Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
M
- mapDataDirectory() - Method in interface vmm.IVmmModule
-
Retrieve the data directories.
- mapExport() - Method in interface vmm.IVmmModule
-
Retrieve exported symbols from the export address table (EAT).
- mapHandle() - Method in interface vmm.IVmmProcess
-
Retrieve handles.
- mapHeap() - Method in interface vmm.IVmmProcess
-
Retrieve the process heaps.
- mapHeapAlloc(long) - Method in interface vmm.IVmmProcess
-
Retrieve heap allocations given a heap address or heap number.
- mapImport() - Method in interface vmm.IVmmModule
-
Retrieve imported symbols from the import address table (IAT).
- mapNet() - Method in interface vmm.IVmm
-
Retrieve network info.
- mapPhysicalMemory() - Method in interface vmm.IVmm
-
Retrieve the system physical memory map.
- mapPool(boolean) - Method in interface vmm.IVmm
-
Retrieve pool allocations sorted by virtual address and pool tag.
- mapPte() - Method in interface vmm.IVmmProcess
-
Retrieve the process PTEs.
- mapSection() - Method in interface vmm.IVmmModule
-
Retrieve module sections.
- mapService() - Method in interface vmm.IVmm
-
Retrieve services.
- mapThread() - Method in interface vmm.IVmmProcess
-
Retrieve the process threads.
- mapUnloadedModule() - Method in interface vmm.IVmmProcess
-
Retrieve the process unloaded modules.
- mapUser() - Method in interface vmm.IVmm
-
Retrieve users.
- mapVad() - Method in interface vmm.IVmmProcess
-
Retrieve the process VADs.
- mapVadEx(int, int) - Method in interface vmm.IVmmProcess
-
Retrieve extended VAD information given a starting page offset (oPage) and number of pages (cPage).
- memPrefetchPages(long[]) - Method in interface vmm.IVmm
-
Prefetch a number of addresses into the internal memory cache.
- memPrefetchPages(long[]) - Method in interface vmm.IVmmProcess
-
Prefetch a number of addresses into the internal memory cache.
- memRead(int, int) - Method in interface vmm.IVmmRegHive
-
Read registry memory.
- memRead(int, int, int) - Method in interface vmm.IVmmRegHive
-
Read registry memory.
- memRead(long, int) - Method in interface leechcore.ILeechCore
-
Read a single chunk of memory.
- memRead(long, int) - Method in interface vmm.IVmm
-
Read a single chunk of memory.
- memRead(long, int) - Method in interface vmm.IVmmProcess
-
Read a single chunk of memory.
- memRead(long, int, int) - Method in interface vmm.IVmm
-
Read a single chunk of memory with the given flags
- memRead(long, int, int) - Method in interface vmm.IVmmProcess
-
Read a single chunk of memory with the given flags
- memScatterInitialize(int) - Method in interface vmm.IVmm
-
Create a new IVmmMemScatter object used for efficient reading and writing.
- memScatterInitialize(int) - Method in interface vmm.IVmmProcess
-
Create a new IVmmMemScatter object used for efficient reading and writing.
- memVirtualToPhysical(long) - Method in interface vmm.IVmmProcess
-
Try translating a virtual memory address to a physical memory address.
- memWrite(int, byte[]) - Method in interface vmm.IVmmRegHive
-
Write data to the registry if possible.
- memWrite(long, byte[]) - Method in interface leechcore.ILeechCore
-
Write data to the memory.
- memWrite(long, byte[]) - Method in interface vmm.IVmm
-
Write data to the memory.
- memWrite(long, byte[]) - Method in interface vmm.IVmmProcess
-
Write data to the memory.
- MiscVirtualSize - Variable in class vmm.entry.VmmMap_ModuleSection
- moduleGet(long, boolean) - Method in interface vmm.IVmmProcess
-
Retrieve a module by its virtual address.
- moduleGet(String, boolean) - Method in interface vmm.IVmmProcess
-
Retrieve a module by its name.
- moduleGetAll(boolean) - Method in interface vmm.IVmmProcess
-
Retrieve all modules loaded into the process.
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form