Module faithe::internal

APIs for internal interation with current process.

Structs

LdrDataTableEntry

ModuleInfo

Basic information about process’s module.

Peb

Process Environmental Block.

PebLdrData

Teb

Thread Environmental Block.

Functions

alloc_console

Allocates console windows ig.

allocate

Tries to allocate memory pages in the target process. On success returns the address of allocated region.

create_thread

Creates new thread with default parameters.

find_pattern

Searches module for specific memory pattern.

follow_pointer_path^⚠

Resolves multilevel pointer.

free

Tries to free memory pages in the target process.

free_console

Frees console.

get_current_module

get_current_process

Returns a handle to the current process.

get_current_process_id

Returns the id of the current process.

get_module_address

Returns an address(its handle) of the module or Err if failed to find the specified module.

get_module_information

Returns information about the specified module.

get_peb

Returns an address of PEB(Process Environmental Block).

get_teb

Returns an address of TEB(Thread Environmental Block).

load_library

Either loads library from path or returns an address of already existing module.

message_box

Creates new message box.

protect

Changes the protection of memory pages of the target process. For more info see microsoft documentation.

protection_guard

Protects memory of given size with new protection, calls callback and then restores previous protection.

query

Queries basic information about memory region at address.

read_string^⚠

Reads zero terminated string at ptr.

read_string_unchecked^⚠

Reads zero terminated string at ptr.

read_wide_string^⚠

Reads zero terminated string at ptr.

read_wide_string_unchecked^⚠

Reads zero terminated string at ptr.