artefacts_util.h File Reference

#include <windows.h>
#include <sig_finder.h>

Go to the source code of this file.

Namespaces
namespace	pesieve
namespace	pesieve::util
namespace	pesieve::matcher

Macros
#define	PATTERN_NOT_FOUND   (-1)

Functions
BYTE *	pesieve::util::find_pattern (BYTE *buffer, size_t buf_size, BYTE *pattern_buf, size_t pattern_size, size_t max_iter=0)
size_t	pesieve::util::is_32bit_code (BYTE *loadedData, size_t loadedSize)
size_t	pesieve::util::is_64bit_code (BYTE *loadedData, size_t loadedSize)
bool	pesieve::util::is_code (BYTE *loadedData, size_t loadedSize)
bool	pesieve::util::is_executable (DWORD mapping_type, DWORD protection)
bool	pesieve::util::is_readable (DWORD mapping_type, DWORD protection)
bool	pesieve::util::is_normal_inaccessible (DWORD state, DWORD mapping_type, DWORD protection)
bool	pesieve::matcher::is_matcher_ready ()
bool	pesieve::matcher::init_shellcode_patterns ()
size_t	pesieve::matcher::load_pattern_file (const char *filename)
size_t	pesieve::matcher::find_all_patterns (BYTE *loadedData, size_t loadedSize, std::vector< sig_finder::Match > &allMatches)
size_t	pesieve::matcher::filter_custom (std::vector< sig_finder::Match > &allMatches, std::vector< sig_finder::Match > &customPatternMatches)

Macro Definition Documentation

PATTERN_NOT_FOUND

#define PATTERN_NOT_FOUND   (-1)

Definition at line 4 of file artefacts_util.h.