NameResolve.h

#pragma once

#include "../Include/Winheaders.h"
#include "../Include/Types.h"

#include <unordered_map>
#include <vector>
#include <string>

namespace blackbone
{

class NameResolve
{
    typedef std::unordered_map<std::wstring, std::vector<std::wstring>> mapApiSchema;
   
public:
    enum eResolveFlag
    {
        Default         = 0,    // Full resolve
        ApiSchemaOnly   = 1,    // Resolve only Api schema dlls
        EnsureFullPath  = 2,    // Make sure resulting path is full-qualified
        NoSearch        = 4,    // Don't perform file search, only resolve name
        Wow64           = 8,    // Reserved
    };

public:
    BLACKBONE_API ~NameResolve();

    BLACKBONE_API static NameResolve& Instance();

    BLACKBONE_API bool Initialize();

    BLACKBONE_API NTSTATUS ResolvePath( std::wstring& path,
                                        const std::wstring& baseName, 
                                        const std::wstring& searchDir,
                                        eResolveFlag flags,
                                        DWORD procID, 
                                        HANDLE actx = INVALID_HANDLE_VALUE );

    BLACKBONE_API NTSTATUS ProbeSxSRedirect( std::wstring& path, HANDLE actx = INVALID_HANDLE_VALUE );

private:
    // Ensure singleton
    NameResolve();
    NameResolve( const NameResolve& ) = delete;
    NameResolve& operator =( const NameResolve& ) = delete;

    std::wstring GetProcessDirectory( DWORD pid );

    template<typename T1, typename T2, typename T3, typename T4>
    bool InitializeP();

private:
    mapApiSchema _apiSchema;    // Api schema table
};


}