<summary> Gets the SSDT entry address by index. </summary> <param name="index">Service index</param> <returns>Found service address, NULL if not found

<summary> Exported InitOnce wrapper </summary> <returns>true on initialization completion</returns>

<summary> Load symbol addresses from PDB or and pattern scans </summary> <param name="result">Found symbols</param> <returns>Status code</returns>

<summary> Attach to existing process </summary> <param name="pid">Process ID</param> <param name="access">Access mask</param> <returns>Status</returns

<summary> Remove existing hardware breakpoint </summary> <param name="idx">Breakpoint index</param> <returns>true on success</returns>

<summary> Resolve image path. </summary> <param name="path">Image to resolve</param> <param name="baseName">Name of parent image. Used only when resol

<summary> Resumes thread. </summary> <returns>true on success</returns>

Add mandatory input registers (mask).

Get arguments count.

Get available space.

Get capacity of the code buffer.

Get current node. \note If this method returns `NULL` it means that nothing has been emitted yet.

Get extra stack size.

Get CPU family ID.

Get variable allocation instructions.

Get the number of remaining bytes (space between cursor and the end of the buffer).

AsmJit allows to pass a `NULL` handle to `VMemUtil`. This function is just a convenient way to convert such handle to the current process one.

Get registers which have to be saved in prolog/epilog.

Get V-SIB type.

Get VarAttr count (all).

Get position of variables (by class).

<summary> Get worker thread </summary> <returns></returns>

Get whether CPU has a `feature`.

Insert an `item` at the `index`.

Get whether the register is Gp lo-byte (8-bit) register.

Get whether the `label` is valid (created by the assembler).

Get whether the variable is a function argument passed through memory.

Get whether the register is Segment.

Get whether the VarData is only memory allocated on the stack.

Whether the instruction is an unconditional jump or whether the instruction is a conditional jump which is likely to be taken.

Set the current position in the buffer.

Set cell offset.

Set all eight 8-bit unsigned integers.

Set all four 16-bit unsigned integers.

Swap two registers It's only possible to swap Gp registers.

\internal Helper to avoid `#ifdef`s in the code.

<summary> Hook specified address </summary> <param name="type">Hook type</param> <param name="ptr">Address</param> <param name="newFn">Callback</param

<summary> Allocate kernel page from NonPaged pool and build MDL for it </summary> <param name="pPage">Resulting address</param> <param name="pResultMD

<summary> Convert protection flags </summary> <param name="prot">Protection flags.</param> <param name="fromPTE">If TRUE - convert to PTE protection,

<summary> Setup image security cookie </summary> <param name="imageBase">Image base</param> <returns>Status code</returns>

<summary> Check if file exists </summary> <param name="path">Fully qualifid path to a file</param> <returns>Status code</returns>

<summary> Map new module or return existing </summary> <param name="pProcess">Target process</param> <param name="path">Image path</param> <param name

<summary> Get region VAD type </summary> <param name="pProcess">Target process object</param> <param name="address">Target address</param> <param name

<summary> Find first thread of the target process </summary> <param name="pProcess">Target process</param> <param name="ppThread">Found thread. Thread

<summary> Map memory regions into caller process </summary> <param name="pList">Region list</param> <param name="noWarning">If set to FALSE, warning w

<summary> Create activation context </summary> <param name="pPath">Manifest path</param> <param name="asImage">Target file is a PE image</param> <para

<summary> Walk region list and create MDL for each region </summary> <param name="pList">Region list</param> <param name="pProcess">Target process</pa

<summary> Resolve image name to fully qualified path </summary> <param name="pContext">Loader context</param> <param name="pProcess">Target process. M

<summary> Resolve import table and load missing dependencies </summary> <param name="pImageBase">Target image base</param> <param name="systemImage">I

<summary> Search for pattern </summary> <param name="pattern">Pattern to search for</param> <param name="wildcard">Used wildcard</param> <param name="

<summary> Unmap memory region, release corresponding MDL, and remove region form list </summary> <param name="pPageEntry">Region data</param> <param n

//////////////////////////////////////////////////////////////////////////////////////// Given an uncompressed unsigned integer (iLen), Store it to p

<summary> Creates new thread in the remote process </summary> <param name="hThread">Created thread handle</param> <param name="entry">Thread entry poi

<summary> Get data directory size </summary> <param name="index">Data directory index</param> <returns>Data directory size</returns>

<summary> Ensure LdrInitializeProcess gets called </summary> <returns>Status code</returns>

<summary> Free virtual memory </summary> <param name="pid">Tarhet PID</param> <param name="base">Desired base. If 0 address is chosed by the system</p

<summary> Retrieve last NTSTATUS code </summary> <returns></returns>

<summary> Get WOW64 thread context </summary> <param name="hThread">Thread handle.</param> <param name="ctx">Thread context</param> <returns>Status co

<summary> Initialize symbols for target file </summary> <param name="file">Fully qualified path to target PE file</param> <param name="base">Base ptr

begin_rebase

<summary> Maps target process memory into current process </summary> <param name="pid">Target PID</param> <param name="pipeName">Pipe name to use for