Skip to main content

Crate data

Crate data 

Source
Expand description

Shared Windows FFI types, constants, and the lc! string macro.

You normally get this through dyncvoke::data. HANDLE, OBJECT_ATTRIBUTES, UNICODE_STRING, PE metadata, and NT access-mask constants live here. lc! expands to an obfuscated alloc::string::String.

Re-exports§

pub use obfstr;

Macros§

lc
Compile-time obfuscated string. Expands to alloc::string::String.

Structs§

ANSI_STRING
ApiSetNamespace
ApiSetNamespaceEntry
ApiSetValueEntry
AuxSymbolEntry
CONTEXT
ClientId
CoffMetadata
CoffSymbol
ExceptionPointers
FileProcessIdsUsingFileInformation
GUID
ImageFileHeader
ImageOptionalHeader64
LARGE_INTEGER
NtAllocateVirtualMemoryArgs
NtCreateThreadExArgs
NtOpenProcessArgs
NtProtectVirtualMemoryArgs
NtWriteVirtualMemoryArgs
OBJECT_ATTRIBUTES
PeManualMap
PeMetadata
PsAttribute
PsAttributeList
PsCreateInfo
PsCreateInfoInitState
PsCreateInfoUSuccessSate
RuntimeFunction
SystemHandleInformation
SystemHandleTableEntryInfo
ThreadBasicInformation
UNICODE_STRING

Enums§

ExceptionHandleFunction

Constants§

ADD_RSP
DELETE
DLL_PROCESS_ATTACH
DLL_PROCESS_DETACH
DLL_THREAD_ATTACH
DLL_THREAD_DETACH
FILE_APPEND_DATA
FILE_EXECUTE
FILE_NON_DIRECTORY_FILE
FILE_READ_ATTRIBUTES
FILE_READ_DATA
FILE_READ_EA
FILE_SHARE_DELETE
FILE_SHARE_NONE
FILE_SHARE_READ
FILE_SHARE_WRITE
FILE_SYNCHRONOUS_IO_NONALERT
FILE_WRITE_ATTRIBUTES
FILE_WRITE_DATA
FILE_WRITE_EA
GENERIC_ALL
GENERIC_EXECUTE
GENERIC_READ
GENERIC_WRITE
IMAGE_REL_AMD64_ABSOLUTE
IMAGE_REL_AMD64_ADDR32
IMAGE_REL_AMD64_ADDR64
IMAGE_REL_AMD64_ADDR32NB
IMAGE_REL_AMD64_REL32
JMP_RBX
MAX_PATH
MEM_COMMIT
MEM_RESERVE
PAGE_EXECUTE
PAGE_EXECUTE_READ
PAGE_EXECUTE_READWRITE
PAGE_EXECUTE_WRITECOPY
PAGE_NOACCESS
PAGE_READONLY
PAGE_READWRITE
PAGE_WRITECOPY
PROCESS_QUERY_LIMITED_INFORMATION
READ_CONTROL
SECTION_ALL_ACCESS
SECTION_MEM_EXECUTE
SECTION_MEM_READ
SECTION_MEM_WRITE
SEC_IMAGE
SYNCHRONIZE
THREAD_ALL_ACCESS
TLS_OUT_OF_INDEXES
UNW_FLAG_CHAININFO
UNW_FLAG_EHANDLER
UNW_FLAG_UHANDLER
WRITE_DAC
WRITE_OWNER

Functions§

section_ascii_name
Trim a PE section name (IMAGE_SECTION_HEADER.Name) to the bytes before the first NUL. Names are 8-byte padded, not UTF-8 strings.

Type Aliases§

AddRef
AddVectoredExceptionHandler
BCryptCloseAlgorithmProvider
BCryptDecrypt
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptSetProperty
CloseHandle
ConvertThreadToFiber
CreateEventW
CreateFiber
CreateFileA
CreateFileMapping
CreateFileTransactedA
CreateFileW
CreateProcessWithLogon
CreateToolhelp32Snapshot
CreateTransaction
CryptSignHashW
DWORD
EAT
EntryPoint
EnumProcessModules
EnumProcesses
FreeLibrary
GetDefaultPrinterA
GetFileSize
GetLastError
GetModuleBaseNameW
GetModuleFileNameExW
GetModuleHandleExA
GetOverlappedResult
GetSystemInfo
HANDLE
HINSTANCE
ImpersonateLoggedOnUser
InitializeProcThreadAttributeList
LdrGetProcedureAddress
LoadLibraryA
LocalAlloc
LptopLevelExceptionFilter
MapViewOfFile
MiniDumpWriteDump
NtAllocateVirtualMemory
NtCommitTransaction
NtCreateKey
NtCreateSection
NtCreateThreadEx
NtCreateTransaction
NtCreateUserProcess
NtDuplicateObject
NtDuplicateToken
NtMapViewOfSection
NtOpenFile
NtOpenKey
NtOpenProcess
NtOpenProcessToken
NtProtectVirtualMemory
NtQueryInformationFile
NtQueryInformationProcess
NtQueryInformationThread
NtQueryObject
NtQuerySystemInformation
NtReadVirtualMemory
NtRemoveProcessDebug
NtSaveKey
NtSetValueKey
NtTerminateProcess
NtWaitForDebugEvent
NtWriteVirtualMemory
OpenPrintA
OpenProcess
OpenThread
PVOID
PostThreadMessageA
QueryFullProcessImageNameW
QueryInterface
QueueUserWorkItem
ReadFile
Release
RevertToSelf
RollbackTransaction
RtlAddFunctionTable
RtlAdjustPrivilege
RtlInitUnicodeString
RtlQueueWorkItem
RtlZeroMemory
SetPriorityClass
SetThreadPriority
SetUnhandledExceptionFilter
StartDocPrinterA
SwitchToFiber
Thread32First
Thread32Next
TlsAlloc
TlsGetValue
TlsSetValue
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualFree
VirtualQueryEx

Unions§

PsAttributeU
PsCreateInfoU