Functions — github.com/Nordgaren/stealth-win

hub / github.com/Nordgaren/stealth-win / functions

Functions264 in github.com/Nordgaren/stealth-win

⨍ Functions 264◇ Types & classes 52

↓ 76 callersMethodlen

(&self)

src/svec.rs:165

↓ 50 callersFunctionGetModuleHandleX

(xor_string: &XORString)

src/windows/kernel32/mod.rs:556

↓ 49 callersFunctionGetProcAddressX

(base_address: usize, xor_string: &XORString)

src/windows/kernel32/mod.rs:650

↓ 34 callersMethodas_ptr

(&self)

src/ptr.rs:16

↓ 30 callersMethodoptional_header32

(&self)

src/windows/pe/mod.rs:537

↓ 28 callersMethodpush

(&mut self, value: T)

src/svec.rs:51

↓ 22 callersMethodoptional_header64

(&self)

src/windows/pe/mod.rs:541

↓ 18 callersMethodbase_address

(&self)

src/windows/pe/mod.rs:40

↓ 18 callersMethodrva_to_foa

(&self, rva: u32)

src/windows/pe/mod.rs:235

↓ 15 callersFunctionGetModuleHandleInternal

These two implementations of GetModuleHandle were inspired by reenz0h of Sektor7! credits: reenz0h - @SEKTOR7net, zerosum0x0, and speedi13

src/windows/kernel32/mod.rs:529

↓ 15 callersFunctionGetProcAddressInternal

These two implementations of GetProcAddress were inspired by reenz0h. credits: reenz0h - @SEKTOR7net, zerosum0x0, and speedi13

src/windows/kernel32/mod.rs:585

↓ 14 callersMethodas_mut_ptr

(&self)

src/ptr.rs:70

↓ 14 callersFunctionread

(path: &[u8])

src/std/fs.rs:18

↓ 12 callersMethodas_slice

(&self)

src/svec.rs:149

↓ 12 callersFunctiongenerate_random_bytes

(num_bytes: usize)

build_src/build_util.rs:297

↓ 12 callersFunctionstrlen

(s: *const u8)

src/util.rs:104

↓ 11 callersFunctionGetModuleHandleA

(lpModuleName: *const u8)

src/windows/kernel32/mod.rs:997

↓ 10 callersFunctionget_resource_bytes

(resource_id: u32, offset: usize, len: usize)

src/util.rs:19

↓ 10 callersMethodnt_headers

(&self)

src/windows/pe/mod.rs:194

↓ 8 callersFunctionget_system_dir

Might make a String class that doesn't use imports, for these two `get_system_dir` methods.

src/util.rs:277

↓ 7 callersMethoditer

(&self)

src/svec.rs:173

↓ 6 callersFunctionCryptAcquireContextW

( phProv: *mut usize, szContainer: usize, szProvider: *const u16, dwProvType: u32, dwFlags

src/windows/advapi/mod.rs:84

↓ 6 callersFunctionCryptCreateHash

( phProv: usize, ALG_ID: u32, hKey: usize, dwFlags: u32, phHash: *mut usize, )

src/windows/advapi/mod.rs:106

↓ 6 callersFunctionCryptHashData

(hHash: usize, pbData: *const u8, dwDataLen: u32, dwFlags: u32)

src/windows/advapi/mod.rs:239

↓ 6 callersFunctionGetProcAddress

(hModule: usize, lpProcName: *const u8)

src/windows/kernel32/mod.rs:1015

↓ 6 callersMethodas_mut_ptr

(&self)

src/svec.rs:145

↓ 6 callersMethodas_ptr

(&self)

src/svec.rs:141

↓ 6 callersMethodas_str

(&self)

src/svec.rs:180

↓ 6 callersMethodoptional_header

(&self)

src/windows/pe/mod.rs:510

↓ 6 callersMethodto_svec

(&self)

src/svec.rs:263

↓ 5 callersFunctioncopy_buffer

Because you can't use the normal rust copy function in an unmapped PE, for some reason.

src/util.rs:257

↓ 5 callersMethodget_export_rva

(&self, export_name: &[u8])

src/windows/pe/mod.rs:345

↓ 5 callersMethodresize

(&mut self, new_len: usize, value: T)

src/svec.rs:99

↓ 4 callersFunctionCryptDeriveKey

( hHash: usize, Algid: u32, hBaseData: usize, dwFlags: u32, phKey: *mut usize, )

src/windows/advapi/mod.rs:147

↓ 4 callersFunctionCryptDestroyHash

(hHash: usize)

src/windows/advapi/mod.rs:181

↓ 4 callersFunctionCryptDestroyKey

(hKey: usize)

src/windows/advapi/mod.rs:165

↓ 4 callersFunctionCryptGetKeyParam

( hKey: usize, dwParam: u32, pbData: *mut u8, pbDataLen: *mut u32, dwFlags: u32, )

src/windows/advapi/mod.rs:217

↓ 4 callersFunctionCryptReleaseContext

(hProv: usize, dwFlags: u32)

src/windows/advapi/mod.rs:251

↓ 4 callersFunctionCryptSetKeyParam

(hKey: usize, dwParam: u32, pbData: *const u8, dwFlags: u32)

src/windows/advapi/mod.rs:267

↓ 4 callersMethodas_mut_slice

(&self)

src/svec.rs:153

↓ 4 callersMethoddata_directory

(&self)

src/windows/pe/mod.rs:745

↓ 4 callersMethodis_mapped

(&self)

src/windows/pe/mod.rs:48

↓ 4 callersMethodset_len

(&mut self, new_len: usize)

src/svec.rs:135

↓ 4 callersMethodtruncate

(&mut self, len: usize)

src/svec.rs:123

↓ 3 callersFunctionGetProcessHeap

()

src/windows/kernel32/mod.rs:1028

↓ 3 callersFunctionaes_encrypt_bytes

(bytes: &[u8], key: &[u8], iv: &[u8])

build_src/build_util.rs:126

↓ 3 callersFunctioncase_insensitive_compare_strs_as_bytes

&[u8] is the second easiest way to deal with C-style strings in Rust. Here we will take in the two strings as &[u8], and will compare them byte by byt

src/util.rs:229

↓ 3 callersMethodgrow

(&mut self, additional: usize)

src/svec.rs:72

↓ 2 callersFunctionCryptDecrypt

( hKey: usize, hHash: usize, Final: u32, dwFlags: u32, pbData: *mut u8, pdwDataLen: *m

src/windows/advapi/mod.rs:128

↓ 2 callersFunctionCryptEncrypt

( hKey: usize, hHash: usize, Final: u32, dwFlags: u32, pbData: *mut u8, pdwDataLen: *m

src/windows/advapi/mod.rs:197

↓ 2 callersFunctionGetLastError

()

src/windows/kernel32/mod.rs:984

↓ 2 callersFunctionGetSystemDirectoryA

(lpBuffer: *mut u8, uSize: u32)

src/windows/kernel32/mod.rs:1041

↓ 2 callersFunctionGetSystemDirectoryW

(lpBuffer: *mut u16, uSize: u32)

src/windows/kernel32/mod.rs:1058

↓ 2 callersFunctionHeapAlloc

(hHeap: usize, dwFlags: u32, dwBytes: usize)

src/windows/kernel32/mod.rs:1075

↓ 2 callersFunctionVirtualFree

(lpAddress: usize, dwSize: usize, dwFreeType: u32)

src/windows/kernel32/mod.rs:1325

↓ 2 callersMethodaddress

(&self)

src/windows/pe/mod.rs:186

↓ 2 callersFunctionallocate

(layout: Layout, zeroed: bool)

src/std/alloc.rs:32

↓ 2 callersMethodcapacity

(&self)

src/svec.rs:169

↓ 2 callersMethodcheck_mapped

(&self)

src/windows/pe/mod.rs:118

↓ 2 callersFunctioncompare_xor_str_and_str_bytes

&[u8] is the second easiest way to deal with C-style strings in Rust. Here we will take in the xor'd string as bytes, a CString from the place in memo

src/util.rs:142

↓ 2 callersFunctionget_dll_base

()

src/util.rs:30

↓ 2 callersFunctionget_entry_offset_by_id

( resource_directory_table: &RESOURCE_DIRECTORY_TABLE, id: u32, )

src/windows/pe/mod.rs:793

↓ 2 callersMethodget_function_ordinal

(&self, function_name: &[u8])

src/windows/pe/mod.rs:416

↓ 2 callersFunctionget_fwd_addr

(proc_address: usize)

src/windows/kernel32/mod.rs:700

↓ 2 callersMethodget_pe_resource

(&self, resource_id: u32)

src/windows/pe/mod.rs:256

↓ 2 callersMethodinto_iter

(self)

src/svec.rs:203

↓ 2 callersMethodnt_headers32

(&self)

src/windows/pe/mod.rs:494

↓ 2 callersMethodnumber_of_rva_and_sizes

(&self)

src/windows/pe/mod.rs:737

↓ 2 callersMethodsection_headers

(&self)

src/windows/pe/mod.rs:206

↓ 2 callersMethodsize_of

(&self)

src/windows/pe/mod.rs:522

↓ 2 callersFunctionsread_file_from_handle

(file_handle: usize)

src/std/fs.rs:76

↓ 1 callersFunctionCreateFileA

( lpFileName: *const u8, dwDesiredAccess: u32, dwShareMode: u32, lpSecurityAttributes: *const

src/windows/kernel32/mod.rs:749

↓ 1 callersFunctionCreateFileW

( lpFileName: *const u16, dwDesiredAccess: u32, dwShareMode: u32, lpSecurityAttributes: *const

src/windows/kernel32/mod.rs:778

↓ 1 callersFunctionGetFileSize

(hFile: usize, lpFileSizeHigh: *const u32)

src/windows/kernel32/mod.rs:956

↓ 1 callersFunctionHeapFree

(hHeap: usize, dwFlags: u32, lpMem: usize)

src/windows/kernel32/mod.rs:1088

↓ 1 callersFunctionHeapReAlloc

(hHeap: usize, dwFlags: u32, lpMem: usize, dwBytes: usize)

src/windows/kernel32/mod.rs:1101

↓ 1 callersFunctionLoadLibraryA

(lpLibFileName: *const u8)

src/windows/kernel32/mod.rs:1124

↓ 1 callersFunctionNtReadFile

( FileHandle: usize, Event: usize, ApcRoutine: u32, ApcContext: u32, IoStatusBlock: *mut I

src/windows/ntdll/mod.rs:404

↓ 1 callersFunctionVirtualAlloc

( lpAddress: usize, dwSize: usize, flAllocationType: u32, flProtect: u32, )

src/windows/kernel32/mod.rs:1288

↓ 1 callersFunctionWaitForSingleObject

(hProcess: usize, dwMilliseconds: u32)

src/windows/kernel32/mod.rs:1387

↓ 1 callersFunctionaes_decrypt_bytes

(bytes: &mut [u8], key: &[u8], iv: &[u8])

src/crypto_util.rs:83

↓ 1 callersMethodbuild

(&self)

build_src/resource_gen.rs:321

↓ 1 callersMethodbuild_consts_file

(&self)

build_src/resource_gen.rs:217

↓ 1 callersMethodbuild_resource_file

(&mut self)

build_src/resource_gen.rs:183

↓ 1 callersMethodbuild_resource_headers

(&self)

build_src/resource_gen.rs:302

↓ 1 callersMethodcheck_mapped_by_section

(&self)

src/windows/pe/mod.rs:177

↓ 1 callersMethodcheck_mapped_export_dir

(&self, data_dir: &[IMAGE_DATA_DIRECTORY])

src/windows/pe/mod.rs:150

↓ 1 callersFunctioncompare_str_and_w_str_bytes

This function assumes that the wide string version of each character in the string is just the u16 version of the ASCII character. Here we will take i

src/util.rs:195

↓ 1 callersMethodextend_with

(&mut self, n: usize, value: T)

src/svec.rs:111

↓ 1 callersFunctionfind_char

(string: &[u8], char: u8)

src/util.rs:98

↓ 1 callersFunctionget_aes_padding

(slice: &[u8])

src/crypto_util.rs:150

↓ 1 callersFunctionget_aes_padding

(slice: &[u8])

build_src/build_util.rs:268

↓ 1 callersFunctionget_function_ordinal

(dll_name: &[u8], function_name: &[u8])

src/windows/kernel32/tests.rs:41

↓ 1 callersFunctionget_iv_len

()

build_src/build_util.rs:75

↓ 1 callersFunctionget_key_len

()

build_src/build_util.rs:17

↓ 1 callersFunctionget_resource_data_entry

( resource_directory_table: &RESOURCE_DIRECTORY_TABLE, resource_id: u32, )

src/windows/pe/mod.rs:762

↓ 1 callersFunctionget_xor_encrypted_bytes

(offset: usize, key_offset: usize, len: usize)

src/crypto_util.rs:139

↓ 1 callersFunctionmake_const_name

(string: &str)

build_src/build_util.rs:316

↓ 1 callersMethodpop

(&mut self)

src/svec.rs:62

↓ 1 callersFunctionread_file_to_end

(file_handle: usize, buffer: &mut [u8])

src/std/fs.rs:92

next →1–100 of 264, ranked by callers