SYMBOL INDEX (175 symbols across 9 files) FILE: DInvoke.Data/Native.cs class Native (line 12) | public static class Native type UNICODE_STRING (line 14) | [StructLayout(LayoutKind.Sequential)] type ANSI_STRING (line 22) | [StructLayout(LayoutKind.Sequential)] type PROCESS_BASIC_INFORMATION (line 30) | public struct PROCESS_BASIC_INFORMATION type OBJECT_ATTRIBUTES (line 45) | [StructLayout(LayoutKind.Sequential, Pack = 0)] type IO_STATUS_BLOCK (line 56) | [StructLayout(LayoutKind.Sequential)] type CLIENT_ID (line 63) | [StructLayout(LayoutKind.Sequential)] type OSVERSIONINFOEX (line 70) | [StructLayout(LayoutKind.Sequential)] type LIST_ENTRY (line 87) | [StructLayout(LayoutKind.Sequential)] type MEMORYINFOCLASS (line 94) | public enum MEMORYINFOCLASS : int type PROCESSINFOCLASS (line 102) | public enum PROCESSINFOCLASS : int type NT_CREATION_FLAGS (line 167) | public enum NT_CREATION_FLAGS : ulong type NTSTATUS (line 181) | public enum NTSTATUS : uint FILE: DInvoke.Data/PE.cs class PE (line 9) | public static class PE type DataSectionFlags (line 21) | [Flags] type IMAGE_DOS_HEADER (line 64) | public struct IMAGE_DOS_HEADER type IMAGE_DATA_DIRECTORY (line 99) | [StructLayout(LayoutKind.Sequential)] type IMAGE_OPTIONAL_HEADER32 (line 106) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type IMAGE_OPTIONAL_HEADER64 (line 158) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type IMAGE_FILE_HEADER (line 209) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type IMAGE_SECTION_HEADER (line 221) | [StructLayout(LayoutKind.Explicit)] type IMAGE_EXPORT_DIRECTORY (line 252) | [StructLayout(LayoutKind.Explicit)] type IMAGE_BASE_RELOCATION (line 279) | [StructLayout(LayoutKind.Sequential)] type PE_META_DATA (line 286) | [StructLayout(LayoutKind.Sequential)] type PE_MANUAL_MAP (line 297) | [StructLayout(LayoutKind.Sequential)] type IMAGE_THUNK_DATA32 (line 305) | [StructLayout(LayoutKind.Explicit)] type IMAGE_THUNK_DATA64 (line 318) | [StructLayout(LayoutKind.Explicit)] type ApiSetNamespace (line 331) | [StructLayout(LayoutKind.Explicit)] type ApiSetNamespaceEntry (line 341) | [StructLayout(LayoutKind.Explicit, Size = 24)] type ApiSetValueEntry (line 354) | [StructLayout(LayoutKind.Explicit)] type LDR_DATA_TABLE_ENTRY (line 364) | [StructLayout(LayoutKind.Sequential)] FILE: DInvoke.Data/Win32.cs class Win32 (line 16) | public static class Win32 class Kernel32 (line 18) | public static class Kernel32 type IMAGE_BASE_RELOCATION (line 33) | [StructLayout(LayoutKind.Sequential)] type IMAGE_IMPORT_DESCRIPTOR (line 40) | [StructLayout(LayoutKind.Sequential)] type SYSTEM_INFO (line 50) | public struct SYSTEM_INFO type Platform (line 65) | public enum Platform type ProcessAccessFlags (line 73) | [Flags] type FileAccessFlags (line 93) | [Flags] type FileShareFlags (line 111) | [Flags] type FileOpenFlags (line 120) | [Flags] type StandardRights (line 141) | [Flags] type ThreadAccess (line 164) | [Flags] class User32 (line 183) | public static class User32 class Netapi32 (line 191) | public static class Netapi32 type LOCALGROUP_USERS_INFO_0 (line 193) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type LOCALGROUP_USERS_INFO_1 (line 199) | [StructLayout(LayoutKind.Sequential)] type LOCALGROUP_MEMBERS_INFO_2 (line 206) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type WKSTA_USER_INFO_1 (line 214) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type SESSION_INFO_10 (line 223) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type SID_NAME_USE (line 232) | public enum SID_NAME_USE : UInt16 type SHARE_INFO_1 (line 245) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] method SHARE_INFO_1 (line 252) | public SHARE_INFO_1(string netname, uint type, string remark) class Advapi32 (line 261) | public static class Advapi32 type CREATION_FLAGS (line 284) | [Flags] type LOGON_FLAGS (line 320) | [Flags] type LOGON_TYPE (line 328) | public enum LOGON_TYPE type LOGON_PROVIDER (line 339) | public enum LOGON_PROVIDER type SCM_ACCESS (line 347) | [Flags] type ACCESS_MASK (line 379) | [Flags] type SERVICE_ACCESS (line 420) | [Flags] type SERVICE_TYPE (line 466) | [Flags] type SERVICE_START (line 476) | public enum SERVICE_START : uint type SERVICE_ERROR (line 485) | public enum SERVICE_ERROR class Dbghelp (line 494) | public static class Dbghelp type MINIDUMP_TYPE (line 496) | public enum MINIDUMP_TYPE class WinBase (line 524) | public class WinBase type _SYSTEM_INFO (line 526) | [StructLayout(LayoutKind.Sequential)] type _SECURITY_ATTRIBUTES (line 542) | [StructLayout(LayoutKind.Sequential)] class WinNT (line 551) | public class WinNT type _SECURITY_IMPERSONATION_LEVEL (line 591) | public enum _SECURITY_IMPERSONATION_LEVEL type TOKEN_TYPE (line 599) | public enum TOKEN_TYPE type _TOKEN_ELEVATION_TYPE (line 605) | public enum _TOKEN_ELEVATION_TYPE type _MEMORY_BASIC_INFORMATION32 (line 612) | [StructLayout(LayoutKind.Sequential)] type _MEMORY_BASIC_INFORMATION64 (line 624) | [StructLayout(LayoutKind.Sequential)] type _LUID_AND_ATTRIBUTES (line 638) | [StructLayout(LayoutKind.Sequential)] type _LUID (line 645) | [StructLayout(LayoutKind.Sequential)] type _TOKEN_STATISTICS (line 652) | [StructLayout(LayoutKind.Sequential)] type _TOKEN_PRIVILEGES (line 667) | [StructLayout(LayoutKind.Sequential)] type _TOKEN_MANDATORY_LABEL (line 674) | [StructLayout(LayoutKind.Sequential)] type _SID (line 680) | public struct _SID type _SID_IDENTIFIER_AUTHORITY (line 689) | [StructLayout(LayoutKind.Sequential)] type _SID_AND_ATTRIBUTES (line 696) | [StructLayout(LayoutKind.Sequential)] type _PRIVILEGE_SET (line 703) | [StructLayout(LayoutKind.Sequential)] type _TOKEN_USER (line 712) | [StructLayout(LayoutKind.Sequential)] type _SID_NAME_USE (line 718) | public enum _SID_NAME_USE type _TOKEN_INFORMATION_CLASS (line 732) | public enum _TOKEN_INFORMATION_CLASS type ACCESS_MASK (line 778) | [Flags] class ProcessThreadsAPI (line 827) | public class ProcessThreadsAPI type STARTF (line 829) | [Flags] type _STARTUPINFO (line 844) | [StructLayout(LayoutKind.Sequential)] type _STARTUPINFOEX (line 868) | [StructLayout(LayoutKind.Sequential)] type _PROCESS_INFORMATION (line 876) | [StructLayout(LayoutKind.Sequential)] class WinCred (line 886) | public class WinCred type _CREDENTIAL (line 889) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type CRED_FLAGS (line 906) | public enum CRED_FLAGS : uint type CRED_PERSIST (line 913) | public enum CRED_PERSIST : uint type CRED_TYPE (line 920) | public enum CRED_TYPE : uint class Secur32 (line 933) | public class Secur32 type _SECURITY_LOGON_SESSION_DATA (line 935) | public struct _SECURITY_LOGON_SESSION_DATA type _LSA_UNICODE_STRING (line 951) | [StructLayout(LayoutKind.Sequential)] FILE: DInvoke.DynamicInvoke/Generic.cs class Generic (line 20) | public class Generic method DynamicAPIInvoke (line 31) | public static object DynamicAPIInvoke(string DLLName, string FunctionN... method DynamicFunctionInvoke (line 45) | public static object DynamicFunctionInvoke(IntPtr FunctionPointer, Typ... method LoadModuleFromDisk (line 57) | public static IntPtr LoadModuleFromDisk(string DLLPath) method GetLibraryAddress (line 80) | public static IntPtr GetLibraryAddress(string DLLName, string Function... method GetLibraryAddress (line 107) | public static IntPtr GetLibraryAddress(string DLLName, short Ordinal, ... method GetLibraryAddress (line 135) | public static IntPtr GetLibraryAddress(string DLLName, string Function... method GetLoadedModuleAddress (line 162) | public static IntPtr GetLoadedModuleAddress(string DLLName) method GetPebLdrModuleEntry (line 183) | public static IntPtr GetPebLdrModuleEntry(string DLLName) method GetAPIHash (line 236) | public static string GetAPIHash(string APIName, long Key) method GetExportAddress (line 255) | public static IntPtr GetExportAddress(IntPtr ModuleBase, string Export... method GetExportAddress (line 329) | public static IntPtr GetExportAddress(IntPtr ModuleBase, short Ordinal... method GetExportAddress (line 397) | public static IntPtr GetExportAddress(IntPtr ModuleBase, string Functi... method GetForwardAddress (line 464) | public static IntPtr GetForwardAddress(IntPtr ExportAddress) method GetNativeExportAddress (line 504) | public static IntPtr GetNativeExportAddress(IntPtr ModuleBase, string ... method GetNativeExportAddress (line 531) | public static IntPtr GetNativeExportAddress(IntPtr ModuleBase, short O... method GetPeMetaData (line 547) | public static Data.PE.PE_META_DATA GetPeMetaData(IntPtr pModule) method GetApiSetMapping (line 598) | public static Dictionary GetApiSetMapping() method CallMappedPEModule (line 638) | public static void CallMappedPEModule(Data.PE.PE_META_DATA PEINFO, Int... method CallMappedDLLModule (line 661) | public static void CallMappedDLLModule(Data.PE.PE_META_DATA PEINFO, In... method CallMappedDLLModuleExport (line 685) | public static object CallMappedDLLModuleExport(Data.PE.PE_META_DATA PE... method CallMappedDLLModuleExport (line 711) | public static object CallMappedDLLModuleExport(Data.PE.PE_META_DATA PE... method CallMappedDLLModuleExport (line 738) | public static object CallMappedDLLModuleExport(Data.PE.PE_META_DATA PE... method GetSyscallStub (line 759) | public static IntPtr GetSyscallStub(string FunctionName) FILE: DInvoke.DynamicInvoke/Native.cs class Native (line 15) | public class Native method NtCreateThreadEx (line 17) | public static Data.Native.NTSTATUS NtCreateThreadEx( method RtlCreateUserThread (line 46) | public static Data.Native.NTSTATUS RtlCreateUserThread( method NtCreateSection (line 75) | public static Data.Native.NTSTATUS NtCreateSection( method NtUnmapViewOfSection (line 104) | public static Data.Native.NTSTATUS NtUnmapViewOfSection(IntPtr hProc, ... method NtMapViewOfSection (line 118) | public static Data.Native.NTSTATUS NtMapViewOfSection( method RtlInitUnicodeString (line 151) | public static void RtlInitUnicodeString(ref Data.Native.UNICODE_STRING... method LdrLoadDll (line 165) | public static Data.Native.NTSTATUS LdrLoadDll(IntPtr PathToFile, UInt3... method RtlZeroMemory (line 181) | public static void RtlZeroMemory(IntPtr Destination, int Length) method NtQueryInformationProcess (line 192) | public static Data.Native.NTSTATUS NtQueryInformationProcess(IntPtr hP... method NtQueryInformationProcessWow64Information (line 232) | public static bool NtQueryInformationProcessWow64Information(IntPtr hP... method NtQueryInformationProcessBasicInformation (line 247) | public static Data.Native.PROCESS_BASIC_INFORMATION NtQueryInformation... method NtOpenProcess (line 258) | public static IntPtr NtOpenProcess(UInt32 ProcessId, Data.Win32.Kernel... method NtQueueApcThread (line 288) | public static void NtQueueApcThread(IntPtr ThreadHandle, IntPtr ApcRou... method NtOpenThread (line 303) | public static IntPtr NtOpenThread(int TID, Data.Win32.Kernel32.ThreadA... method NtAllocateVirtualMemory (line 333) | public static IntPtr NtAllocateVirtualMemory(IntPtr ProcessHandle, ref... method NtFreeVirtualMemory (line 397) | public static void NtFreeVirtualMemory(IntPtr ProcessHandle, ref IntPt... method GetFilenameFromMemoryPointer (line 423) | public static string GetFilenameFromMemoryPointer(IntPtr hProc, IntPtr... method NtProtectVirtualMemory (line 475) | public static UInt32 NtProtectVirtualMemory(IntPtr ProcessHandle, ref ... method NtWriteVirtualMemory (line 494) | public static UInt32 NtWriteVirtualMemory(IntPtr ProcessHandle, IntPtr... method LdrGetProcedureAddress (line 513) | public static IntPtr LdrGetProcedureAddress(IntPtr hModule, IntPtr Fun... method RtlGetVersion (line 531) | public static void RtlGetVersion(ref Data.Native.OSVERSIONINFOEX Versi... method NtReadVirtualMemory (line 548) | public static UInt32 NtReadVirtualMemory(IntPtr ProcessHandle, IntPtr ... method NtOpenFile (line 567) | public static IntPtr NtOpenFile(ref IntPtr FileHandle, Data.Win32.Kern... type DELEGATES (line 606) | public struct DELEGATES FILE: DInvoke.DynamicInvoke/Utilities.cs class Utilities (line 6) | class Utilities method FileHasValidSignature (line 13) | public static bool FileHasValidSignature(string FilePath) FILE: DInvoke.DynamicInvoke/Win32.cs class Win32 (line 13) | public static class Win32 method OpenProcess (line 23) | public static IntPtr OpenProcess(Data.Win32.Kernel32.ProcessAccessFlag... method CreateRemoteThread (line 35) | public static IntPtr CreateRemoteThread( method IsWow64Process (line 63) | public static bool IsWow64Process(IntPtr hProcess, ref bool lpSystemInfo) class Delegates (line 80) | public static class Delegates FILE: DInvoke.ManualMap/Map.cs class Map (line 13) | public class Map method MapModuleFromDisk (line 22) | public static Data.PE.PE_MANUAL_MAP MapModuleFromDisk(string DLLPath) method AllocateFileToMemory (line 95) | public static IntPtr AllocateFileToMemory(string FilePath) method AllocateBytesToMemory (line 112) | public static IntPtr AllocateBytesToMemory(byte[] FileByteArray) method RelocateModule (line 126) | public static void RelocateModule(Data.PE.PE_META_DATA PEINFO, IntPtr ... method RewriteModuleIAT (line 191) | public static void RewriteModuleIAT(Data.PE.PE_META_DATA PEINFO, IntPt... method SetModuleSectionPermissions (line 341) | public static void SetModuleSectionPermissions(Data.PE.PE_META_DATA PE... method MapModuleToMemory (line 394) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(string ModulePath) method MapModuleToMemory (line 407) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(byte[] Module) method MapModuleToMemory (line 421) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(byte[] Module, I... method MapModuleToMemory (line 435) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(IntPtr pModule) method MapModuleToMemory (line 465) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(IntPtr pModule, ... method MapModuleToMemory (line 479) | public static Data.PE.PE_MANUAL_MAP MapModuleToMemory(IntPtr pModule, ... method FreeModule (line 534) | public static void FreeModule(Data.PE.PE_MANUAL_MAP PEMapped) FILE: DInvoke.ManualMap/Overload.cs class Overload (line 13) | public class Overload method FindDecoyModule (line 24) | public static string FindDecoyModule(long MinSize, bool LegitSigned = ... method OverloadModule (line 75) | public static Data.PE.PE_MANUAL_MAP OverloadModule(string PayloadPath,... method OverloadModule (line 95) | public static Data.PE.PE_MANUAL_MAP OverloadModule(byte[] Payload, str...