Create new, unassociated label.

<summary> Load arbitrary driver </summary> <param name="svcName">Driver service name</param> <param name="path">Driver file path</param> <returns>Stat

Create a new `Lock` instance.

<summary> Manually map another system driver into system space </summary> <param name="path">Fully quialified path to the drver</param> <returns>Statu

<summary> Manually map PE image into underlying target process </summary> <param name="path">Image path</param> <param name="buffer">Image data buffer

<summary> MemBlock ctor </summary> <param name="mem">Process memory routines</param> <param name="ptr">Memory address</param> <param name="size">Block

<summary> MemBlock ctor </summary>

<summary> MemBlock_p ctor </summary> <param name="mem">Process memory routines</param> <param name="ptr">Memory address</param> <param name="size">Blo

<summary> Manually map PE image </summary> <param name="pid">Target PID</param> <param name="path">Full qualified image path</param> <param name="flag

Destroy `Node`.

<summary> Access violation handler Used when hooking function return </summary> <param name="DebugEv">Debug event data</param> <returns>Status</return

<summary> Int 3 handler </summary> <param name="DebugEv">Debug event data</param> <returns>Status</returns>

<summary> Debug event handler </summary> <param name="DebugEv">Debug event data</param> <returns>Status</returns>

<summary> Trace and hardware breakpoints handler </summary> <param name="DebugEv">Debug event data</param> <returns>Status</returns>

Create an uninitialized operand.

<summary> Extract methods from image </summary> <param name="methods">Found Methods</param> <returns>true on success</returns>

Create a new instance of `PodVectorBase`.

<summary> Build module symbol map </summary> <returns>Status code</returns>

<summary> Prepare activation context </summary> <param name="filepath">Path to PE file. If nullptr - manifest is extracted from memory to disk</param>

<summary> Fill minimal required driver registry entry </summary> <param name="svcName">Driver service name</param> <param name="path">Driver path</par

<summary> Do SxS path probing in the target process </summary> <param name="path">Path to probe</param> <returns>Status code</returns>

<summary> Try SxS redirection </summary> <param name="path">Image path.</param> <param name="proc">Process. Used to search process executable director

<summary> Change memory protection </summary> <param name="pAddr">Memory address</param> <param name="size">Region size</param> <param name="flProtect

<summary> Adjust image memory protection </summary> <param name="pImage">image data</param> <returns>Status code</returns>

<summary> Push function argument </summary> <param name="arg">Argument.</param> <param name="regidx">Push type(register or stack)</param>

<summary> Push function argument </summary> <param name="arg">Argument.</param> <param name="regidx">Push type(register or stack)</param>

<summary> Call NtQueryInformationProcess for underlying process </summary> <param name="infoClass">Information class</param> <param name="lpBuffer">Ou

<summary> NtQueueApcThread </summary> <param name="hThread">Thread handle.</param> <param name="func">APC function</param> <param name="arg">APC argum

<summary> Generate random alpha-numeric string </summary> <param name="length">Desired length. 0 - random length from 5 to 15</param> <returns>Generat

<summary> Read data </summary> <param name="dwAddress">Memoey address to read from</param> <param name="dwSize">Size of data to read</param> <param na

<summary> Read virtual memory </summary> <param name="lpBaseAddress">Memory address</param> <param name="lpBuffer">Output buffer</param> <param name="

Create a dummy base register.

<summary> Reload driver </summary> <param name="path">Path to the driver file</param> <returns>Status code</returns>

<summary> Reload closed image </summary> <returns>Status code</returns>

<summary> Fix relocations if image wasn't loaded at base address </summary> <param name="pImage">image data</param> <returns>true on success</returns>

<summary> Remove existing hook </summary> <param name="ptr">Hooked address</param>

<summary> Remove existing hook </summary> <param name="targetFunc">Target function ptr</param> <returns>true on success, false if not found</returns>

<summary> Resolves image import or delayed image import </summary> <param name="pImage">Image data</param> <param name="useDelayed">Resolve delayed im

If function address is jmp - get jmp destination

<summary> Restore hooked function </summary> <param name="hook">Hook data</param> <param name="ptr">Hooked address</param>

<summary> Restore hooked function </summary> <returns>true on success, false if not hooked</returns>

<summary> Restore hooked function </summary> <returns>true on success, false if not hooked</returns>

<summary> Restore previously hooked function </summary> <param name="hkType">Hook type. For more info see SetupHook</param> <returns>true on success</

<summary> Restore original pointer value </summary> <param name="ctx">The CTX.</param> <param name="ExceptionInfo">The exception information</param> <