Functions — github.com/Nordgaren/stealth-win

hub / github.com/Nordgaren/stealth-win / functions

Functions264 in github.com/Nordgaren/stealth-win

⨍ Functions 264◇ Types & classes 52

↓ 1 callersFunctionread_to_buffer

(file_handle: usize, buffer: *mut u8, len: u32, offset: usize)

src/std/fs.rs:111

↓ 1 callersFunctionrealloc_fallback

( alloc: &NoImportAllocator, ptr: *mut u8, old_layout: Layout, new_size: usize, )

src/std/alloc.rs:78

↓ 1 callersFunctionstrlenw

Need internal function for this in unmapped PE state.

src/util.rs:119

↓ 1 callersFunctionxor_encrypt_bytes

(bytes: &[u8], key: &[u8])

build_src/build_util.rs:283

FunctionAllocConsole

()

src/windows/kernel32/mod.rs:727

FunctionCloseHandle

(hObject: usize)

src/windows/kernel32/mod.rs:736

FunctionCreateProcessA

( lpApplicationName: *const u8, lpCommandLine: *const u8, lpProcessAttributes: *const SECURITY_ATT

src/windows/kernel32/mod.rs:807

FunctionCreateProcessW

( lpApplicationName: *const u16, lpCommandLine: *const u8, lpProcessAttributes: *const SECURITY_AT

src/windows/kernel32/mod.rs:842

FunctionCreateRemoteThread

( hProcess: usize, lpThreadAttributes: usize, dwStackSize: usize, lpStartAddress: usize, l

src/windows/kernel32/mod.rs:877

FunctionCreateToolhelp32Snapshot

(dwFlags: u32, th32ProcessID: u32)

src/windows/kernel32/mod.rs:910

FunctionFreeConsole

()

src/windows/kernel32/mod.rs:928

FunctionGetCurrentProcess

()

src/windows/kernel32/mod.rs:939

FunctionGetFinalPathNameByHandleA

( hFile: usize, lpszFilePath: *const u8, cchFilePath: u32, dwFlags: u32, )

src/windows/kernel32/mod.rs:969

FunctionGetModuleHandleW

(lpModuleName: *const u16)

src/windows/kernel32/mod.rs:1006

FunctionImageDirectoryEntryToDataEx

( Base: usize, MappedAsImage: u32, DirectoryEntry: u16, Size: *mut u32, FoundHeader: *mut

src/windows/dbghelp/mod.rs:12

FunctionIsProcessorFeaturePresent

(ProcessorFeature: u32)

src/windows/kernel32/mod.rs:1114

FunctionMessageBoxA

(hWnd: usize, lpText: *const u8, lpCaption: *const u8, uType: u32)

src/windows/user32/mod.rs:49

FunctionNtFlushInstructionCache

(hProcess: usize, lpBaseAddress: usize, dwSize: u32)

src/windows/ntdll/mod.rs:387

FunctionNtWriteFile

( FileHandle: usize, Event: usize, ApcRoutine: u32, ApcContext: u32, IoStatusBlock: *mut I

src/windows/ntdll/mod.rs:437

FunctionOpenFile

(lpFileName: *const u8, lpReOpenBuff: *const OFSTRUCT, uStyle: u32)

src/windows/kernel32/mod.rs:1141

FunctionOpenProcess

(dwDesiredAccess: u32, bInheritHandle: u32, dwProcessId: u32)

src/windows/kernel32/mod.rs:1154

FunctionProcess32First

(hSnapshot: usize, lppe: *mut PROCESSENTRY32)

src/windows/kernel32/mod.rs:1167

FunctionProcess32Next

(hSnapshot: usize, lppe: *mut PROCESSENTRY32)

src/windows/kernel32/mod.rs:1180

FunctionReadFile

( hFile: usize, lpBuffer: *mut u8, nNumberOfBytesToRead: u32, lpNumberOfBytesRead: *mut u32,

src/windows/kernel32/mod.rs:1193

FunctionReadFileEx

( hFile: usize, lpBuffer: *mut u8, nNumberOfBytesToRead: u32, lpOverlapped: *mut OVERLAPPED,

src/windows/kernel32/mod.rs:1218

FunctionReadProcessMemory

( hProcess: usize, lpBaseAddress: usize, lpBuffer: *mut u8, nSize: usize, lpNumberOfBytesR

src/windows/kernel32/mod.rs:1243

FunctionResumeThread

(hThread: usize)

src/windows/kernel32/mod.rs:1264

FunctionSetStdHandle

(nStdHandle: u32, hHandle: usize)

src/windows/kernel32/mod.rs:1277

FunctionVirtualAllocEx

( hProcess: usize, lpAddress: usize, dwSize: usize, flAllocationType: u32, flProtect: u32,

src/windows/kernel32/mod.rs:1306

FunctionVirtualFreeEx

( hProcess: usize, lpAddress: usize, dwSize: usize, dwFreeType: u32, )

src/windows/kernel32/mod.rs:1338

FunctionVirtualProtect

( lpAddress: usize, dwSize: usize, flNewProtect: u32, lpflOldProtect: *mut u32, )

src/windows/kernel32/mod.rs:1356

FunctionVirtualQuery

( lpAddress: usize, lpBuffer: &mut MEMORY_BASIC_INFORMATION, dwLength: usize, )

src/windows/kernel32/mod.rs:1374

FunctionWriteFile

( hFile: usize, lpBuffer: *const u8, nNumberOfBytesToWrite: u32, lpNumberOfBytesWritten: *cons

src/windows/kernel32/mod.rs:1404

FunctionWriteProcessMemory

( hProcess: usize, lpAddress: usize, lpBuffer: *const u8, nSize: usize, lpNumberOfBytesWri

src/windows/kernel32/mod.rs:1429

Methodadd_aes_iv_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:159

Methodadd_aes_key_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:151

Methodadd_dll_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:175

Methodadd_shellcode_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:167

Methodadd_string_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:132

Methodadd_target_to_payload

(&mut self, payload: &mut Vec<u8>)

build_src/resource_gen.rs:124

Methodaddress_of_entry_point

(&self)

src/windows/pe/mod.rs:569

Functionaes_decrypt_bytes

(bytes: Vec<u8>, key: &[u8], iv: &[u8])

build_src/build_util.rs:203

Functionaes_encrypt_bytes

(bytes: &[u8], aes_key: &[u8], aes_iv: &[u8])

src/crypto_util.rs:10

Methodalloc

(&self, layout: Layout)

src/std/alloc.rs:98

Methodalloc_zeroed

(&self, layout: Layout)

src/std/alloc.rs:105

Methodbase_of_code

(&self)

src/windows/pe/mod.rs:573

Methodcheck_sum

(&self)

src/windows/pe/mod.rs:673

Functioncompare_xor_str_and_w_str_bytes

&[u8] is the second easiest way to deal with C-style strings in Rust. Here we will take in the two strings as &[u8], and will compare them byte by byt

src/util.rs:168

Methoddealloc

(&self, ptr: *mut u8, layout: Layout)

Methoddll_characteristics

(&self)

src/windows/pe/mod.rs:689

Methoddos_header

(&self)

src/windows/pe/mod.rs:190

(&self, other: &[u8])

src/resource/strings.rs:53

Methodfile_alignment

(&self)

src/windows/pe/mod.rs:593

Methodfile_header

(&self)

src/windows/pe/mod.rs:506

Methodfmt

(&self, f: &mut Formatter<'_>)

src/svec.rs:212

Functionformatting_test

(base_address: usize)

src/windows/pe/mod.rs:70

Methodfrom_address_unchecked

(base_address: usize)

src/windows/pe/mod.rs:97

(resource_offset: usize, key_offset: usize, len: usize)

src/resource/strings.rs:20

src/windows/pe/mod.rs:63

Methodfrom_ptr_unchecked

(ptr: *const u8)

src/windows/pe/mod.rs:67

Methodfrom_resource

( resource: u32, resource_offset: usize, key_offset: usize, len: usize, )

src/resource/strings.rs:26

Methodfrom_slice

(ptr: &'a [u8])

src/windows/pe/mod.rs:55

Methodfrom_slice_unchecked

(ptr: &'a [u8])

src/windows/pe/mod.rs:59

src/windows/kernel32/tests.rs:14

Functiongenerate_random_bytes_in_range

(num_bytes: usize, value_range: Range<u8>)

build_src/build_util.rs:301

Functiongenerate_random_bytes_in_range_inclusive

( num_bytes: usize, value_range: Range<u8>, )

build_src/build_util.rs:307

Functionget_aes_encrypted_resource_bytes

(offset: usize, len: usize)

src/crypto_util.rs:127

Functionget_dll_base_test

()

src/util.rs:326

Functionget_entry_offset_by_name

( resource_directory_table: &RESOURCE_DIRECTORY_TABLE, name: &[u8], )

src/windows/pe/mod.rs:816

Methodget_export_rva_xor_string

(&self, xor_name: &[u8], key: &[u8])

src/windows/pe/mod.rs:283

Methodget_function_ordinal_xor

(&self, function_name: &[u8], key: &[u8])

src/windows/pe/mod.rs:451

Functionget_fwd_proc_address

()

src/windows/kernel32/tests.rs:96

Functionget_module_handle

()

src/windows/kernel32/tests.rs:23

Functionget_module_handle_x_test

()

src/windows/kernel32/tests.rs:112

Functionget_proc_address

()

src/windows/kernel32/tests.rs:31

Functionget_proc_address_by_ordinal

()

src/windows/kernel32/tests.rs:78

Functionget_proc_address_x_test

()

src/windows/kernel32/tests.rs:125

Functionget_resource

()

src/util.rs:318

Functionget_return_addr

src/windows/pe/tests.rs:66

Functionget_rva_by_ordinal

()

src/windows/pe/tests.rs:47

Functionget_rva_by_ordinal_on_disk

()

src/windows/pe/tests.rs:114

Functionget_rva_on_disk

()

src/windows/pe/tests.rs:136

Functionget_string

()

src/resource/tests.rs:6

Functionget_system_dir_w

()

src/util.rs:287

Functionget_system_directory_a

()

src/windows/kernel32/tests.rs:144

Functionget_system_directory_w

()

src/windows/kernel32/tests.rs:154

← previous next →101–200 of 264, ranked by callers