From c878a39958d632a9dbd99350053ed0732d4e2189 Mon Sep 17 00:00:00 2001 From: hasherezade Date: Fri, 1 Nov 2024 22:19:57 +0000 Subject: [PATCH] deploy: bd4b656dab75e6086273ca343a12dea723d1a11c --- ...esieve_1_1_module_dump_report-members.html | 3 +- classpesieve_1_1_module_dump_report.html | 42 +- classpesieve_1_1_process_dump_report.html | 32 +- classpesieve_1_1_results_dumper.html | 8 +- doxygen_crawl.html | 1 + dump__report_8cpp_source.html | 229 +++++------ dump__report_8h_source.html | 248 ++++++------ functions_r.html | 1 + functions_vars_r.html | 1 + pe__sieve_8cpp_source.html | 10 +- pe__sieve__report_8h_source.html | 2 +- report__formatter_8cpp_source.html | 4 +- results__dumper_8cpp_source.html | 374 +++++++++--------- results__dumper_8h_source.html | 10 +- search/all_11.js | 161 ++++---- search/variables_11.js | 55 +-- 16 files changed, 608 insertions(+), 573 deletions(-) diff --git a/classpesieve_1_1_module_dump_report-members.html b/classpesieve_1_1_module_dump_report-members.html index 6bafe32f8..c3adbaacf 100644 --- a/classpesieve_1_1_module_dump_report-members.html +++ b/classpesieve_1_1_module_dump_report-members.html @@ -111,7 +111,8 @@ moduleStartpesieve::ModuleDumpReport notRecoveredFileNamepesieve::ModuleDumpReport patternsTagFileNamepesieve::ModuleDumpReport - toJSON(std::stringstream &outs, size_t level)pesieve::ModuleDumpReportvirtual + rebasedTopesieve::ModuleDumpReport + toJSON(std::stringstream &outs, size_t level)pesieve::ModuleDumpReportvirtual
diff --git a/classpesieve_1_1_module_dump_report.html b/classpesieve_1_1_module_dump_report.html index c52766e37..b12335d2e 100644 --- a/classpesieve_1_1_module_dump_report.html +++ b/classpesieve_1_1_module_dump_report.html @@ -113,6 +113,8 @@   size_t moduleSize   +ULONGLONG rebasedTo +  bool is_corrupt_pe   bool is_shellcode @@ -218,7 +220,7 @@

-

Definition at line 38 of file dump_report.h.

+

Definition at line 39 of file dump_report.h.

@@ -234,7 +236,7 @@

-

Definition at line 39 of file dump_report.h.

+

Definition at line 40 of file dump_report.h.

@@ -250,7 +252,7 @@

-

Definition at line 43 of file dump_report.h.

+

Definition at line 44 of file dump_report.h.

@@ -266,7 +268,7 @@

-

Definition at line 41 of file dump_report.h.

+

Definition at line 42 of file dump_report.h.

@@ -282,7 +284,7 @@

-

Definition at line 34 of file dump_report.h.

+

Definition at line 35 of file dump_report.h.

@@ -298,7 +300,7 @@

-

Definition at line 32 of file dump_report.h.

+

Definition at line 33 of file dump_report.h.

@@ -314,7 +316,7 @@

-

Definition at line 33 of file dump_report.h.

+

Definition at line 34 of file dump_report.h.

@@ -330,7 +332,7 @@

-

Definition at line 36 of file dump_report.h.

+

Definition at line 37 of file dump_report.h.

@@ -346,7 +348,7 @@

-

Definition at line 35 of file dump_report.h.

+

Definition at line 36 of file dump_report.h.

@@ -362,7 +364,7 @@

-

Definition at line 37 of file dump_report.h.

+

Definition at line 38 of file dump_report.h.

@@ -410,7 +412,7 @@

-

Definition at line 42 of file dump_report.h.

+

Definition at line 43 of file dump_report.h.

@@ -426,7 +428,23 @@

-

Definition at line 40 of file dump_report.h.

+

Definition at line 41 of file dump_report.h.

+ + + + +

◆ rebasedTo

+ +
+
+ + + + +
ULONGLONG pesieve::ModuleDumpReport::rebasedTo
+
+ +

Definition at line 32 of file dump_report.h.

diff --git a/classpesieve_1_1_process_dump_report.html b/classpesieve_1_1_process_dump_report.html index 9d80a9712..a3eb46f1d 100644 --- a/classpesieve_1_1_process_dump_report.html +++ b/classpesieve_1_1_process_dump_report.html @@ -154,7 +154,7 @@

Detailed Description

The report aggregating the results of the performed dumps.

-

Definition at line 47 of file dump_report.h.

+

Definition at line 48 of file dump_report.h.

Constructor & Destructor Documentation

◆ ProcessDumpReport()

@@ -179,7 +179,7 @@

-

Definition at line 50 of file dump_report.h.

+

Definition at line 51 of file dump_report.h.

@@ -206,7 +206,7 @@

-

Definition at line 55 of file dump_report.h.

+

Definition at line 56 of file dump_report.h.

Here is the call graph for this function:
@@ -244,7 +244,7 @@

-

Definition at line 60 of file dump_report.h.

+

Definition at line 61 of file dump_report.h.

@@ -271,7 +271,7 @@

-

Definition at line 78 of file dump_report.h.

+

Definition at line 79 of file dump_report.h.

@@ -298,7 +298,7 @@

-

Definition at line 66 of file dump_report.h.

+

Definition at line 67 of file dump_report.h.

@@ -325,7 +325,7 @@

-

Definition at line 102 of file dump_report.h.

+

Definition at line 103 of file dump_report.h.

@@ -352,7 +352,7 @@

-

Definition at line 93 of file dump_report.h.

+

Definition at line 94 of file dump_report.h.

@@ -379,7 +379,7 @@

-

Definition at line 71 of file dump_report.h.

+

Definition at line 72 of file dump_report.h.

Here is the call graph for this function:
@@ -416,7 +416,7 @@

-

Definition at line 89 of file dump_report.cpp.

+

Definition at line 93 of file dump_report.cpp.

Here is the call graph for this function:
@@ -457,7 +457,7 @@

-

Definition at line 59 of file dump_report.cpp.

+

Definition at line 63 of file dump_report.cpp.

Here is the call graph for this function:
@@ -492,7 +492,7 @@

-

Definition at line 115 of file dump_report.h.

+

Definition at line 116 of file dump_report.h.

@@ -509,7 +509,7 @@

-

Definition at line 96 of file dump_report.h.

+

Definition at line 97 of file dump_report.h.

@@ -533,7 +533,7 @@

-

Definition at line 113 of file dump_report.h.

+

Definition at line 114 of file dump_report.h.

@@ -549,7 +549,7 @@

-

Definition at line 95 of file dump_report.h.

+

Definition at line 96 of file dump_report.h.

@@ -573,7 +573,7 @@

-

Definition at line 112 of file dump_report.h.

+

Definition at line 113 of file dump_report.h.

diff --git a/classpesieve_1_1_results_dumper.html b/classpesieve_1_1_results_dumper.html index 7594c4914..11918c7cd 100644 --- a/classpesieve_1_1_results_dumper.html +++ b/classpesieve_1_1_results_dumper.html @@ -608,7 +608,7 @@

-

Definition at line 421 of file results_dumper.cpp.

+

Definition at line 424 of file results_dumper.cpp.

Here is the call graph for this function:
@@ -653,7 +653,7 @@

-

Definition at line 472 of file results_dumper.cpp.

+

Definition at line 475 of file results_dumper.cpp.

@@ -697,7 +697,7 @@

Definition at line 443 of file results_dumper.cpp.

+

Definition at line 446 of file results_dumper.cpp.

@@ -720,7 +720,7 @@

-

Definition at line 457 of file results_dumper.cpp.

+

Definition at line 460 of file results_dumper.cpp.

diff --git a/doxygen_crawl.html b/doxygen_crawl.html index 4cf36ca70..6f2654782 100644 --- a/doxygen_crawl.html +++ b/doxygen_crawl.html @@ -1038,6 +1038,7 @@ + diff --git a/dump__report_8cpp_source.html b/dump__report_8cpp_source.html index 50b9dfb91..001d6fb03 100644 --- a/dump__report_8cpp_source.html +++ b/dump__report_8cpp_source.html @@ -106,132 +106,137 @@
10 outs << "\"" << std::hex << moduleStart << "\"" << ",\n";
11 OUT_PADDED(outs, level, "\"module_size\" : ");
12 outs << "\"" << std::hex << moduleSize << "\"" << ",\n";
-
13 if (dumpFileName.length()) {
-
14 OUT_PADDED(outs, level, "\"dump_file\" : ");
-
15 outs << "\"" << peconv::get_file_name(dumpFileName) << "\"" << ",\n";
+
13 if (moduleStart != rebasedTo) {
+
14 OUT_PADDED(outs, level, "\"dump_base\" : ");
+
15 outs << "\"" << std::hex << rebasedTo << "\"" << ",\n";
16 }
-
17 if (hooksTagFileName.length()) {
-
18 OUT_PADDED(outs, level, "\"tags_file\" : ");
-
19 outs << "\"" << peconv::get_file_name(hooksTagFileName) << "\"" << ",\n";
+
17 if (dumpFileName.length()) {
+
18 OUT_PADDED(outs, level, "\"dump_file\" : ");
+
19 outs << "\"" << peconv::get_file_name(dumpFileName) << "\"" << ",\n";
20 }
-
21 if (patternsTagFileName.length()) {
-
22 OUT_PADDED(outs, level, "\"pattern_tags_file\" : ");
-
23 outs << "\"" << peconv::get_file_name(patternsTagFileName) << "\"" << ",\n";
+
21 if (hooksTagFileName.length()) {
+
22 OUT_PADDED(outs, level, "\"tags_file\" : ");
+
23 outs << "\"" << peconv::get_file_name(hooksTagFileName) << "\"" << ",\n";
24 }
-
25 if (impListFileName.length()) {
-
26 OUT_PADDED(outs, level, "\"imports_file\" : ");
-
27 outs << "\"" << peconv::get_file_name(impListFileName) << "\"" << ",\n";
+
25 if (patternsTagFileName.length()) {
+
26 OUT_PADDED(outs, level, "\"pattern_tags_file\" : ");
+
27 outs << "\"" << peconv::get_file_name(patternsTagFileName) << "\"" << ",\n";
28 }
-
29 if (impRecMode.length()) {
-
30 OUT_PADDED(outs, level, "\"imp_rec_result\" : ");
-
31 outs << "\"" << impRecMode << "\"" << ",\n";
-
32 if (notRecoveredFileName.length()) {
-
33 OUT_PADDED(outs, level, "\"imp_not_recovered_file\" : ");
-
34 outs << "\"" << peconv::get_file_name(notRecoveredFileName) << "\"" << ",\n";
-
35 }
-
36 }
-
37 if (this->iatHooksFileName.length()) {
-
38 OUT_PADDED(outs, level, "\"iat_hooks_file\" : ");
-
39 outs << "\"" << peconv::get_file_name(iatHooksFileName) << "\"" << ",\n";
+
29 if (impListFileName.length()) {
+
30 OUT_PADDED(outs, level, "\"imports_file\" : ");
+
31 outs << "\"" << peconv::get_file_name(impListFileName) << "\"" << ",\n";
+
32 }
+
33 if (impRecMode.length()) {
+
34 OUT_PADDED(outs, level, "\"imp_rec_result\" : ");
+
35 outs << "\"" << impRecMode << "\"" << ",\n";
+
36 if (notRecoveredFileName.length()) {
+
37 OUT_PADDED(outs, level, "\"imp_not_recovered_file\" : ");
+
38 outs << "\"" << peconv::get_file_name(notRecoveredFileName) << "\"" << ",\n";
+
39 }
40 }
-
41 if (mode_info.length()) {
-
42 OUT_PADDED(outs, level, "\"dump_mode\" : ");
-
43 outs << "\"" << mode_info << "\"" << ",\n";
+
41 if (this->iatHooksFileName.length()) {
+
42 OUT_PADDED(outs, level, "\"iat_hooks_file\" : ");
+
43 outs << "\"" << peconv::get_file_name(iatHooksFileName) << "\"" << ",\n";
44 }
-
45 OUT_PADDED(outs, level, "\"is_shellcode\" : ");
-
46 outs << std::dec << is_shellcode << ",\n";
-
47 if (is_corrupt_pe) {
-
48 OUT_PADDED(outs, level, "\"is_corrupt_pe\" : ");
-
49 outs << std::dec << is_corrupt_pe << ",\n";
-
50 }
-
51
-
52 OUT_PADDED(outs, level, "\"status\" : ");
-
53 outs << std::dec << this->isDumped;
-
54 return true;
-
55}
+
45 if (mode_info.length()) {
+
46 OUT_PADDED(outs, level, "\"dump_mode\" : ");
+
47 outs << "\"" << mode_info << "\"" << ",\n";
+
48 }
+
49 OUT_PADDED(outs, level, "\"is_shellcode\" : ");
+
50 outs << std::dec << is_shellcode << ",\n";
+
51 if (is_corrupt_pe) {
+
52 OUT_PADDED(outs, level, "\"is_corrupt_pe\" : ");
+
53 outs << std::dec << is_corrupt_pe << ",\n";
+
54 }
+
55
+
56 OUT_PADDED(outs, level, "\"status\" : ");
+
57 outs << std::dec << this->isDumped;
+
58 return true;
+
59}
-
56
-
57// ProcessDumpReport
-
58
-
-
59bool pesieve::ProcessDumpReport::toJSON(std::stringstream &stream, size_t start_level) const
-
60{
-
61 size_t level = start_level + 1;
-
62 OUT_PADDED(stream, start_level, "{\n"); // beginning of the report
-
63
-
64 OUT_PADDED(stream, level, "\"pid\" : ");
-
65 stream << std::dec << getPid() << ",\n";
-
66
-
67 OUT_PADDED(stream, level, "\"output_dir\" : \"");
-
68 stream << escape_path_separators(outputDir) << "\",\n";
-
69 if (minidumpPath.length()) {
-
70 OUT_PADDED(stream, level, "\"minidump_path\" : \"");
-
71 stream << escape_path_separators(this->minidumpPath) << "\",\n";
-
72 }
-
73
-
74 OUT_PADDED(stream, level, "\"dumped\" : \n");
-
75 OUT_PADDED(stream, level, "{\n");
-
76 //stream << " {\n";
-
77 OUT_PADDED(stream, level + 1, "\"total\" : ");
-
78 stream << std::dec << countTotal() << ",\n";
-
79 OUT_PADDED(stream, level + 1, "\"dumped\" : ");
-
80 stream << std::dec << countDumped() << "\n";
-
81 OUT_PADDED(stream, level, "},\n"); // scanned
-
82 stream << list_dumped_modules(level);
-
83
-
84 OUT_PADDED(stream, start_level, "}"); // end of the report
-
85
-
86 return true;
-
87}
+
60
+
61// ProcessDumpReport
+
62
+
+
63bool pesieve::ProcessDumpReport::toJSON(std::stringstream &stream, size_t start_level) const
+
64{
+
65 size_t level = start_level + 1;
+
66 OUT_PADDED(stream, start_level, "{\n"); // beginning of the report
+
67
+
68 OUT_PADDED(stream, level, "\"pid\" : ");
+
69 stream << std::dec << getPid() << ",\n";
+
70
+
71 OUT_PADDED(stream, level, "\"output_dir\" : \"");
+
72 stream << escape_path_separators(outputDir) << "\",\n";
+
73 if (minidumpPath.length()) {
+
74 OUT_PADDED(stream, level, "\"minidump_path\" : \"");
+
75 stream << escape_path_separators(this->minidumpPath) << "\",\n";
+
76 }
+
77
+
78 OUT_PADDED(stream, level, "\"dumped\" : \n");
+
79 OUT_PADDED(stream, level, "{\n");
+
80 //stream << " {\n";
+
81 OUT_PADDED(stream, level + 1, "\"total\" : ");
+
82 stream << std::dec << countTotal() << ",\n";
+
83 OUT_PADDED(stream, level + 1, "\"dumped\" : ");
+
84 stream << std::dec << countDumped() << "\n";
+
85 OUT_PADDED(stream, level, "},\n"); // scanned
+
86 stream << list_dumped_modules(level);
+
87
+
88 OUT_PADDED(stream, start_level, "}"); // end of the report
+
89
+
90 return true;
+
91}
-
88
-
-
89std::string pesieve::ProcessDumpReport::list_dumped_modules(size_t level) const
-
90{
-
91 std::stringstream stream;
-
92 //summary:
-
93 OUT_PADDED(stream, level, "\"dumps\" : [\n");
-
94 bool is_first = true;
-
95 std::vector<ModuleDumpReport*>::const_iterator itr;
-
96 for (itr = moduleReports.begin(); itr != moduleReports.end(); ++itr) {
-
97 ModuleDumpReport *mod = *itr;
-
98 if (mod->isDumped || mod->isReportDumped) {
-
99 if (!is_first) {
-
100 stream << ",\n";
-
101 }
-
102 OUT_PADDED(stream, level + 1, "{\n");
-
103 if (mod->toJSON(stream, level + 2)) {
-
104 stream << "\n";
+
92
+
+
93std::string pesieve::ProcessDumpReport::list_dumped_modules(size_t level) const
+
94{
+
95 std::stringstream stream;
+
96 //summary:
+
97 OUT_PADDED(stream, level, "\"dumps\" : [\n");
+
98 bool is_first = true;
+
99 std::vector<ModuleDumpReport*>::const_iterator itr;
+
100 for (itr = moduleReports.begin(); itr != moduleReports.end(); ++itr) {
+
101 ModuleDumpReport *mod = *itr;
+
102 if (mod->isDumped || mod->isReportDumped) {
+
103 if (!is_first) {
+
104 stream << ",\n";
105 }
-
106 OUT_PADDED(stream, level + 1, "}");
-
107 is_first = false;
-
108 }
-
109 }
-
110 if (moduleReports.size()) {
-
111 stream << "\n";
-
112 }
-
113 OUT_PADDED(stream, level, "]\n");
-
114 return stream.str();
-
115}
+
106 OUT_PADDED(stream, level + 1, "{\n");
+
107 if (mod->toJSON(stream, level + 2)) {
+
108 stream << "\n";
+
109 }
+
110 OUT_PADDED(stream, level + 1, "}");
+
111 is_first = false;
+
112 }
+
113 }
+
114 if (moduleReports.size()) {
+
115 stream << "\n";
+
116 }
+
117 OUT_PADDED(stream, level, "]\n");
+
118 return stream.str();
+
119}
- + + - -
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:42
+ +
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:43
pesieve::ModuleDumpReport::toJSON
virtual const bool toJSON(std::stringstream &outs, size_t level)
Definition dump_report.cpp:7
- - - - - - - -
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:40
- -
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:59
-
pesieve::ProcessDumpReport::list_dumped_modules
std::string list_dumped_modules(size_t level) const
Definition dump_report.cpp:89
+ + + + + + + +
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:41
+ +
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:63
+
pesieve::ProcessDumpReport::list_dumped_modules
std::string list_dumped_modules(size_t level) const
Definition dump_report.cpp:93
dump_report.h
format_util.h
OUT_PADDED
#define OUT_PADDED(stream, field_size, str)
Definition format_util.h:12
diff --git a/dump__report_8h_source.html b/dump__report_8h_source.html index 594465016..10567bc95 100644 --- a/dump__report_8h_source.html +++ b/dump__report_8h_source.html @@ -115,7 +115,7 @@
19
20 ModuleDumpReport(ULONGLONG module_start, size_t module_size)
-
21 : moduleStart(module_start), moduleSize(module_size),
+
21 : moduleStart(module_start), moduleSize(module_size), rebasedTo(module_start),
22 isDumped(false), isReportDumped(false),
23 is_corrupt_pe(false),
24 is_shellcode(false)
@@ -127,142 +127,144 @@
29
30 ULONGLONG moduleStart;
31 size_t moduleSize;
-
32 bool is_corrupt_pe;
-
33 bool is_shellcode;
-
34 std::string impRecMode;
-
35 bool isReportDumped;
-
36 bool isDumped;
-
37 std::string mode_info;
-
38 std::string dumpFileName;
-
39 std::string hooksTagFileName;
-
40 std::string patternsTagFileName;
-
41 std::string impListFileName;
-
42 std::string notRecoveredFileName;
-
43 std::string iatHooksFileName;
-
44 };
+
32 ULONGLONG rebasedTo;
+
33 bool is_corrupt_pe;
+
34 bool is_shellcode;
+
35 std::string impRecMode;
+
36 bool isReportDumped;
+
37 bool isDumped;
+
38 std::string mode_info;
+
39 std::string dumpFileName;
+
40 std::string hooksTagFileName;
+
41 std::string patternsTagFileName;
+
42 std::string impListFileName;
+
43 std::string notRecoveredFileName;
+
44 std::string iatHooksFileName;
+
45 };
-
45
-
-
47 class ProcessDumpReport
-
48 {
-
49 public:
-
-
50 ProcessDumpReport(DWORD _pid)
-
51 : pid(_pid)
-
52 {
-
53 }
+
46
+
+
48 class ProcessDumpReport
+
49 {
+
50 public:
+
+
51 ProcessDumpReport(DWORD _pid)
+
52 : pid(_pid)
+
53 {
+
54 }
-
54
-
-
55 ~ProcessDumpReport()
-
56 {
-
57 deleteModuleReports();
-
58 }
+
55
+
+
56 ~ProcessDumpReport()
+
57 {
+
58 deleteModuleReports();
+
59 }
-
59
-
-
60 void appendReport(ModuleDumpReport *report)
-
61 {
-
62 if (!report) return;
-
63 moduleReports.push_back(report);
-
64 }
+
60
+
+
61 void appendReport(ModuleDumpReport *report)
+
62 {
+
63 if (!report) return;
+
64 moduleReports.push_back(report);
+
65 }
-
65
-
-
66 size_t countTotal() const
-
67 {
-
68 return moduleReports.size();
-
69 }
+
66
+
+
67 size_t countTotal() const
+
68 {
+
69 return moduleReports.size();
+
70 }
-
70
-
-
71 bool isFilled() const
-
72 {
-
73 if (countTotal()) return true;
-
74 if (this->minidumpPath.length()) return true;
-
75 return false;
-
76 }
+
71
+
+
72 bool isFilled() const
+
73 {
+
74 if (countTotal()) return true;
+
75 if (this->minidumpPath.length()) return true;
+
76 return false;
+
77 }
-
77
-
-
78 size_t countDumped() const
-
79 {
-
80 size_t dumped = 0;
-
81 std::vector<ModuleDumpReport*>::const_iterator itr = moduleReports.begin();
-
82 for (; itr != moduleReports.end(); ++itr) {
-
83 ModuleDumpReport* module = *itr;
-
84 if (module->isDumped) {
-
85 dumped++;
-
86 }
-
87 }
-
88 return dumped;
-
89 }
+
78
+
+
79 size_t countDumped() const
+
80 {
+
81 size_t dumped = 0;
+
82 std::vector<ModuleDumpReport*>::const_iterator itr = moduleReports.begin();
+
83 for (; itr != moduleReports.end(); ++itr) {
+
84 ModuleDumpReport* module = *itr;
+
85 if (module->isDumped) {
+
86 dumped++;
+
87 }
+
88 }
+
89 return dumped;
+
90 }
-
90
-
91 virtual bool toJSON(std::stringstream &stream, size_t level) const;
-
92
-
93 DWORD getPid() const { return pid; }
-
94
-
95 std::string outputDir;
-
96 std::string minidumpPath;
-
97
-
98 protected:
-
99
-
100 std::string list_dumped_modules(size_t level) const;
-
101
-
-
102 void deleteModuleReports()
-
103 {
-
104 std::vector<ModuleDumpReport*>::iterator itr = moduleReports.begin();
-
105 for (; itr != moduleReports.end(); ++itr) {
-
106 ModuleDumpReport* module = *itr;
-
107 delete module;
-
108 }
-
109 moduleReports.clear();
-
110 }
+
91
+
92 virtual bool toJSON(std::stringstream &stream, size_t level) const;
+
93
+
94 DWORD getPid() const { return pid; }
+
95
+
96 std::string outputDir;
+
97 std::string minidumpPath;
+
98
+
99 protected:
+
100
+
101 std::string list_dumped_modules(size_t level) const;
+
102
+
+
103 void deleteModuleReports()
+
104 {
+
105 std::vector<ModuleDumpReport*>::iterator itr = moduleReports.begin();
+
106 for (; itr != moduleReports.end(); ++itr) {
+
107 ModuleDumpReport* module = *itr;
+
108 delete module;
+
109 }
+
110 moduleReports.clear();
+
111 }
-
111
-
112 DWORD pid;
-
113 std::vector<ModuleDumpReport*> moduleReports;
-
114
-
115 friend class ResultsDumper;
-
116 };
+
112
+
113 DWORD pid;
+
114 std::vector<ModuleDumpReport*> moduleReports;
+
115
+
116 friend class ResultsDumper;
+
117 };
-
117
-
118};
-
119
+
118
+
119};
+
120
- + + - -
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:42
+ +
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:43
pesieve::ModuleDumpReport::toJSON
virtual const bool toJSON(std::stringstream &outs, size_t level)
Definition dump_report.cpp:7
- - - - - - - + + + + + + +
pesieve::ModuleDumpReport::ModuleDumpReport
ModuleDumpReport(ULONGLONG module_start, size_t module_size)
Definition dump_report.h:20
-
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:40
- -
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:48
-
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:59
- -
pesieve::ProcessDumpReport::moduleReports
std::vector< ModuleDumpReport * > moduleReports
Definition dump_report.h:113
- -
pesieve::ProcessDumpReport::list_dumped_modules
std::string list_dumped_modules(size_t level) const
Definition dump_report.cpp:89
- - - -
pesieve::ProcessDumpReport::countTotal
size_t countTotal() const
Definition dump_report.h:66
- -
pesieve::ProcessDumpReport::countDumped
size_t countDumped() const
Definition dump_report.h:78
- -
pesieve::ProcessDumpReport::appendReport
void appendReport(ModuleDumpReport *report)
Definition dump_report.h:60
- +
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:41
+ +
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:49
+
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:63
+ +
pesieve::ProcessDumpReport::moduleReports
std::vector< ModuleDumpReport * > moduleReports
Definition dump_report.h:114
+ +
pesieve::ProcessDumpReport::list_dumped_modules
std::string list_dumped_modules(size_t level) const
Definition dump_report.cpp:93
+ + + +
pesieve::ProcessDumpReport::countTotal
size_t countTotal() const
Definition dump_report.h:67
+ +
pesieve::ProcessDumpReport::countDumped
size_t countDumped() const
Definition dump_report.h:79
+ +
pesieve::ProcessDumpReport::appendReport
void appendReport(ModuleDumpReport *report)
Definition dump_report.h:61
+
path_converter.h
diff --git a/functions_r.html b/functions_r.html index a4e16eef8..9afd20c31 100644 --- a/functions_r.html +++ b/functions_r.html @@ -95,6 +95,7 @@

- r -

-
420
-
-
421void pesieve::ResultsDumper::makeAndJoinDirectories(std::stringstream& stream)
-
422{
-
423 if (!make_dump_dir(this->baseDir)) {
-
424 this->baseDir = ""; // reset path
-
425 }
-
426 std::string inner_dir = this->dumpDir;
-
427 if (baseDir.length() > 0) {
-
428 inner_dir = this->baseDir + DIR_SEPARATOR + this->dumpDir;
-
429 }
-
430 if (!make_dump_dir(inner_dir)) {
-
431 this->dumpDir = ""; // reset path
+
423
+
+
424void pesieve::ResultsDumper::makeAndJoinDirectories(std::stringstream& stream)
+
425{
+
426 if (!make_dump_dir(this->baseDir)) {
+
427 this->baseDir = ""; // reset path
+
428 }
+
429 std::string inner_dir = this->dumpDir;
+
430 if (baseDir.length() > 0) {
+
431 inner_dir = this->baseDir + DIR_SEPARATOR + this->dumpDir;
432 }
-
433 if (baseDir.length() > 0) {
-
434 stream << baseDir;
-
435 stream << DIR_SEPARATOR;
-
436 }
-
437 if (this->dumpDir.length() > 0) {
-
438 stream << this->dumpDir;
-
439 stream << DIR_SEPARATOR;
-
440 }
-
441}
+
433 if (!make_dump_dir(inner_dir)) {
+
434 this->dumpDir = ""; // reset path
+
435 }
+
436 if (baseDir.length() > 0) {
+
437 stream << baseDir;
+
438 stream << DIR_SEPARATOR;
+
439 }
+
440 if (this->dumpDir.length() > 0) {
+
441 stream << this->dumpDir;
+
442 stream << DIR_SEPARATOR;
+
443 }
+
444}
-
442
-
-
443std::string pesieve::ResultsDumper::makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &default_extension)
-
444{
-
445 std::stringstream stream;
-
446 makeAndJoinDirectories(stream);
-
447 stream << std::hex << modBaseAddr;
-
448 if (fname.length() > 0) {
-
449 stream << ".";
-
450 stream << fname;
-
451 } else {
-
452 stream << "." << default_extension;
-
453 }
-
454 return stream.str();
-
455}
+
445
+
+
446std::string pesieve::ResultsDumper::makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &default_extension)
+
447{
+
448 std::stringstream stream;
+
449 makeAndJoinDirectories(stream);
+
450 stream << std::hex << modBaseAddr;
+
451 if (fname.length() > 0) {
+
452 stream << ".";
+
453 stream << fname;
+
454 } else {
+
455 stream << "." << default_extension;
+
456 }
+
457 return stream.str();
+
458}
-
456
-
-
457std::string pesieve::ResultsDumper::makeOutPath(const std::string &fname, const std::string& default_extension)
-
458{
-
459 std::stringstream stream;
-
460 makeAndJoinDirectories(stream);
-
461
-
462 if (fname.length() > 0) {
-
463 stream << fname;
-
464 }
-
465 else {
-
466 stream << std::dec << time(nullptr);
-
467 stream << default_extension;
-
468 }
-
469 return stream.str();
-
470}
+
459
+
+
460std::string pesieve::ResultsDumper::makeOutPath(const std::string &fname, const std::string& default_extension)
+
461{
+
462 std::stringstream stream;
+
463 makeAndJoinDirectories(stream);
+
464
+
465 if (fname.length() > 0) {
+
466 stream << fname;
+
467 }
+
468 else {
+
469 stream << std::dec << time(nullptr);
+
470 stream << default_extension;
+
471 }
+
472 return stream.str();
+
473}
-
471
-
-
472std::string pesieve::ResultsDumper::makeDirName(const DWORD process_id)
-
473{
-
474 std::stringstream stream;
-
475 stream << "process_";
-
476 stream << process_id;
-
477 return stream.str();
-
478}
+
474
+
+
475std::string pesieve::ResultsDumper::makeDirName(const DWORD process_id)
+
476{
+
477 std::stringstream stream;
+
478 stream << "process_";
+
479 stream << process_id;
+
480 return stream.str();
+
481}
pesieve::ArtefactScanReport
A report from the artefacts scan, generated by ArtefactScanner.
Definition artefact_scanner.h:118
@@ -627,18 +630,19 @@
pesieve::ImpReconstructor::t_imprec_res
enum pesieve::ImpReconstructor::imprec_res t_imprec_res
- - -
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:42
- - - - - - - -
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:40
- + + + +
pesieve::ModuleDumpReport::notRecoveredFileName
std::string notRecoveredFileName
Definition dump_report.h:43
+ + + + + + + +
pesieve::ModuleDumpReport::patternsTagFileName
std::string patternsTagFileName
Definition dump_report.h:41
+
pesieve::ModuleScanReport
A base class of all the reports detailing on the output of the performed module's scan.
Definition module_scan_report.h:26
@@ -658,10 +662,10 @@
pesieve::PeBuffer::dumpToFile
bool dumpToFile(IN std::string dumpFileName)
Definition pe_buffer.cpp:173
-
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:48
-
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:59
- - +
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:49
+
pesieve::ProcessDumpReport::toJSON
virtual bool toJSON(std::stringstream &stream, size_t level) const
Definition dump_report.cpp:63
+ +
pesieve::ProcessScanReport
The report aggregating the results of the performed scan.
Definition scan_report.h:19
pesieve::ProcessScanReport::toJSON
virtual const bool toJSON(std::stringstream &stream, size_t level, const t_results_filter &filter, const pesieve::t_json_level &jdetails) const
Definition scan_report.cpp:212
pesieve::ProcessScanReport::exportsMap
peconv::ExportsMapper * exportsMap
Definition scan_report.h:98
@@ -669,12 +673,12 @@
pesieve::ProcessScanReport::moduleReports
std::vector< ModuleScanReport * > moduleReports
Definition scan_report.h:97
pesieve::ProcessScanReport::hasAnyShownType
bool hasAnyShownType(const t_results_filter &filter)
Definition scan_report.cpp:38
-
pesieve::ResultsDumper::makeModuleDumpPath
std::string makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &defaultExtension)
Definition results_dumper.cpp:443
-
pesieve::ResultsDumper::makeDirName
std::string makeDirName(const DWORD process_id)
Definition results_dumper.cpp:472
+
pesieve::ResultsDumper::makeModuleDumpPath
std::string makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &defaultExtension)
Definition results_dumper.cpp:446
+
pesieve::ResultsDumper::makeDirName
std::string makeDirName(const DWORD process_id)
Definition results_dumper.cpp:475
pesieve::ResultsDumper::fillModuleCopy
bool fillModuleCopy(IN ModuleScanReport *mod, IN OUT PeBuffer &module_buf)
Definition results_dumper.cpp:241
pesieve::ResultsDumper::dumpModule
bool dumpModule(IN HANDLE processHandle, IN bool isRefl, IN const ModulesInfo &modulesInfo, IN ModuleScanReport *modReport, IN const peconv::ExportsMapper *exportsMap, IN const pesieve::t_dump_mode dump_mode, IN const pesieve::t_imprec_mode imprec_mode, IN ULONGLONG out_base, OUT ProcessDumpReport &dumpReport)
Definition results_dumper.cpp:259
-
pesieve::ResultsDumper::makeAndJoinDirectories
void makeAndJoinDirectories(std::stringstream &name_stream)
Definition results_dumper.cpp:421
-
pesieve::ResultsDumper::makeOutPath
std::string makeOutPath(const std::string &fname, const std::string &defaultExtension="")
Definition results_dumper.cpp:457
+
pesieve::ResultsDumper::makeAndJoinDirectories
void makeAndJoinDirectories(std::stringstream &name_stream)
Definition results_dumper.cpp:424
+
pesieve::ResultsDumper::makeOutPath
std::string makeOutPath(const std::string &fname, const std::string &defaultExtension="")
Definition results_dumper.cpp:460
pesieve::ResultsDumper::dumpDetectedModules
ProcessDumpReport * dumpDetectedModules(HANDLE hProcess, bool isRefl, ProcessScanReport &process_report, const pesieve::t_dump_mode dump_mode, const t_imprec_mode imprec_mode, const bool rebase)
Definition results_dumper.cpp:204
pesieve::ResultsDumper::dumpJsonReport
bool dumpJsonReport(ProcessScanReport &process_report, const t_results_filter &filter, const pesieve::t_json_level &jdetails)
Definition results_dumper.cpp:116
diff --git a/results__dumper_8h_source.html b/results__dumper_8h_source.html index ab495726f..2b1f4ea4e 100644 --- a/results__dumper_8h_source.html +++ b/results__dumper_8h_source.html @@ -173,16 +173,16 @@
pesieve::ModuleScanReport
A base class of all the reports detailing on the output of the performed module's scan.
Definition module_scan_report.h:26
pesieve::ModulesInfo
A container of all the process modules that were scanned.
Definition scanned_modules.h:84
-
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:48
+
pesieve::ProcessDumpReport
The report aggregating the results of the performed dumps.
Definition dump_report.h:49
pesieve::ProcessScanReport
The report aggregating the results of the performed scan.
Definition scan_report.h:19
-
pesieve::ResultsDumper::makeModuleDumpPath
std::string makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &defaultExtension)
Definition results_dumper.cpp:443
-
pesieve::ResultsDumper::makeDirName
std::string makeDirName(const DWORD process_id)
Definition results_dumper.cpp:472
+
pesieve::ResultsDumper::makeModuleDumpPath
std::string makeModuleDumpPath(ULONGLONG modBaseAddr, const std::string &fname, const std::string &defaultExtension)
Definition results_dumper.cpp:446
+
pesieve::ResultsDumper::makeDirName
std::string makeDirName(const DWORD process_id)
Definition results_dumper.cpp:475
pesieve::ResultsDumper::fillModuleCopy
bool fillModuleCopy(IN ModuleScanReport *mod, IN OUT PeBuffer &module_buf)
Definition results_dumper.cpp:241
pesieve::ResultsDumper::dumpModule
bool dumpModule(IN HANDLE processHandle, IN bool isRefl, IN const ModulesInfo &modulesInfo, IN ModuleScanReport *modReport, IN const peconv::ExportsMapper *exportsMap, IN const pesieve::t_dump_mode dump_mode, IN const pesieve::t_imprec_mode imprec_mode, IN ULONGLONG out_base, OUT ProcessDumpReport &dumpReport)
Definition results_dumper.cpp:259
-
pesieve::ResultsDumper::makeAndJoinDirectories
void makeAndJoinDirectories(std::stringstream &name_stream)
Definition results_dumper.cpp:421
+
pesieve::ResultsDumper::makeAndJoinDirectories
void makeAndJoinDirectories(std::stringstream &name_stream)
Definition results_dumper.cpp:424
pesieve::ResultsDumper::ResultsDumper
ResultsDumper(std::string _baseDir, bool _quiet)
Definition results_dumper.h:15
-
pesieve::ResultsDumper::makeOutPath
std::string makeOutPath(const std::string &fname, const std::string &defaultExtension="")
Definition results_dumper.cpp:457
+
pesieve::ResultsDumper::makeOutPath
std::string makeOutPath(const std::string &fname, const std::string &defaultExtension="")
Definition results_dumper.cpp:460
pesieve::ResultsDumper::dumpDetectedModules
ProcessDumpReport * dumpDetectedModules(HANDLE hProcess, bool isRefl, ProcessScanReport &process_report, const pesieve::t_dump_mode dump_mode, const t_imprec_mode imprec_mode, const bool rebase)
Definition results_dumper.cpp:204
pesieve::ResultsDumper::getOutputDir
std::string getOutputDir()
Definition results_dumper.h:37
diff --git a/search/all_11.js b/search/all_11.js index 6363c050d..ff84c38f1 100644 --- a/search/all_11.js +++ b/search/all_11.js @@ -8,84 +8,85 @@ var searchData= ['real_5fend_5',['real_end',['../structpesieve_1_1util_1_1_basic_buffer.html#aee9fd489dbd4bf45308b52b1c5aeb435',1,'pesieve::util::BasicBuffer']]], ['real_5fstart_6',['real_start',['../structpesieve_1_1util_1_1_basic_buffer.html#acde1aea3272243e075dd3ae8a3203cab',1,'pesieve::util::BasicBuffer']]], ['rebase_7',['rebase',['../structparams.html#a98a3ea3c67b4a9b40e0f1d481b9aad16',1,'params']]], - ['rebuildimporttable_8',['rebuildImportTable',['../classpesieve_1_1_imp_reconstructor.html#a0bd47882ef4d6ec060058fd7301bd98b',1,'pesieve::ImpReconstructor']]], - ['reconstruct_9',['reconstruct',['../classpesieve_1_1_pe_reconstructor.html#aecc81860235f996140714d2bfe72bc51',1,'pesieve::PeReconstructor']]], - ['reconstructfilehdr_10',['reconstructFileHdr',['../classpesieve_1_1_pe_reconstructor.html#aa0d7088e0c017e177c2c487e48350ec4',1,'pesieve::PeReconstructor']]], - ['reconstructpehdr_11',['reconstructPeHdr',['../classpesieve_1_1_pe_reconstructor.html#a8303cb8e9feccbd0d7c64e0626ab40a9',1,'pesieve::PeReconstructor']]], - ['refl_5fcreator_12',['refl_creator',['../namespacepesieve_1_1util.html#a53ca48eef1d83215af385674555e444b',1,'pesieve::util']]], - ['reflection_5faccess_13',['reflection_access',['../namespacepesieve_1_1util.html#aab776ea03e0335576aca85e90bf5d797',1,'pesieve::util']]], - ['reflection_5faccess1_14',['reflection_access1',['../namespacepesieve_1_1util.html#a62d79819515a821faa93b5b5abc720d9',1,'pesieve::util']]], - ['reflection_5faccess2_15',['reflection_access2',['../namespacepesieve_1_1util.html#a7dffba8d8d716ef0271741cc51fa8e32',1,'pesieve::util']]], - ['reflectionclientid_16',['ReflectionClientId',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a43b5dd1a7b7bde4a8f58d12a6c84e597',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['reflectioninformation_17',['ReflectionInformation',['../namespacepesieve_1_1util.html#a52fde4e3f95c54ca8bd0a482fd016c26',1,'pesieve::util']]], - ['reflectionprocesshandle_18',['ReflectionProcessHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a9ae8f2e810520ddb949e0c4a80d942c6',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['reflectionthreadhandle_19',['ReflectionThreadHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#ae27e77c0998c78480fc236ccfa17b7d1',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['region_5fend_20',['region_end',['../classpesieve_1_1_mem_page_data.html#a2c5096bc0354ff2ba1e77b72978b46d0',1,'pesieve::MemPageData']]], - ['region_5fstart_21',['region_start',['../classpesieve_1_1_mem_page_data.html#ac0d51e421ea1f5489c2538a9475b8a6e',1,'pesieve::MemPageData']]], - ['regionstart_22',['regionStart',['../classpesieve_1_1_pe_artefacts.html#ace73d07e94c6cbb1367b8734a11e66d7',1,'pesieve::PeArtefacts']]], - ['relative_5fto_5fabsolute_5fpath_23',['relative_to_absolute_path',['../namespacepesieve_1_1util.html#aef45bac1fce06bb27d1c8bdb41d0d84c',1,'pesieve::util']]], - ['release_5fprocess_5freflection_24',['release_process_reflection',['../namespacepesieve_1_1util.html#ac39000bfb52a6dbdacb7a5b68bb21674',1,'pesieve::util']]], - ['release_5fprocess_5fsnapshot_25',['release_process_snapshot',['../namespacepesieve_1_1util.html#a905cd117f8d7e19b984bc395defc3b63',1,'pesieve::util']]], - ['reloadwow64_26',['reloadWow64',['../classpesieve_1_1_module_data.html#a1fab06ced58f5432dae107aed4063a32',1,'pesieve::ModuleData']]], - ['relocatetobase_27',['relocateToBase',['../classpesieve_1_1_module_data.html#a39d37446bca2041d5fb9c0cc64998f15',1,'pesieve::ModuleData']]], - ['relocbase_28',['relocBase',['../classpesieve_1_1_pe_buffer.html#af82f09c9cf7265dd990b5fe299864838',1,'pesieve::PeBuffer::relocBase'],['../classpesieve_1_1_module_scan_report.html#a65db46896baa89ad7718d33daa449024',1,'pesieve::ModuleScanReport::relocBase']]], - ['relocs_29',['relocs',['../classpesieve_1_1_patch_analyzer.html#a449f7bb45cab966c6cad9032275cbb5e',1,'pesieve::PatchAnalyzer']]], - ['remap_5fto_5fdrive_5fletter_30',['remap_to_drive_letter',['../namespacepesieve_1_1util.html#a31cd5387a84569779492a6d7c5b0420a',1,'pesieve::util']]], - ['remotemoddata_31',['remoteModData',['../classpesieve_1_1_module_scanner.html#a78ff1c135f070ab0d6e0ad3870604f90',1,'pesieve::ModuleScanner']]], - ['remotemoduledata_32',['RemoteModuleData',['../classpesieve_1_1_remote_module_data.html',1,'pesieve::RemoteModuleData'],['../classpesieve_1_1_remote_module_data.html#accd114f284a3f3b261b54806f60c4991',1,'pesieve::RemoteModuleData::RemoteModuleData()']]], - ['replace_5fchar_33',['replace_char',['../namespacepesieve_1_1util.html#a030a7f8a58a027763c9207b0ff815d26',1,'pesieve::util']]], - ['replaced_34',['replaced',['../structreport.html#aae8b1ebdd28c6b82ce2f09d92061a149',1,'report']]], - ['report_35',['report',['../structreport.html',1,'report'],['../namespacedemo.html#a513d2764942b4ca84e23710eef9f2119',1,'demo.report']]], - ['report_5fall_36',['REPORT_ALL',['../classpesieve_1_1t__report__type.html#a8b022f205ea91eeb55289a593e1394eb',1,'pesieve.t_report_type.REPORT_ALL'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a004d7f4fb233ef11654c122044700f00',1,'REPORT_ALL: pe_sieve_types.h']]], - ['report_5fartefact_5fscan_37',['REPORT_ARTEFACT_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a3d095ef0e386f8f33a1d327676716a11',1,'pesieve::ProcessScanReport']]], - ['report_5fcode_5fscan_38',['REPORT_CODE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ad75d0343a014ff7cad0dd28eee109372',1,'pesieve::ProcessScanReport']]], - ['report_5fdumped_39',['REPORT_DUMPED',['../classpesieve_1_1t__report__type.html#aa4f509edafea0a15a88e59d63c63b63a',1,'pesieve.t_report_type.REPORT_DUMPED'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a4e97c97ded6612b3f4379fd4f6cc5b56',1,'REPORT_DUMPED: pe_sieve_types.h']]], - ['report_5fformatter_2ecpp_40',['report_formatter.cpp',['../report__formatter_8cpp.html',1,'']]], - ['report_5fformatter_2eh_41',['report_formatter.h',['../report__formatter_8h.html',1,'']]], - ['report_5fheaders_5fscan_42',['REPORT_HEADERS_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ab53553ad7ded2705408f890df60120de',1,'pesieve::ProcessScanReport']]], - ['report_5fiat_5fscan_43',['REPORT_IAT_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ac80787e67a8b1ab6c2c67b83b69d5f61',1,'pesieve::ProcessScanReport']]], - ['report_5fmapping_5fscan_44',['REPORT_MAPPING_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2aa8348ee79c120214cfb8ac9bd8bbc9bd',1,'pesieve::ProcessScanReport']]], - ['report_5fmempage_5fscan_45',['REPORT_MEMPAGE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a4cfb6541f9d18a68ae84614fe42546ae',1,'pesieve::ProcessScanReport']]], - ['report_5fnone_46',['REPORT_NONE',['../classpesieve_1_1t__report__type.html#a5e5ae97a231a29dab3433dab0fcb3039',1,'pesieve.t_report_type.REPORT_NONE'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a5c81ddc6d9cb0bcc993394f818d16ac2',1,'REPORT_NONE: pe_sieve_types.h']]], - ['report_5fscanned_47',['REPORT_SCANNED',['../classpesieve_1_1t__report__type.html#a33b01a2ea93a8cd6dec70841f1320929',1,'pesieve.t_report_type.REPORT_SCANNED'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1afe9330ce4c9db0cd8606097d71a4cf1c',1,'REPORT_SCANNED: pe_sieve_types.h']]], - ['report_5fskipped_5fscan_48',['REPORT_SKIPPED_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a3e233fb0e560948318f0b1492467a71d',1,'pesieve::ProcessScanReport']]], - ['report_5fthreads_5fscan_49',['REPORT_THREADS_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a88b989460cc17a457961268d92fc3935',1,'pesieve::ProcessScanReport']]], - ['report_5fto_5fjson_50',['report_to_json',['../namespacepesieve.html#a90510c3aed6db4cb8169647fe0be23a2',1,'pesieve']]], - ['report_5ftypes_5fcount_51',['REPORT_TYPES_COUNT',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a8ff62f2b760054277795a3fb96ff3049',1,'pesieve::ProcessScanReport']]], - ['report_5funreachable_5fscan_52',['REPORT_UNREACHABLE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a43c228690a459c8f0aa30d2a82781619',1,'pesieve::ProcessScanReport']]], - ['reportex_53',['ReportEx',['../classpesieve_1_1_report_ex.html',1,'pesieve::ReportEx'],['../classpesieve_1_1_report_ex.html#a9e842b1e96f07f59f2939361f57c3e4f',1,'pesieve::ReportEx::ReportEx()']]], - ['reportsbytype_54',['reportsByType',['../classpesieve_1_1_process_scan_report.html#a85b6e8a39ec43b08a4f534dbd3f0589e',1,'pesieve::ProcessScanReport']]], - ['reportsuspiciousaddr_55',['reportSuspiciousAddr',['../classpesieve_1_1_thread_scanner.html#a36850edb808d4be733631fa2bcd3b7b4',1,'pesieve::ThreadScanner']]], - ['resize_56',['resize',['../classpesieve_1_1_scanned_module.html#ac27ab29a010ac2d3e139f2654c3d0777',1,'pesieve::ScannedModule']]], - ['resizebuffer_57',['resizeBuffer',['../classpesieve_1_1_pe_buffer.html#acb55b77a03b907c954733c0bcedb1999',1,'pesieve::PeBuffer']]], - ['resizelastsection_58',['resizeLastSection',['../classpesieve_1_1_pe_buffer.html#ac4cadead68e44b5be64edaf80880cbef',1,'pesieve::PeBuffer']]], - ['resolveallhooks_59',['resolveAllHooks',['../classpesieve_1_1_hook_target_resolver.html#a51fc6092d397fbb7c414853d703ed064',1,'pesieve::HookTargetResolver']]], - ['resolvehookedexport_60',['resolveHookedExport',['../classpesieve_1_1_patch_list_1_1_patch.html#a6bfc8ab70087b9bb66ba299e96b527d8',1,'pesieve::PatchList::Patch']]], - ['resolvehookstargets_61',['resolveHooksTargets',['../classpesieve_1_1_process_scanner.html#a90626aea47ee92aebaf55cc7cf9f3b06',1,'pesieve::ProcessScanner']]], - ['resolvetarget_62',['resolveTarget',['../classpesieve_1_1_hook_target_resolver.html#a608ca9968909fbbb18a07af866ea47b1',1,'pesieve::HookTargetResolver']]], - ['resources_2eh_63',['resources.h',['../resources_8h.html',1,'']]], - ['results_5fdumper_2ecpp_64',['results_dumper.cpp',['../results__dumper_8cpp.html',1,'']]], - ['results_5fdumper_2eh_65',['results_dumper.h',['../results__dumper_8h.html',1,'']]], - ['results_5ffilter_66',['results_filter',['../structparams.html#ac737bb7714cdc298bdab195c38a11d95',1,'params']]], - ['results_5ffilter_5fto_5fid_67',['results_filter_to_id',['../namespacepesieve.html#abb9076180378513af333eab3b495a1bd',1,'pesieve']]], - ['resultsdumper_68',['ResultsDumper',['../classpesieve_1_1_results_dumper.html',1,'pesieve::ResultsDumper'],['../classpesieve_1_1_process_dump_report.html#a0e77b9b85b41616be4cfe0745cb94549',1,'pesieve::ProcessDumpReport::ResultsDumper'],['../classpesieve_1_1_process_scan_report.html#a0e77b9b85b41616be4cfe0745cb94549',1,'pesieve::ProcessScanReport::ResultsDumper'],['../classpesieve_1_1_results_dumper.html#a84cedbc87af0ee8b72f06fd7c6cb9b5a',1,'pesieve::ResultsDumper::ResultsDumper()']]], - ['ret_5fon_5fstack_69',['ret_on_stack',['../structpesieve_1_1__ctx__details.html#a9c9416530acb79291642a6af92a50088',1,'pesieve::_ctx_details']]], - ['returned_5fhndl_70',['returned_hndl',['../structpesieve_1_1util_1_1t__refl__args.html#a2039cf10734a4e3f07e94e6068122729',1,'pesieve::util::t_refl_args']]], - ['returned_5fpid_71',['returned_pid',['../structpesieve_1_1util_1_1t__refl__args.html#a7e95cffd1d650f477bb1d64377f4f6d7',1,'pesieve::util::t_refl_args']]], - ['rip_72',['rip',['../structpesieve_1_1__ctx__details.html#a6dc0bc061045467c3d71b6644adf68b4',1,'pesieve::_ctx_details']]], - ['rsp_73',['rsp',['../structpesieve_1_1__ctx__details.html#ab19759b888e6034d29dcaf6cedeed9bd',1,'pesieve::_ctx_details']]], - ['rtl_5fclone_5fprocess_5fflags_5fcreate_5fsuspended_74',['RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED',['../process__reflection_8cpp.html#a32cecac9c7a7d39eb28c815e5cfae2f2',1,'process_reflection.cpp']]], - ['rtl_5fclone_5fprocess_5fflags_5finherit_5fhandles_75',['RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES',['../process__reflection_8cpp.html#a82f1405153b8ad80df8c7398d29e19f5',1,'process_reflection.cpp']]], - ['rtl_5fclone_5fprocess_5fflags_5fno_5fsynchronize_76',['RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE',['../process__reflection_8cpp.html#a9ebf762b1a1365370dcdf4d1258447d8',1,'process_reflection.cpp']]], - ['rtrim_77',['rtrim',['../namespacepesieve_1_1util.html#a31052004d33cccf72236cd5bd451fa91',1,'pesieve::util']]], - ['rule_5fcode_78',['RULE_CODE',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aa6007e2701ffdcbbf8520f4decb8bee61',1,'pesieve::RuleMatcher']]], - ['rule_5fencrypted_79',['RULE_ENCRYPTED',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aabc5eb54cc64621d0c03874dae1328fe2',1,'pesieve::RuleMatcher']]], - ['rule_5fnone_80',['RULE_NONE',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aaee38ad26682344d1747c15ac203dba27',1,'pesieve::RuleMatcher']]], - ['rule_5fobfuscated_81',['RULE_OBFUSCATED',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aaff6b2161fe8136ff7a7be0fd4cf37c31',1,'pesieve::RuleMatcher']]], - ['rule_5ftext_82',['RULE_TEXT',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aa6617b4261cc4bc38519dbfa7b5d708e7',1,'pesieve::RuleMatcher']]], - ['rulematcher_83',['RuleMatcher',['../classpesieve_1_1_rule_matcher.html',1,'pesieve::RuleMatcher'],['../classpesieve_1_1_rule_matcher.html#a977717986c584a95b87ffd73da2e8905',1,'pesieve::RuleMatcher::RuleMatcher()']]], - ['rulematchersset_84',['RuleMatchersSet',['../structpesieve_1_1_rule_matchers_set.html',1,'pesieve::RuleMatchersSet'],['../structpesieve_1_1_rule_matchers_set.html#aff5025d1a45e27e0f98cb4da745b3ff8',1,'pesieve::RuleMatchersSet::RuleMatchersSet()']]], - ['ruletype_85',['RuleType',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6a',1,'pesieve::RuleMatcher']]], - ['rva_86',['rva',['../classpesieve_1_1_pe_section.html#abb3723c684e695788cedc1654463b409',1,'pesieve::PeSection']]], - ['rvatova_87',['rvaToVa',['../classpesieve_1_1_module_data.html#a1227c638b7039f75d3bf31b61fe13bf9',1,'pesieve::ModuleData']]] + ['rebasedto_8',['rebasedTo',['../classpesieve_1_1_module_dump_report.html#a0d18965c81a334eddc02466d20d97bf3',1,'pesieve::ModuleDumpReport']]], + ['rebuildimporttable_9',['rebuildImportTable',['../classpesieve_1_1_imp_reconstructor.html#a0bd47882ef4d6ec060058fd7301bd98b',1,'pesieve::ImpReconstructor']]], + ['reconstruct_10',['reconstruct',['../classpesieve_1_1_pe_reconstructor.html#aecc81860235f996140714d2bfe72bc51',1,'pesieve::PeReconstructor']]], + ['reconstructfilehdr_11',['reconstructFileHdr',['../classpesieve_1_1_pe_reconstructor.html#aa0d7088e0c017e177c2c487e48350ec4',1,'pesieve::PeReconstructor']]], + ['reconstructpehdr_12',['reconstructPeHdr',['../classpesieve_1_1_pe_reconstructor.html#a8303cb8e9feccbd0d7c64e0626ab40a9',1,'pesieve::PeReconstructor']]], + ['refl_5fcreator_13',['refl_creator',['../namespacepesieve_1_1util.html#a53ca48eef1d83215af385674555e444b',1,'pesieve::util']]], + ['reflection_5faccess_14',['reflection_access',['../namespacepesieve_1_1util.html#aab776ea03e0335576aca85e90bf5d797',1,'pesieve::util']]], + ['reflection_5faccess1_15',['reflection_access1',['../namespacepesieve_1_1util.html#a62d79819515a821faa93b5b5abc720d9',1,'pesieve::util']]], + ['reflection_5faccess2_16',['reflection_access2',['../namespacepesieve_1_1util.html#a7dffba8d8d716ef0271741cc51fa8e32',1,'pesieve::util']]], + ['reflectionclientid_17',['ReflectionClientId',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a43b5dd1a7b7bde4a8f58d12a6c84e597',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['reflectioninformation_18',['ReflectionInformation',['../namespacepesieve_1_1util.html#a52fde4e3f95c54ca8bd0a482fd016c26',1,'pesieve::util']]], + ['reflectionprocesshandle_19',['ReflectionProcessHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a9ae8f2e810520ddb949e0c4a80d942c6',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['reflectionthreadhandle_20',['ReflectionThreadHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#ae27e77c0998c78480fc236ccfa17b7d1',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['region_5fend_21',['region_end',['../classpesieve_1_1_mem_page_data.html#a2c5096bc0354ff2ba1e77b72978b46d0',1,'pesieve::MemPageData']]], + ['region_5fstart_22',['region_start',['../classpesieve_1_1_mem_page_data.html#ac0d51e421ea1f5489c2538a9475b8a6e',1,'pesieve::MemPageData']]], + ['regionstart_23',['regionStart',['../classpesieve_1_1_pe_artefacts.html#ace73d07e94c6cbb1367b8734a11e66d7',1,'pesieve::PeArtefacts']]], + ['relative_5fto_5fabsolute_5fpath_24',['relative_to_absolute_path',['../namespacepesieve_1_1util.html#aef45bac1fce06bb27d1c8bdb41d0d84c',1,'pesieve::util']]], + ['release_5fprocess_5freflection_25',['release_process_reflection',['../namespacepesieve_1_1util.html#ac39000bfb52a6dbdacb7a5b68bb21674',1,'pesieve::util']]], + ['release_5fprocess_5fsnapshot_26',['release_process_snapshot',['../namespacepesieve_1_1util.html#a905cd117f8d7e19b984bc395defc3b63',1,'pesieve::util']]], + ['reloadwow64_27',['reloadWow64',['../classpesieve_1_1_module_data.html#a1fab06ced58f5432dae107aed4063a32',1,'pesieve::ModuleData']]], + ['relocatetobase_28',['relocateToBase',['../classpesieve_1_1_module_data.html#a39d37446bca2041d5fb9c0cc64998f15',1,'pesieve::ModuleData']]], + ['relocbase_29',['relocBase',['../classpesieve_1_1_pe_buffer.html#af82f09c9cf7265dd990b5fe299864838',1,'pesieve::PeBuffer::relocBase'],['../classpesieve_1_1_module_scan_report.html#a65db46896baa89ad7718d33daa449024',1,'pesieve::ModuleScanReport::relocBase']]], + ['relocs_30',['relocs',['../classpesieve_1_1_patch_analyzer.html#a449f7bb45cab966c6cad9032275cbb5e',1,'pesieve::PatchAnalyzer']]], + ['remap_5fto_5fdrive_5fletter_31',['remap_to_drive_letter',['../namespacepesieve_1_1util.html#a31cd5387a84569779492a6d7c5b0420a',1,'pesieve::util']]], + ['remotemoddata_32',['remoteModData',['../classpesieve_1_1_module_scanner.html#a78ff1c135f070ab0d6e0ad3870604f90',1,'pesieve::ModuleScanner']]], + ['remotemoduledata_33',['RemoteModuleData',['../classpesieve_1_1_remote_module_data.html',1,'pesieve::RemoteModuleData'],['../classpesieve_1_1_remote_module_data.html#accd114f284a3f3b261b54806f60c4991',1,'pesieve::RemoteModuleData::RemoteModuleData()']]], + ['replace_5fchar_34',['replace_char',['../namespacepesieve_1_1util.html#a030a7f8a58a027763c9207b0ff815d26',1,'pesieve::util']]], + ['replaced_35',['replaced',['../structreport.html#aae8b1ebdd28c6b82ce2f09d92061a149',1,'report']]], + ['report_36',['report',['../structreport.html',1,'report'],['../namespacedemo.html#a513d2764942b4ca84e23710eef9f2119',1,'demo.report']]], + ['report_5fall_37',['REPORT_ALL',['../classpesieve_1_1t__report__type.html#a8b022f205ea91eeb55289a593e1394eb',1,'pesieve.t_report_type.REPORT_ALL'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a004d7f4fb233ef11654c122044700f00',1,'REPORT_ALL: pe_sieve_types.h']]], + ['report_5fartefact_5fscan_38',['REPORT_ARTEFACT_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a3d095ef0e386f8f33a1d327676716a11',1,'pesieve::ProcessScanReport']]], + ['report_5fcode_5fscan_39',['REPORT_CODE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ad75d0343a014ff7cad0dd28eee109372',1,'pesieve::ProcessScanReport']]], + ['report_5fdumped_40',['REPORT_DUMPED',['../classpesieve_1_1t__report__type.html#aa4f509edafea0a15a88e59d63c63b63a',1,'pesieve.t_report_type.REPORT_DUMPED'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a4e97c97ded6612b3f4379fd4f6cc5b56',1,'REPORT_DUMPED: pe_sieve_types.h']]], + ['report_5fformatter_2ecpp_41',['report_formatter.cpp',['../report__formatter_8cpp.html',1,'']]], + ['report_5fformatter_2eh_42',['report_formatter.h',['../report__formatter_8h.html',1,'']]], + ['report_5fheaders_5fscan_43',['REPORT_HEADERS_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ab53553ad7ded2705408f890df60120de',1,'pesieve::ProcessScanReport']]], + ['report_5fiat_5fscan_44',['REPORT_IAT_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2ac80787e67a8b1ab6c2c67b83b69d5f61',1,'pesieve::ProcessScanReport']]], + ['report_5fmapping_5fscan_45',['REPORT_MAPPING_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2aa8348ee79c120214cfb8ac9bd8bbc9bd',1,'pesieve::ProcessScanReport']]], + ['report_5fmempage_5fscan_46',['REPORT_MEMPAGE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a4cfb6541f9d18a68ae84614fe42546ae',1,'pesieve::ProcessScanReport']]], + ['report_5fnone_47',['REPORT_NONE',['../classpesieve_1_1t__report__type.html#a5e5ae97a231a29dab3433dab0fcb3039',1,'pesieve.t_report_type.REPORT_NONE'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1a5c81ddc6d9cb0bcc993394f818d16ac2',1,'REPORT_NONE: pe_sieve_types.h']]], + ['report_5fscanned_48',['REPORT_SCANNED',['../classpesieve_1_1t__report__type.html#a33b01a2ea93a8cd6dec70841f1320929',1,'pesieve.t_report_type.REPORT_SCANNED'],['../pe__sieve__types_8h.html#ac8c9bbde52a2aaaa12a023d92a7d75b1afe9330ce4c9db0cd8606097d71a4cf1c',1,'REPORT_SCANNED: pe_sieve_types.h']]], + ['report_5fskipped_5fscan_49',['REPORT_SKIPPED_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a3e233fb0e560948318f0b1492467a71d',1,'pesieve::ProcessScanReport']]], + ['report_5fthreads_5fscan_50',['REPORT_THREADS_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a88b989460cc17a457961268d92fc3935',1,'pesieve::ProcessScanReport']]], + ['report_5fto_5fjson_51',['report_to_json',['../namespacepesieve.html#a90510c3aed6db4cb8169647fe0be23a2',1,'pesieve']]], + ['report_5ftypes_5fcount_52',['REPORT_TYPES_COUNT',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a8ff62f2b760054277795a3fb96ff3049',1,'pesieve::ProcessScanReport']]], + ['report_5funreachable_5fscan_53',['REPORT_UNREACHABLE_SCAN',['../classpesieve_1_1_process_scan_report.html#a96471984218782869b375015cc93e6c2a43c228690a459c8f0aa30d2a82781619',1,'pesieve::ProcessScanReport']]], + ['reportex_54',['ReportEx',['../classpesieve_1_1_report_ex.html',1,'pesieve::ReportEx'],['../classpesieve_1_1_report_ex.html#a9e842b1e96f07f59f2939361f57c3e4f',1,'pesieve::ReportEx::ReportEx()']]], + ['reportsbytype_55',['reportsByType',['../classpesieve_1_1_process_scan_report.html#a85b6e8a39ec43b08a4f534dbd3f0589e',1,'pesieve::ProcessScanReport']]], + ['reportsuspiciousaddr_56',['reportSuspiciousAddr',['../classpesieve_1_1_thread_scanner.html#a36850edb808d4be733631fa2bcd3b7b4',1,'pesieve::ThreadScanner']]], + ['resize_57',['resize',['../classpesieve_1_1_scanned_module.html#ac27ab29a010ac2d3e139f2654c3d0777',1,'pesieve::ScannedModule']]], + ['resizebuffer_58',['resizeBuffer',['../classpesieve_1_1_pe_buffer.html#acb55b77a03b907c954733c0bcedb1999',1,'pesieve::PeBuffer']]], + ['resizelastsection_59',['resizeLastSection',['../classpesieve_1_1_pe_buffer.html#ac4cadead68e44b5be64edaf80880cbef',1,'pesieve::PeBuffer']]], + ['resolveallhooks_60',['resolveAllHooks',['../classpesieve_1_1_hook_target_resolver.html#a51fc6092d397fbb7c414853d703ed064',1,'pesieve::HookTargetResolver']]], + ['resolvehookedexport_61',['resolveHookedExport',['../classpesieve_1_1_patch_list_1_1_patch.html#a6bfc8ab70087b9bb66ba299e96b527d8',1,'pesieve::PatchList::Patch']]], + ['resolvehookstargets_62',['resolveHooksTargets',['../classpesieve_1_1_process_scanner.html#a90626aea47ee92aebaf55cc7cf9f3b06',1,'pesieve::ProcessScanner']]], + ['resolvetarget_63',['resolveTarget',['../classpesieve_1_1_hook_target_resolver.html#a608ca9968909fbbb18a07af866ea47b1',1,'pesieve::HookTargetResolver']]], + ['resources_2eh_64',['resources.h',['../resources_8h.html',1,'']]], + ['results_5fdumper_2ecpp_65',['results_dumper.cpp',['../results__dumper_8cpp.html',1,'']]], + ['results_5fdumper_2eh_66',['results_dumper.h',['../results__dumper_8h.html',1,'']]], + ['results_5ffilter_67',['results_filter',['../structparams.html#ac737bb7714cdc298bdab195c38a11d95',1,'params']]], + ['results_5ffilter_5fto_5fid_68',['results_filter_to_id',['../namespacepesieve.html#abb9076180378513af333eab3b495a1bd',1,'pesieve']]], + ['resultsdumper_69',['ResultsDumper',['../classpesieve_1_1_results_dumper.html',1,'pesieve::ResultsDumper'],['../classpesieve_1_1_process_dump_report.html#a0e77b9b85b41616be4cfe0745cb94549',1,'pesieve::ProcessDumpReport::ResultsDumper'],['../classpesieve_1_1_process_scan_report.html#a0e77b9b85b41616be4cfe0745cb94549',1,'pesieve::ProcessScanReport::ResultsDumper'],['../classpesieve_1_1_results_dumper.html#a84cedbc87af0ee8b72f06fd7c6cb9b5a',1,'pesieve::ResultsDumper::ResultsDumper()']]], + ['ret_5fon_5fstack_70',['ret_on_stack',['../structpesieve_1_1__ctx__details.html#a9c9416530acb79291642a6af92a50088',1,'pesieve::_ctx_details']]], + ['returned_5fhndl_71',['returned_hndl',['../structpesieve_1_1util_1_1t__refl__args.html#a2039cf10734a4e3f07e94e6068122729',1,'pesieve::util::t_refl_args']]], + ['returned_5fpid_72',['returned_pid',['../structpesieve_1_1util_1_1t__refl__args.html#a7e95cffd1d650f477bb1d64377f4f6d7',1,'pesieve::util::t_refl_args']]], + ['rip_73',['rip',['../structpesieve_1_1__ctx__details.html#a6dc0bc061045467c3d71b6644adf68b4',1,'pesieve::_ctx_details']]], + ['rsp_74',['rsp',['../structpesieve_1_1__ctx__details.html#ab19759b888e6034d29dcaf6cedeed9bd',1,'pesieve::_ctx_details']]], + ['rtl_5fclone_5fprocess_5fflags_5fcreate_5fsuspended_75',['RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED',['../process__reflection_8cpp.html#a32cecac9c7a7d39eb28c815e5cfae2f2',1,'process_reflection.cpp']]], + ['rtl_5fclone_5fprocess_5fflags_5finherit_5fhandles_76',['RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES',['../process__reflection_8cpp.html#a82f1405153b8ad80df8c7398d29e19f5',1,'process_reflection.cpp']]], + ['rtl_5fclone_5fprocess_5fflags_5fno_5fsynchronize_77',['RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE',['../process__reflection_8cpp.html#a9ebf762b1a1365370dcdf4d1258447d8',1,'process_reflection.cpp']]], + ['rtrim_78',['rtrim',['../namespacepesieve_1_1util.html#a31052004d33cccf72236cd5bd451fa91',1,'pesieve::util']]], + ['rule_5fcode_79',['RULE_CODE',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aa6007e2701ffdcbbf8520f4decb8bee61',1,'pesieve::RuleMatcher']]], + ['rule_5fencrypted_80',['RULE_ENCRYPTED',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aabc5eb54cc64621d0c03874dae1328fe2',1,'pesieve::RuleMatcher']]], + ['rule_5fnone_81',['RULE_NONE',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aaee38ad26682344d1747c15ac203dba27',1,'pesieve::RuleMatcher']]], + ['rule_5fobfuscated_82',['RULE_OBFUSCATED',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aaff6b2161fe8136ff7a7be0fd4cf37c31',1,'pesieve::RuleMatcher']]], + ['rule_5ftext_83',['RULE_TEXT',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6aa6617b4261cc4bc38519dbfa7b5d708e7',1,'pesieve::RuleMatcher']]], + ['rulematcher_84',['RuleMatcher',['../classpesieve_1_1_rule_matcher.html',1,'pesieve::RuleMatcher'],['../classpesieve_1_1_rule_matcher.html#a977717986c584a95b87ffd73da2e8905',1,'pesieve::RuleMatcher::RuleMatcher()']]], + ['rulematchersset_85',['RuleMatchersSet',['../structpesieve_1_1_rule_matchers_set.html',1,'pesieve::RuleMatchersSet'],['../structpesieve_1_1_rule_matchers_set.html#aff5025d1a45e27e0f98cb4da745b3ff8',1,'pesieve::RuleMatchersSet::RuleMatchersSet()']]], + ['ruletype_86',['RuleType',['../classpesieve_1_1_rule_matcher.html#a4673a0acf40a39a008489e1d74bc0c6a',1,'pesieve::RuleMatcher']]], + ['rva_87',['rva',['../classpesieve_1_1_pe_section.html#abb3723c684e695788cedc1654463b409',1,'pesieve::PeSection']]], + ['rvatova_88',['rvaToVa',['../classpesieve_1_1_module_data.html#a1227c638b7039f75d3bf31b61fe13bf9',1,'pesieve::ModuleData']]] ]; diff --git a/search/variables_11.js b/search/variables_11.js index f82c5b76a..a352049ac 100644 --- a/search/variables_11.js +++ b/search/variables_11.js @@ -5,31 +5,32 @@ var searchData= ['real_5fend_2',['real_end',['../structpesieve_1_1util_1_1_basic_buffer.html#aee9fd489dbd4bf45308b52b1c5aeb435',1,'pesieve::util::BasicBuffer']]], ['real_5fstart_3',['real_start',['../structpesieve_1_1util_1_1_basic_buffer.html#acde1aea3272243e075dd3ae8a3203cab',1,'pesieve::util::BasicBuffer']]], ['rebase_4',['rebase',['../structparams.html#a98a3ea3c67b4a9b40e0f1d481b9aad16',1,'params']]], - ['reflection_5faccess_5',['reflection_access',['../namespacepesieve_1_1util.html#aab776ea03e0335576aca85e90bf5d797',1,'pesieve::util']]], - ['reflection_5faccess1_6',['reflection_access1',['../namespacepesieve_1_1util.html#a62d79819515a821faa93b5b5abc720d9',1,'pesieve::util']]], - ['reflection_5faccess2_7',['reflection_access2',['../namespacepesieve_1_1util.html#a7dffba8d8d716ef0271741cc51fa8e32',1,'pesieve::util']]], - ['reflectionclientid_8',['ReflectionClientId',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a43b5dd1a7b7bde4a8f58d12a6c84e597',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['reflectioninformation_9',['ReflectionInformation',['../namespacepesieve_1_1util.html#a52fde4e3f95c54ca8bd0a482fd016c26',1,'pesieve::util']]], - ['reflectionprocesshandle_10',['ReflectionProcessHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a9ae8f2e810520ddb949e0c4a80d942c6',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['reflectionthreadhandle_11',['ReflectionThreadHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#ae27e77c0998c78480fc236ccfa17b7d1',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], - ['region_5fend_12',['region_end',['../classpesieve_1_1_mem_page_data.html#a2c5096bc0354ff2ba1e77b72978b46d0',1,'pesieve::MemPageData']]], - ['region_5fstart_13',['region_start',['../classpesieve_1_1_mem_page_data.html#ac0d51e421ea1f5489c2538a9475b8a6e',1,'pesieve::MemPageData']]], - ['regionstart_14',['regionStart',['../classpesieve_1_1_pe_artefacts.html#ace73d07e94c6cbb1367b8734a11e66d7',1,'pesieve::PeArtefacts']]], - ['relocbase_15',['relocBase',['../classpesieve_1_1_pe_buffer.html#af82f09c9cf7265dd990b5fe299864838',1,'pesieve::PeBuffer::relocBase'],['../classpesieve_1_1_module_scan_report.html#a65db46896baa89ad7718d33daa449024',1,'pesieve::ModuleScanReport::relocBase']]], - ['relocs_16',['relocs',['../classpesieve_1_1_patch_analyzer.html#a449f7bb45cab966c6cad9032275cbb5e',1,'pesieve::PatchAnalyzer']]], - ['remotemoddata_17',['remoteModData',['../classpesieve_1_1_module_scanner.html#a78ff1c135f070ab0d6e0ad3870604f90',1,'pesieve::ModuleScanner']]], - ['replaced_18',['replaced',['../structreport.html#aae8b1ebdd28c6b82ce2f09d92061a149',1,'report']]], - ['report_19',['report',['../namespacedemo.html#a513d2764942b4ca84e23710eef9f2119',1,'demo']]], - ['report_5fall_20',['REPORT_ALL',['../classpesieve_1_1t__report__type.html#a8b022f205ea91eeb55289a593e1394eb',1,'pesieve::t_report_type']]], - ['report_5fdumped_21',['REPORT_DUMPED',['../classpesieve_1_1t__report__type.html#aa4f509edafea0a15a88e59d63c63b63a',1,'pesieve::t_report_type']]], - ['report_5fnone_22',['REPORT_NONE',['../classpesieve_1_1t__report__type.html#a5e5ae97a231a29dab3433dab0fcb3039',1,'pesieve::t_report_type']]], - ['report_5fscanned_23',['REPORT_SCANNED',['../classpesieve_1_1t__report__type.html#a33b01a2ea93a8cd6dec70841f1320929',1,'pesieve::t_report_type']]], - ['reportsbytype_24',['reportsByType',['../classpesieve_1_1_process_scan_report.html#a85b6e8a39ec43b08a4f534dbd3f0589e',1,'pesieve::ProcessScanReport']]], - ['results_5ffilter_25',['results_filter',['../structparams.html#ac737bb7714cdc298bdab195c38a11d95',1,'params']]], - ['ret_5fon_5fstack_26',['ret_on_stack',['../structpesieve_1_1__ctx__details.html#a9c9416530acb79291642a6af92a50088',1,'pesieve::_ctx_details']]], - ['returned_5fhndl_27',['returned_hndl',['../structpesieve_1_1util_1_1t__refl__args.html#a2039cf10734a4e3f07e94e6068122729',1,'pesieve::util::t_refl_args']]], - ['returned_5fpid_28',['returned_pid',['../structpesieve_1_1util_1_1t__refl__args.html#a7e95cffd1d650f477bb1d64377f4f6d7',1,'pesieve::util::t_refl_args']]], - ['rip_29',['rip',['../structpesieve_1_1__ctx__details.html#a6dc0bc061045467c3d71b6644adf68b4',1,'pesieve::_ctx_details']]], - ['rsp_30',['rsp',['../structpesieve_1_1__ctx__details.html#ab19759b888e6034d29dcaf6cedeed9bd',1,'pesieve::_ctx_details']]], - ['rva_31',['rva',['../classpesieve_1_1_pe_section.html#abb3723c684e695788cedc1654463b409',1,'pesieve::PeSection']]] + ['rebasedto_5',['rebasedTo',['../classpesieve_1_1_module_dump_report.html#a0d18965c81a334eddc02466d20d97bf3',1,'pesieve::ModuleDumpReport']]], + ['reflection_5faccess_6',['reflection_access',['../namespacepesieve_1_1util.html#aab776ea03e0335576aca85e90bf5d797',1,'pesieve::util']]], + ['reflection_5faccess1_7',['reflection_access1',['../namespacepesieve_1_1util.html#a62d79819515a821faa93b5b5abc720d9',1,'pesieve::util']]], + ['reflection_5faccess2_8',['reflection_access2',['../namespacepesieve_1_1util.html#a7dffba8d8d716ef0271741cc51fa8e32',1,'pesieve::util']]], + ['reflectionclientid_9',['ReflectionClientId',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a43b5dd1a7b7bde4a8f58d12a6c84e597',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['reflectioninformation_10',['ReflectionInformation',['../namespacepesieve_1_1util.html#a52fde4e3f95c54ca8bd0a482fd016c26',1,'pesieve::util']]], + ['reflectionprocesshandle_11',['ReflectionProcessHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#a9ae8f2e810520ddb949e0c4a80d942c6',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['reflectionthreadhandle_12',['ReflectionThreadHandle',['../structpesieve_1_1util_1_1_t___r_t_l_p___p_r_o_c_e_s_s___r_e_f_l_e_c_t_i_o_n___r_e_f_l_e_c_t_i_o_n___i_n_f_o_r_m_a_t_i_o_n.html#ae27e77c0998c78480fc236ccfa17b7d1',1,'pesieve::util::T_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION']]], + ['region_5fend_13',['region_end',['../classpesieve_1_1_mem_page_data.html#a2c5096bc0354ff2ba1e77b72978b46d0',1,'pesieve::MemPageData']]], + ['region_5fstart_14',['region_start',['../classpesieve_1_1_mem_page_data.html#ac0d51e421ea1f5489c2538a9475b8a6e',1,'pesieve::MemPageData']]], + ['regionstart_15',['regionStart',['../classpesieve_1_1_pe_artefacts.html#ace73d07e94c6cbb1367b8734a11e66d7',1,'pesieve::PeArtefacts']]], + ['relocbase_16',['relocBase',['../classpesieve_1_1_pe_buffer.html#af82f09c9cf7265dd990b5fe299864838',1,'pesieve::PeBuffer::relocBase'],['../classpesieve_1_1_module_scan_report.html#a65db46896baa89ad7718d33daa449024',1,'pesieve::ModuleScanReport::relocBase']]], + ['relocs_17',['relocs',['../classpesieve_1_1_patch_analyzer.html#a449f7bb45cab966c6cad9032275cbb5e',1,'pesieve::PatchAnalyzer']]], + ['remotemoddata_18',['remoteModData',['../classpesieve_1_1_module_scanner.html#a78ff1c135f070ab0d6e0ad3870604f90',1,'pesieve::ModuleScanner']]], + ['replaced_19',['replaced',['../structreport.html#aae8b1ebdd28c6b82ce2f09d92061a149',1,'report']]], + ['report_20',['report',['../namespacedemo.html#a513d2764942b4ca84e23710eef9f2119',1,'demo']]], + ['report_5fall_21',['REPORT_ALL',['../classpesieve_1_1t__report__type.html#a8b022f205ea91eeb55289a593e1394eb',1,'pesieve::t_report_type']]], + ['report_5fdumped_22',['REPORT_DUMPED',['../classpesieve_1_1t__report__type.html#aa4f509edafea0a15a88e59d63c63b63a',1,'pesieve::t_report_type']]], + ['report_5fnone_23',['REPORT_NONE',['../classpesieve_1_1t__report__type.html#a5e5ae97a231a29dab3433dab0fcb3039',1,'pesieve::t_report_type']]], + ['report_5fscanned_24',['REPORT_SCANNED',['../classpesieve_1_1t__report__type.html#a33b01a2ea93a8cd6dec70841f1320929',1,'pesieve::t_report_type']]], + ['reportsbytype_25',['reportsByType',['../classpesieve_1_1_process_scan_report.html#a85b6e8a39ec43b08a4f534dbd3f0589e',1,'pesieve::ProcessScanReport']]], + ['results_5ffilter_26',['results_filter',['../structparams.html#ac737bb7714cdc298bdab195c38a11d95',1,'params']]], + ['ret_5fon_5fstack_27',['ret_on_stack',['../structpesieve_1_1__ctx__details.html#a9c9416530acb79291642a6af92a50088',1,'pesieve::_ctx_details']]], + ['returned_5fhndl_28',['returned_hndl',['../structpesieve_1_1util_1_1t__refl__args.html#a2039cf10734a4e3f07e94e6068122729',1,'pesieve::util::t_refl_args']]], + ['returned_5fpid_29',['returned_pid',['../structpesieve_1_1util_1_1t__refl__args.html#a7e95cffd1d650f477bb1d64377f4f6d7',1,'pesieve::util::t_refl_args']]], + ['rip_30',['rip',['../structpesieve_1_1__ctx__details.html#a6dc0bc061045467c3d71b6644adf68b4',1,'pesieve::_ctx_details']]], + ['rsp_31',['rsp',['../structpesieve_1_1__ctx__details.html#ab19759b888e6034d29dcaf6cedeed9bd',1,'pesieve::_ctx_details']]], + ['rva_32',['rva',['../classpesieve_1_1_pe_section.html#abb3723c684e695788cedc1654463b409',1,'pesieve::PeSection']]] ];