Struct Manager 

pub struct Manager { /* private fields */ }

Available on Windows only.

Tracks encrypted payload / decoy copies for one or more mapped bases.

Implementations

impl Manager

pub fn new() -> Manager

Empty manager. Call Manager::new_module or Manager::new_shellcode next.

pub fn new_module( &mut self, address: usize, payload: Vec<u8>, decoy: Vec<u8>, ) -> Result<(), String>

Register a mapped PE at address with payload and decoy copies, then hide it.

pub fn new_shellcode( &mut self, address: usize, payload: Vec<u8>, decoy: Vec<u8>, ) -> Result<(), String>

Register stomped shellcode at address with payload and decoy copies, then hide it.

pub fn map_module(&mut self, address: usize) -> Result<(), String>

Decrypt and remap the payload at address.

pub fn hide_module(&mut self, address: usize) -> Result<(), String>

Restore the decoy image at address and XOR-hide the payload copy.

pub fn hide_shellcode(&mut self, address: usize) -> Result<(), String>

Restore the decoy bytes over stomped shellcode at address.

pub fn stomp_shellcode(&mut self, address: usize) -> Result<(), String>

Write the decrypted payload back over the stomped region at address.