Package com.pnfsoftware.jeb.core.units.code.asm.analyzer

Interface IBinaryPattern

All Known Implementing Classes:
BinaryPattern
@Ser public interface IBinaryPattern
Definition of a binary pattern. The pattern can be masked. The basic verification routine does something like: if(checkedByte[i] == (pattern[i] & mask[i])) ...
See Also:

  • Method Summary

    Modifier and Type
    Method
    Description
    byte[]
    getBinary()
    Binary bytes.
    Object
    getExtra()
    Get some extra data associated to this pattern.
    byte[]
    getMask()
    Binary mask.
    int
    getProcessorMode()
    Valid processor mode for this Binary Pattern.
    int
    getRealStartOffset()
    The real start offset.
    boolean
    validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd)
    Final validation.

  • Method Details

    • getBinary

      byte[] getBinary()
      Binary bytes. Mandatory.
      Returns:
      binary bytes

    • getMask

      byte[] getMask()
      Binary mask. Optional. If present, must have same length as getBinary().
      Returns:
      binary mask, or null

    • getRealStartOffset

      int getRealStartOffset()
      The real start offset.
      Returns:
      real start offset

    • getProcessorMode

      int getProcessorMode()
      Valid processor mode for this Binary Pattern. Can be IProcessor.MODE_DEFAULT if valid in any mode.
      Returns:
      processor mode

    • validate

      boolean validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd)
      Final validation. Optional method.
      Parameters:
      gca - native code analyzer
      address - address being checked
      buffer - data buffer
      offset - start offset in the buffer
      offsetEnd - end offset in the buffer
      Returns:
      true if the candidate match is valid

    • getExtra

      Object getExtra()
      Get some extra data associated to this pattern. Client specific.
      Returns:
      optional data