MCPcopy Create free account

hub / github.com/Hagrid29/PELoader / functions

Functions79 in github.com/Hagrid29/PELoader

↓ 16 callersFunctionMultiply
PELoader/PELoader/AES.cpp:308
↓ 14 callersFunctionxtime
PELoader/PELoader/AES.cpp:285
↓ 9 callersFunctiongetSBoxValue
/ Private functions: */ /
PELoader/PELoader/AES.cpp:144
↓ 6 callersFunctionAddRoundKey
This function adds the round key to state. The round key is added to the state by an XOR function.
PELoader/PELoader/AES.cpp:228
↓ 6 callersFunctionphantom_hollower
PELoader/PELoader/PELoader.cpp:398
↓ 5 callersFunctionoverwrite_mapping
PELoader/PELoader/PELoader.cpp:70
↓ 4 callersFunctionKeyExpansion
This function produces Nb(Nr+1) round keys. The round keys are used in each round to decrypt the states.
PELoader/PELoader/AES.cpp:155
↓ 4 callersFunctionprepare_payload
PELoader/PELoader/PELoader.cpp:19
↓ 4 callersFunctionrun_implant
PELoader/PELoader/PELoader.cpp:106
↓ 3 callersFunctionCipher
Cipher is the main function that encrypts the PlainText.
PELoader/PELoader/AES.cpp:392
↓ 3 callersFunctionInvCipher
PELoader/PELoader/AES.cpp:417
↓ 3 callersFunctionget_nt_hrds
PELoader/PELoader/pe_hdrs_helper.cpp:3
↓ 3 callersFunctionprintHelp
PELoader/PELoader/PELoader.cpp:485
↓ 3 callersMethodsize
PELoader/libpeconv/include/peconv/imports_loader.h:60
↓ 2 callersFunctionInvShiftRows
PELoader/PELoader/AES.cpp:362
↓ 2 callersFunctionInvSubBytes
The SubBytes Function Substitutes the values in the state matrix with values in an S-box.
PELoader/PELoader/AES.cpp:350
↓ 2 callersFunctionShiftRows
The ShiftRows() function shifts the rows in the state to the left. Each row is shifted with different offset. Offset = Row number. So the first row is
PELoader/PELoader/AES.cpp:257
↓ 2 callersFunctionSubBytes
The SubBytes Function Substitutes the values in the state matrix with values in an S-box.
PELoader/PELoader/AES.cpp:242
↓ 2 callersFunctionXorWithIv
PELoader/PELoader/AES.cpp:476
↓ 2 callersFunctiondll_hollower
PELoader/PELoader/PELoader.cpp:321
↓ 2 callersFunctionencryptFile
PELoader/PELoader/util.cpp:210
↓ 2 callersFunctionopen_file
PELoader/PELoader/delete_pending_file.cpp:12
↓ 2 callersFunctionundo_overloading
PELoader/PELoader/PELoader.cpp:130
↓ 1 callersFunctionAES_ECB_decrypt
PELoader/PELoader/AES.cpp:462
↓ 1 callersFunctionAES_ECB_encrypt
PELoader/PELoader/AES.cpp:449
↓ 1 callersFunctionClearContent
PELoader/PELoader/delete_pending_file.cpp:101
↓ 1 callersFunctionDecryptString
PELoader/PELoader/util.cpp:94
↓ 1 callersFunctionEncryptString
PELoader/PELoader/util.cpp:58
↓ 1 callersFunctionInvMixColumns
MixColumns function mixes the columns of the state matrix. The method used to multiply may be difficult to understand for the inexperienced. Please us
PELoader/PELoader/AES.cpp:329
↓ 1 callersFunctionMixColumns
MixColumns function mixes the columns of the state matrix
PELoader/PELoader/AES.cpp:291
↓ 1 callersFunctiondecryptFile
PELoader/PELoader/util.cpp:233
↓ 1 callersFunctiongetSBoxInvert
PELoader/PELoader/AES.cpp:149
↓ 1 callersFunctiongetSizeOfImage
PELoader/PELoader/util.cpp:144
↓ 1 callersFunctionget_entry_point_rva
PELoader/PELoader/pe_hdrs_helper.cpp:41
↓ 1 callersFunctionget_nt_hdr_architecture
PELoader/PELoader/pe_hdrs_helper.cpp:32
↓ 1 callersFunctionget_nt_headers
PELoader/PELoader/util.cpp:121
↓ 1 callersFunctionget_pe_architecture
PELoader/PELoader/pe_hdrs_helper.cpp:23
↓ 1 callersFunctionis_compatibile
PELoader/PELoader/util.cpp:40
↓ 1 callersFunctionmake_section_from_delete_pending_file
PELoader/PELoader/delete_pending_file.cpp:40
↓ 1 callersFunctionmake_section_from_overwrite_file
PELoader/PELoader/delete_pending_file.cpp:124
↓ 1 callersFunctionmake_transacted_section
PELoader/PELoader/transacted_file.cpp:13
↓ 1 callersFunctionmap_dll_image
PELoader/PELoader/map_dll_image.cpp:6
↓ 1 callersFunctionmapped_loader
PELoader/PELoader/PELoader.cpp:249
↓ 1 callersFunctionprivate_loader
PELoader/PELoader/PELoader.cpp:205
↓ 1 callersFunctionsearch_hollow_dll
PELoader/PELoader/PELoader.cpp:155
↓ 1 callersFunctionset_sections_access
PELoader/PELoader/PELoader.cpp:46
↓ 1 callersFunctiontranslate_protect
PELoader/PELoader/util.cpp:10
FunctionAES_CBC_decrypt_buffer
PELoader/PELoader/AES.cpp:522
FunctionAES_CBC_encrypt_buffer
PELoader/PELoader/AES.cpp:485
MethodDllInfo
PELoader/libpeconv/include/peconv/exports_mapper.h:23
MethodExportedFunc
default constructor:
PELoader/libpeconv/include/peconv/exported_func.h:76
MethodImportThunksCallback
PELoader/libpeconv/include/peconv/imports_loader.h:23
MethodImportedDllCoverage
A constructor of an object of ImportedDllCoverage class. \param _addresses : the list of filled imports (VAs): the addresses to be covered
PELoader/libpeconv/include/peconv/fix_imports.h:60
MethodImportsCollection
PELoader/libpeconv/include/peconv/imports_loader.h:48
MethodImportsUneraser
PELoader/libpeconv/include/peconv/imports_uneraser.h:27
MethodImpsNotCovered
PELoader/libpeconv/include/peconv/fix_imports.h:31
MethodPatchBackup
Creates an empty backup. */
PELoader/libpeconv/include/peconv/hooks.h:26
MethodRelocBlockCallback
PELoader/libpeconv/include/peconv/relocate.h:20
Methodadd_hook
Define a function that will be replaced. \param name : a name of the function that will be replaced \param function : an address of th
PELoader/libpeconv/include/peconv/hooks.h:83
Methodadd_to_lookup
Appends the given DLL to the lookup table of exported functions. Returns the number of functions exported from this DLL (not forwarded). \para
PELoader/libpeconv/include/peconv/exports_mapper.h:80
MethodassociateVaAndFunc
Add a function and a VA into a mutual mapping. */
PELoader/libpeconv/include/peconv/exports_mapper.h:195
Methodcount
Number of stored records */
PELoader/libpeconv/include/peconv/fix_imports.h:37
MethoddeleteBackup
Destroys the backup and resets internal fields. */
PELoader/libpeconv/include/peconv/hooks.h:38
Methodfind_dll_base_by_func_va
Retrieve the base of the DLL containing the given function. If not found, returns 0. */
PELoader/libpeconv/include/peconv/exports_mapper.h:113
Methodfind_export_by_va
Find an Exported Function that can be mapped to the given VA, */
PELoader/libpeconv/include/peconv/exports_mapper.h:167
Methodfind_exports_by_va
Find the set of Exported Functions that can be mapped to the given VA. Includes forwarders, and function aliases. */
PELoader/libpeconv/include/peconv/exports_mapper.h:100
Methodget_dll_fullname
Retrieve the full name of the DLL (including the extension) using its short name (without the extension). */
PELoader/libpeconv/include/peconv/exports_mapper.h:156
Methodget_dll_path
Retrieve the full path of the DLL with the given module base. */
PELoader/libpeconv/include/peconv/exports_mapper.h:133
Functionget_type_directory
PELoader/libpeconv/include/peconv/pe_hdrs_helper.h:87
MethodisBackup
Checks if the buffer was filled. */
PELoader/libpeconv/include/peconv/hooks.h:60
MethodisMappingComplete
Check if the functions mapping is complete. \return the status: true if all the addresses are mapped to specific exports, false if not *
PELoader/libpeconv/include/peconv/fix_imports.h:85
MethodisValid
PELoader/libpeconv/include/peconv/exported_func.h:125
Functionmain
PELoader/PELoader/PELoader.cpp:518
Methodoperator <
Compare two functions with each other. Gives the priority to the named functions: if one of the compared functions is unnamed, the named one i
PELoader/libpeconv/include/peconv/exported_func.h:89
Methodoperator<
PELoader/libpeconv/include/peconv/exports_mapper.h:46
Functionpe_is64bit
PELoader/PELoader/pe_hdrs_helper.cpp:59
Method~ImportsCollection
PELoader/libpeconv/include/peconv/imports_loader.h:49
Method~ImpsNotCovered
PELoader/libpeconv/include/peconv/fix_imports.h:32
Method~PatchBackup
PELoader/libpeconv/include/peconv/hooks.h:31