Files
Blackbone/doc/lib/html/_nt_loader_8h_source.html
2015-07-21 12:34:26 +03:00

249 lines
25 KiB
HTML

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.8"/>
<title>BlackBone: C:/Users/Ton/Documents/visual studio 2013/projects/blackbone/src/BlackBone/ManualMap/Native/NtLoader.h Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<script type="text/javascript">
$(document).ready(initResizable);
$(window).load(resizeHeight);
</script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
$(document).ready(function() { searchBox.OnSelectItem(0); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">BlackBone
</div>
<div id="projectbrief">Windows memory hacking library</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.8 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main&#160;Page</span></a></li>
<li><a href="annotated.html"><span>Classes</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
<li>
<div id="MSearchBox" class="MSearchBoxInactive">
<span class="left">
<img id="MSearchSelect" src="search/mag_sel.png"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
alt=""/>
<input type="text" id="MSearchField" value="Search" accesskey="S"
onfocus="searchBox.OnSearchFieldFocus(true)"
onblur="searchBox.OnSearchFieldFocus(false)"
onkeyup="searchBox.OnSearchFieldChange(event)"/>
</span><span class="right">
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
</span>
</div>
</li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File&#160;List</span></a></li>
</ul>
</div>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
<div id="nav-tree">
<div id="nav-tree-contents">
<div id="nav-sync" class="sync"></div>
</div>
</div>
<div id="splitbar" style="-moz-user-select:none;"
class="ui-resizable-handle">
</div>
</div>
<script type="text/javascript">
$(document).ready(function(){initNavTree('_nt_loader_8h_source.html','');});
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark">&#160;</span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark">&#160;</span>Classes</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark">&#160;</span>Functions</a></div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div class="header">
<div class="headertitle">
<div class="title">NtLoader.h</div> </div>
</div><!--header-->
<div class="contents">
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span>&#160;<span class="preprocessor">#pragma once</span></div>
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span>&#160;</div>
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span>&#160;<span class="preprocessor">#include &quot;../../Include/Winheaders.h&quot;</span></div>
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span>&#160;<span class="preprocessor">#include &quot;../../PE/PEImage.h&quot;</span></div>
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span>&#160;<span class="preprocessor">#include &quot;../../Include/NativeStructures.h&quot;</span></div>
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span>&#160;<span class="preprocessor">#include &quot;../../Include/Macro.h&quot;</span></div>
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span>&#160;</div>
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span>&#160;<span class="keyword">namespace </span><a class="code" href="namespaceblackbone.html">blackbone</a></div>
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span>&#160;{</div>
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span>&#160;</div>
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span>&#160;<span class="keyword">enum</span> LdrRefFlags</div>
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span>&#160;{</div>
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span>&#160; Ldr_None = 0x00, <span class="comment">// Do not create any reference</span></div>
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span>&#160; Ldr_ModList = 0x01, <span class="comment">// Add to module list - LdrpModuleIndex( win8 only ), InMemoryOrderModuleList( win7 only )</span></div>
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span>&#160; Ldr_HashTable = 0x02, <span class="comment">// Add to LdrpHashTable</span></div>
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span>&#160; Ldr_ThdCall = 0x04, <span class="comment">// Add to thread callback list (dllmain will be called with THREAD_ATTACH/DETACH reasons)</span></div>
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span>&#160; Ldr_All = 0xFF <span class="comment">// Add to everything</span></div>
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span>&#160;};</div>
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span>&#160;</div>
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>&#160;ENUM_OPS( LdrRefFlags )</div>
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span>&#160;</div>
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span>&#160;</div>
<div class="line"><a name="l00023"></a><span class="lineno"><a class="line" href="classblackbone_1_1_nt_ldr.html"> 23</a></span>&#160;class <a class="code" href="classblackbone_1_1_nt_ldr.html">NtLdr</a></div>
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span>&#160;{</div>
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span>&#160;<span class="keyword">public</span>:</div>
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span>&#160; BLACKBONE_API NtLdr( <span class="keyword">class</span> <a class="code" href="classblackbone_1_1_process.html">Process</a>&amp; proc );</div>
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>&#160; BLACKBONE_API ~NtLdr( <span class="keywordtype">void</span> );</div>
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>&#160;</div>
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>&#160; BLACKBONE_API <span class="keywordtype">bool</span> Init();</div>
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span>&#160;</div>
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>&#160; BLACKBONE_API <span class="keywordtype">bool</span> CreateNTReference(</div>
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>&#160; HMODULE hMod,</div>
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>&#160; <span class="keywordtype">size_t</span> ImageSize,</div>
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>&#160; <span class="keyword">const</span> std::wstring&amp; DllBasePath,</div>
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>&#160; <span class="keywordtype">size_t</span> entryPoint,</div>
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>&#160; LdrRefFlags flags = Ldr_All</div>
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>&#160; );</div>
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>&#160;</div>
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>&#160; BLACKBONE_API <span class="keywordtype">bool</span> AddStaticTLSEntry( <span class="keywordtype">void</span>* pModule, IMAGE_TLS_DIRECTORY *pTls );</div>
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>&#160;</div>
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>&#160; BLACKBONE_API <span class="keywordtype">bool</span> InsertInvertedFunctionTable( <span class="keywordtype">void</span>* ModuleBase, <span class="keywordtype">size_t</span> ImageSize, <span class="keywordtype">bool</span>&amp; safeseh );</div>
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>&#160;</div>
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>&#160; BLACKBONE_API <span class="keywordtype">bool</span> Unlink( ptr_t baseAddress, <span class="keyword">const</span> std::wstring&amp; name, eModType type );</div>
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>&#160;</div>
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>&#160; <span class="comment">// </span></div>
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>&#160; <span class="comment">// Get some not exported values</span></div>
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>&#160; <span class="comment">//</span></div>
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>&#160; BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrpInvertedFunctionTable( )<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrpInvertedFunctionTable; }</div>
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>&#160; BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrKernel32PatchAddress()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrKernel32PatchAddress; }</div>
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>&#160; BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> APC64PatchAddress()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _APC64PatchAddress; }</div>
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>&#160; BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrProtectMrdata()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrProtectMrdata; }</div>
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>&#160; </div>
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>&#160;<span class="keyword">private</span>:</div>
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>&#160;</div>
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>&#160; <span class="keywordtype">bool</span> FindLdrpHashTable();</div>
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span>&#160;</div>
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>&#160; <span class="keywordtype">bool</span> FindLdrpModuleIndexBase();</div>
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span>&#160;</div>
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>&#160; <span class="keywordtype">bool</span> ScanPatterns();</div>
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>&#160;</div>
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>&#160; <span class="keywordtype">bool</span> FindLdrHeap();</div>
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span>&#160;</div>
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>&#160; <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">_LDR_DATA_TABLE_ENTRY_W8</a>* InitW8Node(</div>
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span>&#160; <span class="keywordtype">void</span>* ModuleBase,</div>
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>&#160; <span class="keywordtype">size_t</span> ImageSize,</div>
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>&#160; <span class="keyword">const</span> std::wstring&amp; dllpath,</div>
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>&#160; <span class="keywordtype">size_t</span> entryPoint,</div>
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>&#160; ULONG&amp; outHash</div>
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>&#160; );</div>
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span>&#160;</div>
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>&#160; <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7.html">_LDR_DATA_TABLE_ENTRY_W7</a>* InitW7Node(</div>
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>&#160; <span class="keywordtype">void</span>* ModuleBase,</div>
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>&#160; <span class="keywordtype">size_t</span> ImageSize,</div>
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>&#160; <span class="keyword">const</span> std::wstring&amp; dllpath,</div>
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>&#160; <span class="keywordtype">size_t</span> entryPoint,</div>
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>&#160; ULONG&amp; outHash</div>
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>&#160; );</div>
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>&#160;</div>
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>&#160; <span class="keywordtype">void</span> InsertTreeNode( <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">_LDR_DATA_TABLE_ENTRY_W8</a>* pNode, <span class="keywordtype">size_t</span> modBase );</div>
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>&#160;</div>
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>&#160; <span class="keywordtype">void</span> InsertHashNode( <span class="keywordtype">size_t</span> pNodeLink, ULONG hash );</div>
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>&#160;</div>
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>&#160; <span class="keywordtype">void</span> InsertMemModuleNode( <span class="keywordtype">size_t</span> pNodeMemoryOrderLink, <span class="keywordtype">size_t</span> pNodeLoadOrderLink, <span class="keywordtype">size_t</span> pNodeInitOrderLink );</div>
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>&#160;</div>
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>&#160; <span class="keywordtype">void</span> InsertTailList( <span class="keywordtype">size_t</span> ListHead, <span class="keywordtype">size_t</span> Entry );</div>
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>&#160;</div>
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>&#160; ULONG HashString( <span class="keyword">const</span> std::wstring&amp; str );</div>
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span>&#160;</div>
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span>&#160; <span class="keyword">template</span>&lt;<span class="keyword">typename</span> T&gt;</div>
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>&#160; T* SetNode( T* ptr, <span class="keywordtype">void</span>* pModule );</div>
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span>&#160;</div>
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>&#160; <span class="keyword">template</span>&lt;<span class="keyword">typename</span> T&gt; </div>
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>&#160; ptr_t UnlinkFromLdr( ptr_t baseAddress, <span class="keyword">const</span> std::wstring&amp; name );</div>
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>&#160;</div>
<div class="line"><a name="l00206"></a><span class="lineno"> 206</span>&#160; <span class="keyword">template</span>&lt;<span class="keyword">typename</span> T&gt; </div>
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span>&#160; ptr_t UnlinkListEntry( <a class="code" href="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t.html">_LIST_ENTRY_T&lt;T&gt;</a> pListEntry, ptr_t head, <span class="keywordtype">size_t</span> ofst, ptr_t baseAddress );</div>
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span>&#160;</div>
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span>&#160; <span class="keyword">template</span>&lt;<span class="keyword">typename</span> T&gt;</div>
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>&#160; <span class="keywordtype">void</span> UnlinkListEntry( ptr_t pListLink );</div>
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>&#160;</div>
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>&#160; ptr_t UnlinkTreeNode( ptr_t ldrEntry );</div>
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span>&#160;</div>
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>&#160; NtLdr( <span class="keyword">const</span> NtLdr&amp; ) = <span class="keyword">delete</span>;</div>
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>&#160; NtLdr&amp; operator =(<span class="keyword">const</span> NtLdr&amp;) = <span class="keyword">delete</span>;</div>
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span>&#160;</div>
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span>&#160;<span class="keyword">private</span>:</div>
<div class="line"><a name="l00223"></a><span class="lineno"> 223</span>&#160; <span class="keyword">class </span><a class="code" href="classblackbone_1_1_process.html">Process</a>&amp; _process; <span class="comment">// Process memory routines</span></div>
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span>&#160;</div>
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>&#160; <span class="keywordtype">size_t</span> _LdrpHashTable = 0; <span class="comment">// LdrpHashTable address</span></div>
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>&#160; <span class="keywordtype">size_t</span> _LdrpModuleIndexBase = 0; <span class="comment">// LdrpModuleIndex address</span></div>
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>&#160; <span class="keywordtype">size_t</span> _LdrHeapBase = 0; <span class="comment">// Loader heap base address</span></div>
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>&#160; <span class="keywordtype">size_t</span> _LdrKernel32PatchAddress = 0; <span class="comment">// Address to patch to enable kernel32 loading under win7</span></div>
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>&#160; <span class="keywordtype">size_t</span> _APC64PatchAddress = 0; <span class="comment">// Address to patch for x64-&gt;WOW64 APC dispatching under win7</span></div>
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>&#160; <span class="keywordtype">size_t</span> _LdrpHandleTlsData = 0; <span class="comment">// LdrpHandleTlsData address</span></div>
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>&#160; <span class="keywordtype">size_t</span> _LdrpInvertedFunctionTable = 0; <span class="comment">// LdrpInvertedFunctionTable address</span></div>
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>&#160; <span class="keywordtype">size_t</span> _RtlInsertInvertedFunctionTable = 0; <span class="comment">// RtlInsertInvertedFunctionTable address</span></div>
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>&#160; <span class="keywordtype">size_t</span> _LdrProtectMrdata = 0; <span class="comment">// LdrProtectMrdata address</span></div>
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>&#160;</div>
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>&#160; std::map&lt;HMODULE, void*&gt; _nodeMap; <span class="comment">// Allocated native structures</span></div>
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span>&#160;};</div>
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span>&#160;</div>
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>&#160;}</div>
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>&#160;</div>
<div class="ttc" id="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8_html"><div class="ttname"><a href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">blackbone::_LDR_DATA_TABLE_ENTRY_W8</a></div><div class="ttdef"><b>Definition:</b> Win8Specific.h:59</div></div>
<div class="ttc" id="classblackbone_1_1_process_html"><div class="ttname"><a href="classblackbone_1_1_process.html">blackbone::Process</a></div><div class="ttdef"><b>Definition:</b> Process.h:80</div></div>
<div class="ttc" id="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t_html"><div class="ttname"><a href="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t.html">blackbone::_LIST_ENTRY_T</a></div><div class="ttdef"><b>Definition:</b> NativeStructures.h:40</div></div>
<div class="ttc" id="classblackbone_1_1_nt_ldr_html"><div class="ttname"><a href="classblackbone_1_1_nt_ldr.html">blackbone::NtLdr</a></div><div class="ttdef"><b>Definition:</b> NtLoader.h:23</div></div>
<div class="ttc" id="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7_html"><div class="ttname"><a href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7.html">blackbone::_LDR_DATA_TABLE_ENTRY_W7</a></div><div class="ttdef"><b>Definition:</b> Win7Specific.h:9</div></div>
<div class="ttc" id="namespaceblackbone_html"><div class="ttname"><a href="namespaceblackbone.html">blackbone</a></div><div class="ttdef"><b>Definition:</b> AsmHelper32.cpp:6</div></div>
</div><!-- fragment --></div><!-- contents -->
</div><!-- doc-content -->
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
<ul>
<li class="navelem"><a class="el" href="dir_3d9ef8cac7bf1be0f1e18672d28fd269.html">visual studio 2013</a></li><li class="navelem"><a class="el" href="dir_5401094cee307be7b33997a47da28669.html">projects</a></li><li class="navelem"><a class="el" href="dir_0d6d72948ced51bdfd5fc8cf7033b913.html">blackbone</a></li><li class="navelem"><a class="el" href="dir_84cd6de3d65226a2f8718fdae009bf30.html">src</a></li><li class="navelem"><a class="el" href="dir_4dc82cc14ae072731c8b0e8bbd4f10c1.html">BlackBone</a></li><li class="navelem"><a class="el" href="dir_e1c19cd16d65e5d5b627b88ca72f7266.html">ManualMap</a></li><li class="navelem"><a class="el" href="dir_a8b17d4e445f30a9ef1fd181dbb5f32d.html">Native</a></li><li class="navelem"><b>NtLoader.h</b></li>
<li class="footer">Generated on Tue Jul 21 2015 12:31:40 for BlackBone by
<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.8 </li>
</ul>
</div>
</body>
</html>