From 0c6485dbde9d003c5c2142d42c5a87bb01716482 Mon Sep 17 00:00:00 2001 From: IDontCode Date: Wed, 15 Dec 2021 10:01:49 +0000 Subject: [PATCH] if you are reading this then you should find something better to be doing --- README.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index db7fb46..1a218ed 100644 --- a/README.md +++ b/README.md @@ -16,10 +16,11 @@ header only kernel utils library - completely self dependent - no imports - no s ### Functions -* PVOID KUtils::Driver::GetKernelBase(VOID) - Get the base address of the kernel. -* PDRIVER_OBJECT KUtils::Driver::GetDriverObject(CONST WCHAR* pwszDriverName) - Get driver object given the name of the driver. -* HANDLE KUtils::Process::GetPid(CONST WCHAR* pwszProcessName) - get pid given a process file name. -* PVOID KUtils::Process:GetProcessBase(HANDLE hPid) - get process base address given pid. -* VOID KUtils::Process::ForEachProcess(PsCallbackPtr lpCallback) - pass a callback to loop over each process. -* VOID KUtils::Process::ForEachThread(HANDLE hPid, TdCallbackPtr lpCallback) - pass a callback and pid to loop over each thread in that process. -* VOID KUtils::Process::GetModuleBase(HANDLE hPid, CONST WCHAR* pwszModuleName) - gets module base base for a module in a given process. +* `PVOID KUtils::Driver::GetKernelBase(VOID)` - Get the base address of the kernel. +* `PDRIVER_OBJECT KUtils::Driver::GetDriverObject(CONST WCHAR* pwszDriverName)` - Get driver object given the name of the driver. +* `HANDLE KUtils::Process::GetPid(CONST WCHAR* pwszProcessName)` - get pid given a process file name. +* `PVOID KUtils::Process:GetProcessBase(HANDLE hPid)` - get process base address given pid. +* `VOID KUtils::Process::ForEachProcess(PsCallbackPtr lpCallback)` - pass a callback to loop over each process. +* `VOID KUtils::Process::ForEachThread(HANDLE hPid, TdCallbackPtr lpCallback)` - pass a callback and pid to loop over each thread in that process. +* `VOID KUtils::Process::GetModuleBase(HANDLE hPid, CONST WCHAR* pwszModuleName)` - gets module base base for a module in a given process. +* `LPVOID KUtils::Signature::Scan(LPVOID lpBase, ULONG nSize, CONST CHAR* pszPattern, CONST CHAR* pszMask)`