#pragma once #include "../Symbols/SymbolData.h" #include "../PE/PEImage.h" namespace blackbone { /// /// Scan ntdll for internal loader data /// /// Mapped x86 ntdll /// Mapped x64 ntdll /// Result /// Status code NTSTATUS ScanSymbolPatterns( const pe::PEImage& ntdll32, const pe::PEImage& ntdll64, SymbolData& result ); }