* @brief Checks if any unknown modules are present in the process by comparing new module list against the list taken at program startup * @return t

* @brief Executes cheat prevention routines, along with starting the anti-cheat monitor and anti-debugger threads * * @return Error::OK on success

RmpRemapImage This function remaps the pe image at 'ImageBase' so that the page protection of all pages contained in the image cannot be changed. Th

RmppConvertSectionCharacteristicsToPageProtection

RmppValidateRemappedImageProtection

RmppVerifyPeSectionAlignment Verify that each pe section is aligned to the system allocation granularity.

SendData - Sends `outPacket` parameter to the server returns Error::OK on success Function deletes memory of outPacket on success */

* @brief Assigns a vector of sha256 hashes to a specific section in `SectionHashes` member * @param `hList` hash vector to assign * @param `secti

@brief returns a const reverse iterator to the last element @sa https://json.nlohmann.me/api/basic_json/crbegin/

@brief returns a const reverse iterator to one before the first @sa https://json.nlohmann.me/api/basic_json/crend/

! @brief dump a floating-point number Dump a given floating-point number to output stream @a o. Works internally with @a number_buffer.

! For n != 0, returns k, such that pow10 := 10^(k-1) <= n < 10^k. For n == 0, returns 1 and sets pow10 := 1. */

! For a normalized diyfp w = f * 2^e, this function returns a (normalized) cached power-of-ten c = f_c * 2^e_c, such that the exponent of the product

! Generates V = buffer * 10^decimal_exponent, such that M- <= V <= M+. M- and M+ must be normalized and share the same exponent -60 <= e <= -32. */

@brief return whether value is a number @sa https://json.nlohmann.me/api/basic_json/is_number/

@brief return whether type is structured @sa https://json.nlohmann.me/api/basic_json/is_structured/

! @brief add to iterator @pre The iterator is initialized; i.e. `m_object != nullptr`. */

add to iterator

@brief add an object to an array @sa https://json.nlohmann.me/api/basic_json/operator+=/

! @brief subtract from iterator @pre The iterator is initialized; i.e. `m_object != nullptr`. */

* Overload to make the compiler happy while it is instantiating * dump_integer for number_unsigned_t. * Must never be called. */

! @brief skip the UTF-8 byte order mark @return true iff there is no BOM or the correct BOM has been skipped */

! @brief split the string input to reference tokens @note This function is only called by the json_pointer constructor. All excepti

@brief create a CBOR serialization of a given JSON value @sa https://json.nlohmann.me/api/basic_json/to_cbor/

@brief return the type of the JSON value (explicit) @sa https://json.nlohmann.me/api/basic_json/type/

! @brief return the value of an iterator @pre The iterator is initialized; i.e. `m_object != nullptr`. */

AddEvidence - Adds `data` to our evidence list for `flag` type. Evidence is any additional string data associated with a flag, such as a memory addres

AddModuleHash - fetches hash list for `moduleName` and adds to `moduleHashList` */

* @brief Copies a wide string to a newly allocated memory block * * @param inputString String to be copied * * @return LPWSTR, or NULL if allo

* @brief Constructs an AntiCheat object with the provided settings * * @param settings Pointer to the settings object containing configuration for

Thread::BeginExecution - Managed thread creation & start return `true` on success, `false` on failure */

ChangeFunctionName - Changes the exported function name of a module loaded in memory. Please see my project `ModifyExports` for more details/original

ChangeModuleName - Modifies the module name of a loaded module at runtime, which might trip up attackers and make certain parts of their code fail. Pl

ChangeNumberOfSections - changes the number of sections in the NT Headers to `newSectionsCount`, which can stop attackers from traversing sections in

CheckForDebugger - Thread function which loops and checks for the presense of debuggers */

CheckOpenHandles - Checks if any processes have open handles to our process, excluding whitelisted processes such as conhost.exe returns true if

CheckParentProcess - checks if the parent process is the process name `desiredParent` returns TRUE if our parameter desiredParent is the same pro

CheckUSBDevices - returns TRUE if any hardware in the PCIe slot are blacklisted (DMA involved) */

* @brief Cleans up resources and stops all threads started by the AntiCheat class * * @return Error::OK on success, otherwise an error code indica

"placement new" concept using variadic template

DetectOpenHandlesToProcess - returns a vector of SYSTEM_HANDLE which represent open handles in other processes to our current process Can be used

* @brief Performs checks to ensure security config on the system is appropriate based on program settings * * @return true if all checks pass, fal

* @brief Performs pre-initialization checks to ensure the environment is secure and meets the requirements for running the anti-cheat system * * @

DoesIATContainHooked - Returns TRUE if any routines in the IAT lead to addresses outside their respective modules if the attacker writes their ho