#ifndef _NTLDR_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
#if (PHNT_VERSION >= PHNT_WIN8)
// rev from ResolveDelayLoadedAPI
/**
* Locates the target function of the specified import and replaces the function pointer in the import thunk with the target of the function implementation.
*
* @param ParentModuleBase The address of the base of the module importing a delay-loaded function. (NtCurrentImageBase)
* @param DelayloadDescriptor The address of the image delay import directory for the module to be loaded.
* @param FailureDllHook The address of a delay-load failure callback function for the specified DLL and process.
* @param FailureSystemHook The address of a delay-load failure callback function for the specified DLL and process.
* @param ThunkAddress The thunk data for the target function. Used to find the specific name table entry of the function.
* @param Flags Reserved; must be 0.
* @return The address of the import, or the failure stub for it.
* @remarks https://learn.microsoft.com/en-us/windows/win32/devnotes/resolvedelayloadedapi
*/
NTSYSAPI
PVOID
NTAPI
LdrResolveDelayLoadedAPI(
_In_ PVOID ParentModuleBase,
_In_ PCIMAGE_DELAYLOAD_DESCRIPTOR DelayloadDescriptor,
_In_opt_ PDELAYLOAD_FAILURE_DLL_CALLBACK FailureDllHook,
_In_opt_ PDELAYLOAD_FAILURE_SYSTEM_ROUTINE FailureSystemHook, // kernel32.DelayLoadFailureHook
_Out_ PIMAGE_THUNK_DATA ThunkAddress,
_Reserved_ ULONG Flags
);
View code on GitHub
No description available.