ldrfuncs.h File Reference

#include <umtypes.h>
#include <ldrtypes.h>

Include dependency graph for ldrfuncs.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
NTSTATUS NTAPI	LdrAccessResource (_In_ PVOID BaseAddress, _In_ PIMAGE_RESOURCE_DATA_ENTRY ResourceDataEntry, _Out_opt_ PVOID *Resource, _Out_opt_ PULONG Size)
NTSTATUS NTAPI	LdrFindResource_U (_In_ PVOID BaseAddress, _In_ PLDR_RESOURCE_INFO ResourceInfo, _In_ ULONG Level, _Out_ PIMAGE_RESOURCE_DATA_ENTRY *ResourceDataEntry)
NTSTATUS NTAPI	LdrEnumResources (_In_ PVOID BaseAddress, _In_ PLDR_RESOURCE_INFO ResourceInfo, _In_ ULONG Level, _Inout_ ULONG *ResourceCount, _Out_writes_to_(*ResourceCount, *ResourceCount) LDR_ENUM_RESOURCE_INFO *Resources)
NTSTATUS NTAPI	LdrFindResourceDirectory_U (_In_ PVOID BaseAddress, _In_ PLDR_RESOURCE_INFO ResourceInfo, _In_ ULONG Level, _Out_ PIMAGE_RESOURCE_DIRECTORY *ResourceDirectory)
NTSTATUS NTAPI	LdrLoadAlternateResourceModule (_In_ PVOID Module, _In_ PWSTR Buffer)
BOOLEAN NTAPI	LdrUnloadAlternateResourceModule (_In_ PVOID BaseAddress)
NTSTATUS NTAPI	LdrGetProcedureAddress (_In_ PVOID BaseAddress, _In_ PANSI_STRING Name, _In_ ULONG Ordinal, _Out_ PVOID *ProcedureAddress)
ULONG NTAPI	LdrRelocateImage (_In_ PVOID NewBase, _In_ PCCH LoaderName, _In_ ULONG Success, _In_ ULONG Conflict, _In_ ULONG Invalid)
NTSTATUS NTAPI	LdrLockLoaderLock (_In_ ULONG Flags, _Out_opt_ PULONG Disposition, _Out_opt_ PULONG_PTR Cookie)
NTSTATUS NTAPI	LdrUnlockLoaderLock (_In_ ULONG Flags, _In_opt_ ULONG Cookie)
BOOLEAN NTAPI	LdrVerifyMappedImageMatchesChecksum (_In_ PVOID BaseAddress, _In_ SIZE_T NumberOfBytes, _In_ ULONG FileLength)
PIMAGE_BASE_RELOCATION NTAPI	LdrProcessRelocationBlockLongLong (_In_ ULONG_PTR Address, _In_ ULONG Count, _In_ PUSHORT TypeOffset, _In_ LONGLONG Delta)
NTSTATUS NTAPI	LdrEnumerateLoadedModules (_In_ BOOLEAN ReservedFlag, _In_ PLDR_ENUM_CALLBACK EnumProc, _In_ PVOID Context)

Function Documentation

LdrAccessResource()

NTSTATUS NTAPI LdrAccessResource	(	_In_ PVOID	BaseAddress,
		_In_ PIMAGE_RESOURCE_DATA_ENTRY	ResourceDataEntry,
		_Out_opt_ PVOID *	Resource,
		_Out_opt_ PULONG	Size
	)

Referenced by FindBitmapResource(), get_manifest_in_module(), KiInitializeBugCheck(), KsLoadResource(), LoadResource(), NtGetVersionResource(), RtlFindMessage(), and search_manifest_in_module().

LdrEnumerateLoadedModules()

NTSTATUS NTAPI LdrEnumerateLoadedModules	(	_In_ BOOLEAN	ReservedFlag,
		_In_ PLDR_ENUM_CALLBACK	EnumProc,
		_In_ PVOID	Context
	)

LdrEnumResources()

NTSTATUS NTAPI LdrEnumResources	(	_In_ PVOID	BaseAddress,
		_In_ PLDR_RESOURCE_INFO	ResourceInfo,
		_In_ ULONG	Level,
		_Inout_ ULONG *	ResourceCount,
		_Out_writes_to_ *, *ResourceCount LDR_ENUM_RESOURCE_INFO *	Resources
	)

Definition at line 343 of file res.c.

{
    PUCHAR ResourceData;
    NTSTATUS Status;
    ULONG i, j, k;
    ULONG NumberOfTypeEntries, NumberOfNameEntries, NumberOfLangEntries;
    ULONG Count, MaxResourceCount;
    PIMAGE_RESOURCE_DIRECTORY TypeDirectory, NameDirectory, LangDirectory;
    PIMAGE_RESOURCE_DIRECTORY_ENTRY TypeEntry, NameEntry, LangEntry;
    PIMAGE_RESOURCE_DATA_ENTRY DataEntry;
    ULONG Size;
    LONG Result;
 
    /* If the caller wants data, get the maximum count of entries */
    MaxResourceCount = (Resources != NULL) ? *ResourceCount : 0;
 
    /* Default to 0 */
    *ResourceCount = 0;
 
    /* Locate the resource directory */
    ResourceData = RtlImageDirectoryEntryToData(ImageBase,
                                                TRUE,
                                                IMAGE_DIRECTORY_ENTRY_RESOURCE,
                                                &Size);
    if (ResourceData == NULL)
        return STATUS_RESOURCE_DATA_NOT_FOUND;
 
    /* The type directory is at the root, followed by the entries */
    TypeDirectory = (PIMAGE_RESOURCE_DIRECTORY)ResourceData;
    TypeEntry = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(TypeDirectory + 1);
 
    /* Get the number of entries in the type directory */
    NumberOfTypeEntries = TypeDirectory->NumberOfNamedEntries +
                          TypeDirectory->NumberOfIdEntries;
 
    /* Start with 0 resources and status success */
    Status = STATUS_SUCCESS;
    Count = 0;
 
    /* Loop all entries in the type directory */
    for (i = 0; i < NumberOfTypeEntries; ++i, ++TypeEntry)
    {
        /* Check if comparison of types is requested */
        if (Level > RESOURCE_TYPE_LEVEL)
        {
            /* Compare the type with the requested Type */
            Result = LdrpCompareResourceNames_U(ResourceData,
                                                TypeEntry,
                                                ResourceInfo->Type);
 
            /* Not equal, continue with next entry */
            if (Result != 0) continue;
        }
 
        /* The entry must point to the name directory */
        if (!TypeEntry->DataIsDirectory)
        {
            return STATUS_INVALID_IMAGE_FORMAT;
        }
 
        /* Get a pointer to the name subdirectory and it's first entry */
        NameDirectory = (PIMAGE_RESOURCE_DIRECTORY)(ResourceData +
                                                    TypeEntry->OffsetToDirectory);
        NameEntry = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(NameDirectory + 1);
 
        /* Get the number of entries in the name directory */
        NumberOfNameEntries = NameDirectory->NumberOfNamedEntries +
                              NameDirectory->NumberOfIdEntries;
 
        /* Loop all entries in the name directory */
        for (j = 0; j < NumberOfNameEntries; ++j, ++NameEntry)
        {
            /* Check if comparison of names is requested */
            if (Level > RESOURCE_NAME_LEVEL)
            {
                /* Compare the name with the requested name */
                Result = LdrpCompareResourceNames_U(ResourceData,
                                                    NameEntry,
                                                    ResourceInfo->Name);
 
                /* Not equal, continue with next entry */
                if (Result != 0) continue;
            }
 
            /* The entry must point to the language directory */
            if (!NameEntry->DataIsDirectory)
            {
                return STATUS_INVALID_IMAGE_FORMAT;
            }
 
            /* Get a pointer to the language subdirectory and it's first entry */
            LangDirectory = (PIMAGE_RESOURCE_DIRECTORY)(ResourceData +
                                                        NameEntry->OffsetToDirectory);
            LangEntry = (PIMAGE_RESOURCE_DIRECTORY_ENTRY)(LangDirectory + 1);
 
            /* Get the number of entries in the language directory */
            NumberOfLangEntries = LangDirectory->NumberOfNamedEntries +
                                  LangDirectory->NumberOfIdEntries;
 
            /* Loop all entries in the language directory */
            for (k = 0; k < NumberOfLangEntries; ++k, ++LangEntry)
            {
                /* Check if comparison of languages is requested */
                if (Level > RESOURCE_LANGUAGE_LEVEL)
                {
                    /* Compare the language with the requested language */
                    Result = LdrpCompareResourceNames_U(ResourceData,
                                                        LangEntry,
                                                        ResourceInfo->Language);
 
                    /* Not equal, continue with next entry */
                    if (Result != 0) continue;
                }
 
                /* This entry must point to data */
                if (LangEntry->DataIsDirectory)
                {
                    return STATUS_INVALID_IMAGE_FORMAT;
                }
 
                /* Get a pointer to the data entry */
                DataEntry = (PIMAGE_RESOURCE_DATA_ENTRY)(ResourceData +
                                                         LangEntry->OffsetToData);
 
                /* Check if there is still space to store the data */
                if (Count < MaxResourceCount)
                {
                    /* There is, fill the entry */
                    Resources[Count].Type =
                        NAME_FROM_RESOURCE_ENTRY(ResourceData, TypeEntry);
                    Resources[Count].Name =
                        NAME_FROM_RESOURCE_ENTRY(ResourceData, NameEntry);
                    Resources[Count].Language =
                        NAME_FROM_RESOURCE_ENTRY(ResourceData, LangEntry);
                    Resources[Count].Data = (PUCHAR)ImageBase + DataEntry->OffsetToData;
                    Resources[Count].Reserved = 0;
                    Resources[Count].Size = DataEntry->Size;
                }
                else
                {
                    /* There is not enough space, save error status */
                    Status = STATUS_INFO_LENGTH_MISMATCH;
                }
 
                /* Count this resource */
                ++Count;
            }
        }
    }
 
    /* Return the number of matching resources */
    *ResourceCount = Count;
    return Status;
}

Referenced by Test_Data(), and Test_Parameters().

LdrFindResource_U()

NTSTATUS NTAPI LdrFindResource_U	(	_In_ PVOID	BaseAddress,
		_In_ PLDR_RESOURCE_INFO	ResourceInfo,
		_In_ ULONG	Level,
		_Out_ PIMAGE_RESOURCE_DATA_ENTRY *	ResourceDataEntry
	)

Referenced by BasepProbeForDllManifest(), find_resourceA(), find_resourceW(), FindBitmapResource(), get_manifest_in_module(), KiInitializeBugCheck(), KsLoadResource(), NtGetVersionResource(), and RtlFindMessage().

LdrFindResourceDirectory_U()

NTSTATUS NTAPI LdrFindResourceDirectory_U	(	_In_ PVOID	BaseAddress,
		_In_ PLDR_RESOURCE_INFO	ResourceInfo,
		_In_ ULONG	Level,
		_Out_ PIMAGE_RESOURCE_DIRECTORY *	ResourceDirectory
	)

Referenced by EnumResourceLanguagesA(), EnumResourceLanguagesW(), EnumResourceNamesA(), EnumResourceNamesW(), EnumResourceTypesA(), and EnumResourceTypesW().

LdrGetProcedureAddress()

NTSTATUS NTAPI LdrGetProcedureAddress	(	_In_ PVOID	BaseAddress,
		_In_ PANSI_STRING	Name,
		_In_ ULONG	Ordinal,
		_Out_ PVOID *	ProcedureAddress
	)

LdrLoadAlternateResourceModule()

NTSTATUS NTAPI LdrLoadAlternateResourceModule	(	_In_ PVOID	Module,
		_In_ PWSTR	Buffer
	)

LdrLockLoaderLock()

NTSTATUS NTAPI LdrLockLoaderLock	(	_In_ ULONG	Flags,
		_Out_opt_ PULONG	Disposition,
		_Out_opt_ PULONG_PTR	Cookie
	)

LdrProcessRelocationBlockLongLong()

PIMAGE_BASE_RELOCATION NTAPI LdrProcessRelocationBlockLongLong	(	_In_ ULONG_PTR	Address,
		_In_ ULONG	Count,
		_In_ PUSHORT	TypeOffset,
		_In_ LONGLONG	Delta
	)

Referenced by LdrProcessRelocationBlock().

LdrRelocateImage()

ULONG NTAPI LdrRelocateImage	(	_In_ PVOID	NewBase,
		_In_ PCCH	LoaderName,
		_In_ ULONG	Success,
		_In_ ULONG	Conflict,
		_In_ ULONG	Invalid
	)

Referenced by ImgpLoadPEImage().

LdrUnloadAlternateResourceModule()

BOOLEAN NTAPI LdrUnloadAlternateResourceModule

(

_In_ PVOID

BaseAddress

)

LdrUnlockLoaderLock()

NTSTATUS NTAPI LdrUnlockLoaderLock	(	_In_ ULONG	Flags,
		_In_opt_ ULONG	Cookie
	)

LdrVerifyMappedImageMatchesChecksum()

BOOLEAN NTAPI LdrVerifyMappedImageMatchesChecksum	(	_In_ PVOID	BaseAddress,
		_In_ SIZE_T	NumberOfBytes,
		_In_ ULONG	FileLength
	)

Referenced by LdrVerifyImageMatchesChecksum(), and MmCheckSystemImage().