ShellcodeFramework/shellcode_gen/include/structs.h at main · Ap3x/ShellcodeFramework · GitHub

112 lines (107 loc) · 3.1 KB

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

#pragma once

#include <Windows.h>

typedef struct _UNICODE_STR

{

USHORT Length;

USHORT MaximumLength;

PWSTR pBuffer;

} UNICODE_STR, * PUNICODE_STR;

typedef struct _LDR_DATA_TABLE_ENTRY

{

LIST_ENTRY InMemoryOrderModuleList;

LIST_ENTRY InInitializationOrderModuleList;

PVOID DllBase;

PVOID EntryPoint;

ULONG SizeOfImage;

UNICODE_STR FullDllName;

UNICODE_STR BaseDllName;

ULONG Flags;

SHORT LoadCount;

SHORT TlsIndex;

LIST_ENTRY HashTableEntry;

ULONG TimeDateStamp;

} LDR_DATA_TABLE_ENTRY, * PLDR_DATA_TABLE_ENTRY;

typedef struct _PEB_LDR_DATA

{

DWORD dwLength;

DWORD dwInitialized;

LPVOID lpSsHandle;

LIST_ENTRY InLoadOrderModuleList;

LIST_ENTRY InMemoryOrderModuleList;

LIST_ENTRY InInitializationOrderModuleList;

LPVOID lpEntryInProgress;

} PEB_LDR_DATA, * PPEB_LDR_DATA;

//redefine PEB_FREE_BLOCK struct

typedef struct _PEB_FREE_BLOCK

{

struct _PEB_FREE_BLOCK* pNext;

DWORD dwSize;

} PEB_FREE_BLOCK, * PPEB_FREE_BLOCK;

typedef struct __PEB

{

BYTE bInheritedAddressSpace;

BYTE bReadImageFileExecOptions;

BYTE bBeingDebugged;

BYTE bSpareBool;

LPVOID lpMutant;

LPVOID lpImageBaseAddress;

PPEB_LDR_DATA pLdr;

LPVOID lpProcessParameters;

LPVOID lpSubSystemData;

LPVOID lpProcessHeap;

PRTL_CRITICAL_SECTION pFastPebLock;

LPVOID lpFastPebLockRoutine;

LPVOID lpFastPebUnlockRoutine;

DWORD dwEnvironmentUpdateCount;

LPVOID lpKernelCallbackTable;

DWORD dwSystemReserved;

DWORD dwAtlThunkSListPtr32;

PPEB_FREE_BLOCK pFreeList;

DWORD dwTlsExpansionCounter;

LPVOID lpTlsBitmap;

DWORD dwTlsBitmapBits[2];

LPVOID lpReadOnlySharedMemoryBase;

LPVOID lpReadOnlySharedMemoryHeap;

LPVOID lpReadOnlyStaticServerData;

LPVOID lpAnsiCodePageData;

LPVOID lpOemCodePageData;

LPVOID lpUnicodeCaseTableData;

DWORD dwNumberOfProcessors;

DWORD dwNtGlobalFlag;

LARGE_INTEGER liCriticalSectionTimeout;

DWORD dwHeapSegmentReserve;

DWORD dwHeapSegmentCommit;

DWORD dwHeapDeCommitTotalFreeThreshold;

DWORD dwHeapDeCommitFreeBlockThreshold;

DWORD dwNumberOfHeaps;

DWORD dwMaximumNumberOfHeaps;

LPVOID lpProcessHeaps;

LPVOID lpGdiSharedHandleTable;

LPVOID lpProcessStarterHelper;

DWORD dwGdiDCAttributeList;

LPVOID lpLoaderLock;

DWORD dwOSMajorVersion;

DWORD dwOSMinorVersion;

WORD wOSBuildNumber;

WORD wOSCSDVersion;

DWORD dwOSPlatformId;

DWORD dwImageSubsystem;

DWORD dwImageSubsystemMajorVersion;

DWORD dwImageSubsystemMinorVersion;

DWORD dwImageProcessAffinityMask;

DWORD dwGdiHandleBuffer[34];

LPVOID lpPostProcessInitRoutine;

LPVOID lpTlsExpansionBitmap;

DWORD dwTlsExpansionBitmapBits[32];

DWORD dwSessionId;

ULARGE_INTEGER liAppCompatFlags;

ULARGE_INTEGER liAppCompatFlagsUser;

LPVOID lppShimData;

LPVOID lpAppCompatInfo;

UNICODE_STR usCSDVersion;

LPVOID lpActivationContextData;

LPVOID lpProcessAssemblyStorageMap;

LPVOID lpSystemDefaultActivationContextData;

LPVOID lpSystemAssemblyStorageMap;

DWORD dwMinimumStackCommit;

} _PEB, * _PPEB;