<summary> Find pattern in kernel PE section </summary> <param name="section">Section name</param> <param name="pattern">Pattern data</param> <param na

Get compiler as `X86Compiler`.

Get function declaration as `X86FuncDecl`.

Get hint it (see `kVarHint)`.

Get the type of the memory operand, see `kMemType`.

Get preserved registers (mask). \note The result depends on the function calling convention used; the prototype of the function doesn't affect the ma

Get previous node in the compiler stream.

<summary> Get thread handle </summary> <returns>Thread hande</returns>

Get whether the variable was changed.

<summary> Call arbitrary function </summary> <param name="newThread">Perform call in a separate thread</param> <param name="pContext">Loader context</

<summary> Check if process is terminating </summary> <param name="imageBase">Process</param> <returns>If TRUE - terminating</returns>

<summary> Get exported function address </summary> <param name="pBase">Module base</param> <param name="name_ord">Function name or ordinal</param> <pa

<summary> Get module base address by name </summary> <param name="pProcess">Target process</param> <param name="ModuleName">Nodule name to search for<

<summary> Get WOW64 thread context </summary> <param name="ctx">Returned context</param> <param name="flags">Context flags.</param> <param name="dontS

<summary> Get symbol RVA </summary> <param name="symName">Symbol name</param> <param name="result">Resulting RVA</param> <returns>Status code</returns

Get stack size needed for function arguments passed on the stack.

Get memory operand index register code, variable id, or `kInvalidValue`.

Get variable liveness bits.

Get variable type name.

Get memory operand index scale (0, 1, 2 or 3).

Get VarAttr at `index`.

<summary> Get thread ID </summary> <returns>Thread ID</returns>

Get whether the register is Gp qword (64-bit) register.

Result was a success, or failure is suppressed

Get whether the operand is a register - `kOperandTypeReg`.

Set whether the variable was changed.

<summary> Get raw data size </summary> <returns></returns>

Swap this pod-vector with `other`.

Get `O` field of `opCode`.

<summary> Create new process and attach to it </summary> <param name="path">Executable path</param> <param name="suspended">Leave process in suspended

<summary> Get ntoskrnl base address </summary> <param name="pSize">Size of module</param> <returns>Found address, NULL if not found</returns>

<summary> Terminate process </summary> <param name="code">Exit code</param> <returns>Stratus code</returns>

Append `str` of `len`.

Converts value in the range [0, 100) to a string.

Get argument at index `id`.

Get memory operand relative displacement.

Get the current offset in the buffer.

Get register type.

Get whether the variable is Gpb (8-bit) register.

<summary> Create environment for future remote procedure calls _userData layout (x86/x64): ----------------------------------------------------------

<summary> Remove module from module list </summary> <param name="filename">Module file name</param> <param name="mt">Module type. 32 bit or 64 bit</pa

<summary> Set WOW64 thread context </summary> <param name="ctx">Context to set</param> <param name="dontSuspend">true if thread shouldn't be suspended

Create a dummy Gp register.

try to dequeue item. if no item found. wait up to timeout and try again Return true, if succeeded dequeue item, false otherwise