5

DetourBinaryFileCallback

Brian Gianforcaro edited this page 2020-08-22 00:25:06 -07:00

Table of Contents

• PF_DETOUR_BINARY_FILE_CALLBACK
• Definition
• Parameters
• Return value

PF_DETOUR_BINARY_FILE_CALLBACK

Pointer to function called once for file while editing an import table using the DetourBinaryEditImports API.

Definition

BOOL BinaryFileCallback(
    _In_opt_                  PVOID pContext,
    _In_                      LPCSTR pszOrigFile,
    _In_                      LPCSTR pszFile,
    _Outptr_result_maybenull_ LPCSTR * ppszOutFile
);

Parameters

pContext

Unmodified program specific context pointer passed as pContext argument to DetourBinaryEditImports.

pszOrigFile

Name of file listed in original import table.

pszFile

Name of file listed in current import table

ppszOutFile

Pointer to output desired import table name.

Return value

TRUE to continue editing import table or FALSE to abort.

Overview

• Home
• Frequently Asked Questions
• Using Detours
• Interception of Binary Functions
• Payloads and DLL Import Editing
• Detouring 32-bit and 64-bit Processes
• Samples

API Reference

• Detouring Target Functions
• Finding Target Functions
• Accessing Loaded Binaries and Payloads
• Modifying Binaries
• Inserting DLLs and Payloads Into New Processes