메소드 | 설명 | |
---|---|---|
CreateProcess ( string applicationName, string commandLine, Nullable |
||
CreateProcessWithDll ( string applicationName, string commandLine, Nullable |
||
CreateProcessWithLogonAndDll ( string userName, string domain, string password, int logonFlags, string applicationName, string commandLine, ProcessCreationFlags creationFlags, string environment, string currentDirectory, Nullable |
||
CreateProcessWithTokenAndDll ( |
||
EnableHook ( object o, bool enable ) : void | ||
GetModuleBaseAddress ( string moduleName ) : |
||
GetProcedureAddress ( |
||
GetRemoteModuleBaseAddress ( int pid, string moduleName, bool scanMappedImages ) : |
||
GetRemoteProcedureAddress ( int pid, |
||
Hook ( |
||
Hook ( |
||
Hook ( |
||
Hook ( |
||
HookLib ( ) : System | ||
InjectDll ( int procId, string dllName, string initFunctionName, uint processInitWaitTimeoutMs ) : void | ||
InjectDll ( int procId, string dllName, string initFunctionName, uint processInitWaitTimeoutMs, |
||
InjectDllH ( |
||
InjectDllH ( |
||
RemoteHook ( |
||
RemoteHook ( |
||
RemoveHook ( object o, bool disable ) : void | ||
ResumeThread ( |
||
ResumeThread ( |
||
Unhook ( object o ) : void | ||
UnhookAll ( ) : void | ||
UnhookProcess ( int pid ) : void | ||
WaitForInjectorThread ( |
메소드 | 설명 | |
---|---|---|
DotNetInit ( ) : void | ||
DuplicateAndConvertToSafeWaitHandle ( |
||
GetMethodAddress ( |
||
GetProperty ( Object obj, string propName ) : Object | ||
IntPtr2Obj ( |
||
Invoke ( Object obj, string methodName ) : Object | ||
Invoke ( Object obj, string methodName, object parameters ) : Object | ||
Invoke ( Object obj, string methodName, object parameters, |
||
NativeCloseHandle ( |
||
NativeCreateProcess ( string lpApplicationName, string lpCommandLine, |
||
NativeDuplicateHandle ( |
||
NativeGetCurrentProcess ( ) : |
||
NativeGetExitCodeThread ( |
||
NativeResumeThread ( |
||
NativeWaitForSingleObject ( |
||
Obj2IntPtr ( object o ) : |
||
SetProperty ( Object obj, string propName, object propValue ) : void |
public CreateProcess ( string applicationName, string commandLine, Nullable |
||
applicationName | string | |
commandLine | string | |
processAttributes | Nullable |
|
threadAttributes | Nullable |
|
inheritHandles | bool | |
creationFlags | ProcessCreationFlags | |
environment | string | |
currentDirectory | string | |
startupInfo | Nullable |
|
리턴 | ProcessInfo |
public CreateProcessWithDll ( string applicationName, string commandLine, Nullable |
||
applicationName | string | |
commandLine | string | |
processAttributes | Nullable |
|
threadAttributes | Nullable |
|
inheritHandles | bool | |
creationFlags | ProcessCreationFlags | |
environment | string | |
currentDirectory | string | |
startupInfo | Nullable |
|
dllName | string | |
signalCompletedEvent | ||
initFunctionName | string | |
리턴 | ProcessInfo |
public CreateProcessWithLogonAndDll ( string userName, string domain, string password, int logonFlags, string applicationName, string commandLine, ProcessCreationFlags creationFlags, string environment, string currentDirectory, Nullable |
||
userName | string | |
domain | string | |
password | string | |
logonFlags | int | |
applicationName | string | |
commandLine | string | |
creationFlags | ProcessCreationFlags | |
environment | string | |
currentDirectory | string | |
startupInfo | Nullable |
|
dllName | string | |
signalCompletedEvent | ||
initFunctionName | string | |
리턴 | ProcessInfo |
public CreateProcessWithTokenAndDll ( |
||
token | ||
logonFlags | int | |
applicationName | string | |
commandLine | string | |
creationFlags | ProcessCreationFlags | |
environment | string | |
currentDirectory | string | |
startupInfo | Nullable |
|
dllName | string | |
signalCompletedEvent | ||
initFunctionName | string | |
리턴 | ProcessInfo |
public GetModuleBaseAddress ( string moduleName ) : |
||
moduleName | string | |
리턴 |
public GetProcedureAddress ( |
||
moduleBaseAddress | ||
procName | string | |
리턴 |
public GetRemoteModuleBaseAddress ( int pid, string moduleName, bool scanMappedImages ) : |
||
pid | int | |
moduleName | string | |
scanMappedImages | bool | |
리턴 |
public GetRemoteProcedureAddress ( int pid, |
||
pid | int | |
moduleBaseAddress | ||
procName | string | |
리턴 |
public Hook ( |
||
origAddr | ||
newAddr | ||
리턴 | object |
public Hook ( |
||
origAddr | ||
newAddr | ||
flags | int | |
리턴 | object |
public Hook ( |
||
origClassType | ||
origMethodName | string | |
origParams | ||
newClassType | ||
newMethodName | string | |
newParams | ||
리턴 | object |
public Hook ( |
||
origClassType | ||
origMethodName | string | |
origParams | ||
newClassType | ||
newMethodName | string | |
newParams | ||
flags | int | |
리턴 | object |
public InjectDll ( int procId, string dllName, string initFunctionName, uint processInitWaitTimeoutMs ) : void | ||
procId | int | |
dllName | string | |
initFunctionName | string | |
processInitWaitTimeoutMs | uint | |
리턴 | void |
public InjectDll ( int procId, string dllName, string initFunctionName, uint processInitWaitTimeoutMs, |
||
procId | int | |
dllName | string | |
initFunctionName | string | |
processInitWaitTimeoutMs | uint | |
injectorThreadHandle | ||
리턴 | void |
public InjectDllH ( |
||
procHandle | ||
dllName | string | |
initFunctionName | string | |
processInitWaitTimeoutMs | uint | |
리턴 | void |
public InjectDllH ( |
||
procHandle | ||
dllName | string | |
initFunctionName | string | |
processInitWaitTimeoutMs | uint | |
injectorThreadHandle | ||
리턴 | void |
public RemoteHook ( |
||
origAddr | ||
newAddr | ||
pid | int | |
리턴 | object |
public RemoteHook ( |
||
origAddr | ||
newAddr | ||
pid | int | |
flags | int | |
리턴 | object |
public RemoveHook ( object o, bool disable ) : void | ||
o | object | |
disable | bool | |
리턴 | void |
public ResumeThread ( |
||
threadHandle | ||
리턴 | void |
public ResumeThread ( |
||
threadHandle | ||
리턴 | void |
public WaitForInjectorThread ( |
||
injectorThreadHandle | ||
timeoutMs | uint | |
리턴 | uint |