Home | Trees | Indices | Help |
---|
|
A module to analyze and explore an IDB for semantics. For a set of API names, references to these are identified and used for creating context and allowing tagging of them.
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|
Loads a semantic configuration file and collects all definitions from it.
|
Calculates the number of basic blocks for a given function by walking its FlowChart.
|
returns the number of basic blocks for the function containing the queried address, based on the value stored in the last scan result. If the number of basic blocks for this function has never been calculated, zero is returned.
|
Scan by references to API names, based on the definitions loaded from the config file. This is highly efficient because we only touch places in the IDB that actually have references to our API names of interest. |
Not implemented yet. In the long run, this function shall perform a full enumeration of all instructions, gathering information like number of instructions, number of basic blocks, references to and from functions etc. |
Get a function address containing the queried address.
|
Calculate the number of functions in all segments.
|
Get all function address that have been covered by the last scanning.
|
Get all function address with a dummy name that have been covered by the last scanning.
|
Get all the tags that have been covered by the last scanning. @return (list of str) The tags found. |
Get all tags found for the function containing the queried address.
|
Get the number of occurrences for a certain tag for the function containing the queried address.
|
Get all call contexts for the function containing the queried address.
|
Get all call contexts for all functions
|
Get all functions that can be renamed according to the last scan result. Only functions with the standard IDA name sub_[0-9A-F]+ will be considered for renaming.
|
Get the parameters for the given address of a function call.
|
Resolve the parameters for an API calls based on a call context for this API call.
|
Combine the results of _get_push_addresses_before_target_address and _get_api_signature in order to produce a list of ParameterContext data objects.
|
Get the signature for a function by using IDA's GetType(). The string is then parsed with a Regex and returned as a dictionary.
|
Get the addresses of all push instructions in the basic block preceding the given address.
|
Get the last scan result as retrieved by scan_by_references.
|
Home | Trees | Indices | Help |
---|
Generated by Epydoc 3.0.1 on Mon Sep 17 13:18:34 2012 | http://epydoc.sourceforge.net |