MCPcopy Create free account

hub / github.com/Air14/HyperHide / functions

Functions177 in github.com/Air14/HyperHide

↓ 48 callersFunctionIsHidden
HyperHideDrv/Hider.cpp:410
↓ 38 callersFunctionIniLoadValue
HyperHide/IniApi.h:17
↓ 38 callersFunctionIniSaveValue
HyperHide/IniApi.h:34
↓ 21 callersFunctionPidToProcess
HyperHideDrv/Utils.h:17
↓ 13 callersFunctionAppendThreadList
Append and return.If thread struct already exist return it
HyperHideDrv/Hider.cpp:116
↓ 12 callersFunctionQueryHiddenProcess
HyperHideDrv/Hider.cpp:192
↓ 9 callersMethodCallDriver
HyperHide/HyperHideDrv.cpp:25
↓ 9 callersMethodGetDriverHandleValue
HyperHide/HyperHideDrv.cpp:72
↓ 7 callersFunctionIsProcessNameBad
HyperHideDrv/Hider.cpp:561
↓ 7 callersFunctionPsQueryFullProcessImageName
HyperHideDrv/Utils.cpp:50
↓ 6 callersFunctionjson_incref
HyperHide/pluginsdk/jansson/jansson.h:99
↓ 5 callersFunctionGetExportedFunctionAddress
HyperHideDrv/Utils.cpp:260
↓ 4 callersMethodCreateHandleToDriver
HyperHide/HyperHideDrv.cpp:17
↓ 4 callersFunctionFindSignature
HyperHideDrv/Utils.cpp:91
↓ 4 callersFunctionGetCsrssProcess
HyperHideDrv/Utils.cpp:78
↓ 4 callersFunctionGetSectionData
HyperHideDrv/Utils.cpp:144
↓ 4 callersFunctionIsWindowBad
HyperHideDrv/HookHelper.cpp:46
↓ 4 callersFunctionUninitialize
HyperHideDrv/Hider.cpp:289
↓ 4 callersFunctionUpdateOptions
HyperHide/pluginmain.cpp:63
↓ 3 callersFunctionCreateEntry
HyperHideDrv/Hider.cpp:326
↓ 3 callersFunctionGetProcessByName
HyperHideDrv/Utils.cpp:221
↓ 3 callersFunctionGetSyscallNumber
HyperHideDrv/HookHelper.cpp:57
↓ 3 callersFunctionHide
HyperHide/pluginmain.cpp:70
↓ 3 callersFunctionHide
HyperHideDrv/Hider.cpp:438
↓ 3 callersFunctionRemoveEntry
HyperHideDrv/Hider.cpp:347
↓ 3 callersFunctionSetPebDeuggerFlag
HyperHideDrv/Peb.cpp:7
↓ 3 callersMethodSetTargetPid
HyperHide/HyperHideDrv.cpp:77
↓ 3 callersFunctionhook_function
<summary> Hook function via ept and invalidates mappings </summary> <param name="target_address">Address of function which we want to hook</param> <pa
HyperHideDrv/HypervisorGateway.cpp:145
↓ 2 callersFunctionGetProcessInfo
HyperHideDrv/Utils.cpp:180
↓ 2 callersFunctionGetWin32KFunctionAddress
HyperHideDrv/Ssdt.cpp:46
↓ 2 callersFunctionIniLoadString
HyperHide/IniApi.cpp:22
↓ 2 callersFunctionIniSaveString
HyperHide/IniApi.cpp:36
↓ 2 callersMethodSaveProfile
HyperHide/Settings.cpp:51
↓ 2 callersMethodSetProfile
HyperHide/Settings.cpp:111
↓ 2 callersFunctionUnHookKuserSharedData
HyperHideDrv/KuserSharedData.cpp:62
↓ 2 callersFunctionunhook_all_functions
<summary> Unhook all functions and invalidate tlb </summary> <returns> status </returns>
HyperHideDrv/HypervisorGateway.cpp:117
↓ 1 callersMethodAddProfile
HyperHide/Settings.cpp:102
↓ 1 callersFunctionClearBypassProcessFreezeFlag
HyperHideDrv/Utils.cpp:374
↓ 1 callersFunctionClearHeapFlags
HyperHideDrv/Heap.cpp:11
↓ 1 callersFunctionClearPebNtGlobalFlag
HyperHideDrv/Peb.cpp:55
↓ 1 callersFunctionClearProcessBreakOnTerminationFlag
HyperHideDrv/Utils.cpp:473
↓ 1 callersFunctionClearThreadBreakOnTerminationFlags
HyperHideDrv/Utils.cpp:526
↓ 1 callersFunctionClearThreadHideFromDebuggerFlag
HyperHideDrv/Utils.cpp:422
↓ 1 callersFunctionCreateTooltips
HyperHide/Tooltips.cpp:5
↓ 1 callersFunctionDeleteThreadList
HyperHideDrv/Hider.cpp:101
↓ 1 callersFunctionFilterProcesses
HyperHideDrv/HookHelper.cpp:15
↓ 1 callersFunctionGetBegin
HyperHideDrv/KuserSharedData.cpp:126
↓ 1 callersMethodGetCurrentProfileName
HyperHide/Settings.cpp:143
↓ 1 callersFunctionGetKiUserExceptionDispatcherAddress
HyperHideDrv/HookedFunctions.cpp:1868
↓ 1 callersFunctionGetModulePath
HyperHide/pluginmain.cpp:41
↓ 1 callersFunctionGetNtSyscallNumbers
HyperHideDrv/HookHelper.cpp:62
↓ 1 callersFunctionGetOffsets
HyperHideDrv/Utils.cpp:594
↓ 1 callersFunctionGetPfnDatabase
HyperHideDrv/KuserSharedData.cpp:13
↓ 1 callersFunctionGetPteAddress
HyperHideDrv/Utils.cpp:108
↓ 1 callersFunctionGetSsdt
HyperHideDrv/Ssdt.cpp:25
↓ 1 callersFunctionGetUserModeModule
HyperHideDrv/Utils.cpp:304
↓ 1 callersFunctionGetWin32kSyscallNumbers
HyperHideDrv/HookHelper.cpp:160
↓ 1 callersFunctionGetWin32kSyscallNumbersPreRedstone
HyperHideDrv/HookHelper.cpp:118
↓ 1 callersMethodHide
HyperHide/HyperHideDrv.cpp:54
↓ 1 callersFunctionHookKiDispatchException
HyperHideDrv/HookedFunctions.cpp:1883
↓ 1 callersFunctionHookKuserSharedData
HyperHideDrv/KuserSharedData.cpp:35
↓ 1 callersFunctionHookNtSyscall
You can get SyscallIndex on https://j00ru.vexillium.org/syscalls/nt/64/ for 64 bit system nt syscalls And https://j00ru.vexillium.org/syscalls/win32k/
HyperHideDrv/Ssdt.cpp:74
↓ 1 callersFunctionHookNtSyscalls
HyperHideDrv/HookedFunctions.cpp:1775
↓ 1 callersFunctionHookSyscalls
HyperHideDrv/HookedFunctions.cpp:1914
↓ 1 callersFunctionHookWin32kSyscall
HyperHideDrv/Ssdt.cpp:88
↓ 1 callersFunctionHookWin32kSyscalls
HyperHideDrv/HookedFunctions.cpp:1824
↓ 1 callersFunctionIniLoadSectionNames
HyperHide/IniApi.cpp:3
↓ 1 callersFunctionInitialize
HyperHideDrv/Hider.cpp:269
↓ 1 callersFunctionIsDebuggerProcess
HyperHideDrv/Hider.cpp:382
↓ 1 callersFunctionIsDriverHandleHidden
HyperHideDrv/Hider.cpp:542
↓ 1 callersFunctionIsPicoContextNull
HyperHideDrv/Utils.cpp:576
↓ 1 callersFunctionIsProcessWindowBad
HyperHideDrv/Hider.cpp:583
↓ 1 callersFunctionIsProcessWindowClassBad
HyperHideDrv/Hider.cpp:599
↓ 1 callersFunctionIsSetThreadContextRestricted
HyperHideDrv/Utils.cpp:584
↓ 1 callersMethodLoad
HyperHide/Settings.cpp:122
↓ 1 callersFunctionResumeCounterForProcess
HyperHideDrv/Hider.cpp:241
↓ 1 callersFunctionRtlStringContains
HyperHideDrv/Utils.cpp:33
↓ 1 callersFunctionRtlUnicodeStringContains
HyperHideDrv/Utils.cpp:16
↓ 1 callersFunctionSaveOptions
HyperHide/pluginmain.cpp:54
↓ 1 callersFunctionSaveProcessDebugFlags
HyperHideDrv/Utils.cpp:494
↓ 1 callersFunctionSaveProcessHandleTracing
HyperHideDrv/Utils.cpp:509
↓ 1 callersMethodSetHyperVisorVisibility
HyperHide/HyperHideDrv.cpp:41
↓ 1 callersFunctionStopCounterForProcess
HyperHideDrv/Hider.cpp:213
↓ 1 callersMethodToNodeList
HyperHide/pluginsdk/bridgegraph.h:93
↓ 1 callersFunctionTruncateThreadList
HyperHideDrv/Hider.cpp:159
↓ 1 callersFunctionUpdateDelta
HyperHideDrv/KuserSharedData.cpp:152
↓ 1 callersFunctionhypervisor_visible
<summary> Set/Unset presence of hypervisor </summary> <param name="value"> If false, hypervisor is not visible via cpuid interface, If true, it become
HyperHideDrv/HypervisorGateway.cpp:105
↓ 1 callersFunctionjson_decref
HyperHide/pluginsdk/jansson/jansson.h:110
↓ 1 callersFunctiontest_vmcall
<summary> Check if we can communicate with hypervisor </summary> <returns> status </returns>
HyperHideDrv/HypervisorGateway.cpp:165
MethodAddNode
HyperHide/pluginsdk/bridgegraph.h:148
MethodAddParent
HyperHide/pluginsdk/bridgegraph.h:155
FunctionAddress32To64
HyperHide/pluginsdk/dbghelp/dbghelp.h:582
FunctionAddress64To32
HyperHide/pluginsdk/dbghelp/dbghelp.h:594
MethodBridgeCFGraph
HyperHide/pluginsdk/bridgegraph.h:129
MethodBridgeCFNode
HyperHide/pluginsdk/bridgegraph.h:64
MethodBridgeList
\brief BridgeList constructor. \param _freeData (Optional) the free function. */
HyperHide/pluginsdk/bridgelist.h:29
FunctionCBATTACH
HyperHide/pluginmain.cpp:79
FunctionCBDETACH
HyperHide/pluginmain.cpp:95
FunctionCBEXITPROCESS
HyperHide/pluginmain.cpp:105
FunctionCBPAUSEDEBUG
HyperHide/pluginmain.cpp:115
next →1–100 of 177, ranked by callers