4

DetourImportFileCallback

Brian Gianforcaro edited this page 2020-08-22 00:25:06 -07:00

Table of Contents

• PF_DETOUR_IMPORT_FILE_CALLBACK
• Definition
• Parameters
• Return value

PF_DETOUR_IMPORT_FILE_CALLBACK

Pointer to function called once for each file enumerated by DetourEnumerateImports.

Definition

BOOL ImportFileCallback(
    _In_opt_ PVOID pContext,
    _In_opt_ HMODULE nOrdinal,
    _In_opt_ LPCSTR pszName
);

Parameters

pContext

Unmodified program specific context pointer passed as pContext argument to DetourEnumerateImports.

hModule

Module handle within the process of the imported file. NULL to indicate end of enumeration.

pszName

Name of imported file. NULL to indicate end of enumeration.

Return value

TRUE to continue enumeration of import files or FALSE to abort enumeration.

Overview

• Home
• Frequently Asked Questions
• Using Detours
• Interception of Binary Functions
• Payloads and DLL Import Editing
• Detouring 32-bit and 64-bit Processes
• Samples

API Reference

• Detouring Target Functions
• Finding Target Functions
• Accessing Loaded Binaries and Payloads
• Modifying Binaries
• Inserting DLLs and Payloads Into New Processes