Reflective Code Loading

Reserves, commits or both a region of virtual memory in a target process.

Reserves or commits virtual memory with extended parameters (preferred NUMA node, CFG, address requirements).

Changes the protection on a region of committed virtual memory in a target process.

Invalidates the instruction cache for a region in a target process so freshly written code can be executed.

Creates a section object backed by a file or the system pagefile for shared memory mapping.

Creates a section object with extended parameters (NUMA node, address-requirements, user-physical pages).

Grows an existing pagefile- or file-backed section to a larger maximum size.

Maps a view of a section object into the virtual address space of a target process.

Windows 10 1809+ extended section-mapping syscall that accepts MEM_EXTENDED_PARAMETER constraints.

Creates a new thread in a target process, optionally suspended, with rich attribute list support.

Restores a CPU CONTEXT into the current thread and resumes execution at CONTEXT.Rip.

Allocates a new enclave (SGX or VBS/VTL1) inside a target process's address space.

Finalises an enclave after image load — verifies signatures and transitions it to executable state.

Transitions execution from VTL0 host code into a routine inside an initialised enclave.

Tears down an enclave, releasing its VTL1 memory and signalling any threads still inside.

Copies a page-aligned buffer (code or data) from VTL0 host memory into an enclave's VTL1 range before initialisation.