MCPcopy Create free account
hub / github.com/ReversecLabs/C3 / RtlInsertInvertedFunctionTable

Function RtlInsertInvertedFunctionTable

Src/CebuLoader/UnexportedWinApi.cpp:232–241  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

230
231#if defined _M_IX86
232 void RtlInsertInvertedFunctionTable(void* baseAddress, DWORD sizeOfImage)
233 {
234 auto rtlInsertInvertedFunctionTable = GetRtlInsertInvertedFunctionTable();
235 if (IsWindows8Point1OrGreater())
236 ((RtlInsertInvertedFunctionTableWin8Point1OrGreater)rtlInsertInvertedFunctionTable)(baseAddress, sizeOfImage);
237 else if (IsWindows8OrGreater())
238 ((RtlInsertInvertedFunctionTableWin8OrGreater)rtlInsertInvertedFunctionTable)(baseAddress, sizeOfImage);
239 else
240 ((RtlInsertInvertedFunctionTableWin7OrGreater)rtlInsertInvertedFunctionTable)(GetLdrpInvetedFunctionTable(), baseAddress, sizeOfImage);
241 }
242#endif // defined _M_IX86
243
244} // namespace FSecure::Loader

Callers 1

LoadPeFunction · 0.85

Calls 4

IsWindows8OrGreaterFunction · 0.70

Tested by

no test coverage detected