November 2007
Intermediate to advanced
848 pages
27h 15m
English
A function forwarder is an entry in a DLL’s export section that redirects a function call to another function in another DLL. For example, if you run the Visual C++ DumpBin utility on the Windows Vista Kernel32.dll, you’ll see a part of the output that looks like this:
C:\Windows\System32>DumpBin -Exports Kernel32.dll (some output omitted) 75 49 CloseThreadpoolIo (forwarded to NTDLL.TpReleaseIoCompletion) 76 4A CloseThreadpoolTimer (forwarded to NTDLL.TpReleaseTimer) 77 4B CloseThreadpoolWait (forwarded to NTDLL.TpReleaseWait) 78 4C CloseThreadpoolWork (forwarded to NTDLL.TpReleaseWork) (remainder of output omitted)
This output shows four forwarded functions. Whenever your application calls CloseThreadpoolIo, CloseThreadpoolTimer ...
Read now
Unlock full access