Files
Blackbone/doc/driver/html/_loader_8h_source.html
2014-09-23 12:01:22 +03:00

193 lines
20 KiB
HTML

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.8"/>
<title>BlackBone: C:/Users/Ton/Documents/Visual Studio 2013/Projects/BlackBone/src/BlackBoneDrv/Loader.h Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<script type="text/javascript">
$(document).ready(initResizable);
$(window).load(resizeHeight);
</script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
$(document).ready(function() { searchBox.OnSelectItem(0); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">BlackBone
</div>
<div id="projectbrief">Windows memory hacking library</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.8 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main&#160;Page</span></a></li>
<li><a href="annotated.html"><span>Data&#160;Structures</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
<li>
<div id="MSearchBox" class="MSearchBoxInactive">
<span class="left">
<img id="MSearchSelect" src="search/mag_sel.png"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
alt=""/>
<input type="text" id="MSearchField" value="Search" accesskey="S"
onfocus="searchBox.OnSearchFieldFocus(true)"
onblur="searchBox.OnSearchFieldFocus(false)"
onkeyup="searchBox.OnSearchFieldChange(event)"/>
</span><span class="right">
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
</span>
</div>
</li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File&#160;List</span></a></li>
<li><a href="globals.html"><span>Globals</span></a></li>
</ul>
</div>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
<div id="nav-tree">
<div id="nav-tree-contents">
<div id="nav-sync" class="sync"></div>
</div>
</div>
<div id="splitbar" style="-moz-user-select:none;"
class="ui-resizable-handle">
</div>
</div>
<script type="text/javascript">
$(document).ready(function(){initNavTree('_loader_8h_source.html','');});
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark">&#160;</span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark">&#160;</span>Data Structures</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark">&#160;</span>Files</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(3)"><span class="SelectionMark">&#160;</span>Functions</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(4)"><span class="SelectionMark">&#160;</span>Variables</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(5)"><span class="SelectionMark">&#160;</span>Typedefs</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(6)"><span class="SelectionMark">&#160;</span>Enumerations</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(7)"><span class="SelectionMark">&#160;</span>Enumerator</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(8)"><span class="SelectionMark">&#160;</span>Macros</a></div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div class="header">
<div class="headertitle">
<div class="title">Loader.h</div> </div>
</div><!--header-->
<div class="contents">
<a href="_loader_8h.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span>&#160;<span class="preprocessor">#pragma once</span></div>
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span>&#160;</div>
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="_imports_8h.html">Imports.h</a>&quot;</span></div>
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="_native_structs_8h.html">NativeStructs.h</a>&quot;</span></div>
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span>&#160;</div>
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span>&#160;<a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> <a class="code" href="_loader_8h.html#ad58dba8a31f0db044f654c9f8a928a8a">BBInitLdrData</a>( IN <a class="code" href="struct___k_l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y.html">PKLDR_DATA_TABLE_ENTRY</a> pThisModule );</div>
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span>&#160;</div>
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>&#160;<a class="code" href="struct___k_l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y.html">PKLDR_DATA_TABLE_ENTRY</a> <a class="code" href="_loader_8h.html#a0f480402673fa85e5efd11f2de760ba9">BBGetSystemModule</a>( IN PUNICODE_STRING pName, IN PVOID pAddress );</div>
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span>&#160;</div>
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span>&#160;PVOID <a class="code" href="_loader_8h.html#a390ed9e940e4afd22ca0b82b3145394f">BBGetUserModuleBase</a>( IN PEPROCESS pProcess, IN PUNICODE_STRING ModuleName, IN BOOLEAN isWow64 );</div>
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span>&#160;</div>
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span>&#160;PVOID <a class="code" href="_loader_8h.html#a04e18e8b7773f1a4c32ad9fee0e6717c">BBGetModuleExport</a>( IN PVOID pBase, IN PCCHAR name_ord );</div>
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>&#160;</div>
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span>&#160;<a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> <a class="code" href="_loader_8h.html#a60c721a39629feecef7fc6f64c440c37">BBResolveReferences</a>( IN PVOID pImageBase );</div>
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>&#160;</div>
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>&#160;<a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> <a class="code" href="_loader_8h.html#a56cd407ebacf8fcfbce76a6ff1e01c78">BBMMapDriver</a>( IN PUNICODE_STRING pPath );</div>
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>&#160;</div>
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span>&#160;<a class="code" href="_p_e_structs_8h.html#a15d30eb3ac8679523a9b6e336637a478">PIMAGE_BASE_RELOCATION</a></div>
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>&#160;<a class="code" href="_loader_8h.html#ade0e4317395a2d31c45616516472f0d7">LdrProcessRelocationBlockLongLong</a>(</div>
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span>&#160; IN ULONG_PTR VA,</div>
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span>&#160; IN ULONG SizeOfBlock,</div>
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>&#160; IN PUSHORT NextOffset,</div>
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span>&#160; IN LONGLONG Diff</div>
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>&#160; );</div>
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>&#160;</div>
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span>&#160;<a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a></div>
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>&#160;<a class="code" href="_loader_8h.html#a168ff5179f341b8fdc8af703f6c0f2a7">LdrRelocateImage</a> (</div>
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>&#160; IN PVOID NewBase,</div>
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Success,</div>
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Conflict,</div>
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Invalid</div>
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>&#160; );</div>
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>&#160;</div>
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>&#160;<a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a></div>
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>&#160;<a class="code" href="_loader_8h.html#afeed6150aa73d77c9f45ffcdcff27c4a">LdrRelocateImageWithBias</a>(</div>
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>&#160; IN PVOID NewBase,</div>
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>&#160; IN LONGLONG AdditionalBias,</div>
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Success,</div>
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Conflict,</div>
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>&#160; IN <a class="code" href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a> Invalid</div>
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>&#160; );</div>
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>&#160;</div>
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>&#160;<a class="code" href="_p_e_structs_8h.html#a15d30eb3ac8679523a9b6e336637a478">PIMAGE_BASE_RELOCATION</a></div>
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>&#160;<a class="code" href="_loader_8h.html#a56426f35f624104b034d8fa2f44c1b9f">LdrProcessRelocationBlock</a>(</div>
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>&#160; IN ULONG_PTR VA,</div>
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>&#160; IN ULONG SizeOfBlock,</div>
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>&#160; IN PUSHORT NextOffset,</div>
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>&#160; IN LONG_PTR Diff</div>
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>&#160; );</div>
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>&#160;</div>
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>&#160;<a class="code" href="_p_e_structs_8h.html#a15d30eb3ac8679523a9b6e336637a478">PIMAGE_BASE_RELOCATION</a></div>
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>&#160;<a class="code" href="_loader_8h.html#ade0e4317395a2d31c45616516472f0d7">LdrProcessRelocationBlockLongLong</a>(</div>
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>&#160; IN ULONG_PTR VA,</div>
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span>&#160; IN ULONG SizeOfBlock,</div>
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span>&#160; IN PUSHORT NextOffset,</div>
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>&#160; IN LONGLONG Diff</div>
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>&#160; );</div>
<div class="ttc" id="_loader_8h_html_ade0e4317395a2d31c45616516472f0d7"><div class="ttname"><a href="_loader_8h.html#ade0e4317395a2d31c45616516472f0d7">LdrProcessRelocationBlockLongLong</a></div><div class="ttdeci">PIMAGE_BASE_RELOCATION LdrProcessRelocationBlockLongLong(IN ULONG_PTR VA, IN ULONG SizeOfBlock, IN PUSHORT NextOffset, IN LONGLONG Diff)</div><div class="ttdef"><b>Definition:</b> ldrreloc.c:221</div></div>
<div class="ttc" id="_private_8h_html_afa7140c76ae020a5271b3181ccb8b512"><div class="ttname"><a href="_private_8h.html#afa7140c76ae020a5271b3181ccb8b512">NTSTATUS</a></div><div class="ttdeci">typedef NTSTATUS(NTAPI *fnNtCreateThreadEx)(OUT PHANDLE hThread</div></div>
<div class="ttc" id="_loader_8h_html_a56cd407ebacf8fcfbce76a6ff1e01c78"><div class="ttname"><a href="_loader_8h.html#a56cd407ebacf8fcfbce76a6ff1e01c78">BBMMapDriver</a></div><div class="ttdeci">NTSTATUS BBMMapDriver(IN PUNICODE_STRING pPath)</div><div class="ttdoc">Manually map driver into system space </div><div class="ttdef"><b>Definition:</b> Loader.c:459</div></div>
<div class="ttc" id="_loader_8h_html_a56426f35f624104b034d8fa2f44c1b9f"><div class="ttname"><a href="_loader_8h.html#a56426f35f624104b034d8fa2f44c1b9f">LdrProcessRelocationBlock</a></div><div class="ttdeci">PIMAGE_BASE_RELOCATION LdrProcessRelocationBlock(IN ULONG_PTR VA, IN ULONG SizeOfBlock, IN PUSHORT NextOffset, IN LONG_PTR Diff)</div><div class="ttdef"><b>Definition:</b> ldrreloc.c:205</div></div>
<div class="ttc" id="_loader_8h_html_a60c721a39629feecef7fc6f64c440c37"><div class="ttname"><a href="_loader_8h.html#a60c721a39629feecef7fc6f64c440c37">BBResolveReferences</a></div><div class="ttdeci">NTSTATUS BBResolveReferences(IN PVOID pImageBase)</div><div class="ttdoc">Resolve module references and fill the IAT </div><div class="ttdef"><b>Definition:</b> Loader.c:255</div></div>
<div class="ttc" id="_p_e_structs_8h_html_a15d30eb3ac8679523a9b6e336637a478"><div class="ttname"><a href="_p_e_structs_8h.html#a15d30eb3ac8679523a9b6e336637a478">PIMAGE_BASE_RELOCATION</a></div><div class="ttdeci">IMAGE_BASE_RELOCATION UNALIGNED * PIMAGE_BASE_RELOCATION</div><div class="ttdef"><b>Definition:</b> PEStructs.h:325</div></div>
<div class="ttc" id="_loader_8h_html_a390ed9e940e4afd22ca0b82b3145394f"><div class="ttname"><a href="_loader_8h.html#a390ed9e940e4afd22ca0b82b3145394f">BBGetUserModuleBase</a></div><div class="ttdeci">PVOID BBGetUserModuleBase(IN PEPROCESS pProcess, IN PUNICODE_STRING ModuleName, IN BOOLEAN isWow64)</div><div class="ttdoc">Get module base address by name </div><div class="ttdef"><b>Definition:</b> Loader.c:98</div></div>
<div class="ttc" id="_native_structs_8h_html"><div class="ttname"><a href="_native_structs_8h.html">NativeStructs.h</a></div></div>
<div class="ttc" id="_loader_8h_html_ad58dba8a31f0db044f654c9f8a928a8a"><div class="ttname"><a href="_loader_8h.html#ad58dba8a31f0db044f654c9f8a928a8a">BBInitLdrData</a></div><div class="ttdeci">NTSTATUS BBInitLdrData(IN PKLDR_DATA_TABLE_ENTRY pThisModule)</div><div class="ttdoc">Initialize loader stuff </div><div class="ttdef"><b>Definition:</b> Loader.c:23</div></div>
<div class="ttc" id="_loader_8h_html_a0f480402673fa85e5efd11f2de760ba9"><div class="ttname"><a href="_loader_8h.html#a0f480402673fa85e5efd11f2de760ba9">BBGetSystemModule</a></div><div class="ttdeci">PKLDR_DATA_TABLE_ENTRY BBGetSystemModule(IN PUNICODE_STRING pName, IN PVOID pAddress)</div><div class="ttdoc">Get address of a system module Either &#39;pName&#39; or &#39;pAddress&#39; is required to perform search ...</div><div class="ttdef"><b>Definition:</b> Loader.c:65</div></div>
<div class="ttc" id="_loader_8h_html_a168ff5179f341b8fdc8af703f6c0f2a7"><div class="ttname"><a href="_loader_8h.html#a168ff5179f341b8fdc8af703f6c0f2a7">LdrRelocateImage</a></div><div class="ttdeci">NTSTATUS LdrRelocateImage(IN PVOID NewBase, IN NTSTATUS Success, IN NTSTATUS Conflict, IN NTSTATUS Invalid)</div></div>
<div class="ttc" id="_loader_8h_html_afeed6150aa73d77c9f45ffcdcff27c4a"><div class="ttname"><a href="_loader_8h.html#afeed6150aa73d77c9f45ffcdcff27c4a">LdrRelocateImageWithBias</a></div><div class="ttdeci">NTSTATUS LdrRelocateImageWithBias(IN PVOID NewBase, IN LONGLONG AdditionalBias, IN NTSTATUS Success, IN NTSTATUS Conflict, IN NTSTATUS Invalid)</div></div>
<div class="ttc" id="struct___k_l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y_html"><div class="ttname"><a href="struct___k_l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y.html">_KLDR_DATA_TABLE_ENTRY</a></div><div class="ttdef"><b>Definition:</b> NativeStructs.h:461</div></div>
<div class="ttc" id="_imports_8h_html"><div class="ttname"><a href="_imports_8h.html">Imports.h</a></div></div>
<div class="ttc" id="_loader_8h_html_a04e18e8b7773f1a4c32ad9fee0e6717c"><div class="ttname"><a href="_loader_8h.html#a04e18e8b7773f1a4c32ad9fee0e6717c">BBGetModuleExport</a></div><div class="ttdeci">PVOID BBGetModuleExport(IN PVOID pBase, IN PCCHAR name_ord)</div><div class="ttdoc">Get exported function address </div><div class="ttdef"><b>Definition:</b> Loader.c:162</div></div>
</div><!-- fragment --></div><!-- contents -->
</div><!-- doc-content -->
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
<ul>
<li class="navelem"><a class="el" href="dir_1be4885ae0f8fc825ada64c048101ff4.html">Visual Studio 2013</a></li><li class="navelem"><a class="el" href="dir_cff6504ebdd213a64976c6fc552b82ee.html">Projects</a></li><li class="navelem"><a class="el" href="dir_b716da8d3aa0fe4ae2f6139a1f666f87.html">BlackBone</a></li><li class="navelem"><a class="el" href="dir_ad2d131fed674adc088bc470bbb2e438.html">src</a></li><li class="navelem"><a class="el" href="dir_ddc31af3ab12d58410e17a5b1105cec8.html">BlackBoneDrv</a></li><li class="navelem"><a class="el" href="_loader_8h.html">Loader.h</a></li>
<li class="footer">Generated on Tue Sep 23 2014 11:50:43 for BlackBone by
<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.8 </li>
</ul>
</div>
</body>
</html>