MCPcopy Create free account

hub / github.com/CyberForce/Pesidious / functions

Functions960 in github.com/CyberForce/Pesidious

↓ 95 callersMethodget_virtual_address
Returns section virtual address
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:172
↓ 59 callersMethodget_name
Returns section name
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:24
↓ 55 callersMethodempty
Returns true if section has no RAW data
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:101
↓ 53 callersMethodget_directory_rva
Returns directory RVA
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:515
↓ 43 callersMethodget_resource_data_by_id
Returns raw resource data by type, ID and language
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:275
↓ 42 callersMethodset_name
Sets name of function
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:163
↓ 41 callersMethodsection_data_length_from_rva
Returns section TOTAL RAW/VIRTUAL data length from RVA inside section
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:644
↓ 31 callersMethodget_size_of_raw_data
Returns size of section raw data
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:178
↓ 29 callersMethodsection_data_from_rva
Returns corresponding section data pointer from RVA inside section "s" (checks bounds)
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:619
↓ 26 callersMethodget_pe_type
Returns PE type of this image
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1018
↓ 26 callersMethodrva_from_section_offset
RVA from section raw data offset
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1379
↓ 25 callersMethodget_aligned_virtual_size
Calculates aligned virtual section size
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:208
↓ 25 callersMethodremove_resource
portable-executable/portable-executable-library2/pe_lib/pe_resource_manager.cpp:42
↓ 25 callersMethodsection_data_length_from_va
Returns section TOTAL RAW/VIRTUAL data length from VA inside section for PE32
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:655
↓ 24 callersFunctionrebuild_pe
Rebuilds PE image headers If strip_dos_header is true, DOS headers partially will be used for PE headers If change_size_of_headers == true, SizeOfHead
portable-executable/portable-executable-library2/pe_lib/pe_rebuilder.cpp:14
↓ 23 callersMethodget_resource_data_by_name
Returns raw resource data by type, name and language
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:251
↓ 22 callersMethodload
r""" Load a MalGAN object from disk. MalGAN's \p EXPORT_DIR is prepended to the specified filename. :param filename: Pat
malgan/__init__.py:442
↓ 21 callersMethodis_named
Returns true, if entry has name Returns false, if entry has ID
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:125
↓ 21 callersFunctionopen_pe_file
portable-executable/portable-executable-library2/tests/test.h:96
↓ 19 callersMethodget_virtual_size
Returns section virtual size
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:166
↓ 18 callersMethodget_directory_size
Returns directory size
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:521
↓ 18 callersMethodget_raw_data_start_rva
Returns start RVA of TLS raw data
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:17
↓ 18 callersMethodget_rva
Returns RVA
portable-executable/portable-executable-library2/pe_lib/pe_debug.cpp:534
↓ 17 callersMethodget_section_alignment
Returns section alignment
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:174
↓ 16 callersMethodget_callbacks_rva
Returns TLS callbacks RVA
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:35
↓ 16 callersMethodget_timestamp
Returns timestamp
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:210
↓ 15 callersMethodget_file_alignment
Returns file alignment
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:228
↓ 15 callersMethodget_image_base_64
Sets image base for PE32 and PE64 respectively
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1331
↓ 14 callersFunctionget_resources
Returns resources from PE file
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:630
↓ 14 callersMethodreset
(self)
gym_malware/envs/malware_env.py:98
↓ 13 callersMethodget_characteristics
Returns characteristics
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:47
↓ 13 callersMethodget_codepage
Returns resource data codepage
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:21
↓ 13 callersFunctionget_imported_functions
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:257
↓ 13 callersMethodhas_name
Returns true if imported function has name (and hint)
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:139
↓ 13 callersMethodlist_resource_languages
Lists resource languages by resource type and name
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:195
↓ 13 callersMethodreadable
Returns true if section is readable
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:73
↓ 13 callersMethodset_raw_data
Sets raw TLS data
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:125
↓ 12 callersMethodadd_resource
Helper to add/replace resource
portable-executable/portable-executable-library2/pe_lib/pe_resource_manager.cpp:170
↓ 12 callersMethodget_ordinal
Returns ordinal of function (actually, ordinal = hint + ordinal base)
portable-executable/portable-executable-library2/pe_lib/pe_exports.cpp:18
↓ 12 callersMethodget_rva_to_iat
Returns RVA to Import Address Table (IAT)
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:198
↓ 11 callersMethodget_rva_to_original_iat
Returns RVA to Original Import Address Table (Original IAT)
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:204
↓ 11 callersFunctionrebuild_imports
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:264
↓ 11 callersMethodset_directory_rva
Sets directory RVA (just a value of PE header, no moving occurs)
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:527
↓ 11 callersMethodva_to_rva
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1231
↓ 10 callersMethodbuild_original_iat
Returns true if Original import address table (IAT) will be rebuilt
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:34
↓ 10 callersMethodget_id
Returns entry ID
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:112
↓ 10 callersFunctionget_image_config
Returns image config info If image does not have config info, throws an exception
portable-executable/portable-executable-library2/pe_lib/pe_load_config.cpp:320
↓ 10 callersMethodget_language_count
Returns language count of resource by resource type and name
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:139
↓ 10 callersMethodget_raw_data_end_rva
Returns end RVA of TLS raw data
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:23
↓ 10 callersFunctionget_relocations
Get relocation list of pe file, supports one-word sized relocations only If list_absolute_entries = true, IMAGE_REL_BASED_ABSOLUTE will be listed
portable-executable/portable-executable-library2/pe_lib/pe_relocations.cpp:104
↓ 10 callersMethodget_single_cursor_by_id
Returns single cursor data by ID and index in language directory (instead of language) (minimum checks of format correctness)
portable-executable/portable-executable-library2/pe_lib/resource_cursor_icon_reader.cpp:258
↓ 10 callersMethodget_single_icon_by_id
Returns single icon data by ID and index in language directory (instead of language) (minimum checks of format correctness)
portable-executable/portable-executable-library2/pe_lib/resource_cursor_icon_reader.cpp:71
↓ 10 callersMethodrva_to_va
Relative Virtual Address (RVA) to Virtual Address (VA) convertion for PE32
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1252
↓ 10 callersMethodset_directory_size
Sets directory size (just a value of PE header, no moving occurs)
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:533
↓ 10 callersMethodset_id
Sets entry ID
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:182
↓ 9 callersMethodget_image_base_32
Returns image base for PE32 and PE64 respectively
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1325
↓ 9 callersMethodget_ordinal
Returns ordinal of function
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:151
↓ 9 callersMethodget_pointer_to_raw_data
Returns raw file pointer to raw data
portable-executable/portable-executable-library2/pe_lib/pe_debug.cpp:119
↓ 9 callersFunctionget_tls_info
If image does not have TLS, throws an exception
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:131
↓ 9 callersMethodget_type
Returns type of debug info from debug_info_type enumeration
portable-executable/portable-executable-library2/pe_lib/pe_debug.cpp:64
↓ 9 callersMethodsection_attached
Returns true if sectios "s" is already attached to this PE file
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:497
↓ 8 callersMethod__init__
(self)
gym_malware/envs/utils/pefeatures.py:27
↓ 8 callersMethod__init__
(self)
gym_malware/envs/utils/pefeatures2.py:27
↓ 8 callersMethodadd_import
Adds imported function
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:246
↓ 8 callersMethodadd_tls_callback
Adds TLS callback
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:71
↓ 8 callersFunctionget_exported_functions
Returns array of exported functions
portable-executable/portable-executable-library2/pe_lib/pe_exports.cpp:240
↓ 8 callersMethodget_size
Returns size
portable-executable/portable-executable-library2/pe_lib/pe_directory.cpp:22
↓ 8 callersMethodget_size_of_headers
Returns size of headers
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1295
↓ 8 callersMethodincludes_data
Returns true, if entry includes resource_data_entry Returns false, if entry includes resource_directory
portable-executable/portable-executable-library2/pe_lib/pe_resources.cpp:132
↓ 8 callersMethodlist_resource_ids
Lists resource IDs existing in PE file by resource type
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:105
↓ 8 callersFunctionrebuild_exports
Export directory rebuilder info - export information exported_functions_list - list of exported functions exports_section - section where export direc
portable-executable/portable-executable-library2/pe_lib/pe_exports.cpp:479
↓ 8 callersFunctionrebuild_image_config
Image config rebuilder
portable-executable/portable-executable-library2/pe_lib/pe_load_config.cpp:328
↓ 8 callersMethodrecalculate_section_sizes
Helper function to recalculate RAW and virtual section sizes and strip it, if necessary
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:1546
↓ 8 callersMethodset_ordinal
Sets ordinal
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:175
↓ 7 callersFunctioncompare_imports
portable-executable/portable-executable-library2/tests/test_imports/main.cpp:11
↓ 7 callersMethodexpand_section
Expands section raw or virtual size to hold data from specified RVA with specified size Section must be free (not bound to any image) or the last sect
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:365
↓ 7 callersMethodextract
(self, bytez)
gym_malware/envs/utils/pefeatures.py:339
↓ 7 callersMethodforward
r""" Passes a malware tensor and augments it to make it more undetectable by :param x: Malware binary tensor :return: :ma
malgan/__init__.py:433
↓ 7 callersMethodget_bitmap_by_id
Returns bitmap data by ID and index in language directory (instead of language) (minimum checks of format correctness)
portable-executable/portable-executable-library2/pe_lib/resource_bitmap_reader.cpp:33
↓ 7 callersMethodget_number_of_rvas_and_sizes
Returns number of RVA and sizes (number of DATA_DIRECTORY entries)
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:269
↓ 7 callersMethodget_number_of_sections
Returns number of sections from PE header
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:160
↓ 7 callersMethodget_offset_from_section_start
Returns offset from section start where import directory data will be placed
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:28
↓ 7 callersMethodhas_bound_import
Returns true if image has bound import directory
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:589
↓ 7 callersMethodis_forwarded
Returns true if function is forwarded to other library
portable-executable/portable-executable-library2/pe_lib/pe_exports.cpp:48
↓ 7 callersMethodlist_resource_names
Lists resource names existing in PE file by resource type
portable-executable/portable-executable-library2/pe_lib/pe_resource_viewer.cpp:93
↓ 7 callersFunctionrebuild_tls
TLS Rebuilder
portable-executable/portable-executable-library2/pe_lib/pe_tls.cpp:139
↓ 7 callersFunctiontest_relocations
portable-executable/portable-executable-library2/tests/test_relocations/main.cpp:11
↓ 7 callersMethodwriteable
Returns true if section is writeable
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:79
↓ 6 callersMethodadd_lock_prefix_rva
Adds Lock Prefix RVA to list
portable-executable/portable-executable-library2/pe_lib/pe_load_config.cpp:189
↓ 6 callersFunctioncheck_load_config
portable-executable/portable-executable-library2/tests/test_load_config/main.cpp:11
↓ 6 callersMethodget_ep
Returns image entry point
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:257
↓ 6 callersMethodget_hint
Returns hint
portable-executable/portable-executable-library2/pe_lib/pe_imports.cpp:145
↓ 6 callersMethodget_icon_by_name
Returns icon data by name and index in language directory (instead of language) (minimum checks of format correctness)
portable-executable/portable-executable-library2/pe_lib/resource_cursor_icon_reader.cpp:85
↓ 6 callersMethodget_property
Returns version info property value property_name - required property name If throw_if_absent = true, will throw exception if property does not exist
portable-executable/portable-executable-library2/pe_lib/version_info_viewer.cpp:95
↓ 6 callersMethodget_se_handler_table_va
Returns VA of the sorted table of RVAs of each valid, unique handler in the image
portable-executable/portable-executable-library2/pe_lib/pe_load_config.cpp:153
↓ 6 callersMethodis_unicode
Returns true if debug data is UNICODE
portable-executable/portable-executable-library2/pe_lib/pe_debug.cpp:405
↓ 6 callersMethodset_section_virtual_size
Sets section virtual size (actual for the last one of this PE or for unbound section)
portable-executable/portable-executable-library2/pe_lib/pe_base.cpp:335
↓ 6 callersMethodset_size_of_raw_data
Sets size of raw section data
portable-executable/portable-executable-library2/pe_lib/pe_section.cpp:233
↓ 6 callersFunctionshow_output
(line)
mutated_builder.py:72
↓ 6 callersFunctiontest_tls
portable-executable/portable-executable-library2/tests/test_tls/main.cpp:11
next →1–100 of 960, ranked by callers