Code
Hub
Workspaces
Following
Trending
Connect
MCP
copy
Create free account
hub
/
github.com/FrenchYeti/rasputin
/ functions
Functions
28 in github.com/FrenchYeti/rasputin
⨍
Functions
28
◇
Types & classes
5
↓ 3 callers
Function
deobfuscateString
(pCodeUnitIter, pLocName, pAddrEnd=None)
Ghidra/inlined_string_1.py:181
↓ 2 callers
Method
getReplaceOp
( String instrOp)
Ghidra/patch_computed_branch_arm64.java:34
↓ 2 callers
Method
patch
( String newOp, Address pBranchAddr, Address pToAddress)
Ghidra/patch_computed_branch_arm64.java:95
↓ 2 callers
Method
patchBlrAt
( Address pBranchAddr)
Ghidra/patch_computed_branch_arm64.java:107
↓ 2 callers
Function
runEmulator
(pEmu, pStart, pStop, pDump, pTrace=False)
Ghidra/inlined_string_1.py:134
↓ 2 callers
Method
searchFixedBranch
( Address beginAddr, Address endAddr, boolean doPatch )
Ghidra/patch_computed_branch_arm64.java:45
↓ 1 callers
Function
btos
(pBytes)
Ghidra/inlined_string_1.py:33
↓ 1 callers
Method
decrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_sub_deobf.java:53
↓ 1 callers
Method
decrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_add_2_deobf.java:53
↓ 1 callers
Method
decrypt_sub
(byte subKey, Address startAddress, Address endAddress)
Ghidra/string_add_deobf.java:53
↓ 1 callers
Method
decrypt_xor
(Address startAddress, Address endAddress, Address keyStart, Address keyEnd)
Ghidra/xor_generic_decryptor.java:45
↓ 1 callers
Function
mapMemoryRegionContaining
(pEmu, pAddrStr)
Ghidra/inlined_string_1.py:126
↓ 1 callers
Function
printCpuContext
(pEmu, pFilter=None)
Ghidra/inlined_string_1.py:50
↓ 1 callers
Function
printInstr
(pExecAddr)
Ghidra/inlined_string_1.py:45
↓ 1 callers
Function
readMemoryBytes
(pAddress, pLen)
Ghidra/inlined_string_1.py:63
↓ 1 callers
Method
replace_buffer
(Address startAddress)
Ghidra/xor_generic_decryptor.java:21
↓ 1 callers
Method
replace_buffer
(Address startAddress)
Ghidra/string_sub_deobf.java:29
↓ 1 callers
Method
replace_buffer
(Address startAddress)
Ghidra/string_add_2_deobf.java:29
↓ 1 callers
Method
replace_buffer
(Address startAddress)
Ghidra/string_add_deobf.java:29
↓ 1 callers
Function
scanAt
(pAddressStart, pAddressEnd, pForceEnd=False)
Ghidra/inlined_string_1.py:229
↓ 1 callers
Function
scanProgram
()
Ghidra/inlined_string_1.py:218
↓ 1 callers
Function
searchLenRegister
(pEmu, pAddr)
Ghidra/inlined_string_1.py:75
↓ 1 callers
Function
searchStore
(pBegin, pEnd, pMemBegin, pMemEnd)
Ghidra/inlined_string_1.py:90
Method
run
()
Ghidra/xor_generic_decryptor.java:91
Method
run
()
Ghidra/string_sub_deobf.java:94
Method
run
()
Ghidra/string_add_2_deobf.java:94
Method
run
()
Ghidra/string_add_deobf.java:94
Method
run
()
Ghidra/patch_computed_branch_arm64.java:138