Struct memlib::AttachedProcess

pub struct AttachedProcess<'a, T>where
    T: GetContext,{
    pub api: MaybeOwned<'a, T>,
    pub context: T::Context,
}

Fields

api: MaybeOwned<'a, T>

context: T::Context

Implementations

impl<'a, T> AttachedProcess<'a, T>where
    T: GetContext,

pub fn new_owned(api: T, context: T::Context) -> Self

pub fn new(api: &'a T, context: T::Context) -> Self

pub fn api(&self) -> &T

pub fn context(&self) -> &T::Context

Trait Implementations

impl<'a, T: Clone> Clone for AttachedProcess<'a, T>where
    T: GetContext,
    T::Context: Clone,

fn clone(&self) -> AttachedProcess<'a, T>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T> MemoryAllocate for AttachedProcess<'_, T>where
    T: MemoryAllocatePid,

fn allocate(
    &self,
    size: u64,
    protection: MemoryProtection
) -> Result<u64, MemoryAllocateError>

Allocates size bytes of memory in the process with the specified protection. Returns the allocated memory or an error.

fn free(&self, base: u64, size: u64) -> Result<(), MemoryAllocateError>

Frees allocated memory at the specified address and size.

impl<T> MemoryProtect for AttachedProcess<'_, T>where
    T: MemoryProtectPid,

fn set_protection(
    &self,
    range: MemoryRange,
    protection: MemoryProtection
) -> Result<MemoryProtection, MemoryProtectError>

Sets the protection of the memory range to the specified protection. Returns the old memory protection or an error

impl<T> MemoryRead for AttachedProcess<'_, T>where
    T: MemoryReadPid,

fn try_read_bytes_into(&self, address: u64, buffer: &mut [u8]) -> Option<()>

Reads bytes from the process at the specified address into a buffer. Returns None if the address is not valid

fn try_read_bytes(&self, address: u64, len: usize) -> Option<Vec<u8>>

Reads bytes from the process at the specified address and returns the bytes as a Vector. Returns none if the address is not valid

fn dump_memory(&self, range: MemoryRange) -> Option<Vec<u8>>

Dumps a memory range into a Vector. If any part of the memory range is not valid, it will return None

fn valid_address(&self, address: u64) -> bool

Returns true if the specified address is valid. By default reads one byte at that location and returns the success value

fn try_read_string(&self, address: u64) -> Option<Result<String, FromUtf8Error>>

Reads a string at the specified location with char length of 1. If the address is valid or there is no null terminator in MAX_STRING_SIZE characters, it will return None

fn try_read_string_wide(
    &self,
    address: u64
) -> Option<Result<String, FromUtf16Error>>

Reads a wide string at the specified location with char length of 1. If the address is valid or there is no null terminator in MAX_STRING_SIZE characters, it will return None

impl<T> MemoryWrite for AttachedProcess<'_, T>where
    T: MemoryWritePid,

fn try_write_bytes(&self, address: u64, buffer: &[u8]) -> Option<()>

Writes bytes from the buffer into the process at the specified address. Returns None if the address is not valid

impl<T> ModuleList for AttachedProcess<'_, T>where
    T: ModuleListPid,

fn get_module_list(&self) -> Vec<Module>

Returns a list of all modules. If the implementor can only provide a single module based on the name, this function should panic

fn get_module(&self, name: &str) -> Option<Module>

Returns a single module by name. If the module name does not exist, returns None

fn get_main_module(&self) -> Module

Gets the main module from the process.

impl<T> ProcessInfo for AttachedProcess<'_, T>where
    T: ProcessInfoPid,

fn process_name(&self) -> String

fn peb_base_address(&self) -> u64

fn pid(&self) -> u32