SYMBOL INDEX (1105 symbols across 78 files) FILE: includes/dokan.h type VOID (line 126) | typedef VOID *DOKAN_HANDLE, **PDOKAN_HANDLE; type DOKAN_OPTIONS (line 133) | typedef struct _DOKAN_OPTIONS { type DOKAN_FILE_INFO (line 170) | typedef struct _DOKAN_FILE_INFO { type DOKAN_OPERATIONS (line 240) | typedef struct _DOKAN_OPERATIONS { FILE: includes/fileinfo.h type FILE_INFORMATION_CLASS (line 61) | typedef enum _FILE_INFORMATION_CLASS { type FS_INFORMATION_CLASS (line 150) | typedef enum _FSINFOCLASS { type FILE_ALIGNMENT_INFORMATION (line 171) | typedef struct _FILE_ALIGNMENT_INFORMATION { type FILE_NAME_INFORMATION (line 186) | typedef struct _FILE_NAME_INFORMATION { type FILE_ATTRIBUTE_TAG_INFORMATION (line 203) | typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION { type FILE_DISPOSITION_INFORMATION (line 222) | typedef struct _FILE_DISPOSITION_INFORMATION { type FILE_DISPOSITION_INFORMATION_EX (line 243) | typedef struct _FILE_DISPOSITION_INFORMATION_EX { type FILE_END_OF_FILE_INFORMATION (line 262) | typedef struct _FILE_END_OF_FILE_INFORMATION { type FILE_VALID_DATA_LENGTH_INFORMATION (line 275) | typedef struct _FILE_VALID_DATA_LENGTH_INFORMATION { type FILE_BASIC_INFORMATION (line 289) | typedef struct _FILE_BASIC_INFORMATION { type FILE_STANDARD_INFORMATION (line 319) | typedef struct _FILE_STANDARD_INFORMATION { type FILE_POSITION_INFORMATION (line 348) | typedef struct _FILE_POSITION_INFORMATION { type FILE_DIRECTORY_INFORMATION (line 359) | typedef struct _FILE_DIRECTORY_INFORMATION { type FILE_FULL_DIR_INFORMATION (line 425) | typedef struct _FILE_FULL_DIR_INFORMATION { type FILE_ID_FULL_DIR_INFORMATION (line 495) | typedef struct _FILE_ID_FULL_DIR_INFORMATION { type FILE_BOTH_DIR_INFORMATION (line 570) | typedef struct _FILE_BOTH_DIR_INFORMATION { type FILE_ID_BOTH_DIR_INFORMATION (line 647) | typedef struct _FILE_ID_BOTH_DIR_INFORMATION { type FILE_ID_EXTD_BOTH_DIR_INFORMATION (line 729) | typedef struct _FILE_ID_EXTD_BOTH_DIR_INFORMATION { type FILE_NAMES_INFORMATION (line 814) | typedef struct _FILE_NAMES_INFORMATION { type FILE_INTERNAL_INFORMATION (line 849) | typedef struct _FILE_INTERNAL_INFORMATION { type FILE_ID_INFORMATION (line 865) | typedef struct _FILE_ID_INFORMATION { type FILE_EA_INFORMATION (line 883) | typedef struct _FILE_EA_INFORMATION { type FILE_ACCESS_INFORMATION (line 896) | typedef struct _FILE_ACCESS_INFORMATION { type FILE_MODE_INFORMATION (line 910) | typedef struct _FILE_MODE_INFORMATION { type FILE_ALL_INFORMATION (line 931) | typedef struct _FILE_ALL_INFORMATION { type FILE_ALLOCATION_INFORMATION (line 958) | typedef struct _FILE_ALLOCATION_INFORMATION { type FILE_LINK_INFORMATION (line 972) | typedef struct _FILE_LINK_INFORMATION { type FILE_RENAME_INFORMATION (line 1004) | typedef struct _FILE_RENAME_INFORMATION { type FILE_STREAM_INFORMATION (line 1035) | typedef struct _FILE_STREAM_INFORMATION { type FILE_FS_LABEL_INFORMATION (line 1066) | typedef struct _FILE_FS_LABEL_INFORMATION { type FILE_FS_VOLUME_INFORMATION (line 1083) | typedef struct _FILE_FS_VOLUME_INFORMATION { type FILE_FS_SIZE_INFORMATION (line 1112) | typedef struct _FILE_FS_SIZE_INFORMATION { type FILE_FS_FULL_SIZE_INFORMATION (line 1139) | typedef struct _FILE_FS_FULL_SIZE_INFORMATION { type FILE_FS_ATTRIBUTE_INFORMATION (line 1170) | typedef struct _FILE_FS_ATTRIBUTE_INFORMATION { type FILE_NETWORK_OPEN_INFORMATION (line 1197) | typedef struct _FILE_NETWORK_OPEN_INFORMATION { type FILE_NETWORK_PHYSICAL_NAME_INFORMATION (line 1239) | typedef struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION { type UNICODE_STRING (line 1343) | typedef struct _UNICODE_STRING { FILE: includes/leechcore.h type QWORD (line 34) | typedef unsigned __int64 QWORD, *PQWORD; type VOID (line 42) | typedef void VOID, *PVOID, *HANDLE, **PHA... type QWORD (line 43) | typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PU... type SIZE_T (line 44) | typedef size_t SIZE_T, *PSIZE_T; type FILETIME (line 45) | typedef uint64_t FILETIME, *PFILETIME; type DWORD (line 46) | typedef uint32_t DWORD, *PDWORD, *LPDWORD, BO... type WORD (line 47) | typedef uint16_t WORD, *PWORD; type BYTE (line 48) | typedef uint8_t BYTE, *PBYTE, *LPBYTE, UCHAR; type CHAR (line 49) | typedef char CHAR, *PCHAR, *LPSTR; type WCHAR (line 51) | typedef uint16_t WCHAR, *PWCHAR, *LPWSTR; type LC_CONFIG (line 101) | typedef struct LC_CONFIG { type LC_CONFIG_ERRORINFO (line 118) | typedef struct tdLC_CONFIG_ERRORINFO { function EXPORTED_FUNCTION (line 137) | EXPORTED_FUNCTION _Success_(return != NULL) type LC_STATISTICS (line 514) | typedef struct tdLC_STATISTICS { type LC_MEMMAP_ENTRY (line 524) | typedef struct tdLC_MEMMAP_ENTRY { type LC_ARCH_TP (line 530) | typedef enum tdLC_ARCH_TP { type LC_TLP (line 547) | typedef struct tdLC_TLP { type VOID (line 558) | typedef VOID(*PLC_TLP_FUNCTION_CALLBACK)( type LC_VMM (line 580) | typedef struct tdLC_VMM { type LC_BAR (line 595) | typedef struct tdLC_BAR { type LC_BAR_REQUEST (line 606) | typedef struct tdLC_BAR_REQUEST { type VOID (line 629) | typedef VOID(*PLC_BAR_FUNCTION_CALLBACK)(_Inout_ PLC_BAR_REQUEST pBarReq... FILE: includes/leechgrpc.h type VOID (line 39) | typedef void VOID, *PVOID, *HANDLE; type SIZE_T (line 40) | typedef size_t SIZE_T; type DWORD (line 41) | typedef uint32_t DWORD, BOOL; type BYTE (line 42) | typedef uint8_t BYTE, *PBYTE; type CHAR (line 43) | typedef char CHAR, *LPSTR; FILE: includes/public.h type DOKAN_UNICODE_STRING_INTERMEDIATE (line 128) | typedef struct _DOKAN_UNICODE_STRING_INTERMEDIATE { type DOKAN_NOTIFY_PATH_INTERMEDIATE (line 141) | typedef struct _DOKAN_NOTIFY_PATH_INTERMEDIATE { type DOKAN_ACCESS_STATE_INTERMEDIATE (line 153) | typedef struct _DOKAN_ACCESS_STATE_INTERMEDIATE { type DOKAN_ACCESS_STATE (line 176) | typedef struct _DOKAN_ACCESS_STATE { type DOKAN_IO_SECURITY_CONTEXT_INTERMEDIATE (line 195) | typedef struct _DOKAN_IO_SECURITY_CONTEXT_INTERMEDIATE { type DOKAN_IO_SECURITY_CONTEXT (line 201) | typedef struct _DOKAN_IO_SECURITY_CONTEXT { type CREATE_CONTEXT (line 206) | typedef struct _CREATE_CONTEXT { type CLEANUP_CONTEXT (line 217) | typedef struct _CLEANUP_CONTEXT { type CLOSE_CONTEXT (line 223) | typedef struct _CLOSE_CONTEXT { type DIRECTORY_CONTEXT (line 229) | typedef struct _DIRECTORY_CONTEXT { type READ_CONTEXT (line 241) | typedef struct _READ_CONTEXT { type WRITE_CONTEXT (line 248) | typedef struct _WRITE_CONTEXT { type FILEINFO_CONTEXT (line 258) | typedef struct _FILEINFO_CONTEXT { type SETFILE_CONTEXT (line 265) | typedef struct _SETFILE_CONTEXT { type VOLUME_CONTEXT (line 273) | typedef struct _VOLUME_CONTEXT { type LOCK_CONTEXT (line 278) | typedef struct _LOCK_CONTEXT { type FLUSH_CONTEXT (line 286) | typedef struct _FLUSH_CONTEXT { type UNMOUNT_CONTEXT (line 291) | typedef struct _UNMOUNT_CONTEXT { type SECURITY_CONTEXT (line 296) | typedef struct _SECURITY_CONTEXT { type SET_SECURITY_CONTEXT (line 303) | typedef struct _SET_SECURITY_CONTEXT { type EVENT_CONTEXT (line 311) | typedef struct _EVENT_CONTEXT { type VOLUME_METRICS (line 340) | typedef struct _VOLUME_METRICS { type EVENT_INFORMATION (line 360) | typedef struct _EVENT_INFORMATION { type EVENT_DRIVER_INFO (line 454) | typedef struct _EVENT_DRIVER_INFO { type EVENT_START (line 464) | typedef struct _EVENT_START { type DOKAN_RENAME_INFORMATION (line 480) | typedef struct _DOKAN_RENAME_INFORMATION { type DOKAN_LINK_INFORMATION (line 496) | typedef struct _DOKAN_LINK_INFORMATION { type DOKAN_MOUNT_POINT_INFO (line 506) | typedef struct _DOKAN_MOUNT_POINT_INFO { type DOKAN_LOG_MESSAGE (line 526) | typedef struct _DOKAN_LOG_MESSAGE { FILE: includes/vmmdll.h type QWORD (line 30) | typedef unsigned __int64 QWORD, *PQWORD; type VOID (line 40) | typedef void VOID, *PVOID, *HANDLE, **PHA... type QWORD (line 41) | typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PU... type SIZE_T (line 42) | typedef size_t SIZE_T, *PSIZE_T; type FILETIME (line 43) | typedef uint64_t FILETIME, *PFILETIME; type DWORD (line 44) | typedef uint32_t DWORD, *PDWORD, *LPDWORD, BO... type WORD (line 45) | typedef uint16_t WORD, *PWORD; type BYTE (line 46) | typedef uint8_t BYTE, *PBYTE, *LPBYTE, UCHAR; type CHAR (line 47) | typedef char CHAR, *PCHAR, *LPSTR; type WCHAR (line 49) | typedef uint16_t WCHAR, *PWCHAR, *LPWSTR; type tdVMM_HANDLE (line 77) | struct tdVMM_HANDLE type tdVMMVM_HANDLE (line 78) | struct tdVMMVM_HANDLE type BYTE (line 79) | typedef BYTE OPAQUE_OB_HEADER[0x40]; function EXPORTED_FUNCTION (line 146) | EXPORTED_FUNCTION _Success_(return != NULL) type SERVICE_STATUS (line 338) | typedef struct _SERVICE_STATUS { type VMMDLL_VFS_FILELIST_EXINFO (line 369) | typedef struct tdVMMDLL_VFS_FILELIST_EXINFO { type VMMDLL_VFS_FILELIST2 (line 386) | typedef struct tdVMMDLL_VFS_FILELIST2 { type VMMDLL_VFS_FILELISTBLOB_ENTRY (line 393) | typedef struct tdVMMDLL_VFS_FILELISTBLOB_ENTRY { type VMMDLL_VFS_FILELISTBLOB (line 399) | typedef struct tdVMMDLL_VFS_FILELISTBLOB { function EXPORTED_FUNCTION (line 433) | EXPORTED_FUNCTION type VMMDLL_FORENSIC_JSONDATA (line 551) | typedef struct tdVMMDLL_FORENSIC_JSONDATA { type VMMDLL_FORENSIC_INGEST_OBJECT_TYPE (line 570) | typedef enum tdVMMDLL_FORENSIC_INGEST_OBJECT_TYPE { type VMMDLL_FORENSIC_INGEST_OBJECT (line 574) | typedef struct tdVMMDLL_FORENSIC_INGEST_OBJECT { type VMMDLL_FORENSIC_INGEST_PHYSMEM (line 585) | typedef struct tdVMMDLL_FORENSIC_INGEST_PHYSMEM { type VMMDLL_FORENSIC_INGEST_VIRTMEM (line 595) | typedef struct tdVMMDLL_FORENSIC_INGEST_VIRTMEM { type VMMDLL_PLUGIN_REGINFO (line 608) | typedef struct tdVMMDLL_PLUGIN_REGINFO { function EXPORTED_FUNCTION (line 704) | EXPORTED_FUNCTION _Success_(return != 0) type VMMDLL_MAP_VADENTRY (line 1176) | typedef struct tdVMMDLL_MAP_VADENTRY { type VMMDLL_MAP_VADEXENTRY (line 1214) | typedef struct tdVMMDLL_MAP_VADEXENTRY { type VMMDLL_MODULE_TP (line 1231) | typedef enum tdVMMDLL_MODULE_TP { type VMMDLL_MAP_MODULEENTRY_DEBUGINFO (line 1238) | typedef struct tdVMMDLL_MAP_MODULEENTRY_DEBUGINFO { type VMMDLL_MAP_MODULEENTRY_VERSIONINFO (line 1246) | typedef struct tdVMMDLL_MAP_MODULEENTRY_VERSIONINFO { type VMMDLL_MAP_MODULEENTRY (line 1257) | typedef struct tdVMMDLL_MAP_MODULEENTRY { type VMMDLL_MAP_UNLOADEDMODULEENTRY (line 1277) | typedef struct tdVMMDLL_MAP_UNLOADEDMODULEENTRY { type VMMDLL_MAP_EATENTRY (line 1289) | typedef struct tdVMMDLL_MAP_EATENTRY { type VMMDLL_MAP_IATENTRY (line 1299) | typedef struct tdVMMDLL_MAP_IATENTRY { type VMMDLL_HEAP_TP (line 1316) | typedef enum tdVMMDLL_HEAP_TP { type VMMDLL_HEAP_SEGMENT_TP (line 1322) | typedef enum tdVMMDLL_HEAP_SEGMENT_TP { type VMMDLL_MAP_HEAP_SEGMENTENTRY (line 1334) | typedef struct tdVMMDLL_MAP_HEAP_SEGMENTENTRY { type VMMDLL_MAP_HEAPENTRY (line 1341) | typedef struct tdVMMDLL_MAP_HEAPENTRY { type VMMDLL_HEAPALLOC_TP (line 1349) | typedef enum tdVMMDLL_HEAPALLOC_TP { type VMMDLL_MAP_HEAPALLOCENTRY (line 1361) | typedef struct tdVMMDLL_MAP_HEAPALLOCENTRY { type VMMDLL_MAP_THREADENTRY (line 1367) | typedef struct tdVMMDLL_MAP_THREADENTRY { type VMMDLL_MAP_THREAD_CALLSTACKENTRY (line 1398) | typedef struct tdVMMDLL_MAP_THREAD_CALLSTACKENTRY { type VMMDLL_MAP_HANDLEENTRY (line 1410) | typedef struct tdVMMDLL_MAP_HANDLEENTRY { type VMMDLL_MAP_POOL_TYPE (line 1427) | typedef enum tdVMMDLL_MAP_POOL_TYPE { type VMM_MAP_POOL_TYPE_SUBSEGMENT (line 1434) | typedef enum tdVMM_MAP_POOL_TYPE_SUBSEGMENT { type VMMDLL_MAP_POOLENTRYTAG (line 1443) | typedef struct tdVMMDLL_MAP_POOLENTRYTAG { type VMMDLL_MAP_POOLENTRY (line 1455) | typedef struct tdVMMDLL_MAP_POOLENTRY { type VMMDLL_MAP_KDEVICEENTRY (line 1471) | typedef struct tdVMMDLL_MAP_KDEVICEENTRY { type VMMDLL_MAP_KDRIVERENTRY (line 1482) | typedef struct tdVMMDLL_MAP_KDRIVERENTRY { type VMMDLL_MAP_KOBJECTENTRY (line 1493) | typedef struct tdVMMDLL_MAP_KOBJECTENTRY { type VMMDLL_MAP_NETENTRY (line 1503) | typedef struct tdVMMDLL_MAP_NETENTRY { type VMMDLL_MAP_PHYSMEMENTRY (line 1530) | typedef struct tdVMMDLL_MAP_PHYSMEMENTRY { type VMMDLL_MAP_USERENTRY (line 1535) | typedef struct tdVMMDLL_MAP_USERENTRY { type VMMDLL_VM_TP (line 1543) | typedef enum tdVMMDLL_VM_TP { type VMMDLL_MAP_VMENTRY (line 1549) | typedef struct tdVMMDLL_MAP_VMENTRY { type VMMDLL_MAP_SERVICEENTRY (line 1564) | typedef struct tdVMMDLL_MAP_SERVICEENTRY { type VMMDLL_MAP_PTE (line 1580) | typedef struct tdVMMDLL_MAP_PTE { type VMMDLL_MAP_VAD (line 1589) | typedef struct tdVMMDLL_MAP_VAD { type VMMDLL_MAP_VADEX (line 1599) | typedef struct tdVMMDLL_MAP_VADEX { type VMMDLL_MAP_MODULE (line 1606) | typedef struct tdVMMDLL_MAP_MODULE { type VMMDLL_MAP_UNLOADEDMODULE (line 1615) | typedef struct tdVMMDLL_MAP_UNLOADEDMODULE { type VMMDLL_MAP_EAT (line 1624) | typedef struct tdVMMDLL_MAP_EAT { type VMMDLL_MAP_IAT (line 1640) | typedef struct tdVMMDLL_MAP_IAT { type VMMDLL_MAP_HEAP (line 1650) | typedef struct tdVMMDLL_MAP_HEAP { type VMMDLL_MAP_HEAPALLOC (line 1659) | typedef struct tdVMMDLL_MAP_HEAPALLOC { type VMMDLL_MAP_THREAD (line 1667) | typedef struct tdVMMDLL_MAP_THREAD { type VMMDLL_MAP_THREAD_CALLSTACK (line 1674) | typedef struct tdVMMDLL_MAP_THREAD_CALLSTACK { type VMMDLL_MAP_HANDLE (line 1687) | typedef struct tdVMMDLL_MAP_HANDLE { type VMMDLL_MAP_POOL (line 1696) | typedef struct tdVMMDLL_MAP_POOL { type VMMDLL_MAP_KOBJECT (line 1707) | typedef struct tdVMMDLL_MAP_KOBJECT { type VMMDLL_MAP_KDRIVER (line 1716) | typedef struct tdVMMDLL_MAP_KDRIVER { type VMMDLL_MAP_KDEVICE (line 1725) | typedef struct tdVMMDLL_MAP_KDEVICE { type VMMDLL_MAP_NET (line 1734) | typedef struct tdVMMDLL_MAP_NET { type VMMDLL_MAP_PHYSMEM (line 1743) | typedef struct tdVMMDLL_MAP_PHYSMEM { type VMMDLL_MAP_USER (line 1751) | typedef struct tdVMMDLL_MAP_USER { type VMMDLL_MAP_VM (line 1760) | typedef struct tdVMMDLL_MAP_VM { type VMMDLL_MAP_SERVICE (line 1769) | typedef struct tdVMMDLL_MAP_SERVICE { function EXPORTED_FUNCTION (line 1788) | EXPORTED_FUNCTION function EXPORTED_FUNCTION (line 2120) | EXPORTED_FUNCTION _Success_(return) type VMMDLL_YARA_MEMORY_CALLBACK_CONTEXT (line 2247) | typedef struct tdVMMDLL_YARA_MEMORY_CALLBACK_CONTEXT { function EXPORTED_FUNCTION (line 2268) | EXPORTED_FUNCTION _Success_(return) type VMMDLL_MAP_PFN (line 2356) | typedef struct tdVMMDLL_MAP_PFN { function EXPORTED_FUNCTION (line 2373) | EXPORTED_FUNCTION _Success_(return) function EXPORTED_FUNCTION (line 2481) | EXPORTED_FUNCTION _Success_(return) FILE: includes/vmmyara.h type BOOL (line 41) | typedef uint32_t BOOL; type VOID (line 42) | typedef void VOID, *PVOID, *HANDLE; type SIZE_T (line 43) | typedef size_t SIZE_T; type DWORD (line 44) | typedef uint32_t DWORD, *PDWORD; type BYTE (line 45) | typedef uint8_t BYTE, *PBYTE; type CHAR (line 46) | typedef char CHAR, *LPSTR; type VMMYARA_ERROR (line 54) | typedef int VMMYARA_ERROR; type HANDLE (line 55) | struct HANDLE type VMMYARA_RULE_MATCH (line 216) | typedef struct tdVMMYARA_RULE_MATCH { type BOOL (line 248) | typedef BOOL(*VMMYARA_SCAN_MEMORY_CALLBACK)( FILE: pcileech/charutil.c function BOOL (line 18) | BOOL CharUtil_IsAnsiA(_In_ LPCSTR sz) function BOOL (line 29) | BOOL CharUtil_IsAnsiW(_In_ LPCWSTR wsz) function BOOL (line 40) | BOOL CharUtil_IsAnsiFsA(_In_ LPCSTR sz) function CharUtil_AtoU (line 68) | _Success_(return) function CharUtil_UtoU (line 130) | _Success_(return) function CharUtil_WtoU (line 190) | _Success_(return) function CharUtil_UtoW (line 317) | _Success_(return) function CharUtil_WtoW (line 407) | _Success_(return) function VOID (line 422) | VOID CharUtil_EscapeJSON2(_In_ CHAR ch, _Out_writes_(2) PCHAR chj) function VOID (line 436) | VOID CharUtil_EscapeJSON6(_In_ CHAR ch, _Out_writes_(6) PCHAR chj) function CharUtil_UtoJ (line 464) | _Success_(return) function CharUtil_AtoJ (line 533) | _Success_(return) function CharUtil_WtoJ (line 612) | _Success_(return) function CharUtil_UtoCSV (line 744) | _Success_(return) function DWORD (line 844) | DWORD CharUtil_FixFsNameU(_Out_writes_(cbuDst) LPSTR uszDst, _In_ DWORD ... function DWORD (line 907) | DWORD CharUtil_FixFsName(_Out_writes_(cbuDst) LPSTR uszOut, _In_ DWORD c... function DWORD (line 969) | DWORD CharUtil_ReplaceMultiple(_Out_writes_(cbuDst) LPSTR uszOut, _In_ D... function QWORD (line 999) | QWORD CharUtil_Hash64U(_In_opt_ LPCSTR usz, _In_ BOOL fUpper) function QWORD (line 1022) | QWORD CharUtil_Hash64A(_In_opt_ LPCSTR sz, _In_ BOOL fUpper) function QWORD (line 1038) | QWORD CharUtil_Hash64W(_In_opt_ LPCWSTR wsz, _In_ BOOL fUpper) function DWORD (line 1063) | DWORD CharUtil_Hash32U(_In_opt_ LPCSTR usz, _In_ BOOL fUpper) function DWORD (line 1086) | DWORD CharUtil_Hash32A(_In_opt_ LPCSTR sz, _In_ BOOL fUpper) function DWORD (line 1102) | DWORD CharUtil_Hash32W(_In_opt_ LPCWSTR wsz, _In_ BOOL fUpper) function DWORD (line 1133) | DWORD CharUtil_Internal_HashFs(_In_ LPSTR usz) function DWORD (line 1150) | DWORD CharUtil_HashNameFsU(_In_ LPCSTR usz, _In_opt_ DWORD iSuffix) function DWORD (line 1157) | DWORD CharUtil_HashNameFsA(_In_ LPCSTR sz, _In_opt_ DWORD iSuffix) function DWORD (line 1164) | DWORD CharUtil_HashNameFsW(_In_ LPCWSTR wsz, _In_opt_ DWORD iSuffix) function VOID (line 1179) | VOID CharUtil_ReplaceAllA(_Inout_ LPSTR sz, _In_ CHAR chOld, _In_ CHAR c... function LPSTR (line 1200) | LPSTR CharUtil_PathSplitLastEx(_In_ LPCSTR usz, _Out_writes_(cbuPath) LP... function LPSTR (line 1226) | LPSTR CharUtil_PathSplitLastInPlace(_Inout_ LPSTR usz) function LPCSTR (line 1248) | LPCSTR CharUtil_PathSplitLast(_In_ LPCSTR usz) function LPCSTR (line 1271) | LPCSTR CharUtil_PathSplitNext(_In_ LPCSTR usz) function LPCSTR (line 1297) | LPCSTR CharUtil_SplitFirst(_In_ LPCSTR usz, _In_ CHAR ch, _Out_writes_(c... function LPCSTR (line 1319) | LPCSTR CharUtil_SplitLast(_In_ LPCSTR usz, _In_ CHAR ch, _Out_writes_(cb... function CharUtil_SplitList (line 1341) | _Success_(return) function LPCSTR (line 1384) | LPCSTR CharUtil_PathSplitFirst(_In_ LPCSTR usz, _Out_writes_(cbu1) LPSTR... function QWORD (line 1402) | QWORD CharUtil_HashPathFs_Internal(_In_ LPCSTR uszPathFs) function QWORD (line 1422) | QWORD CharUtil_HashPathFsU(_In_ LPCSTR uszPath) function QWORD (line 1427) | QWORD CharUtil_HashPathFsA(_In_ LPCSTR szPath) function QWORD (line 1435) | QWORD CharUtil_HashPathFsW(_In_ LPCWSTR wszPath) function BOOL (line 1454) | BOOL CharUtil_StrCmpAny(_In_opt_ CHARUTIL_STRCMP_PFN pfnStrCmp, _In_opt_... function BOOL (line 1480) | BOOL CharUtil_StrCmpAnyEx(_In_opt_ CHARUTIL_STRCMP_PFN pfnStrCmp, _In_op... function BOOL (line 1502) | BOOL CharUtil_StrCmpAll(_In_opt_ CHARUTIL_STRCMP_PFN pfnStrCmp, _In_opt_... function BOOL (line 1525) | BOOL CharUtil_StrEndsWith(_In_opt_ LPCSTR usz, _In_opt_ LPCSTR uszEndsWi... function BOOL (line 1544) | BOOL CharUtil_StrStartsWith(_In_opt_ LPCSTR usz, _In_opt_ LPCSTR uszStar... function BOOL (line 1561) | BOOL CharUtil_StrEquals(_In_opt_ LPCSTR usz, _In_opt_ LPCSTR usz2, _In_ ... function LPCSTR (line 1579) | LPCSTR CharUtil_StrContains(_In_opt_ LPCSTR usz, _In_opt_ LPCSTR uszSubS... function CharUtil_CmpWU (line 1626) | int CharUtil_CmpWU(_In_opt_ LPWSTR wsz1, _In_opt_ LPSTR usz2, _In_ BOOL ... function CharUtil_CmpWW (line 1644) | int CharUtil_CmpWW(_In_opt_ LPCWSTR wsz1, _In_opt_ LPCWSTR wsz2, _In_ BO... FILE: pcileech/charutil.h type QWORD (line 11) | typedef unsigned __int64 QWORD, *PQWORD; type BOOL (line 391) | typedef BOOL(*CHARUTIL_STRCMP_PFN)(_In_opt_ LPCSTR usz1, _In_opt_ LPCSTR... FILE: pcileech/device.c function DeviceReadDMA_Retry (line 12) | _Success_(return) function DeviceWriteDMA_Retry (line 18) | _Success_(return) function DeviceWriteDMA_Verify (line 24) | _Success_(return) function DWORD (line 37) | DWORD DeviceReadDMA(_In_ QWORD pa, _In_ DWORD cb, _Out_writes_(cb) PBYTE... function DeviceOpen2_SetCustomMemMap (line 71) | _Success_(return) function DeviceOpen2_RequestUserInput (line 108) | _Success_(return) function DeviceOpen2_RequestUserInput (line 141) | _Success_(return) function DeviceOpen2 (line 148) | _Success_(return) function DeviceOpen (line 209) | _Success_(return) function DeviceWriteMEM (line 222) | _Success_(return) function DeviceReadMEM (line 231) | _Success_(return) FILE: pcileech/executor.c type EXEC_IO (line 16) | typedef struct tdEXEC_IO { type CONSOLEREDIR_THREADDATA (line 33) | typedef struct tdCONSOLEREDIR_THREADDATA { type EXEC_HANDLE (line 43) | typedef struct tdEXEC_HANDLE { function DWORD (line 56) | DWORD WINAPI ConsoleRedirect_ThreadConsoleInput(PCONSOLEREDIR_THREADDATA... function DWORD (line 78) | DWORD WINAPI ConsoleRedirect_ThreadConsoleOutput(PCONSOLEREDIR_THREADDAT... function BOOL (line 90) | BOOL Exec_ConsoleRedirect_Initialize(_In_ QWORD ConsoleBufferAddr_InputS... function VOID (line 115) | VOID Exec_ConsoleRedirect(_In_ QWORD ConsoleBufferAddr_InputStream, _In_... function Exec_Callback (line 145) | _Success_(return) function VOID (line 206) | VOID Exec_CallbackClose(_In_opt_ HANDLE hCallback) function Exec_ExecSilent (line 227) | _Success_(return) function VOID (line 278) | VOID ActionExecShellcode() function VOID (line 408) | VOID ActionAgentExecPy() function DWORD (line 457) | DWORD ActionAgentForensic_OutFileDirectory(_Out_writes_z_(MAX_PATH) LPST... function VOID (line 478) | VOID ActionAgentForensic_GetFile(_In_ LPSTR szRemoteFile, _In_ LPSTR szO... function VOID (line 520) | VOID ActionAgentForensic() function VOID (line 623) | VOID ActionAgentForensic() FILE: pcileech/extra.c function VOID (line 10) | VOID Extra_MacFVRecover_ReadMemory_Optimized(_Inout_ PBYTE pb512M) function BOOL (line 23) | BOOL Extra_MacFVRecover_Analyze(_In_ PBYTE pb512M) function VOID (line 76) | VOID Extra_MacFVRecover_SetOutFileName() function VOID (line 95) | VOID Action_MacFilevaultRecover(_In_ BOOL IsRebootRequired) function VOID (line 147) | VOID Action_MacDisableVtd() function VOID (line 183) | VOID Action_PT_Phys2Virt() function VOID (line 203) | VOID Action_PT_Virt2Phys() function VOID (line 225) | VOID Action_TlpTx_DummyCB(_In_opt_ PVOID ctx, _In_ DWORD cbTlp, _In_ PBY... function VOID (line 230) | VOID Action_TlpTx() function VOID (line 255) | VOID Action_TlpTxLoop() function VOID (line 310) | VOID Action_RegCfgReadWrite() function VOID (line 393) | VOID Extra_BarReadWriteCallback(_Inout_ PLC_BAR_REQUEST pBarRequest) function VOID (line 435) | VOID Extra_BarReadWriteInitialize() function QWORD (line 476) | QWORD Extra_Benchmark_ReadSingle(_In_ PPMEM_SCATTER ppMEMs, _In_ QWORD cb) function VOID (line 520) | VOID Action_Benchmark() FILE: pcileech/help.c function VOID (line 10) | VOID ShowListFiles(_In_ LPSTR szSearchPattern, _In_ DWORD cchSpaces, _In... function VOID (line 28) | VOID Help_ShowGeneral() function VOID (line 181) | VOID Help_ShowInfo() function VOID (line 228) | VOID _HelpShowExecCommand() function VOID (line 249) | VOID Help_ShowDetailed() FILE: pcileech/kmd.c type KMDHANDLE_S12 (line 14) | typedef struct tdKMDHANDLE_S12 { type KERNELSEEKER (line 25) | typedef struct tdKERNELSEEKER { function KMD_FindSignature2 (line 47) | _Success_(return) function KMD_FindSignature1 (line 80) | _Success_(return) function KMD_FindSignature_EfiRuntimeServices (line 120) | _Success_(return) function BOOL (line 175) | BOOL KMD_MacOSIsKernelAddress(_In_ PBYTE pbPage) function KMD_MacOSKernelGetBase (line 189) | _Success_(return) function KMD_MacOSKernelSeekSignature (line 213) | _Success_(return) function KMD_FreeBSDKernelSeekSignature (line 244) | _Success_(return) type KALLSYMS_SYMBOL (line 297) | typedef struct tdKALLSYMS_SYMBOL { function POB_MAP (line 308) | POB_MAP KMD_Kallsyms_Collect(_In_reads_bytes_(cb) PBYTE pb, _In_ DWORD c... function POB_MAP (line 558) | POB_MAP KMD_Kallsyms(_In_reads_bytes_(cb) PBYTE pb, _In_ DWORD cb) function VOID (line 589) | VOID KMD_LinuxFindFunctionAddrTBL_FromKallsyms(_In_ PBYTE pb, _In_ DWORD... function DWORD (line 631) | DWORD KMD_LinuxFindFunctionAddr(_In_ PBYTE pb, _In_ DWORD cb, _In_ PKERN... function VOID (line 649) | VOID KMD_LinuxFindFunctionAddrTBL_Absolute(_In_ PBYTE pb, _In_ DWORD cb,... function KMD_LinuxFindFunctionAddrTBL_RelativeSymTabSearch (line 669) | _Success_(return) function QWORD (line 686) | QWORD KMD_LinuxFindFunctionAddrTBL_FromSystemMap_GetAddressFromName(_In_... function VOID (line 695) | VOID KMD_LinuxFindFunctionAddrTBL_FromSystemMap(_In_ PBYTE pb, _In_ DWOR... function VOID (line 720) | VOID KMD_LinuxFindFunctionAddrTBL_Relative(_In_ PBYTE pb, _In_ DWORD cb,... function VOID (line 749) | VOID KMD_LinuxFindFunctionAddrTBL(_In_ PBYTE pb, _In_ DWORD cb, _In_ PKE... function KMD_Linux46KernelSeekSignature (line 757) | _Success_(return) function QWORD (line 795) | QWORD KMD_Linux48KernelBaseSeek() function VOID (line 856) | VOID KMD_Linux48KernelSeekSignature_KallsymsFromKDBGetSym(_In_reads_(KMD... function KMD_Linux48KernelSeekSignature (line 875) | _Success_(return) function KMDOpen_LinuxEfiRuntimeServicesHijack (line 923) | _Success_(return) function KMD_Win_SearchTableHalpApicRequestInterrupt (line 1015) | _Success_(return) function KMDOpen_UEFI_FindEfiBase (line 1034) | _Success_(return) function KMDOpen_UEFI (line 1073) | _Success_(return) function KMDOpen_WINX64_2_VMM (line 1166) | _Success_(return) function KMDOpen_WINX64_3_VMM (line 1348) | _Success_(return) function KMDOpen_HalHijack (line 1487) | _Success_(return) function KMD_IsRangeInPhysicalMap (line 1595) | _Success_(return) function KMD_SubmitCommand (line 1609) | _Success_(return) function VOID (line 1642) | VOID KMD_PhysicalMemoryMapDisplay(_In_ PKMDHANDLE phKMD) function VOID (line 1658) | VOID KMD_CheckMigrationStatus() function KMD_GetPhysicalMemoryMap (line 1679) | _Success_(return) function KMD_SetupStage3 (line 1709) | _Success_(return) function KMDReadMemory_DMABufferSized (line 1745) | _Success_(return) function KMDWriteMemory_DMABufferSized (line 1759) | _Success_(return) function KMDReadMemory (line 1773) | _Success_(return) function KMDWriteMemory (line 1789) | _Success_(return) function VOID (line 1805) | VOID KMDUnload() function VOID (line 1813) | VOID KMDClose() function KMDOpen_MemoryScan (line 1823) | _Success_(return) function KMDOpen_PageTableHijack (line 1941) | _Success_(return) function KMD_SetupStage3_FromPartial (line 2066) | _Success_(return) function KMDOpen_LoadExisting (line 2081) | _Success_(return) function KMDOpen (line 2115) | _Success_(return) FILE: pcileech/memdump.c type MEMDUMP_FILEWRITE_DATA (line 22) | typedef struct tdMEMDUMP_FILEWRITE_DATA { type MEMDUMP_FILEWRITE (line 29) | typedef struct tdMEMDUMP_FILEWRITE { function VOID (line 39) | VOID MemoryDump_SetOutFileName() function DWORD (line 60) | DWORD WINAPI MemoryDump_File_ThreadProc(_In_ PMEMDUMP_FILEWRITE ctx) function VOID (line 80) | VOID MemoryDump_File_Close(_Post_ptr_invalid_ PMEMDUMP_FILEWRITE pfw) function PMEMDUMP_FILEWRITE (line 90) | PMEMDUMP_FILEWRITE MemoryDump_File_Initialize(_In_ BOOL fAllocFile4GB) function VOID (line 144) | VOID ActionMemoryDump_KMD_USB3380() function VOID (line 191) | VOID ActionMemoryDump_Native() function VOID (line 239) | VOID ActionMemoryDump() function VOID (line 250) | VOID ActionMemoryProbe() function VOID (line 279) | VOID ActionMemoryDisplayPhysical() function VOID (line 305) | VOID ActionMemoryDisplayVirtual() function VOID (line 344) | VOID ActionMemoryPageDisplay() function VOID (line 359) | VOID ActionMemoryTestReadWrite() function VOID (line 400) | VOID ActionMemoryWrite() FILE: pcileech/mempatch.c function Patch_CmpChunk (line 12) | _Success_(return) function Patch_FindAndPatch (line 43) | _Success_(return) function VOID (line 72) | VOID ActionPatchAndSearchPhysical() type SEARCH_INTERNAL_CONTEXT (line 160) | typedef struct tdSEARCH_INTERNAL_CONTEXT { function BOOL (line 174) | BOOL ActionPatchAndSearchVirtual_ResultCB(_In_ PVMMDLL_MEM_SEARCH_CONTEX... function VOID (line 212) | VOID ActionPatchAndSearchVirtual() FILE: pcileech/ob/ob.h type QWORD (line 11) | typedef unsigned __int64 QWORD, *PQWORD; type tdVMM_HANDLE (line 22) | struct tdVMM_HANDLE type OB (line 53) | typedef struct tdOB { type VOID (line 76) | typedef VOID(*OB_CLEANUP_CB)(_In_ PVOID pOb); function PVOID (line 103) | __forceinline PVOID Ob_Alloc(_In_ DWORD tag, _In_ UINT uFlags, _In_ SIZE... type OB_DATA (line 150) | typedef struct tdOB_DATA { type OB_CONTAINER (line 186) | typedef struct tdOB_CONTAINER { type tdOB_SET (line 239) | struct tdOB_SET type tdOB_MAP (line 395) | struct tdOB_MAP type OB_MAP_ENTRY (line 402) | typedef struct tdOB_MAP_ENTRY { type VOID (line 636) | typedef VOID(*OB_MAP_FILTER_PFN_CB)(_In_opt_ PVOID ctx, _In_ QWORD k, _I... type VOID (line 641) | typedef VOID(*OB_MAP_FILTERSET_PFN_CB)(_In_opt_ PVOID ctx, _In_ POB_SET ... type BOOL (line 646) | typedef BOOL(*OB_MAP_FILTER_REMOVE_PFN_CB)(_In_opt_ PVOID ctx, _In_ QWOR... type tdOB_CACHEMAP (line 725) | struct tdOB_CACHEMAP type BOOL (line 738) | typedef BOOL(*OB_CACHEMAP_VALIDENTRY_PFN_CB)( type tdOB_STRMAP (line 837) | struct tdOB_STRMAP type tdOB_COMPRESSED (line 1088) | struct tdOB_COMPRESSED type tdOB_MEMFILE (line 1147) | struct tdOB_MEMFILE type tdOB_COUNTER (line 1231) | struct tdOB_COUNTER type OB_COUNTER_ENTRY (line 1233) | typedef struct tdOB_COUNTER_ENTRY { type tdOB_BYTEQUEUE (line 1404) | struct tdOB_BYTEQUEUE FILE: pcileech/ob/ob_cachemap.c type OB_CACHEMAPENTRY (line 29) | typedef struct tdOB_CACHEMAPENTRY { type OB_CACHEMAP (line 36) | typedef struct tdOB_CACHEMAP { function _ObCacheMap_Clear (line 48) | _Success_(return) function ObCacheMap_Clear (line 74) | _Success_(return) function PVOID (line 80) | PVOID _ObCacheMap_RemoveByKey(_In_ POB_CACHEMAP pcm, _In_ QWORD qwKey, _... function PVOID (line 106) | PVOID _ObCacheMap_GetByKey(_In_ POB_CACHEMAP pcm, _In_ QWORD qwKey) function _ObCacheMap_Push (line 129) | _Success_(return) function PVOID (line 169) | PVOID ObCacheMap_GetByKey(_In_opt_ POB_CACHEMAP pcm, _In_ QWORD qwKey) function PVOID (line 182) | PVOID ObCacheMap_RemoveByKey(_In_opt_ POB_CACHEMAP pcm, _In_ QWORD qwKey) function BOOL (line 193) | BOOL ObCacheMap_ExistsKey(_In_opt_ POB_CACHEMAP pcm, _In_ QWORD qwKey) function DWORD (line 203) | DWORD ObCacheMap_Size(_In_opt_ POB_CACHEMAP pcm) function ObCacheMap_Push (line 208) | _Success_(return) function VOID (line 219) | VOID _ObCacheMap_ObCloseCallback(_In_ POB_CACHEMAP pObCacheMap) function POB_CACHEMAP (line 237) | POB_CACHEMAP ObCacheMap_New(_In_opt_ VMM_HANDLE H, _In_ DWORD cMaxEntrie... FILE: pcileech/ob/ob_core.c function PVOID (line 38) | PVOID Ob_AllocEx(_In_opt_ VMM_HANDLE H, _In_ DWORD tag, _In_ UINT uFlags... function PVOID (line 67) | PVOID Ob_XINCREF(_In_opt_ PVOID pObIn) function PVOID (line 87) | PVOID Ob_XDECREF(_In_opt_ PVOID pObIn) function VOID (line 130) | VOID Ob_XDECREF_NULL(_In_opt_ PVOID *ppOb) function BOOL (line 146) | BOOL Ob_VALID_TAG(_In_ PVOID pObIn, _In_ DWORD tag) function POB_DATA (line 163) | POB_DATA ObData_New(_In_opt_ VMM_HANDLE H, _In_ PBYTE pb, _In_ DWORD cb) FILE: pcileech/ob/ob_map.c type OB_MAP (line 31) | typedef struct tdOB_MAP { function VOID (line 76) | VOID _ObMap_ObFreeAllObjects(_In_ POB_MAP pObMap) function VOID (line 98) | VOID _ObMap_ObCloseCallback(_In_ POB_MAP pObMap) function POB_MAP_ENTRY (line 117) | POB_MAP_ENTRY _ObMap_GetFromIndex(_In_ POB_MAP pm, _In_ DWORD iEntry) function QWORD (line 123) | QWORD _ObMap_GetFromEntryIndex(_In_ POB_MAP pm, _In_ BOOL fValueHash, _I... function VOID (line 129) | VOID _ObMap_SetHashIndex(_In_ POB_MAP pm, _In_ BOOL fValueHash, _In_ DWO... function VOID (line 138) | VOID _ObMap_InsertHash(_In_ POB_MAP pm, _In_ BOOL fValueHash, _In_ DWORD... function VOID (line 151) | VOID _ObMap_RemoveHash(_In_ POB_MAP pm, _In_ BOOL fValueHash, _In_ QWORD... function _ObMap_GetEntryIndexFromKeyOrValue (line 178) | _Success_(return) function BOOL (line 204) | BOOL _ObMap_Exists(_In_ POB_MAP pm, _In_ BOOL fValueHash, _In_ QWORD kv) function DWORD (line 215) | DWORD ObMap_Size(_In_opt_ POB_MAP pm) function BOOL (line 226) | BOOL ObMap_Exists(_In_opt_ POB_MAP pm, _In_ PVOID pvObject) function BOOL (line 237) | BOOL ObMap_ExistsKey(_In_opt_ POB_MAP pm, _In_ QWORD qwKey) function PVOID (line 242) | PVOID _ObMap_GetByEntryIndex(_In_ POB_MAP pm, _In_ DWORD iEntry) function PVOID (line 249) | PVOID _ObMap_GetByKey(_In_ POB_MAP pm, _In_ QWORD qwKey) function PVOID (line 255) | PVOID _ObMap_GetNext(_In_ POB_MAP pm, _In_opt_ PVOID pvObject) function PVOID (line 266) | PVOID _ObMap_GetNextByKey(_In_ POB_MAP pm, _In_ QWORD qwKey, _In_opt_ PV... function PVOID (line 277) | PVOID _ObMap_GetNextByIndex(_In_ POB_MAP pm, _Inout_ PDWORD pdwIndex, _I... function _ObMap_QFind (line 296) | _Success_(return) function PVOID (line 350) | PVOID _ObMap_GetNextByKeySorted(_In_ POB_MAP pm, _In_ QWORD qwKey, _In_o... function QWORD (line 367) | QWORD _ObMap_GetKey(_In_ POB_MAP pm, _In_ PVOID pvObject) function _ObMap_Filter (line 374) | _Success_(return) function POB_SET (line 387) | POB_SET _ObMap_FilterSet(_In_ POB_MAP pm, _In_opt_ PVOID ctx, _In_ OB_MA... function PVOID (line 411) | PVOID ObMap_GetByIndex(_In_opt_ POB_MAP pm, _In_ DWORD index) function PVOID (line 423) | PVOID ObMap_GetByKey(_In_opt_ POB_MAP pm, _In_ QWORD qwKey) function PVOID (line 439) | PVOID ObMap_GetNext(_In_opt_ POB_MAP pm, _In_opt_ PVOID pvObject) function PVOID (line 459) | PVOID ObMap_GetNextByKey(_In_opt_ POB_MAP pm, _In_ QWORD qwKey, _In_opt_... function PVOID (line 477) | PVOID ObMap_GetNextByKeySorted(_In_opt_ POB_MAP pm, _In_ QWORD qwKey, _I... function PVOID (line 498) | PVOID ObMap_GetNextByIndex(_In_opt_ POB_MAP pm, _Inout_ PDWORD pdwIndex,... function QWORD (line 510) | QWORD ObMap_GetKey(_In_opt_ POB_MAP pm, _In_ PVOID pvObject) function PVOID (line 521) | PVOID ObMap_Peek(_In_opt_ POB_MAP pm) function QWORD (line 531) | QWORD ObMap_PeekKey(_In_opt_ POB_MAP pm) function ObMap_Filter (line 543) | _Success_(return) function POB_SET (line 559) | POB_SET ObMap_FilterSet(_In_opt_ POB_MAP pm, _In_opt_ PVOID ctx, _In_opt... function VOID (line 568) | VOID ObMap_FilterSet_FilterAllKey(_In_opt_ PVOID ctx, _In_ POB_SET ps, _... function PVOID (line 584) | PVOID _ObMap_RetrieveAndRemoveByEntryIndex(_In_ POB_MAP pm, _In_ DWORD i... function PVOID (line 608) | PVOID _ObMap_RemoveOrRemoveByKey(_In_ POB_MAP pm, _In_ BOOL fValueHash, ... function DWORD (line 616) | DWORD _ObMap_RemoveByFilter(_In_ POB_MAP pm, _In_opt_ PVOID ctx, _In_ OB... function PVOID (line 641) | PVOID ObMap_Pop(_In_opt_ POB_MAP pm) function PVOID (line 654) | PVOID ObMap_PopWithKey(_In_opt_ POB_MAP pm, _Out_opt_ PQWORD pKey) function PVOID (line 666) | PVOID ObMap_Remove(_In_opt_ POB_MAP pm, _In_ PVOID pvObject) function PVOID (line 679) | PVOID ObMap_RemoveByKey(_In_opt_ POB_MAP pm, _In_ QWORD qwKey) function DWORD (line 691) | DWORD ObMap_RemoveByFilter(_In_opt_ POB_MAP pm, _In_opt_ PVOID ctx, _In_... function ObMap_Clear (line 703) | _Success_(return) function _ObMap_SortEntryIndex (line 727) | _Success_(return) function _ObMap_SortEntryIndexByKey_CmpSort (line 757) | int _ObMap_SortEntryIndexByKey_CmpSort(_In_ POB_MAP_ENTRY e1, _In_ POB_M... function ObMap_SortEntryIndex (line 772) | _Success_(return) function ObMap_SortEntryIndexByKey (line 785) | _Success_(return) function _ObMap_Grow (line 801) | _Success_(return) function _ObMap_Push (line 829) | _Success_(return) function _ObMap_PushCopy (line 863) | _Success_(return) function _ObMap_PushAll (line 875) | _Success_(return) function ObMap_Push (line 898) | _Success_(return) function ObMap_PushCopy (line 914) | _Success_(return) function ObMap_PushAll (line 927) | _Success_(return) function POB_MAP (line 942) | POB_MAP ObMap_New(_In_opt_ VMM_HANDLE H, _In_ QWORD flags) FILE: pcileech/ob/ob_set.c type OB_SET_TABLE_ENTRY (line 29) | typedef struct tdOB_SET_TABLE_ENTRY { type OB_SET_TABLE_DIRECTORY_ENTRY (line 36) | typedef struct tdOB_SET_TABLE_DIRECTORY_ENTRY { type OB_SET (line 43) | typedef struct tdOB_SET { function VOID (line 82) | VOID _ObSet_ObCloseCallback(_In_ POB_SET pObSet) function POB_SET (line 116) | POB_SET ObSet_New(_In_opt_ VMM_HANDLE H) function QWORD (line 128) | QWORD _ObSet_GetValueFromIndex(_In_ POB_SET pvs, _In_ DWORD iValue) function VOID (line 139) | VOID _ObSet_SetValueFromIndex(_In_ POB_SET pvs, _In_ DWORD iValue, _In_ ... function DWORD (line 151) | DWORD _ObSet_GetIndexFromHash(_In_ POB_SET pvs, _In_ DWORD iHash) function VOID (line 156) | VOID _ObSet_SetHashIndex(_In_ POB_SET pvs, _In_ DWORD iHash, _In_ DWORD ... function VOID (line 165) | VOID _ObSet_InsertHash(_In_ POB_SET pvs, _In_ DWORD iValue) function VOID (line 178) | VOID _ObSet_RemoveHash(_In_ POB_SET pvs, _In_ DWORD iHash) function _ObSet_GetIndexFromValue (line 201) | _Success_(return) function BOOL (line 220) | BOOL _ObSet_Exists(_In_ POB_SET pvs, _In_ QWORD value) function BOOL (line 231) | BOOL ObSet_Exists(_In_opt_ POB_SET pvs, _In_ QWORD value) function QWORD (line 246) | QWORD ObSet_Get(_In_opt_ POB_SET pvs, _In_ DWORD index) function QWORD (line 251) | QWORD _ObSet_GetNext(_In_ POB_SET pvs, _In_ QWORD value) function QWORD (line 261) | QWORD _ObSet_GetNextByIndex(_In_ POB_SET pvs, _Inout_ PDWORD pdwIndex) function QWORD (line 281) | QWORD ObSet_GetNext(_In_opt_ POB_SET pvs, _In_ QWORD value) function QWORD (line 298) | QWORD ObSet_GetNextByIndex(_In_opt_ POB_SET pvs, _Inout_ PDWORD pdwIndex) function POB_DATA (line 303) | POB_DATA _ObSet_GetAll(_In_ POB_SET pvs) function POB_DATA (line 321) | POB_DATA ObSet_GetAll(_In_opt_ POB_SET pvs) function BOOL (line 326) | BOOL _ObSet_Remove(_In_ POB_SET pvs, _In_ QWORD value) function BOOL (line 355) | BOOL ObSet_Remove(_In_opt_ POB_SET pvs, _In_ QWORD value) function VOID (line 365) | VOID ObSet_Clear(_In_opt_ POB_SET pvs) function QWORD (line 382) | QWORD _ObSet_Pop(_In_ POB_SET pvs) function QWORD (line 402) | QWORD ObSet_Pop(_In_opt_ POB_SET pvs) function _ObSet_Grow (line 412) | _Success_(return) function _ObSet_Push (line 433) | _Success_(return) function _ObSet_PushSet (line 463) | _Success_(return) function _ObSet_PushData (line 478) | _Success_(return) function ObSet_Push (line 497) | _Success_(return) function ObSet_PushSet (line 510) | _Success_(return) function ObSet_PushData (line 523) | _Success_(return) function VOID (line 537) | VOID ObSet_Push_PageAlign(_In_opt_ POB_SET pvs, _In_ QWORD a, _In_ DWORD... function DWORD (line 554) | DWORD ObSet_Size(_In_opt_ POB_SET pvs) FILE: pcileech/oscompatibility.c function VOID (line 11) | VOID usleep(_In_ DWORD us) type INTERNAL_HANDLE (line 37) | typedef struct tdINTERNAL_HANDLE { function HANDLE (line 42) | HANDLE LocalAlloc(DWORD uFlags, SIZE_T uBytes) function VOID (line 51) | VOID LocalFree(HANDLE hMem) function QWORD (line 60) | QWORD GetTickCount64() function BOOL (line 67) | BOOL QueryPerformanceFrequency(_Out_ LARGE_INTEGER *lpFrequency) function BOOL (line 73) | BOOL QueryPerformanceCounter(_Out_ LARGE_INTEGER *lpPerformanceCount) function HANDLE (line 81) | HANDLE CreateThread( function VOID (line 104) | VOID GetLocalTime(LPSYSTEMTIME lpSystemTime) function HANDLE (line 120) | HANDLE FindFirstFileA(LPSTR lpFileName, LPWIN32_FIND_DATAA lpFindFileData) function BOOL (line 139) | BOOL FindNextFileA(HANDLE hFindFile, LPWIN32_FIND_DATAA lpFindFileData) function DWORD (line 156) | DWORD InterlockedAdd(DWORD *Addend, DWORD Value) function HMODULE (line 165) | HMODULE LoadLibraryA(LPSTR lpFileName) function BOOL (line 170) | BOOL FreeLibrary(_In_ HMODULE hLibModule) function FARPROC (line 176) | FARPROC GetProcAddress(HMODULE hModule, LPSTR lpProcName) function pthread_tryjoin_np (line 184) | static int pthread_tryjoin_np(pthread_t thread, void **retval) function BOOL (line 203) | BOOL GetExitCodeThread(HANDLE hThread, PDWORD lpExitCode) function VOID (line 215) | VOID InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection) { function VOID (line 222) | VOID DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection) { function VOID (line 227) | VOID EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection) { function VOID (line 231) | VOID LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection) { function VOID (line 239) | VOID terminal_enable_raw_mode() function VOID (line 247) | VOID terminal_disable_raw_mode() function BOOL (line 255) | BOOL _kbhit() function futex (line 278) | static int futex(uint32_t *uaddr, int futex_op, uint32_t val, const stru... function VOID (line 283) | VOID InitializeSRWLock(PSRWLOCK pSRWLock) function BOOL (line 288) | BOOL AcquireSRWLockExclusive_Try(_Inout_ PSRWLOCK pSRWLock) function VOID (line 299) | VOID AcquireSRWLockExclusive(_Inout_ PSRWLOCK pSRWLock) function AcquireSRWLockExclusive_Timeout (line 312) | _Success_(return) function VOID (line 339) | VOID ReleaseSRWLockExclusive(_Inout_ PSRWLOCK pSRWLock) function VOID (line 353) | VOID InitializeSRWLock(PSRWLOCK pSRWLock) function BOOL (line 360) | BOOL AcquireSRWLockExclusive_Try(_Inout_ PSRWLOCK pSRWLock) function VOID (line 366) | VOID AcquireSRWLockExclusive(_Inout_ PSRWLOCK pSRWLock) function AcquireSRWLockExclusive_Timeout (line 372) | _Success_(return) function VOID (line 380) | VOID ReleaseSRWLockExclusive(_Inout_ PSRWLOCK pSRWLock) function DWORD (line 399) | DWORD GetModuleFileNameA(_In_opt_ HMODULE hModule, _Out_ LPSTR lpFilenam... function DWORD (line 420) | DWORD GetModuleFileNameA(_In_opt_ HMODULE hModule, _Out_ LPSTR lpFilenam... FILE: pcileech/oscompatibility.h type QWORD (line 23) | typedef unsigned __int64 QWORD, *PQWORD; type VOID (line 61) | typedef void VOID, *PVOID, *LPVOID; type BOOL (line 63) | typedef uint32_t BOOL, *PBOOL; type BYTE (line 64) | typedef uint8_t BYTE, *PBYTE, *LPBYTE; type UCHAR (line 65) | typedef uint8_t UCHAR, *PUCHAR; type CHAR (line 66) | typedef char CHAR, *PCHAR, *PSTR, *LPSTR; type SHORT (line 68) | typedef int16_t SHORT, *PSHORT; type LONG (line 69) | typedef int32_t LONG; type LONGLONG (line 70) | typedef int64_t LONGLONG; type WORD (line 71) | typedef uint16_t WORD, *PWORD, USHORT, *PUSHORT; type WCHAR (line 72) | typedef uint16_t WCHAR, *PWCHAR, *LPWSTR; type UINT (line 74) | typedef uint32_t UINT, DWORD, *PDWORD, *LPDWO... type QWORD (line 75) | typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PU... type DWORD64 (line 76) | typedef uint64_t DWORD64, *PDWORD64, LARGE_IN... type SIZE_T (line 77) | typedef size_t SIZE_T, *PSIZE_T; type M128A (line 78) | typedef struct _M128A { ULONGLONG Low; LONGLONG High; } M128A, *PM128A; type EXCEPTION_RECORD32 (line 80) | typedef struct tdEXCEPTION_RECORD32 { CHAR sz[80]; } EXCEPTION_RECORD32; type EXCEPTION_RECORD64 (line 81) | typedef struct tdEXCEPTION_RECORD64 { CHAR sz[152]; } EXCEPTION_RECORD64; type SID (line 82) | typedef struct tdSID { BYTE pb[12]; } SID, *PSID; type DWORD (line 83) | typedef DWORD(*PTHREAD_START_ROUTINE)(PVOID); type DWORD (line 84) | typedef DWORD(*LPTHREAD_START_ROUTINE)(PVOID); type CRITICAL_SECTION (line 219) | typedef struct tdCRITICAL_SECTION { type SYSTEMTIME (line 228) | typedef struct _SYSTEMTIME { type WIN32_FIND_DATAA (line 239) | typedef struct _WIN32_FIND_DATAA { type SRWLOCK (line 277) | typedef struct tdSRWLOCK { type SRWLOCK (line 284) | typedef struct tdSRWLOCK { FILE: pcileech/pcileech.c function BOOL (line 21) | BOOL PCILeechConfigIntialize(_In_ DWORD argc, _In_ char* argv[]) function VOID (line 241) | VOID PCILeechConfigFixup() function VOID (line 260) | VOID PCILeechFreeContext() function VOID (line 277) | VOID WINAPI PCILeechCtrlHandler_TryShutdownThread(PVOID pv) function BOOL (line 289) | BOOL WINAPI PCILeechCtrlHandler(DWORD fdwCtrlType) function VOID (line 303) | VOID PCILeechCtrlHandlerInitialize() function VOID (line 310) | VOID PCILeechCtrlHandlerInitialize() function main (line 316) | int main(_In_ int argc, _In_ char* argv[]) FILE: pcileech/pcileech.h type QWORD (line 11) | typedef unsigned __int64 QWORD, *PQWORD; type WORD (line 15) | typedef uint16_t WORD, *PWORD, USHORT, *PUSHORT; type QWORD (line 16) | typedef long long unsigned int QWORD, *PQWORD, ULONG64, *PU... type SIGNATUREPTE (line 24) | typedef struct tdSignaturePTE { type PCILEECH_CONTEXT (line 30) | typedef struct tdPCILEECH_CONTEXT PCILEECH_CONTEXT, *PPCILEECH_CO... type ACTION_TYPE (line 32) | typedef enum tdActionType { type CONFIG_OPTION (line 66) | typedef struct tdCONFIG_OPTION { type CONFIG (line 71) | typedef struct tdConfig { type SIGNATURE_CHUNK (line 122) | typedef struct tdSignatureChunk { type SIGNATURE (line 130) | typedef struct tdSignature { type KMDEXEC (line 148) | typedef struct tdKmdExec { type KMDDATA (line 191) | typedef struct tdKMDDATA { type PHYSICAL_MEMORY_RANGE (line 224) | typedef struct _PHYSICAL_MEMORY_RANGE { type KMDHANDLE (line 229) | typedef struct tdKMDHANDLE { type VFS_CONTEXT (line 237) | typedef struct tdVFS_CONTEXT { type tdVMM_HANDLE (line 246) | struct tdVMM_HANDLE type tdPCILEECH_CONTEXT (line 255) | struct tdPCILEECH_CONTEXT { FILE: pcileech/shellcode.h type SHELLCODE_DEFAULT_STRUCT (line 9) | typedef struct tdSHELLCODE_DEFAULT_STRUCT { FILE: pcileech/statistics.c function VOID (line 9) | VOID _PageStatPrintMemMap(_Inout_ PPAGE_STATISTICS ps) function VOID (line 41) | VOID _PageStatShowUpdate(_Inout_ PPAGE_STATISTICS ps) function VOID (line 124) | VOID WINAPI _PageStatThreadLoop(_In_ PPAGE_STATISTICS ps) function VOID (line 136) | VOID PageStatClose(_In_opt_ PPAGE_STATISTICS *ppPageStat) function PageStatInitialize (line 154) | _Success_(return) function VOID (line 170) | VOID PageStatUpdate(_In_opt_ PPAGE_STATISTICS pPageStat, _In_ QWORD qwAd... function VOID (line 191) | VOID StatSearch_ShowUpdate(_Inout_ PSTATISTICS_SEARCH ps) function VOID (line 229) | VOID WINAPI StatSearch_ThreadLoop(_In_ PSTATISTICS_SEARCH ps) function StatSearchInitialize (line 246) | _Success_(return) function VOID (line 263) | VOID StatSearchClose(_In_opt_ PSTATISTICS_SEARCH *ppStatSearch) FILE: pcileech/statistics.h type STATISTICS_INTERNAL (line 13) | typedef struct tdSTATISTICS_INTERNAL { type PAGE_STATISTICS (line 29) | typedef struct tdPAGE_STATISTICS { type STATISTICS_SEARCH (line 44) | typedef struct tdSTATISTICS_SEARCH { FILE: pcileech/umd.c function UmdCompare32 (line 14) | int UmdCompare32(const void* a, const void* b) function VOID (line 22) | VOID Action_UmdPsList() function VOID (line 59) | VOID Action_UmdPsVirt2Phys() type UMD_EXEC_CONTEXT_LIMITED (line 89) | typedef struct tdUMD_EXEC_CONTEXT_LIMITED { function VOID (line 127) | VOID UmdWinExec() function VOID (line 273) | VOID ActionExecUserMode() FILE: pcileech/util.c function Util_PageTable_Helper (line 18) | _Success_(return) function BOOL (line 45) | BOOL Util_PageTable_ReadPTE(_In_ QWORD qwCR3, _In_ QWORD qwAddressLinear... function BOOL (line 51) | BOOL Util_PageTable_SetModeX(_In_ QWORD qwCR3, _In_ QWORD qwAddressLinear) function BOOL (line 57) | BOOL Util_PageTable_FindSignatureBase_IsPageTableDataValid(_In_ QWORD qw... function _Inout_updates_bytes_opt_ (line 75) | _Success_(return) function Util_PageTable_FindSignatureBase_Search (line 94) | _Success_(return) function Util_PageTable_Virtual2Physical (line 187) | _Success_(return) function Util_PageTable_WindowsHintPML4 (line 208) | _Success_(return) function Util_PageTable_FindSignatureBase (line 220) | _Success_(return) function Util_PageTable_FindMappedAddress (line 248) | _Success_(return) function BOOL (line 336) | BOOL Util_HexAsciiToBinary(_In_ LPSTR sz, _Out_ PBYTE pb, _In_ DWORD cb,... function DWORD (line 348) | DWORD Util_GetFileSize(_In_ LPSTR sz) function Util_ParseHexFileBuiltin (line 359) | _Success_(return) function BOOL (line 398) | BOOL Util_ParseSignatureLine(_In_ PSTR szLine, _In_ DWORD cSignatureChun... function Util_LoadSignatures (line 427) | _Success_(return) function VOID (line 464) | VOID Util_GetFileInDirectory(_Out_writes_(MAX_PATH) LPSTR szPath, _In_ L... function DWORD (line 479) | DWORD Util_memcmpEx(_In_ PBYTE pb1, _In_ PBYTE pb2, _In_ DWORD cb) function VOID (line 490) | VOID Util_GenRandom(_Out_ PBYTE pb, _In_ DWORD cb) function Util_LoadKmdExecShellcode (line 505) | _Success_(return) function QWORD (line 549) | QWORD Util_GetNumeric(_In_ LPSTR sz) function VOID (line 558) | VOID Util_CreateSignatureLinuxGeneric(_In_ QWORD paBase, function VOID (line 575) | VOID Util_CreateSignatureFreeBSDGeneric(_In_ DWORD paStrTab, _In_ DWORD ... function VOID (line 590) | VOID Util_CreateSignatureMacOSGeneric(_In_ DWORD paKernelBase, _In_ DWOR... function VOID (line 605) | VOID Util_CreateSignatureWindowsHalGeneric(_Out_ PSIGNATURE pSignature) function VOID (line 612) | VOID Util_CreateSignatureLinuxEfiRuntimeServices(_Out_ PSIGNATURE pSigna... function VOID (line 619) | VOID Util_CreateSignatureSearchAll(_In_ PBYTE pb, _In_ DWORD cb, _Out_ P... function VOID (line 628) | VOID Util_Read1M(_Out_writes_(0x00100000) PBYTE pbBuffer1M, _In_ QWORD q... function VOID (line 686) | VOID Util_WaitForPowerOn() function VOID (line 700) | VOID Util_WaitForPowerCycle() function Util_FillHexAscii (line 718) | _Success_(return) function VOID (line 776) | VOID Util_PrintHexAscii(_In_ PBYTE pb, _In_ DWORD cb, _In_ DWORD cbIniti... function VOID (line 797) | VOID Util_AsciiFilter(_In_reads_(cb) PBYTE pb, _In_ DWORD cb) function VOID (line 808) | VOID Util_SplitString2(_In_ LPSTR sz, _In_ CHAR chSplit, _Out_writes_(MA... function VOID (line 826) | VOID Util_GetPathExe(_Out_writes_(MAX_PATH) PCHAR szPath) FILE: pcileech/vfs.c type VFS_OPERATION (line 40) | typedef struct tdVFS_OPERATION { type VFS_GLOBAL_STATE (line 51) | typedef struct tdVFS_GLOBAL_STATE { function VfsInitOperation (line 71) | _Success_(return) function VOID (line 98) | VOID VfsListDirectory(_In_ LPSTR uszPath, _Inout_ PVMMDLL_VFS_FILELIST2 ... function BOOL (line 155) | BOOL VfsListU(_In_ LPSTR uszPath, _Inout_ PVMMDLL_VFS_FILELIST2 pFileList) function BOOL (line 174) | BOOL VfsIsBlackList(_In_ LPSTR uszPathFull) function NTSTATUS (line 182) | NTSTATUS VfsReadFile(_In_ LPSTR uszPathFull, _Out_writes_to_(cb, *pcbRea... function NTSTATUS (line 211) | NTSTATUS VfsReadMemory(_In_ BOOL fKMD, _Out_writes_to_(cb, *pcbRead) PBY... function NTSTATUS (line 238) | NTSTATUS VfsRead(_In_ LPSTR uszPathFull, _Out_writes_to_(cb, *pcbRead) P... function NTSTATUS (line 252) | NTSTATUS VfsWriteFile(_In_ BOOL fAppend, _In_ LPSTR uszPathFull, _In_rea... function NTSTATUS (line 278) | NTSTATUS VfsWriteMemory(_In_ BOOL fKMD, _In_reads_(cb) PBYTE pb, _In_ DW... function NTSTATUS (line 292) | NTSTATUS VfsWrite(_In_ BOOL fAppend, _In_ LPSTR uszPathFull, _In_reads_(... function VOID (line 306) | VOID VfsDelete(_In_ LPSTR uszPathFull) function NTSTATUS (line 326) | NTSTATUS function NTSTATUS (line 352) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 361) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 394) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 403) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 410) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 419) | NTSTATUS DOKAN_CALLBACK function NTSTATUS (line 428) | NTSTATUS DOKAN_CALLBACK function VOID (line 438) | VOID DOKAN_CALLBACK function VOID (line 449) | VOID ActionUnMount() function VOID (line 460) | VOID ActionMount() function vfs_getattr (line 594) | static int vfs_getattr(const char* uszPathFull, struct stat *st) type readdir_cb_ctx (line 638) | typedef struct td_readdir_cb_ctx { function vfs_readdir_cb (line 643) | static void vfs_readdir_cb(_In_ PVFS_ENTRY pVfsEntry, _In_opt_ preaddir_... function vfs_readdir (line 648) | static int vfs_readdir(const char* uszPath, void* buffer, fuse_fill_dir_... function vfs_read (line 669) | static int vfs_read(const char* uszPath, char* buffer, size_t size, off_... function vfs_truncate (line 685) | static int vfs_truncate(const char* path, off_t size) function vfs_write (line 693) | static int vfs_write(const char* uszPath, const char* buffer, size_t siz... type fuse_operations (line 709) | struct fuse_operations function vfs_initialize_and_mount_displayinfo (line 717) | void vfs_initialize_and_mount_displayinfo() function VOID (line 813) | VOID ActionUnMount() function VOID (line 818) | VOID ActionMount() FILE: pcileech/vfs.h type VFS_RESULT_FILEINFO (line 20) | typedef struct tdVFS_RESULT_FILEINFO { FILE: pcileech/vfslist.c type VFSLIST_CONTEXT (line 10) | typedef struct tdVFSLIST_CONTEXT { type VFSLIST_DIRECTORY (line 25) | typedef struct tdVFSLIST_DIRECTORY { type VFSLISTOB_DIRECTORY (line 32) | typedef struct tdVFSLISTOB_DIRECTORY { function VOID (line 42) | VOID VfsList_CallbackCleanup_ObDirectory(PVFSLISTOB_DIRECTORY pObDir) function VOID (line 54) | VOID VfsList_AddDirectoryFileInternal(_Inout_ PVFSLIST_DIRECTORY pFileLi... function VOID (line 85) | VOID VfsList_AddFile(_Inout_ HANDLE hFileList, _In_ LPCSTR uszName, _In_... function VOID (line 102) | VOID VfsList_AddDirectory(_Inout_ HANDLE hFileList, _In_ LPCSTR uszName,... function PVFSLISTOB_DIRECTORY (line 125) | PVFSLISTOB_DIRECTORY VfsList_GetDirectory(_In_ LPSTR uszPath) function BOOL (line 176) | BOOL VfsList_ListDirectory(_In_ LPSTR uszPath, _In_opt_ PVOID ctx, _In_o... function VfsList_GetSingle (line 203) | _Success_(return) function VOID (line 232) | VOID VfsList_Clear(_In_ LPSTR uszPath) function VfsList_EntryUtoW (line 242) | _Success_(return) function VfsList_GetSingleW (line 263) | _Success_(return) function BOOL (line 282) | BOOL VfsList_ListDirectoryW(_In_ LPWSTR wszPath, _In_opt_ PVOID ctx, _In... function BOOL (line 316) | BOOL VfsList_ValidEntry(_In_opt_ VMM_HANDLE H, _Inout_ PQWORD qwContext,... function VfsList_Close (line 326) | void VfsList_Close() function VfsList_Initialize (line 343) | _Success_(return) FILE: pcileech/vfslist.h type QWORD (line 11) | typedef unsigned __int64 QWORD, *PQWORD; type VFS_ENTRY (line 17) | typedef struct tdVFS_ENTRY { type BOOL (line 84) | typedef BOOL(*VFS_LIST_U_PFN)(_In_ LPSTR uszPath, _Inout_ PVMMDLL_VFS_F... FILE: pcileech/vmmx.c function VOID (line 14) | VOID Vmmx_Close() function Vmmx_Initialize (line 29) | _Success_(return) FILE: pcileech_shellcode/fbsdx64_common.h type VOID (line 12) | typedef void VOID, *PVOID; type BOOL (line 13) | typedef int BOOL, *PBOOL; type BYTE (line 14) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 15) | typedef char CHAR, *PCHAR; type WORD (line 16) | typedef unsigned short WORD, *PWORD; type DWORD (line 17) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 18) | typedef unsigned __int64 QWORD, *PQWORD; type STATUS (line 20) | typedef unsigned long STATUS; type KMDDATA (line 32) | typedef struct tdKMDDATA { FILE: pcileech_shellcode/fbsdx64_filepull.c type uio_seg (line 25) | enum uio_seg { type uio_rw (line 31) | enum uio_rw { type vattr (line 36) | struct vattr { type vop_getattr_args (line 42) | struct vop_getattr_args { type vop_unlock_args (line 49) | struct vop_unlock_args { type nameidata (line 55) | struct nameidata { type FN2 (line 61) | typedef struct tdFN2 { function BOOL (line 74) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function QWORD (line 93) | QWORD GetFileSize(PFN2 pfn2, QWORD vnode) function VOID (line 107) | VOID VOP_UNLOCK(PFN2 pfn2, QWORD vnode, QWORD flags) function VOID (line 116) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/fbsdx64_stage3_c.c type VOID (line 8) | typedef void VOID, *PVOID; type BOOL (line 9) | typedef int BOOL, *PBOOL; type BYTE (line 10) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 11) | typedef char CHAR, *PCHAR; type WORD (line 12) | typedef unsigned short WORD, *PWORD; type DWORD (line 13) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 14) | typedef unsigned __int64 QWORD, *PQWORD; type tdvm_page_t (line 26) | struct tdvm_page_t { type PHYSICAL_MEMORY_RANGE (line 31) | typedef struct tdPHYSICAL_MEMORY_RANGE { type PHYSICAL_MEMORY_RANGE_BSD (line 36) | typedef struct tdPHYSICAL_MEMORY_RANGE_BSD { type FNBSD (line 41) | typedef struct tdFNBSD { // function pointers to BSD functions and structs type KMDDATA (line 60) | typedef struct tdKMDDATA { function BOOL (line 117) | BOOL SetMemoryRanges(PKMDDATA pk) function VOID (line 147) | VOID stage3_c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_common.c function BOOL (line 9) | BOOL _WriteLargeOutput_WaitForAck(PKMDDATA pk) function BOOL (line 19) | BOOL WriteLargeOutput_WaitNext(PKMDDATA pk) function VOID (line 29) | VOID WriteLargeOutput_Finish(PKMDDATA pk) FILE: pcileech_shellcode/lx64_common.h type VOID (line 12) | typedef void VOID, *PVOID; type BOOL (line 13) | typedef int BOOL, *PBOOL; type BYTE (line 14) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 15) | typedef char CHAR, *PCHAR; type WCHAR (line 16) | typedef unsigned short WCHAR, *PWCHAR; type WORD (line 17) | typedef unsigned short WORD, *PWORD; type DWORD (line 18) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 19) | typedef unsigned __int64 QWORD, *PQWORD; type STATUS (line 21) | typedef unsigned long STATUS; type FNLX (line 37) | typedef struct tdFNLX { // VOID definitions for LINUX functions (used in... type KMDDATA (line 66) | typedef struct tdKMDDATA { type EXEC_IO (line 106) | typedef struct tdEXEC_IO { FILE: pcileech_shellcode/lx64_exec_root.c type FN2 (line 12) | typedef struct tdFN2 { function BOOL (line 17) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 24) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_filedelete.c type FN2 (line 16) | typedef struct tdFN2 { type FN3 (line 21) | typedef struct tdFN3 { function BOOL (line 28) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function BOOL (line 37) | BOOL LookupFunctions3(PKMDDATA pk, PFN3 pfn3) function VOID (line 53) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_filepull.c type FN2 (line 19) | typedef struct tdFN2 { function BOOL (line 27) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 42) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_filepush.c type FN2 (line 21) | typedef struct tdFN2 { function BOOL (line 29) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 44) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_stage3_c.c type VOID (line 8) | typedef void VOID, *PVOID; type BOOL (line 9) | typedef int BOOL, *PBOOL; type BYTE (line 10) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 11) | typedef char CHAR, *PCHAR; type WORD (line 12) | typedef unsigned short WORD, *PWORD; type DWORD (line 13) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 14) | typedef unsigned __int64 QWORD, *PQWORD; type PHYSICAL_MEMORY_RANGE (line 30) | typedef struct _PHYSICAL_MEMORY_RANGE { type TIMEVAL (line 35) | typedef struct _TIMEVAL { type FNLX (line 40) | typedef struct tdFNLX { // VOID definitions for LINUX functions (used in... type KMDDATA (line 79) | typedef struct tdKMDDATA { function BOOL (line 132) | BOOL LookupFunctionsEx(PKMDDATA pk) function VOID (line 154) | VOID FreePageBuffer(PKMDDATA pk, QWORD pg, QWORD order) function VOID (line 185) | VOID FreeDmaLargeBuffer(PKMDDATA pk) function QWORD (line 200) | QWORD AllocateDmaLargeBuffer(PKMDDATA pk) function VOID (line 227) | VOID FreePageLargeBuffer(PKMDDATA pk) function QWORD (line 239) | QWORD AllocatePageLargeBuffer(PKMDDATA pk) function VOID (line 264) | VOID FreeLargeBuffer(PKMDDATA pk) function QWORD (line 275) | QWORD AllocateLargeBuffer(PKMDDATA pk) function VOID (line 290) | VOID TryMigrate_FreeOriginalBuffer(PKMDDATA pk) function QWORD (line 307) | QWORD TryMigrate_AllocateMemoryDmaSmall(PKMDDATA pk, QWORD *paDMA) function QWORD (line 328) | QWORD stage3_c_TryMigrateEntryPoint(PKMDDATA pk) function VOID (line 384) | VOID stage3_c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/lx64_vfs.c type VFS_OPERATION (line 36) | typedef struct tdVFS_OPERATION { type VFS_RESULT_FILEINFO (line 47) | typedef struct tdVFS_RESULT_FILEINFO { type timespec (line 85) | struct timespec { type kstat_4_10 (line 91) | struct kstat_4_10 { type kstat_4_11 (line 109) | struct kstat_4_11 { type FN2 (line 134) | typedef struct tdFN2 { type DIR_CONTEXT (line 159) | typedef struct tdDIR_CONTEXT { type DIR_CONTEXT_EXTENDED (line 164) | typedef struct tdDIR_CONTEXT_EXTENDED { function BOOL (line 172) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VfsList_CallbackIterateDir (line 205) | static int VfsList_CallbackIterateDir(PDIR_CONTEXT_EXTENDED ctx, const c... function QWORD (line 242) | QWORD UnixToWindowsFiletime(QWORD tv) { function VOID (line 249) | VOID VfsList_SetSizeTime(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 307) | STATUS VfsList(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 334) | STATUS VfsDelete(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 350) | STATUS VfsRead(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 362) | STATUS VfsWrite(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 378) | STATUS VfsCreate(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function VOID (line 390) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_common.c type PE_state_t (line 14) | typedef struct PE_state { type EFI_MEMORY_RANGE (line 39) | typedef struct tdEFI_MEMORY_RANGE { type BOOT_ARGS (line 50) | typedef struct tdBOOT_ARGS { function BOOL (line 64) | BOOL GetMemoryMap(PKMDDATA pk, PBYTE pbBuffer4k_PhysicalMemoryRange, PQW... function QWORD (line 89) | QWORD MapMemoryPhysical(PKMDDATA pk, QWORD qwMemoryBase) function BOOL (line 98) | BOOL IsRangeInPhysicalMap(PBYTE pbMemoryRanges, QWORD cbMemoryRanges, QW... function QWORD (line 110) | QWORD GetMemoryPhysicalMaxAddress(PBYTE pbMemoryRanges, QWORD cbMemoryRa... function BOOL (line 118) | BOOL _WriteLargeOutput_WaitForAck(PKMDDATA pk) function BOOL (line 128) | BOOL WriteLargeOutput_WaitNext(PKMDDATA pk) function VOID (line 138) | VOID WriteLargeOutput_Finish(PKMDDATA pk) FILE: pcileech_shellcode/macos_common.h type VOID (line 12) | typedef void VOID, *PVOID; type BOOL (line 13) | typedef int BOOL, *PBOOL; type BYTE (line 14) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 15) | typedef char CHAR, *PCHAR; type WCHAR (line 16) | typedef unsigned short WCHAR, *PWCHAR; type WORD (line 17) | typedef unsigned short WORD, *PWORD; type DWORD (line 18) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 19) | typedef unsigned __int64 QWORD, *PQWORD; type STATUS (line 27) | typedef unsigned long STATUS; type PHYSICAL_MEMORY_RANGE (line 42) | typedef struct tdPHYSICAL_MEMORY_RANGE { type FNMACOS (line 47) | typedef struct tdFNMACOS { // function pointers to macOS functions (used... type KMDDATA (line 68) | typedef struct tdKMDDATA { type EXEC_IO (line 105) | typedef struct tdEXEC_IO { FILE: pcileech_shellcode/macos_filedelete.c type FN2 (line 19) | typedef struct tdFN2 { type COMPONENTNAME (line 35) | typedef struct componentname { function BOOL (line 64) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 99) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_filepull.c type FN2 (line 17) | typedef struct tdFN2 { function BOOL (line 28) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 45) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_filepush.c type FN2 (line 17) | typedef struct tdFN2 { function BOOL (line 27) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function VOID (line 43) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_stage3_c.c type VOID (line 8) | typedef void VOID, *PVOID; type BOOL (line 9) | typedef int BOOL, *PBOOL; type BYTE (line 10) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 11) | typedef char CHAR, *PCHAR; type WORD (line 12) | typedef unsigned short WORD, *PWORD; type DWORD (line 13) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 14) | typedef unsigned __int64 QWORD, *PQWORD; type PE_state_t (line 24) | typedef struct PE_state { type EFI_MEMORY_RANGE (line 49) | typedef struct tdEFI_MEMORY_RANGE { type BOOT_ARGS (line 60) | typedef struct tdBOOT_ARGS { type PHYSICAL_MEMORY_RANGE (line 83) | typedef struct tdPHYSICAL_MEMORY_RANGE { type FNMACOS (line 88) | typedef struct tdFNMACOS { // function pointers to macOS functions (used... type KMDDATA (line 111) | typedef struct tdKMDDATA { function BOOL (line 160) | BOOL GetMemoryMap(PKMDDATA pk, PBYTE pbBuffer4k_PhysicalMemoryRange, PQW... function VOID (line 198) | VOID stage3_c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_unlock.c type SIGNATURE_CHUNK (line 16) | typedef struct tdSignatureChunk { type SIGNATURE (line 22) | typedef struct tdSignature { function BOOL (line 32) | BOOL Unlock_FindAndPatch(PKMDDATA pk, PBYTE pbPage, PSIGNATURE pSignatur... function STATUS (line 52) | STATUS Unlock(PKMDDATA pk) function VOID (line 101) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/macos_vfs.c type VFS_OPERATION (line 36) | typedef struct tdVFS_OPERATION { type VFS_RESULT_FILEINFO (line 47) | typedef struct tdVFS_RESULT_FILEINFO { type attrlist (line 88) | struct attrlist { type attribute_set_t (line 98) | typedef struct attribute_set { type attrreference_t (line 107) | typedef struct attrreference { type timespec (line 112) | struct timespec { type vtype (line 117) | enum vtype { type vnode_attr (line 133) | struct vnode_attr { type FN2 (line 144) | typedef struct tdFN2 { function BOOL (line 160) | BOOL LookupFunctions2(PKMDDATA pk, PFN2 pfn2) { function QWORD (line 182) | QWORD UnixToWindowsFiletime(QWORD tv) { function STATUS (line 189) | STATUS VfsList(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 302) | STATUS VfsDelete(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 310) | STATUS VfsRead(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 336) | STATUS VfsWrite(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function STATUS (line 367) | STATUS VfsCreate(PKMDDATA pk, PFN2 pfn2, PVFS_OPERATION pop) function VOID (line 382) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/uefi_common.h type VOID (line 14) | typedef void VOID, *PVOID; type BOOL (line 15) | typedef int BOOL, *PBOOL; type BYTE (line 16) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 17) | typedef char CHAR, *PCHAR, *LPSTR; type WCHAR (line 18) | typedef unsigned short WCHAR, *PWCHAR; type WORD (line 19) | typedef unsigned short WORD, *PWORD; type DWORD (line 20) | typedef unsigned long DWORD, *PDWORD, LONG; type __int64 (line 21) | typedef __int64 LONGLONG; type QWORD (line 22) | typedef unsigned __int64 QWORD, *PQWORD, ULONGLONG; type STATUS (line 24) | typedef unsigned long STATUS; type KMDDATA (line 40) | typedef struct tdKMDDATA { type EFI_GUID (line 77) | typedef struct _EFI_GUID { type EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL (line 144) | typedef struct _EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL { type SIMPLE_TEXT_OUTPUT_MODE (line 153) | typedef struct { type EFI_SIMPLE_TEXT_OUTPUT_PROTOCOL (line 163) | typedef struct _EFI_SIMPLE_TEXT_OUTPUT_PROTOCOL { type IMAGE_DOS_HEADER (line 186) | typedef struct _IMAGE_DOS_HEADER { type IMAGE_EXPORT_DIRECTORY (line 208) | typedef struct _IMAGE_EXPORT_DIRECTORY { type IMAGE_FILE_HEADER (line 222) | typedef struct _IMAGE_FILE_HEADER { type IMAGE_DATA_DIRECTORY (line 232) | typedef struct _IMAGE_DATA_DIRECTORY { type IMAGE_OPTIONAL_HEADER64 (line 237) | typedef struct _IMAGE_OPTIONAL_HEADER64 { type IMAGE_NT_HEADERS64 (line 270) | typedef struct _IMAGE_NT_HEADERS64 { type IMAGE_SECTION_HEADER (line 278) | typedef struct _IMAGE_SECTION_HEADER { FILE: pcileech_shellcode/uefi_kmd_c.c type VOID (line 8) | typedef void VOID, *PVOID; type BOOL (line 9) | typedef int BOOL, *PBOOL; type BYTE (line 10) | typedef unsigned char BYTE, *PBYTE; type CHAR (line 11) | typedef char CHAR, *PCHAR; type WORD (line 12) | typedef unsigned short WORD, *PWORD; type DWORD (line 13) | typedef unsigned long DWORD, *PDWORD; type QWORD (line 14) | typedef unsigned __int64 QWORD, *PQWORD; type EFI_MEMORY_DESCRIPTOR (line 43) | typedef struct tdEFI_MEMORY_DESCRIPTOR { type PHYSICAL_MEMORY_RANGE (line 93) | typedef struct tdPHYSICAL_MEMORY_RANGE { type KMDDATA (line 106) | typedef struct tdKMDDATA { function BOOL (line 155) | BOOL GetMemoryMapFromEfi(PKMDDATA pk) function VOID (line 226) | VOID c_EntryPoint(PKMDDATA pk, QWORD paUEFI_IBI_SYST) FILE: pcileech_shellcode/uefi_textout.c function VOID (line 14) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/uefi_winload_ntos_kmd_c.c type QWORD (line 16) | typedef unsigned __int64 QWORD, *PQWORD; type __int64 (line 17) | typedef __int64 PHYSICAL_ADDRESS, *PPHYSICAL_ADDRESS; type CLIENT_ID (line 21) | typedef struct _CLIENT_ID { type CLIENT_ID (line 25) | typedef CLIENT_ID *PCLIENT_ID; type _IRQL_requires_same_ (line 27) | typedef _IRQL_requires_same_ _Function_class_(KSTART_ROUTINE) type KSTART_ROUTINE (line 30) | typedef KSTART_ROUTINE *PKSTART_ROUTINE; type UNICODE_STRING (line 32) | typedef struct _UNICODE_STRING { type UNICODE_STRING (line 37) | typedef UNICODE_STRING *PUNICODE_STRING; type OBJECT_ATTRIBUTES (line 39) | typedef struct _OBJECT_ATTRIBUTES { type OBJECT_ATTRIBUTES (line 47) | typedef OBJECT_ATTRIBUTES *POBJECT_ATTRIBUTES; type CONST (line 48) | typedef CONST OBJECT_ATTRIBUTES type MEMORY_CACHING_TYPE (line 50) | typedef enum _MEMORY_CACHING_TYPE { type PHYSICAL_MEMORY_RANGE (line 60) | typedef struct _PHYSICAL_MEMORY_RANGE { type MODE (line 65) | typedef enum _MODE { type NTOS (line 91) | typedef struct tdNTOS { type KMDDATA (line 155) | typedef struct tdKMDDATA { function DWORD (line 190) | DWORD HashROR13A(_In_ LPCSTR sz) function QWORD (line 207) | QWORD PEGetProcAddressH(_In_ QWORD hModule, _In_ DWORD dwProcNameH) function VOID (line 255) | VOID stage3_c_MainCommandLoop(PKMDDATA pk) function VOID (line 357) | VOID c_EntryPoint_Thread(QWORD qwAddrNtosBase, QWORD qwAddrKmdBase) function VOID (line 406) | VOID c_EntryPoint(QWORD qwAddrNtosBase, QWORD qwAddrKmdBase, QWORD qwCR3) FILE: pcileech_shellcode/uefi_winload_ntos_patch.c function DWORD (line 29) | DWORD HashROR13A(LPSTR sz) function QWORD (line 46) | QWORD PEGetProcAddressH(QWORD hModule, DWORD dwProcNameH) function BOOL (line 73) | BOOL PEGetSection(QWORD hModule, QWORD qwSzSection, PDWORD pdwSectionBas... function QWORD (line 102) | QWORD FindNtoskrnl() function QWORD (line 135) | QWORD FindCodeCave(QWORD hModule, QWORD qwSize) function VOID (line 167) | VOID GetData_KMD(PBYTE *ppb, PDWORD pcb) function VOID (line 303) | VOID GetData_VFS(PBYTE *ppb, PDWORD pcb) function VOID (line 520) | VOID GetData_PSCMD_KERNEL(PBYTE *ppb, PDWORD pcb) function VOID (line 739) | VOID GetData_PSCMD_USER(PBYTE *ppb, PDWORD pcb) function VOID (line 868) | VOID c_EntryPoint(PKMDDATA pk) FILE: pcileech_shellcode/wx64_common.c function DWORD (line 10) | DWORD HashROR13A(_In_ LPCSTR sz) function QWORD (line 21) | QWORD PEGetProcAddressH(_In_ QWORD hModule, _In_ DWORD dwProcNameH) function QWORD (line 49) | QWORD KernelGetModuleBase(_In_ PKERNEL_FUNCTIONS fnk, _In_ LPSTR szModul... function VOID (line 71) | VOID InitializeKernelFunctions(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUNC... function DWORD (line 105) | DWORD PEGetImageSize(_In_ QWORD hModule) function VOID (line 114) | VOID CommonSleep(_In_ PKERNEL_FUNCTIONS fnk, _In_ DWORD ms) function BOOL (line 120) | BOOL _WriteLargeOutput_WaitForAck(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKMDD... function BOOL (line 130) | BOOL WriteLargeOutput_WaitNext(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKMDDATA... function VOID (line 140) | VOID WriteLargeOutput_Finish(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_common.h type QWORD (line 14) | typedef unsigned __int64 QWORD, *PQWORD; type UCHAR (line 15) | typedef UCHAR KIRQL; type KIRQL (line 16) | typedef KIRQL *PKIRQL; type _EPROCESS (line 17) | struct _EPROCESS type _ETHREAD (line 18) | struct _ETHREAD type KMDDATA (line 34) | typedef struct tdKMDDATA { type EXEC_IO (line 71) | typedef struct tdEXEC_IO { type SYSTEM_MODULE_INFORMATION_ENTRY (line 89) | typedef struct _SYSTEM_MODULE_INFORMATION_ENTRY { type SYSTEM_MODULE_INFORMATION (line 104) | typedef struct _SYSTEM_MODULE_INFORMATION { type UNICODE_STRING (line 110) | typedef struct _UNICODE_STRING { type ANSI_STRING (line 116) | typedef struct _ANSI_STRING { type IO_STATUS_BLOCK (line 122) | typedef struct _IO_STATUS_BLOCK { type OBJECT_ATTRIBUTES (line 130) | typedef struct _OBJECT_ATTRIBUTES { type OBJECT_ATTRIBUTES (line 138) | typedef OBJECT_ATTRIBUTES *POBJECT_ATTRIBUTES; type SYSTEM_INFORMATION_CLASS (line 149) | typedef enum _SYSTEM_INFORMATION_CLASS { type CCHAR (line 154) | typedef CCHAR KPROCESSOR_MODE; type MODE (line 156) | typedef enum _MODE { type MEMORY_CACHING_TYPE (line 162) | typedef enum _MEMORY_CACHING_TYPE { type KERNEL_FUNCTIONS (line 174) | typedef struct tdKERNEL_FUNCTIONS { FILE: pcileech_shellcode/wx64_driverinfo.c function VOID (line 15) | VOID ActionDefault(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk) function VOID (line 48) | VOID ActionDetails(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk) function VOID (line 79) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_driverload_svc.c type KERNEL_FUNCTIONS2 (line 21) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 48) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... function NTSTATUS (line 67) | NTSTATUS DriverRegGetImagePath(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS ... function LPWSTR (line 96) | LPWSTR DriverRegGetImageNameFromPath(LPWSTR wszSrc) function VOID (line 111) | VOID DriverRegSetServiceKeys(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fn... function NTSTATUS (line 134) | NTSTATUS DriverRegCreateService(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS... function QWORD (line 166) | QWORD GetAddr_g_CiEnabled(QWORD qwAddrModuleCi) function NTSTATUS (line 196) | NTSTATUS DriverLoadByServiceName(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTION... function NTSTATUS (line 212) | NTSTATUS DriverLoadByImagePath(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS ... function VOID (line 229) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_driverunload.c function VOID (line 17) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_exec_user_c.c type QWORD (line 31) | typedef unsigned __int64 QWORD, *PQWORD; type USERSHELL_BUFFER_IO (line 36) | typedef struct tUSERSHELLBUFFERIO { type USERSHELL_CONFIG (line 44) | typedef struct tdUserShellConfig { type USERSHELL_FUNCTIONS (line 60) | typedef struct tdUserShellFunctions { type USERSHELL_DATA (line 117) | typedef struct tdUserShellData { function DWORD (line 131) | DWORD HashROR13A(_In_ LPCSTR sz) function PVOID (line 142) | PVOID PEGetProcAddressH(_In_ HMODULE hModuleIn, _In_ DWORD dwProcNameH) function VOID (line 166) | VOID UserShellInitializeFunctions(_In_ HMODULE hModuleKernel32, _Out_ PU... function BOOL (line 184) | BOOL UserShellIsProcessRunning(PUSERSHELL_DATA pd) function VOID (line 190) | VOID UserShellCleanup(PUSERSHELL_DATA pd) function BOOL (line 207) | BOOL UserShellExec(_Inout_ PUSERSHELL_DATA pd) function VOID (line 231) | VOID UserShellThreadWriter(PUSERSHELL_DATA pd) function VOID (line 257) | VOID UserShellThreadReader(PUSERSHELL_DATA pd) function VOID (line 280) | VOID c_EntryPoint(PBYTE pb, ULONG_PTR lpBaseKernel32) FILE: pcileech_shellcode/wx64_filepull.c function VOID (line 22) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_filepush.c function VOID (line 21) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_pagesignature.c type SIGNATUREPTE (line 14) | typedef struct tdSignaturePTE { type DRIVER_EXTENSION (line 22) | typedef struct _DRIVER_EXTENSION { type DRIVER_OBJECT (line 29) | typedef struct _DRIVER_OBJECT { type KERNEL_FUNCTIONS2 (line 53) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 66) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... function QWORD (line 76) | QWORD GetPTE(_In_ PKERNEL_FUNCTIONS fnk, _In_ QWORD qwVA, _Out_opt_ QWOR... function VOID (line 116) | VOID PageTable_CreateSignature(_In_ PKERNEL_FUNCTIONS fnk, _In_ QWORD qw... function PVOID (line 143) | PVOID PageTable_GetAddrMajorFunction(_Inout_ PKMDDATA pk, _In_ PKERNEL_F... function VOID (line 157) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_pscreate.c type LOCK_OPERATION (line 29) | typedef enum _LOCK_OPERATION { type MM_PAGE_PRIORITY (line 35) | typedef enum _MM_PAGE_PRIORITY { type MEMORY_CACHING_TYPE_ORIG (line 41) | typedef enum _MEMORY_CACHING_TYPE_ORIG { type KAPC_ENVIRONMENT (line 45) | typedef enum _KAPC_ENVIRONMENT { type KAPC_STATE (line 52) | typedef struct _KAPC_STATE { type KAPC (line 66) | typedef struct _KAPC { type CLIENT_ID (line 83) | typedef struct _CLIENT_ID { type CLIENT_ID (line 87) | typedef CLIENT_ID *PCLIENT_ID; type SYSTEM_THREAD_INFORMATION (line 89) | typedef struct SYSTEM_THREAD_INFORMATION { type SYSTEM_PROCESS_INFORMATION (line 103) | typedef struct _SYSTEM_PROCESS_INFORMATION { type USERSHELL_CONFIG (line 119) | typedef struct tdUserShellConfig { type KERNEL_FUNCTIONS2 (line 127) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 225) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... function VOID (line 255) | VOID GetUserExecShellcode(_In_ PKMDDATA pk, _Out_ PBYTE *ppb, _Out_ PDWO... function VOID (line 382) | VOID GetUserExecShellcode(_In_ PKMDDATA pk, _Out_ PBYTE *ppb, _Out_ PDWO... function NTSTATUS (line 393) | NTSTATUS IntializeUserModeCode(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS ... function QWORD (line 424) | QWORD SetupConsoleBufferUserMode(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTION... function VOID (line 464) | VOID KernelApcRoutine(_In_ struct _KAPC *Apc, _Inout_ PVOID *NormalRouti... function VOID (line 483) | VOID ActionWaitForExit(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk) function PKAPC_STATE (line 504) | PKAPC_STATE GetKApcState(_In_ PEPROCESS pEProcess, _In_ PETHREAD pEThread) function BOOLEAN (line 518) | BOOLEAN GetKApcIsAlertable(_In_ PEPROCESS pEProcess, _In_ PETHREAD pEThr... function PETHREAD (line 528) | PETHREAD GetPEThread(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKERNEL_FUNCTIONS2... function VOID (line 579) | VOID ActionDefault_QueueApcState(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTION... function VOID (line 642) | VOID ActionDefault(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PK... function NTSTATUS (line 721) | NTSTATUS GetProcessNameFromPid(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKERNEL_... function NTSTATUS (line 735) | NTSTATUS GetPidFromPsName(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKERNEL_FUNCT... function VOID (line 774) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_pskill.c type CLIENT_ID (line 15) | typedef struct _CLIENT_ID { type CLIENT_ID (line 19) | typedef CLIENT_ID *PCLIENT_ID; type KERNEL_FUNCTIONS2 (line 27) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 43) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... function VOID (line 57) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_pslist.c type KERNEL_FUNCTIONS2 (line 15) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 29) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... type SYSTEM_PROCESS_INFORMATION (line 41) | typedef struct _SYSTEM_PROCESS_INFORMATION { function NTSTATUS (line 56) | NTSTATUS GetProcessNameFromPid(_In_ PKERNEL_FUNCTIONS fnk, _In_ PKERNEL_... function NTSTATUS (line 70) | NTSTATUS ActionDefault(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In... function VOID (line 121) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_stage3_c.c type QWORD (line 9) | typedef unsigned __int64 QWORD, *PQWORD; type __int64 (line 10) | typedef __int64 PHYSICAL_ADDRESS, *PPHYSICAL_ADDRESS; type CLIENT_ID (line 14) | typedef struct _CLIENT_ID { type CLIENT_ID (line 18) | typedef CLIENT_ID *PCLIENT_ID; type _IRQL_requires_same_ (line 20) | typedef _IRQL_requires_same_ _Function_class_(KSTART_ROUTINE) type KSTART_ROUTINE (line 23) | typedef KSTART_ROUTINE *PKSTART_ROUTINE; type UNICODE_STRING (line 25) | typedef struct _UNICODE_STRING { type UNICODE_STRING (line 30) | typedef UNICODE_STRING *PUNICODE_STRING; type OBJECT_ATTRIBUTES (line 32) | typedef struct _OBJECT_ATTRIBUTES { type OBJECT_ATTRIBUTES (line 40) | typedef OBJECT_ATTRIBUTES *POBJECT_ATTRIBUTES; type CONST (line 41) | typedef CONST OBJECT_ATTRIBUTES type MEMORY_CACHING_TYPE (line 43) | typedef enum _MEMORY_CACHING_TYPE { type PHYSICAL_MEMORY_RANGE (line 53) | typedef struct _PHYSICAL_MEMORY_RANGE { type MODE (line 58) | typedef enum _MODE { type NTOS (line 82) | typedef struct tdNTOS { type KMDDATA (line 145) | typedef struct tdKMDDATA { function DWORD (line 182) | DWORD HashROR13A(_In_ LPCSTR sz) function QWORD (line 199) | QWORD PEGetProcAddressH(_In_ QWORD hModule, _In_ DWORD dwProcNameH) function VOID (line 226) | VOID stage3_c_EntryPoint(PKMDDATA pk) function VOID (line 275) | VOID stage3_c_MainCommandLoop(PKMDDATA pk) FILE: pcileech_shellcode/wx64_umd_exec_c.c type QWORD (line 19) | typedef unsigned __int64 QWORD, *PQWORD; type USERSHELL_BUFFER_IO (line 54) | typedef struct tUSERSHELLBUFFERIO { type UMD_EXEC_CONTEXT_HANDLES (line 62) | typedef struct tdUMD_EXEC_CONTEXT_HANDLES { type UMD_EXEC_CONTEXT_FULL (line 69) | typedef struct tdUMD_EXEC_CONTEXT_FULL { function BOOL (line 142) | BOOL UserShellIsProcessRunning(PUMD_EXEC_CONTEXT_FULL ctx) function VOID (line 148) | VOID UserShellCleanup(PUMD_EXEC_CONTEXT_FULL ctx) function BOOL (line 165) | inline BOOL UserShellExec(PUMD_EXEC_CONTEXT_FULL ctx) function VOID (line 190) | VOID UserShellThreadWriter(PUMD_EXEC_CONTEXT_FULL ctx) function VOID (line 215) | VOID UserShellThreadReader(PUMD_EXEC_CONTEXT_FULL ctx) function VOID (line 238) | VOID c_EntryPoint(PUMD_EXEC_CONTEXT_FULL ctx) FILE: pcileech_shellcode/wx64_unlock.c type __int64 (line 22) | typedef __int64 PHYSICAL_ADDRESS, *PPHYSICAL_ADDRESS; type PHYSICAL_MEMORY_RANGE (line 24) | typedef struct _PHYSICAL_MEMORY_RANGE { type IDT_DESCRIPTOR (line 30) | typedef struct _IDT_DESCRIPTOR { type IDTR (line 36) | typedef struct _IDTR { type KERNEL_FUNCTIONS2 (line 46) | typedef struct tdKERNEL_FUNCTIONS2 { function VOID (line 76) | VOID InitializeKernelFunctions2(_In_ QWORD qwNtosBase, _Out_ PKERNEL_FUN... type SIGNATURE_CHUNK (line 94) | typedef struct tdSignatureChunk { type SIGNATURE (line 100) | typedef struct tdSignature { function NTSTATUS (line 110) | NTSTATUS Unlock_FindAndPatch(_In_ PKERNEL_FUNCTIONS2 fnk2, _Inout_ PBYTE... function NTSTATUS (line 133) | NTSTATUS Unlock(_In_ QWORD qwAddrNtosBase) function VOID (line 412) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: pcileech_shellcode/wx64_vfs.c type VFS_OPERATION (line 35) | typedef struct tdVFS_OPERATION { type VFS_RESULT_FILEINFO (line 46) | typedef struct tdVFS_RESULT_FILEINFO { type FILE_BOTH_DIR_INFORMATION (line 61) | typedef struct _FILE_BOTH_DIR_INFORMATION { function NTSTATUS (line 89) | NTSTATUS VfsWrite(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PVF... function NTSTATUS (line 113) | NTSTATUS VfsRead(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PVFS... function NTSTATUS (line 134) | NTSTATUS VfsList(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PVFS... function NTSTATUS (line 181) | NTSTATUS VfsCreate(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PV... function NTSTATUS (line 198) | NTSTATUS VfsDelete(_In_ PKMDDATA pk, _In_ PKERNEL_FUNCTIONS fnk, _In_ PV... function VOID (line 215) | VOID c_EntryPoint(_In_ PKMDDATA pk) FILE: usb3380_flash/linux/pcileech_flash.c function _action_flash_verify (line 52) | static int _action_flash_verify(unsigned char *pbar0) function _action_flash_write (line 69) | static void _action_flash_write(unsigned char *pbar0) function _action_flash_writeverify (line 91) | static int _action_flash_writeverify(unsigned char *pbar0) function _action_flash_2 (line 124) | static int _action_flash_2(struct pci_dev *pdev) function _action_flash_1 (line 170) | static int _action_flash_1(void) { function pcileech_flash_init (line 192) | static int pcileech_flash_init(void) { function pcileech_flash_exit (line 197) | static void pcileech_flash_exit(void) { FILE: usb3380_flash/windows/USB3380Flash/USB3380Flash.c function _action_flash_verify (line 26) | static int _action_flash_verify(unsigned char *pbar0) function _action_flash_write (line 43) | static void _action_flash_write(unsigned char *pbar0) function _action_flash_writeverify (line 65) | static int _action_flash_writeverify(unsigned char *pbar0) function NTSTATUS (line 98) | NTSTATUS _EvtDevicePrepareHardware(_In_ WDFDEVICE Device, _In_ WDFCMRESL... function NTSTATUS (line 135) | NTSTATUS _EvtDeviceAdd(_In_ WDFDRIVER Driver, _Inout_ PWDFDEVICE_INIT De... function NTSTATUS (line 146) | NTSTATUS _EvtDeviceAdd_FlashDisable(_In_ WDFDRIVER Driver, _Inout_ PWDFD... function NTSTATUS (line 153) | NTSTATUS DriverEntry(_In_ PDRIVER_OBJECT DriverObject, _In_ PUNICODE_ST... FILE: usb3380_flash/windows/USB3380Flash_Installer/installer.c function BOOL (line 86) | BOOL InsertCertificate(_In_ PCCERT_CONTEXT pCert) function BOOL (line 97) | BOOL DeleteCertificate(_In_ PCCERT_CONTEXT pCert) function BOOL (line 115) | BOOL RegistrySetDisableDriver(BOOL isDisable) { function main (line 126) | int main(_In_ int argc, _In_ char* argv[])