MCPcopy Create free account

hub / github.com/Phat3/PINdemonium / functions

Functions1,444 in github.com/Phat3/PINdemonium

MethodisKnownLibrary
Check the current name against a set of whitelisted library names (IDEA don't track kernel32.dll ... but track custom dll which may contain malicious
PINdemonium/ProcInfo.cpp:294
MethodisLibItemDuplicate
PINdemonium/ProcInfo.cpp:243
MethodisLibStackWrite
Check if the write addr belongs to the Stack and the current eip is not in the libraries
PINdemonium/FilterHandler.cpp:77
MethodisLibTEBWrite
Check if the addr belongs to the TEB
PINdemonium/FilterHandler.cpp:70
MethodisMemoryNotNull
Scylla/Scylla/PeParser.cpp:653
MethodisModuleLoadedInOwnProcess
Scylla/Scylla/ApiReader.cpp:514
MethodisMultineArray
PINdemonium/jsoncpp.cpp:4532
MethodisNewModule
Scylla/Scylla/ImportsHandling.cpp:624
MethodisNull
PINdemonium/jsoncpp.cpp:3682
MethodisNumeric
PINdemonium/jsoncpp.cpp:3766
MethodisPE32
Scylla/Scylla/PeParser.cpp:109
MethodisPE64
Scylla/Scylla/PeParser.cpp:97
MethodisPageAccessable
Scylla/Scylla/ProcessAccessHelp.cpp:901
MethodisPageExecutable
Scylla/Scylla/ProcessAccessHelp.cpp:917
MethodisPeAndExportTableValid
Scylla/Scylla/ApiReader.cpp:551
MethodisRoundedTo
Scylla/Scylla/PeRebuild.cpp:72
MethodisString
PINdemonium/jsoncpp.cpp:3768
MethodisUInt
PINdemonium/jsoncpp.cpp:3701
MethodisUInt64
PINdemonium/jsoncpp.cpp:3736
MethodisValidDllFile
Scylla/Scylla/PluginLoader.cpp:240
MethodisValidImprecPlugin
Scylla/Scylla/PluginLoader.cpp:247
MethodisWinSxSModule
Scylla/Scylla/ApiReader.cpp:1217
MethodisWindows64
Scylla/Scylla/ProcessLister.cpp:18
MethodjmpOuterSectionHeuristic
PINdemonium/Heuristics.cpp:14
Methodkey
PINdemonium/jsoncpp.cpp:2317
MethodlaunchScyllaDumpAndFix
Lauch external tool ScyllaDumper to dump the process with PID pid scylla : string containing the path to the scyllaDumper executable pid : pid of t
PINdemonium/ScyllaWrapperInterface.cpp:28
MethodlaunchYara
PINdemonium/YaraHeuristic.cpp:122
MethodlibToString
Convert a LibraryItem object to string **/
PINdemonium/ProcInfo.cpp:280
MethodlinkHZ
PINdemonium/HeapModule.cpp:118
MethodlistviewCompareFunc
Scylla/Scylla/DumpSectionGui.cpp:177
MethodlistviewCompareFunc
Scylla/Scylla/DumpMemoryGui.cpp:296
MethodlistviewCompareFunc
lParamSort - lo-byte: column, hi-byte: sort-order
Scylla/Scylla/PickDllGui.cpp:117
MethodloadConfig
Scylla/Scylla/ConfigurationHolder.cpp:159
MethodloadJson
PINdemonium/Config.cpp:147
MethodloadOptions
Scylla/Scylla/OptionsGui.cpp:51
MethodloadTreeActionHandler
Scylla/Scylla/MainGui.cpp:763
MethodlogHZ
PINdemonium/HeapModule.cpp:135
MethodlongJmpHeuristic
PINdemonium/Heuristics.cpp:4
MethodlookUpIatForPointer
Scylla/Scylla/IATReferenceScan.cpp:347
Functionmain
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/pydasm/pydasm.c:737
Functionmain
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/examples/das.c:36
Functionmain
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/examples/simple.c:26
Functionmain
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/pydasm/pydasm.c:737
Functionmain
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/examples/das.c:36
Functionmain
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/examples/simple.c:26
Functionmain
PINdemonium/PINdemonium.cpp:208
Functionmain
Scylla/ScyllaDllTest/ScyllaDllTest/Source.cpp:32
MethodmakePath
PINdemonium/jsoncpp.cpp:3899
Methodmatch
PINdemonium/jsoncpp.cpp:525
MethodmemberName
PINdemonium/jsoncpp.cpp:2342
Methodname
PINdemonium/jsoncpp.cpp:2334
MethodnavigateToConsecutiveDump
(id, startDump, endDump)
PINdemoniumReport/app/src/MemoryLayout/slider.jsx:45
MethodnavigateToEmptyMemory
(id, startDump, endDump)
PINdemoniumReport/app/src/MemoryLayout/slider.jsx:24
MethodnavigateToIntraWriteSetDump
(id, startDump, endDump)
PINdemoniumReport/app/src/MemoryLayout/slider.jsx:38
MethodnavigateToSingleDump
(id, startDump, endDump)
PINdemoniumReport/app/src/MemoryLayout/slider.jsx:31
MethodntdllFuncPatch
PINdemonium/FakeReadHandler.cpp:22
MethodomitEndingLineFeed
PINdemonium/jsoncpp.cpp:4349
MethodopenFileHandle
Scylla/Scylla/PeParser.cpp:495
MethodopenProcessHandle
Scylla/Scylla/ProcessAccessHelp.cpp:30
MethodopenWriteFileHandle
Scylla/Scylla/PeParser.cpp:512
Functionoperand_basereg
Returns the base register that is used when the operand is a memory operand.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:144
Functionoperand_basereg
Returns the base register that is used when the operand is a memory operand.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:144
Functionoperand_dispbytes
The number of bytes used for displacement.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:182
Functionoperand_dispbytes
The number of bytes used for displacement.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:182
Functionoperand_displacement
The displacement value of the operand, if any.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:254
Functionoperand_displacement
The displacement value of the operand, if any.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:254
Functionoperand_dispoffset
The offset from the start of the instruction for the displacement bytes.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:194
Functionoperand_dispoffset
The offset from the start of the instruction for the displacement bytes.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:194
Functionoperand_flags
Internal flags for the operand.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:278
Functionoperand_flags
Internal flags for the operand.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:278
Functionoperand_free
Deallocates the memory used by an instance of the operand class.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:60
Functionoperand_free
Deallocates the memory used by an instance of the operand class.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:60
Functionoperand_immbytes
The number of bytes used for immediate data.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:206
Functionoperand_immbytes
The number of bytes used for immediate data.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:206
Functionoperand_immediate
The immediate value of the operand, if any.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:266
Functionoperand_immediate
The immediate value of the operand, if any.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:266
Functionoperand_immoffset
The offset from the start of the instruction to the immediate bytes.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:218
Functionoperand_immoffset
The offset from the start of the instruction to the immediate bytes.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:218
Functionoperand_indexreg
Returns the index register that is used when the operand is a memory operand.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:157
Functionoperand_indexreg
Returns the index register that is used when the operand is a memory operand.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:157
Functionoperand_reg
Returns the register used by the operand, if any, as one of the Dasm::Register constants.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:113
Functionoperand_reg
Returns the register used by the operand, if any, as one of the Dasm::Register constants.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:113
Functionoperand_regtype
Returns the register type being used by the operand, if any, as one of the Dasm::RegisterType constants.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:132
Functionoperand_regtype
Returns the register type being used by the operand, if any, as one of the Dasm::RegisterType constants.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:132
Functionoperand_scale
Returns the scale used.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:170
Functionoperand_scale
Returns the scale used.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:170
Functionoperand_section
The section being used.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:242
Functionoperand_section
The section being used.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:242
Functionoperand_sectionbytes
The number of bytes used for section.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:230
Functionoperand_sectionbytes
The number of bytes used for section.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:230
Functionoperand_type
Returns the operands type as one of the Operand::Type constants.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:100
Functionoperand_type
Returns the operands type as one of the Operand::Type constants.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:100
Methodoperator!
PINdemonium/jsoncpp.cpp:3348
Functionoperator!=
PINdemonium/json.h:1127
Methodoperator!=
PINdemonium/jsoncpp.cpp:3047
Functionoperator*
PINdemonium/json.h:1226
Functionoperator++
PINdemonium/json.h:1204
Functionoperator-
PINdemonium/json.h:1129
Functionoperator--
PINdemonium/json.h:1210
Functionoperator->
PINdemonium/json.h:1228
← previousnext →1,101–1,200 of 1,444, ranked by callers