![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <byte_buffer.h>

Public Member Functions | |
| BasicBuffer () | |
| bool | isFilled () |
| void | trim () |
| size_t | getStartOffset (bool trimmed) const |
| size_t | getDataSize (bool trimmed=false) const |
| const BYTE * | getData (bool trimmed=false) const |
Public Attributes | |
| BYTE * | data |
Protected Attributes | |
| size_t | real_start |
| size_t | real_end |
| size_t | padding |
| size_t | data_size |
Definition at line 9 of file byte_buffer.h.
|
inline |
Definition at line 12 of file byte_buffer.h.
|
inline |
Definition at line 65 of file byte_buffer.h.
|
inline |
Definition at line 55 of file byte_buffer.h.
|
inline |
Definition at line 48 of file byte_buffer.h.
|
inline |
Definition at line 18 of file byte_buffer.h.
|
inline |
Definition at line 26 of file byte_buffer.h.
| BYTE* pesieve::util::BasicBuffer::data |
Definition at line 75 of file byte_buffer.h.
|
protected |
Definition at line 83 of file byte_buffer.h.
|
protected |
Definition at line 81 of file byte_buffer.h.
|
protected |
Definition at line 80 of file byte_buffer.h.
|
protected |
Definition at line 79 of file byte_buffer.h.