Functions — github.com/Kudaes/Split

hub / github.com/Kudaes/Split / functions

Functions25 in github.com/Kudaes/Split

↓ 13 callersFunctionget_module_base_address

Retrieves the base address of a module loaded in the current process. In case that the module can't be found in the current process, it will return 0

dinvoke/src/lib.rs:34

↓ 4 callersFunctionfork

()

src/main.rs:159

↓ 2 callersFunctionclose_handle

Closes a HANDLE object. It will return either a boolean value or an Err with a descriptive error message. If the function fails the bool value return

dinvoke/src/lib.rs:646

↓ 1 callersFunctionget_api_mapping

()

dinvoke/src/lib.rs:218

↓ 1 callersFunctionget_forward_address

(function_ptr: *mut u8)

dinvoke/src/lib.rs:134

↓ 1 callersFunctionget_function_address

Retrieves the address of an exported function from the specified module. This functions is analogous to GetProcAddress from Win32. The exported funct

dinvoke/src/lib.rs:69

↓ 1 callersFunctionldr_get_procedure_address

Retrieves the address of an exported function from the specified module either by its name or by its ordinal number. This functions internally calls

dinvoke/src/lib.rs:553

↓ 1 callersFunctionload_library_a

Loads and retrieves a module's base address by dynamically calling LoadLibraryA. It will return either the module's base address or an Err with a des

dinvoke/src/lib.rs:606

↓ 1 callersFunctionmain

()

build.rs:1

↓ 1 callersFunctionnt_allocate_virtual_memory

Dynamically calls NtAllocateVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:694

↓ 1 callersFunctionnt_create_user_process

(process_handle: *mut HANDLE, thread_handle: *mut HANDLE, process_access: u32, thread_access: u32, object_attr

dinvoke/src/lib.rs:798

↓ 1 callersFunctionnt_open_process

Dynamically calls NtOpenProcess. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:771

↓ 1 callersFunctionnt_protect_virtual_memory

Dynamically calls NtProtectVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:713

↓ 1 callersFunctionnt_query_information_process

Dynamically calls NtQueryInformationProcess. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:732

↓ 1 callersFunctionnt_write_virtual_memory

Dynamically calls NtWriteVirtualMemory. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:674

↓ 1 callersFunctionprint_help

()

src/main.rs:145

Functioncall_module_entry_point

Calls the module's entry point with the option DLL_ATTACH_PROCESS. # Examples ```ignore let pe = manualmap::read_and_map_module("c:\\some\\random\\f

dinvoke/src/lib.rs:475

Methoddefault

()

data/src/lib.rs:147

Functionget_function_address_by_ordinal

Retrieves the address of an exported function from the specified module by its ordinal. In case that the function's address can't be retrieved, it wi

dinvoke/src/lib.rs:524

Functionget_ntdll_eat

Returns a BTreeMap<i64,String> composed of pairs (memory address, function name) with all the Nt exported functions on ntdll.dll. This functions will

dinvoke/src/lib.rs:366

Functionget_syscall_id

Returns the syscall id that correspond to the function specified. This functions will return -1 in case that the syscall id of the specified function

dinvoke/src/lib.rs:445

Functionrtl_adjust_privilege

Dynamically calls RtlAdjustPrivilege. It will return the NTSTATUS value returned by the call.

dinvoke/src/lib.rs:751

Functionrtl_init_unicode_string

(destination_string: *mut UNICODE_STRING, source_string: *const u16)

dinvoke/src/lib.rs:787