DetourEnumerateImportsEx

DetourEnumerateImportsEx

Enumerate imports from a module.

Definition

BOOL DetourEnumerateImportsEx(
    _In_opt_ HMODULE hModule,
    _In_opt_ PVOID pContext,
    _In_opt_ PF_DETOUR_IMPORT_FILE_CALLBACK pfImportFile,
    _In_opt_ PF_DETOUR_IMPORT_FUNC_CALLBACK_EX pfImportFunc
    );

Parameters

hModule

The handle to the module whose imports are to be enumerated.

pContext

Program specific context that will be passed to pfImportFile and pfImportFunc.

pfImportFile

Callback function to be called once per file imported by module.

pfImportFunc

Callback function to be called once per function imported by module.

Return value

TRUE if module imports are enumerated; otherwise FALSE.

Error codes

The function sets one of the following error codes, as appropriate. The error code may be retrived after the function has returned by calling GetLastError.

ERROR_BAD_EXE_FORMAT

The MZ header of specified module is invalid.

ERROR_EXE_MARKED_INVALID

The NT COFF header of the specified module is invalid.

ERROR_INVALID_EXE_SIGNATURE

The NT COFF header of the specified module has an invalid signature.

Remarks

DetourEnumerateImports and DetourEnumerateImportsEx are very similar. DetourEnumerateImports's callback receives a pointer to the code (or less commonly, data) pointed to by the Import Address Table ("IAT"). DetourEnumerateImportsEx's callback receives a pointer into the IAT.

Related Samples

Tracebld.