Functions — github.com/D7EAD/mkPIVM

CodeHub MCPcopy Create free account

hub / github.com/D7EAD/mkPIVM / functions

Functions458 in github.com/D7EAD/mkPIVM

⨍ Functions 458◇ Types & classes 95

↓ 5 callersFunctionemit_shift_handler

src/codec.cpp:1735

↓ 5 callersFunctionemit_shift_handler_x86

shifts: Shl/Shr/Sar/Rol/Ror by imm8 or by CL via vreg.

src/codec_x86.cpp:2380

↓ 5 callersFunctionemit_shift_ri

group 2 shifts. C1 /op, imm8 or D3 /op, CL.

src/x64_emit.cpp:598

↓ 5 callersFunctionenc_bin

src/codec.cpp:1298

↓ 5 callersFunctionenc_shift

src/codec.cpp:1721

↓ 5 callersMethodmov_reg_mem_size

src/x64_emit.cpp:253

↓ 5 callersMethodnext

src/seed.cpp:23

↓ 5 callersFunctionx86_shift_cl

src/x86_emit.cpp:465

↓ 5 callersFunctionx86_shift_ri

src/x86_emit.cpp:458

↓ 4 callersFunctionalign_up

src/pe_embed.cpp:20

↓ 4 callersMethodand_reg_reg

src/x64_emit.cpp:483

↓ 4 callersMethodarch

include/mkpivm/cfg.h:65

↓ 4 callersMethodblock_id_for

src/lifter.cpp:388

↓ 4 callersMethodemit_branch_rel32

placeholder rel32 to a target block. resolved later to target_off minus end_of_field

include/mkpivm/bytecode.h:46

↓ 4 callersFunctionemit_cipher_reset

reload cipher_state from cipher_init

src/codec.cpp:98

↓ 4 callersFunctionemit_junk

emit a short null-effect junk gadget.

src/codec.cpp:541

↓ 4 callersMethodemit_modrm

no REX in 32-bit mode.

src/x86_emit.cpp:77

↓ 4 callersMethodjmp_mem_disp32

src/x64_emit.cpp:818

↓ 4 callersMethodmovsx_r32_r16

src/x64_emit.cpp:909

↓ 4 callersMethodmovsx_r32_r8

src/x64_emit.cpp:904

↓ 4 callersMethodmovsx_r64_r16

src/x64_emit.cpp:919

↓ 4 callersMethodmovsx_r64_r8

src/x64_emit.cpp:914

↓ 4 callersFunctionparse_u64

src/main.cpp:329

↓ 4 callersFunctionpick_temp_reg

pick a per-seed shuffled scratch from the volatile pool that doesn't collide with any caller-supplied register

src/codec.cpp:265

↓ 4 callersFunctionsplitmix64_step

src/pe_embed.cpp:25

↓ 4 callersMethodtake

include/mkpivm/x64_emit.h:54

↓ 4 callersMethodvm_sp_headroom

this shit was so fucking retarded i dont even wanna talk abt it

include/mkpivm/vm_isa.h:150

↓ 4 callersFunctionx86_cipher_reset

reload cipher_state from VMState at cipher_extra+48

src/codec_x86.cpp:227

↓ 4 callersFunctionx86_self_locate

local copy of vm_codegen_x86.cpp's x86_self_locate

src/codec_x86.cpp:20

↓ 4 callersFunctionzimm_to_imm

src/lifter.cpp:141

↓ 3 callersMethodblock_offset

include/mkpivm/bytecode.h:38

↓ 3 callersMethodby_family

src/codec.cpp:4076

↓ 3 callersFunctioncodec_family_for

pick codec family for an IR op.

src/codec.cpp:4086

↓ 3 callersMethodderive

src/seed.cpp:55

↓ 3 callersFunctionemit_unary_arith

src/codec.cpp:1592

↓ 3 callersFunctionemit_unary_arith_x86

INC / DEC reg: single-operand arith, sets flags but not CF.

src/codec_x86.cpp:1283

↓ 3 callersMethodencode

IMM: dst_slot = imm

src/codec.cpp:578

↓ 3 callersMethodin_code

include/mkpivm/cfg.h:48

↓ 3 callersMethodmark_block

record this cursor as the start of IR block_id

include/mkpivm/bytecode.h:34

↓ 3 callersMethodpoly_nop

include/mkpivm/x64_emit.h:242

↓ 3 callersMethodreg_count

include/mkpivm/vm_isa.h:98

↓ 3 callersMethodresolve_branches

walk the fixup list once every block has an offset

include/mkpivm/bytecode.h:52

↓ 3 callersFunctionslot_for

src/codec.cpp:7

↓ 3 callersFunctiontry_base64

decode s as base64, whitespace ignored

src/main.cpp:181

↓ 3 callersFunctionx86_materialize_nvs

load all 4 x86 NV regs from their lifted XReg slots.

src/codec_x86.cpp:36

↓ 2 callersMethodbase_va

include/mkpivm/cfg.h:64

↓ 2 callersMethodblock_start_offsets

sorted block start offsets. block 0 is at 0, the rest follow emit order.

include/mkpivm/bytecode.h:98

↓ 2 callersMethodbswap_reg

src/x64_emit.cpp:759

↓ 2 callersMethodbuild

↓ 2 callersMethodcall_rel32

src/x64_emit.cpp:816

↓ 2 callersMethodcipher_k2

include/mkpivm/vm_isa.h:156

↓ 2 callersMethoddata_island_size

size of the data island in bytes

include/mkpivm/vm_isa.h:146

↓ 2 callersFunctionemit_binop_with_mem

emits a binary op dst op= src

src/lifter.cpp:179

↓ 2 callersFunctionemit_cmp_test_handler

src/codec.cpp:1882

↓ 2 callersFunctionemit_cmp_test_x86

CMP / TEST: bin-shaped operand fetch, writes only flag state, no slot writeback.

src/codec_x86.cpp:1396

↓ 2 callersFunctionemit_extend_x86

ZEXT / SEXT: zero- or sign-extend a sub-width source into a wider dst.

src/codec_x86.cpp:2451

↓ 2 callersMethodemit_full

src/vm_codegen.cpp:17

↓ 2 callersMethodemit_handler

src/codec.cpp:594

↓ 2 callersFunctionemit_native_handler

src/codec.cpp:2500

↓ 2 callersFunctionemit_native_handler_x86

CALL_NATIVE: invoke a Win32 API

src/codec_x86.cpp:1895

↓ 2 callersMethodemit_trampoline

one trampoline per call site

src/vm_codegen.cpp:773

↓ 2 callersMethodemit_trampoline_offset_for_return_va

placeholder u32 the packager fills with the offset of the trampoline for the post-call block

include/mkpivm/bytecode.h:81

↓ 2 callersFunctionemit_unaryop_with_mem

src/lifter.cpp:201

↓ 2 callersFunctionenc_cmp_test

CMP / TEST: share the bin-op encoding but only write flag context.

src/codec.cpp:1853

↓ 2 callersFunctionenc_native

CALL_NATIVE / JMP_NATIVE / RET_NATIVE

src/codec.cpp:2482

↓ 2 callersFunctionextract_0x

pull every 0xHH literal out of s

src/main.cpp:161

↓ 2 callersFunctionextract_backslash_x

pull every \xHH escape out of s

src/main.cpp:142

↓ 2 callersMethodheap_stack

--heap-stack toggle

include/mkpivm/vm_isa.h:142

↓ 2 callersMethodin_lifted

is this VA something we lift? idk. in default mode same as in_code. in hybrid mode only true inside a configured range. lifter uses this to pick BR vs

include/mkpivm/cfg.h:55

↓ 2 callersMethodjunk_density

0 to 3. higher means more junk between handlers.

include/mkpivm/vm_isa.h:183

↓ 2 callersMethodnot_reg

src/x64_emit.cpp:749

↓ 2 callersMethodpopfq

src/x64_emit.cpp:799

↓ 2 callersFunctionprint_usage

src/main.cpp:31

↓ 2 callersFunctionprologue_order_for

src/vm_codegen.cpp:74

↓ 2 callersMethodpushfq

src/x64_emit.cpp:798

↓ 2 callersMethodrange_leak_nvs

--range-leak-nvs opt-in

include/mkpivm/vm_isa.h:121

↓ 2 callersMethodret

src/x64_emit.cpp:801

↓ 2 callersMethodrol_reg_imm8

src/x64_emit.cpp:653

↓ 2 callersFunctionrva_to_file_off

rva -> file offset for write-back patches.

src/pe_embed.cpp:180

↓ 2 callersMethodset_data_island_size

include/mkpivm/vm_isa.h:147

↓ 2 callersMethodset_range_mode

include/mkpivm/vm_isa.h:114

↓ 2 callersMethodset_used_families

only emit full handler bodies for codecs whose family is in `used` why should we give everyone the full table if they dont use it.

include/mkpivm/vm_codegen.h:72

↓ 2 callersMethodshr_reg_imm8

src/x64_emit.cpp:633

↓ 2 callersFunctiontry_bare_hex

decode s as bare hex with permissive separators

src/main.cpp:235

↓ 2 callersFunctionwidth_from_zsize

src/lifter.cpp:7

↓ 1 callersFunctionarch_name

include/mkpivm/arch.h:12

↓ 1 callersFunctionarch_native_gpr_count

16 on x64, 8 on x86 go figure

include/mkpivm/arch.h:25

↓ 1 callersFunctionarch_ptr_bytes

include/mkpivm/arch.h:16

↓ 1 callersMethodassign_opcode

src/vm_isa.cpp:183

↓ 1 callersFunctioncmov_to_cond

src/lifter.cpp:1253

↓ 1 callersMethodcode

include/mkpivm/cfg.h:63

↓ 1 callersFunctiondecode_input

decode input bytes. `forced` overrides auto-detect

src/main.cpp:271

↓ 1 callersFunctiondisasm_min_5

src/pe_embed.cpp:296

↓ 1 callersFunctionembed_vm_blob

src/pe_embed.cpp:622

↓ 1 callersMethodemit_data_island_offset_for_va

placeholder offset into the data island for an original VA. encoder fills it in using the IRProgram data map

include/mkpivm/bytecode.h:71

↓ 1 callersFunctionemit_output

write either raw bytes or a text-formatted representation to path

src/main.cpp:865

↓ 1 callersFunctionemit_wrapper_x64

src/pe_embed.cpp:482

↓ 1 callersFunctionemit_wrapper_x64_threaded

src/pe_embed.cpp:387

↓ 1 callersFunctionemit_wrapper_x86

src/pe_embed.cpp:589

↓ 1 callersFunctionemit_wrapper_x86_threaded

src/pe_embed.cpp:555

← previous next →101–200 of 458, ranked by callers