52 lines
2.1 KiB
C
52 lines
2.1 KiB
C
|
#pragma once
|
||
|
|
enum LDR_DLL_NOTIFICATION_REASON
|
||
|
|
{
|
||
|
|
LDR_DLL_NOTIFICATION_REASON_LOADED = 1,
|
||
|
|
LDR_DLL_NOTIFICATION_REASON_UNLOADED = 2,
|
||
|
|
};
|
||
|
|
|
||
|
|
typedef struct tag_UNICODE_STRING {
|
||
|
|
USHORT Length;
|
||
|
|
USHORT MaximumLength;
|
||
|
|
PWSTR Buffer;
|
||
|
|
} __UNICODE_STRING, * PUNICODE_STRING, * PCUNICODE_STRING;
|
||
|
|
|
||
|
|
typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA {
|
||
|
|
ULONG Flags; //Reserved.
|
||
|
|
PCUNICODE_STRING FullDllName; //The full path name of the DLL module.
|
||
|
|
PCUNICODE_STRING BaseDllName; //The base file name of the DLL module.
|
||
|
|
PVOID DllBase; //A pointer to the base address for the DLL in memory.
|
||
|
|
ULONG SizeOfImage; //The size of the DLL image, in bytes.
|
||
|
|
} LDR_DLL_LOADED_NOTIFICATION_DATA, * PLDR_DLL_LOADED_NOTIFICATION_DATA;
|
||
|
|
|
||
|
|
typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA {
|
||
|
|
ULONG Flags; //Reserved.
|
||
|
|
PCUNICODE_STRING FullDllName; //The full path name of the DLL module.
|
||
|
|
PCUNICODE_STRING BaseDllName; //The base file name of the DLL module.
|
||
|
|
PVOID DllBase; //A pointer to the base address for the DLL in memory.
|
||
|
|
ULONG SizeOfImage; //The size of the DLL image, in bytes.
|
||
|
|
} LDR_DLL_UNLOADED_NOTIFICATION_DATA, * PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
|
||
|
|
|
||
|
|
typedef union _LDR_DLL_NOTIFICATION_DATA {
|
||
|
|
LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
|
||
|
|
LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
|
||
|
|
} LDR_DLL_NOTIFICATION_DATA, * PLDR_DLL_NOTIFICATION_DATA;
|
||
|
|
|
||
|
|
typedef VOID(CALLBACK* PLDR_DLL_NOTIFICATION_FUNCTION)(
|
||
|
|
_In_ ULONG NotificationReason,
|
||
|
|
_In_ PLDR_DLL_NOTIFICATION_DATA NotificationData,
|
||
|
|
_In_opt_ PVOID Context
|
||
|
|
);
|
||
|
|
|
||
|
|
typedef NTSTATUS(NTAPI* def_LdrRegisterDllNotification)(
|
||
|
|
_In_ ULONG Flags,
|
||
|
|
_In_ PLDR_DLL_NOTIFICATION_FUNCTION NotificationFunction,
|
||
|
|
_In_opt_ PVOID Context,
|
||
|
|
_Out_ PVOID* Cookie
|
||
|
|
);
|
||
|
|
|
||
|
|
typedef NTSTATUS(NTAPI* def_LdrUnregisterDllNotification)(
|
||
|
|
_In_ PVOID Cookie
|
||
|
|
);
|
||
|
|
|
||
|
|
typedef BOOL(WINAPI* def_FreeLibrary)(HMODULE hLibModule);
|