BlackBone
Windows memory hacking library
 All Data Structures Files Functions Variables Typedefs Enumerations Enumerator Macros
VadRoutines.h
Go to the documentation of this file.
1 #pragma once
2 
3 #include "Private.h"
4 
12 NTSTATUS BBProtectVAD( IN PEPROCESS pProcess, IN ULONG_PTR address, IN ULONG prot );
13 
20 NTSTATUS BBUnlinkVAD( IN PEPROCESS pProcess, IN ULONG_PTR address );
21 
29 NTSTATUS BBGetVadType( IN PEPROCESS pProcess, IN ULONG_PTR address, OUT PMI_VAD_TYPE pType );
30 
38 NTSTATUS BBFindVAD( IN PEPROCESS pProcess, IN ULONG_PTR address, OUT PMMVAD_SHORT* pResult );
39 
46 ULONG BBConvertProtection( IN ULONG prot, IN BOOLEAN fromPTE );
typedef NTSTATUS(NTAPI *fnNtCreateThreadEx)(OUT PHANDLE hThread
Definition: NativeStructs7.h:125
NTSTATUS BBGetVadType(IN PEPROCESS pProcess, IN ULONG_PTR address, OUT PMI_VAD_TYPE pType)
Get region VAD type
Definition: VadRoutines.c:98
NTSTATUS BBUnlinkVAD(IN PEPROCESS pProcess, IN ULONG_PTR address)
Hide memory from NtQueryVirtualMemory
Definition: VadRoutines.c:76
NTSTATUS BBFindVAD(IN PEPROCESS pProcess, IN ULONG_PTR address, OUT PMMVAD_SHORT *pResult)
Find VAD that describes target address
Definition: VadRoutines.c:119
ULONG BBConvertProtection(IN ULONG prot, IN BOOLEAN fromPTE)
Convert protection flags
Definition: VadRoutines.c:165
enum _MI_VAD_TYPE * PMI_VAD_TYPE
NTSTATUS BBProtectVAD(IN PEPROCESS pProcess, IN ULONG_PTR address, IN ULONG prot)
Change VAD protection flags
Definition: VadRoutines.c:54