SYMBOL INDEX (524 symbols across 57 files) FILE: AMSI/amsi_module_patch.c function INT (line 71) | INT wmain(INT argc, wchar_t* argv[]) { function PTEB (line 184) | PTEB RtlGetThreadEnvironmentBlock() { function PPEB (line 198) | PPEB RtlGetProcessEnvironmentBlock() { function BOOL (line 220) | BOOL GetRemoteProcessPeb(PHANDLE pHandle, PPEB pRemotePeb, PPROCESS_BASI... function BOOL (line 254) | BOOL GetLoaderDataStructure(PHANDLE pHandle, PPEB_LDR_DATA pLdrData, LPB... function DWORD64 (line 286) | DWORD64 djb2(PBYTE str) { function PVOID (line 310) | PVOID GetModuleBaseAddress(PHANDLE pHandle, PPEB_LDR_DATA pLdrData) { function BOOL (line 368) | BOOL GetModuleExportDirectory(PHANDLE pHandle, PIMAGE_EXPORT_DIRECTORY p... function PVOID (line 414) | PVOID GetModuleFunctionAddress(PHANDLE pHandle, PIMAGE_EXPORT_DIRECTORY ... function BOOL (line 468) | BOOL PatchModuleFunction(PHANDLE pHandle, PVOID lpModuleFunctionAddress) { FILE: AMSI/amsi_scanner.c function INT (line 34) | INT wmain(INT argc, PWCHAR argv[]) { function BOOL (line 113) | BOOL GetStringLenght(LPWSTR szString, PULONG plStringSize) { function BOOL (line 125) | BOOL ScanString(LPWSTR* pszString, AMSI_RESULT* pAmsiResult) { function BOOL (line 151) | BOOL ScanFile(LPWSTR* pszFileName, AMSI_RESULT* pAmsiResult) { function VOID (line 213) | VOID Cleanup() { FILE: AMSI/structs.h type PROCESSINFOCLASS (line 7) | enum PROCESSINFOCLASS { type LSA_UNICODE_STRING (line 11) | typedef struct _LSA_UNICODE_STRING { type PEB_LDR_DATA (line 17) | typedef struct _PEB_LDR_DATA { type LDR_MODULE (line 26) | typedef struct _LDR_MODULE { type PEB (line 42) | typedef struct _PEB { type CLIENT_ID (line 99) | typedef struct __CLIENT_ID { type TEB_ACTIVE_FRAME_CONTEXT (line 104) | typedef struct _TEB_ACTIVE_FRAME_CONTEXT { type TEB_ACTIVE_FRAME (line 109) | typedef struct _TEB_ACTIVE_FRAME { type GDI_TEB_BATCH (line 115) | typedef struct _GDI_TEB_BATCH { type PVOID (line 121) | typedef PVOID PACTIVATION_CONTEXT; type RTL_ACTIVATION_CONTEXT_STACK_FRAME (line 123) | typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME { type ACTIVATION_CONTEXT_STACK (line 129) | typedef struct _ACTIVATION_CONTEXT_STACK { type TEB (line 137) | typedef struct _TEB { type LONG (line 296) | typedef LONG KPRIORITY; type PROCESS_BASIC_INFORMATION (line 298) | typedef struct _PROCESS_BASIC_INFORMATION { type LDR_DATA_TABLE_ENTRY (line 307) | typedef struct _LDR_DATA_TABLE_ENTRY { FILE: AppLocker/List Policies/interfaces.h type interface (line 27) | typedef interface IAppIdPolicyHandler type AppIdPolicyHandlerVtbl (line 68) | typedef struct AppIdPolicyHandlerVtbl { function interface (line 194) | interface IAppIdPolicyHandler { FILE: AppLocker/List Policies/main.c function VOID (line 23) | VOID ShowUsage() { function BOOL (line 42) | BOOL GetAppLockerPolicies(PWORD pwAppLockerMode, LPBSTR pbstrLdapPath, L... function INT (line 87) | INT wmain(INT argc, PWCHAR argv[]) { FILE: Cryptography/AES CNG/source/AES.cpp type CNG (line 14) | namespace CNG { function BOOL (line 37) | BOOL WINAPI AES::Initialise() { function BOOL (line 85) | BOOL WINAPI AESEncrypt::SetBase64StringToEncrypt(std::string sPlaintex... function BOOL (line 97) | BOOL WINAPI AESEncrypt::SetStringToEncrypt(std::string sPlaintext) { function BOOL (line 110) | BOOL WINAPI AESDecrypt::SetStringToDecrypt(std::string sCipherText) { function BOOL (line 123) | BOOL WINAPI AESDecrypt::SetBase64StringToDecrypt(std::string sCipherTe... function BOOL (line 135) | BOOL WINAPI AESEncrypt::Encrypt() { function BOOL (line 170) | BOOL WINAPI AESDecrypt::Decrypt() { FILE: Cryptography/AES CNG/source/AES.h function namespace (line 5) | namespace CNG { FILE: Cryptography/AES CNG/source/Base64.h function GetDecodedLength (line 12) | size_t GetDecodedLength(std::string EncodedString) { function namespace (line 26) | namespace Base64 { FILE: Cryptography/AES CNG/source/Main.cpp function EasyEncrypt (line 17) | std::string EasyEncrypt(std::string sPlaintext) { function EasyDecrypt (line 43) | std::string EasyDecrypt(std::string sCipherText) { function wmain (line 69) | int wmain(int argc, wchar_t* argv[]) { FILE: Cryptography/AES CNG/source/Util.cpp type CNG (line 12) | namespace CNG { function VOID (line 13) | VOID WINAPI Util::WriteSuccessMessage(std::wstring wsBuffer) { function VOID (line 18) | VOID WINAPI Util::WriteSuccessMessage(std::wstring wsBuffer, int tabs) { function VOID (line 25) | VOID WINAPI Util::WriteErrorMessage(std::wstring wsBuffer) { function VOID (line 30) | VOID WINAPI Util::WriteErrorMessage(std::wstring wsBuffer, int tabs) { function VOID (line 37) | VOID WINAPI Util::WriteInfoMessage(std::wstring wsBuffer) { function VOID (line 42) | VOID WINAPI Util::WriteInfoMessage(std::wstring wsBuffer, int tabs) { function VOID (line 49) | VOID WINAPI Util::WriteMessage(std::wstring wsBuffer) { FILE: Cryptography/AES CNG/source/Util.h function namespace (line 10) | namespace CNG { FILE: DIA/inc/callback.h type DiaCallback (line 24) | typedef struct DiaCallback { FILE: DIA/inc/interface.h type PUBLIC_SYMBOL (line 35) | typedef struct _PUBLIC_SYMBOL { FILE: DIA/inc/msdia/include/cvconst.h type CV_call_e (line 15) | typedef enum CV_call_e type CV_access_e (line 53) | typedef enum CV_access_e type THUNK_ORDINAL (line 61) | typedef enum THUNK_ORDINAL type CV_SourceChksum_t (line 80) | enum CV_SourceChksum_t type SymTagEnum (line 92) | enum SymTagEnum type LocationType (line 140) | enum LocationType type DataKind (line 157) | enum DataKind type UdtKind (line 171) | enum UdtKind type BasicType (line 179) | enum BasicType type CV_modifier_e (line 207) | typedef enum CV_modifier_e type CV_builtin_e (line 245) | typedef enum CV_builtin_e type CV_CFL_LANG (line 298) | typedef enum CV_CFL_LANG type CV_CPU_TYPE_e (line 328) | typedef enum CV_CPU_TYPE_e type CV_HREG_e (line 401) | typedef enum CV_HREG_e type CV_HLSLREG_e (line 4026) | typedef enum CV_HLSLREG_e type StackFrameTypeEnum (line 4071) | enum StackFrameTypeEnum type MemoryTypeEnum (line 4082) | enum MemoryTypeEnum type CV_HLSLMemorySpace_e (line 4092) | typedef enum CV_HLSLMemorySpace_e type CV_CoroutineKind_e (line 4115) | typedef enum CV_CoroutineKind_e type CV_AssociationKind_e (line 4124) | typedef enum CV_AssociationKind_e FILE: DIA/inc/msdia/include/dia2.h type interface (line 45) | typedef interface IDiaLoadCallback type interface (line 52) | typedef interface IDiaLoadCallback2 type interface (line 59) | typedef interface IDiaReadExeAtOffsetCallback type interface (line 66) | typedef interface IDiaReadExeAtRVACallback type interface (line 73) | typedef interface IDiaDataSource type interface (line 80) | typedef interface IDiaEnumSymbols type interface (line 87) | typedef interface IDiaEnumSymbolsByAddr type interface (line 94) | typedef interface IDiaEnumSymbolsByAddr2 type interface (line 101) | typedef interface IDiaEnumSourceFiles type interface (line 108) | typedef interface IDiaEnumInputAssemblyFiles type interface (line 115) | typedef interface IDiaEnumLineNumbers type interface (line 122) | typedef interface IDiaEnumInjectedSources type interface (line 129) | typedef interface IDiaEnumSegments type interface (line 136) | typedef interface IDiaEnumSectionContribs type interface (line 143) | typedef interface IDiaEnumFrameData type interface (line 150) | typedef interface IDiaEnumDebugStreamData type interface (line 157) | typedef interface IDiaEnumDebugStreams type interface (line 164) | typedef interface IDiaAddressMap type interface (line 171) | typedef interface IDiaSession type interface (line 178) | typedef interface IDiaSymbol type interface (line 185) | typedef interface IDiaSymbol2 type interface (line 192) | typedef interface IDiaSymbol3 type interface (line 199) | typedef interface IDiaSymbol4 type interface (line 206) | typedef interface IDiaSymbol5 type interface (line 213) | typedef interface IDiaSymbol6 type interface (line 220) | typedef interface IDiaSymbol7 type interface (line 227) | typedef interface IDiaSymbol8 type interface (line 234) | typedef interface IDiaSymbol9 type interface (line 241) | typedef interface IDiaSymbol10 type interface (line 248) | typedef interface IDiaSourceFile type interface (line 255) | typedef interface IDiaInputAssemblyFile type interface (line 262) | typedef interface IDiaLineNumber type interface (line 269) | typedef interface IDiaSectionContrib type interface (line 276) | typedef interface IDiaSegment type interface (line 283) | typedef interface IDiaInjectedSource type interface (line 290) | typedef interface IDiaStackWalkFrame type interface (line 297) | typedef interface IDiaFrameData type interface (line 304) | typedef interface IDiaImageData type interface (line 311) | typedef interface IDiaTable IDiaTable; type interface (line 318) | typedef interface IDiaEnumTables type class (line 327) | typedef class DiaSource DiaSource; type DiaSource (line 329) | typedef struct DiaSource DiaSource; type class (line 339) | typedef class DiaSourceAlt type DiaSourceAlt (line 341) | typedef struct DiaSourceAlt DiaSourceAlt; type class (line 351) | typedef class DiaStackWalker type DiaStackWalker (line 353) | typedef struct DiaStackWalker DiaStackWalker; type interface (line 361) | typedef interface IDiaSectionContrib type interface (line 368) | typedef interface IDiaEnumSectionContribs type interface (line 375) | typedef interface IDiaSymbol type interface (line 382) | typedef interface IDiaSymbol2 type interface (line 389) | typedef interface IDiaSymbol3 type interface (line 396) | typedef interface IDiaSymbol4 type interface (line 403) | typedef interface IDiaSymbol5 type interface (line 410) | typedef interface IDiaSymbol6 type interface (line 417) | typedef interface IDiaSymbol7 type interface (line 424) | typedef interface IDiaSymbol8 type interface (line 431) | typedef interface IDiaSymbol9 type interface (line 438) | typedef interface IDiaSymbol10 type interface (line 445) | typedef interface IDiaEnumSymbolsByAddr type interface (line 452) | typedef interface IDiaEnumSymbolsByAddr2 type interface (line 459) | typedef interface IDiaPropertyStorage type interface (line 466) | typedef interface IDiaStackFrame type interface (line 473) | typedef interface IDiaEnumStackFrames type interface (line 480) | typedef interface IDiaStackWalkHelper type interface (line 487) | typedef interface IDiaStackWalker type interface (line 494) | typedef interface IDiaStackWalkHelper2 type interface (line 501) | typedef interface IDiaStackWalker2 type NameSearchOptions (line 521) | enum NameSearchOptions type __MIDL___MIDL_itf_dia2_0000_0000_0001 (line 536) | enum __MIDL___MIDL_itf_dia2_0000_0000_0001 type IDiaLoadCallbackVtbl (line 629) | typedef struct IDiaLoadCallbackVtbl function interface (line 670) | interface IDiaLoadCallback type IDiaLoadCallback2Vtbl (line 744) | typedef struct IDiaLoadCallback2Vtbl function interface (line 797) | interface IDiaLoadCallback2 type IDiaReadExeAtOffsetCallbackVtbl (line 882) | typedef struct IDiaReadExeAtOffsetCallbackVtbl function interface (line 908) | interface IDiaReadExeAtOffsetCallback type IDiaReadExeAtRVACallbackVtbl (line 968) | typedef struct IDiaReadExeAtRVACallbackVtbl function interface (line 994) | interface IDiaReadExeAtRVACallback type IDiaDataSourceVtbl (line 1088) | typedef struct IDiaDataSourceVtbl function interface (line 1155) | interface IDiaDataSource type IDiaEnumSymbolsVtbl (line 1253) | typedef struct IDiaEnumSymbolsVtbl function interface (line 1302) | interface IDiaEnumSymbols type IDiaEnumSymbolsByAddrVtbl (line 1400) | typedef struct IDiaEnumSymbolsByAddrVtbl function interface (line 1451) | interface IDiaEnumSymbolsByAddr type IDiaEnumSymbolsByAddr2Vtbl (line 1548) | typedef struct IDiaEnumSymbolsByAddr2Vtbl function interface (line 1632) | interface IDiaEnumSymbolsByAddr2 type IDiaEnumSourceFilesVtbl (line 1740) | typedef struct IDiaEnumSourceFilesVtbl function interface (line 1789) | interface IDiaEnumSourceFiles type IDiaEnumInputAssemblyFilesVtbl (line 1884) | typedef struct IDiaEnumInputAssemblyFilesVtbl function interface (line 1933) | interface IDiaEnumInputAssemblyFiles type IDiaEnumLineNumbersVtbl (line 2028) | typedef struct IDiaEnumLineNumbersVtbl function interface (line 2077) | interface IDiaEnumLineNumbers type IDiaEnumInjectedSourcesVtbl (line 2172) | typedef struct IDiaEnumInjectedSourcesVtbl function interface (line 2221) | interface IDiaEnumInjectedSources type IDiaEnumSegmentsVtbl (line 2316) | typedef struct IDiaEnumSegmentsVtbl function interface (line 2365) | interface IDiaEnumSegments type IDiaEnumSectionContribsVtbl (line 2460) | typedef struct IDiaEnumSectionContribsVtbl function interface (line 2509) | interface IDiaEnumSectionContribs type IDiaEnumFrameDataVtbl (line 2612) | typedef struct IDiaEnumFrameDataVtbl function interface (line 2671) | interface IDiaEnumFrameData type IDiaEnumDebugStreamDataVtbl (line 2779) | typedef struct IDiaEnumDebugStreamDataVtbl function interface (line 2836) | interface IDiaEnumDebugStreamData type IDiaEnumDebugStreamsVtbl (line 2934) | typedef struct IDiaEnumDebugStreamsVtbl function interface (line 2983) | interface IDiaEnumDebugStreams type DiaAddressMapEntry (line 3038) | struct DiaAddressMapEntry type DiaAddressMapEntry (line 3088) | struct DiaAddressMapEntry type IDiaAddressMapVtbl (line 3096) | typedef struct IDiaAddressMapVtbl function interface (line 3151) | interface IDiaAddressMap type SymTagEnum (line 3238) | enum SymTagEnum type SymTagEnum (line 3245) | enum SymTagEnum type SymTagEnum (line 3252) | enum SymTagEnum type SymTagEnum (line 3261) | enum SymTagEnum type SymTagEnum (line 3269) | enum SymTagEnum type SymTagEnum (line 3278) | enum SymTagEnum type SymTagEnum (line 3283) | enum SymTagEnum type SymTagEnum (line 3288) | enum SymTagEnum type SymTagEnum (line 3293) | enum SymTagEnum type SymTagEnum (line 3306) | enum SymTagEnum type SymTagEnum (line 3312) | enum SymTagEnum type IDiaSessionVtbl (line 3527) | typedef struct IDiaSessionVtbl function interface (line 3906) | interface IDiaSession type SymTagEnum (line 4378) | enum SymTagEnum type SymTagEnum (line 4384) | enum SymTagEnum type SymTagEnum (line 4390) | enum SymTagEnum type SymTagEnum (line 4398) | enum SymTagEnum type SymTagEnum (line 4405) | enum SymTagEnum type IDiaSymbolVtbl (line 4888) | typedef struct IDiaSymbolVtbl function interface (line 5897) | interface IDiaSymbol type IDiaSymbol2Vtbl (line 8017) | typedef struct IDiaSymbol2Vtbl function interface (line 9038) | interface IDiaSymbol2 type IDiaSymbol3Vtbl (line 9849) | typedef struct IDiaSymbol3Vtbl function interface (line 10878) | interface IDiaSymbol3 type IDiaSymbol4Vtbl (line 11681) | typedef struct IDiaSymbol4Vtbl function interface (line 12714) | interface IDiaSymbol4 type IDiaSymbol5Vtbl (line 13509) | typedef struct IDiaSymbol5Vtbl function interface (line 14546) | interface IDiaSymbol5 type IDiaSymbol6Vtbl (line 15345) | typedef struct IDiaSymbol6Vtbl function interface (line 16386) | interface IDiaSymbol6 type IDiaSymbol7Vtbl (line 17189) | typedef struct IDiaSymbol7Vtbl function interface (line 18234) | interface IDiaSymbol7 type IDiaSymbol8Vtbl (line 19056) | typedef struct IDiaSymbol8Vtbl function interface (line 20125) | interface IDiaSymbol8 type IDiaSymbol9Vtbl (line 21017) | typedef struct IDiaSymbol9Vtbl function interface (line 22098) | interface IDiaSymbol9 type IDiaSymbol10Vtbl (line 22960) | typedef struct IDiaSymbol10Vtbl function interface (line 24047) | interface IDiaSymbol10 type IDiaSourceFileVtbl (line 24903) | typedef struct IDiaSourceFileVtbl function interface (line 24944) | interface IDiaSourceFile type IDiaInputAssemblyFileVtbl (line 25030) | typedef struct IDiaInputAssemblyFileVtbl function interface (line 25075) | interface IDiaInputAssemblyFile type IDiaLineNumberVtbl (line 25186) | typedef struct IDiaLineNumberVtbl function interface (line 25261) | interface IDiaLineNumber type IDiaSectionContribVtbl (line 25420) | typedef struct IDiaSectionContribVtbl function interface (line 25527) | interface IDiaSectionContrib type IDiaSegmentVtbl (line 25671) | typedef struct IDiaSegmentVtbl function interface (line 25726) | interface IDiaSegment type IDiaInjectedSourceVtbl (line 25827) | typedef struct IDiaInjectedSourceVtbl function interface (line 25876) | interface IDiaInjectedSource type __MIDL___MIDL_itf_dia2_0000_0035_0001 (line 25932) | enum __MIDL___MIDL_itf_dia2_0000_0035_0001 type MemoryTypeEnum (line 25968) | enum MemoryTypeEnum type IDiaStackWalkFrameVtbl (line 25988) | typedef struct IDiaStackWalkFrameVtbl function interface (line 26036) | interface IDiaStackWalkFrame type IDiaFrameDataVtbl (line 26156) | typedef struct IDiaFrameDataVtbl function interface (line 26247) | interface IDiaFrameData type IDiaImageDataVtbl (line 26361) | typedef struct IDiaImageDataVtbl function interface (line 26392) | interface IDiaImageData type IDiaTableVtbl (line 26465) | typedef struct IDiaTableVtbl function interface (line 26521) | interface IDiaTable type IDiaEnumTablesVtbl (line 26620) | typedef struct IDiaEnumTablesVtbl function interface (line 26669) | interface IDiaEnumTables type IDiaPropertyStorageVtbl (line 26839) | typedef struct IDiaPropertyStorageVtbl function interface (line 26899) | interface IDiaPropertyStorage type IDiaStackFrameVtbl (line 27020) | typedef struct IDiaStackFrameVtbl function interface (line 27100) | interface IDiaStackFrame type IDiaEnumStackFramesVtbl (line 27203) | typedef struct IDiaEnumStackFramesVtbl function interface (line 27231) | interface IDiaEnumStackFrames type FPODATA (line 27271) | typedef /* [public] */ struct __MIDL___MIDL_itf_dia2_0000_0044_0001 type MemoryTypeEnum (line 27309) | enum MemoryTypeEnum type IDiaStackWalkHelperVtbl (line 27364) | typedef struct IDiaStackWalkHelperVtbl function interface (line 27454) | interface IDiaStackWalkHelper type CV_CPU_TYPE_e (line 27541) | enum CV_CPU_TYPE_e type IDiaStackWalkerVtbl (line 27550) | typedef struct IDiaStackWalkerVtbl function interface (line 27580) | interface IDiaStackWalker type IDiaStackWalkHelper2Vtbl (line 27637) | typedef struct IDiaStackWalkHelper2Vtbl function interface (line 27727) | interface IDiaStackWalkHelper2 type IDiaStackWalker2Vtbl (line 27815) | typedef struct IDiaStackWalker2Vtbl function interface (line 27845) | interface IDiaStackWalker2 FILE: DIA/inc/msdia/include/diacreate.h function HRESULT (line 22) | HRESULT STDMETHODCALLTYPE NoRegCoCreate( const wchar_t *dllName, FILE: DIA/src/callback.c function HRESULT (line 36) | HRESULT STDMETHODCALLTYPE QueryInterface( function ULONG (line 60) | ULONG STDMETHODCALLTYPE AddRef( function ULONG (line 67) | ULONG STDMETHODCALLTYPE Release( function HRESULT (line 79) | HRESULT STDMETHODCALLTYPE NotifyDebugDir( function HRESULT (line 88) | HRESULT STDMETHODCALLTYPE NotifyOpenDBG( function HRESULT (line 96) | HRESULT STDMETHODCALLTYPE NotifyOpenPDB( function HRESULT (line 107) | HRESULT STDMETHODCALLTYPE RestrictRegistryAccess( function HRESULT (line 114) | HRESULT STDMETHODCALLTYPE RestrictSymbolServerAccess( function HRESULT (line 121) | HRESULT STDMETHODCALLTYPE RestrictOriginalPathAccess( function HRESULT (line 128) | HRESULT STDMETHODCALLTYPE RestrictReferencePathAccess( function HRESULT (line 135) | HRESULT STDMETHODCALLTYPE RestrictDBGAccess( function HRESULT (line 141) | HRESULT STDMETHODCALLTYPE RestrictSystemRootAccess( function STDMETHODCALLTYPE (line 169) | STDMETHODCALLTYPE DiaCallbackHelper( FILE: DIA/src/dirutil.c function _Use_decl_annotations_ (line 30) | _Use_decl_annotations_ function _Use_decl_annotations_ (line 83) | _Use_decl_annotations_ function PWCHAR (line 125) | PWCHAR GetMsdiaModulePath( function _Use_decl_annotations_ (line 172) | _Use_decl_annotations_ FILE: DIA/src/interface.c function STDMETHODCALLTYPE (line 43) | STDMETHODCALLTYPE DiaInitialise( function STDMETHODCALLTYPE (line 84) | STDMETHODCALLTYPE DiaUninitialise() { function STDMETHODCALLTYPE (line 110) | STDMETHODCALLTYPE DiaLoadDataFromPdb( function STDMETHODCALLTYPE (line 185) | STDMETHODCALLTYPE DiaFindPublicSymbols( FILE: DIA/src/main.c function VOID (line 21) | VOID SortTable( function INT (line 56) | INT main(VOID) { FILE: Defender/ExclusionLists/inc/defender.h type DEFENDER_EXCLUSION_TYPE (line 19) | typedef enum _DEFENDER_EXCLUSION_TYPE { type DEFENDER_EXCLUSION_ENTRY (line 30) | typedef struct _DEFENDER_EXCLUSION_ENTRY { type DEFENDER_EXCLUSION_LIST (line 41) | typedef struct _DEFENDER_EXCLUSION_LIST { FILE: Defender/ExclusionLists/main.c function INT (line 20) | INT main() { FILE: Defender/ExclusionLists/src/defender.c function STDMETHODCALLTYPE (line 16) | STDMETHODCALLTYPE DfdGetAllExclusions( function STDMETHODCALLTYPE (line 125) | STDMETHODCALLTYPE DfdpGetExclusionEntries( function STDMETHODCALLTYPE (line 247) | STDMETHODCALLTYPE DfdpCleanup( FILE: Fusion/FindAssembly/Fusion/GACUtil.cs type FUSION_INSTALL_REFERENCE (line 8) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type ASSEMBLY_INFO (line 17) | [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] type ASSEMBLY_VERSION (line 26) | public struct ASSEMBLY_VERSION { type ASSEMBLY_IDENTITY (line 33) | public struct ASSEMBLY_IDENTITY { type ASM_CACHE_FLAGS (line 39) | public enum ASM_CACHE_FLAGS : uint { class GACUtil (line 47) | public class GACUtil { method GACUtil (line 68) | public GACUtil() { method ParseAllAssembliesInternal (line 97) | private uint ParseAllAssembliesInternal(string wszFilter, short wMajor... method ParseAllAssemblies (line 130) | public uint ParseAllAssemblies() { method FindAssembly (line 144) | public uint FindAssembly(string wszAssemblyName, short wMajor, ref ASS... method GetAssemblyName (line 158) | public uint GetAssemblyName(ref IAssemblyName pIAssemblyName, ref stri... method GetAssemblyGACPath (line 182) | public uint GetAssemblyGACPath(ref string wszAssemblyName, ref string ... method GetAssemblyVersion (line 210) | public uint GetAssemblyVersion(ref IAssemblyName pIAssemblyName, ref A... FILE: Fusion/FindAssembly/Fusion/IAssemblyCache.cs type IAssemblyCache (line 9) | [ComImport, Guid("E707DCDE-D1CD-11D2-BAB9-00C04F8ECEAE")] method UninstallAssembly (line 30) | [PreserveSig] method QueryAssemblyInfo (line 50) | [PreserveSig] method CreateAssemblyCacheItem (line 70) | [PreserveSig] method CreateAssemblyScavenger (line 83) | [PreserveSig] method InstallAssembly (line 98) | [PreserveSig] FILE: Fusion/FindAssembly/Fusion/IAssemblyCacheItem.cs type IAssemblyCacheItem (line 8) | [ComImport, Guid("9E3AAEB4-D1CD-11D2-BAB9-00C04F8ECEAE")] method AbortItem (line 16) | [PreserveSig] method Commit (line 25) | [PreserveSig] method CreateStream (line 41) | [PreserveSig] FILE: Fusion/FindAssembly/Fusion/IAssemblyEnum.cs type IAssemblyEnum (line 9) | [ComImport, Guid("21B8916C-F28E-11D2-A473-00C04F8EF448")] method GetNextAssembly (line 20) | [PreserveSig] method Reset (line 31) | [PreserveSig] method Clone (line 39) | [PreserveSig] FILE: Fusion/FindAssembly/Fusion/IAssemblyName.cs type IAssemblyName (line 10) | [ComImport, Guid("CD193BC0-B4BC-11d2-9833-00C04FC31D2E")] method SetProperty (line 21) | [PreserveSig] method GetProperty (line 35) | [PreserveSig] method Finalize (line 46) | [PreserveSig] method GetDisplayName (line 56) | [PreserveSig] method Reserved (line 67) | [PreserveSig] method GetName (line 85) | [PreserveSig] method GetVersion (line 97) | [PreserveSig] method IsEqual (line 109) | [PreserveSig] method Clone (line 120) | [PreserveSig] FILE: Fusion/FindAssembly/Program.cs class Program (line 6) | internal sealed class Program { method Main (line 7) | static void Main(string[] args) { FILE: Fusion/FindAssembly/Win32/Functions.cs class Functions (line 6) | internal class Functions { method CreateAssemblyEnum (line 8) | [DllImport("fusion.dll", CharSet = CharSet.Auto)] method CreateAssemblyCache (line 18) | [DllImport("fusion.dll", CharSet = CharSet.Auto)] FILE: Fusion/FindAssembly/Win32/Macros.cs class Macros (line 3) | public static class Macros { method SUCCEEDED (line 5) | public static bool SUCCEEDED(uint hr) => hr >= S_OK; FILE: Fusion/ListAssemblies/gacutil.h type ASSEMBLY_VERSION (line 29) | typedef struct _ASSEMBLY_VERSION { type IAssemblyEnum (line 36) | typedef IAssemblyEnum* PIAssemblyEnum; type PIAssemblyEnum (line 37) | typedef PIAssemblyEnum* PPIAssemblyEnum; type IAssemblyCache (line 39) | typedef IAssemblyCache* PIAssemblyCache; type PIAssemblyCache (line 40) | typedef PIAssemblyCache* PPIAssemblyCache; type IAssemblyName (line 42) | typedef IAssemblyName* PIAssemblyName; type PIAssemblyName (line 43) | typedef PIAssemblyName* PPIAssemblyName; FILE: Fusion/ListAssemblies/main.c function INT (line 28) | INT wmain(INT argc, PWCHAR* argv[]) { function HRESULT (line 87) | HRESULT ParseAllAssemblies(PPIAssemblyEnum ppIAssemblyEnum, PPIAssemblyC... function HRESULT (line 142) | HRESULT GetAssemblyName(PPIAssemblyName ppIAssemblyName, LPWSTR* pwszAss... function HRESULT (line 175) | HRESULT GetAssemblyGACPath(PPIAssemblyCache ppIAssemblyCache, LPWSTR* pw... function HRESULT (line 213) | HRESULT GetAssemblyVersion(PPIAssemblyName ppIAssemblyName, PASSEMBLY_VE... FILE: Kerberos/AskTGT/kerberos.c function NTSTATUS (line 9) | NTSTATUS KerbpFormatTimestamp( function INT32 (line 28) | INT32 KerbpGetCodePoint( function NTSTATUS (line 47) | NTSTATUS KerbpEncodeUTF8( function INT32 (line 85) | INT32 KerbpGetAsnTagLength( function INT32 (line 102) | INT32 KerbpGetAsnLengthLenght( function INT32 (line 120) | INT32 KerbpAsnGetEffectiveEncodedLength( function INT32 (line 136) | INT32 KerbpAsnGetEffectiveValueLenght( function NTSTATUS (line 159) | NTSTATUS KerbpAsnMakePrimitive( function NTSTATUS (line 193) | NTSTATUS KerbpAsnMakeConstructed( function NTSTATUS (line 231) | NTSTATUS KerbpAsnMakeImplicit( function NTSTATUS (line 273) | NTSTATUS KerbpAsnMakeInteger( function INT32 (line 313) | INT32 KerbpAnsEncodeValue( function INT32 (line 352) | INT32 KerbpAsnEncode( function NTSTATUS (line 430) | NTSTATUS KerbpEncryptInternal( function NTSTATUS (line 458) | NTSTATUS KerbpEncrypt( function NTSTATUS (line 515) | NTSTATUS KerbpGenerateTimestamp( function NTSTATUS (line 594) | NTSTATUS KerbpEncryptTimestamp( function NTSTATUS (line 640) | NTSTATUS KerbpEncodeEncryptedData( function NTSTATUS (line 724) | NTSTATUS KerbpGenerateKdcOptions( function NTSTATUS (line 770) | NTSTATUS KerbpGeneratePrincipalName( function NTSTATUS (line 927) | NTSTATUS KerbpGenerateRealm( function NTSTATUS (line 971) | NTSTATUS KerbpGenerateNonce( function NTSTATUS (line 1000) | NTSTATUS KerbpGenerateEtype( function NTSTATUS (line 1040) | NTSTATUS KerbGeneratePvnoAndType( function NTSTATUS (line 1089) | NTSTATUS KerbGenerateEncryptedData( function NTSTATUS (line 1185) | NTSTATUS KerbGeneratePac( function NTSTATUS (line 1253) | NTSTATUS KerbGenerateKDCReqBody( function NTSTATUS (line 1319) | NTSTATUS KerbGenerateFinalRequest( FILE: Kerberos/AskTGT/kerberos.h type ASN_ELEMENT (line 177) | typedef struct _ASN_ELEMENT { type ENCRYPTED_DATA (line 198) | typedef struct _ENCRYPTED_DATA { type KERBEROS_ECRYPT (line 207) | typedef struct _KERBEROS_ECRYPT { FILE: Kerberos/AskTGT/main.c function NTSTATUS (line 24) | NTSTATUS GetDomainControllerInformation( function NTSTATUS (line 54) | NTSTATUS HexStringToHex( function NTSTATUS (line 73) | NTSTATUS GenerateASRequest( function INT (line 122) | INT main() { FILE: Kerberos/AskTGT/socket.c function NTSTATUS (line 7) | NTSTATUS SockpInitialise() { function NTSTATUS (line 16) | NTSTATUS SockpUninitialise() { function NTSTATUS (line 24) | NTSTATUS SockSendKerberosASRequest( FILE: Kerberos/GetTicket/src/main.c function NTSTATUS (line 65) | NTSTATUS GetLsaHandleAndPackageId( function VOID (line 85) | VOID PrintUnicodeString( function VOID (line 105) | VOID PrintEType( function VOID (line 161) | VOID PrintTicketFlags( function VOID (line 188) | VOID PrintTime( function VOID (line 215) | VOID PrintEncodedTicket( function INT (line 256) | INT main() { FILE: Kerberos/List/src/main.c function NTSTATUS (line 89) | NTSTATUS GetLsaHandleAndPackageId( function VOID (line 108) | VOID PrintEType( function VOID (line 164) | VOID PrintTicketFlags( function VOID (line 190) | VOID PrintCacheFlags( function VOID (line 212) | VOID PrintTime( function VOID (line 233) | VOID ShowTicket3( function VOID (line 299) | VOID ShowTicket2( function VOID (line 355) | VOID ShowTicket1( function INT (line 407) | INT main() { FILE: Kerberos/Purge/src/main.c function NTSTATUS (line 28) | NTSTATUS GetLsaHandleAndPackageId( function INT (line 44) | INT main() { FILE: Object Manager/List Handles/main.c function INT (line 74) | INT wmain(INT argc, PWCHAR argv[]) { function NTSTATUS (line 171) | NTSTATUS GetRemoteProcessHandlesSnapshotInformation(PPROCESS_HANDLE_SNAP... function NTSTATUS (line 209) | NTSTATUS GetObjNameByHandle(PHANDLE pObjHandle, PUNICODE_STRING pObjName... function NTSTATUS (line 243) | NTSTATUS GetObjTypeByHandle(PHANDLE pObjHandle, PUNICODE_STRING pObjType... function NTSTATUS (line 277) | NTSTATUS GetObjBasicInformationByHandle(PHANDLE pObjHandle, PACCESS_MASK... FILE: Object Manager/List Handles/ntstructs.h type UNICODE_STRING (line 18) | typedef struct _UNICODE_STRING { type OBJECT_NAME_INFORMATION (line 24) | typedef struct _OBJECT_NAME_INFORMATION { type PUBLIC_OBJECT_BASIC_INFORMATION (line 28) | typedef struct _PUBLIC_OBJECT_BASIC_INFORMATION { type PUBLIC_OBJECT_TYPE_INFORMATION (line 36) | typedef struct _PUBLIC_OBJECT_TYPE_INFORMATION { type PROCESS_HANDLE_TABLE_ENTRY_INFO (line 41) | typedef struct _PROCESS_HANDLE_TABLE_ENTRY_INFO { type PROCESS_HANDLE_SNAPSHOT_INFORMATION (line 51) | typedef struct _PROCESS_HANDLE_SNAPSHOT_INFORMATION { FILE: Object Manager/List Objects/main.c function INT (line 73) | INT wmain(INT argc, PWCHAR argv[]) { function NTSTATUS (line 162) | NTSTATUS GetObjInformation(PUNICODE_STRING pObjName, PUNICODE_STRING pOb... function NTSTATUS (line 203) | NTSTATUS GetObjSymbolicLinkTarget(PUNICODE_STRING pObjSymbolicLinkTarget... FILE: Object Manager/List Objects/ntstructs.h type LSA_UNICODE_STRING (line 33) | typedef struct _LSA_UNICODE_STRING { type OBJECT_ATTRIBUTES (line 39) | typedef struct _OBJECT_ATTRIBUTES { type OBJECT_DIRECTORY_INFORMATION (line 48) | typedef struct _OBJECT_DIRECTORY_INFORMATION { type DirectoryAccess (line 53) | enum DirectoryAccess { FILE: Office/Outlook/inc/outlook.h type OutlookContactRecord (line 27) | typedef struct _OutlookContactRecord { type OlAddressEntryUserType (line 41) | typedef enum _OlAddressEntryUserType { type OutlookUtil (line 58) | typedef struct OutlookUtil OutlookUtil; type OutlookUtilVtbl (line 60) | typedef struct OutlookUtilVtbl OutlookUtilVtbl; type OutlookUtilVtbl (line 65) | struct OutlookUtilVtbl { type OutlookUtil (line 93) | struct OutlookUtil { FILE: Office/Outlook/src/main.c function main (line 17) | int main() { FILE: Office/Outlook/src/outlook.c function STDMETHODCALLTYPE (line 18) | STDMETHODCALLTYPE Initialise( function STDMETHODCALLTYPE (line 30) | STDMETHODCALLTYPE Uninitialise( function STDMETHODCALLTYPE (line 42) | STDMETHODCALLTYPE OuCreateOutlookUtilClass( function _Use_decl_annotations_ (line 69) | _Use_decl_annotations_ function STDMETHODCALLTYPE (line 83) | STDMETHODCALLTYPE GetGlobalAddressList( function STDMETHODCALLTYPE (line 225) | STDMETHODCALLTYPE OupGetApplicationDispatchInterface( function STDMETHODCALLTYPE (line 252) | STDMETHODCALLTYPE OupGetDispatchInterface( function STDMETHODCALLTYPE (line 314) | STDMETHODCALLTYPE OupGetDispatchInterfaceProperty( FILE: Portable Executable/parse_header.c type LSA_UNICODE_STRING (line 22) | typedef struct _LSA_UNICODE_STRING { type LDR_MODULE (line 28) | typedef struct _LDR_MODULE { type PEB_LDR_DATA (line 44) | typedef struct _PEB_LDR_DATA { type PEB (line 53) | typedef struct _PEB { function wmain (line 124) | int wmain(int argc, wchar_t* argv[], wchar_t* envp[]) { function BOOL (line 239) | BOOL PlLoadLibrary(LPCWSTR szDllName) { FILE: Power Management/deus_somnum_pic.c type INITIAL_TEB (line 4) | typedef struct _INITIAL_TEB { type CLIENT_ID (line 12) | typedef struct __CLIENT_ID { type PEB_LDR_DATA (line 17) | typedef struct _PEB_LDR_DATA { type PVOID (line 26) | typedef PVOID PACTIVATION_CONTEXT; type RTL_ACTIVATION_CONTEXT_STACK_FRAME (line 28) | typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME { type ACTIVATION_CONTEXT_STACK (line 34) | typedef struct _ACTIVATION_CONTEXT_STACK { type LSA_UNICODE_STRING (line 42) | typedef struct _LSA_UNICODE_STRING { type OBJECT_ATTRIBUTES (line 48) | typedef struct _OBJECT_ATTRIBUTES { type LDR_MODULE (line 57) | typedef struct _LDR_MODULE { type GDI_TEB_BATCH (line 73) | typedef struct _GDI_TEB_BATCH { type TEB_ACTIVE_FRAME_CONTEXT (line 79) | typedef struct _TEB_ACTIVE_FRAME_CONTEXT { type TEB_ACTIVE_FRAME (line 84) | typedef struct _TEB_ACTIVE_FRAME { type PEB (line 90) | typedef struct _PEB { type TEB (line 147) | typedef struct _TEB { type ULONG (line 306) | typedef ULONG CALLBACK DEVICE_NOTIFY_CALLBACK_ROUTINE( type DEVICE_NOTIFY_CALLBACK_ROUTINE (line 311) | typedef DEVICE_NOTIFY_CALLBACK_ROUTINE* PDEVICE_NOTIFY_CALLBACK_ROUTINE; type DEVICE_NOTIFY_SUBSCRIBE_PARAMETERS (line 313) | typedef struct _DEVICE_NOTIFY_SUBSCRIBE_PARAMETERS { type CONST (line 341) | typedef VOID(NTAPI* RtlMoveMemoryDelegate) (PVOID, CONST PVOID, SIZE_T); type PVOID (line 342) | typedef NTSTATUS(NTAPI* NtAllocateVirtualMemoryDelegate) (HANDLE, PVOID*... type PVOID (line 343) | typedef NTSTATUS(NTAPI* NtProtectVirtualMemoryDelegate) (HANDLE, PVOID*,... type ACCESS_MASK (line 344) | typedef NTSTATUS(NTAPI* NtCreateThreadExDelegate) (PHANDLE, ACCESS_MASK,... type BOOLEAN (line 345) | typedef NTSTATUS(NTAPI* NtWaitForSingleObjectDelegate) (HANDLE, BOOLEAN,... type ULONG (line 348) | typedef NTSTATUS(NTAPI* LdrLoadDllDelegate) (PWCHAR, ULONG, PUNICODE_STR... type DWORD (line 355) | typedef DWORD(WINAPI* PowerSettingRegisterNotificationDelegate) (LPCGUID... type VxApiTable (line 358) | typedef struct _VxApiTable { function wmain (line 388) | int wmain() { function ULONG (line 451) | ULONG CALLBACK HandlePowerNotifications(PVOID Context, ULONG Type, PVOID... function VOID (line 480) | VOID Inject(VOID) { function DWORD64 (line 521) | DWORD64 VxGetFunctionAddress(DWORD64 dwModuleBase, DWORD64 dwHash) { function VOID (line 550) | VOID VxZeroMemory(PVOID Destination, SIZE_T Size) { function DWORD (line 563) | DWORD djb2(PBYTE str) { function PTEB (line 573) | PTEB RtlGetTeb() { FILE: Power Management/deus_somnum_user32.cpp function ATOM (line 54) | ATOM ​Win64RegisterCallBackNotifications​(VOID) {​ function VOID (line 134) | VOID ​Cleanup​(VOID) {​ FILE: Process/GetProcessEnvironmentBlock/GetProcessEnvironmentBlock/Program.cs class Program (line 5) | public sealed class Program { method Main (line 6) | static void Main(string[] args) { method VirtualProtect (line 60) | [DllImport("kernel32.dll")] type UNICODE_STRING (line 72) | [StructLayout(LayoutKind.Sequential, Pack = 0)] type LIST_ENTRY (line 79) | [StructLayout(LayoutKind.Sequential, Pack = 0)] type PEB (line 85) | [StructLayout(LayoutKind.Sequential, Pack = 1)] FILE: RWX/JITCompilation/JITCompilation/Program.cs class Program (line 9) | internal sealed class Program { method Main (line 26) | static void Main(string[] args) { method Stub (line 72) | private static IntPtr Stub() { class Util (line 77) | internal sealed class Util { method IsByteCallProcedure (line 83) | public static bool IsByteCallProcedure(IntPtr pointer) { method IsByteJmpProcedure (line 102) | public static bool IsByteJmpProcedure(IntPtr pointer) { type UNICODE_STRING (line 118) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type LIST_ENTRY (line 125) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type PEB (line 131) | [StructLayout(LayoutKind.Sequential, Pack = 1)] FILE: RWX/MMF/MMF/Program.cs class Program (line 7) | internal sealed class Program { method Main (line 24) | static void Main(string[] args) { type UNICODE_STRING (line 56) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type LIST_ENTRY (line 63) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type PEB (line 69) | [StructLayout(LayoutKind.Sequential, Pack = 1)] FILE: RWX/PInvoke/PInvoke/Program.cs class Program (line 6) | internal sealed class Program { method VirtualAlloc (line 52) | [DllImport("kernel32.dll")] method VirtualProtect (line 68) | [DllImport("kernel32.dll")] method Main (line 80) | static void Main(string[] args) { type UNICODE_STRING (line 109) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type LIST_ENTRY (line 116) | [StructLayout(LayoutKind.Sequential, Pack = 1)] type PEB (line 122) | [StructLayout(LayoutKind.Sequential, Pack = 1)] FILE: Secure Enclave/VBS/bsod.c function main (line 12) | int main() { FILE: Task Scheduler/enumerate_tasks.cpp function VOID (line 7) | VOID wprintf_indent(LPCWSTR string, DWORD indent, BOOL bIsTaskName) { function BOOL (line 21) | BOOL IsAdministrator() { function BOOL (line 41) | BOOL InitialiseCOM() { function BOOL (line 59) | BOOL CreateTaskServiceInstance(ITaskService*& pTaskService) { function BOOL (line 69) | BOOL ConnectToTaskService(ITaskService*& pTaskService) { function BOOL (line 92) | BOOL GetRootTaskFolder(ITaskFolder*& pTaskFolder, ITaskService*& pTaskSe... function BOOL (line 102) | BOOL EnumerateTasks(ITaskFolder*& pTaskFolder, DWORD indent) { function INT (line 159) | INT wmain() { FILE: WinDBG/exploit86.js function initializeScript (line 3) | function initializeScript() { function FindPPR (line 7) | function FindPPR(beginning, end) { function _FindPPRInternal (line 42) | function _FindPPRInternal(byte) { function GetModulesCharacteristics (line 61) | function GetModulesCharacteristics(IncludeSystem32) {