Package com.pnfsoftware.jeb.core.units.code.asm

Class AbstractNativeDisassemblerPlugin<InsnType extends IInstruction>

java.lang.Object

com.pnfsoftware.jeb.core.AbstractPlugin

com.pnfsoftware.jeb.core.units.AbstractUnitPlugin

com.pnfsoftware.jeb.core.units.code.asm.AbstractNativePlugin<InsnType>

com.pnfsoftware.jeb.core.units.code.asm.AbstractNativeDisassemblerPlugin<InsnType>

Type Parameters:

InsnType - instruction type handled by the disassembler plugin

All Implemented Interfaces:

IPlugin, INativeDisassemblerPlugin<InsnType>, INativePlugin<InsnType>, IUnitPlugin

public abstract class AbstractNativeDisassemblerPlugin<InsnType extends IInstruction>
extends AbstractNativePlugin<InsnType>
implements INativeDisassemblerPlugin<InsnType>

Base implementation of a INativeDisassemblerPlugin. Disassembler plugins should extend this class.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	propnameAllowAdvancedAnalysis	Property name for enabling advanced analysis.
static final String	propnameAnalysisStyle	Property name for the analysis style setting.
static final String	propnameApplyAndroidNativePrototypes	Property name for applying Android native prototypes.
static final String	propnameCallingConvention	Property name for the calling convention setting.
static final String	propnameCompilerIdentification	Property name for compiler identification.
static final String	propnameCreatePackagesFromRoutineNames	Property name for creating packages from routine names.
static final String	propnameDebugInformationRetrievalPolicy	Property name for the debug information retrieval policy.
static final String	propnameDebugInformationUsagePolicy	Property name for the debug information usage policy.
static final String	propnameDelayAnalysis	Property name for delaying analysis.
static final String	propnameEndianness	Property name for the endianness setting.
static final String	propnameForceSynchronousAnalysis	Property name for forcing synchronous analysis.
static final String	propnameImageBase	Property name for the image base setting.
static final String	propnameLoadTypelibrariesCodelessSigs	Property name for loading codeless signatures from type libraries.
static final String	propnamePerformClassRecovery	Property name for class recovery.
static final String	propnamePerformFakeRoutineCallAnalysis	Property name for fake routine call analysis.
static final String	propnamePerformGlobalAnalysis	Property name for global analysis.
static final String	propnamePerformRttiRecovery	Property name for RTTI recovery.
static final String	propnamePreferHexAddresses	Property name for hexadecimal address rendering preference.
static final String	propnameRelocationBaseForZeroBasedRelocatableObjects	Property name for the relocation base of zero-based relocatable objects.
static final String	propnameSignaturePackagesLoading	Property name for signature package loading.
static final String	propnameSwitchAnalysisStyle	Property name for switch analysis style.
static final String	propnameTailCallAnalysisStyle	Property name for tail-call analysis style.
static final String	propnameUseTypeLibraries	Property name for type library usage.

Fields inherited from class com.pnfsoftware.jeb.core.units.AbstractUnitPlugin

pdm, pm, priority, type

Constructor Summary

Constructors

Constructor	Description
AbstractNativeDisassemblerPlugin(String type, double priority)	Create a native disassembler plugin.

Method Summary

Modifier and Type	Method	Description
boolean	canBeProcessedOutsideCodeObject()	The default implementation returns true: native assemblies or assemblies treated as native can be processed outside of a container file (aka, a code object, such as a PE or ELF file0.
boolean	canProcessELF(int machineId, boolean isELF64)	The default implementation returns false.
boolean	canProcessPE(int machineId, boolean isPE64)	The default implementation returns false.
ICallingConvention	getCallingConvention(IUnitCreator parent)	The default implementation returns null.
List<ProcessorType>	getProcessorTypes()	The default implementation returns an empty collection.
String	toString()

Methods inherited from class com.pnfsoftware.jeb.core.units.code.asm.AbstractNativePlugin

setupCustomProperties

Methods inherited from class com.pnfsoftware.jeb.core.units.AbstractUnitPlugin

getFormatType, getPriority, getPropertyDefinitionManager, getTypeIdProvider, initialize

Methods inherited from class com.pnfsoftware.jeb.core.AbstractPlugin

dispose, getData, setData

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.pnfsoftware.jeb.core.units.code.asm.INativeDisassemblerPlugin

createContributions, getAnalyzerExtension, getCodeFormatter, getMemory, getProcessor

Methods inherited from interface com.pnfsoftware.jeb.core.units.code.asm.INativePlugin

setupCustomProperties

Methods inherited from interface com.pnfsoftware.jeb.core.IPlugin

dispose, getData, getPluginInformation, setData

Methods inherited from interface com.pnfsoftware.jeb.core.units.IUnitPlugin

getFormatType, getPriority, getPropertyDefinitionManager, getTypeIdProvider, initialize

Field Details

propnameEndianness

public static final String propnameEndianness

Property name for the endianness setting.

See Also:

• Constant Field Values

propnameImageBase

public static final String propnameImageBase

Property name for the image base setting.

See Also:

• Constant Field Values

propnameRelocationBaseForZeroBasedRelocatableObjects

public static final String propnameRelocationBaseForZeroBasedRelocatableObjects

Property name for the relocation base of zero-based relocatable objects.

See Also:

• Constant Field Values

propnameCallingConvention

public static final String propnameCallingConvention

Property name for the calling convention setting.

See Also:

• Constant Field Values

propnameDelayAnalysis

public static final String propnameDelayAnalysis

Property name for delaying analysis.

See Also:

• Constant Field Values

propnameAllowAdvancedAnalysis

public static final String propnameAllowAdvancedAnalysis

Property name for enabling advanced analysis.

See Also:

• Constant Field Values

propnameForceSynchronousAnalysis

public static final String propnameForceSynchronousAnalysis

Property name for forcing synchronous analysis.

See Also:

• Constant Field Values

propnameAnalysisStyle

public static final String propnameAnalysisStyle

Property name for the analysis style setting.

See Also:

• Constant Field Values

propnamePerformClassRecovery

public static final String propnamePerformClassRecovery

Property name for class recovery.

See Also:

• Constant Field Values

propnamePerformRttiRecovery

public static final String propnamePerformRttiRecovery

Property name for RTTI recovery.

See Also:

• Constant Field Values

propnamePerformGlobalAnalysis

public static final String propnamePerformGlobalAnalysis

Property name for global analysis.

See Also:

• Constant Field Values

propnameDebugInformationUsagePolicy

public static final String propnameDebugInformationUsagePolicy

Property name for the debug information usage policy.

See Also:

• Constant Field Values

propnameDebugInformationRetrievalPolicy

public static final String propnameDebugInformationRetrievalPolicy

Property name for the debug information retrieval policy.

See Also:

• Constant Field Values

propnameUseTypeLibraries

public static final String propnameUseTypeLibraries

Property name for type library usage.

See Also:

• Constant Field Values

propnameLoadTypelibrariesCodelessSigs

public static final String propnameLoadTypelibrariesCodelessSigs

Property name for loading codeless signatures from type libraries.

See Also:

• Constant Field Values

propnameSignaturePackagesLoading

public static final String propnameSignaturePackagesLoading

Property name for signature package loading.

See Also:

• Constant Field Values

propnameCompilerIdentification

public static final String propnameCompilerIdentification

Property name for compiler identification.

See Also:

• Constant Field Values

propnameTailCallAnalysisStyle

public static final String propnameTailCallAnalysisStyle

Property name for tail-call analysis style.

See Also:

• Constant Field Values

propnameSwitchAnalysisStyle

public static final String propnameSwitchAnalysisStyle

Property name for switch analysis style.

See Also:

• Constant Field Values

propnamePreferHexAddresses

public static final String propnamePreferHexAddresses

Property name for hexadecimal address rendering preference.

See Also:

• Constant Field Values

propnamePerformFakeRoutineCallAnalysis

public static final String propnamePerformFakeRoutineCallAnalysis

Property name for fake routine call analysis.

See Also:

• Constant Field Values

propnameApplyAndroidNativePrototypes

public static final String propnameApplyAndroidNativePrototypes

Property name for applying Android native prototypes.

See Also:

• Constant Field Values

propnameCreatePackagesFromRoutineNames

public static final String propnameCreatePackagesFromRoutineNames

Property name for creating packages from routine names.

See Also:

• Constant Field Values

Constructor Details

AbstractNativeDisassemblerPlugin

public AbstractNativeDisassemblerPlugin(String type,
 double priority)

Create a native disassembler plugin.

Parameters:

type - plugin type identifier

priority - plugin priority

Method Details

canBeProcessedOutsideCodeObject

public boolean canBeProcessedOutsideCodeObject()

The default implementation returns true: native assemblies or assemblies treated as native can be processed outside of a container file (aka, a code object, such as a PE or ELF file0.

Specified by:

canBeProcessedOutsideCodeObject in interface INativeDisassemblerPlugin<InsnType extends IInstruction>

Returns:

true if raw machine code can be processed without a code object

canProcessELF

public boolean canProcessELF(int machineId,
 boolean isELF64)

The default implementation returns false.

Specified by:

canProcessELF in interface INativeDisassemblerPlugin<InsnType extends IInstruction>

Parameters:

machineId - ELF machine identifier

isELF64 - true for 64-bit ELF objects

Returns:

true if the ELF machine type can be processed

canProcessPE

public boolean canProcessPE(int machineId,
 boolean isPE64)

The default implementation returns false.

Specified by:

canProcessPE in interface INativeDisassemblerPlugin<InsnType extends IInstruction>

Parameters:

machineId - PE/COFF machine identifier

isPE64 - true for 64-bit PE objects

Returns:

true if the PE/COFF machine type can be processed

getProcessorTypes

public List<ProcessorType> getProcessorTypes()

The default implementation returns an empty collection.

Specified by:

getProcessorTypes in interface INativeDisassemblerPlugin<InsnType extends IInstruction>

Returns:

a list, possibly empty

getCallingConvention

public ICallingConvention getCallingConvention(IUnitCreator parent)

The default implementation returns null. JEB will attempt to determine the calling convention on its own.

Specified by:

getCallingConvention in interface INativeDisassemblerPlugin<InsnType extends IInstruction>

Parameters:

parent - parent unit creator

Returns:

calling convention, or null if it should be inferred

toString

public String toString()

Overrides:

toString in class Object