MCPcopy Create free account

hub / github.com/SaadAhla/FilelessPELoader / functions

Functions21 in github.com/SaadAhla/FilelessPELoader

⨍ Functions 21◇ Types & classes 3
↓ 2 callersFunctionGetData
FilelessPELoader/FilelessPELoader.cpp:95
↓ 2 callersFunctionGetNTHeaders
FilelessPELoader/FilelessPELoader.cpp:355
↓ 2 callersFunctionGetPEDirectory
FilelessPELoader/FilelessPELoader.cpp:371
↓ 1 callersFunctionAESencrypt
(plaintext, key)
aes.py:7
↓ 1 callersFunctionDecryptAES
FilelessPELoader/FilelessPELoader.cpp:61
↓ 1 callersFunctionPELoader
FilelessPELoader/FilelessPELoader.cpp:480
↓ 1 callersFunctionRepairIAT
FilelessPELoader/FilelessPELoader.cpp:389
↓ 1 callersFunctiondropFile
(key, ciphertext)
aes.py:15
↓ 1 callersFunctionmasqueradeCmdline
FilelessPELoader/FilelessPELoader.cpp:297
FunctionUnhook
FilelessPELoader/FilelessPELoader.cpp:581
FunctionfreeargvA
This array is created manually since CommandLineToArgvA doesn't exist, so manually freeing each item in array
FilelessPELoader/FilelessPELoader.cpp:333
FunctionfreeargvW
This array is returned from CommandLineToArgvW so using LocalFree as per MSDN
FilelessPELoader/FilelessPELoader.cpp:344
FunctiongetNtdll
FilelessPELoader/FilelessPELoader.cpp:541
FunctionhookExitProcess
FilelessPELoader/FilelessPELoader.cpp:292
FunctionhookGetCommandLineA
FilelessPELoader/FilelessPELoader.cpp:229
FunctionhookGetCommandLineW
FilelessPELoader/FilelessPELoader.cpp:223
Functionhook__p___argv
FilelessPELoader/FilelessPELoader.cpp:235
Functionhook_onexit
FilelessPELoader/FilelessPELoader.cpp:272
Functionhookatexit
FilelessPELoader/FilelessPELoader.cpp:278
Functionhookexit
FilelessPELoader/FilelessPELoader.cpp:284
Functionmain
FilelessPELoader/FilelessPELoader.cpp:628