Process Hacker
maplib.c File Reference
#include <ph.h>

Go to the source code of this file.

Functions

VOID PhpMappedArchiveProbe (_In_ PPH_MAPPED_ARCHIVE MappedArchive, _In_ PVOID Address, _In_ SIZE_T Length)
 
NTSTATUS PhpGetMappedArchiveMemberFromHeader (_In_ PPH_MAPPED_ARCHIVE MappedArchive, _In_ PIMAGE_ARCHIVE_MEMBER_HEADER Header, _Out_ PPH_MAPPED_ARCHIVE_MEMBER Member)
 
NTSTATUS PhInitializeMappedArchive (_Out_ PPH_MAPPED_ARCHIVE MappedArchive, _In_ PVOID ViewBase, _In_ SIZE_T Size)
 
NTSTATUS PhLoadMappedArchive (_In_opt_ PWSTR FileName, _In_opt_ HANDLE FileHandle, _In_ BOOLEAN ReadOnly, _Out_ PPH_MAPPED_ARCHIVE MappedArchive)
 
NTSTATUS PhUnloadMappedArchive (_Inout_ PPH_MAPPED_ARCHIVE MappedArchive)
 
NTSTATUS PhGetNextMappedArchiveMember (_In_ PPH_MAPPED_ARCHIVE_MEMBER Member, _Out_ PPH_MAPPED_ARCHIVE_MEMBER NextMember)
 Gets the next archive member.
 
BOOLEAN PhIsMappedArchiveMemberShortFormat (_In_ PPH_MAPPED_ARCHIVE_MEMBER Member)
 
NTSTATUS PhGetMappedArchiveImportEntry (_In_ PPH_MAPPED_ARCHIVE_MEMBER Member, _Out_ PPH_MAPPED_ARCHIVE_IMPORT_ENTRY Entry)
 

Function Documentation

NTSTATUS PhGetMappedArchiveImportEntry ( _In_ PPH_MAPPED_ARCHIVE_MEMBER  Member,
_Out_ PPH_MAPPED_ARCHIVE_IMPORT_ENTRY  Entry 
)

Definition at line 369 of file maplib.c.

NTSTATUS PhGetNextMappedArchiveMember ( _In_ PPH_MAPPED_ARCHIVE_MEMBER  Member,
_Out_ PPH_MAPPED_ARCHIVE_MEMBER  NextMember 
)

Gets the next archive member.

Parameters
MemberAn archive member structure.
NextMemberA variable which receives a structure describing the next archive member. This pointer may be the same as the pointer specified in Member.

Definition at line 193 of file maplib.c.

NTSTATUS PhInitializeMappedArchive ( _Out_ PPH_MAPPED_ARCHIVE  MappedArchive,
_In_ PVOID  ViewBase,
_In_ SIZE_T  Size 
)

Definition at line 45 of file maplib.c.

BOOLEAN PhIsMappedArchiveMemberShortFormat ( _In_ PPH_MAPPED_ARCHIVE_MEMBER  Member)

Definition at line 358 of file maplib.c.

NTSTATUS PhLoadMappedArchive ( _In_opt_ PWSTR  FileName,
_In_opt_ HANDLE  FileHandle,
_In_ BOOLEAN  ReadOnly,
_Out_ PPH_MAPPED_ARCHIVE  MappedArchive 
)

Definition at line 132 of file maplib.c.

NTSTATUS PhpGetMappedArchiveMemberFromHeader ( _In_ PPH_MAPPED_ARCHIVE  MappedArchive,
_In_ PIMAGE_ARCHIVE_MEMBER_HEADER  Header,
_Out_ PPH_MAPPED_ARCHIVE_MEMBER  Member 
)

Definition at line 216 of file maplib.c.

VOID PhpMappedArchiveProbe ( _In_ PPH_MAPPED_ARCHIVE  MappedArchive,
_In_ PVOID  Address,
_In_ SIZE_T  Length 
)

Definition at line 176 of file maplib.c.

NTSTATUS PhUnloadMappedArchive ( _Inout_ PPH_MAPPED_ARCHIVE  MappedArchive)

Definition at line 166 of file maplib.c.