portugalfuturista/rizin
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
rizin/librz/analysis/d/functions-windows_memoryapi.sdb.txt
Anton Kochkov 3c59df7e98
Refactor RzTypes to use structs instead of SDB + New Tree-Sitter based C Parser (#1047) 
- Removed oldshell version of `t` (types) commands
- Removed `tk` command because types storage switched to the hashtable
- Added `tfc` command to show the calling convention of the function or set it
- Added `tsl` (RZ_OUTPUT_MODE_LONG) to show structure members' sizes and offsets
- Added `tul` (RZ_OUTPUT_MODE_LONG) to show union members' sizes
- Switched the types storage to the hashtable instead of SDB
- Added load and export from/to SDB for standard type libraries and serialization for Projects
- Changed all `char *type` occurences to the proper `RzType`
- Added `RzCallable` type for the function/class method types
- Changed all function types API to use the `RzCallable` API
- Switched the function types (`RzCallable`) storage to the hashtable instead of SDB
- Added a connection between `RzAnalysisFunction` and `RzCallable` - `rz_analysis_function_derive_type()` API function to derive new `RzCallable` type from the `RzAnalysisFunction` even if it doesn't exist in the RzTypeDB.
- Moved type links to the RzAnalysis where they belong
- Removed TCC and MPC-based parsers
- Added Tree-Sitter-based parser for C grammar (see `librz/type/parser/*`)
- Reworked type databases in `librz/analysis/d/` to be consistent with C standard, libc, platform-specific definitions
- Switched the type links from `char *` to `RzType`
- Switched the type links from SDB to the hashtable
- Added concept of the "type paths", e.g. `a.b[20].c` where `b` is a member of `a` (`a` is either structure or a union) and `c` is a member of `b`, and `b` is an array where we take 20-th element.
- Added concept of the typeclasses (a bit similar to Haskell) for numerical types: `None` (the most generic one), `Num` (includes `Integral` and `Floating`), `Integral` (includes `Signed Integral` and `Unsigned Integral`), `Floating`.
- Added concept of type equality (`rz_types_equal(a, b)` API function)
- Added Doxygen documentation to every API function in the `librz/type/*`.
- Updated the project format from **V2** to **V3**, added migration.
2021-07-20 01:46:45 +08:00

415 lines
15 KiB
Text
Raw Blame History

### memoryapi.h ###
AllocateUserPhysicalPages=func
func.AllocateUserPhysicalPages.args=3
func.AllocateUserPhysicalPages.arg.0=HANDLE,hProcess
func.AllocateUserPhysicalPages.arg.1=PULONG_PTR,NumberOfPages
func.AllocateUserPhysicalPages.arg.2=PULONG_PTR,PageArray
func.AllocateUserPhysicalPages.ret=BOOL
AllocateUserPhysicalPagesNuma=func
func.AllocateUserPhysicalPagesNuma.args=4
func.AllocateUserPhysicalPagesNuma.arg.0=HANDLE,hProcess
func.AllocateUserPhysicalPagesNuma.arg.1=PULONG_PTR,NumberOfPages
func.AllocateUserPhysicalPagesNuma.arg.2=PULONG_PTR,PageArray
func.AllocateUserPhysicalPagesNuma.arg.3=DWORD,nndPreferred
func.AllocateUserPhysicalPagesNuma.ret=BOOL
CreateFileMappingFromApp=func
func.CreateFileMappingFromApp.args=5
func.CreateFileMappingFromApp.arg.0=HANDLE,hFile
func.CreateFileMappingFromApp.arg.1=PSECURITY_ATTRIBUTES,SecurityAttributes
func.CreateFileMappingFromApp.arg.2=ULONG,PageProtection
func.CreateFileMappingFromApp.arg.3=ULONG64,MaximumSize
func.CreateFileMappingFromApp.arg.4=PCWSTR,Name
func.CreateFileMappingFromApp.ret=HANDLE
CreateFileMappingNumaW=func
func.CreateFileMappingNumaW.args=7
func.CreateFileMappingNumaW.arg.0=HANDLE,hFile
func.CreateFileMappingNumaW.arg.1=LPSECURITY_ATTRIBUTES,lpFileMappingAttributes
func.CreateFileMappingNumaW.arg.2=DWORD,flProtect
func.CreateFileMappingNumaW.arg.3=DWORD,dwMaximumSizeHigh
func.CreateFileMappingNumaW.arg.4=DWORD,dwMaximumSizeLow
func.CreateFileMappingNumaW.arg.5=LPCWSTR,lpName
func.CreateFileMappingNumaW.arg.6=DWORD,nndPreferred
func.CreateFileMappingNumaW.ret=HANDLE
CreateFileMappingW=func
func.CreateFileMappingW.args=6
func.CreateFileMappingW.arg.0=HANDLE,hFile
func.CreateFileMappingW.arg.1=LPSECURITY_ATTRIBUTES,lpFileMappingAttributes
func.CreateFileMappingW.arg.2=DWORD,flProtect
func.CreateFileMappingW.arg.3=DWORD,dwMaximumSizeHigh
func.CreateFileMappingW.arg.4=DWORD,dwMaximumSizeLow
func.CreateFileMappingW.arg.5=LPCWSTR,lpName
func.CreateFileMappingW.ret=HANDLE
CreateMemoryResourceNotification=func
func.CreateMemoryResourceNotification.args=1
func.CreateMemoryResourceNotification.arg.0=MEMORY_RESOURCE_NOTIFICATION_TYPE,NotificationType
func.CreateMemoryResourceNotification.ret=HANDLE
FlushViewOfFile=func
func.FlushViewOfFile.args=2
func.FlushViewOfFile.arg.0=LPCVOID,lpBaseAddress
func.FlushViewOfFile.arg.1=SIZE_T,dwNumberOfBytesToFlush
func.FlushViewOfFile.ret=BOOL
FreeUserPhysicalPages=func
func.FreeUserPhysicalPages.args=3
func.FreeUserPhysicalPages.arg.0=HANDLE,hProcess
func.FreeUserPhysicalPages.arg.1=PULONG_PTR,NumberOfPages
func.FreeUserPhysicalPages.arg.2=PULONG_PTR,PageArray
func.FreeUserPhysicalPages.ret=BOOL
GetLargePageMinimum=func
func.GetLargePageMinimum.args=0
func.GetLargePageMinimum.ret=SIZE_T
GetMemoryErrorHandlingCapabilities=func
func.GetMemoryErrorHandlingCapabilities.args=1
func.GetMemoryErrorHandlingCapabilities.arg.0=PULONG,Capabilities
func.GetMemoryErrorHandlingCapabilities.ret=BOOL
GetProcessWorkingSetSizeEx=func
func.GetProcessWorkingSetSizeEx.args=4
func.GetProcessWorkingSetSizeEx.arg.0=HANDLE,hProcess
func.GetProcessWorkingSetSizeEx.arg.1=PSIZE_T,lpMinimumWorkingSetSize
func.GetProcessWorkingSetSizeEx.arg.2=PSIZE_T,lpMaximumWorkingSetSize
func.GetProcessWorkingSetSizeEx.arg.3=PDWORD,Flags
func.GetProcessWorkingSetSizeEx.ret=BOOL
GetSystemFileCacheSize=func
func.GetSystemFileCacheSize.args=3
func.GetSystemFileCacheSize.arg.0=PSIZE_T,lpMinimumFileCacheSize
func.GetSystemFileCacheSize.arg.1=PSIZE_T,lpMaximumFileCacheSize
func.GetSystemFileCacheSize.arg.2=PDWORD,lpFlags
func.GetSystemFileCacheSize.ret=BOOL
GetWriteWatch=func
func.GetWriteWatch.args=6
func.GetWriteWatch.arg.0=DWORD,dwFlags
func.GetWriteWatch.arg.1=PVOID,lpBaseAddress
func.GetWriteWatch.arg.2=SIZE_T,dwRegionSize
func.GetWriteWatch.arg.3=PVOID *,lpAddresses
func.GetWriteWatch.arg.4=ULONG_PTR *,lpdwCount
func.GetWriteWatch.arg.5=LPDWORD,lpdwGranularity
func.GetWriteWatch.ret=UINT
MapUserPhysicalPages=func
func.MapUserPhysicalPages.args=3
func.MapUserPhysicalPages.arg.0=PVOID,VirtualAddress
func.MapUserPhysicalPages.arg.1=ULONG_PTR,NumberOfPages
func.MapUserPhysicalPages.arg.2=PULONG_PTR,PageArray
func.MapUserPhysicalPages.ret=BOOL
MapViewOfFile=func
func.MapViewOfFile.args=5
func.MapViewOfFile.arg.0=HANDLE,hFileMappingObject
func.MapViewOfFile.arg.1=DWORD,dwDesiredAccess
func.MapViewOfFile.arg.2=DWORD,dwFileOffsetHigh
func.MapViewOfFile.arg.3=DWORD,dwFileOffsetLow
func.MapViewOfFile.arg.4=SIZE_T,dwNumberOfBytesToMap
func.MapViewOfFile.ret=LPVOID
MapViewOfFile3=func
func.MapViewOfFile3.args=9
func.MapViewOfFile3.arg.0=HANDLE,FileMapping
func.MapViewOfFile3.arg.1=HANDLE,Process
func.MapViewOfFile3.arg.2=PVOID,BaseAddress
func.MapViewOfFile3.arg.3=ULONG64,Offset
func.MapViewOfFile3.arg.4=SIZE_T,ViewSize
func.MapViewOfFile3.arg.5=ULONG,AllocationType
func.MapViewOfFile3.arg.6=ULONG,PageProtection
func.MapViewOfFile3.arg.7=MEM_EXTENDED_PARAMETER *,ExtendedParameters
func.MapViewOfFile3.arg.8=ULONG,ParameterCount
func.MapViewOfFile3.ret=PVOID
MapViewOfFile3FromApp=func
func.MapViewOfFile3FromApp.args=9
func.MapViewOfFile3FromApp.arg.0=HANDLE,FileMapping
func.MapViewOfFile3FromApp.arg.1=HANDLE,Process
func.MapViewOfFile3FromApp.arg.2=PVOID,BaseAddress
func.MapViewOfFile3FromApp.arg.3=ULONG64,Offset
func.MapViewOfFile3FromApp.arg.4=SIZE_T,ViewSize
func.MapViewOfFile3FromApp.arg.5=ULONG,AllocationType
func.MapViewOfFile3FromApp.arg.6=ULONG,PageProtection
func.MapViewOfFile3FromApp.arg.7=MEM_EXTENDED_PARAMETER *,ExtendedParameters
func.MapViewOfFile3FromApp.arg.8=ULONG,ParameterCount
func.MapViewOfFile3FromApp.ret=PVOID
MapViewOfFileEx=func
func.MapViewOfFileEx.args=6
func.MapViewOfFileEx.arg.0=HANDLE,hFileMappingObject
func.MapViewOfFileEx.arg.1=DWORD,dwDesiredAccess
func.MapViewOfFileEx.arg.2=DWORD,dwFileOffsetHigh
func.MapViewOfFileEx.arg.3=DWORD,dwFileOffsetLow
func.MapViewOfFileEx.arg.4=SIZE_T,dwNumberOfBytesToMap
func.MapViewOfFileEx.arg.5=LPVOID,lpBaseAddress
func.MapViewOfFileEx.ret=LPVOID
MapViewOfFileFromApp=func
func.MapViewOfFileFromApp.args=4
func.MapViewOfFileFromApp.arg.0=HANDLE,hFileMappingObject
func.MapViewOfFileFromApp.arg.1=ULONG,DesiredAccess
func.MapViewOfFileFromApp.arg.2=ULONG64,FileOffset
func.MapViewOfFileFromApp.arg.3=SIZE_T,NumberOfBytesToMap
func.MapViewOfFileFromApp.ret=PVOID
MapViewOfFileNuma2=func
func.MapViewOfFileNuma2.args=8
func.MapViewOfFileNuma2.arg.0=HANDLE,FileMappingHandle
func.MapViewOfFileNuma2.arg.1=HANDLE,ProcessHandle
func.MapViewOfFileNuma2.arg.2=ULONG64,Offset
func.MapViewOfFileNuma2.arg.3=PVOID,BaseAddress
func.MapViewOfFileNuma2.arg.4=SIZE_T,ViewSize
func.MapViewOfFileNuma2.arg.5=ULONG,AllocationType
func.MapViewOfFileNuma2.arg.6=ULONG,PageProtection
func.MapViewOfFileNuma2.arg.7=ULONG,PreferredNode
func.MapViewOfFileNuma2.ret=PVOID
OpenFileMappingFromApp=func
func.OpenFileMappingFromApp.args=3
func.OpenFileMappingFromApp.arg.0=ULONG,DesiredAccess
func.OpenFileMappingFromApp.arg.1=BOOL,InheritHandle
func.OpenFileMappingFromApp.arg.2=PCWSTR,Name
func.OpenFileMappingFromApp.ret=HANDLE
OpenFileMappingW=func
func.OpenFileMappingW.args=3
func.OpenFileMappingW.arg.0=DWORD,dwDesiredAccess
func.OpenFileMappingW.arg.1=BOOL,bInheritHandle
func.OpenFileMappingW.arg.2=LPCWSTR,lpName
func.OpenFileMappingW.ret=HANDLE
PrefetchVirtualMemory=func
func.PrefetchVirtualMemory.args=4
func.PrefetchVirtualMemory.arg.0=HANDLE,hProcess
func.PrefetchVirtualMemory.arg.1=ULONG_PTR,NumberOfEntries
func.PrefetchVirtualMemory.arg.2=PWIN32_MEMORY_RANGE_ENTRY,VirtualAddresses
func.PrefetchVirtualMemory.arg.3=ULONG,Flags
func.PrefetchVirtualMemory.ret=BOOL
QueryMemoryResourceNotification=func
func.QueryMemoryResourceNotification.args=2
func.QueryMemoryResourceNotification.arg.0=HANDLE,ResourceNotificationHandle
func.QueryMemoryResourceNotification.arg.1=PBOOL,ResourceState
func.QueryMemoryResourceNotification.ret=BOOL
QueryVirtualMemoryInformation=func
func.QueryVirtualMemoryInformation.args=6
func.QueryVirtualMemoryInformation.arg.0=HANDLE,Process
func.QueryVirtualMemoryInformation.arg.1=const VOID *,VirtualAddress
func.QueryVirtualMemoryInformation.arg.2=WIN32_MEMORY_INFORMATION_CLASS,MemoryInformationClass
func.QueryVirtualMemoryInformation.arg.3=PVOID,MemoryInformation
func.QueryVirtualMemoryInformation.arg.4=SIZE_T,MemoryInformationSize
func.QueryVirtualMemoryInformation.arg.5=PSIZE_T,ReturnSize
func.QueryVirtualMemoryInformation.ret=BOOL
ReadProcessMemory=func
func.ReadProcessMemory.args=5
func.ReadProcessMemory.arg.0=HANDLE,hProcess
func.ReadProcessMemory.arg.1=LPCVOID,lpBaseAddress
func.ReadProcessMemory.arg.2=LPVOID,lpBuffer
func.ReadProcessMemory.arg.3=SIZE_T,nSize
func.ReadProcessMemory.arg.4=SIZE_T *,lpNumberOfBytesRead
func.ReadProcessMemory.ret=BOOL
RegisterBadMemoryNotification=func
func.RegisterBadMemoryNotification.args=1
func.RegisterBadMemoryNotification.arg.0=PBAD_MEMORY_CALLBACK_ROUTINE,Callback
func.RegisterBadMemoryNotification.ret=PVOID
ResetWriteWatch=func
func.ResetWriteWatch.args=2
func.ResetWriteWatch.arg.0=LPVOID,lpBaseAddress
func.ResetWriteWatch.arg.1=SIZE_T,dwRegionSize
func.ResetWriteWatch.ret=UINT
SetProcessValidCallTargets=func
func.SetProcessValidCallTargets.args=5
func.SetProcessValidCallTargets.arg.0=HANDLE,hProcess
func.SetProcessValidCallTargets.arg.1=PVOID,VirtualAddress
func.SetProcessValidCallTargets.arg.2=SIZE_T,RegionSize
func.SetProcessValidCallTargets.arg.3=ULONG,NumberOfOffsets
func.SetProcessValidCallTargets.arg.4=PCFG_CALL_TARGET_INFO,OffsetInformation
func.SetProcessValidCallTargets.ret=BOOL
SetProcessWorkingSetSizeEx=func
func.SetProcessWorkingSetSizeEx.args=4
func.SetProcessWorkingSetSizeEx.arg.0=HANDLE,hProcess
func.SetProcessWorkingSetSizeEx.arg.1=SIZE_T,dwMinimumWorkingSetSize
func.SetProcessWorkingSetSizeEx.arg.2=SIZE_T,dwMaximumWorkingSetSize
func.SetProcessWorkingSetSizeEx.arg.3=DWORD,Flags
func.SetProcessWorkingSetSizeEx.ret=BOOL
SetSystemFileCacheSize=func
func.SetSystemFileCacheSize.args=3
func.SetSystemFileCacheSize.arg.0=SIZE_T,MinimumFileCacheSize
func.SetSystemFileCacheSize.arg.1=SIZE_T,MaximumFileCacheSize
func.SetSystemFileCacheSize.arg.2=DWORD,Flags
func.SetSystemFileCacheSize.ret=BOOL
UnmapViewOfFile=func
func.UnmapViewOfFile.args=1
func.UnmapViewOfFile.arg.0=LPCVOID,lpBaseAddress
func.UnmapViewOfFile.ret=BOOL
UnmapViewOfFile2=func
func.UnmapViewOfFile2.args=3
func.UnmapViewOfFile2.arg.0=HANDLE,Process
func.UnmapViewOfFile2.arg.1=PVOID,BaseAddress
func.UnmapViewOfFile2.arg.2=ULONG,UnmapFlags
func.UnmapViewOfFile2.ret=BOOL
UnmapViewOfFileEx=func
func.UnmapViewOfFileEx.args=2
func.UnmapViewOfFileEx.arg.0=PVOID,BaseAddress
func.UnmapViewOfFileEx.arg.1=ULONG,UnmapFlags
func.UnmapViewOfFileEx.ret=BOOL
UnregisterBadMemoryNotification=func
func.UnregisterBadMemoryNotification.args=1
func.UnregisterBadMemoryNotification.arg.0=PVOID,RegistrationHandle
func.UnregisterBadMemoryNotification.ret=BOOL
VirtualAlloc=func
func.VirtualAlloc.args=4
func.VirtualAlloc.arg.0=LPVOID,lpAddress
func.VirtualAlloc.arg.1=SIZE_T,dwSize
func.VirtualAlloc.arg.2=DWORD,flAllocationType
func.VirtualAlloc.arg.3=DWORD,flProtect
func.VirtualAlloc.ret=LPVOID
VirtualAlloc2=func
func.VirtualAlloc2.args=7
func.VirtualAlloc2.arg.0=HANDLE,Process
func.VirtualAlloc2.arg.1=PVOID,BaseAddress
func.VirtualAlloc2.arg.2=SIZE_T,Size
func.VirtualAlloc2.arg.3=ULONG,AllocationType
func.VirtualAlloc2.arg.4=ULONG,PageProtection
func.VirtualAlloc2.arg.5=MEM_EXTENDED_PARAMETER *,ExtendedParameters
func.VirtualAlloc2.arg.6=ULONG,ParameterCount
func.VirtualAlloc2.ret=PVOID
VirtualAlloc2FromApp=func
func.VirtualAlloc2FromApp.args=7
func.VirtualAlloc2FromApp.arg.0=HANDLE,Process
func.VirtualAlloc2FromApp.arg.1=PVOID,BaseAddress
func.VirtualAlloc2FromApp.arg.2=SIZE_T,Size
func.VirtualAlloc2FromApp.arg.3=ULONG,AllocationType
func.VirtualAlloc2FromApp.arg.4=ULONG,PageProtection
func.VirtualAlloc2FromApp.arg.5=MEM_EXTENDED_PARAMETER *,ExtendedParameters
func.VirtualAlloc2FromApp.arg.6=ULONG,ParameterCount
func.VirtualAlloc2FromApp.ret=PVOID
VirtualAllocEx=func
func.VirtualAllocEx.args=5
func.VirtualAllocEx.arg.0=HANDLE,hProcess
func.VirtualAllocEx.arg.1=LPVOID,lpAddress
func.VirtualAllocEx.arg.2=SIZE_T,dwSize
func.VirtualAllocEx.arg.3=DWORD,flAllocationType
func.VirtualAllocEx.arg.4=DWORD,flProtect
func.VirtualAllocEx.ret=LPVOID
VirtualAllocExNuma=func
func.VirtualAllocExNuma.args=6
func.VirtualAllocExNuma.arg.0=HANDLE,hProcess
func.VirtualAllocExNuma.arg.1=LPVOID,lpAddress
func.VirtualAllocExNuma.arg.2=SIZE_T,dwSize
func.VirtualAllocExNuma.arg.3=DWORD,flAllocationType
func.VirtualAllocExNuma.arg.4=DWORD,flProtect
func.VirtualAllocExNuma.arg.5=DWORD,nndPreferred
func.VirtualAllocExNuma.ret=LPVOID
VirtualAllocFromApp=func
func.VirtualAllocFromApp.args=4
func.VirtualAllocFromApp.arg.0=PVOID,BaseAddress
func.VirtualAllocFromApp.arg.1=SIZE_T,Size
func.VirtualAllocFromApp.arg.2=ULONG,AllocationType
func.VirtualAllocFromApp.arg.3=ULONG,Protection
func.VirtualAllocFromApp.ret=PVOID
VirtualFree=func
func.VirtualFree.args=3
func.VirtualFree.arg.0=LPVOID,lpAddress
func.VirtualFree.arg.1=SIZE_T,dwSize
func.VirtualFree.arg.2=DWORD,dwFreeType
func.VirtualFree.ret=BOOL
VirtualFreeEx=func
func.VirtualFreeEx.args=4
func.VirtualFreeEx.arg.0=HANDLE,hProcess
func.VirtualFreeEx.arg.1=LPVOID,lpAddress
func.VirtualFreeEx.arg.2=SIZE_T,dwSize
func.VirtualFreeEx.arg.3=DWORD,dwFreeType
func.VirtualFreeEx.ret=BOOL
VirtualLock=func
func.VirtualLock.args=2
func.VirtualLock.arg.0=LPVOID,lpAddress
func.VirtualLock.arg.1=SIZE_T,dwSize
func.VirtualLock.ret=BOOL
VirtualProtect=func
func.VirtualProtect.args=4
func.VirtualProtect.arg.0=LPVOID,lpAddress
func.VirtualProtect.arg.1=SIZE_T,dwSize
func.VirtualProtect.arg.2=DWORD,flNewProtect
func.VirtualProtect.arg.3=PDWORD,lpflOldProtect
func.VirtualProtect.ret=BOOL
VirtualProtectEx=func
func.VirtualProtectEx.args=5
func.VirtualProtectEx.arg.0=HANDLE,hProcess
func.VirtualProtectEx.arg.1=LPVOID,lpAddress
func.VirtualProtectEx.arg.2=SIZE_T,dwSize
func.VirtualProtectEx.arg.3=DWORD,flNewProtect
func.VirtualProtectEx.arg.4=PDWORD,lpflOldProtect
func.VirtualProtectEx.ret=BOOL
VirtualProtectFromApp=func
func.VirtualProtectFromApp.args=4
func.VirtualProtectFromApp.arg.0=PVOID,Address
func.VirtualProtectFromApp.arg.1=SIZE_T,Size
func.VirtualProtectFromApp.arg.2=ULONG,NewProtection
func.VirtualProtectFromApp.arg.3=PULONG,OldProtection
func.VirtualProtectFromApp.ret=BOOL
VirtualQuery=func
func.VirtualQuery.args=3
func.VirtualQuery.arg.0=LPCVOID,lpAddress
func.VirtualQuery.arg.1=PMEMORY_BASIC_INFORMATION,lpBuffer
func.VirtualQuery.arg.2=SIZE_T,dwLength
func.VirtualQuery.ret=SIZE_T
VirtualQueryEx=func
func.VirtualQueryEx.args=4
func.VirtualQueryEx.arg.0=HANDLE,hProcess
func.VirtualQueryEx.arg.1=LPCVOID,lpAddress
func.VirtualQueryEx.arg.2=PMEMORY_BASIC_INFORMATION,lpBuffer
func.VirtualQueryEx.arg.3=SIZE_T,dwLength
func.VirtualQueryEx.ret=SIZE_T
VirtualUnlock=func
func.VirtualUnlock.args=2
func.VirtualUnlock.arg.0=LPVOID,lpAddress
func.VirtualUnlock.arg.1=SIZE_T,dwSize
func.VirtualUnlock.ret=BOOL
VirtualUnlockEx=func
func.VirtualUnlockEx.args=3
func.VirtualUnlockEx.arg.0=HANDLE,Process
func.VirtualUnlockEx.arg.1=LPVOID,Address
func.VirtualUnlockEx.arg.2=SIZE_T,Size
func.VirtualUnlockEx.ret=BOOL
WriteProcessMemory=func
func.WriteProcessMemory.args=5
func.WriteProcessMemory.arg.0=HANDLE,hProcess
func.WriteProcessMemory.arg.1=LPVOID,lpBaseAddress
func.WriteProcessMemory.arg.2=LPCVOID,lpBuffer
func.WriteProcessMemory.arg.3=SIZE_T,nSize
func.WriteProcessMemory.arg.4=SIZE_T *,lpNumberOfBytesWritten
func.WriteProcessMemory.ret=BOOL
Reference in a new issue View git blame Copy permalink