Functions — github.com/Kudaes/Bin-Finder

hub / github.com/Kudaes/Bin-Finder / functions

Functions41 in github.com/Kudaes/Bin-Finder

↓ 25 callersFunctionget_module_base_address

Retrieves the base address of a module loaded in the current process. In case that the module can't be found in the current process, it will return 0

dinvoke/src/lib.rs:181

↓ 8 callersFunctionget_function_address

Retrieves the address of an exported function from the specified module. This functions is analogous to GetProcAddress from Win32. The exported funct

dinvoke/src/lib.rs:216

↓ 6 callersFunctionfind_syscall_address

Retrieves the memory address of a syscall instruction. It expects the memory address of the function as a parameter, and it will iterate over each fo

dinvoke/src/lib.rs:87

↓ 5 callersFunctionset_hardware_breakpoint

It sets a hardware breakpoint on a certain memory address. # Examples ``` let ntdll = dinvoke::get_module_base_address("ntdll.dll"); let nt_open_pro

dinvoke/src/lib.rs:52

↓ 4 callersFunctionclose_handle

Closes a HANDLE object. It will return either a boolean value or an Err with a descriptive error message. If the function fails the bool value return

dinvoke/src/lib.rs:970

↓ 2 callersFunctionprint_processes

(final_pids: Vec<u32>, k32: isize, quiet: bool)

src/main.rs:109

↓ 2 callersFunctionprint_usage

(program: &str, opts: Options)

src/main.rs:246

↓ 1 callersFunctionget_api_mapping

()

dinvoke/src/lib.rs:365

↓ 1 callersFunctionget_forward_address

(function_ptr: *mut u8)

dinvoke/src/lib.rs:281

↓ 1 callersFunctionget_function_address_by_ordinal

Retrieves the address of an exported function from the specified module by its ordinal. In case that the function's address can't be retrieved, it wi

dinvoke/src/lib.rs:779

↓ 1 callersFunctionget_pid_from_image_path

(path: &str)

src/main.rs:170

↓ 1 callersFunctionldr_get_procedure_address

Retrieves the address of an exported function from the specified module either by its name or by its ordinal number. This functions internally calls

dinvoke/src/lib.rs:808

↓ 1 callersFunctionload_library_a

Loads and retrieves a module's base address by dynamically calling LoadLibraryA. It will return either the module's base address or 0. # Examples `

dinvoke/src/lib.rs:878

↓ 1 callersFunctionmain

()

build.rs:1

↓ 1 callersFunctionnt_allocate_virtual_memory

Dynamically calls NtAllocateVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1054

↓ 1 callersFunctionnt_protect_virtual_memory

Dynamically calls NtProtectVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1086

↓ 1 callersFunctionnt_query_information_file

Dynamically calls NtQueryInformationFile. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1180

↓ 1 callersFunctionnt_query_information_process

Dynamically calls NtQueryInformationProcess. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1161

↓ 1 callersFunctionnt_write_virtual_memory

Dynamically calls NtWriteVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1017

↓ 1 callersFunctionopen_process

Opens a HANDLE to a process. If the function fails, it will return a null HANDLE. # Examples ``` let pid = 792u32; let handle = dinvoke::open_proce

dinvoke/src/lib.rs:933

↓ 1 callersFunctionprint_modules

()

src/main.rs:99

↓ 1 callersFunctionremove_pids

From https://stackoverflow.com/questions/64019451/how-do-i-remove-the-elements-of-vector-that-occur-in-another-vector-in-rust

src/main.rs:161

Functionbreakpoint_handler

This function acts as an Exception Handler, and should be combined with a hardware breakpoint. Whenever the HB gets triggered, this function will be

dinvoke/src/lib.rs:111

Functioncall_module_entry_point

Calls the module's entry point with the option DLL_ATTACH_PROCESS. # Examples ```ignore let pe = manualmap::read_and_map_module("c:\\some\\random\\f

dinvoke/src/lib.rs:730

Methoddefault

()

data/src/lib.rs:106

Functionget_ntdll_eat

Returns a BTreeMap<isize,String> composed of pairs (memory address, function name) with all the Nt exported functions on ntdll.dll. This functions wi

dinvoke/src/lib.rs:513

Functionget_syscall_id

Returns the syscall id that correspond to the function specified. This functions will return -1 in case that the syscall id of the specified function

dinvoke/src/lib.rs:592

Functionnt_create_section

Dynamically calls NtCreateSection. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1266

Functionnt_create_thread_ex

Dynamically calls NtCreateThreadEx. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1308

Functionnt_map_view_of_section

Dynamically calls NtMapViewOfSection. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1287

Functionnt_open_file

Dynamically calls NtOpenFile. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1246

Functionnt_open_process

Dynamically calls NtOpenProcess. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1122

Functionprepare_syscall

Given a valid syscall id, it will allocate the required shellcode to execute that specific syscall. This functions will return the memory address whe

dinvoke/src/lib.rs:631

Functionrtl_adjust_privilege

Dynamically calls RtlAdjustPrivilege. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1199

Functionrtl_init_unicode_string

Dynamically calls RtlInitUnicodeString. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1218

Functionrtl_zero_memory

Dynamically calls RtlZeroMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:1232

Functionset_unhandled_exception_filter

Dynamically calls SetUnhandledExceptionFilter.

dinvoke/src/lib.rs:851

Functionuse_hardware_breakpoints

Enables or disables the use of exception handlers in combination with hardware breakpoints.

dinvoke/src/lib.rs:34

Functionvirtual_free

Dynamically calls VirtualFree.

dinvoke/src/lib.rs:996