Uses of Interface
com.pnfsoftware.jeb.core.units.code.asm.analyzer.INativeCodeAnalyzer
Packages that use INativeCodeAnalyzer
Package
Description
Types used to implement and access data identifiers, parsers, code analyzers, disassemblers,
decompilers, and debuggers.
Types relating to the disassembler engine.
Types for library code signatures (siglib) generation and identification.
-
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units
Methods in com.pnfsoftware.jeb.core.units that return INativeCodeAnalyzer -
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units.code.asm.analyzer
Fields in com.pnfsoftware.jeb.core.units.code.asm.analyzer declared as INativeCodeAnalyzerModifier and TypeFieldDescriptionprotected INativeCodeAnalyzer<InsnType>AbstractAnalyzerExtension.gcaMethods in com.pnfsoftware.jeb.core.units.code.asm.analyzer with parameters of type INativeCodeAnalyzerModifier and TypeMethodDescriptionstatic IBinaryPatternCodeAnalyzerUtil.checkBinaryPattern(INativeCodeAnalyzer<?> analyzer, BinaryPatternVerifier verifier, long address, long addressMax) static IBinaryPatternCodeAnalyzerUtil.checkBinaryPattern(INativeCodeAnalyzer<?> analyzer, BinaryPatternVerifier verifier, long address, long addressMax, int patternSize, int processorMode) Convenience method to check if a given binary pattern verifier matches at the start of the given memory range.voidAbstractAnalyzerExtension.initialize(INativeCodeAnalyzer<InsnType> analyzer) Must be called by the GCA.voidINativeCodeAnalyzerExtension.initialize(INativeCodeAnalyzer<InsnType> analyzer) Implementors will receive a reference to the main analyzer.booleanBinaryPattern.validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) booleanIBinaryPattern.validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) Final validation.BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize) BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize, int processorMode) -
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units.code.asm.sig
Methods in com.pnfsoftware.jeb.core.units.code.asm.sig with parameters of type INativeCodeAnalyzerModifier and TypeMethodDescriptionvoidNativeSignatureDBManager.activateAutoSigningMode(INativeCodeAnalyzer<IInstruction> gca) voidNativeSignatureDBManager.deactivateAutoSigningMode(INativeCodeAnalyzer<IInstruction> gca) NativeSignatureGenerator.generateSignature(INativeCodeAnalyzer<IInstruction> analyzer, INativeMethodItem routine, Set<NativeFeatureSignerID> clientProvidedFeatureSigners, Set<NativeAttributeSignerID> clientProvidedAttributeSigners) Generate a new signature for a routine, following the default strategy.ISigningStrategy.getAttributeSigners(INativeCodeAnalyzer<IInstruction> analyzer, INativeItem item) Provides the IDs of the attribute signers that should be used to collect information from the given native item.ISigningStrategy.getFeatureSigners(INativeCodeAnalyzer<IInstruction> analyzer, INativeItem item) Provides the IDs of the feature signers that should be used to compute the features of the given native item.NativeSignatureDBManager.getUserSelectedPackage(INativeCodeAnalyzer<IInstruction> analyzer) booleanNativeSignatureDBManager.isAutoSigningModeActivated(INativeCodeAnalyzer<IInstruction> gca) voidNativeSignatureDBManager.loadDefaultPackages(INativeCodeAnalyzer<IInstruction> gca) Loads in memory the available packages suitable for the given analysis.booleanNativeSignatureDBManager.loadPackage(INativeCodeAnalyzer<IInstruction> gca, NativeSignaturePackageEntry entry) Loads a specific package for the given analysis.NativeSignatureDBManager.match(INativeCodeAnalyzer<? extends IInstruction> _gca, Collection<INativeMethodDataItem> routines, boolean uniqueMatchOnly, boolean maximumConfidenceLevel, boolean includeAlreadyMatched) Match a list of native routines against the currently loaded signatures packages for this analysis.voidNativeSignatureDBManager.registerAnalyzer(INativeCodeAnalyzer<IInstruction> gca) Register an analyzer to be handled by this manager.voidNativeSignatureDBManager.setUserSelectedPackage(INativeCodeAnalyzer<IInstruction> analyzer, NativeSignaturePackageEntry userSelectedPackage) voidNativeSignatureDBManager.unregisterAnalyzer(INativeCodeAnalyzer<IInstruction> gca) Unregister an analyzer handled by this manager.