PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
main.cpp File Reference

The main file of PE-sieve built as an EXE. More...

#include <windows.h>
#include <psapi.h>
#include <sstream>
#include <fstream>
#include "pe_sieve.h"
#include "params.h"
#include "utils/process_privilege.h"
#include "params_info/pe_sieve_params_info.h"
#include "utils/process_reflection.h"
#include "utils/console_color.h"
#include "color_scheme.h"

Go to the source code of this file.

Functions

void print_report (const pesieve::ReportEx &report, const t_params args)
 
void free_params (t_params &args)
 
int main (int argc, char *argv[])
 

Detailed Description

The main file of PE-sieve built as an EXE.

Definition in file main.cpp.

Function Documentation

◆ free_params()

void free_params ( t_params & args)

Definition at line 42 of file main.cpp.

Here is the call graph for this function:

◆ main()

int main ( int argc,
char * argv[] )

Definition at line 48 of file main.cpp.

Here is the call graph for this function:

◆ print_report()

void print_report ( const pesieve::ReportEx & report,
const t_params args )

Definition at line 25 of file main.cpp.

Here is the call graph for this function: