MCPcopy Create free account

hub / github.com/Mr-Un1k0d3r/EDRs / functions

Functions40 in github.com/Mr-Un1k0d3r/EDRs

⨍ Functions 40◇ Types & classes 0
↓ 37 callersFunctionPatchAPI
unhook_bof.c:46
↓ 20 callersFunctionResolver
elevate_to_system_or_trustedinstaller_bof.c:21
↓ 19 callersFunctionPatchHook
patch_syscall64.c:53
↓ 16 callersFunctionResolver
unhook_bof.c:20
↓ 2 callersFunctionCreateProcessImpersonate
elevate_to_system_or_trustedinstaller.c:131
↓ 2 callersFunctionImpersonateByPID
elevate_to_system_or_trustedinstaller.c:77
↓ 2 callersFunctionImpersonateByPID
elevate_to_system_or_trustedinstaller_bof.c:105
↓ 1 callersFunctionCheckJmp
hook_finder64.c:46
↓ 1 callersFunctionCleanUp
patch_syscall64.c:8
↓ 1 callersFunctionDumpListOfExport
dump_dll_export.c:8
↓ 1 callersFunctionDumpListOfExport
hook_finder64.c:28
↓ 1 callersFunctionElevateSystem
elevate_to_system_or_trustedinstaller.c:117
↓ 1 callersFunctionElevateSystem
elevate_to_system_or_trustedinstaller_bof.c:152
↓ 1 callersFunctionElevateTrustedInstaller
elevate_to_system_or_trustedinstaller.c:124
↓ 1 callersFunctionElevateTrustedInstaller
elevate_to_system_or_trustedinstaller_bof.c:161
↓ 1 callersFunctionGetFileFromDisk
unhook_bof.c:28
↓ 1 callersFunctionGetFileFromDisk
patch_syscall_dynamically64.c:10
↓ 1 callersFunctionGetProcByPID
elevate_to_system_or_trustedinstaller.c:15
↓ 1 callersFunctionGetProcByPID
elevate_to_system_or_trustedinstaller_bof.c:29
↓ 1 callersFunctionGetTrustedInstallerPID
elevate_to_system_or_trustedinstaller.c:35
↓ 1 callersFunctionGetTrustedInstallerPID
elevate_to_system_or_trustedinstaller_bof.c:55
↓ 1 callersFunctionListLoadedDlls
hook_finder64.c:12
↓ 1 callersFunctionListLoadedDlls
listdlls.c:5
↓ 1 callersFunctionListLoadedDlls
dumpbytes.c:5
↓ 1 callersFunctionPatchAPI
patch_syscall_dynamically64.c:24
↓ 1 callersFunctionPatchETW
unhook_bof.c:92
↓ 1 callersFunctionPatchHook
unhook_bof.c:104
↓ 1 callersFunctionPatchHook
patch_syscall_dynamically64.c:60
↓ 1 callersFunctionUnhookIAT
unhookIAT.c:11
Functiongo
elevate_to_system_or_trustedinstaller_bof.c:170
Functiongo
unhook_bof.c:124
Functionmain
patch_syscall64.c:65
Functionmain
dump_dll_export.c:22
Functionmain
elevate_to_system_or_trustedinstaller.c:149
Functionmain
unhookIAT.c:107
Functionmain
get_syscall64.c:4
Functionmain
hook_finder64.c:62
Functionmain
listdlls.c:22
Functionmain
dumpbytes.c:22
Functionmain
patch_syscall_dynamically64.c:72