Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/Hagrid29/PELoader
/ functions
Functions
79 in github.com/Hagrid29/PELoader
⨍
Functions
79
◇
Types & classes
132
↓ 16 callers
Function
Multiply
PELoader/PELoader/AES.cpp:308
↓ 14 callers
Function
xtime
PELoader/PELoader/AES.cpp:285
↓ 9 callers
Function
getSBoxValue
/ Private functions: */ /
PELoader/PELoader/AES.cpp:144
↓ 6 callers
Function
AddRoundKey
This function adds the round key to state. The round key is added to the state by an XOR function.
PELoader/PELoader/AES.cpp:228
↓ 6 callers
Function
phantom_hollower
PELoader/PELoader/PELoader.cpp:398
↓ 5 callers
Function
overwrite_mapping
PELoader/PELoader/PELoader.cpp:70
↓ 4 callers
Function
KeyExpansion
This function produces Nb(Nr+1) round keys. The round keys are used in each round to decrypt the states.
PELoader/PELoader/AES.cpp:155
↓ 4 callers
Function
prepare_payload
PELoader/PELoader/PELoader.cpp:19
↓ 4 callers
Function
run_implant
PELoader/PELoader/PELoader.cpp:106
↓ 3 callers
Function
Cipher
Cipher is the main function that encrypts the PlainText.
PELoader/PELoader/AES.cpp:392
↓ 3 callers
Function
InvCipher
PELoader/PELoader/AES.cpp:417
↓ 3 callers
Function
get_nt_hrds
PELoader/PELoader/pe_hdrs_helper.cpp:3
↓ 3 callers
Function
printHelp
PELoader/PELoader/PELoader.cpp:485
↓ 3 callers
Method
size
PELoader/libpeconv/include/peconv/imports_loader.h:60
↓ 2 callers
Function
InvShiftRows
PELoader/PELoader/AES.cpp:362
↓ 2 callers
Function
InvSubBytes
The SubBytes Function Substitutes the values in the state matrix with values in an S-box.
PELoader/PELoader/AES.cpp:350
↓ 2 callers
Function
ShiftRows
The ShiftRows() function shifts the rows in the state to the left. Each row is shifted with different offset. Offset = Row number. So the first row is
PELoader/PELoader/AES.cpp:257
↓ 2 callers
Function
SubBytes
The SubBytes Function Substitutes the values in the state matrix with values in an S-box.
PELoader/PELoader/AES.cpp:242
↓ 2 callers
Function
XorWithIv
PELoader/PELoader/AES.cpp:476
↓ 2 callers
Function
dll_hollower
PELoader/PELoader/PELoader.cpp:321
↓ 2 callers
Function
encryptFile
PELoader/PELoader/util.cpp:210
↓ 2 callers
Function
open_file
PELoader/PELoader/delete_pending_file.cpp:12
↓ 2 callers
Function
undo_overloading
PELoader/PELoader/PELoader.cpp:130
↓ 1 callers
Function
AES_ECB_decrypt
PELoader/PELoader/AES.cpp:462
↓ 1 callers
Function
AES_ECB_encrypt
PELoader/PELoader/AES.cpp:449
↓ 1 callers
Function
ClearContent
PELoader/PELoader/delete_pending_file.cpp:101
↓ 1 callers
Function
DecryptString
PELoader/PELoader/util.cpp:94
↓ 1 callers
Function
EncryptString
PELoader/PELoader/util.cpp:58
↓ 1 callers
Function
InvMixColumns
MixColumns function mixes the columns of the state matrix. The method used to multiply may be difficult to understand for the inexperienced. Please us
PELoader/PELoader/AES.cpp:329
↓ 1 callers
Function
MixColumns
MixColumns function mixes the columns of the state matrix
PELoader/PELoader/AES.cpp:291
↓ 1 callers
Function
decryptFile
PELoader/PELoader/util.cpp:233
↓ 1 callers
Function
getSBoxInvert
PELoader/PELoader/AES.cpp:149
↓ 1 callers
Function
getSizeOfImage
PELoader/PELoader/util.cpp:144
↓ 1 callers
Function
get_entry_point_rva
PELoader/PELoader/pe_hdrs_helper.cpp:41
↓ 1 callers
Function
get_nt_hdr_architecture
PELoader/PELoader/pe_hdrs_helper.cpp:32
↓ 1 callers
Function
get_nt_headers
PELoader/PELoader/util.cpp:121
↓ 1 callers
Function
get_pe_architecture
PELoader/PELoader/pe_hdrs_helper.cpp:23
↓ 1 callers
Function
is_compatibile
PELoader/PELoader/util.cpp:40
↓ 1 callers
Function
make_section_from_delete_pending_file
PELoader/PELoader/delete_pending_file.cpp:40
↓ 1 callers
Function
make_section_from_overwrite_file
PELoader/PELoader/delete_pending_file.cpp:124
↓ 1 callers
Function
make_transacted_section
PELoader/PELoader/transacted_file.cpp:13
↓ 1 callers
Function
map_dll_image
PELoader/PELoader/map_dll_image.cpp:6
↓ 1 callers
Function
mapped_loader
PELoader/PELoader/PELoader.cpp:249
↓ 1 callers
Function
private_loader
PELoader/PELoader/PELoader.cpp:205
↓ 1 callers
Function
search_hollow_dll
PELoader/PELoader/PELoader.cpp:155
↓ 1 callers
Function
set_sections_access
PELoader/PELoader/PELoader.cpp:46
↓ 1 callers
Function
translate_protect
PELoader/PELoader/util.cpp:10
Function
AES_CBC_decrypt_buffer
PELoader/PELoader/AES.cpp:522
Function
AES_CBC_encrypt_buffer
PELoader/PELoader/AES.cpp:485
Method
DllInfo
PELoader/libpeconv/include/peconv/exports_mapper.h:23
Method
ExportedFunc
default constructor:
PELoader/libpeconv/include/peconv/exported_func.h:76
Method
ImportThunksCallback
PELoader/libpeconv/include/peconv/imports_loader.h:23
Method
ImportedDllCoverage
A constructor of an object of ImportedDllCoverage class. \param _addresses : the list of filled imports (VAs): the addresses to be covered
PELoader/libpeconv/include/peconv/fix_imports.h:60
Method
ImportsCollection
PELoader/libpeconv/include/peconv/imports_loader.h:48
Method
ImportsUneraser
PELoader/libpeconv/include/peconv/imports_uneraser.h:27
Method
ImpsNotCovered
PELoader/libpeconv/include/peconv/fix_imports.h:31
Method
PatchBackup
Creates an empty backup. */
PELoader/libpeconv/include/peconv/hooks.h:26
Method
RelocBlockCallback
PELoader/libpeconv/include/peconv/relocate.h:20
Method
add_hook
Define a function that will be replaced. \param name : a name of the function that will be replaced \param function : an address of th
PELoader/libpeconv/include/peconv/hooks.h:83
Method
add_to_lookup
Appends the given DLL to the lookup table of exported functions. Returns the number of functions exported from this DLL (not forwarded). \para
PELoader/libpeconv/include/peconv/exports_mapper.h:80
Method
associateVaAndFunc
Add a function and a VA into a mutual mapping. */
PELoader/libpeconv/include/peconv/exports_mapper.h:195
Method
count
Number of stored records */
PELoader/libpeconv/include/peconv/fix_imports.h:37
Method
deleteBackup
Destroys the backup and resets internal fields. */
PELoader/libpeconv/include/peconv/hooks.h:38
Method
find_dll_base_by_func_va
Retrieve the base of the DLL containing the given function. If not found, returns 0. */
PELoader/libpeconv/include/peconv/exports_mapper.h:113
Method
find_export_by_va
Find an Exported Function that can be mapped to the given VA, */
PELoader/libpeconv/include/peconv/exports_mapper.h:167
Method
find_exports_by_va
Find the set of Exported Functions that can be mapped to the given VA. Includes forwarders, and function aliases. */
PELoader/libpeconv/include/peconv/exports_mapper.h:100
Method
get_dll_fullname
Retrieve the full name of the DLL (including the extension) using its short name (without the extension). */
PELoader/libpeconv/include/peconv/exports_mapper.h:156
Method
get_dll_path
Retrieve the full path of the DLL with the given module base. */
PELoader/libpeconv/include/peconv/exports_mapper.h:133
Function
get_type_directory
PELoader/libpeconv/include/peconv/pe_hdrs_helper.h:87
Method
isBackup
Checks if the buffer was filled. */
PELoader/libpeconv/include/peconv/hooks.h:60
Method
isMappingComplete
Check if the functions mapping is complete. \return the status: true if all the addresses are mapped to specific exports, false if not *
PELoader/libpeconv/include/peconv/fix_imports.h:85
Method
isValid
PELoader/libpeconv/include/peconv/exported_func.h:125
Function
main
PELoader/PELoader/PELoader.cpp:518
Method
operator <
Compare two functions with each other. Gives the priority to the named functions: if one of the compared functions is unnamed, the named one i
PELoader/libpeconv/include/peconv/exported_func.h:89
Method
operator<
PELoader/libpeconv/include/peconv/exports_mapper.h:46
Function
pe_is64bit
PELoader/PELoader/pe_hdrs_helper.cpp:59
Method
~ImportsCollection
PELoader/libpeconv/include/peconv/imports_loader.h:49
Method
~ImpsNotCovered
PELoader/libpeconv/include/peconv/fix_imports.h:32
Method
~PatchBackup
PELoader/libpeconv/include/peconv/hooks.h:31