Restructure sandbox code to reduce dependencies pulled in by intercept code.

sandbox/win/src/service_resolver.h

Index: sandbox/win/src/service_resolver.h
diff --git a/sandbox/win/src/service_resolver.h b/sandbox/win/src/service_resolver.h
index 3eb9e0838109e322c9a871a02e6b02cead3a7090..00896922049ad45b569a111f97384cb97f57782b 100644
--- a/sandbox/win/src/service_resolver.h
+++ b/sandbox/win/src/service_resolver.h
@@ -43,6 +43,9 @@ class ServiceResolverThunk : public ResolverThunk {
   // Implementation of Resolver::GetThunkSize.
   virtual size_t GetThunkSize() const;
 
+  // Call this to set up ntdll_base_ which will allow for local patches.
+  virtual void AllowLocalPatches();

[cpu_(ooo_6.6-7.5), 2013/11/29 18:30:07]

Do we want a way to unset this? 

I am correct in thinking we don't run into issues because this lives in the elf
dll vs trying to autopatch AND being the broker in chrome.exe ?

[robertshield, 2013/11/29 19:29:08]

I first wrote this with a |bool allow| parameter, but I couldn't find a case
where we would want to unset it so I removed it.
That's correct. 

[cpu_(ooo_6.6-7.5), 2013/12/01 00:18:44]

Yeah, I thought ntdll_base_ was a static global, being a member var means we
don't have the problem I was thinking which was on tests. So never mind.

+
  protected:
   // The unit test will use this member to allow local patch on a buffer.
   HMODULE ntdll_base_;