NameLast commit messageLast commit date
..
AddSectionToPeFile.cpp
AdfCloseHandleOnInvalidAddress.cpp
AdfIsCreateProcessDebugEventCodeSet.cpp
AdfOpenProcessOnCsrss.cpp
AmsiBypassViaPatternScan.cpp
ByteArrayToCharArray.cpp
CaplockString.cpp
CharArrayToByteArray.cpp
CharStringToWCharString.cpp
CheckRemoteDebuggerPresentEx.cpp
ConvertCharacterStringToIntegerUsingNtdll.cpp
ConvertIPv4IpAddressStructureToString.cpp
ConvertIPv4IpAddressUnsignedLongToString.cpp
ConvertIPv4StringToUnsignedLong.cpp
CopyFileViaSetupCopyFile.cpp
CopyMemoryEx.cpp
CreateFileFromDsCopyFromSharedFile.cpp
CreateLocalAppDataObjectPath.cpp
CreateMd5HashFromFilePath.cpp
CreateProcessByWindowsRHotKey.cpp
CreateProcessByWindowsRHotKeyEx.cpp
CreateProcessFromIeFrameOpenUrl.cpp
CreateProcessFromIHxHelpPaneServer.cpp
CreateProcessFromIHxInteractiveUser.cpp
CreateProcessFromINFSectionInstallStringNoCab.cpp
CreateProcessFromINFSectionInstallStringNoCab2.cpp
CreateProcessFromINFSetupCommand.cpp
CreateProcessFromIShellDispatchInvoke.cpp
CreateProcessFromMSHTML.cpp
CreateProcessFromPcwUtil.cpp
CreateProcessFromShdocVwOpenUrl.cpp
CreateProcessFromShell32ShellExecRun.cpp
CreateProcessFromShellExecuteInExplorerProcess.cpp
CreateProcessFromUrlFileProtocolHandler.cpp
CreateProcessFromUrlOpenUrl.cpp
CreateProcessFromWmiWin32_Process.cpp
CreateProcessFromZipfldrRouteCall.cpp
CreateProcessViaNtCreateUserProcess.cpp
CreateProcessWithCfGuard.cpp
CreatePseudoRandomInteger.cpp
CreatePseudoRandomIntegerFromNtdll.cpp
CreatePseudoRandomString.cpp
CreateThreadAndWaitForCompletion.cpp
CreateWindowsObjectPath.cpp
DelayedExecutionExecuteOnDisplayOff.cpp
DeleteDirectoryAndSubDataViaDelNode.cpp
DeleteFileWithCreateFileFlag.cpp
DnsGetDomainNameIPv4AddressAsString.cpp
DnsGetDomainNameIPv4AddressUnsignedLong.cpp
Ex_GetHandleOnDeviceHttpCommunication.cpp
ExampleOfUsageOfHardwareBreakpointHookingEngine.cpp
ExceptHandlerCallbackRoutine.cpp
ExtractFilesFromCabIntoTarget.cpp
FastcallExecuteBinaryShellExecuteEx.cpp
FunctionDeclaration.h
GetByteArrayFromFile.cpp
GetCurrentDirectoryFromUserProcessParameters.cpp
GetCurrentLocaleFromTeb.cpp
GetCurrentProcessIdFromOffset.cpp
GetCurrentProcessIdFromTeb.cpp
GetCurrentProcessNoForward.cpp
GetCurrentThreadNoForward.cpp
GetCurrentUserSid.cpp
GetCurrentWindowTextFromUserProcessParameter.cpp
GetDomainNameFromIPV4AddressAsString.cpp
GetDomainNameFromUnsignedLongIPV4Address.cpp
GetFileSizeFromPath.cpp
GetKUserSharedData.cpp
GetLastErrorFromTeb.cpp
GetLastNtStatusFromTeb.cpp
GetModuleHandleEx2.cpp
GetNumberOfLinkedDlls.cpp
GetOsBuildNumberFromPeb.cpp
GetOsMajorVersionFromPeb.cpp
GetOsMinorVersionFromPeb.cpp
GetOsPlatformIdFromPeb.cpp
GetPeb.cpp
GetPeFileBaseAddress.cpp
GetPeSectionSizeInBytes.cpp
GetPidFromEnumProcesses.cpp
GetPidFromNtQueryFileInformation.cpp
GetPidFromNtQuerySystemInformation.cpp
GetPidFromPidBruteForcing.cpp
GetPidFromPidBruteForcingEx.cpp
GetPidFromWindowsTerminalService.cpp
GetPidFromWmiComInterface.cpp
GetProcAddress.cpp
GetProcAddressDjb2.cpp
GetProcAddressFowlerNollVoVariant1a.cpp
GetProcAddressJenkinsOneAtATime32Bit.cpp
GetProcAddressLoseLose.cpp
GetProcAddressMurmur.cpp
GetProcAddressRotr32.cpp
GetProcAddressSdbm.cpp
GetProcAddressSipHash.cpp
GetProcAddressSuperFastHash.cpp
GetProcAddressUnknownGenericHash1.cpp
GetProcessBinaryNameFromHwnd.cpp
GetProcessHeapFromTeb.cpp
GetProcessPathFromLoaderLoadModule.cpp
GetProcessPathFromUserProcessParameters.cpp
GetRtlUserProcessParameters.cpp
GetSystemWindowsDirectory.cpp
GetTeb.cpp
HashFileByMsiFileHashTable.cpp
HashStringDjb2.cpp
HashStringFowlerNollVoVariant1a.cpp
HashStringJenkinsOneAtATime32Bit.cpp
HashStringLoseLose.cpp
HashStringMurmur.cpp
HashStringRotr32.cpp
HashStringSdbm.cpp
HashStringSipHash.cpp
HashStringSuperFastHash.cpp
HashStringUnknownGenericHash1.cpp
HookEngineUnhookHeapFree.cpp
IeCreateDirectory.cpp
IeCreateFile.cpp
IeDeleteFile.cpp
IeFindFirstFile.cpp
IEGetFileAttributesEx.cpp
IeMoveFileEx.cpp
IeRemoveDirectory.cpp
InitHardwareBreakpointEngine.cpp
InsertDescriptorEntry.cpp
Internal.h
IsDebuggerPresentEx.cpp
IsDllLoaded.cpp
IsIntelHardwareBreakpointPresent.cpp
IsNvidiaGraphicsCardPresent.cpp
IsPathValid.cpp
IsPeSection.cpp
IsProcessRunning.cpp
IsProcessRunningAsAdmin.cpp
IsProcessRunningAsAdmin2.cpp
IsRegistryKeyValid.cpp
LdrLoadGetProcedureAddress.cpp
LzMaximumCompressBuffer.cpp
LzMaximumDecompressBuffer.cpp
LzStandardCompressBuffer.cpp
LzStandardDecompressBuffer.cpp
Main.cpp
ManualResourceDataFetching.cpp
MasqueradePebAsExplorer.cpp
MemoryFindMemory.cpp
MiscGenericShellcodePayloads.cpp
MpfComModifyShortcutTarget.cpp
MpfComMonitorChromeSessionOnce.cpp
MpfComVssDeleteShadowVolumeBackups.cpp
MpfExecutePeBinaryInMemoryFromByteArray.cpp
MpfExtractMaliciousPayloadFromZipFileNoPassword.cpp
MpfGetLsaPidFromNamedPipe.cpp
MpfGetLsaPidFromRegistry.cpp
MpfGetLsaPidFromServiceManager.cpp
MpfLolExecuteRemoteBinaryByAppInstaller.cpp
MpfPiControlInjection.cpp
MpfPiQueueUserAPCViaAtomBomb.cpp
MpfPiWriteProcessMemoryCreateRemoteThread.cpp
MpfProcessInjectionViaProcessReflection.cpp
MpfSceViaCDefFolderMenu_Create2.cpp
MpfSceViaCertEnumSystemStore.cpp
MpfSceViaCertEnumSystemStoreLocation.cpp
MpfSceViaCertFindChainInStore.cpp
MpfSceViaChooseColor.cpp
MpfSceViaClusWorkerCreate.cpp
MpfSceViaCreateThreadpoolWait.cpp
MpfSceViaCreateTimerQueueTimer.cpp
MpfSceViaCryptEnumOIDInfo.cpp
MpfSceViaDSA_EnumCallback.cpp
MpfSceViaEnumChildWindows.cpp
MpfSceViaEnumDateFormatsW.cpp
MpfSceViaEnumDesktopsW.cpp
MpfSceViaEnumDesktopWindows.cpp
MpfSceViaEnumDirTreeW.cpp
MpfSceViaEnumDisplayMonitors.cpp
MpfSceViaEnumerateLoadedModules64.cpp
MpfSceViaEnumFontFamiliesExW.cpp
MpfSceViaEnumFontsW.cpp
MpfSceViaEnumLanguageGroupLocalesW.cpp
MpfSceViaEnumObjects.cpp
MpfSceViaEnumPropsExW.cpp
MpfSceViaEnumPwrSchemes.cpp
MpfSceViaEnumResourceTypesExW.cpp
MpfSceViaEnumSystemCodePagesW.cpp
MpfSceViaEnumSystemGeoID.cpp
MpfSceViaEnumSystemLanguageGroupsW.cpp
MpfSceViaEnumSystemLocalesEx.cpp
MpfSceViaEnumThreadWindows.cpp
MpfSceViaEnumTimeFormatsEx.cpp
MpfSceViaEnumUILanguagesW.cpp
MpfSceViaEnumWindows.cpp
MpfSceViaEnumWindowStationsW.cpp
MpfSceViaEvtSubscribe.cpp
MpfSceViaFlsAlloc.cpp
MpfSceViaImageGetDigestStream.cpp
MpfSceViaImmEnumInputContext.cpp
MpfSceViaInitOnceExecuteOnce.cpp
MpfSceViaK32EnumPageFilesW.cpp
MpfSceViaMessageBoxIndirectW.cpp
MpfSceViaSymEnumProcesses.cpp