Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/Kudaes/Unwinder
/ functions
Functions
23 in github.com/Kudaes/Unwinder
⨍
Functions
23
◇
Types & classes
2
↓ 9 callers
Function
get_runtime_table
Returns a pair containing a pointer to the Exception data of an arbitrary module and the size of the corresponding PE section (.pdata). In case that i
unwinder/src/lib.rs:1912
↓ 6 callers
Function
get_frame_size_normal
(module: usize, runtime_function: RuntimeFunction, ignore_rsp_and_bp: bool, base_pointer: &mut bool)
unwinder/src/lib.rs:1412
↓ 5 callers
Function
generate_random_offset
Locate a call instruction in an arbitrary function and return the next instruction's address.
unwinder/src/lib.rs:1366
↓ 4 callers
Function
find_gadget
Function used to find the JMP RBX and ADD RSP gadgets.
unwinder/src/lib.rs:1227
↓ 2 callers
Function
get_frame_of_size
(desired_size: i32, black_list: Vec<usize>, ignore: bool)
unwinder/src/lib.rs:635
↓ 2 callers
Function
get_frame_size_from_address
(address: usize)
unwinder/src/lib.rs:595
↓ 2 callers
Function
get_frame_size_from_address_any_module
(mut module: usize, address: usize)
unwinder/src/lib.rs:544
↓ 2 callers
Function
get_function_size
Use RuntimeFunction's data to get the size of a function.
unwinder/src/lib.rs:1156
↓ 1 callers
Function
find_pattern
(mut start_address: usize, end_address: usize, pattern: Vec<u8>)
unwinder/src/lib.rs:1380
↓ 1 callers
Function
find_pushrbp
Find a function where RBP is pushed to the stack.
unwinder/src/lib.rs:1324
↓ 1 callers
Function
find_setfpreg
Find a function with a setfpreg unwind code.
unwinder/src/lib.rs:1284
↓ 1 callers
Function
get_cookie_value
TLS is used to store the main module's/BaseThreadInitThunk's frame top address in the stack. This allows to efficiently concatenate the spoofing proce
unwinder/src/lib.rs:1125
↓ 1 callers
Function
get_current_runtime_table
(mut base_address: usize)
unwinder/src/lib.rs:813
↓ 1 callers
Function
get_desirable_return_address
This function returns the main module's frame address in the stack. If it fails to do so, it will return the BaseThreadInitThunk's frame address inste
unwinder/src/lib.rs:1055
↓ 1 callers
Function
get_frame_size_with_push_rbp
(module: usize, runtime_function: RuntimeFunction, found: &mut bool, push_offset: &mut i32, frame_size: &mut i
unwinder/src/lib.rs:1710
↓ 1 callers
Function
get_frame_size_with_setfpreg
(module: usize, runtime_function: RuntimeFunction, found: &mut bool)
unwinder/src/lib.rs:1557
↓ 1 callers
Function
get_pe_baseaddress
()
unwinder/src/lib.rs:832
Function
get_info_structure
(current_size: usize)
unwinder/src/lib.rs:492
Function
main
()
unwinder/build.rs:1
Function
prepare_syscall
Don't call this function directly. Use indirect_syscall!() macro instead.
unwinder/src/lib.rs:1185
Function
replace_and_call
(mut args: Vec<*mut c_void>, is_syscall: bool, id: u32)
unwinder/src/lib.rs:740
Function
spoof_and_call
Don't call this function directly, use call_function!() and indirect_syscall!() macros instead.
unwinder/src/lib.rs:970
Function
start_stack_replacement
(base_address: usize)
unwinder/src/lib.rs:521