mirror of
https://github.com/DarthTon/Blackbone.git
synced 2026-10-29 12:13:24 +08:00
249 lines
25 KiB
HTML
249 lines
25 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.8.8"/>
|
|
<title>BlackBone: C:/Users/Ton/Documents/visual studio 2013/projects/blackbone/src/BlackBone/ManualMap/Native/NtLoader.h Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="navtree.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="resize.js"></script>
|
|
<script type="text/javascript" src="navtree.js"></script>
|
|
<script type="text/javascript">
|
|
$(document).ready(initResizable);
|
|
$(window).load(resizeHeight);
|
|
</script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<script type="text/javascript">
|
|
$(document).ready(function() { searchBox.OnSelectItem(0); });
|
|
</script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td style="padding-left: 0.5em;">
|
|
<div id="projectname">BlackBone
|
|
</div>
|
|
<div id="projectbrief">Windows memory hacking library</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.8.8 -->
|
|
<script type="text/javascript">
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search');
|
|
</script>
|
|
<div id="navrow1" class="tabs">
|
|
<ul class="tablist">
|
|
<li><a href="index.html"><span>Main Page</span></a></li>
|
|
<li><a href="annotated.html"><span>Classes</span></a></li>
|
|
<li class="current"><a href="files.html"><span>Files</span></a></li>
|
|
<li>
|
|
<div id="MSearchBox" class="MSearchBoxInactive">
|
|
<span class="left">
|
|
<img id="MSearchSelect" src="search/mag_sel.png"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
alt=""/>
|
|
<input type="text" id="MSearchField" value="Search" accesskey="S"
|
|
onfocus="searchBox.OnSearchFieldFocus(true)"
|
|
onblur="searchBox.OnSearchFieldFocus(false)"
|
|
onkeyup="searchBox.OnSearchFieldChange(event)"/>
|
|
</span><span class="right">
|
|
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
|
|
</span>
|
|
</div>
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
<div id="navrow2" class="tabs2">
|
|
<ul class="tablist">
|
|
<li><a href="files.html"><span>File List</span></a></li>
|
|
</ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div id="side-nav" class="ui-resizable side-nav-resizable">
|
|
<div id="nav-tree">
|
|
<div id="nav-tree-contents">
|
|
<div id="nav-sync" class="sync"></div>
|
|
</div>
|
|
</div>
|
|
<div id="splitbar" style="-moz-user-select:none;"
|
|
class="ui-resizable-handle">
|
|
</div>
|
|
</div>
|
|
<script type="text/javascript">
|
|
$(document).ready(function(){initNavTree('_nt_loader_8h_source.html','');});
|
|
</script>
|
|
<div id="doc-content">
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark"> </span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark"> </span>Classes</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark"> </span>Functions</a></div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">NtLoader.h</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="preprocessor">#pragma once</span></div>
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> </div>
|
|
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="preprocessor">#include "../../Include/Winheaders.h"</span></div>
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="preprocessor">#include "../../PE/PEImage.h"</span></div>
|
|
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="preprocessor">#include "../../Include/NativeStructures.h"</span></div>
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="preprocessor">#include "../../Include/Macro.h"</span></div>
|
|
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span> </div>
|
|
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="keyword">namespace </span><a class="code" href="namespaceblackbone.html">blackbone</a></div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> {</div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> </div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="keyword">enum</span> LdrRefFlags</div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> {</div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span>  Ldr_None = 0x00, <span class="comment">// Do not create any reference</span></div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span>  Ldr_ModList = 0x01, <span class="comment">// Add to module list - LdrpModuleIndex( win8 only ), InMemoryOrderModuleList( win7 only )</span></div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span>  Ldr_HashTable = 0x02, <span class="comment">// Add to LdrpHashTable</span></div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span>  Ldr_ThdCall = 0x04, <span class="comment">// Add to thread callback list (dllmain will be called with THREAD_ATTACH/DETACH reasons)</span></div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span>  Ldr_All = 0xFF <span class="comment">// Add to everything</span></div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span> };</div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> </div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span> ENUM_OPS( LdrRefFlags )</div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span> </div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> </div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"><a class="line" href="classblackbone_1_1_nt_ldr.html"> 23</a></span> class <a class="code" href="classblackbone_1_1_nt_ldr.html">NtLdr</a></div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span> {</div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span> <span class="keyword">public</span>:</div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span>  BLACKBONE_API NtLdr( <span class="keyword">class</span> <a class="code" href="classblackbone_1_1_process.html">Process</a>& proc );</div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  BLACKBONE_API ~NtLdr( <span class="keywordtype">void</span> );</div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span> </div>
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>  BLACKBONE_API <span class="keywordtype">bool</span> Init();</div>
|
|
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span> </div>
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  BLACKBONE_API <span class="keywordtype">bool</span> CreateNTReference(</div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  HMODULE hMod,</div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  <span class="keywordtype">size_t</span> ImageSize,</div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  <span class="keyword">const</span> std::wstring& DllBasePath,</div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  <span class="keywordtype">size_t</span> entryPoint,</div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>  LdrRefFlags flags = Ldr_All</div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span>  );</div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span> </div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  BLACKBONE_API <span class="keywordtype">bool</span> AddStaticTLSEntry( <span class="keywordtype">void</span>* pModule, IMAGE_TLS_DIRECTORY *pTls );</div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span> </div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  BLACKBONE_API <span class="keywordtype">bool</span> InsertInvertedFunctionTable( <span class="keywordtype">void</span>* ModuleBase, <span class="keywordtype">size_t</span> ImageSize, <span class="keywordtype">bool</span>& safeseh );</div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span> </div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  BLACKBONE_API <span class="keywordtype">bool</span> Unlink( ptr_t baseAddress, <span class="keyword">const</span> std::wstring& name, eModType type );</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span> </div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  <span class="comment">// </span></div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  <span class="comment">// Get some not exported values</span></div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>  <span class="comment">//</span></div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>  BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrpInvertedFunctionTable( )<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrpInvertedFunctionTable; }</div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrKernel32PatchAddress()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrKernel32PatchAddress; }</div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> APC64PatchAddress()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _APC64PatchAddress; }</div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>  BLACKBONE_API <span class="keyword">inline</span> <span class="keywordtype">size_t</span> LdrProtectMrdata()<span class="keyword"> const </span>{ <span class="keywordflow">return</span> _LdrProtectMrdata; }</div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  </div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span> <span class="keyword">private</span>:</div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span> </div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  <span class="keywordtype">bool</span> FindLdrpHashTable();</div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span> </div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>  <span class="keywordtype">bool</span> FindLdrpModuleIndexBase();</div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span> </div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordtype">bool</span> ScanPatterns();</div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span> </div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  <span class="keywordtype">bool</span> FindLdrHeap();</div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span> </div>
|
|
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">_LDR_DATA_TABLE_ENTRY_W8</a>* InitW8Node(</div>
|
|
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span>  <span class="keywordtype">void</span>* ModuleBase,</div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keywordtype">size_t</span> ImageSize,</div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  <span class="keyword">const</span> std::wstring& dllpath,</div>
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  <span class="keywordtype">size_t</span> entryPoint,</div>
|
|
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  ULONG& outHash</div>
|
|
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  );</div>
|
|
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span> </div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7.html">_LDR_DATA_TABLE_ENTRY_W7</a>* InitW7Node(</div>
|
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  <span class="keywordtype">void</span>* ModuleBase,</div>
|
|
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  <span class="keywordtype">size_t</span> ImageSize,</div>
|
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <span class="keyword">const</span> std::wstring& dllpath,</div>
|
|
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <span class="keywordtype">size_t</span> entryPoint,</div>
|
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  ULONG& outHash</div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  );</div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span> </div>
|
|
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  <span class="keywordtype">void</span> InsertTreeNode( <a class="code" href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">_LDR_DATA_TABLE_ENTRY_W8</a>* pNode, <span class="keywordtype">size_t</span> modBase );</div>
|
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span> </div>
|
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  <span class="keywordtype">void</span> InsertHashNode( <span class="keywordtype">size_t</span> pNodeLink, ULONG hash );</div>
|
|
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span> </div>
|
|
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  <span class="keywordtype">void</span> InsertMemModuleNode( <span class="keywordtype">size_t</span> pNodeMemoryOrderLink, <span class="keywordtype">size_t</span> pNodeLoadOrderLink, <span class="keywordtype">size_t</span> pNodeInitOrderLink );</div>
|
|
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span> </div>
|
|
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  <span class="keywordtype">void</span> InsertTailList( <span class="keywordtype">size_t</span> ListHead, <span class="keywordtype">size_t</span> Entry );</div>
|
|
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span> </div>
|
|
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  ULONG HashString( <span class="keyword">const</span> std::wstring& str );</div>
|
|
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span> </div>
|
|
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span>  <span class="keyword">template</span><<span class="keyword">typename</span> T></div>
|
|
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  T* SetNode( T* ptr, <span class="keywordtype">void</span>* pModule );</div>
|
|
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span> </div>
|
|
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  <span class="keyword">template</span><<span class="keyword">typename</span> T> </div>
|
|
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  ptr_t UnlinkFromLdr( ptr_t baseAddress, <span class="keyword">const</span> std::wstring& name );</div>
|
|
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span> </div>
|
|
<div class="line"><a name="l00206"></a><span class="lineno"> 206</span>  <span class="keyword">template</span><<span class="keyword">typename</span> T> </div>
|
|
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span>  ptr_t UnlinkListEntry( <a class="code" href="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t.html">_LIST_ENTRY_T<T></a> pListEntry, ptr_t head, <span class="keywordtype">size_t</span> ofst, ptr_t baseAddress );</div>
|
|
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span> </div>
|
|
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span>  <span class="keyword">template</span><<span class="keyword">typename</span> T></div>
|
|
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>  <span class="keywordtype">void</span> UnlinkListEntry( ptr_t pListLink );</div>
|
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span> </div>
|
|
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  ptr_t UnlinkTreeNode( ptr_t ldrEntry );</div>
|
|
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span> </div>
|
|
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>  NtLdr( <span class="keyword">const</span> NtLdr& ) = <span class="keyword">delete</span>;</div>
|
|
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  NtLdr& operator =(<span class="keyword">const</span> NtLdr&) = <span class="keyword">delete</span>;</div>
|
|
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span> </div>
|
|
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span> <span class="keyword">private</span>:</div>
|
|
<div class="line"><a name="l00223"></a><span class="lineno"> 223</span>  <span class="keyword">class </span><a class="code" href="classblackbone_1_1_process.html">Process</a>& _process; <span class="comment">// Process memory routines</span></div>
|
|
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span> </div>
|
|
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  <span class="keywordtype">size_t</span> _LdrpHashTable = 0; <span class="comment">// LdrpHashTable address</span></div>
|
|
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  <span class="keywordtype">size_t</span> _LdrpModuleIndexBase = 0; <span class="comment">// LdrpModuleIndex address</span></div>
|
|
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  <span class="keywordtype">size_t</span> _LdrHeapBase = 0; <span class="comment">// Loader heap base address</span></div>
|
|
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  <span class="keywordtype">size_t</span> _LdrKernel32PatchAddress = 0; <span class="comment">// Address to patch to enable kernel32 loading under win7</span></div>
|
|
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>  <span class="keywordtype">size_t</span> _APC64PatchAddress = 0; <span class="comment">// Address to patch for x64->WOW64 APC dispatching under win7</span></div>
|
|
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>  <span class="keywordtype">size_t</span> _LdrpHandleTlsData = 0; <span class="comment">// LdrpHandleTlsData address</span></div>
|
|
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  <span class="keywordtype">size_t</span> _LdrpInvertedFunctionTable = 0; <span class="comment">// LdrpInvertedFunctionTable address</span></div>
|
|
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  <span class="keywordtype">size_t</span> _RtlInsertInvertedFunctionTable = 0; <span class="comment">// RtlInsertInvertedFunctionTable address</span></div>
|
|
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  <span class="keywordtype">size_t</span> _LdrProtectMrdata = 0; <span class="comment">// LdrProtectMrdata address</span></div>
|
|
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span> </div>
|
|
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  std::map<HMODULE, void*> _nodeMap; <span class="comment">// Allocated native structures</span></div>
|
|
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span> };</div>
|
|
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span> </div>
|
|
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span> }</div>
|
|
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span> </div>
|
|
<div class="ttc" id="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8_html"><div class="ttname"><a href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w8.html">blackbone::_LDR_DATA_TABLE_ENTRY_W8</a></div><div class="ttdef"><b>Definition:</b> Win8Specific.h:59</div></div>
|
|
<div class="ttc" id="classblackbone_1_1_process_html"><div class="ttname"><a href="classblackbone_1_1_process.html">blackbone::Process</a></div><div class="ttdef"><b>Definition:</b> Process.h:80</div></div>
|
|
<div class="ttc" id="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t_html"><div class="ttname"><a href="structblackbone_1_1___l_i_s_t___e_n_t_r_y___t.html">blackbone::_LIST_ENTRY_T</a></div><div class="ttdef"><b>Definition:</b> NativeStructures.h:40</div></div>
|
|
<div class="ttc" id="classblackbone_1_1_nt_ldr_html"><div class="ttname"><a href="classblackbone_1_1_nt_ldr.html">blackbone::NtLdr</a></div><div class="ttdef"><b>Definition:</b> NtLoader.h:23</div></div>
|
|
<div class="ttc" id="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7_html"><div class="ttname"><a href="structblackbone_1_1___l_d_r___d_a_t_a___t_a_b_l_e___e_n_t_r_y___w7.html">blackbone::_LDR_DATA_TABLE_ENTRY_W7</a></div><div class="ttdef"><b>Definition:</b> Win7Specific.h:9</div></div>
|
|
<div class="ttc" id="namespaceblackbone_html"><div class="ttname"><a href="namespaceblackbone.html">blackbone</a></div><div class="ttdef"><b>Definition:</b> AsmHelper32.cpp:6</div></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
</div><!-- doc-content -->
|
|
<!-- start footer part -->
|
|
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_3d9ef8cac7bf1be0f1e18672d28fd269.html">visual studio 2013</a></li><li class="navelem"><a class="el" href="dir_5401094cee307be7b33997a47da28669.html">projects</a></li><li class="navelem"><a class="el" href="dir_0d6d72948ced51bdfd5fc8cf7033b913.html">blackbone</a></li><li class="navelem"><a class="el" href="dir_84cd6de3d65226a2f8718fdae009bf30.html">src</a></li><li class="navelem"><a class="el" href="dir_4dc82cc14ae072731c8b0e8bbd4f10c1.html">BlackBone</a></li><li class="navelem"><a class="el" href="dir_e1c19cd16d65e5d5b627b88ca72f7266.html">ManualMap</a></li><li class="navelem"><a class="el" href="dir_a8b17d4e445f30a9ef1fd181dbb5f32d.html">Native</a></li><li class="navelem"><b>NtLoader.h</b></li>
|
|
<li class="footer">Generated on Tue Jul 21 2015 12:31:40 for BlackBone by
|
|
<a href="http://www.doxygen.org/index.html">
|
|
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.8 </li>
|
|
</ul>
|
|
</div>
|
|
</body>
|
|
</html>
|