Uses of Interface
com.pnfsoftware.jeb.core.units.code.asm.analyzer.INativeCodeAnalyzer
Packages that use INativeCodeAnalyzer
Package
Description
Types used to implement and access data identifiers, parsers, code analyzers, disassemblers,
decompilers, and debuggers.
Types relating to the disassembler engine.
Types for library code signatures (siglib) generation and identification.
-
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units
Methods in com.pnfsoftware.jeb.core.units that return INativeCodeAnalyzer -
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units.code.asm.analyzer
Fields in com.pnfsoftware.jeb.core.units.code.asm.analyzer declared as INativeCodeAnalyzerModifier and TypeFieldDescriptionprotected INativeCodeAnalyzer<InsnType> AbstractAnalyzerExtension.gcaGeneric code analyzer that owns this extension.Methods in com.pnfsoftware.jeb.core.units.code.asm.analyzer with parameters of type INativeCodeAnalyzerModifier and TypeMethodDescriptionstatic IBinaryPatternCodeAnalyzerUtil.checkBinaryPattern(INativeCodeAnalyzer<?> analyzer, BinaryPatternVerifier verifier, long address, long addressMax) Convenience method to check if a binary pattern verifier matches at an address.static IBinaryPatternCodeAnalyzerUtil.checkBinaryPattern(INativeCodeAnalyzer<?> analyzer, BinaryPatternVerifier verifier, long address, long addressMax, int patternSize, int processorMode) Convenience method to check if a given binary pattern verifier matches at the start of the given memory range.voidAbstractAnalyzerExtension.initialize(INativeCodeAnalyzer<InsnType> analyzer) Must be called by the GCA.voidINativeCodeAnalyzerExtension.initialize(INativeCodeAnalyzer<InsnType> analyzer) Implementors will receive a reference to the main analyzer.booleanBinaryPattern.validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) booleanIBinaryPattern.validate(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) Final validation.BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd) Verify a buffer against registered patterns.BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize) Verify a buffer against registered patterns of a given size.BinaryPatternVerifier.verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize, int processorMode) Verify a buffer against registered patterns. -
Uses of INativeCodeAnalyzer in com.pnfsoftware.jeb.core.units.code.asm.sig
Methods in com.pnfsoftware.jeb.core.units.code.asm.sig with parameters of type INativeCodeAnalyzerModifier and TypeMethodDescriptionvoidNativeSignatureDBManager.activateAutoSigningMode(INativeCodeAnalyzer<IInstruction> gca) Activate automatic native signature creation for an analyzer.voidNativeSignatureDBManager.deactivateAutoSigningMode(INativeCodeAnalyzer<IInstruction> gca) Deactivate automatic native signature creation for an analyzer.NativeSignatureGenerator.generateSignature(INativeCodeAnalyzer<IInstruction> analyzer, INativeMethodItem routine, Set<NativeFeatureSignerID> clientProvidedFeatureSigners, Set<NativeAttributeSignerID> clientProvidedAttributeSigners) Generate a new signature for a routine, following the default strategy.ISigningStrategy.getAttributeSigners(INativeCodeAnalyzer<IInstruction> analyzer, INativeItem item) Provides the IDs of the attribute signers that should be used to collect information from the given native item.ISigningStrategy.getFeatureSigners(INativeCodeAnalyzer<IInstruction> analyzer, INativeItem item) Provides the IDs of the feature signers that should be used to compute the features of the given native item.NativeSignatureDBManager.getUserSelectedPackage(INativeCodeAnalyzer<IInstruction> analyzer) Get the user-selected signature package for an analyzer.booleanNativeSignatureDBManager.isAutoSigningModeActivated(INativeCodeAnalyzer<IInstruction> gca) Determine whether automatic native signature creation is active for an analyzer.voidNativeSignatureDBManager.loadDefaultPackages(INativeCodeAnalyzer<IInstruction> gca) Loads in memory the available packages suitable for the given analysis.booleanNativeSignatureDBManager.loadPackage(INativeCodeAnalyzer<IInstruction> gca, NativeSignaturePackageEntry entry) Loads a specific package for the given analysis.NativeSignatureDBManager.match(INativeCodeAnalyzer<? extends IInstruction> _gca, Collection<INativeMethodDataItem> routines, boolean uniqueMatchOnly, boolean maximumConfidenceLevel, boolean includeAlreadyMatched) Match a list of native routines against the currently loaded signatures packages for this analysis.voidNativeSignatureDBManager.registerAnalyzer(INativeCodeAnalyzer<IInstruction> gca) Register an analyzer to be handled by this manager.voidNativeSignatureDBManager.setUserSelectedPackage(INativeCodeAnalyzer<IInstruction> analyzer, NativeSignaturePackageEntry userSelectedPackage) Set the user-selected signature package for an analyzer.voidNativeSignatureDBManager.unregisterAnalyzer(INativeCodeAnalyzer<IInstruction> gca) Unregister an analyzer handled by this manager.