Functions — github.com/KasperskyLab/hrtng

CodeHub MCPcopy Create free account

hub / github.com/KasperskyLab/hrtng / functions

Functions805 in github.com/KasperskyLab/hrtng

⨍ Functions 805◇ Types & classes 49

↓ 2 callersFunctiongetEaName

src/rename.cpp:204

↓ 2 callersFunctiongetExpType

src/rename.cpp:652

↓ 2 callersFunctiongetInlPath

src/deinline.cpp:1924

↓ 2 callersFunctiongetJccDests

For a block that ends in a conditional jump, extract the integer block numbers for the "taken" and "not taken" cases.

src/unflat.cpp:897

↓ 2 callersFunctiongetMatcher

src/deinline.cpp:1896

↓ 2 callersMethodgetNextMatched

src/deinline.cpp:663

↓ 2 callersFunctiongetPluginsFile

------------------------------------------------

src/helpers.cpp:804

↓ 2 callersFunctiongetStringFromBuf

src/appcall.cpp:49

↓ 2 callersFunctiongetUdtMembName

src/rename.cpp:424

↓ 2 callersFunctiongetVarName

src/rename.cpp:301

↓ 2 callersFunctionget_ida_notepad_text

src/helpers.h:112

↓ 2 callersFunctionget_next_mblock

blocks may be reordered at early stages

src/deob.cpp:51

↓ 2 callersFunctionget_proc2memb_refs

src/structures.cpp:1173

↓ 2 callersFunctionhas_if42blocks

src/hrtng.cpp:2889

↓ 2 callersFunctionimportEnumFromTil

src/lit.cpp:273

↓ 2 callersFunctionimportEnumFromTils

src/lit.cpp:315

↓ 2 callersFunctioninit

IDA_SDK_VERSION < 750

src/hrtng.cpp:5861

↓ 2 callersFunctioninl_create_from_whole_mba

src/deinline.cpp:2084

↓ 2 callersFunctionisGUIDtypeName

src/comhelper.cpp:144

↓ 2 callersFunctionisIdaInternalComment

src/rename.cpp:28

↓ 2 callersFunctionisMicroAvx_active

src/microavx.cpp:982

↓ 2 callersFunctionisNoretProcName

renaming a function at this late stage can cause INTERR 51774 because the control flow graph may become wrong. It occurs if we rename a function with

src/rename.cpp:262

↓ 2 callersFunctionisStructOffOver

src/rename.cpp:411

↓ 2 callersFunctionisWord

src/refactoring.cpp:166

↓ 2 callersFunctionis_array_char_assign_int

-------------------------------------------------------------------------- array strings

src/hrtng.cpp:4182

↓ 2 callersFunctionis_inline

src/deinline.cpp:1949

↓ 2 callersFunctionis_like_assign

src/hrtng.cpp:2123

↓ 2 callersFunctionis_n_recast

src/cast.cpp:877

↓ 2 callersFunctionis_reg_op

src/microavx.cpp:45

↓ 2 callersFunctionis_reincastable

src/cast.cpp:103

↓ 2 callersFunctionis_struct

↓ 2 callersFunctionjump_custom_viewer

src/helpers.cpp:744

↓ 2 callersFunctionloadInlines

src/deinline.cpp:1163

↓ 2 callersMethodloadText

bin/plugins/notepad-md.py:33

↓ 2 callersFunctionload_if42blocks

src/hrtng.cpp:2897

↓ 2 callersFunctionload_varvals

src/varval.cpp:74

↓ 2 callersFunctionlocal_crc16

src/idb2pat.cpp:65

↓ 2 callersFunctionmakeBufVal

src/appcall.cpp:283

↓ 2 callersMethodmakeCFG

build Control Flow Graph, calc frequency dictionary for each basic block

src/deinline.cpp:597

↓ 2 callersFunctionmakeif42block

src/hrtng.cpp:2927

↓ 2 callersFunctionmk_name_w

src/helpers.cpp:284

↓ 2 callersFunctionmop2list

dirty hack to append reg or stkvar into mlist

src/unflat.cpp:1280

↓ 2 callersFunctionmsig_auto_filename

src/msig.cpp:416

↓ 2 callersFunctionnamecmp

src/helpers.cpp:223

↓ 2 callersFunctionno_code_warning

src/deob.cpp:1212

↓ 2 callersFunctionpass_goto_chain

src/deob.cpp:231

↓ 2 callersFunctionpat_InitedVarCondImm

This function replaces read-only initialized global variable patterns with 0 in m_setl/m_jl/m_jge, m_seto (MMAT_CALLS or later only) either: dword_73F

src/opt.cpp:643

↓ 2 callersFunctionpat_LnotOrLnotLnot

Replaces conditionals of the form !(!c1 || !c2) => (c1 && c2).

src/opt.cpp:852

↓ 2 callersFunctionpat_LogicAnd1

This function simplifies microinstruction patterns that look like either: (x & 1) | (y & 1) ==> (x | y) & 1 or: (x & 1) ^ (y & 1) ==> (x ^ y) & 1

src/opt.cpp:361

↓ 2 callersFunctionpatch_cond_jmp

src/helpers.cpp:390

↓ 2 callersFunctionprintExp2Msg

src/helpers.cpp:703

↓ 2 callersFunctionprint_struct_member_type

src/structures.cpp:262

↓ 2 callersFunctionremake_func

create func chunks

src/deob.cpp:1236

↓ 2 callersFunctionremove_funcs_tails

src/deob.cpp:1068

↓ 2 callersFunctionrestoreOldBg

src/hrtng.cpp:4582

↓ 2 callersMethodrun

src/appcall.cpp:839

↓ 2 callersFunctionrunFuncSwitchSync

src/hrtng.cpp:5229

↓ 2 callersFunctionsafeBr

src/hrtng.cpp:4738

↓ 2 callersFunctionscan_stack_string2

src/hrtng.cpp:3997

↓ 2 callersFunctionset_membr_type

src/hrtng.cpp:2280

↓ 2 callersFunctionshowMicrocodeExplorer

src/MicrocodeExplorer.cpp:714

↓ 2 callersFunctionstripNum

src/helpers.cpp:201

↓ 2 callersFunctionstruct_has_member

src/structures.cpp:216

↓ 2 callersMethodto_type

src/new_struct.cpp:323

↓ 2 callersFunctiontopClassThis

returns derivedClassThis in expressions like: derivedClassThis->baseClass2.baseClass1.baseClassMember derivedClassThis.baseClass2.baseClass1.baseClass

src/structures.cpp:953

↓ 2 callersFunctionufAddFL

src/unflat.cpp:108

↓ 2 callersFunctionufDelFL

src/unflat.cpp:113

↓ 2 callersFunctionufDelGL

src/unflat.cpp:100

↓ 2 callersFunctionundefRegs2args

src/hrtng.cpp:1288

↓ 2 callersFunctionunique_nameC

src/helpers.h:276

↓ 2 callersFunctionupd_comment

src/deinline.cpp:1037

↓ 2 callersMethodupdate_max_offset

src/new_struct.cpp:483

↓ 1 callersFunctionACT_DEF

src/hrtng.cpp:711

↓ 1 callersFunctionAddLine

src/MicrocodeExplorer.cpp:173

↓ 1 callersFunctionAreConditionsOpposite

This function checks whether two conditional terms are logically opposite. For example, "eax <s 1" and "eax >=s 1" would be considered logically oppos

src/opt.cpp:222

↓ 1 callersFunctionAskDesiredMaturity

src/MicrocodeExplorer.cpp:764

↓ 1 callersFunctionChangeGoto

Either change the destination of an existing goto, or add a new goto onto the end of the block to the destination. Also, plan to modify the graph stru

src/unflat.cpp:1254

↓ 1 callersFunctionCheckAndExtractOpsSubBy1

check y * (x - 1) and extract the operands mop_t *opMulNonSub; // Operand y of multiply that isn't a subtraction mop_t *subNonNum; // Operand x from

src/opt.cpp:524

↓ 1 callersFunctionClear

src/MicrocodeExplorer.cpp:234

↓ 1 callersFunctionComputeDominators

src/unflat.cpp:580

↓ 1 callersFunctionCorrectStopBlockPreds

ida changes number of stopBlk on inserting new block (CopyMblock), renumbers sucessors/predecessors of moved block but not changes microcode to correl

src/unflat.cpp:1662

↓ 1 callersFunctionDeleteBlock

if IDA_SDK_VERSION < 760 use own implementation just to show warning message

src/unflat.cpp:943

↓ 1 callersFunctionFindJccInFirstBlocks

src/unflat.cpp:1688

↓ 1 callersFunctionFindNumericDefBackwards

A wrapper around my_find_def_backwards. It is extended in the following ways: If my_find_def_backwards identifies a definition of the variable "op" wh

src/unflat.cpp:1360

↓ 1 callersFunctionGetFirstBlock

This function finds the "first" block immediately before the control flow flattening dispatcher begins. The logic is simple; start at the beginning of

src/unflat.cpp:646

↓ 1 callersFunctionInsert

src/MicrocodeExplorer.cpp:264

↓ 1 callersFunctionLogLevelName

src/helpers.cpp:766

↓ 1 callersFunctionLogLevelNames

src/helpers.cpp:755

↓ 1 callersFunctionMetasploit_HashAPI

src/apihashes.cpp:99

↓ 1 callersFunctionMetasploit_HashLibName

------------------------------------------------------------

src/apihashes.cpp:82

↓ 1 callersFunctionMicroAvx_done

src/microavx.cpp:992

↓ 1 callersFunctionMicroAvx_init

src/microavx.cpp:986

↓ 1 callersFunctionMicroMaturityToString

src/MicrocodeExplorer.cpp:30

↓ 1 callersFunctionRemove

src/unflat.cpp:1124

↓ 1 callersFunctionRemoveSingleGotos

This function eliminates transfers to blocks with a single goto on them. Either if a given block has a goto at the end of it, where the destination is

src/unflat.cpp:1029

↓ 1 callersFunctionReplace

src/unflat.cpp:1163

↓ 1 callersFunctionSerializeMba

src/msig.cpp:139

↓ 1 callersFunctionTunnelThroughOrMinus2

It checks to see whether the provided microinstruction is "x | -2" (or "-2 | x"), and extracts x as both an operand, and, if the operand is a mop_d (r

src/opt.cpp:123

↓ 1 callersFunctionadd

src/msig.cpp:231

↓ 1 callersFunctionaddCmp

src/unflat.cpp:395

← previous next →201–300 of 805, ranked by callers