MCPcopy Create free account

hub / github.com/Phat3/PINdemonium / functions

Functions1,444 in github.com/Phat3/PINdemonium

↓ 2 callersMethodgetSectionNameUnicode
Scylla/Scylla/PeParser.cpp:370
↓ 2 callersMethodgetThreshold
PINdemonium/WriteInterval.cpp:33
↓ 2 callersMethodgetType
Scylla/Scylla/Configuration.cpp:16
↓ 2 callersFunctionget_mnemonic_string
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/libdasm.c:998
↓ 2 callersFunctionget_mnemonic_string
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/libdasm.c:998
↓ 2 callersFunctionget_operand_register
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/libdasm.c:1238
↓ 2 callersFunctionget_operand_register
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/libdasm.c:1238
↓ 2 callersFunctionget_register_type
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/libdasm.c:1198
↓ 2 callersFunctionget_register_type
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/libdasm.c:1198
↓ 2 callersMethodhasExportDirectory
Scylla/Scylla/PeParser.cpp:167
↓ 2 callersMethodhexdigest
return hex representation of digest as string
PINdemonium/md5.cpp:335
↓ 2 callersMethodindex
PINdemonium/jsoncpp.cpp:2327
↓ 2 callersFunctioninstruction_new
Creates and initializes an instance of the Instruction class based on the supplied INSTRUCTION instance passed from libdasm.
PINdemoniumPlugins/PINdemoniumStolenAPIPlugin/libdasm-1.5/rbdasm/dasm.c:333
↓ 2 callersFunctioninstruction_new
Creates and initializes an instance of the Instruction class based on the supplied INSTRUCTION instance passed from libdasm.
PINdemoniumPlugins/SimpleApiRedirectionPlugin/libdasm-1.5/rbdasm/dasm.c:333
↓ 2 callersMethodinvalidateImport
Scylla/Scylla/ImportsHandling.cpp:333
↓ 2 callersFunctionisMemoryReadable
ScyllaWrapper/ScyllaWrapper.cpp:56
↓ 2 callersMethodisModule
Scylla/Scylla/ImportsHandling.cpp:76
↓ 2 callersMethodisStackAddress
Check if an address in on the stack **/
PINdemonium/ProcInfo.cpp:383
↓ 2 callersMethodisTebAddress
Check if an address in on the Teb
PINdemonium/ProcInfo.cpp:360
↓ 2 callersMethodisValidIndex
PINdemonium/jsoncpp.cpp:3481
↓ 2 callersFunctionmoveResults
(cur_malware)
PINdemonium/Tests/MalTester.py:62
↓ 2 callersMethodnewStreamWriter
PINdemonium/jsoncpp.cpp:5148
↓ 2 callersFunctionnormalizeEOL
PINdemonium/jsoncpp.cpp:559
↓ 2 callersMethodnumberOfDirectImportApisNotInIat
Scylla/Scylla/IATReferenceScan.cpp:28
↓ 2 callersMethodpatchDirectJumpTable
Scylla/Scylla/IATReferenceScan.cpp:619
↓ 2 callersMethodrebuildImportTable
Scylla/Scylla/ImportRebuilder.cpp:18
↓ 2 callersMethodremoveDosStub
Scylla/Scylla/PeParser.cpp:805
↓ 2 callersMethodresolve
PINdemonium/jsoncpp.cpp:3970
↓ 2 callersMethodsearchHeapMap
return the index of the memory range that includes the specified address if it is not found it returns -1
PINdemonium/ProcInfo.cpp:162
↓ 2 callersMethodselectImports
Scylla/Scylla/ImportsHandling.cpp:303
↓ 2 callersMethodsetBrokenFlag
PINdemonium/WriteInterval.cpp:50
↓ 2 callersMethodsetFirstWrittenAddressInMesmory
PINdemonium/PolymorphicCodeHandlerModule.cpp:92
↓ 2 callersMethodsetNumeric
Scylla/Scylla/Configuration.cpp:26
↓ 2 callersMethodsetPrevIp
PINdemonium/ProcInfo.cpp:32
↓ 2 callersMethodsetString
Scylla/Scylla/Configuration.cpp:36
↓ 2 callersMethodsetWorking
PINdemonium/Config.cpp:227
↓ 2 callersMethodstartScan
Scylla/Scylla/IATReferenceScan.cpp:49
↓ 2 callersMethodtoJson
PINdemonium/ReportDump.cpp:17
↓ 2 callersFunctionvalueToQuotedString
PINdemonium/jsoncpp.cpp:4194
↓ 2 callersFunctionwriteMemoryToProcess
write buffer to the process memory hProcess : Handle of the process we want to write the memory address : the starting writing address size : how man
PINdemoniumPlugins/SimpleApiRedirectionPlugin/PINdemoniumPluginTemplate/Helpers.cpp:67
↓ 2 callersMethodwriteSetManager
- Calculate the target of the write (end_addr) - Update an existing WriteInterval / create a new one
PINdemonium/WxorXHandler.cpp:35
↓ 1 callersFunctionConfigureTool
- set the option for the current run
PINdemonium/PINdemonium.cpp:161
↓ 1 callersFunctionGetExeModuleBase
ScyllaDumper/ScyllaDumper/ScyllaDumper.cpp:194
↓ 1 callersFunctionGetFilePathFromPID
Extract the .EXE file which has lauched the process having PID pid **/
ScyllaDumper/ScyllaDumper/ScyllaDumper.cpp:172
↓ 1 callersFunctionGetFirstSelectedItem
Scylla/Scylla/multitree.h:159
↓ 1 callersFunctionGetItemState
Scylla/Scylla/multitree.h:143
↓ 1 callersFunctionGetSelectedItem
Scylla/Scylla/multitree.h:132
↓ 1 callersFunctionIATAutoFix
ScyllaWrapper/ScyllaWrapper.cpp:69
↓ 1 callersFunctionIATAutoFix
ScyllaDumper/ScyllaDumper/ScyllaDumper.cpp:76
↓ 1 callersFunctionInitializeDll
Scylla/Scylla/main.cpp:66
↓ 1 callersMethodIsCurrentInOEP
- Check if the current instruction is a write ----> add the instrumentation routine that register the write informations - Chek if the current instru
PINdemonium/OepFinder.cpp:75
↓ 1 callersFunctionIsItemSelected
Scylla/Scylla/multitree.h:120
↓ 1 callersMethodPrintSections
print the sections information in a fancy way
PINdemonium/ProcInfo.cpp:119
↓ 1 callersMethodReadFromPipe
Read output from the child process's pipe for STDOUT and write to the parent process's pipe for STDOUT. Stop when there is no more data.
PINdemonium/GdbDebugger.cpp:104
↓ 1 callersFunctionRemoveExceptionHandler
Scylla/Scylla/main.cpp:108
↓ 1 callersFunctionScyllaAddSection
Scylla/Scylla/FunctionExport.cpp:519
↓ 1 callersFunctionScyllaDumpProcessA
Scylla/Scylla/FunctionExport.cpp:144
↓ 1 callersFunctionScyllaPluginNameA
Scylla/Scylla v0.9.7c/Plugins/Sources/PECompact.cpp:190
↓ 1 callersFunctionScyllaPluginNameW
Scylla/Scylla v0.9.7c/Plugins/Sources/PECompact.cpp:185
↓ 1 callersFunctionScyllaRebuildFileW
Scylla/Scylla/FunctionExport.cpp:49
↓ 1 callersFunctionScyllaStartGui
Scylla/Scylla/FunctionExport.cpp:174
↓ 1 callersFunctionScyllaVersionInformationA
Scylla/Scylla/FunctionExport.cpp:23
↓ 1 callersFunctionScyllaVersionInformationDword
Scylla/Scylla/FunctionExport.cpp:28
↓ 1 callersFunctionUsage
- usage
PINdemonium/PINdemonium.cpp:73
↓ 1 callersMethodWriteToPipe
Read from a file and write its contents to the pipe for the child's STDIN. Stop when there is no more data.
PINdemonium/GdbDebugger.cpp:94
↓ 1 callersFunction_GetClipboardText
Scylla/Scylla/hexedit.h:145
↓ 1 callersFunction_NumToChar
Scylla/Scylla/hexedit.h:119
↓ 1 callersFunction_NumToString
Scylla/Scylla/hexedit.h:124
↓ 1 callersFunction_SelectBox
TODO: keep list of 'temporary' selected items if you select an item with the mouse and it gets out of the selection rectangle it stays selected. it
Scylla/Scylla/multitree.h:288
↓ 1 callersFunction_StringToNum
Scylla/Scylla/hexedit.h:101
↓ 1 callersMethod_analyzeDump
(dumpsToBeAnalyzed, items)
PINdemoniumReport/app/src/MemoryLayout/slider.jsx:50
↓ 1 callersMethod_drawConnectionArrow
(startDump, endDump)
PINdemoniumReport/app/src/MemoryLayout/memoryLayout.jsx:293
↓ 1 callersMethod_drawMemory
()
PINdemoniumReport/app/src/MemoryLayout/memoryLayout.jsx:61
↓ 1 callersMethod_drawRecursiveArrow
(dump)
PINdemoniumReport/app/src/MemoryLayout/memoryLayout.jsx:243
↓ 1 callersMethod_drawSingleArrow
(dump)
PINdemoniumReport/app/src/MemoryLayout/memoryLayout.jsx:201
↓ 1 callersMethod_getWxorXinterval
PINdemonium/WxorXHandler.cpp:114
↓ 1 callersMethod_readFile
(file)
PINdemoniumReport/app/src/app.jsx:16
↓ 1 callersMethod_setHeight
()
PINdemoniumReport/app/src/MemoryLayout/memoryLayout.jsx:35
↓ 1 callersMethodaddAdditionalApisToList
Scylla/Scylla/IATReferenceScan.cpp:697
↓ 1 callersMethodaddFoundApiToModuleList
Scylla/Scylla/ApiReader.cpp:997
↓ 1 callersMethodaddNewLastSection
Scylla/Scylla/PeParser.cpp:838
↓ 1 callersMethodaddProcAddresses
bootstrap memory information
PINdemonium/ProcInfo.cpp:335
↓ 1 callersMethodaddProcessHeapsAndCheckAddress
Adding the ProcessHeaps to the generic Memory Ranges
PINdemonium/ProcInfo.cpp:449
↓ 1 callersMethodaddThreadStackAddress
Initializing the base stack address by getting a value in the stack and searching the highest allocated address in the same memory region **/
PINdemonium/ProcInfo.cpp:395
↓ 1 callersMethodaddThreadTebAddress
PINdemonium/ProcInfo.cpp:369
↓ 1 callersFunctionadjustSizeForBigSections
Scylla/Scylla/IATSearch.cpp:543
↓ 1 callersFunctionanalyseTests
()
PINdemonium/Tests/ImportsTester.py:26
↓ 1 callersMethodasCString
PINdemonium/jsoncpp.cpp:3049
↓ 1 callersMethodasUInt
PINdemonium/jsoncpp.cpp:3137
↓ 1 callersMethodcheckHeapWxorX
PINdemonium/HeapModule.cpp:16
↓ 1 callersMethodcheckInside
check if the ip reside inside the WriteInterval
PINdemonium/WriteInterval.cpp:93
↓ 1 callersMethodcheckUpdate
check if the value of the given address is between addr_begin and addr_end
PINdemonium/WriteInterval.cpp:66
↓ 1 callersFunctioncleanUp
Scylla/Scylla v0.9.7c/Plugins/Sources/PESpin_x64_v1.cpp:92
↓ 1 callersFunctioncleanUp
Scylla/Scylla v0.9.7c/Plugins/Sources/Imprec_Wrapper_DLL.cpp:185
↓ 1 callersFunctioncleanUp
Scylla/Scylla v0.9.7c/Plugins/Sources/PECompact.cpp:81
↓ 1 callersFunctioncleanUp
Scylla/Plugins/Sources/PESpin_x64_v1.cpp:92
↓ 1 callersFunctioncleanUp
Scylla/Plugins/Sources/StolenApi.cpp:81
↓ 1 callersFunctioncleanUp
Scylla/Plugins/Sources/Imprec_Wrapper_DLL.cpp:185
↓ 1 callersFunctioncleanUp
Scylla/Plugins/Sources/PECompact.cpp:81
↓ 1 callersMethodclearAllImports
Scylla/Scylla/ImportsHandling.cpp:263
← previousnext →201–300 of 1,444, ranked by callers