MCPcopy Create free account

hub / github.com/FrenchYeti/rasputin / functions

Functions28 in github.com/FrenchYeti/rasputin

↓ 3 callersFunctiondeobfuscateString
(pCodeUnitIter, pLocName, pAddrEnd=None)
Ghidra/inlined_string_1.py:181
↓ 2 callersMethodgetReplaceOp
( String instrOp)
Ghidra/patch_computed_branch_arm64.java:34
↓ 2 callersMethodpatch
( String newOp, Address pBranchAddr, Address pToAddress)
Ghidra/patch_computed_branch_arm64.java:95
↓ 2 callersMethodpatchBlrAt
( Address pBranchAddr)
Ghidra/patch_computed_branch_arm64.java:107
↓ 2 callersFunctionrunEmulator
(pEmu, pStart, pStop, pDump, pTrace=False)
Ghidra/inlined_string_1.py:134
↓ 2 callersMethodsearchFixedBranch
( Address beginAddr, Address endAddr, boolean doPatch )
Ghidra/patch_computed_branch_arm64.java:45
↓ 1 callersFunctionbtos
(pBytes)
Ghidra/inlined_string_1.py:33
↓ 1 callersMethoddecrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_sub_deobf.java:53
↓ 1 callersMethoddecrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_add_2_deobf.java:53
↓ 1 callersMethoddecrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_add_deobf.java:53
↓ 1 callersMethoddecrypt_xor
(Address startAddress, Address endAddress, Address keyStart, Address keyEnd)
Ghidra/xor_generic_decryptor.java:45
↓ 1 callersFunctionmapMemoryRegionContaining
(pEmu, pAddrStr)
Ghidra/inlined_string_1.py:126
↓ 1 callersFunctionprintCpuContext
(pEmu, pFilter=None)
Ghidra/inlined_string_1.py:50
↓ 1 callersFunctionprintInstr
(pExecAddr)
Ghidra/inlined_string_1.py:45
↓ 1 callersFunctionreadMemoryBytes
(pAddress, pLen)
Ghidra/inlined_string_1.py:63
↓ 1 callersMethodreplace_buffer
(Address startAddress)
Ghidra/xor_generic_decryptor.java:21
↓ 1 callersMethodreplace_buffer
(Address startAddress)
Ghidra/string_sub_deobf.java:29
↓ 1 callersMethodreplace_buffer
(Address startAddress)
Ghidra/string_add_2_deobf.java:29
↓ 1 callersMethodreplace_buffer
(Address startAddress)
Ghidra/string_add_deobf.java:29
↓ 1 callersFunctionscanAt
(pAddressStart, pAddressEnd, pForceEnd=False)
Ghidra/inlined_string_1.py:229
↓ 1 callersFunctionscanProgram
()
Ghidra/inlined_string_1.py:218
↓ 1 callersFunctionsearchLenRegister
(pEmu, pAddr)
Ghidra/inlined_string_1.py:75
↓ 1 callersFunctionsearchStore
(pBegin, pEnd, pMemBegin, pMemEnd)
Ghidra/inlined_string_1.py:90
Methodrun
()
Ghidra/xor_generic_decryptor.java:91
Methodrun
()
Ghidra/string_sub_deobf.java:94
Methodrun
()
Ghidra/string_add_2_deobf.java:94
Methodrun
()
Ghidra/string_add_deobf.java:94
Methodrun
()
Ghidra/patch_computed_branch_arm64.java:138