Merge pull request #11 from riverar/apisetmap/feature/show-sealed-namespaces

Print API set namespace sealed status
This commit is contained in:
Pavel Yosifovich
2019-01-02 09:24:37 +02:00
committed by GitHub
2 changed files with 5 additions and 8 deletions
+4 -2
View File
@@ -5,7 +5,7 @@
void PrintHeader() {
printf("ApiSetMap - list API Set mappings - version 1.0\n");
printf("(C)2017 Alex Ionescu and Pavel Yosifovich\n");
printf("(c) Alex Ionescu, Pavel Yosifovich, and Contributors\n");
printf("http://www.alex-ionescu.com\n\n");
}
@@ -22,13 +22,15 @@ int main() {
UNICODE_STRING nameString, valueString;
for (ULONG i = 0; i < apiSetMap->Count; i++) {
auto isSealed = nsEntry->Flags & API_SET_SCHEMA_ENTRY_FLAGS_SEALED != 0;
//
// Build a UNICODE_STRING for this contract
//
nameString.MaximumLength = static_cast<USHORT>(nsEntry->NameLength);
nameString.Length = static_cast<USHORT>(nsEntry->NameLength);
nameString.Buffer = reinterpret_cast<PWCHAR>(apiSetMapAsNumber + nsEntry->NameOffset);
printf("%56wZ.dll -> {", &nameString);
printf("%56wZ.dll -> %s{", &nameString, (isSealed ? "s" : "" ));
//
// Iterate the values (i.e.: the hosts for this set)
+1 -6
View File
@@ -1,11 +1,6 @@
#pragma once
LONG
RtlCompareUnicodeString(
_In_ PUNICODE_STRING Src1,
_In_ PUNICODE_STRING Src2,
_In_ BOOLEAN CaseInSensitive
);
#define API_SET_SCHEMA_ENTRY_FLAGS_SEALED 1
typedef struct _API_SET_NAMESPACE {
ULONG Version;