MCPcopy Create free account

hub / github.com/Xacone/BestEdrOfTheMarket / functions

Functions149 in github.com/Xacone/BestEdrOfTheMarket

Function_hRtlCaptureContext
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:112
Function_hRtlLookupFunctionEntry
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:120
Function_hVirtualAlloc
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:8
Function_hVirtualAllocEx
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:19
Function_hVirtualQuery
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:102
Function_hWriteProcessMemory
DLLs/IAT/BestEDROfTheMarketDLL_IAT/dllmain.cpp:152
MethodalertAndKillThatProcess
BestEdrOfTheMarket/IPCUtils.h:349
MethodanalyzeCompleteProcessThreadsStackTrace
BestEdrOfTheMarket/IPCUtils.h:782
Functioncallback_function
BestEdrOfTheMarket/IPCUtils.h:78
Functioncaramelle
* Caramelle */
BestEdrOfTheMarket/Startup.cpp:83
FunctioncharToByte
BestEdrOfTheMarket/ConversionUtils.h:290
FunctioncharToHexDump
BestEdrOfTheMarket/ConversionUtils.h:310
MethodclearHeapRegions
BestEdrOfTheMarket/HeapUtils.h:168
FunctionconvertHexToBytes
BestEdrOfTheMarket/ConversionUtils.h:122
MethoddoExportAddressExistInRetrievedExports
BestEdrOfTheMarket/Pe64Utils.h:162
MethodenumerateProcessThreads
BestEdrOfTheMarket/Pe64Utils.h:463
MethodgetContentOfMemoryRegionByItsIndex
BestEdrOfTheMarket/Pe64Utils.h:61
FunctiongetCurrentDateTime
BestEdrOfTheMarket/ConversionUtils.h:475
MethodgetEndOfMemoryRegion
BestEdrOfTheMarket/Pe64Utils.h:112
FunctiongetFunctionNameFromVA
* Returns the name of a function by searching for its memory address in a functionsNamesMapping (associates function names with their addresses). Used
BestEdrOfTheMarket/MonitoringUtils.cpp:733
MethodgetHeapAddresses
BestEdrOfTheMarket/HeapUtils.h:35
MethodgetHeapRegionSizes
BestEdrOfTheMarket/HeapUtils.h:39
MethodgetIATFunctionsAddressesMapping
BestEdrOfTheMarket/Pe64Utils.h:132
MethodgetLoadedModules
BestEdrOfTheMarket/Pe64Utils.h:208
MethodgetModEndAddr
BestEdrOfTheMarket/Pe64Utils.h:120
MethodgetModStartAddr
BestEdrOfTheMarket/Pe64Utils.h:116
MethodgetModulesOrder
BestEdrOfTheMarket/Pe64Utils.h:140
FunctionhexStringToBytesVector
BestEdrOfTheMarket/ConversionUtils.h:207
MethodisAddressInProcessMemory
BestEdrOfTheMarket/Pe64Utils.h:176
Functionmain
BestEdrOfTheMarket/MonitoringUtils.cpp:205
Functionmain
Samples/reflective-dll-injection.cpp:28
Functionmain
Samples/low-level-shellcode-injector.cpp:39
Functionmain
Samples/shellcode-injector.cpp:11
Functionmain
Samples/low-level-apc-queue-injector.cpp:47
Functionmain
Samples/etw-amsi-patcher.cpp:37
Functionmain
Samples/apc-queue-injector.cpp:12
MethodprintAllHeapRegionsContent
BestEdrOfTheMarket/HeapUtils.h:93
FunctionprintAsciiDumpWithoutZeros
BestEdrOfTheMarket/ConversionUtils.h:410
FunctionprintByteArray
BestEdrOfTheMarket/ConversionUtils.h:257
FunctionprintByteArrayWithoutZerosAndBreaks
BestEdrOfTheMarket/ConversionUtils.h:273
FunctionprintFunctionsMappingKeys
* Prints the address of an export * @param target Export name */
BestEdrOfTheMarket/MonitoringUtils.cpp:747
FunctionprintHexValues
Samples/low-level-shellcode-injector.cpp:9
FunctionprintNullTerminatedHexDump
BestEdrOfTheMarket/ConversionUtils.h:449
FunctionprintYellowAlert
* Print a message in yellow color * @param msg The message to print */
BestEdrOfTheMarket/ColorsUtils.h:53
FunctionreverseBytesOrder
BestEdrOfTheMarket/ConversionUtils.h:359
MethodterminatePipeConnection
BestEdrOfTheMarket/IPCUtils.h:769
FunctionxorDecrypt
Samples/low-level-apc-queue-injector.cpp:40
Method~HeapUtils
BestEdrOfTheMarket/HeapUtils.h:60
Method~IpcUtils
BestEdrOfTheMarket/IPCUtils.h:338
← previous101–149 of 149, ranked by callers