SYMBOL INDEX (517 symbols across 30 files) FILE: ERC/ERC/Convert.cs class Convert (line 11) | public static class Convert method HexToAscii (line 21) | public static string HexToAscii(string hex) method HexToBytes (line 63) | public static byte[] HexToBytes(string hex) method AsciiToBytes (line 87) | public static byte[] AsciiToBytes(string ascii) method AsciiToHex (line 97) | public static string AsciiToHex(string ascii) method UnicodeToBytes (line 109) | public static byte[] UnicodeToBytes(string unicode) method UnicodeToHex (line 119) | public static string UnicodeToHex(string unicode) method UTF7ToBytes (line 131) | public static byte[] UTF7ToBytes(string utf7) method UTF7ToHex (line 141) | public static string UTF7ToHex(string utf7) method UTF8ToBytes (line 153) | public static byte[] UTF8ToBytes(string utf8) method UTF8ToHex (line 163) | public static string UTF8ToHex(string utf8) method UTF32ToBytes (line 175) | public static byte[] UTF32ToBytes(string utf32) method UTF32ToHex (line 185) | public static string UTF32ToHex(string utf32) method htmlWhitespaceFix (line 197) | public static string htmlWhitespaceFix(string str) FILE: ERC/ERC/Display_Output.cs class DisplayOutput (line 14) | public static class DisplayOutput method GetFilePath (line 26) | internal static string GetFilePath(string directory, string prefix, st... method WriteToFile (line 59) | public static void WriteToFile(string directory, string prefix, string... method GeneratePattern (line 79) | public static string GeneratePattern(int length, ErcCore core, bool ex... method PatternOutputBuilder (line 100) | private static string PatternOutputBuilder(string pattern, ErcCore core) method ListLocalProcesses (line 153) | public static string ListLocalProcesses() method ListRemoteProcesses (line 175) | public static string ListRemoteProcesses(string machineName) method DisplayProcessInfo (line 199) | public static string DisplayProcessInfo(ProcessInfo info, bool outputT... method DisplayThreadInfo (line 225) | public static string DisplayThreadInfo(ProcessInfo info, bool outputTo... method DisplayModuleInfo (line 265) | internal static string DisplayModuleInfo(ProcessInfo info) method GenerateModuleInfoTable (line 385) | public static string GenerateModuleInfoTable(ProcessInfo info, bool ou... method SearchMemory (line 412) | public static string[] SearchMemory(ProcessInfo info, int searchType, ... method SearchModules (line 526) | public static string[] SearchModules(ProcessInfo info, int searchType,... method GetSEHJumps (line 637) | public static string[] GetSEHJumps(ProcessInfo info, bool aslr = false, method GetSEHJumps (line 783) | public static string[] GetSEHJumps(ProcessInfo info, byte[] ptrsToExcl... method GetSEHJumpsUnicode (line 894) | public static string[] GetSEHJumpsUnicode(ProcessInfo info, bool aslr ... method GenerateByteArray (line 1050) | public static byte[] GenerateByteArray(ErcCore core, byte[] unwantedBy... method CompareByteArrayToMemoryRegion (line 1136) | public static string[] CompareByteArrayToMemoryRegion(ProcessInfo info... method GenerateEggHunters (line 1214) | public static string GenerateEggHunters(ErcCore core = null, string ta... method GenerateFindNRPTable (line 1280) | public static string[] GenerateFindNRPTable(ProcessInfo info, int sear... method RopChainGadgets32 (line 1360) | public static string[] RopChainGadgets32(RopChainGenerator32 rcg, bool... method RopChainGadgets64 (line 2064) | public static string[] RopChainGadgets64(RopChainGenerator64 rcg, bool... method ConvertRopElementToString (line 2723) | private static string ConvertRopElementToString(Tuple ... method AssembleOpcodes (line 2737) | public static string[] AssembleOpcodes(string[] instructions, uint mac... method AssembleOpcodes (line 2770) | public static string[] AssembleOpcodes(string[] instructions, MachineT... method DisassembleOpcodes (line 2796) | public static string[] DisassembleOpcodes(byte[] opcodes, uint machine) method DisassembleOpcodes (line 2828) | public static string[] DisassembleOpcodes(byte[] opcodes, MachineType ... method StringToByteArray (line 2851) | private static byte[] StringToByteArray(string hex) method DumpMemory (line 2869) | public static string DumpMemory(ProcessInfo info, IntPtr startAddress,... method DumpHeap (line 2926) | public static string[] DumpHeap(HeapInfo hi, ulong heapid = 0, string ... method HeapStats (line 3051) | public static string[] HeapStats(HeapInfo hi, ulong heapID = 0, string... method ListHeapIDs (line 3072) | public static string[] ListHeapIDs(HeapInfo hi) method SearchHeap (line 3101) | public static string[] SearchHeap(HeapInfo hi, byte[] searchBytes, ulo... FILE: ERC/ERC/ERCException.cs class ERCException (line 9) | [Serializable] method ERCException (line 16) | public ERCException(string message) method ERCException (line 25) | protected ERCException(SerializationInfo info, StreamingContext ctxt) FILE: ERC/ERC/ERC_Core.cs class ErcCore (line 16) | public class ErcCore method OpenProcess (line 59) | [DllImport("kernel32.dll", SetLastError = true)] method ReadProcessMemory (line 71) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method VirtualQueryEx32 (line 82) | [DllImport("kernel32.dll", SetLastError = true, EntryPoint = "VirtualQ... method VirtualQueryEx64 (line 93) | [DllImport("kernel32.dll", SetLastError = true, EntryPoint = "VirtualQ... method IsWow64Process (line 102) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method OpenThread (line 113) | [DllImport("kernel32.dll", SetLastError = true)] method GetThreadContext32 (line 122) | [DllImport("kernel32.dll", SetLastError = true, EntryPoint = "GetThrea... method Wow64GetThreadContext (line 131) | [DllImport("kernel32.dll", SetLastError = true)] method GetThreadContext64 (line 140) | [DllImport("kernel32.dll", SetLastError = true, EntryPoint = "GetThrea... method SuspendThread (line 148) | [DllImport("kernel32.dll", SetLastError= true)] method CloseHandle (line 156) | [DllImport("kernel32.dll", SetLastError = true)] method GetProcAddress (line 165) | [DllImport("kernel32.dll", CharSet = CharSet.Ansi, ExactSpelling = tru... method LoadLibraryEx (line 175) | [DllImport("kernel32.dll", SetLastError = true)] method FindResouce (line 185) | [DllImport("kernel32.dll", SetLastError = true, EntryPoint = "FindReso... method LoadResource (line 194) | [DllImport("kernel32.dll", SetLastError = true)] method GetProcessId (line 202) | [DllImport("kernel32.dll", SetLastError = true)] method GetHandleInformation (line 211) | [DllImport("kernel32.dll")] method GetModuleHandle (line 219) | [DllImport("user32.dll", EntryPoint = "GetModuleHandleW", SetLastError... method ZwQueryInformationThread (line 231) | [DllImport("ntdll.dll", SetLastError = true)] method EnumProcessModulesEx (line 244) | [DllImport("psapi.dll", SetLastError = true)] method GetModuleFileNameEx (line 257) | [DllImport("psapi.dll", SetLastError = true)] method ImageLoad (line 267) | [DllImport("Imagehlp.dll", SetLastError = true)] method GetImageConfigInformation32 (line 276) | [DllImport("Imagehlp.dll", SetLastError = true, EntryPoint = "GetImage... method GetImageConfigInformation64 (line 285) | [DllImport("Imagehlp.dll", SetLastError = true, EntryPoint = "GetImage... method GetImageConfigInformation32 (line 294) | [DllImport("Imagehlp.dll", SetLastError = true, EntryPoint = "GetImage... method GetImageConfigInformation64 (line 303) | [DllImport("Imagehlp.dll", SetLastError = true, EntryPoint = "GetImage... method MapAndLoad (line 315) | [DllImport("Imagehlp.dll", SetLastError = true)] method CreateToolhelp32Snapshot (line 324) | [DllImport("kernel32", SetLastError = true, CallingConvention = Callin... method Process32First (line 333) | [DllImport("kernel32", SetLastError = true, CallingConvention = Callin... method Process32Next (line 342) | [DllImport("kernel32", SetLastError = true, CallingConvention = Callin... method Heap32ListFirst (line 351) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method Heap32ListNext (line 360) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method Heap32First (line 370) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method Heap32Next (line 378) | [DllImport("kernel32.dll", SetLastError = true, CallingConvention = Ca... method ErcCore (line 386) | public ErcCore() method ErcCore (line 494) | protected ErcCore(ErcCore parent) method BuildDefaultConfig (line 500) | private void BuildDefaultConfig() method SetWorkingDirectory (line 561) | public void SetWorkingDirectory(string path) method SetPatternStandardPath (line 588) | public void SetPatternStandardPath(string path) method SetPatternExtendedPath (line 615) | public void SetPatternExtendedPath(string path) method SetAuthor (line 642) | public void SetAuthor(string author) method SetErrorFile (line 658) | public void SetErrorFile(string path) method LogEvent (line 702) | public void LogEvent(Exception e) method X64toX32PointerModifier (line 719) | internal static byte[] X64toX32PointerModifier(byte[] ptr64) class ErcResult (line 734) | public class ErcResult : ErcCore method ErcResult (line 749) | public ErcResult(ErcCore core) : base(core) method ErcResult (line 759) | public ErcResult(ErcCore core, string errorFile) : base(core) method LogEvent (line 767) | public void LogEvent() method ToString (line 779) | public override string ToString() type MachineType (line 803) | public enum MachineType type IMAGE_DOS_HEADER (line 841) | [StructLayout(LayoutKind.Explicit)] type IMAGE_FILE_HEADER (line 855) | [StructLayout(LayoutKind.Explicit)] type IMAGE_NT_HEADERS32 (line 893) | [StructLayout(LayoutKind.Explicit)] type IMAGE_NT_HEADERS64 (line 913) | [StructLayout(LayoutKind.Explicit)] type IMAGE_DATA_DIRECTORY (line 935) | [StructLayout(LayoutKind.Explicit)] type IMAGE_OPTIONAL_HEADER32 (line 953) | [StructLayout(LayoutKind.Explicit)] type IMAGE_OPTIONAL_HEADER64 (line 1147) | [StructLayout(LayoutKind.Explicit)] type MagicType (line 1337) | public enum MagicType : ushort type SubSystemType (line 1354) | public enum SubSystemType : ushort type IMAGE_LOAD_CONFIG_DIRECTORY32 (line 1407) | [StructLayout(LayoutKind.Sequential)] type IMAGE_LOAD_CONFIG_DIRECTORY64 (line 1585) | [StructLayout(LayoutKind.Sequential)] type IMAGE_LOAD_CONFIG_CODE_INTEGRITY (line 1763) | [StructLayout(LayoutKind.Sequential)] type LOADED_IMAGE (line 1789) | public struct LOADED_IMAGE type LIST_ENTRY (line 1854) | public struct LIST_ENTRY type AllocationProtect (line 1875) | public enum AllocationProtect : uint type StateEnum (line 1928) | public enum StateEnum : uint type TypeEnum (line 1949) | public enum TypeEnum : uint type MEMORY_BASIC_INFORMATION32 (line 1970) | [StructLayout(LayoutKind.Sequential)] type MEMORY_BASIC_INFORMATION64 (line 2008) | [StructLayout(LayoutKind.Sequential)] type ProcessAccessFlags (line 2054) | [Flags] type LoadLibraryFlags (line 2116) | [Flags] type ThreadAccess (line 2178) | [Flags] type CONTEXT_FLAGS (line 2228) | public enum CONTEXT_FLAGS : uint type FLOATING_SAVE_AREA (line 2277) | [StructLayout(LayoutKind.Sequential)] type CONTEXT32 (line 2324) | [StructLayout(LayoutKind.Sequential)] method ToString (line 2433) | public override string ToString() type M128A (line 2454) | [StructLayout(LayoutKind.Sequential)] method ToString (line 2470) | public override string ToString() type XSAVE_FORMAT64 (line 2481) | [StructLayout(LayoutKind.Sequential, Pack = 16)] type CONTEXT64 (line 2558) | [StructLayout(LayoutKind.Sequential, Pack = 16)] method ToString (line 2758) | public override string ToString() class RegisterInfo (line 2787) | public class RegisterInfo type ThreadBasicInformation (line 2827) | [StructLayout(LayoutKind.Sequential)] type ClientID (line 2859) | [StructLayout(LayoutKind.Sequential)] type TEB (line 2875) | [StructLayout(LayoutKind.Sequential)] type SnapshotFlags (line 3065) | [Flags] type PROCESSENTRY32 (line 3081) | [StructLayout(LayoutKind.Sequential)] type HEAPLIST32 (line 3101) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Auto)] type HEAPENTRY32 (line 3113) | [StructLayout(LayoutKind.Sequential)] FILE: ERC/ERC/Heap_Info.cs class HeapInfo (line 8) | public class HeapInfo method HeapInfo (line 18) | public HeapInfo(ProcessInfo info) method SearchHeap (line 80) | public ErcResult>> SearchHeap(byte[... method HeapStatistics (line 224) | public ErcResult> HeapStatistics(bool extended = false, u... method HeapIDs (line 443) | public ErcResult> HeapIDs() FILE: ERC/ERC/Module_Info.cs class ModuleInfo (line 15) | public class ModuleInfo method ModuleInfo (line 115) | internal unsafe ModuleInfo(string module, IntPtr ptr, Process process,... method PopulateHeaderStructs (line 301) | private unsafe void PopulateHeaderStructs(FileStream fin) method PopulateConfigStruct (line 367) | private void PopulateConfigStruct() method SearchModule (line 402) | public ErcResult> SearchModule(byte[] searchBytes) method SearchBytePattern (line 423) | private List SearchBytePattern(byte[] pattern, byte[] bytes) method ToString (line 451) | public override string ToString() FILE: ERC/ERC/Opcode_Assembler.cs class OpcodeAssembler (line 11) | public class OpcodeAssembler : ProcessInfo method OpcodeAssembler (line 17) | public OpcodeAssembler(ProcessInfo parent) : base(parent) method AssembleOpcodes (line 27) | public ErcResult AssembleOpcodes(List instructions) method AssembleOpcodes (line 71) | public static ErcResult AssembleOpcodes(List instructi... FILE: ERC/ERC/Opcode_Disassembler.cs class OpcodeDisassembler (line 10) | public class OpcodeDisassembler : ProcessInfo method OpcodeDisassembler (line 16) | public OpcodeDisassembler(ProcessInfo parent) : base(parent) method Disassemble (line 26) | public ErcResult Disassemble(byte[] opcodes) method Disassemble (line 85) | public static ErcResult Disassemble(byte[] opcodes, MachineTyp... method Disassemble (line 145) | public static ErcResult Disassemble(byte[] opcodes, MachineTyp... method HexStringToByteArray (line 197) | private static byte[] HexStringToByteArray(string hex) FILE: ERC/ERC/Pattern_Tools.cs class PatternTools (line 11) | public static class PatternTools method PatternCreate (line 27) | public static ErcResult PatternCreate(int length, ErcCore core... method PatternOffset (line 127) | public static ErcResult PatternOffset(string pattern, ErcCore ... FILE: ERC/ERC/Payloads.cs class Payloads (line 10) | public static class Payloads method ByteArrayConstructor (line 86) | public static byte[] ByteArrayConstructor(byte[] unwantedBytes) method EggHunterConstructor (line 127) | public static Dictionary EggHunterConstructor(string t... method PopPopRet (line 201) | public static List PopPopRet(byte[] data) method ByteCompare (line 306) | public static Tuple ByteCompare(ProcessInfo info... method ByteCompare (line 329) | public static Tuple ByteCompare(ProcessInfo info... FILE: ERC/ERC/Process_Info.cs class ProcessInfo (line 16) | public class ProcessInfo : ErcCore method ProcessInfo (line 53) | public ProcessInfo(ErcCore core, Process process) : base(core) method ProcessInfo (line 105) | public ProcessInfo(ErcCore core, IntPtr handle) : base(core) method ProcessInfo (line 165) | protected ProcessInfo(ProcessInfo parent) method ListLocalProcesses (line 193) | public static ErcResult ListLocalProcesses(ErcCore core) method ListRemoteProcesses (line 235) | public static ErcResult ListRemoteProcesses(ErcCore core, s... method GetProcessModules (line 283) | public ErcResult> GetProcessModules() method Is64Bit (line 340) | public static bool Is64Bit(Process process) method LocateMemoryRegions (line 367) | private void LocateMemoryRegions() method SearchProcessMemory (line 437) | internal ErcResult> SearchProcessMemory(byte[] searchBytes) method SearchProcessMemory (line 587) | internal ErcResult> SearchProcessMemory(byte[] searchByte... method SearchAllMemoryPPR (line 740) | public ErcResult> SearchAllMemoryPPR(List> SearchAllMemoryPPR(byte[]... method SearchMemory (line 1041) | public ErcResult> SearchMemory(int searchTy... method SearchMemory (line 1134) | public ErcResult> SearchMemory(int searchTy... method SearchModules (line 1233) | public ErcResult> SearchModules(int searchT... method FindNRP (line 1320) | public ErcResult> FindNRP(int searchType = 0, bool ... method ByteIndexOf (line 2056) | private static int ByteIndexOf(byte[] haystack, byte[] needle) method MakeCharTable (line 2081) | private static int[] MakeCharTable(byte[] needle) method MakeOffsetTable (line 2098) | private static int[] MakeOffsetTable(byte[] needle) method IsPrefix (line 2121) | private static bool IsPrefix(byte[] needle, int p) method SuffixLength (line 2134) | private static int SuffixLength(byte[] needle, int p) method CreateExcludesList (line 2152) | public List CreateExcludesList(bool aslr = false, bool safeseh... method ToString (line 2194) | public override string ToString() method GetModuleHandles (line 2220) | public ErcResult> GetModuleHandles() method GetProcessModuleInformation (line 2241) | public ErcResult> GetProcessModuleInformation() method GetProcessThreadInformation (line 2262) | public ErcResult> GetProcessThreadInformation() method DumpMemoryRegion (line 2285) | public ErcResult DumpMemoryRegion(IntPtr startAddress, int len... FILE: ERC/ERC/PtrRemover.cs class PtrRemover (line 10) | public static class PtrRemover method RemovePointers (line 19) | public static List RemovePointers(MachineType mt, List... method RemovePointers (line 85) | public static Dictionary RemovePointers(MachineType mt... method RemovePointersProtection (line 150) | public static List RemovePointersProtection(ProcessInfo info, ... method RemovePointersProtection (line 319) | public static List RemovePointersProtection(ProcessInfo info, ... FILE: ERC/ERC/RopChainGenerator32.cs class RopChainGenerator32 (line 15) | public class RopChainGenerator32 method RopChainGenerator32 (line 55) | public RopChainGenerator32(ProcessInfo _info) method GenerateRopGadgets32 (line 169) | public ErcResult GenerateRopGadgets32(byte[] ptrsToExclude = n... method GenerateRopChain32 (line 257) | public ErcResult GenerateRopChain32(byte[] ptrsToExclude, byte... method GenerateRopChain32 (line 383) | public ErcResult GenerateRopChain32(byte[] startAddress = null... method GetApiAddresses (line 461) | private ErcResult GetApiAddresses(ProcessInfo info) method GetRopNops (line 538) | private ErcResult> GetRopNops(List excludes = null) method GetRopNops (line 556) | private ErcResult> GetRopNops(ProcessInfo info) method PopulateOpcodes (line 576) | private ErcResult PopulateOpcodes(ProcessInfo info) method ParseByteArrayForRopCodes (line 602) | private ErcResult ParseByteArrayForRopCodes(byte[] bytes, Process... method optimiseLists (line 1047) | private void optimiseLists(ProcessInfo info) method GenerateVirtualAllocChain32 (line 1639) | private ErcResult>> GenerateVirtualAllocCha... method GenerateHeapCreateChain32 (line 2202) | private ErcResult>> GenerateHeapCreateChain... method GenerateVirtualProtectChain32 (line 2667) | private ErcResult>> GenerateVirtualProtectC... method GenerateWriteProcessMemoryChain32 (line 3198) | private ErcResult>> GenerateWriteProcessMem... method BuildRopChain (line 3205) | private List> BuildRopChain(RegisterLists32 regL... method CalculateAddInstructions32 (line 3293) | private byte[] CalculateAddInstructions32(int size) method ZeroRegister (line 3316) | private List> ZeroRegister(Register3... method SetRegisterModifier (line 3361) | private void SetRegisterModifier(Register32 modifyingReg, Register32 m... method GetRegisterModified (line 3401) | private bool GetRegisterModified(Register32 modifyingReg, Register32 m... method GetPopInstruction (line 3444) | private Tuple GetPopInstruction(Register32... method GetXorInstruction (line 3527) | private Tuple GetXorInstruction(Register32... method GetMovInstruction (line 3587) | private Tuple GetMovInstruction(Register32... method GetAddInstruction (line 3615) | private Tuple GetAddInstruction(Register32... method registerIdentifier32 (line 3635) | private Register32 registerIdentifier32(string reg) method CompleteRegisters32 (line 3667) | private bool CompleteRegisters32(Register32 regState) type Register32 (line 3709) | private enum Register32 : ushort class X86Lists (line 3735) | public class X86Lists class RegisterModifiers32 (line 3920) | private class RegisterModifiers32 class RegisterLists32 (line 3932) | private class RegisterLists32 type RopMethod (line 3947) | [Flags] FILE: ERC/ERC/RopChainGenerator64.cs class RopChainGenerator64 (line 10) | public class RopChainGenerator64 method RopChainGenerator64 (line 49) | public RopChainGenerator64(ProcessInfo _info) method GenerateRopGadgets64 (line 264) | public ErcResult GenerateRopGadgets64(byte[] ptrsToExclude = n... method GenerateRopChain64 (line 393) | public ErcResult GenerateRopChain64(byte[] ptrsToExclude, byte... method GenerateRopChain64 (line 563) | public ErcResult GenerateRopChain64(byte[] startAddress = null... method GetApiAddresses (line 650) | private ErcResult GetApiAddresses(ProcessInfo info) method GetRopNops (line 713) | private ErcResult> GetRopNops(ProcessInfo info, List> GetRopNops(ProcessInfo info) method PopulateOpcodes (line 751) | private ErcResult PopulateOpcodes(ProcessInfo info) method ParseByteArrayForRopCodes (line 777) | private ErcResult ParseByteArrayForRopCodes(byte[] bytes, Process... method OptimiseLists (line 1669) | private void OptimiseLists(ProcessInfo info) method GenerateVirtualAllocChain64 (line 2781) | private ErcResult>> GenerateVirtualAllocCha... method GenerateHeapCreateChain64 (line 3190) | private ErcResult>> GenerateHeapCreateChain... method GenerateVirtualProtectChain64 (line 3501) | private ErcResult>> GenerateVirtualProtectC... method BuildRopChain (line 3847) | private List> BuildRopChain(RopMethod method, Re... method CalculateAddInstructions64 (line 3897) | private byte[] CalculateAddInstructions64(int size) method ZeroRegister (line 3920) | private List> ZeroRegister(Register6... method SetRegisterModifier (line 3965) | private void SetRegisterModifier(Register64 modifyingReg, Register64 m... method GetRegisterModified (line 4022) | private bool GetRegisterModified(Register64 modifyingReg, Register64 m... method GetPopInstruction (line 4089) | private Tuple GetPopInstruction(Register64... method GetXorInstruction (line 4245) | private Tuple GetXorInstruction(Register64... method GetAddInstruction (line 4305) | private Tuple GetAddInstruction(Register64... method GetSubInstruction (line 4331) | private Tuple GetSubInstruction(Register64... method GetMovInstruction (line 4358) | private Tuple GetMovInstruction(Register64... method registerIdentifier64 (line 4377) | private Register64 registerIdentifier64(string reg) method CompleteRegisters64 (line 4420) | private bool CompleteRegisters64(Register64 regState64) type Register64 (line 4494) | private enum Register64 class RegisterModifiers64 (line 4532) | private class RegisterModifiers64 class X64Lists (line 4556) | public class X64Lists class RegisterLists64 (line 4909) | private class RegisterLists64 type RopMethod (line 4932) | [Flags] FILE: ERC/ERC/Thread_Info.cs class ThreadInfo (line 16) | public class ThreadInfo method ThreadInfo (line 48) | internal ThreadInfo(ProcessThread thread, ErcCore core, ProcessInfo pr... method Get_Context (line 96) | public ErcResult Get_Context() method PopulateTEB (line 182) | internal ErcResult PopulateTEB() method PopulateTEBStruct32 (line 239) | private void PopulateTEBStruct32(byte[] tebBytes) method PopulateTEBStruct64 (line 300) | private void PopulateTEBStruct64(byte[] tebBytes) method BuildSehChain (line 362) | internal ErcResult>> BuildSehChain() method GetSehChain (line 507) | public List> GetSehChain() method GetTeb (line 544) | public TEB GetTeb() method ToString (line 557) | public override string ToString() FILE: ERC/ERC/Win32Errors.cs class Win32Errors (line 7) | public static class Win32Errors method LocalFree (line 10) | [DllImport("kernel32.dll", SetLastError = true)] method FormatMessage (line 13) | [DllImport("kernel32.dll", SetLastError = true)] type FormatMessageFlags (line 16) | [Flags] method GetLastWin32Error (line 32) | public static string GetLastWin32Error(int errorCode = 0) FILE: ERC/docs/styles/docfx.js function breakText (line 43) | function breakText() { function renderTables (line 53) | function renderTables() { function renderAlerts (line 58) | function renderAlerts() { function renderLinks (line 74) | function renderLinks() { function highlight (line 83) | function highlight() { function enableSearch (line 123) | function enableSearch() { function renderNavbar (line 343) | function renderNavbar() { function renderSidebar (line 410) | function renderSidebar() { function renderBreadcrumb (line 560) | function renderBreadcrumb() { function renderAffix (line 580) | function renderAffix() { function renderFooter (line 693) | function renderFooter() { function renderLogo (line 734) | function renderLogo() { function renderTabs (line 767) | function renderTabs() { function utility (line 1032) | function utility() { function workAroundFixedHeaderForAnchors (line 1118) | function workAroundFixedHeaderForAnchors() { FILE: ERC/docs/styles/docfx.vendor.js function s (line 2) | function s(a){var b="length"in a&&a.length,c=n.type(a);return"function"=... function ga (line 2) | function ga(a,b,d,e){var f,h,j,k,l,o,r,s,w,x;if((b?b.ownerDocument||b:v)... function ha (line 2) | function ha(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLengt... function ia (line 2) | function ia(a){return a[u]=!0,a} function ja (line 2) | function ja(a){var b=n.createElement("div");try{return!!a(b)}catch(c){re... function ka (line 2) | function ka(a,b){var c=a.split("|"),e=a.length;while(e--)d.attrHandle[c[... function la (line 2) | function la(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sou... function ma (line 2) | function ma(a){return function(b){var c=b.nodeName.toLowerCase();return"... function na (line 2) | function na(a){return function(b){var c=b.nodeName.toLowerCase();return(... function oa (line 2) | function oa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,... function pa (line 2) | function pa(a){return a&&"undefined"!=typeof a.getElementsByTagName&&a} function qa (line 2) | function qa(){} function ra (line 2) | function ra(a){for(var b=0,c=a.length,d="";c>b;b++)d+=a[b].value;return d} function sa (line 2) | function sa(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=x++;return b.firs... function ta (line 2) | function ta(a){return a.length>1?function(b,c,d){var e=a.length;while(e-... function ua (line 2) | function ua(a,b,c){for(var d=0,e=b.length;e>d;d++)ga(a,b[d],c);return c} function va (line 2) | function va(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;i>h;h++)(... function wa (line 2) | function wa(a,b,c,d,e,f){return d&&!d[u]&&(d=wa(d)),e&&!e[u]&&(e=wa(e,f)... function xa (line 2) | function xa(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],h=g||d.r... function ya (line 2) | function ya(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,h,i,k){var... function x (line 2) | function x(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){retur... function D (line 2) | function D(a,b){while((a=a[b])&&1!==a.nodeType);return a} function G (line 2) | function G(a){var b=F[a]={};return n.each(a.match(E)||[],function(a,c){b... function I (line 2) | function I(){l.removeEventListener("DOMContentLoaded",I,!1),a.removeEven... function K (line 2) | function K(){Object.defineProperty(this.cache={},0,{get:function(){retur... function P (line 2) | function P(a,b,c){var d;if(void 0===c&&1===a.nodeType)if(d="data-"+b.rep... function Z (line 3) | function Z(){return!0} function $ (line 3) | function $(){return!1} function _ (line 3) | function _(){try{return l.activeElement}catch(a){}} function ja (line 3) | function ja(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeTyp... function ka (line 3) | function ka(a){return a.type=(null!==a.getAttribute("type"))+"/"+a.type,a} function la (line 3) | function la(a){var b=ga.exec(a.type);return b?a.type=b[1]:a.removeAttrib... function ma (line 3) | function ma(a,b){for(var c=0,d=a.length;d>c;c++)L.set(a[c],"globalEval",... function na (line 3) | function na(a,b){var c,d,e,f,g,h,i,j;if(1===b.nodeType){if(L.hasData(a)&... function oa (line 3) | function oa(a,b){var c=a.getElementsByTagName?a.getElementsByTagName(b||... function pa (line 3) | function pa(a,b){var c=b.nodeName.toLowerCase();"input"===c&&T.test(a.ty... function sa (line 3) | function sa(b,c){var d,e=n(c.createElement(b)).appendTo(c.body),f=a.getD... function ta (line 3) | function ta(a){var b=l,c=ra[a];return c||(c=sa(a,b),"none"!==c&&c||(qa=(... function xa (line 3) | function xa(a,b,c){var d,e,f,g,h=a.style;return c=c||wa(a),c&&(g=c.getPr... function ya (line 3) | function ya(a,b){return{get:function(){return a()?void delete this.get:(... function g (line 3) | function g(){f.style.cssText="-webkit-box-sizing:border-box;-moz-box-siz... function Fa (line 3) | function Fa(a,b){if(b in a)return b;var c=b[0].toUpperCase()+b.slice(1),... function Ga (line 3) | function Ga(a,b,c){var d=Aa.exec(b);return d?Math.max(0,d[1]-(c||0))+(d[... function Ha (line 3) | function Ha(a,b,c,d,e){for(var f=c===(d?"border":"content")?4:"width"===... function Ia (line 3) | function Ia(a,b,c){var d=!0,e="width"===b?a.offsetWidth:a.offsetHeight,f... function Ja (line 3) | function Ja(a,b){for(var c,d,e,f=[],g=0,h=a.length;h>g;g++)d=a[g],d.styl... function Ka (line 3) | function Ka(a,b,c,d,e){return new Ka.prototype.init(a,b,c,d,e)} function Sa (line 3) | function Sa(){return setTimeout(function(){La=void 0}),La=n.now()} function Ta (line 3) | function Ta(a,b){var c,d=0,e={height:a};for(b=b?1:0;4>d;d+=2-b)c=R[d],e[... function Ua (line 3) | function Ua(a,b,c){for(var d,e=(Ra[b]||[]).concat(Ra["*"]),f=0,g=e.lengt... function Va (line 3) | function Va(a,b,c){var d,e,f,g,h,i,j,k,l=this,m={},o=a.style,p=a.nodeTyp... function Wa (line 3) | function Wa(a,b){var c,d,e,f,g;for(c in a)if(d=n.camelCase(c),e=b[d],f=a... function Xa (line 3) | function Xa(a,b,c){var d,e,f=0,g=Qa.length,h=n.Deferred().always(functio... function qb (line 4) | function qb(a){return function(b,c){"string"!=typeof b&&(c=b,b="*");var ... function rb (line 4) | function rb(a,b,c,d){var e={},f=a===mb;function g(h){var i;return e[h]=!... function sb (line 4) | function sb(a,b){var c,d,e=n.ajaxSettings.flatOptions||{};for(c in b)voi... function tb (line 4) | function tb(a,b,c){var d,e,f,g,h=a.contents,i=a.dataTypes;while("*"===i[... function ub (line 4) | function ub(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])fo... function x (line 4) | function x(a,b,f,h){var j,r,s,u,w,x=b;2!==t&&(t=2,g&&clearTimeout(g),c=v... function Ab (line 4) | function Ab(a,b,c,d){var e;if(n.isArray(b))n.each(b,function(b,e){c||wb.... function Jb (line 4) | function Jb(a){return n.isWindow(a)?a:9===a.nodeType&&a.defaultView} function b (line 11) | function b(){var a=document.createElement("bootstrap"),b={WebkitTransiti... function b (line 11) | function b(b){return this.each(function(){var c=a(this),e=c.data("bs.ale... function c (line 11) | function c(){g.detach().trigger("closed.bs.alert").remove()} function b (line 11) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.but... function b (line 11) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.car... function b (line 11) | function b(b){var c,d=b.attr("data-target")||(c=b.attr("href"))&&c.repla... function c (line 11) | function c(b){return this.each(function(){var c=a(this),e=c.data("bs.col... function b (line 11) | function b(b){var c=b.attr("data-target");c||(c=b.attr("href"),c=c&&/#[A... function c (line 11) | function c(c){c&&3===c.which||(a(e).remove(),a(f).each(function(){var d=... function d (line 11) | function d(b){return this.each(function(){var c=a(this),d=c.data("bs.dro... function b (line 11) | function b(b,d){return this.each(function(){var e=a(this),f=e.data("bs.m... function b (line 11) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.too... function d (line 11) | function d(){"in"!=e.hoverState&&f.detach(),e.$element&&e.$element.remov... function b (line 11) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.pop... function b (line 11) | function b(c,d){this.$body=a(document.body),this.$scrollElement=a(a(c).i... function c (line 11) | function c(c){return this.each(function(){var d=a(this),e=d.data("bs.scr... function b (line 12) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.tab... function f (line 12) | function f(){g.removeClass("active").find("> .dropdown-menu > .active").... function b (line 12) | function b(b){return this.each(function(){var d=a(this),e=d.data("bs.aff... function t (line 14) | function t(e){return e.replace(/&/g,"&").replace(/r;r++... function m (line 14) | function m(e,r){r=r||D.languages||x(E);var a={r:0,value:t(e)},i=a;return... function u (line 14) | function u(e){return D.tabReplace||D.useBR?e.replace(A,function(e,t){ret... function b (line 14) | function b(e,t,r){var a=t?N[t]:r,i=[e.trim()];return e.match(/\bhljs\b/)... function g (line 14) | function g(e){var t,r,a,o,c,d=n(e);i(d)||(D.useBR?(t=document.createElem... function f (line 14) | function f(e){D=o(D,e)} function _ (line 14) | function _(){if(!_.called){_.called=!0;var e=document.querySelectorAll("... function h (line 14) | function h(){addEventListener("DOMContentLoaded",_,!1),addEventListener(... function v (line 14) | function v(t,r){var a=E[t]=r(e);a.aliases&&a.aliases.forEach(function(e)... function y (line 14) | function y(){return x(E)} function S (line 14) | function S(e){return e=(e||"").toLowerCase(),E[e]||E[N[e]]} function t (line 16) | function t(e,t){var r=[{b:e,e:t}];return r[0].c=r,r} function a (line 28) | function a(a){return!isNaN(parseFloat(a))&&isFinite(a)} function e (line 45) | function e(e,t){for(var n=0;n1&&void 0!==arguments[1])||argume... function e (line 45) | function e(t){n(this,e),this.ctx=t,this.ie=!1;var r=window.navigator.use... function f (line 54) | function f(A){A.icon=A.hasOwnProperty("icon")?A.icon:"",A.visible=A.has... function p (line 54) | function p(A){var e;if("string"==typeof A||A instanceof String)e=[].slic... FILE: ERC/docs/styles/search-worker.js function buildIndex (line 48) | function buildIndex() { function isEmpty (line 70) | function isEmpty(obj) { FILE: ErcXdbg/ErcMain.cs class ErcMain (line 9) | public static class ErcMain method pluginit (line 14) | [DllExport("pluginit", CallingConvention.Cdecl)] method plugstop (line 25) | [DllExport("plugstop", CallingConvention.Cdecl)] method plugsetup (line 32) | [DllExport("plugsetup", CallingConvention.Cdecl)] FILE: ErcXdbg/ErcXdbg.cs class ErcXdbg (line 11) | public class ErcXdbg method PluginInit (line 16) | public static bool PluginInit(Plugins.PLUG_INITSTRUCT initStruct) method PluginStart (line 26) | public static bool PluginStart() method PluginStop (line 34) | public static void PluginStop() method PluginSetup (line 40) | public static void PluginSetup(Plugins.PLUG_SETUPSTRUCT setupStruct) method CBMENUENTRY (line 46) | [DllExport("CBMENUENTRY", CallingConvention.Cdecl)] FILE: ErcXdbg/Globals.cs type Encoding (line 10) | public enum Encoding : int class Globals (line 23) | public static class Globals FILE: ErcXdbg/RegisteredCommands.cs class RegisteredCommands (line 15) | public static class RegisteredCommands method ErcCommand (line 17) | public static bool ErcCommand(int argc, string[] argv) method PrintHelp (line 122) | private static void PrintHelp(string errorMessage = null) method ParseCommand (line 256) | private static void ParseCommand(string command, ERC.ErcCore core, ERC... method ParseGlobals (line 398) | private static List ParseGlobals(List parameters) method Update (line 706) | private static void Update(List parameters) method Config (line 920) | private static void Config(List parameters, ERC.ErcCore core) method Pattern (line 1089) | private static void Pattern(ERC.ErcCore core, List parameters) method ByteArray (line 1216) | private static void ByteArray(List parameters, ERC.ErcCore core) method Compare (line 1271) | private static void Compare(ERC.ProcessInfo info, List paramet... method Convert (line 1391) | private static void Convert(ERC.ProcessInfo info, List paramet... method Assemble (line 1447) | private static void Assemble(ERC.ProcessInfo info, List parame... method Disassemble (line 1526) | private static void Disassemble(ERC.ProcessInfo info, List par... method SearchMemory (line 1623) | private static void SearchMemory(ERC.ProcessInfo info, List pa... method SearchModules (line 1657) | private static void SearchModules(ERC.ProcessInfo info, List p... method DumpMemory (line 1714) | private static void DumpMemory(ERC.ProcessInfo info, List para... method SEH (line 1747) | private static void SEH(List parameters, ERC.ProcessInfo info) method EggHunters (line 1798) | private static void EggHunters(ERC.ErcCore core = null, string tag = n... method FindNRP (line 1804) | private static void FindNRP(ERC.ProcessInfo info, List paramet... method HeapInfo (line 1822) | private static void HeapInfo(ERC.ProcessInfo info, List parame... method rop (line 1959) | private static void rop(ERC.ProcessInfo info, bool gadgetsOnly = false) method StringToByteArray (line 2023) | private static byte[] StringToByteArray(string hex) method ByteArrayToString (line 2031) | private static string ByteArrayToString(byte[] ba) method DeleteOldPlugins (line 2036) | private static void DeleteOldPlugins() method Debug (line 2070) | private static void Debug(ERC.ProcessInfo info, List parameters) method Debug (line 2218) | private static void Debug(List parameters) method Reset (line 2333) | private static void Reset(ERC.ProcessInfo info, List parameters) method Reset (line 2353) | private static void Reset() FILE: Managed.x64dbg/SDK/Bridge.cs class Bridge (line 7) | public class Bridge method GuiGetLineWindow (line 31) | [DllImport(dll, CallingConvention = cdecl)] method DbgValFromString (line 34) | [DllImport(dll, CallingConvention = cdecl)] method DbgGetModuleAt (line 37) | [DllImport(dll, CallingConvention = cdecl)] method DbgModBaseFromName (line 40) | [DllImport(dll, CallingConvention = cdecl)] method DbgIsDebugging (line 43) | [DllImport(dll, CallingConvention = cdecl)] method DbgCmdExec (line 46) | [DllImport(dll, CallingConvention = cdecl)] method DbgCmdExecDirect (line 49) | [DllImport(dll, CallingConvention = cdecl, CharSet = CharSet.Ansi)] method BridgeAlloc (line 52) | [DllImport(dll, CallingConvention = cdecl)] method BridgeFree (line 55) | [DllImport(dll, CallingConvention = cdecl)] type ICONDATA (line 58) | public struct ICONDATA type ListInfo (line 64) | public struct ListInfo method ToArray (line 70) | public T[] ToArray(bool success) where T : new() FILE: Managed.x64dbg/SDK/Extensions.cs class Extensions (line 6) | public static class Extensions method ToHexString (line 8) | public static string ToHexString(this IntPtr intPtr) method ToPtrString (line 13) | public static string ToPtrString(this IntPtr intPtr) method MarshalToString (line 18) | public static string MarshalToString(this IntPtr intPtr) method ToStruct (line 25) | public static T ToStruct(this IntPtr intPtr) where T : new() FILE: Managed.x64dbg/SDK/PLog.cs class PLog (line 10) | public static class PLog method WriteLine (line 12) | public static void WriteLine(string format, params object[] args) method Write (line 17) | public static void Write(string format, params object[] args) method WriteLineHtml (line 21) | public static void WriteLineHtml(string format, params object[] args) method WriteHtml (line 26) | public static void WriteHtml(string format, params object[] args) class TextWriterPLog (line 33) | public class TextWriterPLog : TextWriter method Write (line 37) | public override void Write(string value) FILE: Managed.x64dbg/SDK/Plugins.cs class Plugins (line 6) | public static class Plugins method _plugin_logprintf (line 26) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_lograw_html (line 29) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_logputs (line 32) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_registercallback (line 35) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_unregistercallback (line 38) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_menuaddentry (line 41) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_menuadd (line 44) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_menuclear (line 47) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_registercommand (line 50) | [DllImport(dll, CallingConvention = cdecl)] method _plugin_unregistercommand (line 53) | [DllImport(dll, CallingConvention = cdecl)] type PLUG_INITSTRUCT (line 56) | public struct PLUG_INITSTRUCT method ToString (line 64) | public override string ToString() type PLUG_SETUPSTRUCT (line 75) | public struct PLUG_SETUPSTRUCT method ToString (line 83) | public override string ToString() type CBTYPE (line 94) | public enum CBTYPE type PLUG_CB_INITDEBUG (line 123) | public struct PLUG_CB_INITDEBUG type PLUG_CB_STOPDEBUG (line 128) | public struct PLUG_CB_STOPDEBUG type PLUG_CB_CREATEPROCESS (line 133) | public struct PLUG_CB_CREATEPROCESS type PLUG_CB_EXITPROCESS (line 141) | public struct PLUG_CB_EXITPROCESS type PLUG_CB_LOADDLL (line 146) | public struct PLUG_CB_LOADDLL type PLUG_CB_MENUENTRY (line 153) | public struct PLUG_CB_MENUENTRY FILE: Managed.x64dbg/SDK/TitanEngine.cs class TitanEngine (line 6) | public class TitanEngine method GetContextData (line 213) | [DllImport("TitanEngine.dll", CallingConvention = CallingConvention.Cd... method TitanGetProcessInformation (line 216) | [DllImport("TitanEngine.dll", CallingConvention = CallingConvention.Cd... method DumpProcess (line 219) | [DllImport("TitanEngine.dll", CallingConvention = CallingConvention.Cd... method StaticFileLoadW (line 222) | [DllImport("TitanEngine.dll", CallingConvention = CallingConvention.Cd... FILE: Managed.x64dbg/SDK/WAPI.cs class WAPI (line 7) | public class WAPI method GetModuleBaseNameA (line 11) | [DllImport("psapi.dll")] method ZeroMemory (line 14) | [DllImport("kernel32.dll", EntryPoint = "RtlZeroMemory")] type LOAD_DLL_DEBUG_INFO (line 17) | public struct LOAD_DLL_DEBUG_INFO type CREATE_PROCESS_DEBUG_INFO (line 29) | public struct CREATE_PROCESS_DEBUG_INFO type EXIT_PROCESS_DEBUG_INFO (line 43) | public struct EXIT_PROCESS_DEBUG_INFO type IMAGEHLP_MODULE64 (line 48) | public struct IMAGEHLP_MODULE64 type SYM_TYPE (line 81) | public enum SYM_TYPE type GUID (line 95) | public struct GUID type PROCESS_INFORMATION (line 104) | public struct PROCESS_INFORMATION FILE: Managed.x64dbg/Script/Module.cs class Module (line 7) | public static class Module type ModuleInfo (line 9) | public struct ModuleInfo type ModuleSectionInfo (line 21) | public struct ModuleSectionInfo method ScriptModuleGetList (line 33) | [DllImport(dll, CallingConvention = cdecl, method GetList (line 37) | public static ModuleInfo[] GetList() method ScriptModuleSectionListFromAddr (line 43) | [DllImport(dll, CallingConvention = cdecl, method SectionListFromAddr (line 47) | public static ModuleSectionInfo[] SectionListFromAddr(IntPtr addr) method ScriptModuleInfoFromAddr (line 53) | [DllImport(dll, CallingConvention = cdecl, method InfoFromAddr (line 57) | public static bool InfoFromAddr(IntPtr addr, ref ModuleInfo info)