Struct KernelInfo 

pub struct KernelInfo {
    pub base: u64,
    pub major: u32,
    pub minor: u32,
    pub build: u32,
    pub debug_info: DebugInfo<'static>,
}

Information about the currently running windows kernel

Fields

base: u64

The base address of the kernel

major: u32

The major version of windows

minor: u32

The minor version of windows

build: u32

the build number of windows

debug_info: DebugInfo<'static>

The loaded debug information for the kernel

Implementations

impl KernelInfo

pub fn new<P>( processor: *mut ConfObject, name: &str, base: u64, download_directory: P, not_found_full_name_cache: &mut HashSet<String>, user_debug_info: &mut DebugInfoConfig<'_>, ) -> Result<Self>

where P: AsRef<Path>,

Create a new kernel info struct

fn find_ps_loaded_module_list_address(&mut self) -> Result<u64>

pub fn loaded_module_list<P>( &mut self, processor: *mut ConfObject, download_directory: P, not_found_full_name_cache: &mut HashSet<String>, user_debug_info: &DebugInfoConfig<'_>, ) -> Result<Vec<Module>>

where P: AsRef<Path>,

Return the list of currently loaded modules

fn find_ps_initial_system_process_address(&mut self) -> Result<u64>

pub fn current_process<P>( &mut self, processor: *mut ConfObject, download_directory: P, not_found_full_name_cache: &mut HashSet<String>, user_debug_info: &DebugInfoConfig<'_>, ) -> Result<Process>

where P: AsRef<Path>,

Return the currently running process

pub fn process_list<P>( &mut self, processor: *mut ConfObject, download_directory: P, not_found_full_name_cache: &mut HashSet<String>, user_debug_info: &DebugInfoConfig<'_>, ) -> Result<Vec<Process>>

where P: AsRef<Path>,

Return the list of loaded processes

Trait Implementations

impl Debug for KernelInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.