API Reference

class DioProcessSDK {
public:
    DioProcessSDK();
    ~DioProcessSDK();
    
    BOOL Open();
    void Close();
    BOOL IsOpen() const;
    
    // 80+ methods organized by category below
};

// Callback information (process, thread, image)
struct CallbackInformation {
    ULONG Index;                                // Callback slot index
    ULONG64 CallbackAddress;                    // Kernel address
    CHAR ModuleName[MAX_MODULE_NAME_LENGTH];    // Driver name
};

// Object callback (ObRegisterCallbacks)
struct ObjectCallbackInformation {
    CHAR ModuleName[MAX_MODULE_NAME_LENGTH];
    CHAR Altitude[MAX_ALTITUDE_LENGTH];
    ObjectCallbackType ObjectType;
    ObjectCallbackOperations Operations;
    ULONG64 PreOperationCallback;
    ULONG64 PostOperationCallback;
    ULONG Index;
};

// CID table entry
struct CidTableEntry {
    ULONG Id;                                   // PID or TID
    ULONG64 ObjectAddress;                      // EPROCESS or ETHREAD
    CidObjectType ObjectType;                   // Process or Thread
    ULONG ParentPid;                            // Parent/owner PID
    CHAR ProcessName[MAX_PROCESS_NAME_LENGTH];  // Image file name
};

// Hypervisor ping response
struct HvPingResponse {
    BOOLEAN IsRunning;
    BOOLEAN HooksInstalled;
    ULONG ProtectedProcessCount;
    ULONG HiddenDriverCount;
};

// Physical memory translation
struct TranslateVaResponse {
    ULONG64 PhysicalAddress;
    ULONG PageSize;
    BOOLEAN Valid;
};

// EPT hook info
struct EptHookInfo {
    ULONG ProcessId;
    ULONG64 TargetAddress;
    ULONG PatchSize;
    ULONG HookIndex;
    BOOLEAN Active;
};

// Register change info
struct RegisterChangeInfo {
    ULONG ProcessId;
    ULONG64 Address;
    RegisterType Register;
    ChangeOperation Operation;
    ULONG64 Value;
    ULONG HookIndex;
    BOOLEAN Active;
};

// Hidden port info
struct HiddenPortInfo {
    USHORT Port;
    UCHAR Protocol;      // 6 = TCP, 17 = UDP
    ULONG Index;
};

// Packet capture entry
struct PacketEntry {
    ULONG64 Timestamp;
    ULONG Length;
    UCHAR Direction;     // 0 = inbound, 1 = outbound
    BYTE Data[MAX_PACKET_SIZE];
};

// Kernel inject request/response
struct KernelInjectShellcodeRequest {
    ULONG ProcessId;
    ULONG ShellcodeSize;
    BYTE Shellcode[4096];
};

struct KernelInjectResponse {
    ULONG64 ShellcodeAddress;
    ULONG64 ModuleBase;
    ULONG64 ThreadHandle;
    BOOLEAN Success;
};

// Early injection status
struct EarlyInjectStatusResponse {
    BOOLEAN Armed;
    WCHAR TargetProcess[MAX_PATH];
    WCHAR DllPath[MAX_PATH];
    BOOLEAN OneShot;
    ULONG InjectionCount;
    ULONG LastInjectedPid;
};

// All methods return BOOL/bool
if (!sdk.ProtectProcess(pid)) {
    DWORD error = GetLastError();
    
    // Common error codes:
    // ERROR_ACCESS_DENIED (5)     - Not admin
    // ERROR_FILE_NOT_FOUND (2)    - Driver not loaded
    // ERROR_INVALID_PARAMETER (87)- Invalid PID
    // ERROR_NOT_SUPPORTED (50)    - Unsupported Windows version
}