SYMBOL INDEX (99 symbols across 4 files) FILE: SharpMiniDump/CustomLoadLibrary.cs class CustomLoadLibrary (line 18) | public class CustomLoadLibrary method LoadModuleFromDisk (line 26) | public static IntPtr LoadModuleFromDisk(string DLLPath) method GetDllAddress (line 41) | public static IntPtr GetDllAddress(string DLLName, bool CanLoadFromDis... method GetLibraryAddress (line 68) | public static IntPtr GetLibraryAddress(string DLLName, string Function... method GetLoadedModuleAddress (line 93) | public static IntPtr GetLoadedModuleAddress(string DLLName) method GetExportAddress (line 113) | public static IntPtr GetExportAddress(IntPtr ModuleBase, string Export... FILE: SharpMiniDump/NativeSysCall.cs class NativeSysCall (line 16) | class NativeSysCall method ZwOpenProcess10 (line 74) | public static NTSTATUS ZwOpenProcess10(ref IntPtr hProcess, ProcessAcc... method ZwClose10 (line 98) | public static NTSTATUS ZwClose10(IntPtr handle) method ZwWriteVirtualMemory10 (line 122) | public static NTSTATUS ZwWriteVirtualMemory10(IntPtr hProcess, ref Int... method ZwProtectVirtualMemory10 (line 146) | public static NTSTATUS ZwProtectVirtualMemory10(IntPtr hProcess, ref I... method ZwQuerySystemInformation10 (line 170) | public static NTSTATUS ZwQuerySystemInformation10(SYSTEM_INFORMATION_C... method NtAllocateVirtualMemory10 (line 194) | public static NTSTATUS NtAllocateVirtualMemory10(IntPtr hProcess, ref ... method NtFreeVirtualMemory10 (line 218) | public static NTSTATUS NtFreeVirtualMemory10(IntPtr hProcess, ref IntP... method NtCreateFile10 (line 242) | public static NTSTATUS NtCreateFile10(out Microsoft.Win32.SafeHandles.... type Delegates (line 286) | public struct Delegates FILE: SharpMiniDump/Natives.cs class Natives (line 12) | class Natives type WIN_VER_INFO (line 126) | public struct WIN_VER_INFO type OSVERSIONINFOEXW (line 136) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type LARGE_INTEGER (line 155) | [StructLayout(LayoutKind.Sequential)] type UNICODE_STRING (line 162) | [StructLayout(LayoutKind.Sequential)] type SYSTEM_PROCESSES (line 170) | [StructLayout(LayoutKind.Sequential)] type LUID_AND_ATTRIBUTES (line 209) | [StructLayout(LayoutKind.Sequential)] type LUID (line 216) | [StructLayout(LayoutKind.Sequential)] type TOKEN_PRIVILEGES (line 223) | [StructLayout(LayoutKind.Sequential)] type ProcessAccessFlags (line 230) | [Flags] type IO_STATUS_BLOCK (line 248) | [StructLayout(LayoutKind.Sequential, Pack = 0)] type CLIENT_ID (line 255) | public struct CLIENT_ID type OBJECT_ATTRIBUTES (line 261) | [StructLayout(LayoutKind.Sequential)] type NTSTATUS (line 272) | public enum NTSTATUS : uint type SYSTEM_INFORMATION_CLASS (line 615) | public enum SYSTEM_INFORMATION_CLASS type TOKEN_ELEVATION (line 769) | public struct TOKEN_ELEVATION { type TOKEN_INFORMATION_CLASS (line 773) | public enum TOKEN_INFORMATION_CLASS type TOKEN_ELEVATION_TYPE (line 818) | public enum TOKEN_ELEVATION_TYPE type PSS_CAPTURE_FLAGS (line 825) | public enum PSS_CAPTURE_FLAGS { type MINIDUMP_CALLBACK_TYPE (line 849) | public enum MINIDUMP_CALLBACK_TYPE : uint type MINIDUMP_THREAD_CALLBACK (line 874) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_THREAD_EX_CALLBACK (line 885) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type VS_FIXEDFILEINFO_FileFlags (line 893) | enum VS_FIXEDFILEINFO_FileFlags : uint type VS_FIXEDFILEINFO_FileOSFlags (line 903) | enum VS_FIXEDFILEINFO_FileOSFlags : uint type VS_FIXEDFILEINFO_FileTypeFlags (line 916) | enum VS_FIXEDFILEINFO_FileTypeFlags : uint type VS_FIXEFILEINFO_FileSubTypeFlags (line 927) | enum VS_FIXEFILEINFO_FileSubTypeFlags : uint type VS_FIXEDFILEINFO (line 950) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_MODULE_CALLBACK (line 968) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_INCLUDE_THREAD_CALLBACK (line 983) | public struct MINIDUMP_INCLUDE_THREAD_CALLBACK type MINIDUMP_INCLUDE_MODULE_CALLBACK (line 988) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_IO_CALLBACK (line 994) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_READ_MEMORY_FAILURE_CALLBACK (line 1003) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MINIDUMP_SECONDARY_FLAGS (line 1011) | [Flags] type MINIDUMP_CALLBACK_INPUT (line 1017) | [StructLayout(LayoutKind.Explicit)] type STATE (line 1052) | public enum STATE : uint type TYPE (line 1059) | public enum TYPE : uint type PROTECT (line 1066) | [Flags] type MINIDUMP_MEMORY_INFO (line 1085) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MemoryCallbackOutput (line 1099) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type CancelCallbackOutput (line 1106) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type MemoryInfoCallbackOutput (line 1115) | [StructLayout(LayoutKind.Sequential, Pack = 4)] type THREAD_WRITE_FLAGS (line 1123) | [Flags] type MODULE_WRITE_FLAGS (line 1135) | [Flags] type MINIDUMP_CALLBACK_OUTPUT (line 1147) | [StructLayout(LayoutKind.Explicit, Pack = 4)] type MINIDUMP_CALLBACK_INFORMATION (line 1176) | public struct MINIDUMP_CALLBACK_INFORMATION type CONTEXT_FLAGS (line 1182) | public enum CONTEXT_FLAGS : uint type M128A (line 1196) | [StructLayout(LayoutKind.Sequential)] method ToString (line 1202) | public override string ToString() type XSAVE_FORMAT64 (line 1211) | [StructLayout(LayoutKind.Sequential, Pack = 16)] type CONTEXT (line 1243) | [StructLayout(LayoutKind.Sequential, Pack = 16)] method OpenProcess (line 1303) | public static IntPtr OpenProcess(ProcessAccessFlags processAccess, boo... method GetNtDll (line 1318) | private static IntPtr GetNtDll() method NtFilterToken (line 1326) | public static int NtFilterToken(IntPtr TokenHandle, uint Flags, IntPtr... method GetKernel32 (line 1333) | private static IntPtr GetKernel32() method GetKernelbase (line 1340) | private static IntPtr GetKernelbase() method GetAdvapi32 (line 1347) | private static IntPtr GetAdvapi32() method GetDbgcore (line 1354) | private static IntPtr GetDbgcore() method GetCurrentProcess (line 1361) | public static IntPtr GetCurrentProcess() method CloseHandle (line 1368) | public static bool CloseHandle(IntPtr handle) method UpdateProcThreadAttribute (line 1375) | public static bool UpdateProcThreadAttribute(IntPtr lpAttributeList, u... method InitializeProcThreadAttributeList (line 1382) | public static bool InitializeProcThreadAttributeList(IntPtr lpAttribut... method RtlGetVersion (line 1389) | public static bool RtlGetVersion(ref OSVERSIONINFOEXW lpVersionInforma... method VirtualProtect (line 1396) | public static bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, ui... method VirtualProtectEx (line 1403) | public static bool VirtualProtectEx(IntPtr hProcess, IntPtr lpAddress,... method LdrLoadDll (line 1410) | public static UInt32 LdrLoadDll(IntPtr PathToFile, UInt32 dwFlags, ref... method RtlInitUnicodeString (line 1417) | public static void RtlInitUnicodeString(ref Natives.UNICODE_STRING Des... method GetTokenInformation (line 1424) | public static bool GetTokenInformation(IntPtr TokenHandle, TOKEN_INFO... method OpenProcessToken (line 1431) | public static bool OpenProcessToken(IntPtr hProcess, UInt32 dwDesiredA... method MiniDumpWriteDump (line 1438) | public static bool MiniDumpWriteDump(IntPtr hProcess, uint ProcessId, ... method LookupPrivilegeValue (line 1445) | public static bool LookupPrivilegeValue(String lpSystemName, String lp... method AdjustTokenPrivileges (line 1452) | public static bool AdjustTokenPrivileges(IntPtr TokenHandle, bool Dis... method PssCaptureSnapshot (line 1459) | public static int PssCaptureSnapshot(IntPtr ProcessHandle, PSS_CAPTURE... method GetProcAddress (line 1466) | public static IntPtr GetProcAddress(IntPtr hModule, string procName) method LoadLibrary (line 1472) | public static IntPtr LoadLibrary(string name) FILE: SharpMiniDump/Program.cs class Program (line 17) | public class Program method Main (line 19) | static void Main(string[] args) method Execute (line 24) | public static void Execute(string[] args) method UnHookNativeApi (line 184) | private static bool UnHookNativeApi(Natives.WIN_VER_INFO pWinVerInfo) method IsElevated (line 226) | private static bool IsElevated() method GetCurrentProcessToken (line 231) | private static IntPtr GetCurrentProcessToken() method TokenIsElevated (line 243) | private static bool TokenIsElevated(IntPtr hToken) method SetDebugPrivilege (line 275) | public static bool SetDebugPrivilege() method MyMiniDumpWriteDumpCallback (line 306) | private static bool MyMiniDumpWriteDumpCallback(IntPtr CallbackParam, ...