Crate vmread_sys_kmod

Source

Re-exports§

pub extern crate vmread_sys;

Structs§

ProcessData
RWInfo
WinCtx
WinExport
WinExportList
WinModule
WinModuleList
WinOffsets
WinProc
WinProcList
_IMAGE_DATA_DIRECTORY
_IMAGE_FILE_HEADER
_IMAGE_NT_HEADERS64
_IMAGE_OPTIONAL_HEADER64
_PEB
_PEB32
tlb_t

Statics§

vmread_dfile

Functions§

FindProcAddress⚠
@brief Find the proc address inside a given export list
FlushTlb⚠
@brief Flush all TLB entries
FreeContext⚠
@brief Free the vmread context
FreeExportList⚠
@brief Free the data inside the export list
FreeModuleList⚠
@brief Free a given module list
FreeProcessList⚠
@brief Free the data inside a process list
GenerateExportList⚠
@brief Generate a module export list
GenerateKernelModuleList⚠
@brief GenerateKernelModuleList
GenerateModuleList⚠
@brief Generate the module list of a process
GenerateProcessList⚠
@brief Generate the list of processes
GetDefaultMemCacheTime⚠
@brief Get the default cache validity
GetModuleInfo⚠
@brief Find the module by a given name
GetNTHeader⚠
@brief Get the NT header of a module
GetPeb⚠
@brief Get the process environment block
GetPeb32⚠
@brief Get the process environment block (32-bit version)
GetProcAddress⚠
@brief Get the address of a module export
GetTlb⚠
@brief Retrieve current thread’s TLB
InitializeContext⚠
@brief Initialize the vmread context
MemRead⚠
@brief Read a piece of data in physical VM address space
MemReadMul⚠
@brief Read multiple pieces of data in physical VM address space
MemReadU64⚠
@brief Read a unsigned 64-bit integer in physical VM address space
MemWrite⚠
@brief Write a piece of data in physical VM address space
MemWriteMul⚠
@brief Write multiple pieces of data in physical VM address space
MemWriteU64⚠
@brief Write a unsigned 64-bit integer in physical VM address space
ParseExportTable⚠
@brief Parse module export table, writing them to the export list
SetMemCacheTime⚠
@brief Set translation cache validity time in msecs
VMemRead⚠
@brief Read data in virtual VM address space
VMemReadMul⚠
@brief Read multiple pieces of data in virtual VM address space
VMemReadU64⚠
@brief Read a unsigned 64-bit integer in virtual VM address space
VMemWrite⚠
@brief Write data in virtual addresss space
VMemWriteMul⚠
@brief Write multiple pieces of data in virtual VM address space
VMemWriteU64⚠
@brief Write a unsigned 64-bit integer in virtual VM address space
VTranslate⚠
@brief Translate a virtual VM address into a physical one
VerifyTlb⚠
@brief Verify the TLB entries

Type Aliases§

IMAGE_DATA_DIRECTORY
IMAGE_FILE_HEADER
IMAGE_NT_HEADERS
IMAGE_OPTIONAL_HEADER64
PEB
PEB32
__int64_t
__off64_t
__off_t
__pid_t
__ssize_t
__uint8_t
__uint16_t
__uint32_t
__uint64_t
pid_t
size_t
ssize_t