Functions — github.com/DarthTon/Blackbone

hub / github.com/DarthTon/Blackbone / functions

Functions2,182 in github.com/DarthTon/Blackbone

⨍ Functions 2,182◇ Types & classes 775

↓ 2 callersMethodset

src/BlackBone/Asm/AsmVariant.hpp:168

↓ 2 callersMethodsetCursor

src/3rd_party/AsmJit/base/compiler.cpp:108

↓ 2 callersMethodsetMap

Set variable allocation instructions.

src/3rd_party/AsmJit/base/compiler.h:1747

↓ 2 callersMethodsetPrototype

src/3rd_party/AsmJit/x86/x86compiler.cpp:593

↓ 2 callersFunctionsetUd

Set all two 32-bit unsigned integers.

src/3rd_party/AsmJit/base/vectypes.h:278

↓ 2 callersMethodsetVa

Set temporary VarAttr.

src/3rd_party/AsmJit/base/compiler.h:865

↓ 2 callersMethodsetValue

Set hint value.

src/3rd_party/AsmJit/base/compiler.h:2011

↓ 2 callersMethodswap

Swap this pod-vector with `other`.

src/3rd_party/AsmJit/base/containers.h:240

↓ 2 callersFunctionvMemMgrAllocVMem

\internal Helper to avoid `#ifdef`s in the code.

src/3rd_party/AsmJit/base/vmem.cpp:431

↓ 2 callersFunctionvMemMgrCheckTree

\internal Check whether the Red-Black tree is valid.

src/3rd_party/AsmJit/base/vmem.cpp:454

↓ 2 callersFunctionvMemMgrFindNodeByPtr

src/3rd_party/AsmJit/base/vmem.cpp:691

↓ 2 callersFunctionvMemMgrReset

\internal Reset the whole `VMemMgr` instance, freeing all heap memory allocated an virtual memory allocated unless `keepVirtualMemory` is true (and t

src/3rd_party/AsmJit/base/vmem.cpp:897

↓ 2 callersFunctionx86ArgTypeToXmmType

src/3rd_party/AsmJit/x86/x86compiler.cpp:154

↓ 1 callersMethodAddManualModule

<summary> Store manually mapped module in module list </summary> <param name="mod">Module data</param> <returns>Module info</returns>

src/BlackBone/Process/ProcessModules.cpp:588

↓ 1 callersMethodAddStaticTLSEntry

<summary> Create thread static TLS array </summary> <param name="mod">Module data</param> <param name="tlsPtr">TLS directory of target image</param> <

src/BlackBone/ManualMap/Native/NtLoader.cpp:153

↓ 1 callersMethodAllocateClosest

src/BlackBone/Process/MemBlock.cpp:112

↓ 1 callersFunctionBBAllocateFreeMemory

<summary> Allocate/Free process memory </summary> <param name="pAllocFree">Request params.</param> <param name="pResult">Allocated region info.</param

src/BlackBoneDrv/Routines.c:361

↓ 1 callersFunctionBBApcInject

<summary> Inject dll using APC Must be running in target process context </summary> <param name="pUserBuf">Injcetion code</param> <param name="pProces

src/BlackBoneDrv/Inject.c:383

↓ 1 callersFunctionBBCallInitializers

<summary> Call module initialization routines </summary> <param name="pContext">Map context</param> <param name="noTLS">If TRUE - TLS callbacks will n

src/BlackBoneDrv/MMap.c:1223

↓ 1 callersFunctionBBCallTlsInitializers

<summary> Call TLS callbacks </summary> <param name="pContext">Loader context</param> <param name="imageBase">Target image base</param>

src/BlackBoneDrv/MMap.c:1316

↓ 1 callersFunctionBBCastSectionProtection

<summary> Get memory protection form section characteristics </summary> <param name="characteristics">Characteristics</param> <param name="noDEP">Set

src/BlackBoneDrv/MMap.c:1798

↓ 1 callersFunctionBBCleanupHostProcess

<summary> Unmap any mapped pages from host process </summary> <param name="pProcessEntry">Process entry</param>

src/BlackBoneDrv/Remap.c:1226

↓ 1 callersFunctionBBCleanupProcessPhysList

src/BlackBoneDrv/Routines.c:932

↓ 1 callersFunctionBBCleanupProcessTable

<summary> Clear global process map table </summary>

src/BlackBoneDrv/Remap.c:1263

↓ 1 callersFunctionBBCopyMemory

<summary> Read/write process memory </summary> <param name="pCopy">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:315

↓ 1 callersFunctionBBCreateExceptionTable64

<summary> Create exception table for x64 image </summary> <param name="pContext">Loader context</param> <param name="imageBase">Image base</param> <re

src/BlackBoneDrv/MMap.c:1474

↓ 1 callersFunctionBBCreateWorkerThread

<summary> Create worker thread for user-mode calls </summary> <param name="pContext">Map context</param> <returns>Status code</returns>

src/BlackBoneDrv/MMap.c:1619

↓ 1 callersFunctionBBDisableDEP

<summary> Disable process DEP Has no effect on native x64 process </summary> <param name="pData">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:51

↓ 1 callersFunctionBBEnumMemRegions

<summary> Enumerate committed, accessible, non-guarded memory regions </summary> <param name="pData">Target process ID</param> <param name="pResult">R

src/BlackBoneDrv/Routines.c:641

↓ 1 callersFunctionBBFindTrampolineSpace

src/BlackBoneDrv/Routines.c:725

↓ 1 callersFunctionBBFindWokerThread

<summary> Find suitable thread to be used as worker for user-mode calls </summary> <param name="pContext">Map context</param> <returns>Status code</re

src/BlackBoneDrv/MMap.c:1713

↓ 1 callersFunctionBBGetBuildNO

<summary> Get kernel build number </summary> <param name="pBuildNO">Build number.</param> <returns>Status code</returns>

src/BlackBoneDrv/BlackBoneDrv.c:161

↓ 1 callersFunctionBBGetNativeCode

<summary> Build injection code for native x64 process Must be running in target process context </summary> <param name="LdrLoadDll">LdrLoadDll address

src/BlackBoneDrv/Inject.c:322

↓ 1 callersFunctionBBGetRequiredRemapOutputSize

<summary> Calculate size required to store mapping info </summary> <param name="pList">Mapped regions list</param> <param name="pSize">Resulting size<

src/BlackBoneDrv/Remap.c:1329

↓ 1 callersFunctionBBGetSystemModule

<summary> Get address of a system module Either 'pName' or 'pAddress' is required to perform search </summary> <param name="pName">Base name of the im

src/BlackBoneDrv/Loader.c:85

↓ 1 callersFunctionBBGetWow64Code

<summary> Build injection code for wow64 process Must be running in target process context </summary> <param name="LdrLoadDll">LdrLoadDll address</par

src/BlackBoneDrv/Inject.c:265

↓ 1 callersFunctionBBGrantAccess

<summary> Change handle granted access </summary> <param name="pAccess">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:233

↓ 1 callersFunctionBBHandleSharedRegion

<summary> Process section object pages Function will attempt to trigger copy-on-write for underlying pages to convert them into private If copy-on-wri

src/BlackBoneDrv/Remap.c:341

↓ 1 callersFunctionBBHideVAD

<summary> Hide VAD containing target address </summary> <param name="pData">Address info</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:618

↓ 1 callersFunctionBBImageManifest

<summary> Get image manifest data </summary> <param name="pImageBase">Image base</param> <param name="pSize">Manifest size</param> <param name="pID">M

src/BlackBoneDrv/MMap.c:1835

↓ 1 callersFunctionBBInitDynamicData

<summary> Initialize dynamic data. </summary> <param name="pData">Data to initialize</param> <returns>Status code</returns>

src/BlackBoneDrv/BlackBoneDrv.c:237

↓ 1 callersFunctionBBInitLdrData

<summary> Initialize loader stuff </summary> <param name="pThisModule">Any valid system module</param> <returns>Status code</returns>

src/BlackBoneDrv/Loader.c:43

↓ 1 callersFunctionBBInjectDll

<summary> Inject dll into process </summary> <param name="pid">Target PID</param> <param name="pPath">TFull-qualified dll path</param> <returns>Status

src/BlackBoneDrv/Inject.c:45

↓ 1 callersFunctionBBLoadLocalImage

<summary> Load image from disk into system memory </summary> <param name="path">Image path</param> <param name="pBase">Mapped base</param> <returns>St

src/BlackBoneDrv/MMap.c:1555

↓ 1 callersFunctionBBLookupMappedModule

<summary> Find existing module in the list </summary> <param name="pList">Module list</param> <param name="pName">Module name</param> <param name="typ

src/BlackBoneDrv/MMap.c:1771

↓ 1 callersFunctionBBLookupPhysMemEntry

<summary> Find allocated memory region entry </summary> <param name="pList">Region list</param> <param name="pBase">Region base</param> <returns>Found

src/BlackBoneDrv/Routines.c:883

↓ 1 callersFunctionBBMMapDriver

<summary> Manually map driver into system space </summary> <param name="pPath">Fully qualified native path to the driver</param> <returns>Status code<

src/BlackBoneDrv/Loader.c:896

↓ 1 callersFunctionBBMapMemory

<summary> Map entire address space of target process into current Subsequent calls won't map any additional regions, only return info about existing m

src/BlackBoneDrv/Remap.c:701

↓ 1 callersFunctionBBMapMemoryRegion

<summary> Map specific memory region </summary> <param name="pRegion">Region data</param> <param name="pResult">Mapping results</param> <returns>Statu

src/BlackBoneDrv/Remap.c:832

↓ 1 callersFunctionBBMapRegionIntoCurrentProcess

<summary> Map locked physical pages into caller process </summary> <param name="pEntry">Memory region</param> <param name="pPrevEntry">Last mapped reg

src/BlackBoneDrv/Remap.c:512

↓ 1 callersFunctionBBMapUserImage

<summary> Map new user module </summary> <param name="pProcess">Target process</param> <param name="path">Image path</param> <param name="buffer">Imag

src/BlackBoneDrv/MMap.c:217

↓ 1 callersFunctionBBPrepareMDLListEntry

<summary> Build MDL for memory region </summary> <param name="pEntry">Region data</param> <returns>Status code</returns>

src/BlackBoneDrv/Remap.c:446

↓ 1 callersFunctionBBProtectMemory

<summary> Change process memory protection </summary> <param name="pProtect">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:556

↓ 1 callersFunctionBBResolveApiSet

<summary> Try to resolve image via API SET map </summary> <param name="pProcess">Target process. Must be run in the context of this process</param> <p

src/BlackBoneDrv/MMap.c:873

↓ 1 callersFunctionBBResolveSxS

<summary> Try to resolve image via SxS isolation </summary> <param name="pContext">Loader context.</param> <param name="name">Name to resolve</param>

src/BlackBoneDrv/MMap.c:967

↓ 1 callersFunctionBBRvaToVa

<summary> Translate RVA address to VA </summary> <param name="rva">RVA</param> <param name="MappedAsImage">Image is mapped using image memory layout</

src/BlackBoneDrv/MMap.c:1926

↓ 1 callersFunctionBBSafeHandleClose

<summary> Close handle if process isn't in signaled state </summary> <param name="pProcess">Process object</param> <param name="handle">Handle</param>

src/BlackBoneDrv/Remap.c:1131

↓ 1 callersFunctionBBSafeSearchString

<summary> Search for substring </summary> <param name="source">Source string</param> <param name="target">Target string</param> <param name="CaseInSen

src/BlackBoneDrv/Utils.c:71

↓ 1 callersFunctionBBSkipThread

<summary> Check if thread does not satisfy APC requirements </summary> <param name="pThread">Thread to check</param> /// <param name="isWow64">If TRUE

src/BlackBoneDrv/Loader.c:432

↓ 1 callersFunctionBBStripFilename

<summary> Get directory path name from full path </summary> <param name="path">Path</param> <param name="name">Resulting directory path</param> <retur

src/BlackBoneDrv/Utils.c:138

↓ 1 callersFunctionBBUnlinkFromLoader

<summary> Unlink user-mode module from Loader lists </summary> <param name="pProcess">Target process</param> <param name="pBase">Module base</param> <

src/BlackBoneDrv/Loader.c:218

↓ 1 callersFunctionBBUnlinkHandleTable

<summary> Change handle granted access </summary> <param name="pAccess">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Routines.c:270

↓ 1 callersFunctionBBUnlinkVAD

<summary> Hide memory from NtQueryVirtualMemory </summary> <param name="pProcess">Target process object</param> <param name="address">Target address</

src/BlackBoneDrv/VadRoutines.c:74

↓ 1 callersFunctionBBUnmapMemory

<summary> Unmap any mapped memory from host and target processes </summary> <param name="pUnmap">Request params</param> <returns>Status code</returns>

src/BlackBoneDrv/Remap.c:987

↓ 1 callersFunctionBBUnmapMemoryRegion

<summary> Unmap specific memory region </summary> <param name="pRegion">Region info</param> <returns>Status ode</returns>

src/BlackBoneDrv/Remap.c:1016

↓ 1 callersFunctionBBWriteTrampoline

<summary> Create hook trampoline </summary> <param name="place">Trampoline address</param> <param name="pfn">Function pointer</param>

src/BlackBoneDrv/Routines.c:711

↓ 1 callersFunctionBaseContext_getDefaultAlignment

src/3rd_party/AsmJit/base/context.cpp:79

↓ 1 callersMethodCanonicalize

<summary> Canonicalize paths and set module type to manual if requested </summary> <param name="mod">Module data</param> <param name="manual">Value to

src/BlackBone/Process/ProcessModules.cpp:601

↓ 1 callersMethodClose

<summary> Close current process handle </summary>

src/BlackBone/Process/ProcessCore.cpp:114

↓ 1 callersMethodClose

<summary> Close handle </summary>

src/BlackBone/Process/Threads/Thread.cpp:356

↓ 1 callersMethodConcealVAD

<summary> Make VAD region appear as PAGE_NO_ACESS to NtQueryVirtualMemory </summary> <param name="pid">Target process ID</param> <param name="base">Re

src/BlackBone/DriverControl/DriverControl.cpp:656

↓ 1 callersFunctionConstPool_freeGap

src/3rd_party/AsmJit/base/constpool.cpp:174

↓ 1 callersFunctionCorSigUncompressBigData

//////////////////////////////////////////////////////////////////////////////////////// Given a compressed integer(*pData), expand the compressed in

src/3rd_party/cor.h:2252

↓ 1 callersMethodCreateNTReference

<summary> Add module to some loader structures (LdrpHashTable, LdrpModuleIndex( win8+ only ), InMemoryOrderModuleList( win7 only )) </summary> <param

src/BlackBone/ManualMap/Native/NtLoader.cpp:73

↓ 1 callersMethodCreateVEH

<summary> Inject VEH wrapper into process Used to enable execution of SEH handlers out of image </summary> <param name="proc">Target process</param> <

src/BlackBone/ManualMap/MExcept.cpp:210

↓ 1 callersMethodDestroyHandle

(self)

src/PythonicBlackBone/BlackBone.py:89

↓ 1 callersMethodDetach

<summary> Detach form current process, if any </summary> <returns>Status code</returns>

src/BlackBone/Process/Process.cpp:126

↓ 1 callersMethodDisableDEP

<summary> Disable DEP for process Has no effect on native x64 processes </summary> <param name="pid">Target PID</param> <returns>Status code</returns>

src/BlackBone/DriverControl/DriverControl.cpp:254

↓ 1 callersFunctionDoTraceV

src/BlackBone/Misc/Trace.hpp:15

↓ 1 callersMethodEnumHandles

<summary> Enumerate all open handles </summary> <returns>Found handles or status code</returns>

src/BlackBone/Process/Process.cpp:199

↓ 1 callersMethodEnumMemoryRegions

<summary> Enumerate committed, accessible, non-guarded memory regions </summary> <param name="pid">Target process ID</param> <param name="regions">Fou

src/BlackBone/DriverControl/DriverControl.cpp:701

↓ 1 callersMethodEnumModules

<summary> Enumerate process modules </summary> <param name="result">Found modules</param> <param name="mtype">Module type: x86 or x64</param> <returns

src/BlackBone/Subsystem/NativeSubsystem.cpp:665

↓ 1 callersMethodEnumRegions

<summary> Enumerate valid memory regions </summary> <param name="includeFree">If true - non-allocated regions will be included in list</param> <return

src/BlackBone/Process/ProcessMemory.cpp:209

↓ 1 callersMethodEventThread

<summary> Debug thread </summary> <returns>Error code</returns>

src/BlackBone/Process/RPC/RemoteHook.cpp:239

↓ 1 callersMethodExitCode

<summary> Get thread exit code </summary> <returns>Thread exit code</returns>

src/BlackBone/Process/Threads/Thread.cpp:316

↓ 1 callersMethodExitThreadWithStatus

<summary> Save eax value and terminate current thread </summary> <param name="pExitThread">NtTerminateThread address</param> <param name="resultPtr">M

src/BlackBone/Asm/AsmHelper32.cpp:127

↓ 1 callersFunctionGenCallTV

src/BlackBoneDrv/Utils.c:487

↓ 1 callersFunctionGenEpilogue32

src/BlackBoneDrv/Utils.c:246

↓ 1 callersFunctionGenEpilogue64

src/BlackBoneDrv/Utils.c:339

↓ 1 callersFunctionGenEpilogueT

src/BlackBoneDrv/Utils.c:472

↓ 1 callersFunctionGenPrologue32

src/BlackBoneDrv/Utils.c:238

↓ 1 callersFunctionGenPrologue64

src/BlackBoneDrv/Utils.c:326

↓ 1 callersFunctionGenPrologueT

src/BlackBoneDrv/Utils.c:467

↓ 1 callersFunctionGenSync32

src/BlackBoneDrv/Utils.c:299

↓ 1 callersFunctionGenSync64

src/BlackBoneDrv/Utils.c:439

↓ 1 callersFunctionGenSyncT

src/BlackBoneDrv/Utils.c:492

↓ 1 callersMethodGetCallResult

src/BlackBone/Process/RPC/RemoteExec.h:137

↓ 1 callersFunctionGetFileData

src/BlackBoneTest/TestManualMap.cpp:132

↓ 1 callersMethodGetManualModules

<summary> Get list of manually mapped modules </summary> <returns>List of modules</returns>

src/BlackBone/Process/ProcessModules.cpp:190

↓ 1 callersFunctionGetRevision

src/3rd_party/VersionApi.h:70

← previous next →501–600 of 2,182, ranked by callers