Package com.pnfsoftware.jeb.core.units.code.asm.analyzer

Class BinaryPatternVerifier

java.lang.Object

com.pnfsoftware.jeb.core.units.code.asm.analyzer.BinaryPatternVerifier

@Ser
public class BinaryPatternVerifier
extends Object

A collection of binary patterns and a verifier for them. Determine if any one of the pattern matches a provided bytes buffer.

Constructor Summary

Constructors

Constructor	Description
BinaryPatternVerifier()

Method Summary

Modifier and Type	Method	Description
void	addPattern(IBinaryPattern pattern)
void	addPatterns(IBinaryPattern... patterns)
void	addPatterns(Collection<IBinaryPattern> patterns)
void	clear()
int	getLongestSize()
Collection<IBinaryPattern>	getPatterns()
IBinaryPattern	verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd)
IBinaryPattern	verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize)
IBinaryPattern	verify(INativeCodeAnalyzer<?> gca, long address, byte[] buffer, int offset, int offsetEnd, int patternSize, int processorMode)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

BinaryPatternVerifier

public BinaryPatternVerifier()

Method Details

addPatterns

public void addPatterns(Collection<IBinaryPattern> patterns)

addPatterns

public void addPatterns(IBinaryPattern... patterns)

addPattern

public void addPattern(IBinaryPattern pattern)

getPatterns

public Collection<IBinaryPattern> getPatterns()

clear

public void clear()

getLongestSize

public int getLongestSize()

verify

public IBinaryPattern verify(INativeCodeAnalyzer<?> gca,
 long address,
 byte[] buffer,
 int offset,
 int offsetEnd)

verify

public IBinaryPattern verify(INativeCodeAnalyzer<?> gca,
 long address,
 byte[] buffer,
 int offset,
 int offsetEnd,
 int patternSize)

verify

public IBinaryPattern verify(INativeCodeAnalyzer<?> gca,
 long address,
 byte[] buffer,
 int offset,
 int offsetEnd,
 int patternSize,
 int processorMode)

Parameters:

gca -

address -

buffer -

offset -

offsetEnd -

patternSize - if different from zero, the verification is only done with the patterns of the given size in bytes

processorMode - restricted processor mode, matching IBinaryPattern.getProcessorMode(). Use IProcessor.MODE_DEFAULT to test all modes or pick one to restrict verification.

Returns: