ImageCharacterstics
	)

◆ _LdrProcessRelocationBlock()

_NTFN_EXTERN PIMAGE_BASE_RELOCATION _LdrProcessRelocationBlock	(	IN ULONG_PTR	Address,
		IN ULONG	Count,
		IN PUSHORT	TypeOffset,
		IN LONG_PTR	Delta
	)

◆ _LdrInitializeThunk()

_NTFN_EXTERN VOID _LdrInitializeThunk	(	ULONG	Unknown1,
		ULONG	Unknown2,
		ULONG	Unknown3,
		ULONG	Unknown4
	)