MCPcopy Create free account

hub / github.com/D7EAD/mkPIVM / functions

Functions458 in github.com/D7EAD/mkPIVM

↓ 268 callersMethodsize
include/mkpivm/x64_emit.h:52
↓ 213 callersMethodmov_reg_mem
src/x64_emit.cpp:183
↓ 208 callersMethodu8
raw byte emission
include/mkpivm/x64_emit.h:57
↓ 204 callersMethodmov_mem_reg
src/x64_emit.cpp:200
↓ 172 callersMethodnew_label
src/x64_emit.cpp:41
↓ 158 callersMethodbind
src/x64_emit.cpp:55
↓ 121 callersFunctionemit_fetch_byte_dec
fetch one byte from [ip], decrypt with current cipher state, update state, advance ip, leave result in low 8 of dst
src/codec.cpp:111
↓ 104 callersMethodjcc_label
src/x64_emit.cpp:856
↓ 90 callersMethodslot_of_xreg
include/mkpivm/vm_isa.h:99
↓ 86 callersMethodpush_reg
src/x64_emit.cpp:770
↓ 84 callersMethodjmp_label
src/x64_emit.cpp:842
↓ 82 callersMethodcmp_reg_imm32
src/x64_emit.cpp:587
↓ 71 callersFunctionemit_fetch_byte_dec
inline byte fetch + cipher decrypt for 32-bit
src/codec_x86.cpp:74
↓ 69 callersMethodpop_reg
src/x64_emit.cpp:782
↓ 55 callersMethodend
include/mkpivm/util.h:78
↓ 48 callersMethodmov_reg_mem_sib
src/x64_emit.cpp:217
↓ 41 callersMethodempty
include/mkpivm/util.h:80
↓ 38 callersFunctionemit_dispatch_tail
dispatch tail: fetch next opcode, look up handler offset, jump
src/codec.cpp:488
↓ 38 callersMethodemit_modrm_mem
emits the ModR/M plus optional SIB plus optional disp for a memory operand
src/x64_emit.cpp:91
↓ 38 callersMethodopcode_for
src/vm_isa.cpp:177
↓ 37 callersMethodmov_reg_reg
src/x64_emit.cpp:135
↓ 37 callersMethodxor_reg_reg
src/x64_emit.cpp:473
↓ 35 callersMethodadd_reg_imm32
src/x64_emit.cpp:537
↓ 33 callersMethodadd_reg_reg
src/x64_emit.cpp:453
↓ 32 callersMethodmov_reg_imm32
src/x64_emit.cpp:146
↓ 32 callersMethodtest_reg_reg
src/x64_emit.cpp:513
↓ 31 callersMethodand_reg_imm32
src/x64_emit.cpp:557
↓ 31 callersFunctionemit_dispatch_tail
dispatcher tail for 32-bit
src/codec_x86.cpp:192
↓ 29 callersMethodbegin
include/mkpivm/util.h:77
↓ 29 callersMethodemit_modrm
src/x64_emit.cpp:82
↓ 27 callersMethodadd_fixup
include/mkpivm/x64_emit.h:82
↓ 27 callersFunctionenc_slot
src/codec.cpp:11
↓ 25 callersMethodinc_reg
inc/dec/neg/not via FF or F7.
src/x64_emit.cpp:719
↓ 23 callersMethodlea_reg_rip
src/x64_emit.cpp:406
↓ 23 callersFunctionthird_volatile
pick the volatile of eax/ecx/edx that is neither scratch_a nor scratch_b
src/codec_x86.cpp:66
↓ 21 callersMethodshadow_stack_bytes
VM stack and data island sizes
include/mkpivm/vm_isa.h:179
↓ 21 callersFunctionshuffle_in_place
include/mkpivm/util.h:61
↓ 20 callersMethodmovsxd_r64_r32
src/x64_emit.cpp:924
↓ 20 callersMethodsub_reg_imm32
src/x64_emit.cpp:567
↓ 19 callersMethodfind
src/lifter.cpp:256
↓ 18 callersFunctionconvert_operand
convert one Zydis operand into an IR Operand, applying override width when the operand is an immediate or memory ref
src/lifter.cpp:157
↓ 18 callersMethodemit_rex
src/x64_emit.cpp:77
↓ 18 callersFunctioninsn_width
src/lifter.cpp:174
↓ 17 callersMethodu32
src/x64_emit.cpp:11
↓ 16 callersMethodcipher_k1
include/mkpivm/vm_isa.h:155
↓ 16 callersFunctionemit_fetch_u32_dec
src/codec.cpp:254
↓ 16 callersFunctionemit_fetch_uN_dec
src/codec_x86.cpp:165
↓ 16 callersFunctionx86_self_locate
32-bit self-locate wizard shit
src/vm_codegen_x86.cpp:52
↓ 14 callersMethodor_reg_reg
src/x64_emit.cpp:493
↓ 13 callersFunctionemit_store_slot_value_x86
store value_reg into VMState slot at slot_idx_reg, honoring width
src/codec_x86.cpp:290
↓ 13 callersMethodframe_padding
padding above state in the prologue allocation. baseline 256 bytes
include/mkpivm/vm_isa.h:136
↓ 13 callersMethodlea_reg_mem
src/x64_emit.cpp:423
↓ 13 callersFunctionzmem_to_mem
src/lifter.cpp:120
↓ 12 callersFunctionemit_store_slot_value
write value into VMState slot at slot_idx_reg
src/codec.cpp:393
↓ 12 callersMethodpick
pick from 0..n-1
include/mkpivm/seed.h:27
↓ 12 callersMethodxor_reg_imm32
src/x64_emit.cpp:577
↓ 11 callersMethodcipher_init_state
cipher state and keys
include/mkpivm/vm_isa.h:154
↓ 11 callersMethoddec_reg
src/x64_emit.cpp:729
↓ 11 callersFunctionemit_fetch_uN_dec
src/codec.cpp:240
↓ 11 callersMethodsub_reg_reg
src/x64_emit.cpp:463
↓ 11 callersFunctionzreg_to_virreg
src/lifter.cpp:106
↓ 10 callersMethodbytes
src/x64_emit.cpp:19
↓ 10 callersFunctionenc_mem
mem operand: base 1B, index 1B, scale_log2 1B, seg 1B, disp32 4B, width 1B
src/codec.cpp:17
↓ 10 callersMethodmovzx_r32_r8
src/x64_emit.cpp:884
↓ 10 callersMethodpack_mode
true when this blob is a --pack wrapper
include/mkpivm/vm_isa.h:117
↓ 9 callersMethodemit_sib
src/x64_emit.cpp:86
↓ 9 callersMethodmov_mem_reg_size
src/x64_emit.cpp:348
↓ 9 callersMethodshl_reg_imm8
src/x64_emit.cpp:623
↓ 9 callersMethoduniform
src/seed.cpp:35
↓ 8 callersFunctionemit_mask_to_width_x86
mask reg to width_reg's width using low 7 bits, for imm and non-reg operands
src/codec_x86.cpp:244
↓ 8 callersFunctionemit_x86_mem_addr
effective-address helper
src/codec_x86.cpp:670
↓ 8 callersMethodfamily
include/mkpivm/lifter.h:60
↓ 8 callersFunctionhex_nybble
src/main.cpp:119
↓ 8 callersMethodjmp_reg
src/x64_emit.cpp:809
↓ 8 callersMethodmov_reg_imm64
src/x64_emit.cpp:172
↓ 8 callersMethodmovzx_r64_r8
src/x64_emit.cpp:894
↓ 7 callersFunctionemit_alu_rr
src/x64_emit.cpp:441
↓ 7 callersFunctionemit_fetch_u32_dec
src/codec_x86.cpp:182
↓ 7 callersMethodencrypt_inplace
src/vm_isa.cpp:193
↓ 7 callersFunctionwidth_bytes
include/mkpivm/ir.h:61
↓ 7 callersFunctionx86_alu_rr
src/x86_emit.cpp:327
↓ 6 callersFunctionany_rva_to_file_off
same as rva_to_file_off but finds the owning section first. 0 if nothing covers it.
src/pe_embed.cpp:185
↓ 6 callersMethodchance
src/seed.cpp:50
↓ 6 callersMethodcmp_reg_reg
src/x64_emit.cpp:503
↓ 6 callersFunctionemit_alu_ri
ALU reg, imm32 via 81 /op with a full 32-bit immediate.
src/x64_emit.cpp:524
↓ 6 callersFunctionemit_mask_to_width
mask reg to width_reg's width, stripping the high-byte flag
src/codec.cpp:282
↓ 6 callersMethodemit_rel32_fixup
src/x64_emit.cpp:69
↓ 6 callersFunctionenc_imm_n
src/codec.cpp:35
↓ 6 callersMethodmov_mem_sib_reg
src/x64_emit.cpp:235
↓ 6 callersMethodrange_mode
true when we're building in --ranges hybrid mode
include/mkpivm/vm_isa.h:113
↓ 6 callersFunctionrotl
src/seed.cpp:19
↓ 6 callersFunctionx86_alu_ri
src/x86_emit.cpp:397
↓ 5 callersMethodcipher_kind
include/mkpivm/vm_isa.h:110
↓ 5 callersMethodcoro_prelo
--coro-prelo
include/mkpivm/vm_isa.h:125
↓ 5 callersFunctiondecode_zreg
src/lifter.cpp:16
↓ 5 callersFunctionemit_bin_handler
src/codec.cpp:1318
↓ 5 callersFunctionemit_bin_handler_x86
src/codec_x86.cpp:398
↓ 5 callersFunctionemit_extract_operand
extract architectural register-operand value from a 64-bit slot, honoring the width byte
src/codec.cpp:345
↓ 5 callersFunctionemit_extract_operand_x86
extract a register-operand value, honoring the high-byte flag in bit 7 of width_reg. high-byte case ah/ch/dh/bh shifts right 8 first.
src/codec_x86.cpp:271
↓ 5 callersFunctionemit_shift_cl
src/x64_emit.cpp:611
next →1–100 of 458, ranked by callers