Struct memflow_win32::offsets::Win32Offsets
source · [−]#[repr(transparent)]pub struct Win32Offsets(pub Win32OffsetTable);
Tuple Fields
0: Win32OffsetTable
Implementations
sourceimpl Win32Offsets
impl Win32Offsets
pub fn from_pdb<P: AsRef<Path>>(pdb_path: P) -> Result<Self>
pub fn from_pdb_slice(pdb_slice: &[u8]) -> Result<Self>
sourcepub fn list_blink(&self) -> usize
pub fn list_blink(&self) -> usize
_LIST_ENTRY::Blink offset
sourcepub fn eproc_link(&self) -> usize
pub fn eproc_link(&self) -> usize
_LIST_ENTRY::Flink offset
sourcepub fn phys_mem_block(&self) -> usize
pub fn phys_mem_block(&self) -> usize
MmPhysicalMemoryBlock offset
sourcepub fn kproc_dtb(&self) -> usize
pub fn kproc_dtb(&self) -> usize
_KPROCESS::DirectoryTableBase offset Exists since version 3.10
sourcepub fn eproc_name(&self) -> usize
pub fn eproc_name(&self) -> usize
_EPROCESS::ImageFileName offset Exists since version 3.10
sourcepub fn eproc_section_base(&self) -> usize
pub fn eproc_section_base(&self) -> usize
_EPROCESS::SectionBaseAddress offset Exists since version 3.10
sourcepub fn eproc_exit_status(&self) -> usize
pub fn eproc_exit_status(&self) -> usize
_EPROCESS::ExitStatus offset Exists since version 3.10
sourcepub fn eproc_thread_list(&self) -> usize
pub fn eproc_thread_list(&self) -> usize
_EPROCESS::ThreadListHead offset Exists since version 5.10
sourcepub fn eproc_wow64(&self) -> usize
pub fn eproc_wow64(&self) -> usize
_EPROCESS::VadRoot offset Exists since version 5.0
sourcepub fn eproc_vad_root(&self) -> usize
pub fn eproc_vad_root(&self) -> usize
_EPROCESS::WoW64Process offset Exists since version xxx
sourcepub fn kthread_teb(&self) -> usize
pub fn kthread_teb(&self) -> usize
_KTHREAD::Teb offset Exists since version 6.2
sourcepub fn ethread_list_entry(&self) -> usize
pub fn ethread_list_entry(&self) -> usize
_ETHREAD::ThreadListEntry offset Exists since version 6.2
sourcepub fn teb_peb_x86(&self) -> usize
pub fn teb_peb_x86(&self) -> usize
_TEB32::ProcessEnvironmentBlock offset Exists since version x.x
sourcepub fn balanced_node_left(&self) -> usize
pub fn balanced_node_left(&self) -> usize
_RTL_BALANCED_NODE::Left offset
sourcepub fn balanced_node_right(&self) -> usize
pub fn balanced_node_right(&self) -> usize
_RTL_BALANCED_NODE::Right offset
sourcepub fn mm_vad_vad_node(&self) -> usize
pub fn mm_vad_vad_node(&self) -> usize
_MMVAD_SHORT::VadNode offset
sourcepub fn mm_vad_starting_vpn(&self) -> usize
pub fn mm_vad_starting_vpn(&self) -> usize
_MMVAD_SHORT::StartingVpn offset
sourcepub fn mm_vad_ending_vpn(&self) -> usize
pub fn mm_vad_ending_vpn(&self) -> usize
_MMVAD_SHORT::EndingVpn offset
sourcepub fn mm_vad_starting_vpn_high(&self) -> usize
pub fn mm_vad_starting_vpn_high(&self) -> usize
_MMVAD_SHORT::StartingVpnHigh offset
sourcepub fn mm_vad_ending_vpn_high(&self) -> usize
pub fn mm_vad_ending_vpn_high(&self) -> usize
_MMVAD_SHORT::EndingVpnHigh offset
pub fn builder() -> Win32OffsetBuilder
Trait Implementations
sourceimpl Clone for Win32Offsets
impl Clone for Win32Offsets
sourcefn clone(&self) -> Win32Offsets
fn clone(&self) -> Win32Offsets
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for Win32Offsets
impl Debug for Win32Offsets
sourceimpl From<Win32OffsetTable> for Win32Offsets
impl From<Win32OffsetTable> for Win32Offsets
sourcefn from(other: Win32OffsetTable) -> Self
fn from(other: Win32OffsetTable) -> Self
Performs the conversion.
sourceimpl From<Win32Offsets> for Win32OffsetTable
impl From<Win32Offsets> for Win32OffsetTable
sourcefn from(other: Win32Offsets) -> Self
fn from(other: Win32Offsets) -> Self
Performs the conversion.
sourceimpl Serialize for Win32Offsets
impl Serialize for Win32Offsets
Auto Trait Implementations
impl RefUnwindSafe for Win32Offsets
impl Send for Win32Offsets
impl Sync for Win32Offsets
impl Unpin for Win32Offsets
impl UnwindSafe for Win32Offsets
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcepub fn borrow_mut(&mut self) -> &mut T
pub fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
impl<'a, T> BorrowOwned<'a> for T where
T: 'a + Clone,
impl<'a, T> BorrowOwned<'a> for T where
T: 'a + Clone,
type ROwned = T
type ROwned = T
The owned type, stored in RCow::Owned
pub fn r_borrow(
this: &'a <T as BorrowOwned<'a>>::ROwned
) -> <T as BorrowOwned<'a>>::RBorrowed
pub fn r_to_owned(
this: <T as BorrowOwned<'a>>::RBorrowed
) -> <T as BorrowOwned<'a>>::ROwned
pub fn deref_borrowed(this: &<T as BorrowOwned<'a>>::RBorrowed) -> &T
pub fn deref_owned(this: &<T as BorrowOwned<'a>>::ROwned) -> &T
pub fn from_cow_borrow(this: &'a T) -> <T as BorrowOwned<'a>>::RBorrowed
pub fn from_cow_owned(
this: <T as ToOwned>::Owned
) -> <T as BorrowOwned<'a>>::ROwned
pub fn into_cow_borrow(this: <T as BorrowOwned<'a>>::RBorrowed) -> &'a T
pub fn into_cow_owned(
this: <T as BorrowOwned<'a>>::ROwned
) -> <T as ToOwned>::Owned
impl<T> GetWithMetadata for T
impl<T> GetWithMetadata for T
type ForSelf = WithMetadata_<T, T>
type ForSelf = WithMetadata_<T, T>
This is always WithMetadata_<Self, Self>
impl<S> ROExtAcc for S
impl<S> ROExtAcc for S
pub fn f_get<F>(&self, offset: FieldOffset<S, F, Aligned>) -> &F
pub fn f_get<F>(&self, offset: FieldOffset<S, F, Aligned>) -> &F
Gets a reference to a field, determined by offset
. Read more
pub fn f_get_mut<F>(&mut self, offset: FieldOffset<S, F, Aligned>) -> &mut F
pub fn f_get_mut<F>(&mut self, offset: FieldOffset<S, F, Aligned>) -> &mut F
Gets a muatble reference to a field, determined by offset
. Read more
pub fn f_get_ptr<F, A>(&self, offset: FieldOffset<S, F, A>) -> *const F
pub fn f_get_ptr<F, A>(&self, offset: FieldOffset<S, F, A>) -> *const F
Gets a const pointer to a field,
the field is determined by offset
. Read more
pub fn f_get_mut_ptr<F, A>(&mut self, offset: FieldOffset<S, F, A>) -> *mut F
pub fn f_get_mut_ptr<F, A>(&mut self, offset: FieldOffset<S, F, A>) -> *mut F
Gets a mutable pointer to a field, determined by offset
. Read more
impl<S> ROExtOps<Aligned> for S
impl<S> ROExtOps<Aligned> for S
pub fn f_replace<F>(
&mut self,
offset: FieldOffset<S, F, Aligned>,
value: F
) -> F
pub fn f_replace<F>(
&mut self,
offset: FieldOffset<S, F, Aligned>,
value: F
) -> F
Replaces a field (determined by offset
) with value
,
returning the previous value of the field. Read more
pub fn f_swap<F>(&mut self, offset: FieldOffset<S, F, Aligned>, right: &mut S)
pub fn f_swap<F>(&mut self, offset: FieldOffset<S, F, Aligned>, right: &mut S)
Swaps a field (determined by offset
) with the same field in right
. Read more
pub fn f_get_copy<F>(&self, offset: FieldOffset<S, F, Aligned>) -> F where
F: Copy,
pub fn f_get_copy<F>(&self, offset: FieldOffset<S, F, Aligned>) -> F where
F: Copy,
Gets a copy of a field (determined by offset
).
The field is determined by offset
. Read more
impl<S> ROExtOps<Unaligned> for S
impl<S> ROExtOps<Unaligned> for S
pub fn f_replace<F>(
&mut self,
offset: FieldOffset<S, F, Unaligned>,
value: F
) -> F
pub fn f_replace<F>(
&mut self,
offset: FieldOffset<S, F, Unaligned>,
value: F
) -> F
Replaces a field (determined by offset
) with value
,
returning the previous value of the field. Read more
pub fn f_swap<F>(&mut self, offset: FieldOffset<S, F, Unaligned>, right: &mut S)
pub fn f_swap<F>(&mut self, offset: FieldOffset<S, F, Unaligned>, right: &mut S)
Swaps a field (determined by offset
) with the same field in right
. Read more
pub fn f_get_copy<F>(&self, offset: FieldOffset<S, F, Unaligned>) -> F where
F: Copy,
pub fn f_get_copy<F>(&self, offset: FieldOffset<S, F, Unaligned>) -> F where
F: Copy,
Gets a copy of a field (determined by offset
).
The field is determined by offset
. Read more
impl<T> SelfOps for T where
T: ?Sized,
impl<T> SelfOps for T where
T: ?Sized,
fn eq_id(&self, other: &Self) -> bool
fn eq_id(&self, other: &Self) -> bool
Compares the address of self
with the address of other
. Read more
fn piped<F, U>(self, f: F) -> U where
F: FnOnce(Self) -> U,
fn piped<F, U>(self, f: F) -> U where
F: FnOnce(Self) -> U,
Emulates the pipeline operator, allowing method syntax in more places. Read more
fn piped_ref<'a, F, U>(&'a self, f: F) -> U where
F: FnOnce(&'a Self) -> U,
fn piped_ref<'a, F, U>(&'a self, f: F) -> U where
F: FnOnce(&'a Self) -> U,
The same as piped
except that the function takes &Self
Useful for functions that take &Self
instead of Self
. Read more
fn piped_mut<'a, F, U>(&'a mut self, f: F) -> U where
F: FnOnce(&'a mut Self) -> U,
fn piped_mut<'a, F, U>(&'a mut self, f: F) -> U where
F: FnOnce(&'a mut Self) -> U,
The same as piped
, except that the function takes &mut Self
.
Useful for functions that take &mut Self
instead of Self
. Read more
fn mutated<F>(self, f: F) -> Self where
F: FnOnce(&mut Self),
fn mutated<F>(self, f: F) -> Self where
F: FnOnce(&mut Self),
Mutates self using a closure taking self by mutable reference, passing it along the method chain. Read more
fn observe<F>(self, f: F) -> Self where
F: FnOnce(&Self),
fn observe<F>(self, f: F) -> Self where
F: FnOnce(&Self),
Observes the value of self, passing it along unmodified. Useful in long method chains. Read more
fn into_<T>(self) -> T where
Self: Into<T>,
fn into_<T>(self) -> T where
Self: Into<T>,
Performs a conversion with Into
.
using the turbofish .into_::<_>()
syntax. Read more
fn as_ref_<T>(&self) -> &T where
Self: AsRef<T>,
T: ?Sized,
fn as_ref_<T>(&self) -> &T where
Self: AsRef<T>,
T: ?Sized,
Performs a reference to reference conversion with AsRef
,
using the turbofish .as_ref_::<_>()
syntax. Read more
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcepub fn to_owned(&self) -> T
pub fn to_owned(&self) -> T
Creates owned data from borrowed data, usually by cloning. Read more
sourcepub fn clone_into(&self, target: &mut T)
pub fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
impl<This> TransmuteElement for This where
This: ?Sized,
impl<This> TransmuteElement for This where
This: ?Sized,
unsafe fn transmute_element<T>(self) -> Self::TransmutedPtr where
Self: CanTransmuteElement<T>,
unsafe fn transmute_element<T>(self) -> Self::TransmutedPtr where
Self: CanTransmuteElement<T>,
Transmutes the element type of this pointer.. Read more
impl<T> TypeIdentity for T where
T: ?Sized,
impl<T> TypeIdentity for T where
T: ?Sized,
type Type = T
type Type = T
This is always Self
.
fn into_type(self) -> Self::Type where
Self::Type: Sized,
fn into_type(self) -> Self::Type where
Self::Type: Sized,
Converts a value back to the original type.
fn as_type(&self) -> &Self::Type
fn as_type(&self) -> &Self::Type
Converts a reference back to the original type.
fn as_type_mut(&mut self) -> &mut Self::Type
fn as_type_mut(&mut self) -> &mut Self::Type
Converts a mutable reference back to the original type.
fn into_type_box(self: Box<Self, Global>) -> Box<Self::Type, Global>
fn into_type_box(self: Box<Self, Global>) -> Box<Self::Type, Global>
Converts a box back to the original type.
fn into_type_arc(this: Arc<Self>) -> Arc<Self::Type>
fn into_type_arc(this: Arc<Self>) -> Arc<Self::Type>
Converts an Arc back to the original type. Read more
fn into_type_rc(this: Rc<Self>) -> Rc<Self::Type>
fn into_type_rc(this: Rc<Self>) -> Rc<Self::Type>
Converts an Rc back to the original type. Read more
fn from_type(this: Self::Type) -> Self where
Self::Type: Sized,
fn from_type(this: Self::Type) -> Self where
Self::Type: Sized,
Converts a value back to the original type.
fn from_type_ref(this: &Self::Type) -> &Self
fn from_type_ref(this: &Self::Type) -> &Self
Converts a reference back to the original type.
fn from_type_mut(this: &mut Self::Type) -> &mut Self
fn from_type_mut(this: &mut Self::Type) -> &mut Self
Converts a mutable reference back to the original type.
fn from_type_box(this: Box<Self::Type, Global>) -> Box<Self, Global>
fn from_type_box(this: Box<Self::Type, Global>) -> Box<Self, Global>
Converts a box back to the original type.
fn from_type_arc(this: Arc<Self::Type>) -> Arc<Self>
fn from_type_arc(this: Arc<Self::Type>) -> Arc<Self>
Converts an Arc back to the original type.
fn from_type_rc(this: Rc<Self::Type>) -> Rc<Self>
fn from_type_rc(this: Rc<Self::Type>) -> Rc<Self>
Converts an Rc back to the original type.