this variable is unused?

[broihon]

this variable is unused?

[Little-Ki]

Process of processing delayed input tables ... it load target module then set member ModuleHandleRVA to target module base, the following code seem does nothing?

[Little-Ki]

maybe insert code follow line 986 ? :
*pIAT = pFunc;

[Broihon]

The delay load IAT works differently than the "normal" IAT. It's a list of callbacks generated by the compiler that when called check if the required module is loaded. If not it loads the module and resolves the addresses. Then it forwards the call to the desired function.

LdrGetProcedureAddress however needs a buffer to work which is why I'm just passing pFunc to it. I'm using LdrGetProcedureAddress only to verify that the desired function exists.

[Broihon]

I did some more research it seems like the offset in the IAT itself gets redirected to the delayed import. So I should be able to patch it.

[Broihon]

ntRet = f->LdrGetProcedureAddress(ReCa<void *>(hDll), import, IMAGE_ORDINAL(pNameTable->u1.Ordinal), ReCa<void **>(pIAT));
Works fine, not sure how I missed this before. Thanks!