List of all items

Structs

• km::allocator::KernelAllocator
• km::allocator::PoolAllocator
• km::allocator::PoolBuffer
• km::allocator::PoolTag
• km::device::Device
• km::device::DeviceBuilder
• km::device::DeviceObjectRaw
• km::driver::Driver
• km::driver::DriverBuilder
• km::driver::DriverExtensionRaw
• km::driver::DriverObjectRaw
• km::driver::UnicodeStringRaw
• km::ioctl::AllocateMemoryRequest
• km::ioctl::AllocateMemoryResponse
• km::ioctl::FreeMemoryRequest
• km::ioctl::GetModuleBaseRequest
• km::ioctl::GetModuleBaseResponse
• km::ioctl::Ioctl
• km::ioctl::IoctlCode
• km::ioctl::IoctlDispatcher
• km::ioctl::ProtectMemoryRequest
• km::ioctl::ProtectMemoryResponse
• km::ioctl::ReadMemoryRequest
• km::ioctl::WriteMemoryRequest
• km::irp::AsyncParameters
• km::irp::CreateParameters
• km::irp::DeviceIoControlParameters
• km::irp::IoStackLocation
• km::irp::IoStatusBlock
• km::irp::Irp
• km::irp::IrpRaw
• km::irp::OtherParameters
• km::irp::ReadWriteParameters
• km::irp::TailOverlay
• km::memory::KernelMemory
• km::memory::Mdl
• km::memory::MdlRaw
• km::memory::PhysicalAddress
• km::memory::PhysicalMemory
• km::memory::ProtectionGuard
• km::memory::VirtualMemory
• km::process::Eprocess
• km::process::KmProcess
• km::shared::SharedBuffer
• km::shared::SharedMemory
• km::shared::SharedRingBuffer
• km::string::AnsiString
• km::string::AnsiStringRaw
• km::string::UnicodeString
• km::string::UnicodeStringRaw
• km::sync::FastMutex
• km::sync::FastMutexGuard
• km::sync::FastMutexRaw
• km::sync::Guarded
• km::sync::PushLock
• km::sync::PushLockExclusiveGuard
• km::sync::PushLockRaw
• km::sync::PushLockSharedGuard
• km::sync::SpinLock
• km::sync::SpinLockGuard
• km::sync::SpinLockRaw
• km_client::DriverClient
• km_client::DriverHandle
• km_client::ProcessOps
• km_client::RemoteMemory
• km_client::ioctl::AllocateMemoryRequest
• km_client::ioctl::AllocateMemoryResponse
• km_client::ioctl::CopyPhysicalRequest
• km_client::ioctl::FreeMemoryRequest
• km_client::ioctl::GetModuleBaseRequest
• km_client::ioctl::GetModuleBaseResponse
• km_client::ioctl::IoctlCode
• km_client::ioctl::IoctlRequest
• km_client::ioctl::IoctlResponse
• km_client::ioctl::MapPhysicalRequest
• km_client::ioctl::MapPhysicalResponse
• km_client::ioctl::ProtectMemoryRequest
• km_client::ioctl::ProtectMemoryResponse
• km_client::ioctl::QueryProcessRequest
• km_client::ioctl::QueryProcessResponse
• km_client::ioctl::ReadMemoryRequest
• km_client::ioctl::WriteMemoryRequest
• manipulation::antidebug::DebugStatus
• manipulation::hooks::HookDetector
• manipulation::hooks::HookInfo
• manipulation::hooks::HookTracker
• manipulation::hooks::IntegrityChecker
• manipulation::hooks::UnhookResult
• manipulation::hooks::Unhooker
• manipulation::inline_hook::arch::DecodedInstruction
• manipulation::inline_hook::arch::RelocationResult
• manipulation::inline_hook::arch::X64
• manipulation::inline_hook::arch::X86
• manipulation::inline_hook::asm::decoder::InstructionInfo
• manipulation::inline_hook::asm::encoder::Encoder
• manipulation::inline_hook::asm::iced_decoder::DecodedInstruction
• manipulation::inline_hook::asm::iced_decoder::InstructionDecoder
• manipulation::inline_hook::asm::iced_relocator::InstructionRelocator
• manipulation::inline_hook::asm::iced_relocator::RelocationResult
• manipulation::inline_hook::builder::HookBuilder
• manipulation::inline_hook::builder::state::DetourSet
• manipulation::inline_hook::builder::state::Ready
• manipulation::inline_hook::builder::state::TargetSet
• manipulation::inline_hook::builder::state::TrampolineAllocated
• manipulation::inline_hook::builder::state::TrampolineBuilt
• manipulation::inline_hook::builder::state::Uninitialized
• manipulation::inline_hook::guard::HookGuard
• manipulation::inline_hook::guard::StatefulHookGuard
• manipulation::inline_hook::hook::chain::HookChain
• manipulation::inline_hook::hook::eat::EatEntry
• manipulation::inline_hook::hook::eat::EatHook
• manipulation::inline_hook::hook::eat::EatHookBuilder
• manipulation::inline_hook::hook::hotpatch::HotPatchHook
• manipulation::inline_hook::hook::iat::IatEntry
• manipulation::inline_hook::hook::iat::IatHook
• manipulation::inline_hook::hook::inline::InlineHook
• manipulation::inline_hook::hook::mid::HookContext
• manipulation::inline_hook::hook::mid::MidFunctionHook
• manipulation::inline_hook::hook::veh::VehHook
• manipulation::inline_hook::hook::vmt::ShadowVmt
• manipulation::inline_hook::hook::vmt::VmtHook
• manipulation::inline_hook::hook::vmt::VmtHookBuilder
• manipulation::inline_hook::registry::HookRegistry
• manipulation::inline_hook::registry::RegisteredHook
• manipulation::inline_hook::trampoline::allocator::ExecutableMemory
• manipulation::inline_hook::trampoline::generator::TrampolineBuilder
• manipulation::inline_hook::trampoline::generator::TrampolineResult
• manipulation::manual_map::ManualMapper
• manipulation::manual_map::MappedMemory
• manipulation::manual_map::ParsedPe
• manipulation::manual_map::state::Allocated
• manipulation::manual_map::state::ImportsResolved
• manipulation::manual_map::state::Parsed
• manipulation::manual_map::state::Ready
• manipulation::manual_map::state::Relocated
• manipulation::manual_map::state::SectionsMapped
• manipulation::manual_map::state::TlsProcessed
• manipulation::remote::HandleDuplicateOptions
• manipulation::remote::HandleInfo
• manipulation::remote::InjectionResult
• manipulation::remote::ProcessAccess
• manipulation::remote::RemoteAllocation
• manipulation::remote::RemoteModule
• manipulation::remote::RemoteModuleInfo
• manipulation::remote::RemoteProcess
• manipulation::remote::RemoteProtectionGuard
• manipulation::remote::RemoteThread
• manipulation::remote::RemoteThreadOptions
• manipulation::remote::StolenHandle
• manipulation::remote::ThreadCreationFlags
• manipulation::spoof::FakeFrame
• manipulation::spoof::FrameTemplate
• manipulation::spoof::Gadget
• manipulation::spoof::GadgetCache
• manipulation::spoof::GadgetFinder
• manipulation::spoof::GadgetSearch
• manipulation::spoof::JmpGadget
• manipulation::spoof::RetGadget
• manipulation::spoof::SpoofConfig
• manipulation::spoof::SpoofTrampoline
• manipulation::spoof::SpoofedSyscall
• manipulation::spoof::StackSpoofer
• manipulation::spoof::SyntheticStack
• manipulation::spoof::TrampolineAllocator
• manipulation::syscall::ClientId
• manipulation::syscall::DirectSyscall
• manipulation::syscall::EnumeratedSyscall
• manipulation::syscall::IndirectSyscall
• manipulation::syscall::ObjectAttributes
• manipulation::syscall::SyscallEntry
• manipulation::syscall::SyscallEnumerator
• manipulation::syscall::SyscallTable
• manipulation::syscall::UnicodeString
• manipulation::unlink::SavedLinks
• manipulation::unlink::UnlinkGuard
• manipulation::unlink::UnlinkInfo
• navigation::InInitializationOrderIter
• navigation::InLoadOrderIter
• navigation::InMemoryOrderIter
• navigation::MemoryRegion
• navigation::MemoryRegionIterator
• navigation::Module
• navigation::ModuleHandle
• navigation::ModuleInfo
• navigation::ModuleIterator
• navigation::ModuleLinkPointers
• navigation::ModuleQuery
• navigation::ThreadEntry
• navigation::ThreadInfo
• navigation::ThreadIterator
• structures::ldr::LdrDataTableEntry
• structures::ldr::PebLdrData
• structures::list_entry::ListEntry
• structures::list_entry::ListEntryIter
• structures::list_entry::ListEntryIterMut
• structures::offsets::PebOffsets
• structures::offsets::TebOffsets
• structures::pe::data_directory::DataDirectory
• structures::pe::dos_header::DosHeader
• structures::pe::exports::ExportDirectory
• structures::pe::imports::ImportByName
• structures::pe::imports::ImportDescriptor
• structures::pe::imports::ImportLookupEntry
• structures::pe::nt_headers::FileHeader
• structures::pe::nt_headers::NtHeaders32
• structures::pe::nt_headers::NtHeaders64
• structures::pe::nt_headers::OptionalHeader32
• structures::pe::nt_headers::OptionalHeader64
• structures::pe::relocations::BaseRelocation
• structures::pe::relocations::RelocationEntry
• structures::pe::section_header::SectionHeader
• structures::pe::tls::TlsDirectory32
• structures::pe::tls::TlsDirectory64
• structures::peb::Peb
• structures::teb::Teb
• structures::unicode_string::UnicodeString
• util::memory::ProtectionGuard
• util::pattern::Pattern
• util::pattern::PatternScanner
• util::pattern::ScanMatch
• util::pattern::Scanner
• util::simd::SimdScanner
• version::WindowsVersion

Enums

• error::ModuleListType
• error::WraithError
• km::allocator::PoolType
• km::device::DeviceCharacteristics
• km::device::DeviceType
• km::error::KmError
• km::ioctl::IoctlAccess
• km::ioctl::IoctlMethod
• km::irp::IrpMajorFunction
• km::memory::AccessMode
• km::memory::LockOperation
• km::memory::MdlFlags
• km::memory::MmCacheType
• km::memory::MmPriority
• km::process::ProcessAccess
• km_client::ClientError
• manipulation::hooks::HookType
• manipulation::inline_hook::guard::HookState
• manipulation::inline_hook::hook::veh::BreakCondition
• manipulation::inline_hook::hook::veh::BreakLength
• manipulation::inline_hook::hook::veh::DebugRegister
• manipulation::inline_hook::hook::veh::VehHookType
• manipulation::inline_hook::registry::HookType
• manipulation::remote::InjectionMethod
• manipulation::spoof::GadgetPattern
• manipulation::spoof::GadgetType
• manipulation::spoof::Register
• manipulation::spoof::SpoofMode
• manipulation::syscall::SyscallMode
• navigation::MemoryState
• navigation::MemoryType
• structures::pe::data_directory::DataDirectoryType
• structures::pe::nt_headers::NtHeaders
• structures::pe::relocations::RelocationType
• structures::pe::tls::TlsDirectory
• util::simd::SimdLevel
• version::WindowsRelease

Unions

• km::irp::IoStackParameters
• km::irp::IrpAssociatedUnion
• km::irp::IrpOverlay
• km::irp::IrpTail
• structures::pe::imports::ThunkData32
• structures::pe::imports::ThunkData64

Traits

• km::driver::DriverImpl
• km::ioctl::IoctlHandler
• manipulation::inline_hook::arch::Architecture
• manipulation::inline_hook::hook::Hook
• manipulation::inline_hook::hook::vmt::VmtObject

Macros

• define_ioctl_handler
• driver_entry
• hash
• ioctl_dispatcher
• unicode_str

Functions

• arch::segment::get_current_pid
• arch::segment::get_current_tid
• arch::segment::get_peb
• arch::segment::get_teb
• arch::segment::read_gs_dword
• arch::segment::read_gs_qword
• km::device::delete_device
• km::error::status::nt_error
• km::error::status::nt_information
• km::error::status::nt_success
• km::error::status::nt_warning
• km::string::encode_wide_const
• manipulation::antidebug::check_being_debugged
• manipulation::antidebug::check_heap_flags
• manipulation::antidebug::check_nt_global_flag
• manipulation::antidebug::clear_being_debugged
• manipulation::antidebug::clear_heap_flags
• manipulation::antidebug::clear_nt_global_flag
• manipulation::antidebug::full_cleanup
• manipulation::antidebug::full_peb_cleanup
• manipulation::antidebug::get_debug_status
• manipulation::antidebug::get_hidden_threads
• manipulation::antidebug::hide_current_thread
• manipulation::antidebug::hide_thread
• manipulation::antidebug::is_debugger_present
• manipulation::antidebug::is_thread_hidden
• manipulation::hooks::is_hooked
• manipulation::hooks::scan_for_hooks
• manipulation::hooks::scan_module
• manipulation::hooks::unhook_module
• manipulation::hooks::unhook_ntdll
• manipulation::inline_hook::asm::decoder::decode_instruction
• manipulation::inline_hook::asm::decoder::find_boundary
• manipulation::inline_hook::asm::iced_decoder::decode_one
• manipulation::inline_hook::asm::iced_decoder::find_instruction_boundary
• manipulation::inline_hook::asm::iced_decoder::uses_relative_addressing
• manipulation::inline_hook::asm::iced_relocator::instruction_needs_relocation
• manipulation::inline_hook::asm::iced_relocator::relocate_block
• manipulation::inline_hook::asm::iced_relocator::relocate_one
• manipulation::inline_hook::builder::build
• manipulation::inline_hook::create_chain
• manipulation::inline_hook::eat_hook
• manipulation::inline_hook::hook
• manipulation::inline_hook::hook::eat::enumerate_eat_entries
• manipulation::inline_hook::hook::eat::find_eat_entry
• manipulation::inline_hook::hook::eat::find_eat_entry_by_ordinal
• manipulation::inline_hook::hook::hotpatch::hotpatch
• manipulation::inline_hook::hook::hotpatch::is_hot_patchable
• manipulation::inline_hook::hook::iat::enumerate_iat_entries
• manipulation::inline_hook::hook::iat::find_iat_entry
• manipulation::inline_hook::hook::iat::hook_import
• manipulation::inline_hook::hook::iat::hook_import_all
• manipulation::inline_hook::hook::inline::hook
• manipulation::inline_hook::hook::inline::hook_native
• manipulation::inline_hook::hook::veh::get_available_debug_register
• manipulation::inline_hook::hook::vmt::estimate_vtable_size
• manipulation::inline_hook::hook::vmt::get_vtable
• manipulation::inline_hook::hook::vmt::get_vtable_entry
• manipulation::inline_hook::hook_export
• manipulation::inline_hook::hook_export_native
• manipulation::inline_hook::hook_native
• manipulation::inline_hook::hotpatch
• manipulation::inline_hook::iat_hook
• manipulation::inline_hook::iat_hook_in
• manipulation::inline_hook::is_hot_patchable
• manipulation::inline_hook::mid_hook
• manipulation::inline_hook::registry::active_hook_count
• manipulation::inline_hook::registry::get_hook_info
• manipulation::inline_hook::registry::get_hooks_in_range
• manipulation::inline_hook::registry::get_registry
• manipulation::inline_hook::registry::is_hooked
• manipulation::inline_hook::registry::register_hook
• manipulation::inline_hook::registry::total_hook_count
• manipulation::inline_hook::registry::unregister_hook
• manipulation::inline_hook::registry::with_registry
• manipulation::inline_hook::shadow_vmt
• manipulation::inline_hook::trampoline::generator::build_trampoline
• manipulation::inline_hook::veh_hook_hardware
• manipulation::inline_hook::veh_hook_int3
• manipulation::inline_hook::vmt_hook
• manipulation::manual_map::map_and_call
• manipulation::manual_map::map_file
• manipulation::manual_map::map_file_and_call
• manipulation::manual_map::map_pe
• manipulation::remote::create_remote_thread
• manipulation::remote::duplicate_handle
• manipulation::remote::enumerate_remote_modules
• manipulation::remote::find_remote_module
• manipulation::remote::get_remote_peb
• manipulation::remote::inject_apc
• manipulation::remote::inject_shellcode
• manipulation::remote::inject_thread_hijack
• manipulation::remote::inject_via_section
• manipulation::remote::steal_handle
• manipulation::spoof::get_gadget_cache
• manipulation::spoof::init_gadget_cache
• manipulation::syscall::enumerate_syscalls
• manipulation::syscall::get_syscall_mode
• manipulation::syscall::get_syscall_table
• manipulation::syscall::hide_thread_from_debugger
• manipulation::syscall::nt_allocate_virtual_memory
• manipulation::syscall::nt_close
• manipulation::syscall::nt_free_virtual_memory
• manipulation::syscall::nt_open_process
• manipulation::syscall::nt_protect_virtual_memory
• manipulation::syscall::nt_query_information_process
• manipulation::syscall::nt_query_system_information
• manipulation::syscall::nt_query_virtual_memory
• manipulation::syscall::nt_read_virtual_memory
• manipulation::syscall::nt_set_information_thread
• manipulation::syscall::nt_success
• manipulation::syscall::nt_write_virtual_memory
• manipulation::syscall::set_syscall_mode
• manipulation::unlink::get_unlink_info
• manipulation::unlink::is_module_linked
• manipulation::unlink::relink_module
• manipulation::unlink::unlink_by_name
• manipulation::unlink::unlink_module
• manipulation::unlink::unlink_self
• navigation::collect_modules
• navigation::find_executable_regions
• navigation::find_image_regions
• navigation::find_private_regions
• navigation::get_kernel32
• navigation::get_ntdll
• navigation::get_ntdll_export
• navigation::get_proc_address
• navigation::get_thread_ids
• navigation::module_count
• navigation::query_region
• navigation::thread_count
• structures::list_entry::link_entry_after
• structures::list_entry::unlink_entry
• structures::unicode_string::str_to_wide
• util::hash::djb2_hash
• util::hash::djb2_hash_lowercase
• util::hash::fnv1a_hash
• util::memory::protect_memory
• util::memory::read_memory
• util::memory::write_memory
• util::pattern::find_pattern_all_modules
• util::pattern::find_pattern_executable
• util::pattern::find_pattern_in_module
• util::pattern::find_pattern_in_module_first
• util::pattern::find_pattern_in_region
• util::simd::simd_scan
• util::simd::simd_scan_first

Type Aliases

• arch::NativePtr
• error::Result
• km::driver::DriverDispatch
• km::driver::DriverEntry
• km::driver::DriverUnload
• km::error::KmResult
• km::error::NtStatus
• km_client::ClientResult
• manipulation::inline_hook::arch::NativeArch
• manipulation::inline_hook::hook::eat::EatHookGuard
• manipulation::inline_hook::hook::iat::IatHookGuard
• manipulation::inline_hook::hook::mid::MidHookFn
• manipulation::inline_hook::hook::vmt::VmtHookGuard
• structures::pe::tls::TlsCallback

Statics

• manipulation::spoof::COMMON_FRAME_TEMPLATES

Constants

• VERSION
• arch::IS_64BIT
• arch::PTR_SIZE
• km::device::DeviceFlags::BUFFERED_IO
• km::device::DeviceFlags::DIRECT_IO
• km::device::DeviceFlags::DO_BUFFERED_IO
• km::device::DeviceFlags::DO_DEVICE_INITIALIZING
• km::device::DeviceFlags::DO_DIRECT_IO
• km::device::DeviceFlags::DO_EXCLUSIVE
• km::device::DeviceFlags::NONE
• km::device::DeviceFlags::POWER_PAGEABLE
• km::error::status::STATUS_ACCESS_DENIED
• km::error::status::STATUS_BUFFER_TOO_SMALL
• km::error::status::STATUS_INFO_LENGTH_MISMATCH
• km::error::status::STATUS_INSUFFICIENT_RESOURCES
• km::error::status::STATUS_INVALID_DEVICE_REQUEST
• km::error::status::STATUS_INVALID_HANDLE
• km::error::status::STATUS_INVALID_PARAMETER
• km::error::status::STATUS_NOT_IMPLEMENTED
• km::error::status::STATUS_NO_MEMORY
• km::error::status::STATUS_NO_SUCH_DEVICE
• km::error::status::STATUS_NO_SUCH_FILE
• km::error::status::STATUS_OBJECT_NAME_COLLISION
• km::error::status::STATUS_OBJECT_NAME_NOT_FOUND
• km::error::status::STATUS_PARTIAL_COPY
• km::error::status::STATUS_SUCCESS
• km::error::status::STATUS_UNSUCCESSFUL
• km::ioctl::codes::ALLOCATE_MEMORY
• km::ioctl::codes::COPY_PHYSICAL
• km::ioctl::codes::FREE_MEMORY
• km::ioctl::codes::GET_MODULE_BASE
• km::ioctl::codes::MAP_PHYSICAL
• km::ioctl::codes::PROTECT_MEMORY
• km::ioctl::codes::QUERY_PROCESS
• km::ioctl::codes::READ_MEMORY
• km::ioctl::codes::UNMAP_PHYSICAL
• km::ioctl::codes::WRITE_MEMORY
• km::memory::protection::PAGE_EXECUTE
• km::memory::protection::PAGE_EXECUTE_READ
• km::memory::protection::PAGE_EXECUTE_READWRITE
• km::memory::protection::PAGE_EXECUTE_WRITECOPY
• km::memory::protection::PAGE_GUARD
• km::memory::protection::PAGE_NOACCESS
• km::memory::protection::PAGE_NOCACHE
• km::memory::protection::PAGE_READONLY
• km::memory::protection::PAGE_READWRITE
• km::memory::protection::PAGE_WRITECOPY
• km_client::MemoryProtection::EXECUTE
• km_client::MemoryProtection::EXECUTE_READ
• km_client::MemoryProtection::EXECUTE_READWRITE
• km_client::MemoryProtection::EXECUTE_WRITECOPY
• km_client::MemoryProtection::GUARD
• km_client::MemoryProtection::NOACCESS
• km_client::MemoryProtection::NOCACHE
• km_client::MemoryProtection::READONLY
• km_client::MemoryProtection::READWRITE
• km_client::MemoryProtection::WRITECOPY
• km_client::ioctl::access::ANY
• km_client::ioctl::access::READ
• km_client::ioctl::access::READ_WRITE
• km_client::ioctl::access::WRITE
• km_client::ioctl::codes::ALLOCATE_MEMORY
• km_client::ioctl::codes::COPY_PHYSICAL
• km_client::ioctl::codes::FREE_MEMORY
• km_client::ioctl::codes::GET_MODULE_BASE
• km_client::ioctl::codes::MAP_PHYSICAL
• km_client::ioctl::codes::PROTECT_MEMORY
• km_client::ioctl::codes::QUERY_PROCESS
• km_client::ioctl::codes::READ_MEMORY
• km_client::ioctl::codes::UNMAP_PHYSICAL
• km_client::ioctl::codes::WRITE_MEMORY
• manipulation::manual_map::reason::DLL_PROCESS_ATTACH
• manipulation::manual_map::reason::DLL_PROCESS_DETACH
• manipulation::manual_map::reason::DLL_THREAD_ATTACH
• manipulation::manual_map::reason::DLL_THREAD_DETACH
• manipulation::syscall::CURRENT_PROCESS
• manipulation::syscall::CURRENT_THREAD
• manipulation::syscall::MEM_COMMIT
• manipulation::syscall::MEM_RELEASE
• manipulation::syscall::MEM_RESERVE
• manipulation::syscall::OBJ_CASE_INSENSITIVE
• manipulation::syscall::OBJ_INHERIT
• manipulation::syscall::PAGE_EXECUTE
• manipulation::syscall::PAGE_EXECUTE_READ
• manipulation::syscall::PAGE_EXECUTE_READWRITE
• manipulation::syscall::PAGE_EXECUTE_WRITECOPY
• manipulation::syscall::PAGE_GUARD
• manipulation::syscall::PAGE_NOACCESS
• manipulation::syscall::PAGE_READONLY
• manipulation::syscall::PAGE_READWRITE
• manipulation::syscall::PAGE_WRITECOPY
• manipulation::syscall::PROCESS_ALL_ACCESS
• manipulation::syscall::PROCESS_QUERY_INFORMATION
• manipulation::syscall::PROCESS_QUERY_LIMITED_INFORMATION
• manipulation::syscall::PROCESS_VM_OPERATION
• manipulation::syscall::PROCESS_VM_READ
• manipulation::syscall::PROCESS_VM_WRITE
• manipulation::syscall::THREAD_ALL_ACCESS
• manipulation::syscall::THREAD_HIDE_FROM_DEBUGGER
• manipulation::syscall::THREAD_QUERY_INFORMATION
• manipulation::syscall::THREAD_SET_INFORMATION
• manipulation::syscall::hashes::NT_ALLOCATE_VIRTUAL_MEMORY
• manipulation::syscall::hashes::NT_CLOSE
• manipulation::syscall::hashes::NT_CREATE_FILE
• manipulation::syscall::hashes::NT_CREATE_SECTION
• manipulation::syscall::hashes::NT_CREATE_THREAD_EX
• manipulation::syscall::hashes::NT_FREE_VIRTUAL_MEMORY
• manipulation::syscall::hashes::NT_MAP_VIEW_OF_SECTION
• manipulation::syscall::hashes::NT_OPEN_FILE
• manipulation::syscall::hashes::NT_OPEN_PROCESS
• manipulation::syscall::hashes::NT_PROTECT_VIRTUAL_MEMORY
• manipulation::syscall::hashes::NT_QUERY_INFORMATION_PROCESS
• manipulation::syscall::hashes::NT_QUERY_SYSTEM_INFORMATION
• manipulation::syscall::hashes::NT_QUERY_VIRTUAL_MEMORY
• manipulation::syscall::hashes::NT_READ_FILE
• manipulation::syscall::hashes::NT_READ_VIRTUAL_MEMORY
• manipulation::syscall::hashes::NT_SET_INFORMATION_THREAD
• manipulation::syscall::hashes::NT_UNMAP_VIEW_OF_SECTION
• manipulation::syscall::hashes::NT_WRITE_FILE
• manipulation::syscall::hashes::NT_WRITE_VIRTUAL_MEMORY
• manipulation::syscall::status::STATUS_ACCESS_DENIED
• manipulation::syscall::status::STATUS_BUFFER_TOO_SMALL
• manipulation::syscall::status::STATUS_INFO_LENGTH_MISMATCH
• manipulation::syscall::status::STATUS_INVALID_HANDLE
• manipulation::syscall::status::STATUS_SUCCESS
• structures::ldr::IN_INITIALIZATION_ORDER_LINKS_OFFSET
• structures::ldr::IN_LOAD_ORDER_LINKS_OFFSET
• structures::ldr::IN_MEMORY_ORDER_LINKS_OFFSET
• structures::pe::dos_header::DOS_SIGNATURE
• structures::pe::imports::IMAGE_ORDINAL_FLAG32
• structures::pe::imports::IMAGE_ORDINAL_FLAG64
• structures::pe::nt_headers::NT_SIGNATURE
• structures::pe::nt_headers::PE32PLUS_MAGIC
• structures::pe::nt_headers::PE32_MAGIC
• structures::pe::section_header::IMAGE_SCN_CNT_CODE
• structures::pe::section_header::IMAGE_SCN_CNT_INITIALIZED_DATA
• structures::pe::section_header::IMAGE_SCN_CNT_UNINITIALIZED_DATA
• structures::pe::section_header::IMAGE_SCN_MEM_DISCARDABLE
• structures::pe::section_header::IMAGE_SCN_MEM_EXECUTE
• structures::pe::section_header::IMAGE_SCN_MEM_READ
• structures::pe::section_header::IMAGE_SCN_MEM_WRITE
• structures::pe::section_header::SECTION_NAME_SIZE