Method |
Description |
|
CommandLineToArgvW ( [ lpCmdLine, int &pNumArgs ) : IntPtr |
|
|
CreateProcess ( [ lpApplicationName, StringBuilder lpCommandLine, SecurityAttributes lpProcessAttributes, SecurityAttributes lpThreadAttributes, bool bInheritHandles, ProcessCreationFlags dwCreationFlags, IntPtr lpEnvironment, [ lpCurrentDirectory, STARTUPINFO lpStartupInfo, [ lpProcessInformation ) : bool |
|
|
GetCurrentProcess ( ) : IntPtr |
|
|
NtQueryInformationProcess ( SafeProcessHandle hProcess, ProcessInfoClass pic, ProcessBasicInformation &pbi, int cb, int &pSize ) : int |
|
|
NtReadVirtualMemory ( SafeProcessHandle hProcess, IntPtr baseAddress, [ buffer, uint size, uint &lpNumberOfBytesRead ) : int |
|
|
NtWow64QueryInformationProcess64 ( SafeProcessHandle hProcess, ProcessInfoClass pic, ProcessBasicInformationWow64 &pbi, int cb, int &pSize ) : int |
|
|
NtWow64ReadVirtualMemory64 ( SafeProcessHandle hProcess, ulong baseAddress, IntPtr buffer, ulong bufferSize, ulong &lpNumberOfBytesRead ) : int |
|
|
OpenProcess ( [ dwDesiredAccess, [ bInheritHandle, int dwProcessId ) : SafeProcessHandle |
|
|
QueryFullProcessImageName ( SafeProcessHandle hProcess, [ flags, [ lpImageName, int &size ) : uint |
|
|
ReadProcessMemory ( SafeProcessHandle hProcess, IntPtr lpBaseAddress, [ buffer, uint size, UInt32 &lpNumberOfBytesRead ) : bool |
|
|