Functions — github.com/boku7/BokuLoader

CodeHub MCPcopy Create free account

hub / github.com/boku7/BokuLoader / functions

Functions50 in github.com/boku7/BokuLoader

⨍ Functions 50 ◇ Types & classes 22

↓ 21 callersFunctionresolve_api_address_from_hash

src/BokuLoader.c:700

↓ 17 callersFunctionxGetProcAddress_hash

src/BokuLoader.c:725

↓ 16 callersFunctionsetup_synthetic_callstack

src/BokuLoader.c:1125

↓ 13 callersFunctionget_virtual_Hook_address

src/BokuLoader.c:537

↓ 12 callersFunctionparse_module_headers

src/BokuLoader.c:571

↓ 12 callersFunctionresolve_wininet_apis

src/BokuLoader.c:1188

↓ 11 callersFunctionloaded_module_base_from_hash

src/BokuLoader.c:1022

↓ 5 callersFunctionRtlSecureZeroMemory

src/BokuLoader.c:901

↓ 5 callersFunctionhash_ascii_string

src/BokuLoader.c:1453

↓ 3 callersFunctionCalculateFunctionStackSizeWrapper

src/BokuLoader.c:1098

↓ 3 callersFunctionMemoryCompare

src/BokuLoader.c:832

↓ 3 callersFunctionStringLengthA

Havoc C2 function

src/BokuLoader.c:809

↓ 2 callersFunctionFindGadget

src/BokuLoader.c:848

↓ 2 callersFunctionfind_api_return_address_on_stack

From bottom of stack --> up

src/BokuLoader.c:863

↓ 2 callersFunctiongetApis

src/BokuLoader.c:599

↓ 2 callersFunctionget_runtime_function_entry_for_api

src/BokuLoader.c:1073

↓ 2 callersFunctionstomp

src/BokuLoader.c:915

↓ 2 callersFunctionxLoadLibrary

src/BokuLoader.c:636

↓ 2 callersFunctionxorc

src/BokuLoader.c:907

↓ 1 callersFunctionCalculateFunctionStackSize

Credit to VulcanRaven project for the original implementation of these two*/

src/BokuLoader.c:924

↓ 1 callersFunctioncheckFakeEntryAddress_returnReal

if the Malleable PE C2 profile has `set entry_point` then the OPTIONAL_HEADER->EntryPoint is a decoy and the real entry point is at OPTIONAL_HEADER->L

src/BokuLoader.c:178

↓ 1 callersFunctioncheckObfuscate

src/BokuLoader.c:159

↓ 1 callersFunctioncheckUseRWX

OptionalHeader + 0x34 = OptionalHeader.Win32VersionValue. Seems unused by CS so we will put the useRWX flag there

src/BokuLoader.c:169

↓ 1 callersFunctioncheck_and_write_IAT_Hook

src/BokuLoader.c:424

↓ 1 callersFunctiondoImportTable

src/BokuLoader.c:238

↓ 1 callersFunctiondoRelocations

src/BokuLoader.c:457

↓ 1 callersFunctiondoSections

src/BokuLoader.c:186

↓ 1 callersFunctiongetHeapApis

src/BokuLoader.c:622

↓ 1 callersFunctionget_sections

src/BokuLoader.c:552

↓ 1 callersFunctionmemory_copy

src/BokuLoader.c:1470

↓ 1 callersFunctionutf16_to_utf8

src/BokuLoader.c:790

↓ 1 callersFunctionutf8_string_to_lower

src/BokuLoader.c:1438

FunctionBokuLoader

src/BokuLoader.c:19

FunctionCharStringToWCharString

Havoc C2 function

src/BokuLoader.c:888

FunctionHttpAddRequestHeadersA_Hook

src/BokuLoader.c:1401

FunctionHttpOpenRequestA_Hook

src/BokuLoader.c:1252

FunctionHttpQueryInfoA_Hook

src/BokuLoader.c:1419

FunctionHttpSendRequestA_Hook

src/BokuLoader.c:1274

FunctionInternetCloseHandle_Hook

src/BokuLoader.c:1329

FunctionInternetConnectA_Hook

src/BokuLoader.c:1229

FunctionInternetOpenA_Hook

src/BokuLoader.c:1210

FunctionInternetQueryDataAvailable_Hook

src/BokuLoader.c:1311

FunctionInternetQueryOptionA_Hook

src/BokuLoader.c:1347

FunctionInternetReadFile_Hook

src/BokuLoader.c:1293

FunctionInternetSetOptionA_Hook

src/BokuLoader.c:1365

FunctionInternetSetStatusCallback_Hook

src/BokuLoader.c:1383

FunctionSleep_Hook

src/BokuLoader.c:1161

FunctionStringCompareA

src/BokuLoader.c:821

Functionget_modulebase_from_address

src/BokuLoader.c:1050

Functionwide_string_length

src/BokuLoader.c:800