| 69 | } |
| 70 | |
| 71 | fn template_path_for_execution(execution: &Execution) -> &'static Path { |
| 72 | match execution { |
| 73 | Execution::NtQueueUserAPC => Path::new("templates/ntAPC/."), |
| 74 | Execution::NtCreateRemoteThread => Path::new("templates/ntCRT/."), |
| 75 | Execution::SysCreateRemoteThread => Path::new("templates/sysCRT/."), |
| 76 | Execution::WinCreateRemoteThread => Path::new("templates/winCRT/."), |
| 77 | Execution::WinFiber => Path::new("templates/winFIBER/."), |
| 78 | Execution::NtFiber => Path::new("templates/ntFIBER/."), |
| 79 | Execution::SysFiber => Path::new("templates/sysFIBER/."), |
| 80 | Execution::EarlyCascade => Path::new("templates/ntEarlyCascade/."), |
| 81 | } |
| 82 | } |
| 83 | |
| 84 | fn encrypted_filename(encryption: &Encryption) -> &'static str { |
| 85 | match encryption { |