rizin/librz/include/rz_analysis.h
Florian Märkl 1306a965ec
Split off RzAnalysisILContext from VM (Fix #6455) (#6574)
Information about the final register binding and memories is needed
independently of a stateful vm, specifically for analysis.
This is a pure refactor.
2026-06-29 13:45:05 +02:00

2284 lines
112 KiB
C

// SPDX-FileCopyrightText: 2009-2021 nibble <nibble.ds@gmail.com>
// SPDX-FileCopyrightText: 2009-2021 pancake <pancake@nopcode.org>
// SPDX-FileCopyrightText: 2009-2021 xvilka <anton.kochkov@gmail.com>
// SPDX-License-Identifier: LGPL-3.0-only
#ifndef RZ_ANALYSIS_H
#define RZ_ANALYSIS_H
#define RZ_ANALYSIS_OP_INVALID_STACKPTR 0
#define RZ_ANALYSIS_OP_MASK_WILDCARD 0xfffff
#include <rz_types.h>
#include <rz_io.h>
#include <rz_reg.h>
#include <rz_list.h>
#include <rz_util.h>
#include <rz_bind.h>
#include <rz_syscall.h>
#include <rz_util/rz_set.h>
#include <rz_flag.h>
#include <rz_search.h>
#include <rz_bin.h>
#include <rz_type.h>
#include <rz_il.h>
#include <rz_platform.h>
#include <rz_cmd.h>
#include <rz_esil/rz_esil.h>
#include <rz_gadget.h>
#ifdef __cplusplus
extern "C" {
#endif
typedef struct rz_analysis_t RzAnalysis;
typedef struct rz_analysis_bb_t RzAnalysisBlock;
typedef struct {
struct rz_analysis_t *analysis;
int type;
SdbForeachCallback cb;
void *user;
int count;
struct rz_analysis_function_t *fcn;
PJ *pj;
} RzAnalysisMetaUserItem;
/**
* \brief Gadget cache
*
* Stores a cache of discovered gadgets for a contiguous address range.
* The cache holds `RzGadgetCacheNode` nodes in an RB tree keyed by gadget start address.
* The cache is built for the given parameters (`from`, `to`, `max_instr`, `allow_conditional`)
* and is only valid for those parameters.
* When these parameters change, the cache must be rebuilt.
* The `free` callback is used to release per-node resources when the cache is cleared.
*/
typedef struct rz_gadget_cache_t {
RBTree tree; ///< root node
ut64 from; ///< cached address range start
ut64 to; ///< cached address range end
size_t max_instr; ///< gadget.len used during cache build
bool allow_conditional; ///< gadget.conditional used during cache build
RBNodeFree free; ///< the custom free function that frees a RzGadgetCacheNode of the tree
} RzGadgetCache;
typedef enum {
RZ_ANALYSIS_DATA_INFO_TYPE_NULL = 0,
RZ_ANALYSIS_DATA_INFO_TYPE_UNKNOWN = 1,
RZ_ANALYSIS_DATA_INFO_TYPE_STRING = 2,
RZ_ANALYSIS_DATA_INFO_TYPE_POINTER = 3,
RZ_ANALYSIS_DATA_INFO_TYPE_NUMBER = 4,
RZ_ANALYSIS_DATA_INFO_TYPE_INVALID = 5,
RZ_ANALYSIS_DATA_INFO_TYPE_HEADER = 6,
RZ_ANALYSIS_DATA_INFO_TYPE_SEQUENCE = 7,
RZ_ANALYSIS_DATA_INFO_TYPE_PATTERN = 8,
} RzAnalysisDataInfoType;
// used from core/analysis.c
#define RZ_ANALYSIS_ADDR_TYPE_EXEC 1
#define RZ_ANALYSIS_ADDR_TYPE_READ 1 << 1
#define RZ_ANALYSIS_ADDR_TYPE_WRITE 1 << 2
#define RZ_ANALYSIS_ADDR_TYPE_FLAG 1 << 3
#define RZ_ANALYSIS_ADDR_TYPE_FUNC 1 << 4
#define RZ_ANALYSIS_ADDR_TYPE_HEAP 1 << 5
#define RZ_ANALYSIS_ADDR_TYPE_STACK 1 << 6
#define RZ_ANALYSIS_ADDR_TYPE_REG 1 << 7
#define RZ_ANALYSIS_ADDR_TYPE_PROGRAM 1 << 8
#define RZ_ANALYSIS_ADDR_TYPE_LIBRARY 1 << 9
#define RZ_ANALYSIS_ADDR_TYPE_ASCII 1 << 10
#define RZ_ANALYSIS_ADDR_TYPE_SEQUENCE 1 << 11
typedef enum rz_analysis_arch_info_type_t {
RZ_ANALYSIS_ARCHINFO_MIN_OP_SIZE = 0, ///< Min opcode size
RZ_ANALYSIS_ARCHINFO_MAX_OP_SIZE, ///< Max opcode size
RZ_ANALYSIS_ARCHINFO_TEXT_ALIGN, ///< Opcode memory alignment
RZ_ANALYSIS_ARCHINFO_DATA_ALIGN, ///< Data memory alignment
RZ_ANALYSIS_ARCHINFO_CAN_USE_POINTERS, ///< Defines if the architecture has the concept of memory pointers
/* The value below is used for runtime checks */
RZ_ANALYSIS_ARCHINFO_ENUM_SIZE,
} RzAnalysisInfoType;
/* copypaste from rz_asm.h */
#define RZ_ANALYSIS_GET_OFFSET(x, y, z) \
(x && x->binb.bin && x->binb.get_offset) ? x->binb.get_offset(x->binb.bin, y, z) : -1
#define RZ_ANALYSIS_GET_NAME(x, y, z) \
(x && x->binb.bin && x->binb.get_name) ? x->binb.get_name(x->binb.bin, y, z) : NULL
enum {
RZ_ANALYSIS_FQUALIFIER_NONE = 0,
RZ_ANALYSIS_FQUALIFIER_STATIC = 1,
RZ_ANALYSIS_FQUALIFIER_VOLATILE = 2,
RZ_ANALYSIS_FQUALIFIER_INLINE = 3,
RZ_ANALYSIS_FQUALIFIER_NAKED = 4,
RZ_ANALYSIS_FQUALIFIER_VIRTUAL = 5,
};
#define RZ_ANALYSIS_CC_MAXARG 16
typedef enum {
RZ_ANALYSIS_FCN_TYPE_NULL = 0,
RZ_ANALYSIS_FCN_TYPE_FCN = 1 << 0,
RZ_ANALYSIS_FCN_TYPE_LOC = 1 << 1,
RZ_ANALYSIS_FCN_TYPE_SYM = 1 << 2,
RZ_ANALYSIS_FCN_TYPE_IMP = 1 << 3,
RZ_ANALYSIS_FCN_TYPE_INT = 1 << 4, /* privileged function - ends with iret/reti/.. */
RZ_ANALYSIS_FCN_TYPE_ROOT = 1 << 5, /* matching flag */
RZ_ANALYSIS_FCN_TYPE_ANY = -1 /* all the bits set */
} RzAnalysisFcnType;
typedef struct rz_analysis_attr_t {
char *key;
long value;
struct rz_analysis_attr_t *next;
} RzAnalysisAttr;
/* Stores useful function metadata */
/* TODO: Think about moving more stuff to this structure? */
typedef struct rz_analysis_fcn_meta_t {
// _min and _max are calculated lazily when queried.
// On changes, they will either be updated (if this can be done trivially) or invalidated.
// They are invalid iff _min == UT64_MAX.
ut64 _min; // PRIVATE, min address, use rz_analysis_function_min_addr() to access
ut64 _max; // PRIVATE, max address, use rz_analysis_function_max_addr() to access
int numrefs; // number of cross references
int numcallrefs; // number of calls
} RzAnalysisFcnMeta;
typedef struct rz_analysis_function_t {
char *name;
int bits; // ((> bits 0) (set-bits bits))
int type;
const char *cc; // calling convention, should come from RzAnalysis.constpool
ut64 addr;
HtUP /*<ut64, char *>*/ *labels;
HtSP /*<char *, ut64 *>*/ *label_addrs;
RzPVector /*<RzAnalysisVar *>*/ vars;
RzType *ret_type;
/**
* \brief Maps the function's instruction to the variables they use.
* key: Instruction offset from function entry point.
* value: Vector of variables the instruction accesses.
*/
HtUP /*<st64, RzPVector<RzAnalysisVar *>>*/ *inst_vars;
st64 bp_off; // offset of bp inside owned stack frame
RZ_DEPRECATE st64 stack; // stack frame size
int maxstack;
int ninstr;
bool is_pure : 1;
bool is_variadic : 1;
bool has_changed : 1; // true if function may have changed since last anaysis TODO: set this attribute where necessary
bool has_debuginfo : 1; ///< true if function has debug informations
bool bp_frame : 1;
bool is_noreturn : 1; // true if function does not return
int argnum; // number of arguments;
RzPVector /*<RzAnalysisBlock *>*/ *bbs;
RzAnalysisFcnMeta meta;
RzList /*<char *>*/ *imports; // maybe bound to class?
struct rz_analysis_t *analysis; // this function is associated with this instance
} RzAnalysisFunction;
typedef struct rz_analysis_func_arg_t {
const char *name;
char *fmt;
const char *cc_source;
RzType *orig_c_type;
RzType *c_type;
ut64 size;
ut64 src; // Function-call argument value or pointer to it
} RzAnalysisFuncArg;
typedef enum {
RZ_META_TYPE_NONE = 0,
RZ_META_TYPE_ANY = -1,
RZ_META_TYPE_DATA = 1, ///< marks the data as data (not as code)
RZ_META_TYPE_CODE = 2, ///< marks the data as code
RZ_META_TYPE_STRING = 3, ///< marks the data as string
RZ_META_TYPE_FORMAT = 4, ///< sets the specified format (pf) to the data
RZ_META_TYPE_MAGIC = 5, ///< sets the magic string to the data
RZ_META_TYPE_HIDE = 6, ///< set the data as hidden
RZ_META_TYPE_COMMENT = 7, ///< attaches the comment to the data
RZ_META_TYPE_HIGHLIGHT = 8, ///< sets the specified highlight to the data
RZ_META_TYPE_VARTYPE = 9, ///< sets the specified type to the variable/address
} RzAnalysisMetaType;
/* meta */
typedef struct rz_analysis_meta_item_t {
RzAnalysisMetaType type;
int subtype;
char *str;
size_t size;
const RzSpace *space;
} RzAnalysisMetaItem;
// anal
typedef enum {
RZ_ANALYSIS_OP_FAMILY_UNKNOWN = -1,
RZ_ANALYSIS_OP_FAMILY_CPU = 0, /* normal cpu instruction */
RZ_ANALYSIS_OP_FAMILY_FPU, /* fpu (floating point) */
RZ_ANALYSIS_OP_FAMILY_MMX, /* multimedia instruction (packed data) */
RZ_ANALYSIS_OP_FAMILY_SSE, /* extended multimedia instruction (packed data) */
RZ_ANALYSIS_OP_FAMILY_PRIV, /* privileged instruction */
RZ_ANALYSIS_OP_FAMILY_CRYPTO, /* cryptographic instructions */
RZ_ANALYSIS_OP_FAMILY_THREAD, /* thread/lock/sync instructions */
RZ_ANALYSIS_OP_FAMILY_VIRT, /* virtualization instructions */
RZ_ANALYSIS_OP_FAMILY_SECURITY, /* security instructions */
RZ_ANALYSIS_OP_FAMILY_IO, /* IO instructions (i.e. IN/OUT) */
RZ_ANALYSIS_OP_FAMILY_LAST
} RzAnalysisOpFamily;
#if 0
On x86 according to Wikipedia
Prefix group 1
0xF0: LOCK prefix
0xF2: REPNE/REPNZ prefix
0xF3: REP or REPE/REPZ prefix
Prefix group 2
0x2E: CS segment override
0x36: SS segment override
0x3E: DS segment override
0x26: ES segment override
0x64: FS segment override
0x65: GS segment override
0x2E: Branch not taken (hinting)
0x3E: Branch taken
Prefix group 3
0x66: Operand-size override prefix
Prefix group 4
0x67: Address-size override prefix
#endif
typedef enum {
RZ_ANALYSIS_OP_PREFIX_COND = 1,
RZ_ANALYSIS_OP_PREFIX_REP = 1 << 1,
RZ_ANALYSIS_OP_PREFIX_REPNE = 1 << 2,
RZ_ANALYSIS_OP_PREFIX_LOCK = 1 << 3,
RZ_ANALYSIS_OP_PREFIX_LIKELY = 1 << 4,
RZ_ANALYSIS_OP_PREFIX_UNLIKELY = 1 << 5,
RZ_ANALYSIS_OP_PREFIX_HWLOOP_END = 1 << 6, /* Hexagon specific. Last instruction in a hardware loop */
/* TODO: add segment override typemods? */
} RzAnalysisOpPrefix;
// XXX: this definition is plain wrong. use enum or empower bits
#define RZ_ANALYSIS_OP_TYPE_MASK 0x8000ffff
#define RZ_ANALYSIS_OP_HINT_MASK 0xff000000
typedef enum {
RZ_ANALYSIS_OP_TYPE_COND = 0x80000000, // TODO must be moved to prefix?
// TODO: MOVE TO PREFIX .. it is used by analysis_java.. must be updated
RZ_ANALYSIS_OP_TYPE_REP = 0x40000000, /* repeats next instruction N times */
RZ_ANALYSIS_OP_TYPE_MEM = 0x20000000, // TODO must be moved to prefix?
RZ_ANALYSIS_OP_TYPE_REG = 0x10000000, // operand is a register
RZ_ANALYSIS_OP_TYPE_IND = 0x08000000, // operand is indirect
RZ_ANALYSIS_OP_TYPE_SIMD = 0x04000000, // SIMD
RZ_ANALYSIS_OP_TYPE_TAIL = 0x02000000, ///< Part of a tail call. This effectively marks the end of a sub-routine.
RZ_ANALYSIS_OP_TYPE_NULL = 0,
RZ_ANALYSIS_OP_TYPE_JMP = 1, /* mandatory jump */
RZ_ANALYSIS_OP_TYPE_UJMP = 2, /* unknown jump (register or so) */
RZ_ANALYSIS_OP_TYPE_RJMP = RZ_ANALYSIS_OP_TYPE_REG | RZ_ANALYSIS_OP_TYPE_UJMP,
RZ_ANALYSIS_OP_TYPE_IJMP = RZ_ANALYSIS_OP_TYPE_IND | RZ_ANALYSIS_OP_TYPE_UJMP,
RZ_ANALYSIS_OP_TYPE_IRJMP = RZ_ANALYSIS_OP_TYPE_IND | RZ_ANALYSIS_OP_TYPE_REG | RZ_ANALYSIS_OP_TYPE_UJMP,
RZ_ANALYSIS_OP_TYPE_CJMP = RZ_ANALYSIS_OP_TYPE_COND | RZ_ANALYSIS_OP_TYPE_JMP, /* conditional jump */
RZ_ANALYSIS_OP_TYPE_RCJMP = RZ_ANALYSIS_OP_TYPE_REG | RZ_ANALYSIS_OP_TYPE_CJMP, /* conditional jump register */
RZ_ANALYSIS_OP_TYPE_MJMP = RZ_ANALYSIS_OP_TYPE_MEM | RZ_ANALYSIS_OP_TYPE_JMP, /* memory jump */
RZ_ANALYSIS_OP_TYPE_MCJMP = RZ_ANALYSIS_OP_TYPE_MEM | RZ_ANALYSIS_OP_TYPE_CJMP, /* memory conditional jump */
RZ_ANALYSIS_OP_TYPE_UCJMP = RZ_ANALYSIS_OP_TYPE_COND | RZ_ANALYSIS_OP_TYPE_UJMP, /* conditional unknown jump */
RZ_ANALYSIS_OP_TYPE_CALL = 3, /* call to subroutine (branch+link) */
RZ_ANALYSIS_OP_TYPE_UCALL = 4, /* unknown call (register or so) */
RZ_ANALYSIS_OP_TYPE_RCALL = RZ_ANALYSIS_OP_TYPE_REG | RZ_ANALYSIS_OP_TYPE_UCALL,
RZ_ANALYSIS_OP_TYPE_ICALL = RZ_ANALYSIS_OP_TYPE_IND | RZ_ANALYSIS_OP_TYPE_UCALL,
RZ_ANALYSIS_OP_TYPE_IRCALL = RZ_ANALYSIS_OP_TYPE_IND | RZ_ANALYSIS_OP_TYPE_REG | RZ_ANALYSIS_OP_TYPE_UCALL,
RZ_ANALYSIS_OP_TYPE_CCALL = RZ_ANALYSIS_OP_TYPE_COND | RZ_ANALYSIS_OP_TYPE_CALL, /* conditional call to subroutine */
RZ_ANALYSIS_OP_TYPE_UCCALL = RZ_ANALYSIS_OP_TYPE_COND | RZ_ANALYSIS_OP_TYPE_UCALL, /* conditional unknown call */
RZ_ANALYSIS_OP_TYPE_RET = 5, /* returns from subroutine */
RZ_ANALYSIS_OP_TYPE_CRET = RZ_ANALYSIS_OP_TYPE_COND | RZ_ANALYSIS_OP_TYPE_RET, /* conditional return from subroutine */
RZ_ANALYSIS_OP_TYPE_ILL = 6, /* illegal instruction // trap */
RZ_ANALYSIS_OP_TYPE_UNK = 7, /* unknown opcode type */
RZ_ANALYSIS_OP_TYPE_NOP = 8, /* does nothing */
RZ_ANALYSIS_OP_TYPE_MOV = 9, /* register move */
RZ_ANALYSIS_OP_TYPE_CMOV = RZ_ANALYSIS_OP_TYPE_MOV | RZ_ANALYSIS_OP_TYPE_COND, /* conditional move */
RZ_ANALYSIS_OP_TYPE_TRAP = 10, /* it's a trap! */
RZ_ANALYSIS_OP_TYPE_SWI = 11, /* syscall, software interrupt */
RZ_ANALYSIS_OP_TYPE_CSWI = RZ_ANALYSIS_OP_TYPE_SWI | RZ_ANALYSIS_OP_TYPE_COND, /* syscall, software interrupt */
RZ_ANALYSIS_OP_TYPE_UPUSH = 12, /* unknown push of data into stack */
RZ_ANALYSIS_OP_TYPE_RPUSH = RZ_ANALYSIS_OP_TYPE_UPUSH | RZ_ANALYSIS_OP_TYPE_REG, /* push register */
RZ_ANALYSIS_OP_TYPE_PUSH = 13, /* push value into stack */
RZ_ANALYSIS_OP_TYPE_POP = 14, /* pop value from stack to register */
RZ_ANALYSIS_OP_TYPE_CMP = 15, /* compare something */
RZ_ANALYSIS_OP_TYPE_ACMP = 16, /* compare via and */
RZ_ANALYSIS_OP_TYPE_ADD = 17,
RZ_ANALYSIS_OP_TYPE_SUB = 18,
RZ_ANALYSIS_OP_TYPE_IO = 19,
RZ_ANALYSIS_OP_TYPE_MUL = 20,
RZ_ANALYSIS_OP_TYPE_DIV = 21,
RZ_ANALYSIS_OP_TYPE_SHR = 22,
RZ_ANALYSIS_OP_TYPE_SHL = 23,
RZ_ANALYSIS_OP_TYPE_SAL = 24,
RZ_ANALYSIS_OP_TYPE_SAR = 25,
RZ_ANALYSIS_OP_TYPE_OR = 26,
RZ_ANALYSIS_OP_TYPE_AND = 27,
RZ_ANALYSIS_OP_TYPE_XOR = 28,
RZ_ANALYSIS_OP_TYPE_NOR = 29,
RZ_ANALYSIS_OP_TYPE_NOT = 30,
RZ_ANALYSIS_OP_TYPE_STORE = 31, /* store from register to memory */
RZ_ANALYSIS_OP_TYPE_LOAD = 32, /* load from memory to register */
RZ_ANALYSIS_OP_TYPE_LEA = 33, /* TODO add ulea */
RZ_ANALYSIS_OP_TYPE_LEAVE = 34,
RZ_ANALYSIS_OP_TYPE_ROR = 35,
RZ_ANALYSIS_OP_TYPE_ROL = 36,
RZ_ANALYSIS_OP_TYPE_XCHG = 37,
RZ_ANALYSIS_OP_TYPE_MOD = 38,
RZ_ANALYSIS_OP_TYPE_SWITCH = 39,
RZ_ANALYSIS_OP_TYPE_CASE = 40,
RZ_ANALYSIS_OP_TYPE_LENGTH = 41,
RZ_ANALYSIS_OP_TYPE_CAST = 42,
RZ_ANALYSIS_OP_TYPE_NEW = 43,
RZ_ANALYSIS_OP_TYPE_ABS = 44,
RZ_ANALYSIS_OP_TYPE_CPL = 45, /* complement */
RZ_ANALYSIS_OP_TYPE_CRYPTO = 46,
RZ_ANALYSIS_OP_TYPE_SYNC = 47,
RZ_ANALYSIS_OP_TYPE_BCNT = 48, /* bit-counting operations like pop count */
RZ_ANALYSIS_OP_TYPE_REV = 49, /* byte-reversal and bit-reversal operations */
RZ_ANALYSIS_OP_TYPE_REDUCE = 50, /* instructions that reduce a sequence, like string operations or vector sum */
// RZ_ANALYSIS_OP_TYPE_DEBUG = 43, // monitor/trace/breakpoint
#if 0
RZ_ANALYSIS_OP_TYPE_PRIV = 40, /* privileged instruction */
RZ_ANALYSIS_OP_TYPE_FPU = 41, /* floating point stuff */
#endif
} _RzAnalysisOpType;
typedef enum {
RZ_ANALYSIS_OP_MASK_BASIC = 0, // Just fills basic op info , it's fast
RZ_ANALYSIS_OP_MASK_ESIL = (1 << 0), // It fills RzAnalysisop->esil info
RZ_ANALYSIS_OP_MASK_VAL = (1 << 1), // It fills RzAnalysisop->dst/src info
RZ_ANALYSIS_OP_MASK_HINT = (1 << 2), // It calls rz_analysis_op_hint to override analysis options
RZ_ANALYSIS_OP_MASK_OPEX = (1 << 3), // It fills RzAnalysisop->opex info
RZ_ANALYSIS_OP_MASK_DISASM = (1 << 4), // It fills RzAnalysisop->mnemonic // should be RzAnalysisOp->disasm // only from rz_core_analysis_op()
RZ_ANALYSIS_OP_MASK_IL = (1 << 5), // It fills RzAnalysisop->il_op
RZ_ANALYSIS_OP_MASK_ALL = RZ_ANALYSIS_OP_MASK_ESIL | RZ_ANALYSIS_OP_MASK_VAL | RZ_ANALYSIS_OP_MASK_HINT | RZ_ANALYSIS_OP_MASK_OPEX | RZ_ANALYSIS_OP_MASK_DISASM | RZ_ANALYSIS_OP_MASK_IL
} RzAnalysisOpMask;
typedef enum {
RZ_ANALYSIS_STACK_NULL = 0,
RZ_ANALYSIS_STACK_NOP,
RZ_ANALYSIS_STACK_INC,
RZ_ANALYSIS_STACK_DEC,
RZ_ANALYSIS_STACK_GET,
RZ_ANALYSIS_STACK_SET,
RZ_ANALYSIS_STACK_RESET,
RZ_ANALYSIS_STACK_ALIGN,
} RzAnalysisStackOp;
enum {
RZ_ANALYSIS_REFLINE_TYPE_UTF8 = 1,
RZ_ANALYSIS_REFLINE_TYPE_WIDE = 2, /* reflines have a space between them */
RZ_ANALYSIS_REFLINE_TYPE_MIDDLE_BEFORE = 4, /* do not consider starts/ends of
* reflines (used for comment lines before disasm) */
RZ_ANALYSIS_REFLINE_TYPE_MIDDLE_AFTER = 8 /* as above but for lines after disasm */
};
typedef enum {
RZ_ANALYSIS_RET_NOP = 0,
RZ_ANALYSIS_RET_ERROR = -1, // Basic block ended because of analysis error.
RZ_ANALYSIS_RET_END = -4, // Basic block ended because of return instruction.
RZ_ANALYSIS_RET_BRANCH = -5, // Basic block ended because of branch instruction.
RZ_ANALYSIS_RET_COND = -6, // Basic block ended because of conditional return.
} RzAnalysisBBEndCause;
typedef struct rz_analysis_case_obj_t {
ut64 addr;
ut64 jump;
ut64 value;
} RzAnalysisCaseOp;
typedef struct rz_analysis_switch_obj_t {
ut64 addr;
ut64 min_val;
ut64 def_val;
ut64 max_val;
RzList /*<RzAnalysisCaseOp *>*/ *cases;
RzType *enum_type;
} RzAnalysisSwitchOp;
typedef struct rz_analysis_callbacks_t {
int (*on_fcn_new)(RzAnalysis *, void *user, RzAnalysisFunction *fcn);
int (*on_fcn_delete)(RzAnalysis *, void *user, RzAnalysisFunction *fcn);
int (*on_fcn_rename)(RzAnalysis *, void *user, RzAnalysisFunction *fcn, const char *oldname);
int (*on_fcn_bb_new)(RzAnalysis *, void *user, RzAnalysisFunction *fcn, RzAnalysisBlock *bb);
RzFlagSet flg_class_set;
RzFlagGet flg_class_get;
RzFlagSet flg_fcn_set;
RzFlagGetAtAddr flag_get;
bool (*log)(RzAnalysis *analysis, const char *msg);
bool (*read_at)(RzAnalysis *analysis, ut64 addr, ut8 *buf, int len);
} RzAnalysisCallbacks;
typedef struct rz_analysis_il_trace_t {
int idx;
int end_idx;
HtUP *registers;
HtUP *memory;
RzRegArena *arena[RZ_REG_TYPE_LAST];
ut64 stack_addr;
ut64 stack_size;
ut8 *stack_data;
RzPVector /*<RzILTraceInstruction *>*/ *instructions;
} RzAnalysisILTrace;
typedef struct rz_analysis_options_t {
int depth;
int graph_depth;
bool vars; // analysisyze local var and arguments
int cjmpref;
int jmpref;
int jmpabove;
bool ijmp;
bool jmpmid; // continue analysis after jmp into middle of insn
bool loads;
bool ignbithints;
int followdatarefs;
int searchstringrefs;
int followbrokenfcnsrefs;
int bb_max_size;
int fcn_max_size;
bool trycatch;
bool norevisit;
int afterjmp; // continue analysis after jmp eax or forward jmp // option
int aftertrap; // continue analysis after trap instructions
int recont; // continue on recurse analysis mode
int noncode;
int nopskip; // skip nops at the beginning of functions
int hpskip; // skip `mov reg,reg` and `lea reg,[reg]`
int jmptbl; // analyze jump tables
int jmptbl_maxcount; // maximum amount of entries to analyse in a jump table
ut32 jmptbl_maxoffset; // maximum offset from the jump table jump instruction to consider it valid
int nonull;
bool pushret; // analyze push+ret as jmp
bool armthumb; //
bool delay;
bool retpoline;
} RzAnalysisOptions;
typedef enum {
RZ_ANALYSIS_CPP_ABI_ITANIUM = 0,
RZ_ANALYSIS_CPP_ABI_MSVC
} RzAnalysisCPPABI;
typedef struct rz_analysis_hint_cb_t {
// add more cbs as needed
void (*on_bits)(struct rz_analysis_t *a, ut64 addr, int bits, bool set);
} RHintCb;
typedef struct rz_analysis_il_vm_t RzAnalysisILVM;
typedef struct {
HtUP /*<ut64, RzAnalysisDwarfFunction *>*/ *function_by_offset; ///< Store all functions parsed from DWARF by DIE offset
HtUP /*<ut64, const RzAnalysisDwarfFunction *>*/ *function_by_addr; ///< Store all functions parsed from DWARF by address (some functions may have the same address)
HtUP /*<ut64, RzAnalysisDwarfVariable *>*/ *variable_by_offset; ///< Store all variables parsed from DWARF by DIE offset
HtUP /*<ut64, RzCallable *>*/ *callable_by_offset; ///< Store all callables parsed from DWARF by DIE offset
HtUP /*<ut64, RzType *>*/ *type_by_offset; ///< Store all RzType parsed from DWARF by DIE offset
HtUP /*<ut64, RzBaseType *>*/ *base_type_by_offset; ///< Store all RzBaseType parsed from DWARF by DIE offset
HtSP /*<const char*, RzPVector<const RzBaseType *>>*/ *base_types_by_name; ///< Store all RzBaseType parsed from DWARF by DIE offset
DWARF_RegisterMapping dwarf_register_mapping; ///< Store the mapping function between DWARF registers number and register name in current architecture
RzBinDWARF *dw; ///< Holds ownership of RzBinDwarf, avoid releasing it prematurely
RzSetU *visited;
} RzAnalysisDebugInfo;
typedef enum rz_analysis_addr_hint_type_t {
RZ_ANALYSIS_ADDR_HINT_TYPE_IMMBASE,
RZ_ANALYSIS_ADDR_HINT_TYPE_JUMP,
RZ_ANALYSIS_ADDR_HINT_TYPE_FAIL,
RZ_ANALYSIS_ADDR_HINT_TYPE_STACKFRAME,
RZ_ANALYSIS_ADDR_HINT_TYPE_PTR,
RZ_ANALYSIS_ADDR_HINT_TYPE_NWORD,
RZ_ANALYSIS_ADDR_HINT_TYPE_RET,
RZ_ANALYSIS_ADDR_HINT_TYPE_NEW_BITS,
RZ_ANALYSIS_ADDR_HINT_TYPE_SIZE,
RZ_ANALYSIS_ADDR_HINT_TYPE_SYNTAX,
RZ_ANALYSIS_ADDR_HINT_TYPE_OPTYPE,
RZ_ANALYSIS_ADDR_HINT_TYPE_OPCODE,
RZ_ANALYSIS_ADDR_HINT_TYPE_TYPE_OFFSET,
RZ_ANALYSIS_ADDR_HINT_TYPE_ESIL,
RZ_ANALYSIS_ADDR_HINT_TYPE_HIGH,
RZ_ANALYSIS_ADDR_HINT_TYPE_VAL,
RZ_ANALYSIS_ADDR_HINT_TYPE_ENUM
} RzAnalysisAddrHintType;
typedef struct rz_analysis_addr_hint_record_t {
RzAnalysisAddrHintType type;
union {
char *type_offset;
int nword;
ut64 jump;
ut64 fail;
int newbits;
int immbase;
ut64 ptr;
ut64 retval;
char *syntax;
char *opcode;
char *esil;
int optype;
ut64 size;
ut64 stackframe;
ut64 val;
char *enum_name;
};
} RzAnalysisAddrHintRecord;
typedef struct rz_analysis_hint_t {
ut64 addr;
ut64 ptr;
ut64 val; // used to hint jmp rax
ut64 jump;
ut64 fail;
ut64 ret; // hint for function ret values
char *arch;
char *opcode;
char *syntax;
char *esil;
char *offset;
ut32 type;
ut64 size;
int bits;
int new_bits; // change asm.bits after evaluating this instruction
int immbase;
bool high; // highlight hint
int nword;
ut64 stackframe;
char *enum_name;
} RzAnalysisHint;
typedef RzAnalysisFunction *(*RzAnalysisGetFcnIn)(RzAnalysis *analysis, ut64 addr, int type);
typedef RzAnalysisHint *(*RzAnalysisGetHint)(RzAnalysis *analysis, ut64 addr);
typedef struct rz_analysis_bind_t {
RzAnalysis *analysis;
RzAnalysisGetFcnIn get_fcn_in;
RzAnalysisGetHint get_hint;
} RzAnalysisBind;
typedef const char *(*RzAnalysisLabelAt)(RzAnalysisFunction *fcn, ut64);
/**
* \brief An address on the stack
*
* These addresses are a relative offset to the value of the stack pointer
* when entering a function, i.e. just before the first instruction inside the function is executed.
* Thus, with the most common calling conventions, the return address with be at addr 0,
* arguments at positive addresses and local variables at negative addresses:
*
* For example (stack grows down):
*
* ```
* | ... |
* | arguments |
* |-----------------| < +8
* | return addr |
* |-----------------| < 0
* | saved registers |
* | ... |
* |-----------------| < negative values
* | local variables |
* | ... |
* ```
*/
typedef st64 RzStackAddr;
#define RZ_STACK_ADDR_INVALID ST32_MAX
#define VARPREFIX "var"
#define ARGPREFIX "arg"
typedef enum {
RZ_ANALYSIS_VAR_ACCESS_TYPE_PTR = 0,
RZ_ANALYSIS_VAR_ACCESS_TYPE_READ = (1 << 0),
RZ_ANALYSIS_VAR_ACCESS_TYPE_WRITE = (1 << 1)
} RzAnalysisVarAccessType;
typedef struct rz_analysis_var_access_t {
st64 offset; ///< address relative to the function's entrypoint where the access happens
/**
* Register used for access.
* For example when accessing some stack variable by `[rbp - 0x10]`, this will be "rbp"
*/
const char *reg;
/**
* Delta added to register when the var is accessed,
* For example for `[rbp - 0x10]`, this will be -0x10.
*/
st64 reg_addend;
ut8 type; ///< RzAnalysisVarAccessType bits
} RzAnalysisVarAccess;
typedef enum {
RZ_ANALYSIS_VAR_STORAGE_STACK,
RZ_ANALYSIS_VAR_STORAGE_REG,
RZ_ANALYSIS_VAR_STORAGE_COMPOSITE,
RZ_ANALYSIS_VAR_STORAGE_EVAL_PENDING,
} RzAnalysisVarStorageType;
struct rz_analysis_var_storage_t;
typedef struct {
ut32 offset_in_bits;
ut32 size_in_bits;
struct rz_analysis_var_storage_t *storage;
} RzAnalysisVarStoragePiece;
/**
* Describes the location whether the contents of a variable are stored
*/
typedef struct rz_analysis_var_storage_t {
RzAnalysisVarStorageType type;
union {
/**
* Used iff type == RZ_ANALYSIS_VAR_STORAGE_STACK.
* See docs of RzStackAddr for exact meaning.
*/
RzStackAddr stack_off;
/**
* Used iff type == RZ_ANALYSIS_VAR_STORAGE_REG.
* When this storage object is part of RzAnalysisVar, this string comes from the
* respective RzAnalysis.constpool.
*/
const char *reg;
RzVector /*<RzAnalysisVarStoragePiece *>*/ *composite;
ut64 dw_var_off; ///< DIE offset of the variable
};
} RzAnalysisVarStorage;
static inline void rz_analysis_var_storage_init_reg(RZ_NONNULL RzAnalysisVarStorage *stor, RZ_NONNULL const char *reg) {
rz_return_if_fail(stor && reg);
stor->type = RZ_ANALYSIS_VAR_STORAGE_REG;
stor->reg = reg;
}
static inline void rz_analysis_var_storage_init_stack(RZ_NONNULL RzAnalysisVarStorage *stor, RzStackAddr stack_off) {
rz_return_if_fail(stor);
stor->type = RZ_ANALYSIS_VAR_STORAGE_STACK;
stor->stack_off = stack_off;
}
RZ_API void rz_analysis_var_storage_init_composite(RzAnalysisVarStorage *sto);
/**
* \brief Kind of a variable
*/
typedef enum rz_analysis_var_kind_t {
RZ_ANALYSIS_VAR_KIND_INVALID = 0, ///< Invalid or unspecified variable
RZ_ANALYSIS_VAR_KIND_FORMAL_PARAMETER, ///< Variable is function formal parameter
RZ_ANALYSIS_VAR_KIND_VARIABLE, ///< Variable is local variable
/* End enum */
RZ_ANALYSIS_VAR_KIND_END ///< Number of RzAnalysisVarKind enums
} RzAnalysisVarKind;
RZ_API ut32 rz_analysis_guessed_mem_access_width(RZ_NONNULL const RzAnalysis *analysis);
typedef struct dwarf_variable_t {
ut64 offset; ///< DIE offset of the variable
RzBinDwarfLocation *location; ///< location description
char *name; ///< name of the variable
char *link_name; ///< link name of the variable
const char *prefer_name; ///< prefer name of the variable, reference to name or link_name depends on language
RzType *type; ///< type of the variable
RzAnalysisVarKind kind; ///< kind of the variable
ut32 cu_index; ///< compile unit index
} RzAnalysisDwarfVariable;
typedef enum {
RZ_ANALYSIS_VAR_ORIGIN_NONE = 0, ///< Variable was created from rizin
RZ_ANALYSIS_VAR_ORIGIN_DWARF, ///< Variable was created from DWARF information
/* End enum */
RZ_ANALYSIS_VAR_ORIGIN_END ///< Number of RzAnalysisVarOriginKind enums
} RzAnalysisVarOriginKind;
static const char *RzAnalysisVarKind_strings[RZ_ANALYSIS_VAR_KIND_END] = {
"invalid", /* RZ_ANALYSIS_VAR_KIND_INVALID */
"formal_parameter", /* RZ_ANALYSIS_VAR_KIND_FORMAL_PARAMETER */
"variable", /* RZ_ANALYSIS_VAR_KIND_VARIABLE */
};
static const char *RzAnalysisVarOriginKind_strings[RZ_ANALYSIS_VAR_ORIGIN_END] = {
"none", /* RZ_ANALYSIS_VAR_ORIGIN_NONE */
"DWARF", /* RZ_ANALYSIS_VAR_ORIGIN_DWARF */
};
#define RZ_ANALYSIS_AS_STRING_IMPL(T, name, strings) \
static inline const char *rz_analysis_##name##_as_string(T k) { \
if (k < 0 || k >= RZ_ARRAY_SIZE(strings)) { \
return NULL; \
} \
return strings[k]; \
} \
static inline T rz_analysis_##name##_from_string(const char *s) { \
for (unsigned int i = 0; i < RZ_ARRAY_SIZE(strings); ++i) { \
if (RZ_STR_EQ(s, strings[i])) { \
return (T)i; \
} \
} \
return (T)0; \
}
RZ_ANALYSIS_AS_STRING_IMPL(RzAnalysisVarKind, var_kind, RzAnalysisVarKind_strings);
RZ_ANALYSIS_AS_STRING_IMPL(RzAnalysisVarOriginKind, var_origin_kind, RzAnalysisVarOriginKind_strings);
/**
* A local variable or parameter as part of a function
*/
typedef struct rz_analysis_var_t {
RZ_BORROW RzAnalysisFunction *fcn; ///< function containing this variable
char *name;
RzType *type;
RzAnalysisVarStorage storage;
RzVector /*<RzAnalysisVarAccess>*/ accesses; // ordered by offset, touch this only through API or expect uaf
char *comment;
RzVector /*<RzTypeConstraint>*/ constraints;
RzAnalysisVarKind kind;
// below members are just for caching, TODO: remove them and do it better
int argnum;
struct {
RzAnalysisVarOriginKind kind; ///< Kind of origin
union {
RzAnalysisDwarfVariable *dw_var; ///< Variable description from DWARF
};
} origin; ///< Origin of the variable, i.e. DWARF, PDB, OMF
} RzAnalysisVar;
/**
* A declaration with its occurrence in the program source.
*/
typedef struct {
ut32 decl_line; ///< File containing source declaration
ut32 decl_col; ///< Line number of source declaration
const char *decl_file; ///< Column position of source declaration
} RzAnalysisDeclCoord;
/**
* \brief Global variables
*/
typedef struct rz_analysis_var_global_t {
RBNode rb; ///< RBTree node for address management
char *name; ///< name of the variable
ut64 addr; ///< address of the global variable
RzType *type; ///< type of the variable
RzVector /*<RzTypeConstraint>*/ constraints;
RZ_BORROW RzAnalysis *analysis; ///< analysis pertaining to this global variable
RzAnalysisDeclCoord coord; ///< a declaration of the variable
} RzAnalysisVarGlobal;
typedef struct dwarf_function_t {
ut64 offset; ///< DIE offset
ut64 low_pc; ///< address of the function
ut64 high_pc; ///< max address of the function (relative to low_pc)
ut64 entry_pc; ///< the address of the first executable instruction
char *name; ///< name of the function
char *link_name; ///< object file linkage name
char *demangle_name; ///< demanagle of link_name
const char *prefer_name; ///< prefer name (depends on the language)
ut64 vtable_addr; // location description
ut64 call_conv; // normal || program || nocall
RzType *ret_type; ///< return type of the function
RzVector /*<RzAnalysisDwarfVariable>*/ variables; ///< function variables, includes parameters and variables
ut8 access; // public = 1, protected = 2, private = 3, if not set assume private
bool has_unspecified_parameters : 1; ///< has unspecified parameters. \sa RzAnalysisFunction.is_variadic
bool is_external : 1; ///< is visable outside of the compilation unit
bool is_method : 1; ///< is class/struct method
bool is_virtual : 1; ///< is virtual function
bool is_trampoline : 1; ///< intermediary in making call to another func
} RzAnalysisDwarfFunction;
typedef enum {
RZ_ANALYSIS_ACC_UNKNOWN = 0,
RZ_ANALYSIS_ACC_R = (1 << 0),
RZ_ANALYSIS_ACC_W = (1 << 1),
} RzAnalysisValueAccess;
typedef enum {
RZ_ANALYSIS_VAL_UNK,
RZ_ANALYSIS_VAL_REG,
RZ_ANALYSIS_VAL_MEM,
RZ_ANALYSIS_VAL_IMM,
} RzAnalysisValueType;
// base+reg+regdelta*mul+delta
typedef struct rz_analysis_value_t {
RzAnalysisValueType type;
RzAnalysisValueAccess access;
int absolute; // if true, unsigned cast is used
int memref; // is memory reference? which size? 1, 2 ,4, 8
ut64 base; // numeric address
st64 delta; // numeric delta
st64 imm; // immediate value
ut64 mul; // multiplier (reg*4+base)
RzRegItem *seg; // segment selector register
RzRegItem *reg; // register / register base used (-1 if no reg)
RzRegItem *regdelta; // register index used (-1 if no reg)
ut64 plugin_specific; // Can be used differently by each analysis plugin.
} RzAnalysisValue;
typedef enum {
RZ_ANALYSIS_OP_DIR_READ = 1,
RZ_ANALYSIS_OP_DIR_WRITE = 2,
RZ_ANALYSIS_OP_DIR_EXEC = 4,
RZ_ANALYSIS_OP_DIR_REF = 8,
} RzAnalysisOpDirection;
typedef enum rz_analysis_data_type_t {
RZ_ANALYSIS_DATATYPE_NULL = 0,
RZ_ANALYSIS_DATATYPE_ARRAY,
RZ_ANALYSIS_DATATYPE_OBJECT, // instance
RZ_ANALYSIS_DATATYPE_STRING,
RZ_ANALYSIS_DATATYPE_CLASS,
RZ_ANALYSIS_DATATYPE_BOOLEAN,
RZ_ANALYSIS_DATATYPE_INT16,
RZ_ANALYSIS_DATATYPE_INT32,
RZ_ANALYSIS_DATATYPE_INT64,
RZ_ANALYSIS_DATATYPE_FLOAT,
} RzAnalysisDataType;
typedef RzILOpEffect *RzAnalysisLiftedILOp;
typedef struct rz_analysis_op_t {
char *mnemonic; /* mnemonic.. it actually contains the args too, we should replace rasm with this */
ut64 addr; /* address */
ut32 type; /* type of opcode */
RzAnalysisOpPrefix prefix; /* type of opcode prefix (rep,lock,..) */
ut32 type2; /* used by java */
RzAnalysisStackOp stackop; /* operation on stack? */
RzTypeCond cond; /* condition type */
int size; /* size in bytes of opcode */
int nopcode; /* number of bytes representing the opcode (not the arguments) TODO: find better name */
int cycles; /* cpu-cycles taken by instruction */
int failcycles; /* conditional cpu-cycles */
RzAnalysisOpFamily family; /* family of opcode */
int id; /* instruction id */
bool eob; /* end of block (boolean) */
bool sign; /* operates on signed values, false by default */
/* Run N instructions before executing the current one */
int delay; /* delay N slots (mips, ..)*/
ut64 jump; /* true jmp */
ut64 fail; /* false jmp */
RzAnalysisOpDirection direction;
st64 ptr; /* reference to memory */ /* XXX signed? */
ut64 val; /* reference to value */ /* XXX signed? */
RzAnalysisValue analysis_vals[6]; /* Analyzable values */
int ptrsize; /* f.ex: zero extends for 8, 16 or 32 bits only */
st64 stackptr; /* stack pointer */
int refptr; /* if (0) ptr = "reference" else ptr = "load memory of refptr bytes" */
ut64 mmio_address; // mmio address
RzAnalysisValue *src[8];
RzAnalysisValue *dst;
RzList /*<RzAnalysisValue *>*/ *access; /* RzAnalysisValue access information */
RzStrBuf esil;
RzStructuredData *opex;
RzAnalysisLiftedILOp il_op;
const char *reg; /* destination register */
const char *ireg; /* register used for indirect memory computation*/
ut64 scale;
ut64 disp;
RzAnalysisSwitchOp *switch_op;
RzAnalysisHint hint;
RzAnalysisDataType datatype;
} RzAnalysisOp;
#define RZ_TYPE_COND_SINGLE(x) (!x->arg[1] || x->arg[0] == x->arg[1])
typedef struct rz_analysis_cond_t {
RzTypeCond type; // filled by CJMP opcode
RzAnalysisValue *arg[2]; // filled by CMP opcode
} RzAnalysisCond;
struct rz_analysis_bb_t {
RBNode _rb; // private, node in the RBTree
ut64 _max_end; // private, augmented value for RBTree
ut64 addr;
ut64 size;
ut64 jump;
ut64 fail;
bool traced;
ut32 colorize;
RzAnalysisCond *cond;
RzAnalysisSwitchOp *switch_op;
/**
* Offsets of instructions in this block
* Count is ninstr - 1 (first is always 0)
*/
ut16 *op_pos;
/**
* Stack pointer deltas of instructions in this block.
*
* `sp_delta[i]` is the difference between the stack pointer value after
* executing the i-th instruction in the block and sp_entry.
* Count is ninstr.
*/
RzVector /*<st16>*/ sp_delta;
/**
* Value of the stack pointer when entering this block
* or RZ_STACK_ADDR_INVALID if unknown
*/
RzStackAddr sp_entry;
ut8 *op_bytes;
ut8 *parent_reg_arena;
int op_pos_size; // size of the op_pos array
int ninstr;
ut64 cmpval;
const char *cmpreg;
ut32 bbhash; // calculated with xxhash
RzList /*<RzAnalysisFunction *>*/ *fcns;
RzAnalysis *analysis;
int ref;
};
#define RZ_ANALYSIS_BLOCK_MAX_SIZE UT16_MAX
typedef struct rz_analysis_task_item {
RzAnalysisFunction *fcn; ///< current function
RzAnalysisBlock *block; ///< block being analyzed
RzStackAddr sp; ///< stack pointer value for variable analysis
ut64 start_address; ///< if block = NULL, creates block at address, else continues analysis from here
} RzAnalysisTaskItem;
typedef enum {
RZ_ANALYSIS_XREF_TYPE_NULL = 0,
RZ_ANALYSIS_XREF_TYPE_CODE = 'c', // code ref
RZ_ANALYSIS_XREF_TYPE_CALL = 'C', // code ref (call)
RZ_ANALYSIS_XREF_TYPE_DATA = 'd', // mem ref
RZ_ANALYSIS_XREF_TYPE_STRING = 's' // string ref
} RzAnalysisXRefType;
typedef struct rz_analysis_ref_t {
ut64 from;
ut64 to;
RzAnalysisXRefType type;
} RzAnalysisXRef;
RZ_API const char *rz_analysis_ref_type_tostring(RzAnalysisXRefType t);
/* represents a reference line from one address (from) to another (to) */
typedef struct rz_analysis_refline_t {
ut64 from;
ut64 to;
int index;
int level;
int type;
int direction;
} RzAnalysisRefline;
typedef struct rz_analysis_cycle_frame_t {
ut64 naddr; // next addr
RzList /*<RzAnalysisCycleHook *>*/ *hooks;
struct rz_analysis_cycle_frame_t *prev;
} RzAnalysisCycleFrame;
typedef struct rz_analysis_cycle_hook_t { // rename ?
ut64 addr;
int cycles;
} RzAnalysisCycleHook;
enum {
RZ_ANALYSIS_TRAP_NONE = 0,
RZ_ANALYSIS_TRAP_UNHANDLED = 1,
RZ_ANALYSIS_TRAP_BREAKPOINT = 2,
RZ_ANALYSIS_TRAP_DIVBYZERO = 3,
RZ_ANALYSIS_TRAP_WRITE_ERR = 4,
RZ_ANALYSIS_TRAP_READ_ERR = 5,
RZ_ANALYSIS_TRAP_EXEC_ERR = 6,
RZ_ANALYSIS_TRAP_INVALID = 7,
RZ_ANALYSIS_TRAP_UNALIGNED = 8,
RZ_ANALYSIS_TRAP_TODO = 9,
RZ_ANALYSIS_TRAP_HALT = 10,
};
typedef struct rz_analysis_ref_char {
char *str;
char *cols;
} RzAnalysisRefStr;
/**
* \brief Description of the contents of a single IL variable
*/
typedef struct rz_analysis_il_init_state_var_t {
RZ_NONNULL const char *name;
RZ_NONNULL RzILVal *val;
} RzAnalysisILInitStateVar;
typedef void (*RzAnalysisILInitCallback)(RzAnalysisILVM *vm, RzReg *reg);
/**
* \brief Description of an initial state of an RzAnalysisILVM
*
* This may be used by an analysis plugin to communicate how to initialize
* variables/registers for a clean vm.
* Everything unspecified by this may be initialized to anything (for example
* whatever contents the RzReg currently has).
*/
typedef struct rz_analysis_il_init_state_t {
RzVector /*<RzAnalysisILInitStateVar>*/ vars; ///< Contents of global variables
RzAnalysisILInitCallback cb; ///< Callback to run after the initial state has been set up
} RzAnalysisILInitState;
/**
* \brief Description of the global context of an RzAnalysisILVM
*
* This defines all information needed to initialize an IL vm in order to run
* in a declarative way, in particular:
*
* * Size of the program counter: given explicitly in `pc_size`
* * Endian: given explicitly in `big_endian`
* * Memories: currently always one memory with index 0 bound against IO, with key size given by `mem_key_size` and value size of 8
* * Registers: given explicitly in `reg_bindings` or derived from the register profile with `rz_il_reg_binding_derive()`
* * Labels: given explicitly in `labels`
* * Initial State of Variables: optionally given in `init_state`
*/
typedef struct rz_analysis_il_config_t {
ut32 pc_size; ///< size of the program counter in bits
bool big_endian;
/**
* Optional null-terminated array of registers to bind to global vars of the same name.
* If not specified, rz_il_reg_binding_derive will be used.
*/
RZ_NULLABLE const char **reg_bindings;
ut32 mem_key_size; ///< address size for memory 0, bound against IO
RzPVector /*<RzILEffectLabel *>*/ labels; ///< global labels, primarily for syscall/hook callbacks
RZ_NULLABLE RzAnalysisILInitState *init_state; ///< optional, initial contents for variables/registers, etc.
// more information might go in here, for example additional memories, etc.
} RzAnalysisILConfig;
/**
* \brief Defines the kind of memory attached to the VM, which may alter its behaviour.
*
* At the moment only IO is supported.
*/
typedef enum rz_analysis_il_mem_type_t {
RZ_ANALYSIS_IL_MEM_TYPE_IO
} RzAnalysisILMemType;
typedef struct rz_analysis_il_mem_t {
RzAnalysisILMemType type;
ut32 key_size; ///< address size
/**
* \brief Buffer that backs this memory.
*
* This is purely a pointer to the outside world, e.g. io.
* It should not by itself contain any state that is considered local to a single VM instance.
* For example if a sparse overlay on top of io is to be used locally during emulation, this
* should still point to a direct io buffer and the overlay.
* That is because RzAnalysisILContext is independent of any state.
*
* This is nullable for future memory types that may not have a backing buffer.
*/
RZ_NULLABLE RZ_OWN RzBuffer *base_buf;
} RzAnalysisILMem;
/**
* \brief Global context of an RzAnalysisILVM
*
* This holds information resolved from the RzAnalysisILConfig about the bindings between
* IL and memory/regs/...
*/
typedef struct rz_analysis_il_context_t {
RZ_NONNULL RzAnalysisILConfig *config; ///< config this context is resolved from, defined by arch plugin
RZ_NONNULL RzILRegBinding *reg_binding; ///< specifies which (global) variables are bound to registers
RzVector /*<RzAnalysisILMem>*/ memory; ///< specifies the available IL memories
} RzAnalysisILContext;
/**
* \brief High-level RzIL vm to emulate disassembled code
*
* This builds upon the low-level `RzILVM`, which by itself does not know about
* IO and lifting, and enables emulation of instructions obtained by disassembling
* and lifting with analysis plugins.
*/
struct rz_analysis_il_vm_t {
RZ_NONNULL RZ_OWN RzAnalysisILContext *ctx;
RZ_NONNULL RzILVM *vm; ///< low-level vm to execute IL code
} /* RzAnalysisILVM */;
typedef enum {
RZ_ANALYSIS_IL_STEP_RESULT_SUCCESS,
RZ_ANALYSIS_IL_STEP_RESULT_NOT_SET_UP,
RZ_ANALYSIS_IL_STEP_IL_RUNTIME_ERROR,
RZ_ANALYSIS_IL_STEP_UNIMPLEMENTED_IL,
RZ_ANALYSIS_IL_STEP_INVALID_OP
} RzAnalysisILStepResult;
// TODO: rm data + len
typedef int (*RzAnalysisOpCallback)(RzAnalysis *a, RzAnalysisOp *op, ut64 addr, const ut8 *data, int len, RzAnalysisOpMask mask);
typedef char *(*RzAnalysisRegProfGetCallback)(RzAnalysis *a);
typedef RZ_OWN RzAnalysisILConfig *(*RzAnalysisILConfigCB)(RzAnalysis *analysis);
typedef struct rz_analysis_plugin_t {
const char *name;
const char *desc;
const char *license;
const char *arch;
const char *author;
const char *version;
int bits;
int esil; // can do esil or not
int fileformat_type;
bool (*init)(void **user);
bool (*fini)(void *user);
int (*archinfo)(RzAnalysis *analysis, RzAnalysisInfoType query);
ut8 *(*analysis_mask)(RzAnalysis *analysis, int size, const ut8 *data, ut64 at);
RzList /*<RzSearchKeyword *>*/ *(*preludes)(RzAnalysis *analysis);
/**
* The actual bit-size of an address for given analysis.bits.
* If unimplemented or returns <= 0, analysis.bits will be used as-is.
*/
int (*address_bits)(RzAnalysis *analysis, int bits);
// legacy rz_analysis_functions
RzAnalysisOpCallback op;
RzAnalysisRegProfGetCallback get_reg_profile;
RzAnalysisILConfigCB il_config; ///< return an IL config to execute lifted code of the given analysis' arch/cpu/bits
// Deprecated.
bool (*esil_init)(void *esil);
bool (*esil_fini)(void *esil);
} RzAnalysisPlugin;
typedef enum {
RZ_IL_TRACE_OP_READ, ///< read
RZ_IL_TRACE_OP_WRITE ///< write
} RzILTraceOpType;
typedef struct {
ut64 addr; ///< memory address
RzILTraceOpType behavior; ///< read or write, see RzILTraceOpType enums
ut8 data_buf[32]; ///< data either written to or read from
int data_len; ///< data length
} RzILTraceMemOp;
typedef struct {
const char *reg_name; ///< name of register
RzILTraceOpType behavior; ///< READ or WRITE, see RzILTraceOpType enums
ut64 value; ///< data either written to or read from
} RzILTraceRegOp;
typedef enum {
RZ_IL_TRACE_INS_HAS_MEM_R = 0x1U, ///< instruction include memory read
RZ_IL_TRACE_INS_HAS_MEM_W = 0x2U, ///< instruction include memory write
RZ_IL_TRACE_INS_HAS_REG_R = 0x4U, ///< instruction include register read
RZ_IL_TRACE_INS_HAS_REG_W = 0x8U ///< instruction include register write
} RzILTraceInsOp;
typedef struct rz_il_trace_instruction_t {
ut64 addr; ///< Address of instruction
ut32 stats; ///< Has write/read to reg/mem ? see RZ_IL_TRACE_INS_HAS_* enums
RzPVector /*<RzILTraceMemOp *>*/ *write_mem_ops; ///< Vector<RzILTraceMemOp>
RzPVector /*<RzILTraceMemOp *>*/ *read_mem_ops; ///< Vector<RzILTraceMemOp>
RzPVector /*<RzILTraceRegOp *>*/ *write_reg_ops; ///< Vector<RzILTraceRegOp>
RzPVector /*<RzILTraceRegOp *>*/ *read_reg_ops; ///< Vector<RzILTraceRegOp>
} RzILTraceInstruction;
/*----------------------------------------------------------------------------------------------*/
#ifdef RZ_API
/* --------- */ /* REFACTOR */ /* ---------- */
/* type.c */
RZ_API const char *rz_analysis_datatype_to_string(RzAnalysisDataType t);
RZ_API bool rz_analysis_op_nonlinear(int t);
RZ_API bool rz_analysis_op_ismemref(int t);
RZ_API const char *rz_analysis_optype_to_string(int t);
RZ_API int rz_analysis_optype_from_string(RZ_NONNULL const char *type);
RZ_API const char *rz_analysis_op_family_to_string(int n);
RZ_API int rz_analysis_op_family_from_string(RZ_NONNULL const char *f);
RZ_API int rz_analysis_op_hint(RzAnalysisOp *op, RzAnalysisHint *hint);
/* block.c */
typedef bool (*RzAnalysisBlockCb)(RzAnalysisBlock *block, void *user);
typedef bool (*RzAnalysisAddrCb)(ut64 addr, void *user);
// lifetime
RZ_API void rz_analysis_block_ref(RzAnalysisBlock *bb);
RZ_API void rz_analysis_block_unref(RzAnalysisBlock *bb);
// Create one block covering the given range.
// This will fail if the range overlaps any existing blocks.
RZ_API RzAnalysisBlock *rz_analysis_create_block(RzAnalysis *analysis, ut64 addr, ut64 size);
static inline bool rz_analysis_block_contains(RzAnalysisBlock *bb, ut64 addr) {
return addr >= bb->addr && addr < bb->addr + bb->size;
}
// Split the block at the given address into two blocks.
// bb will stay the first block, the second block will be returned (or NULL on failure)
// The returned block will always be refd, i.e. it is necessary to always call rz_analysis_block_unref() on the return value!
RZ_API RzAnalysisBlock *rz_analysis_block_split(RzAnalysisBlock *bb, ut64 addr);
static inline bool rz_analysis_block_is_contiguous(RzAnalysisBlock *a, RzAnalysisBlock *b) {
return (a->addr + a->size) == b->addr;
}
// Merge block b into a.
// b will be FREED (not just unrefd) and is NOT VALID anymore if this function is successful!
// This only works if b follows directly after a and their function lists are identical.
// returns true iff the blocks could be merged
RZ_API bool rz_analysis_block_merge(RzAnalysisBlock *a, RzAnalysisBlock *b);
// Manually delete a block and remove it from all its functions
// If there are more references to it than from its functions only, it will not be removed immediately!
RZ_API void rz_analysis_delete_block(RzAnalysisBlock *bb);
RZ_API void rz_analysis_block_set_size(RzAnalysisBlock *block, ut64 size);
// Set the address and size of the block.
// This can fail (and return false) if there is already another block at the new address
RZ_API bool rz_analysis_block_relocate(RzAnalysisBlock *block, ut64 addr, ut64 size);
RZ_API RzAnalysisBlock *rz_analysis_get_block_at(RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_blocks_foreach_in(RzAnalysis *analysis, ut64 addr, RzAnalysisBlockCb cb, void *user);
RZ_API RzList /*<RzAnalysisBlock *>*/ *rz_analysis_get_blocks_in(RzAnalysis *analysis, ut64 addr); // values from rz_analysis_blocks_foreach_in as a list
RZ_API void rz_analysis_blocks_foreach_intersect(RzAnalysis *analysis, ut64 addr, ut64 size, RzAnalysisBlockCb cb, void *user);
RZ_API RzList /*<RzAnalysisBlock *>*/ *rz_analysis_get_blocks_intersect(RzAnalysis *analysis, ut64 addr, ut64 size); // values from rz_analysis_blocks_foreach_intersect as a list
// Call cb on every direct successor address of block
// returns false if the loop was breaked by cb
RZ_API bool rz_analysis_block_successor_addrs_foreach(RzAnalysisBlock *block, RzAnalysisAddrCb cb, void *user);
// Call cb on block and every (recursive) successor of it
// returns false if the loop was breaked by cb
RZ_API bool rz_analysis_block_recurse(RzAnalysisBlock *block, RzAnalysisBlockCb cb, void *user);
// Call cb on block and every (recursive) successor of it
// If cb returns false, recursion stops only for that block
// returns false if the loop was breaked by cb
RZ_API bool rz_analysis_block_recurse_followthrough(RzAnalysisBlock *block, RzAnalysisBlockCb cb, void *user);
// Call cb on block and every (recursive) successor of it
// Call on_exit on block that doesn't have non-visited successors
// returns false if the loop was breaked by cb
RZ_API bool rz_analysis_block_recurse_depth_first(RzAnalysisBlock *block, RzAnalysisBlockCb cb, RZ_NULLABLE RzAnalysisBlockCb on_exit, void *user);
// same as rz_analysis_block_recurse, but returns the blocks as a list
RZ_API RzList /*<RzAnalysisBlock *>*/ *rz_analysis_block_recurse_list(RzAnalysisBlock *block);
// return one shortest path from block to dst or NULL if none exists.
RZ_API RZ_NULLABLE RzList /*<RzAnalysisBlock *>*/ *rz_analysis_block_shortest_path(RzAnalysisBlock *block, ut64 dst);
// Add a case to the block's switch_op.
// If block->switch_op is NULL, it will be created with the given switch_addr.
RZ_API void rz_analysis_block_add_switch_case(RzAnalysisBlock *block, ut64 switch_addr, ut64 case_value, ut64 case_addr);
// Chop off the block at the specified address and remove all destinations.
// Blocks that have become unreachable after this operation will be automatically removed from all functions of block.
// addr must be the address directly AFTER the noreturn call!
// After the chopping, an rz_analysis_block_automerge() is performed on the touched blocks.
// IMPORTANT: The automerge might also FREE block! This function returns block iff it is still valid afterwards.
// If this function returns NULL, the pointer to block MUST not be touched anymore!
RZ_API RzAnalysisBlock *rz_analysis_block_chop_noreturn(RzAnalysisBlock *block, ut64 addr);
// Merge every block in blocks with their contiguous predecessor, if possible.
// IMPORTANT: Merged blocks will be FREED! The blocks list will be updated to contain only the survived blocks.
RZ_API void rz_analysis_block_automerge(RzPVector /*<RzAnalysisBlock *>*/ *blocks);
// return true iff an instruction in the given basic block starts at the given address
RZ_API bool rz_analysis_block_op_starts_at(RzAnalysisBlock *block, ut64 addr);
// Updates bbhash based on current bytes inside the block
RZ_API void rz_analysis_block_update_hash(RzAnalysisBlock *block);
// returns true if a byte in the given basic block was modified
RZ_API bool rz_analysis_block_was_modified(RzAnalysisBlock *block);
RZ_API RzAnalysisBlock *rz_analysis_find_most_relevant_block_in(RzAnalysis *analysis, ut64 off);
RZ_API ut16 rz_analysis_block_get_op_offset(RzAnalysisBlock *block, size_t i);
RZ_API ut64 rz_analysis_block_get_op_addr(RzAnalysisBlock *block, size_t i);
RZ_API int rz_analysis_block_get_op_index_in(RzAnalysisBlock *bb, ut64 addr);
RZ_API ut64 rz_analysis_block_get_op_addr_in(RzAnalysisBlock *bb, ut64 addr);
RZ_API bool rz_analysis_block_set_op_offset(RzAnalysisBlock *block, size_t i, ut16 v);
RZ_API ut64 rz_analysis_block_get_op_size(RzAnalysisBlock *bb, size_t i);
RZ_API st16 rz_analysis_block_get_op_sp_delta(RzAnalysisBlock *bb, size_t i);
RZ_API bool rz_analysis_block_set_op_sp_delta(RzAnalysisBlock *bb, size_t i, st16 delta);
RZ_API st16 rz_analysis_block_get_sp_delta_at(RzAnalysisBlock *bb, ut64 addr);
RZ_API st16 rz_analysis_block_get_sp_delta_at_end(RzAnalysisBlock *bb);
RZ_API RzStackAddr rz_analysis_block_get_sp_at_end(RzAnalysisBlock *bb);
RZ_API RzStackAddr rz_analysis_block_get_sp_at(RzAnalysisBlock *bb, ut64 addr);
RZ_API void rz_analysis_block_analyze_ops(RzAnalysisBlock *block);
// ---------------------------------------
/* function.c */
RZ_API RzAnalysisFunction *rz_analysis_function_new(RzAnalysis *analysis);
RZ_API void rz_analysis_function_free(void *fcn);
// Add a function created with rz_analysis_function_new() to anal
RZ_API bool rz_analysis_add_function(RzAnalysis *analysis, RzAnalysisFunction *fcn);
// Create a new function and add it to analysis (rz_analysis_function_new() + set members + rz_analysis_add_function())
RZ_API RzAnalysisFunction *rz_analysis_create_function(RzAnalysis *analysis, const char *name, ut64 addr, RzAnalysisFcnType type);
// returns all functions that have a basic block containing the given address
RZ_API RzList /*<RzAnalysisFunction *>*/ *rz_analysis_get_functions_in(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_BORROW RzAnalysisFunction *rz_analysis_first_function_in(RZ_NONNULL RZ_BORROW RzAnalysis *analysis, ut64 addr);
RZ_API RzAnalysisFunction *rz_analysis_get_function_at(const RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_function_delete(RzAnalysisFunction *fcn);
// returns the list of functions in the RzAnalysis instance
RZ_API RZ_BORROW RzList /*<RzAnalysisFunction *>*/ *rz_analysis_function_list(RZ_NONNULL RzAnalysis *analysis);
RZ_API size_t rz_analysis_function_list_size(RZ_NONNULL const RzAnalysis *analysis);
RZ_API void rz_analysis_function_delete_all(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_function_delete_address(RZ_NONNULL RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_function_exists_with_name(RZ_NONNULL const RzAnalysis *analysis, RZ_NONNULL const char *name);
// rhange the entrypoint of fcn
// This can fail (and return false) if there is already another function at the new address
RZ_API bool rz_analysis_function_relocate(RzAnalysisFunction *fcn, ut64 addr);
// rename the given function
// This can fail (and return false) if there is another function with the name given
RZ_API bool rz_analysis_function_rename(RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL const char *name);
RZ_API RZ_BORROW const char *rz_analysis_function_force_rename(RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL const char *name);
RZ_API void rz_analysis_function_add_block(RzAnalysisFunction *fcn, RzAnalysisBlock *bb);
RZ_API void rz_analysis_function_remove_block(RzAnalysisFunction *fcn, RzAnalysisBlock *bb);
// size of the entire range that the function spans, including holes.
// this is exactly rz_analysis_function_max_addr() - rz_analysis_function_min_addr()
RZ_API ut64 rz_analysis_function_linear_size(RzAnalysisFunction *fcn);
// lowest address covered by the function
RZ_API ut64 rz_analysis_function_min_addr(RzAnalysisFunction *fcn);
// first address directly after the function
RZ_API ut64 rz_analysis_function_max_addr(RzAnalysisFunction *fcn);
// size from the function entrypoint (fcn->addr) to the end of the function (rz_analysis_function_max_addr)
RZ_API ut64 rz_analysis_function_size_from_entry(RzAnalysisFunction *fcn);
// the "real" size of the function, that is the sum of the size of the
// basicblocks this function is composed of
RZ_API ut64 rz_analysis_function_realsize(const RzAnalysisFunction *fcn);
// returns whether the function contains a basic block that contains addr
// This is completely independent of fcn->addr, which is only the entrypoint!
RZ_API bool rz_analysis_function_contains(RzAnalysisFunction *fcn, ut64 addr);
// returns true if function bytes were modified
RZ_API bool rz_analysis_function_was_modified(RZ_NONNULL RzAnalysisFunction *fcn);
RZ_API bool rz_analysis_function_is_autonamed(RZ_NONNULL char *name);
RZ_API RZ_OWN char *rz_analysis_function_name_guess(RzTypeDB *typedb, RZ_NONNULL char *name);
RZ_API RZ_OWN char *rz_analysis_function_name_resolve(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const char *func_name);
RZ_DEPRECATE RZ_API bool rz_analysis_le_addr_pair_reset(RZ_NONNULL RzAnalysis *analysis);
/* analysis.c */
RZ_API RzAnalysis *rz_analysis_new(RZ_NULLABLE const char *sdb_types_path);
RZ_API void rz_analysis_purge(RzAnalysis *analysis);
RZ_API void rz_analysis_free(RZ_NULLABLE RzAnalysis *a);
RZ_DEPRECATE RZ_API bool rz_analysis_plugin_support_esil(RZ_NONNULL RzAnalysis *analysis);
RZ_DEPRECATE RZ_API bool rz_analysis_plugin_is_arch(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const char *arch);
RZ_API bool rz_analysis_plugin_add(RzAnalysis *analysis, RZ_NONNULL RzAnalysisPlugin *foo);
RZ_API bool rz_analysis_plugin_del(RzAnalysis *analysis, RZ_NONNULL RzAnalysisPlugin *foo);
RZ_API const RzAnalysisPlugin *rz_analysis_plugin_current(RzAnalysis *analysis);
RZ_API RZ_OWN RzIterator *rz_analysis_plugin_iterator(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW HtSP /*<RzAnalysisPlugin *>*/ *rz_analysis_get_plugins(RZ_NONNULL RzAnalysis *analysis);
RZ_API int rz_analysis_archinfo(RzAnalysis *analysis, RzAnalysisInfoType query);
RZ_API bool rz_analysis_use(RzAnalysis *analysis, const char *name);
RZ_API RZ_BORROW RzIOBind *rz_analysis_get_io_bind(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzCoreBind *rz_analysis_get_core_bind(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzFlagBind *rz_analysis_get_flag_bind(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzBinBind *rz_analysis_get_bin_bind(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzTypeDB *rz_analysis_get_type_db(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzReg *rz_analysis_get_reg(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_formats(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_cc(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_root(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzPlatformTarget *rz_analysis_get_arch_target(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzPlatformTargetIndex *rz_analysis_get_platform_target(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RBTree *rz_analysis_get_global_var_tree(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RBTree *rz_analysis_get_bb_tree(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzIntervalTree *rz_analysis_get_meta(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzSpaces *rz_analysis_get_meta_spaces(RZ_NONNULL RzAnalysis *analysis);
RZ_API const char *rz_analysis_get_sdb_types_path(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW RzAnalysisDebugInfo *rz_analysis_get_debug_info(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_debug_info(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisDebugInfo *debug_info);
RZ_API RZ_BORROW RzAnalysisILVM *rz_analysis_get_il_vm(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_il_vm(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisILVM *il_vm);
RZ_API RZ_BORROW RzAnalysisOptions *rz_analysis_get_options(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW HtSP *rz_analysis_get_virtual_xrefs(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_BORROW HtUP *rz_analysis_get_xrefs_from(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_xrefs_from(RZ_NONNULL RzAnalysis *analysis, HtUP *xrefs_from);
RZ_API RZ_BORROW HtUP *rz_analysis_get_xrefs_to(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_xrefs_to(RZ_NONNULL RzAnalysis *analysis, HtUP *xrefs_to);
RZ_API RZ_BORROW RzGadgetCache *rz_analysis_get_gadget_cache(RZ_NONNULL RzAnalysis *analysis, RzGadgetType type);
RZ_API void rz_analysis_set_gadget_cache(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzGadgetCache *gadget_cache, RzGadgetType type);
RZ_API RZ_BORROW HtUP *rz_analysis_get_gadget_semantics(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_gadget_semantics(RZ_NONNULL RzAnalysis *analysis, HtUP *rop_semantics);
RZ_API RZ_BORROW RzAnalysisCallbacks *rz_analysis_get_callbacks(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_os(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *os);
RZ_API const char *rz_analysis_get_os(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_syscall(RZ_NONNULL RzAnalysis *analysis, RzSyscall *sysc);
RZ_API RZ_BORROW RzSyscall *rz_analysis_get_syscall(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_column_sort(RZ_NONNULL RzAnalysis *analysis, RzListComparator column_sort);
RZ_API RZ_BORROW RzListComparator rz_analysis_get_column_sort(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_gp(RZ_NONNULL RzAnalysis *analysis, ut64 new_gp);
RZ_API RZ_BORROW ut64 rz_analysis_get_gp(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_cpp_abi(RZ_NONNULL RzAnalysis *analysis, RzAnalysisCPPABI cpp_abi);
RZ_API RZ_BORROW RzAnalysisCPPABI rz_analysis_get_cpp_abi(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_recursive_noreturn(RZ_NONNULL RzAnalysis *analysis, bool enable);
RZ_API RZ_BORROW bool rz_analysis_get_recursive_noreturn(RZ_NONNULL RzAnalysis *analysis);
RZ_DEPRECATE RZ_API void rz_analysis_set_core(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE void *core);
RZ_DEPRECATE RZ_API void rz_analysis_set_event(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzEvent *ev);
RZ_DEPRECATE RZ_API RZ_BORROW RzAnalysisEsil *rz_analysis_get_esil(RZ_NONNULL RzAnalysis *analysis);
RZ_DEPRECATE RZ_API void rz_analysis_set_esil(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisEsil *esil);
RZ_DEPRECATE RZ_API const char *rz_analysis_get_arch(RZ_NONNULL const RzAnalysis *analysis);
RZ_DEPRECATE RZ_API int rz_analysis_get_bits(RZ_NONNULL const RzAnalysis *analysis);
RZ_DEPRECATE RZ_API bool rz_analysis_is_big_endian_set(RZ_NONNULL const RzAnalysis *analysis);
RZ_DEPRECATE RZ_API void rz_analysis_set_last_disasm_reg(RZ_NONNULL RzAnalysis *analysis, ut8 *last_disasm_reg);
RZ_DEPRECATE RZ_API ut8 *rz_analysis_get_last_disasm_reg(RZ_NONNULL RzAnalysis *analysis);
RZ_DEPRECATE RZ_API RzStrConstPool *rz_analysis_get_const_pool(RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_analysis_set_reg_profile(RZ_NONNULL RzAnalysis *analysis);
RZ_API RZ_OWN char *rz_analysis_get_reg_profile(RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_analysis_is_reg_in_profile(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const char *name);
RZ_API void rz_analysis_set_gnu_thumb1_case_uqi_addr(RZ_NONNULL RzAnalysis *analysis, ut64 addr);
RZ_API ut64 rz_analysis_get_gnu_thumb1_case_uqi_addr(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_pc_align(RZ_NONNULL RzAnalysis *analysis, ut32 pc_align);
RZ_API ut32 rz_analysis_get_pc_align(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_sleep(RZ_NONNULL RzAnalysis *analysis, ut64 usecs);
RZ_API ut64 rz_analysis_get_sleep(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_segment_granularity(RZ_NONNULL RzAnalysis *analysis, int seggrn);
RZ_API int rz_analysis_get_segment_granularity(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_imports(RZ_NONNULL RzAnalysis *analysis, RzList /*<char *>*/ *imports);
RZ_API RzList /*<char *>*/ *rz_analysis_get_imports(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_reflines(RZ_NONNULL RzAnalysis *analysis, RzPVector /*<RzAnalysisRefline *>*/ *reflines);
RZ_API RzPVector /*<RzAnalysisRefline *>*/ *rz_analysis_get_reflines(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_max_reflines(RZ_NONNULL RzAnalysis *analysis, int maxreflines);
RZ_API int rz_analysis_get_max_reflines(RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_analysis_set_lines_width(RZ_NONNULL RzAnalysis *analysis, int lineswidth);
RZ_API int rz_analysis_get_lines_width(RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_analysis_set_bits(RzAnalysis *analysis, int bits);
RZ_API void rz_analysis_set_cpu(RzAnalysis *analysis, const char *cpu);
RZ_API RZ_NULLABLE const char *rz_analysis_get_cpu(RZ_NONNULL const RzAnalysis *analysis);
RZ_API bool rz_analysis_is_cpu(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *cpu);
RZ_API int rz_analysis_set_big_endian(RzAnalysis *analysis, int boolean);
RZ_API ut8 *rz_analysis_mask(RzAnalysis *analysis, ut32 size, const ut8 *data, ut64 at);
RZ_API void rz_analysis_trace_bb(RzAnalysis *analysis, ut64 addr);
RZ_API const char *rz_analysis_fcntype_tostring(int type);
RZ_API void rz_analysis_bind(RzAnalysis *b, RzAnalysisBind *bnd);
RZ_API bool rz_analysis_set_triplet(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *os, RZ_NULLABLE const char *arch, int bits);
RZ_API void rz_analysis_add_import(RzAnalysis *analysis, const char *imp);
RZ_API void rz_analysis_remove_import(RzAnalysis *analysis, const char *imp);
RZ_API void rz_analysis_purge_imports(RzAnalysis *analysis);
RZ_API int rz_analysis_get_address_bits(RzAnalysis *analysis);
/* op.c */
RZ_API const char *rz_analysis_stackop_tostring(int s);
RZ_API RzStackAddr rz_analysis_op_apply_sp_effect(RzAnalysisOp *op, RzStackAddr sp);
RZ_API RZ_NULLABLE RZ_OWN char *rz_analysis_op_describe_sp_effect(RzAnalysisOp *op);
RZ_API RzAnalysisOp *rz_analysis_op_new(void);
RZ_API void rz_analysis_op_free(void *op);
RZ_API void rz_analysis_op_init(RzAnalysisOp *op);
RZ_API bool rz_analysis_op_fini(RzAnalysisOp *op);
RZ_API int rz_analysis_op_reg_delta(RzAnalysis *analysis, ut64 addr, const char *name);
RZ_API bool rz_analysis_op_is_eob(const RzAnalysisOp *op);
RZ_API bool rz_analysis_op_is_call(RZ_NONNULL const RzAnalysisOp *op);
RZ_API RzList /*<RzAnalysisOp *>*/ *rz_analysis_op_list_new(void);
RZ_API int rz_analysis_op(RZ_NONNULL RzAnalysis *analysis, RZ_OUT RzAnalysisOp *op, ut64 addr, const ut8 *data, ut64 len, RzAnalysisOpMask mask);
RZ_API RzAnalysisOp *rz_analysis_op_hexstr(RzAnalysis *analysis, ut64 addr, const char *hexstr);
RZ_API char *rz_analysis_op_to_string(RzAnalysis *analysis, RzAnalysisOp *op);
/* Independent Trace Functions */
RZ_API RzILTraceInstruction *rz_analysis_il_trace_instruction_new(ut64 addr);
RZ_API void rz_analysis_il_trace_instruction_free(RzILTraceInstruction *instruction);
RZ_API bool rz_analysis_il_trace_add_mem(RzILTraceInstruction *trace, RzILTraceMemOp *mem);
RZ_API bool rz_analysis_il_trace_add_reg(RzILTraceInstruction *trace, RzILTraceRegOp *reg);
RZ_API RzILTraceMemOp *rz_analysis_il_get_mem_op_trace(RzILTraceInstruction *trace, ut64 addr, RzILTraceOpType op_type);
RZ_API RzILTraceRegOp *rz_analysis_il_get_reg_op_trace(RzILTraceInstruction *trace, const char *regname, RzILTraceOpType op_type);
RZ_API bool rz_analysis_il_mem_trace_contains(RzILTraceInstruction *trace, ut64 addr, RzILTraceOpType op_type);
RZ_API bool rz_analysis_il_reg_trace_contains(RzILTraceInstruction *trace, const char *regname, RzILTraceOpType op_type);
/* RzIL */
RZ_API RzAnalysisILInitState *rz_analysis_il_init_state_new();
RZ_API void rz_analysis_il_init_state_free(RzAnalysisILInitState *state);
RZ_API void rz_analysis_il_init_state_set_var(RZ_NONNULL RzAnalysisILInitState *state,
RZ_NONNULL const char *name, RZ_NONNULL RZ_OWN RzILVal *val);
RZ_API RZ_OWN RzAnalysisILConfig *rz_analysis_il_config_new(ut32 pc_size, bool big_endian, ut32 mem_key_size);
RZ_API void rz_analysis_il_config_free(RzAnalysisILConfig *cfg);
RZ_API void rz_analysis_il_config_add_label(RZ_NONNULL RzAnalysisILConfig *cfg, RZ_NONNULL RZ_OWN RzILEffectLabel *label);
RZ_API RZ_OWN RzAnalysisILContext *rz_analysis_il_context_resolve(RzAnalysis *a);
RZ_API void rz_analysis_il_context_free(RzAnalysisILContext *ctx);
typedef bool (*RzAnalysisILVMCondCallback)(RzAnalysisILVM *vm, void *user);
RZ_API RZ_OWN RzAnalysisILVM *rz_analysis_il_vm_new(RzAnalysis *a, RZ_NULLABLE RzReg *init_state_reg);
RZ_API void rz_analysis_il_vm_free(RZ_NULLABLE RzAnalysisILVM *vm);
RZ_API void rz_analysis_il_vm_sync_from_reg(RzAnalysisILVM *vm, RZ_NONNULL RzReg *reg);
RZ_API bool rz_analysis_il_vm_sync_to_reg(RzAnalysisILVM *vm, RZ_NONNULL RzReg *reg);
RZ_API RzAnalysisILStepResult rz_analysis_il_vm_step(
RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisILVM *vm, RZ_NULLABLE RzReg *reg);
RZ_API RzAnalysisILStepResult rz_analysis_il_vm_step_while(
RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisILVM *vm, RZ_NULLABLE RzReg *reg,
RZ_NONNULL RzAnalysisILVMCondCallback cond, RZ_NULLABLE void *user);
RZ_API RzAnalysisILStepResult rz_analysis_il_vm_step_while_with_events(
RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisILVM *vm, RZ_NULLABLE RzReg *reg,
RZ_NONNULL RzAnalysisILVMCondCallback cond, RZ_NULLABLE void *user);
RZ_API bool rz_analysis_il_vm_setup(RzAnalysis *analysis);
RZ_API void rz_analysis_il_vm_cleanup(RzAnalysis *analysis);
RZ_API bool rz_analysis_il_vm_set_unsigned(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *var_name, ut64 value);
RZ_API bool rz_analysis_il_vm_set_bool(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *var_name, bool value);
RZ_API bool rz_analysis_il_vm_set_float(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *var_name, long double value);
/* trace */
RZ_API RzAnalysisILTrace *rz_analysis_il_trace_new(RzAnalysis *analysis, RZ_NONNULL RzAnalysisILVM *rzil);
RZ_API void rz_analysis_il_trace_free(RzAnalysisILTrace *trace);
RZ_API void rz_analysis_il_trace_op(RzAnalysis *analysis, RZ_NONNULL RzAnalysisILVM *rzil, RZ_NONNULL RzAnalysisLiftedILOp op);
RZ_API bool rz_analysis_add_device_peripheral_map(RzBinObject *o, RzAnalysis *analysis);
/* fcn.c */
RZ_API ut32 rz_analysis_function_cost(RzAnalysisFunction *fcn);
RZ_API ut32 rz_analysis_function_count_edges(const RzAnalysisFunction *fcn, RZ_NULLABLE int *ebbs);
// Use rz_analysis_get_functions_in¿() instead
RZ_DEPRECATE RZ_API RzAnalysisFunction *rz_analysis_get_fcn_in(RzAnalysis *analysis, ut64 addr, int type);
RZ_DEPRECATE RZ_API RzAnalysisFunction *rz_analysis_get_fcn_in_bounds(RzAnalysis *analysis, ut64 addr, int type);
RZ_API RzAnalysisFunction *rz_analysis_get_function_byname(RzAnalysis *analysis, const char *name);
RZ_API int rz_analysis_fcn(RzAnalysis *analysis, RzAnalysisFunction *fcn, ut64 addr, ut64 len, int reftype);
RZ_API int rz_analysis_fcn_del(RzAnalysis *analysis, ut64 addr);
RZ_API int rz_analysis_fcn_del_locs(RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_fcn_add_bb(RzAnalysis *analysis, RzAnalysisFunction *fcn, ut64 addr, ut64 size, ut64 jump, ut64 fail);
RZ_API bool rz_analysis_check_fcn(RzAnalysis *analysis, ut8 *buf, ut16 bufsz, ut64 addr, ut64 low, ut64 high);
RZ_API void rz_analysis_function_check_bp_use(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_update_analysis_range(RzAnalysis *analysis, ut64 addr, int size);
RZ_API void rz_analysis_function_update_analysis(RzAnalysisFunction *fcn);
RZ_API bool rz_analysis_task_item_new(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzVector /*<RzAnalysisTaskItem>*/ *tasks, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NULLABLE RzAnalysisBlock *block, ut64 address, RzStackAddr sp);
RZ_API int rz_analysis_run_tasks(RZ_NONNULL RzVector /*<RzAnalysisTaskItem>*/ *tasks);
RZ_API ut32 rz_analysis_function_complexity(RzAnalysisFunction *fcn);
RZ_API ut32 rz_analysis_function_loops(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_trim_jmprefs(RzAnalysis *analysis, RzAnalysisFunction *fcn);
RZ_API void rz_analysis_del_jmprefs(RzAnalysis *analysis, RzAnalysisFunction *fcn);
RZ_API RZ_OWN char *rz_analysis_function_get_json(RzAnalysisFunction *function);
RZ_API RzAnalysisFunction *rz_analysis_fcn_next(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_OWN char *rz_analysis_function_get_signature(RZ_NONNULL RzAnalysisFunction *function);
RZ_API void rz_analysis_function_set_type(RzAnalysis *a, RZ_NONNULL RzAnalysisFunction *f, RZ_NONNULL RzCallable *callable);
RZ_API bool rz_analysis_function_set_type_str(RzAnalysis *a, RZ_NONNULL RzAnalysisFunction *f, RZ_NONNULL const char *sig);
RZ_API bool rz_analysis_function_set_cc(RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NULLABLE const char *cc);
RZ_API ut32 rz_analysis_fcn_count(RzAnalysis *a, ut64 from, ut64 to);
RZ_API RzAnalysisBlock *rz_analysis_fcn_bbget_in(const RzAnalysis *analysis, RzAnalysisFunction *fcn, ut64 addr);
RZ_API RzAnalysisBlock *rz_analysis_fcn_bbget_at(RzAnalysis *analysis, RzAnalysisFunction *fcn, ut64 addr);
RZ_API int rz_analysis_function_resize(RzAnalysisFunction *fcn, int newsize);
RZ_API bool rz_analysis_function_purity(RzAnalysisFunction *fcn);
typedef bool (*RzAnalysisRefCmp)(RzAnalysisXRef *ref, void *data);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_xref_list_new(void);
RZ_API ut64 rz_analysis_xrefs_count(RzAnalysis *analysis);
RZ_API const char *rz_analysis_xrefs_type_tostring(RzAnalysisXRefType type);
RZ_API RzAnalysisXRefType rz_analysis_xrefs_type(char ch);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_xrefs_get_to(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_xrefs_get_from(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_xrefs_list(RzAnalysis *analysis);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_function_get_xrefs_from(const RzAnalysisFunction *fcn);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_function_get_xrefs_to(const RzAnalysisFunction *fcn);
RZ_API bool rz_analysis_xrefs_set(RzAnalysis *analysis, ut64 from, ut64 to, RzAnalysisXRefType type);
RZ_API bool rz_analysis_xrefs_deln(RzAnalysis *analysis, ut64 from, ut64 to, RzAnalysisXRefType type);
RZ_API bool rz_analysis_xref_del(RzAnalysis *analysis, ut64 from, ut64 to);
/* var.c */
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_set_var(
RzAnalysisFunction *fcn,
RZ_NONNULL RzAnalysisVarStorage *stor,
RZ_BORROW RZ_NULLABLE const RzType *type,
int size,
RZ_NONNULL const char *name);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_add_var(RzAnalysisFunction *fcn, RZ_OWN RzAnalysisVar *var);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_var_at(RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisVarStorage *stor);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_stack_var_at(RzAnalysisFunction *fcn, RzStackAddr stack_off);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_reg_var_at(RzAnalysisFunction *fcn, RZ_NONNULL const char *reg);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_stack_var_in(RzAnalysisFunction *fcn, RzStackAddr stack_off);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_var_byname(RzAnalysisFunction *fcn, const char *name);
RZ_API RZ_OWN RzAnalysisVar *rz_analysis_function_get_ret_var(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_function_delete_vars_by_storage_type(RzAnalysisFunction *fcn, RzAnalysisVarStorageType stor);
RZ_API void rz_analysis_function_delete_arg_vars(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_function_delete_all_vars(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_function_delete_unused_vars(RzAnalysisFunction *fcn);
RZ_API void rz_analysis_function_delete_var(RzAnalysisFunction *fcn, RzAnalysisVar *var);
RZ_API RZ_NULLABLE char *rz_analysis_function_var_expr_for_reg_access_at(RzAnalysisFunction *fcn, ut64 addr, RZ_NONNULL const char *reg, st64 reg_addend);
RZ_API RZ_BORROW RzPVector /*<RzAnalysisVar *>*/ *rz_analysis_function_get_vars_used_at(RzAnalysisFunction *fcn, ut64 op_addr);
/* var */
// There could be multiple vars used in multiple functions. Use rz_analysis_get_functions_in()+rz_analysis_function_get_vars_used_at() instead.
RZ_DEPRECATE RZ_API RzAnalysisVar *rz_analysis_get_used_function_var(RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_var_is_arg(RZ_NONNULL RzAnalysisVar *var);
RZ_API size_t rz_analysis_var_local_count(RZ_NONNULL RzAnalysisFunction *fcn);
RZ_API size_t rz_analysis_arg_count(RZ_NONNULL RzAnalysisFunction *fcn);
RZ_API void rz_analysis_var_init(RZ_BORROW RzAnalysisVar *var);
RZ_API void rz_analysis_var_fini(RZ_OWN RzAnalysisVar *var);
RZ_API RZ_OWN RzAnalysisVar *rz_analysis_var_new();
RZ_API void rz_analysis_var_free(RZ_OWN RzAnalysisVar *var);
RZ_API bool rz_analysis_var_rename(RzAnalysisVar *var, const char *new_name, bool verbose);
RZ_API void rz_analysis_var_resolve_overlaps(RzAnalysisVar *var);
RZ_API ut64 rz_analysis_var_size(const RzAnalysis *analysis, RZ_NONNULL RzAnalysisVar *var);
RZ_API void rz_analysis_var_set_type(RzAnalysisVar *var, RZ_OWN RzType *type, bool resolve_overlaps);
RZ_API void rz_analysis_var_delete(RzAnalysisVar *var);
RZ_API void rz_analysis_var_set_access(RzAnalysisVar *var, const char *reg, ut64 access_addr, int access_type, st64 reg_addend);
RZ_API void rz_analysis_var_remove_access_at(RzAnalysisVar *var, ut64 address);
RZ_API void rz_analysis_var_clear_accesses(RzAnalysisVar *var);
RZ_API void rz_analysis_var_add_constraint(RzAnalysisVar *var, RZ_BORROW RzTypeConstraint *constraint);
RZ_API void rz_analysis_var_clear_constraints(RZ_NONNULL RzAnalysisVar *var);
RZ_API char *rz_analysis_var_get_constraints_readable(RZ_NONNULL RzAnalysisVar *var);
RZ_API int rz_analysis_var_storage_cmp(
RZ_NONNULL const RzAnalysisVarStorage *a,
RZ_NONNULL const RzAnalysisVarStorage *b);
RZ_API bool rz_analysis_var_storage_equals(
RZ_NONNULL const RzAnalysisVarStorage *a,
RZ_NONNULL const RzAnalysisVarStorage *b);
// Get the access to var at exactly addr if there is one
RZ_API RzAnalysisVarAccess *rz_analysis_var_get_access_at(RzAnalysisVar *var, ut64 addr);
RZ_API int rz_analysis_var_get_argnum(RzAnalysisVar *var);
RZ_API void rz_analysis_extract_vars(RzAnalysis *analysis, RzAnalysisFunction *fcn, RzAnalysisOp *op, RzStackAddr sp);
RZ_API void rz_analysis_extract_rarg(RzAnalysis *analysis, RzAnalysisOp *op, RzAnalysisFunction *fcn, int *reg_set, int *count);
RZ_API const char *rz_analysis_var_storage_type_to_string(RzAnalysisVarStorageType type);
RZ_API bool rz_analysis_var_storage_type_from_string(
RZ_NONNULL const char *type_str,
RZ_NONNULL RZ_BORROW RZ_OUT RzAnalysisVarStorageType *type);
RZ_API void rz_analysis_var_storage_dump(
RZ_NONNULL RZ_BORROW RzAnalysis *a,
RZ_NONNULL RZ_BORROW RZ_OUT RzStrBuf *sb,
RZ_NULLABLE RZ_BORROW const RzAnalysisVar *var,
RZ_NONNULL RZ_BORROW const RzAnalysisVarStorage *storage);
RZ_API void rz_analysis_var_storage_dump_pj(
RZ_NONNULL RZ_BORROW RZ_OUT PJ *pj,
RZ_NONNULL RZ_BORROW const RzAnalysisVar *var,
RZ_NONNULL RZ_BORROW const RzAnalysisVarStorage *storage);
RZ_API RZ_OWN char *rz_analysis_var_storage_to_string(
RZ_NONNULL RZ_BORROW RzAnalysis *a,
RZ_NULLABLE RZ_BORROW const RzAnalysisVar *var,
RZ_NONNULL RZ_BORROW const RzAnalysisVarStorage *storage);
RZ_API void rz_analysis_var_storage_poolify(
RZ_NONNULL RZ_BORROW RzAnalysis *analysis,
RZ_NONNULL RZ_BORROW RZ_OUT RzAnalysisVarStorage *stor);
RZ_API void rz_analysis_var_storage_piece_fini(RzAnalysisVarStoragePiece *p);
RZ_API void rz_analysis_var_storage_fini(RzAnalysisVarStorage *sto);
RZ_API void rz_analysis_var_storage_free(RzAnalysisVarStorage *sto);
// Get the variable that var is written to at one of its accesses
// Useful for cases where a register-based argument is written away into a stack variable,
// so if var is the reg arg then this will return the stack var.
RZ_API RzAnalysisVar *rz_analysis_var_get_dst_var(RzAnalysisVar *var);
typedef struct rz_analysis_fcn_vars_cache {
RzList /*<RzAnalysisVar *>*/ *sorted_vars;
RzList /*<RzAnalysisVar *>*/ *arg_vars;
} RzAnalysisFcnVarsCache;
RZ_API void rz_analysis_fcn_vars_cache_init(
RZ_NONNULL RZ_BORROW RzAnalysis *analysis,
RZ_NONNULL RZ_BORROW RZ_OUT RzAnalysisFcnVarsCache *cache,
RZ_NONNULL RZ_BORROW RzAnalysisFunction *fcn);
RZ_API RZ_OWN RzAnalysisFcnVarsCache *rz_analysis_fcn_vars_cache_from_fcn(
RZ_NONNULL RZ_BORROW RzAnalysis *analysis,
RZ_NONNULL RZ_BORROW RzAnalysisFunction *fcn);
RZ_API void rz_analysis_fcn_vars_cache_fini(RzAnalysisFcnVarsCache *cache);
RZ_API char *rz_analysis_fcn_format_sig(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NULLABLE char *fcn_name,
RZ_NULLABLE RzAnalysisFcnVarsCache *reuse_cache, RZ_NULLABLE const char *fcn_name_pre, RZ_NULLABLE const char *fcn_name_post);
RZ_API void rz_analysis_fcn_vars_add_types(RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn);
// Global vars
RZ_API RZ_OWN RzAnalysisVarGlobal *rz_analysis_var_global_new(RZ_NONNULL const char *name, ut64 addr);
RZ_API bool rz_analysis_var_global_add(RzAnalysis *analysis, RZ_NONNULL RzAnalysisVarGlobal *global_var);
RZ_API bool rz_analysis_var_global_create_with_sourceline(RzAnalysis *analysis,
RZ_NONNULL const char *name, RZ_NONNULL RZ_BORROW RzType *type, ut64 addr,
RZ_NULLABLE const char *file, ut32 line, ut32 colum);
RZ_API bool rz_analysis_var_global_create(RzAnalysis *analysis,
RZ_NONNULL const char *name, RZ_NONNULL RZ_BORROW RzType *type, ut64 addr);
RZ_API void rz_analysis_var_global_free(RzAnalysisVarGlobal *glob);
RZ_API RZ_NULLABLE RzFlagItem *rz_analysis_var_global_get_flag_item(RzAnalysisVarGlobal *glob);
RZ_API bool rz_analysis_var_global_delete(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisVarGlobal *glob);
RZ_API bool rz_analysis_var_global_delete_byname(RzAnalysis *analysis, RZ_NONNULL const char *name);
RZ_API bool rz_analysis_var_global_delete_byaddr_at(RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_var_global_delete_byaddr_in(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_BORROW RzAnalysisVarGlobal *rz_analysis_var_global_get_byname(RzAnalysis *analysis, RZ_NONNULL const char *name);
RZ_API RZ_BORROW RzAnalysisVarGlobal *rz_analysis_var_global_get_byaddr_at(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_BORROW RzAnalysisVarGlobal *rz_analysis_var_global_get_byaddr_in(RzAnalysis *analysis, ut64 addr);
RZ_API RZ_OWN RzList /*<RzAnalysisVarGlobal *>*/ *rz_analysis_var_global_get_all(RzAnalysis *analysis);
RZ_API bool rz_analysis_var_global_rename(RzAnalysis *analysis, RZ_NONNULL const char *old_name, RZ_NONNULL const char *newname);
RZ_API void rz_analysis_var_global_set_type(RzAnalysisVarGlobal *glob, RZ_NONNULL RZ_BORROW RzType *type);
RZ_API void rz_analysis_var_global_add_constraint(RZ_NONNULL RzAnalysisVarGlobal *glob, RZ_NONNULL RzTypeConstraint *constraint);
RZ_API void rz_analysis_var_global_clear_constraints(RZ_NONNULL RzAnalysisVarGlobal *glob);
RZ_API RZ_OWN char *rz_analysis_var_global_get_constraints_readable(RZ_NONNULL RzAnalysisVarGlobal *glob);
RZ_API RZ_OWN RzList /*<RzAnalysisXRef *>*/ *rz_analysis_var_global_xrefs(RzAnalysis *analysis, RZ_NONNULL const RzAnalysisVarGlobal *glob);
RZ_API RZ_OWN RzList /*<RzTypePathTuple *>*/ *rz_analysis_type_paths_by_address(RzAnalysis *analysis, ut64 addr);
/* project */
RZ_API bool rz_analysis_xrefs_init(RzAnalysis *analysis);
/* similarity.c */
typedef enum {
RZ_ANALYSIS_SIMILARITY_COMPLETE = 'c',
RZ_ANALYSIS_SIMILARITY_PARTIAL = 'p',
RZ_ANALYSIS_SIMILARITY_UNLIKE = 'u'
} RzAnalysisSimilarity;
#define RZ_ANALYSIS_SIMILARITY_COMPLETE_STR "COMPLETE"
#define RZ_ANALYSIS_SIMILARITY_PARTIAL_STR "PARTIAL"
#define RZ_ANALYSIS_SIMILARITY_UNLIKE_STR "UNLIKE"
typedef struct rz_analysis_match_info_t {
ut32 queue_len; ///< Total number of element left in the queue.
ut32 percentage; ///< Progress made by the search thread.
} RzAnalysisMatchThreadInfo;
typedef bool (*RzAnalysisMatchThreadInfoCb)(const size_t n_left, const size_t n_matches, void *user);
typedef struct rz_analysis_match_options_t {
RZ_NONNULL RzAnalysis *analysis_a; ///< Analysis context for the first input
RZ_NONNULL RzAnalysis *analysis_b; ///< Analysis context for the second input (can be the same as analysis_a)
RzAnalysisMatchThreadInfoCb callback; ///< When set allows to get the thread information
void *user; ///< User pointer to pass to the callback function for the thread info
} RzAnalysisMatchOpt;
typedef struct rz_analysis_match_pair_t {
const void *pair_a; ///< Match pair from input A (the pointers are either RzAnalysisBlock or RzAnalysisFunction)
const void *pair_b; ///< Match pair from input B (the pointers are either RzAnalysisBlock or RzAnalysisFunction)
double similarity; ///< Similarity score (from 0 to 1.0, where 1 is perfect match and 0 is complete mismatch)
} RzAnalysisMatchPair;
typedef struct rz_analysis_match_result_t {
RzList /*<RzAnalysisMatchPair *>*/ *matches; ///< List of matched pairs between input A and B
RzList /*<void *>*/ *unmatch_a; ///< List of unmatched elements from input A (the pointers are either RzAnalysisBlock or RzAnalysisFunction)
RzList /*<void *>*/ *unmatch_b; ///< List of unmatched elements from input B (the pointers are either RzAnalysisBlock or RzAnalysisFunction)
} RzAnalysisMatchResult;
#define RZ_ANALYSIS_SIMILARITY_THRESHOLD (0.5)
#define RZ_ANALYSIS_SIMILARITY_TYPE(sim) \
(sim < RZ_ANALYSIS_SIMILARITY_THRESHOLD ? RZ_ANALYSIS_SIMILARITY_UNLIKE : (sim >= 1.0 ? RZ_ANALYSIS_SIMILARITY_COMPLETE : RZ_ANALYSIS_SIMILARITY_PARTIAL))
#define RZ_ANALYSIS_SIMILARITY_TYPE_STR(sim) \
(sim < RZ_ANALYSIS_SIMILARITY_THRESHOLD ? RZ_ANALYSIS_SIMILARITY_UNLIKE_STR : (sim >= 1.0 ? RZ_ANALYSIS_SIMILARITY_COMPLETE_STR : RZ_ANALYSIS_SIMILARITY_PARTIAL_STR))
RZ_API double rz_analysis_similarity_basic_block(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisBlock *bb_a, RZ_NONNULL RzAnalysisBlock *bb_b);
RZ_API double rz_analysis_similarity_function(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn_a, RZ_NONNULL RzAnalysisFunction *fcn_b);
RZ_API double rz_analysis_similarity_basic_block_2(RZ_NONNULL RzAnalysis *analysis_a, RZ_NONNULL RzAnalysisBlock *bb_a, RZ_NONNULL RzAnalysis *analysis_b, RZ_NONNULL RzAnalysisBlock *bb_b);
RZ_API double rz_analysis_similarity_function_2(RZ_NONNULL RzAnalysis *analysis_a, RZ_NONNULL RzAnalysisFunction *fcn_a, RZ_NONNULL RzAnalysis *analysis_b, RZ_NONNULL RzAnalysisFunction *fcn_b);
RZ_API RZ_OWN RzAnalysisMatchResult *rz_analysis_match_basic_blocks(RZ_NONNULL RzAnalysisFunction *fcn_a, RZ_NONNULL RzAnalysisFunction *fcn_b, RZ_NONNULL RzAnalysisMatchOpt *opt);
RZ_API RZ_OWN RzAnalysisMatchResult *rz_analysis_match_functions(RzList /*<RzAnalysisFunction *>*/ *list_a, RzList /*<RzAnalysisFunction *>*/ *list_b, RZ_NONNULL RzAnalysisMatchOpt *opt);
RZ_API bool rz_analysis_function_eq(RZ_NONNULL RzAnalysisFunction *fcn_a, RZ_NONNULL RzAnalysisFunction *fcn_b);
RZ_API void rz_analysis_match_result_free(RZ_NULLABLE RzAnalysisMatchResult *result);
/* value.c */
RZ_API RzAnalysisValue *rz_analysis_value_new(void);
RZ_API RzAnalysisValue *rz_analysis_value_copy(RzAnalysisValue *ov);
RZ_API char *rz_analysis_value_to_string(RzAnalysisValue *value);
RZ_API ut64 rz_analysis_value_to_ut64(RzAnalysis *analysis, RzAnalysisValue *val);
RZ_API int rz_analysis_value_set_ut64(RzAnalysis *analysis, RzAnalysisValue *val, ut64 num);
#define rz_analysis_value_free free
RZ_API RzAnalysisCond *rz_analysis_cond_new(void);
RZ_API RzAnalysisCond *rz_analysis_cond_new_from_op(RzAnalysisOp *op);
RZ_API void rz_analysis_cond_fini(RzAnalysisCond *c);
RZ_API void rz_analysis_cond_free(RzAnalysisCond *c);
RZ_API char *rz_analysis_cond_to_string(RzAnalysisCond *cond);
RZ_API int rz_analysis_cond_eval(RzAnalysis *analysis, RzAnalysisCond *cond);
RZ_API RzAnalysisCond *rz_analysis_cond_new_from_string(const char *str);
/* jmptbl */
RZ_API bool rz_analysis_jmptbl(RzAnalysis *analysis, RzAnalysisFunction *fcn, RzAnalysisBlock *block, ut64 jmpaddr, ut64 table, ut64 tablesize, ut64 default_addr, RzStackAddr sp);
typedef struct rz_jmptable_params_t {
ut64 jmp_address; ///< Address of the jump instruction
st64 case_shift; ///< Shift that is added to get the real number of the case.
ut64 jmptbl_loc; ///< Address of the jump table
ut64 casetbl_loc; ///< Address of the indirect case table
ut64 jmptbl_off; ///< Base of the jump table
ut64 entry_size; ///< Size in bytes of each case entry inside the jump table
ut64 table_count; ///< Count of cases inside the jump table
ut64 default_case; ///< Code address of the default case of the switch
RzStackAddr sp; ///< Value of the stack pointer after the jump instruction is executed
RzVector /*<RzAnalysisTaskItem>*/ *tasks; /// RzVector of RzAnalysisTaskItem to add new tasks to
} RzAnalysisJmpTableParams;
RZ_API bool rz_analysis_get_delta_jmptbl_info(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, ut64 jmp_address, ut64 lea_address, RZ_NONNULL RzAnalysisJmpTableParams *params);
RZ_API bool rz_analysis_get_jmptbl_info(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisBlock *block, ut64 jmp_address, RZ_NONNULL RzAnalysisJmpTableParams *params);
RZ_API bool rz_analysis_walkthrough_jmptbl(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisBlock *block, RZ_NONNULL RzAnalysisJmpTableParams *params);
RZ_API bool rz_analysis_walkthrough_casetbl(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisBlock *block, RZ_NONNULL RzAnalysisJmpTableParams *params);
RZ_API bool rz_analysis_walkthrough_arm_jmptbl_style(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisBlock *block, RZ_NONNULL RzAnalysisJmpTableParams *params);
RZ_API bool rz_analysis_walkthrough_arm_thumb1_case_uqi_table(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *fcn, RZ_NONNULL RzAnalysisBlock *block, RZ_NONNULL RzAnalysisJmpTableParams *params);
/* reflines.c */
RZ_API RZ_OWN RzPVector /*<RzAnalysisRefline *>*/ *rz_analysis_reflines_get(RZ_NONNULL RzAnalysis *analysis, ut64 addr, RZ_NONNULL const ut8 *buf, ut64 len, int nlines, int linesout, int linescall);
RZ_API bool rz_analysis_reflines_middle(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const RzPVector /*<RzAnalysisRefline *>*/ *reflines, ut64 addr, int len);
RZ_API RzAnalysisRefStr *rz_analysis_reflines_str(void *core, ut64 addr, int opts);
RZ_API void rz_analysis_reflines_str_free(RzAnalysisRefStr *refstr);
RZ_API RZ_OWN RzList /*<RzAnalysisVar *>*/ *rz_analysis_var_list(RZ_NONNULL RzAnalysisFunction *fcn, RzAnalysisVarStorageType kind);
// calling conventions API
RZ_API bool rz_analysis_cc_exist(RzAnalysis *analysis, const char *convention);
RZ_API void rz_analysis_cc_del(RzAnalysis *analysis, const char *name);
RZ_API bool rz_analysis_cc_set(RzAnalysis *analysis, const char *expr);
RZ_API char *rz_analysis_cc_get(RzAnalysis *analysis, const char *name);
RZ_API const char *rz_analysis_cc_arg(RzAnalysis *analysis, const char *convention, int n);
RZ_API const char *rz_analysis_cc_self(RzAnalysis *analysis, const char *convention);
RZ_API void rz_analysis_cc_set_self(RzAnalysis *analysis, const char *convention, const char *self);
RZ_API const char *rz_analysis_cc_error(RzAnalysis *analysis, const char *convention);
RZ_API void rz_analysis_cc_set_error(RzAnalysis *analysis, const char *convention, const char *error);
RZ_API int rz_analysis_cc_max_arg(RzAnalysis *analysis, const char *cc);
RZ_API const char *rz_analysis_cc_ret(RzAnalysis *analysis, const char *convention);
RZ_API RzStackAddr rz_analysis_cc_shadow_store(RzAnalysis *analysis, const char *convention);
RZ_API const char *rz_analysis_cc_default(RzAnalysis *analysis);
RZ_API void rz_analysis_set_cc_default(RzAnalysis *analysis, const char *convention);
RZ_API const char *rz_analysis_syscc_default(RzAnalysis *analysis);
RZ_API void rz_analysis_set_syscc_default(RzAnalysis *analysis, const char *convention);
RZ_API const char *rz_analysis_cc_func(RzAnalysis *analysis, const char *func_name);
RZ_API RzList /*<char *>*/ *rz_analysis_calling_conventions(RzAnalysis *analysis);
typedef struct rz_analysis_data_t {
ut64 addr;
int type;
ut64 ptr;
char *str;
int len;
ut8 *buf;
ut8 sbuf[8];
} RzAnalysisData;
typedef enum {
RZ_ANALYSIS_DATA_KIND_UNKNOWN = 0,
RZ_ANALYSIS_DATA_KIND_INVALID,
RZ_ANALYSIS_DATA_KIND_CODE,
RZ_ANALYSIS_DATA_KIND_STRING,
RZ_ANALYSIS_DATA_KIND_DATA,
} RzAnalysisDataKind;
RZ_API RZ_OWN RzAnalysisData *rz_analysis_data(RZ_NONNULL RzAnalysis *analysis, ut64 addr, RZ_NONNULL const ut8 *buf, size_t size, int wordsize);
RZ_API RzAnalysisDataKind rz_analysis_data_kind(RZ_NONNULL RzAnalysis *a, ut64 addr, RZ_NONNULL const ut8 *buf, size_t len);
RZ_API RzAnalysisData *rz_analysis_data_new(ut64 addr, RzAnalysisDataInfoType type, ut64 n, const ut8 *buf, int len);
RZ_API void rz_analysis_data_free(RZ_NULLABLE RzAnalysisData *d);
#include <rz_cons.h>
RZ_API char *rz_analysis_data_to_string(RzAnalysisData *d, RzConsPrintablePalette *pal);
/* meta
*
* Meta uses Condret's Klemmbaustein Priciple, i.e. intervals are defined inclusive/inclusive.
* A meta item from 0x42 to 0x42 has a size of 1. Items with size 0 do not exist.
* Meta items are allowed to overlap and the internal data structure allows for multiple meta items
* starting at the same address.
* Meta items are saved in an RzIntervalTree. To access the interval of an item, use the members of RzIntervalNode.
*/
static inline ut64 rz_meta_item_size(ut64 start, ut64 end) {
// meta items use inclusive/inclusive intervals
return end - start + 1;
}
static inline ut64 rz_meta_node_size(RzIntervalNode *node) {
rz_return_val_if_fail(node, 0);
return rz_meta_item_size(node->start, node->end);
}
static inline ut64 rz_meta_node_start(RzIntervalNode *node) {
rz_return_val_if_fail(node, 0);
return node->start;
}
// Set a meta item at addr with the given contents in the current space.
// If there already exists an item with this type and space at addr (regardless of its size) it will be overwritten.
RZ_API bool rz_meta_set(RzAnalysis *a, RzAnalysisMetaType type, ut64 addr, ut64 size, const char *str);
RZ_DEPRECATE RZ_API char rz_meta_type_as_char(RzAnalysisMetaType type);
// Same as rz_meta_set() but also sets the subtype.
RZ_API bool rz_meta_set_with_subtype(RzAnalysis *m, RzAnalysisMetaType type, int subtype, ut64 addr, ut64 size, const char *str);
// Delete all meta items in the current space that intersect with the given interval.
// If size == UT64_MAX, everything in the current space will be deleted.
RZ_API void rz_meta_del(RzAnalysis *a, RzAnalysisMetaType type, ut64 addr, ut64 size);
// Same as rz_meta_set() with a size of 1.
RZ_API bool rz_meta_set_string(RzAnalysis *a, RzAnalysisMetaType type, ut64 addr, RZ_NULLABLE const char *s);
// Convenience function to get the str content of the item at addr with given type in the current space.
RZ_API const char *rz_meta_get_string(RzAnalysis *a, RzAnalysisMetaType type, ut64 addr);
// Convenience function to add an RZ_META_TYPE_DATA item at the given addr in the current space.
RZ_API void rz_meta_set_data_at(RzAnalysis *a, ut64 addr, ut64 wordsz);
// Returns the item with given type that starts at addr in the current space or NULL. The size of this item optionally returned through size.
RZ_API RzAnalysisMetaItem *rz_meta_get_at(RzAnalysis *a, ut64 addr, RzAnalysisMetaType type, RZ_OUT RZ_NULLABLE ut64 *size);
// Returns the node for one meta item with the given type that contains addr in the current space or NULL.
// To get all the nodes, use rz_meta_get_all_in().
RZ_API RzIntervalNode *rz_meta_get_in(RzAnalysis *a, ut64 addr, RzAnalysisMetaType type);
// Returns all nodes for items starting at the given address in the current space.
RZ_API RzPVector /*<RzIntervalNode<RMetaItem> *>*/ *rz_meta_get_all_at(RzAnalysis *a, ut64 at);
// Returns all nodes for items with the given type containing the given address in the current space.
RZ_API RzPVector /*<RzIntervalNode<RMetaItem> *>*/ *rz_meta_get_all_in(RzAnalysis *a, ut64 at, RzAnalysisMetaType type);
// Returns all nodes for items with the given type intersecting the given interval in the current space.
RZ_API RzPVector /*<RzIntervalNode<RMetaItem> *>*/ *rz_meta_get_all_intersect(RzAnalysis *a, ut64 start, ut64 size, RzAnalysisMetaType type);
// Delete all meta items in the given space
RZ_API void rz_meta_space_unset_for(RzAnalysis *a, const RzSpace *space);
// Returns the number of meta items in the given space
RZ_API int rz_meta_space_count_for(RzAnalysis *a, const RzSpace *space);
// Shift all meta items by the given delta, for rebasing between different memory layouts.
RZ_API void rz_meta_rebase(RzAnalysis *analysis, ut64 diff);
// Calculate the total size covered by meta items of the given type.
RZ_API ut64 rz_meta_get_size(RzAnalysis *a, RzAnalysisMetaType type);
RZ_API const char *rz_meta_type_to_string(int type);
/* hints */
RZ_API void rz_analysis_hint_del(RzAnalysis *analysis, ut64 addr, ut64 size); // delete all hints that are contained within the given range, if size > 1, this operation is quite heavy!
RZ_API void rz_analysis_hint_clear(RzAnalysis *a);
RZ_API void rz_analysis_hint_free(RzAnalysisHint *h);
RZ_API void rz_analysis_hint_set_syntax(RzAnalysis *a, ut64 addr, const char *syn);
RZ_API void rz_analysis_hint_set_type(RzAnalysis *a, ut64 addr, int type);
RZ_API void rz_analysis_hint_set_jump(RzAnalysis *a, ut64 addr, ut64 jump);
RZ_API void rz_analysis_hint_set_fail(RzAnalysis *a, ut64 addr, ut64 fail);
RZ_API void rz_analysis_hint_set_newbits(RzAnalysis *a, ut64 addr, int bits);
RZ_API void rz_analysis_hint_set_nword(RzAnalysis *a, ut64 addr, int nword);
RZ_API void rz_analysis_hint_set_offset(RzAnalysis *a, ut64 addr, const char *typeoff);
RZ_API void rz_analysis_hint_set_immbase(RzAnalysis *a, ut64 addr, int base);
RZ_API void rz_analysis_hint_set_enum(RzAnalysis *a, ut64 addr, const char *enum_name);
RZ_API void rz_analysis_hint_set_size(RzAnalysis *a, ut64 addr, ut64 size);
RZ_API void rz_analysis_hint_set_opcode(RzAnalysis *a, ut64 addr, const char *str);
RZ_API void rz_analysis_hint_set_esil(RzAnalysis *a, ut64 addr, const char *str);
RZ_API void rz_analysis_hint_set_pointer(RzAnalysis *a, ut64 addr, ut64 ptr);
RZ_API void rz_analysis_hint_set_ret(RzAnalysis *a, ut64 addr, ut64 val);
RZ_API void rz_analysis_hint_set_high(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_set_stackframe(RzAnalysis *a, ut64 addr, ut64 size);
RZ_API void rz_analysis_hint_set_val(RzAnalysis *a, ut64 addr, ut64 v);
RZ_API void rz_analysis_hint_set_arch(RzAnalysis *a, ut64 addr, RZ_NULLABLE const char *arch); // arch == NULL => use global default
RZ_API void rz_analysis_hint_set_bits(RzAnalysis *a, ut64 addr, int bits); // bits == NULL => use global default
RZ_API void rz_analysis_hint_unset_val(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_high(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_immbase(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_enum(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_nword(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_size(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_type(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_esil(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_opcode(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_syntax(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_pointer(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_ret(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_offset(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_jump(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_fail(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_newbits(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_stackframe(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_arch(RzAnalysis *a, ut64 addr);
RZ_API void rz_analysis_hint_unset_bits(RzAnalysis *a, ut64 addr);
RZ_API RZ_NULLABLE const RzVector /*<const RzAnalysisAddrHintRecord>*/ *rz_analysis_addr_hints_at(RzAnalysis *analysis, ut64 addr);
typedef bool (*RzAnalysisAddrHintRecordsCb)(ut64 addr, const RzVector /*<const RzAnalysisAddrHintRecord>*/ *records, void *user);
RZ_API void rz_analysis_addr_hints_foreach(RzAnalysis *analysis, RzAnalysisAddrHintRecordsCb cb, void *user);
typedef bool (*RzAnalysisArchHintCb)(ut64 addr, RZ_NULLABLE const char *arch, void *user);
RZ_API void rz_analysis_arch_hints_foreach(RzAnalysis *analysis, RzAnalysisArchHintCb cb, void *user);
typedef bool (*RzAnalysisBitsHintCb)(ut64 addr, int bits, void *user);
RZ_API void rz_analysis_bits_hints_foreach(RzAnalysis *analysis, RzAnalysisBitsHintCb cb, void *user);
// get the hint-specified arch value to be considered at addr
// hint_addr will optionally be set to the address where the hint that specifies this arch is placed or UT64_MAX
// if there is no hint affecting addr.
RZ_API RZ_NULLABLE RZ_BORROW const char *rz_analysis_hint_arch_at(RzAnalysis *analysis, ut64 addr, RZ_NULLABLE ut64 *hint_addr);
// get the hint-specified bits value to be considered at addr
// hint_addr will optionally be set to the address where the hint that specifies this arch is placed or UT64_MAX
// if there is no hint affecting addr.
RZ_API int rz_analysis_hint_bits_at(RzAnalysis *analysis, ut64 addr, RZ_NULLABLE ut64 *hint_addr);
RZ_API RzAnalysisHint *rz_analysis_hint_get(RzAnalysis *analysis, ut64 addr); // accumulate all available hints affecting the given address
/* switch.c APIs */
RZ_API RzAnalysisSwitchOp *rz_analysis_switch_op_new(ut64 addr, ut64 min_val, ut64 max_val, ut64 def_val);
RZ_API void rz_analysis_switch_op_free(RzAnalysisSwitchOp *swop);
RZ_API RzAnalysisCaseOp *rz_analysis_switch_op_add_case(RzAnalysisSwitchOp *swop, ut64 addr, ut64 value, ut64 jump);
/* cycles.c */
RZ_API RzAnalysisCycleFrame *rz_analysis_cycle_frame_new(void);
RZ_API void rz_analysis_cycle_frame_free(RzAnalysisCycleFrame *cf);
/* labels */
RZ_API ut64 rz_analysis_function_get_label(RzAnalysisFunction *fcn, const char *name);
RZ_API const char *rz_analysis_function_get_label_at(RzAnalysisFunction *fcn, ut64 addr);
RZ_API bool rz_analysis_function_set_label(RzAnalysisFunction *fcn, const char *name, ut64 addr);
RZ_API bool rz_analysis_function_delete_label(RzAnalysisFunction *fcn, const char *name);
RZ_API bool rz_analysis_function_delete_label_at(RzAnalysisFunction *fcn, ut64 addr);
/* limits */
RZ_API void rz_analysis_set_limits(RZ_NONNULL RzAnalysis *analysis, ut64 from, ut64 to);
RZ_API void rz_analysis_get_limits(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE ut64 *from, RZ_NULLABLE ut64 *to);
RZ_API bool rz_analysis_is_within_limits(RZ_NONNULL RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_is_beyond_limits(RZ_NONNULL RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_has_valid_limits(RZ_NONNULL RzAnalysis *analysis);
#define rz_analysis_unset_limits(analysis) rz_analysis_set_limits(analysis, UT64_MAX, UT64_MAX)
/* no-return stuff */
RZ_API bool rz_analysis_noreturn_add(RzAnalysis *analysis, const char *name, ut64 addr);
RZ_API bool rz_analysis_noreturn_drop(RzAnalysis *analysis, const char *expr);
RZ_API bool rz_analysis_noreturn_at_addr(RzAnalysis *analysis, ut64 addr);
RZ_API bool rz_analysis_noreturn_at(RzAnalysis *analysis, ut64 addr);
RZ_API RzList /*<char *>*/ *rz_analysis_noreturn_functions(RzAnalysis *analysis);
/* vtables */
typedef struct {
RzAnalysis *analysis;
RzAnalysisCPPABI abi;
ut8 word_size;
bool (*read_addr)(RzAnalysis *analysis, ut64 addr, ut64 *buf);
} RVTableContext;
typedef struct vtable_info_t {
ut64 saddr; // starting address
RzVector /*<RVTableMethodInfo>*/ methods;
} RVTableInfo;
typedef struct vtable_method_info_t {
ut64 addr; // addr of the function
ut64 vtable_offset; // offset inside the vtable
} RVTableMethodInfo;
RZ_API void rz_analysis_vtable_info_free(RVTableInfo *vtable);
RZ_API ut64 rz_analysis_vtable_info_get_size(RVTableContext *context, RVTableInfo *vtable);
RZ_API bool rz_analysis_vtable_begin(RzAnalysis *analysis, RVTableContext *context);
RZ_API RVTableInfo *rz_analysis_vtable_parse_at(RVTableContext *context, ut64 addr);
RZ_API RzList /*<RVTableInfo *>*/ *rz_analysis_vtable_search(RVTableContext *context);
RZ_API void rz_analysis_list_vtables(RzAnalysis *analysis, RzOutputMode mode);
/* rtti */
RZ_API char *rz_analysis_rtti_msvc_demangle_class_name(RVTableContext *context, const char *name);
RZ_API void rz_analysis_rtti_msvc_print_complete_object_locator(RVTableContext *context, ut64 addr, int mode);
RZ_API void rz_analysis_rtti_msvc_print_type_descriptor(RVTableContext *context, ut64 addr, int mode);
RZ_API void rz_analysis_rtti_msvc_print_class_hierarchy_descriptor(RVTableContext *context, ut64 addr, int mode);
RZ_API void rz_analysis_rtti_msvc_print_base_class_descriptor(RVTableContext *context, ut64 addr, int mode);
RZ_API bool rz_analysis_rtti_msvc_print_at_vtable(RVTableContext *context, ut64 addr, RzOutputMode mode, bool strict);
RZ_API void rz_analysis_rtti_msvc_recover_all(RVTableContext *vt_context, RzList /*<RVTableInfo *>*/ *vtables);
RZ_API void rz_analysis_rtti_swift(RzAnalysis *analysis);
RZ_API char *rz_analysis_rtti_itanium_demangle_class_name(RVTableContext *context, const char *name);
RZ_API bool rz_analysis_rtti_itanium_print_at_vtable(RVTableContext *context, ut64 addr, RzOutputMode mode);
RZ_API void rz_analysis_rtti_itanium_recover_all(RVTableContext *vt_context, RzList /*<RVTableInfo *>*/ *vtables);
RZ_API void rz_analysis_no_rtti_analysis(RZ_NONNULL RVTableContext *context, RZ_NONNULL RzList /*<RVTableInfo *>*/ *vtables);
RZ_API char *rz_analysis_rtti_demangle_class_name(RzAnalysis *analysis, const char *name);
RZ_API void rz_analysis_rtti_print_at_vtable(RzAnalysis *analysis, ut64 addr, RzOutputMode mode);
RZ_API void rz_analysis_rtti_print_all(RzAnalysis *analysis, RzOutputMode mode);
RZ_API void rz_analysis_rtti_recover_all(RzAnalysis *analysis);
RZ_API RzList /*<RzSearchKeyword *>*/ *rz_analysis_preludes(RzAnalysis *analysis);
RZ_API bool rz_analysis_is_prelude(RzAnalysis *analysis, const ut8 *data, size_t len);
/* devirualize */
typedef struct rz_variable_book_t {
RzAnalysisFunction *function; ///< function to analyze
HtUP /*<ut64, RzVariable *>*/ *class_variables; ///< hash map of stack address and variables that store objects
RzList /*<CppVariable *>*/ *stack_variables; ///< list of all stack variables
RzList /*<CppVariable *>*/ *class_var_list; ///< list of all variables that store objects
} RzCppVariableBook;
/* classes */
typedef enum {
RZ_ANALYSIS_CLASS_METHOD_DEFAULT = 0,
RZ_ANALYSIS_CLASS_METHOD_VIRTUAL,
RZ_ANALYSIS_CLASS_METHOD_VIRTUAL_DESTRUCTOR,
RZ_ANALYSIS_CLASS_METHOD_DESTRUCTOR,
RZ_ANALYSIS_CLASS_METHOD_CONSTRUCTOR
} RzAnalysisMethodType;
typedef struct rz_analysis_method_t {
char *name;
char *real_name;
ut64 addr;
st64 vtable_offset; // >= 0 if method is virtual, else -1
RzAnalysisMethodType method_type;
} RzAnalysisMethod;
typedef struct rz_analysis_base_class_t {
char *id; // id to identify the class attr
ut64 offset; // offset of the base class inside the derived class
char *class_name;
} RzAnalysisBaseClass;
typedef struct rz_analysis_vtable_t {
char *id; // id to identify the class attr
ut64 offset; // offset inside the class
ut64 addr; // where the content of the vtable is
ut64 size; // size (in bytes) of the vtable
} RzAnalysisVTable;
typedef enum {
RZ_ANALYSIS_CLASS_ERR_SUCCESS = 0,
RZ_ANALYSIS_CLASS_ERR_CLASH,
RZ_ANALYSIS_CLASS_ERR_NONEXISTENT_ATTR,
RZ_ANALYSIS_CLASS_ERR_NONEXISTENT_CLASS,
RZ_ANALYSIS_CLASS_ERR_OTHER
} RzAnalysisClassErr;
RZ_API void rz_analysis_class_recover_from_rzbin(RzAnalysis *analysis);
RZ_API void rz_analysis_class_recover_all(RzAnalysis *analysis);
RZ_API RzAnalysisClassErr rz_analysis_class_create(RzAnalysis *analysis, const char *name);
RZ_API void rz_analysis_class_delete(RzAnalysis *analysis, const char *name);
RZ_API bool rz_analysis_class_exists(RzAnalysis *analysis, const char *name);
RZ_API RZ_OWN RzPVector /*<SdbKv *>*/ *rz_analysis_class_get_all(RzAnalysis *analysis, bool sorted);
RZ_API void rz_analysis_class_foreach(RzAnalysis *analysis, SdbForeachCallback cb, void *user);
RZ_API RzAnalysisClassErr rz_analysis_class_rename(RzAnalysis *analysis, const char *old_name, const char *new_name);
RZ_API void rz_analysis_class_method_fini(RZ_NULLABLE RzAnalysisMethod *meth);
RZ_API RzAnalysisClassErr rz_analysis_class_method_get(RzAnalysis *analysis, const char *class_name, const char *meth_name, RzAnalysisMethod *meth);
RZ_API RzAnalysisClassErr rz_analysis_class_method_get_by_addr(RzAnalysis *analysis, const char *class_name, ut64 addr, RzAnalysisMethod *method);
RZ_API RzVector /*<RzAnalysisMethod>*/ *rz_analysis_class_method_get_all(RzAnalysis *analysis, const char *class_name);
RZ_API RzAnalysisClassErr rz_analysis_class_method_set(RzAnalysis *analysis, const char *class_name, RzAnalysisMethod *meth);
RZ_API RzAnalysisClassErr rz_analysis_class_method_rename(RzAnalysis *analysis, const char *class_name, const char *old_meth_name, const char *new_meth_name);
RZ_API RzAnalysisClassErr rz_analysis_class_method_delete(RzAnalysis *analysis, const char *class_name, const char *meth_name);
RZ_API bool rz_analysis_class_method_exists(RzAnalysis *analysis, const char *class_name, const char *meth_name);
RZ_API bool rz_analysis_class_method_exists_by_addr(RzAnalysis *analysis, const char *class_name, ut64 addr);
RZ_API void rz_analysis_class_method_recover(RzAnalysis *analysis, RzBinClass *cls, RzList /*<RzBinSymbol *>*/ *methods);
RZ_API void rz_analysis_class_base_fini(RzAnalysisBaseClass *base);
RZ_API RzAnalysisClassErr rz_analysis_class_base_get(RzAnalysis *analysis, const char *class_name, const char *base_id, RzAnalysisBaseClass *base);
RZ_API RzVector /*<RzAnalysisBaseClass>*/ *rz_analysis_class_base_get_all(RzAnalysis *analysis, const char *class_name);
RZ_API RzAnalysisClassErr rz_analysis_class_base_set(RzAnalysis *analysis, const char *class_name, RzAnalysisBaseClass *base);
RZ_API RzAnalysisClassErr rz_analysis_class_base_delete(RzAnalysis *analysis, const char *class_name, const char *base_id);
RZ_API void rz_analysis_class_vtable_fini(RzAnalysisVTable *vtable);
RZ_API RzAnalysisClassErr rz_analysis_class_vtable_get(RzAnalysis *analysis, const char *class_name, const char *vtable_id, RzAnalysisVTable *vtable);
RZ_API RzVector /*<RzAnalysisVTable>*/ *rz_analysis_class_vtable_get_all(RzAnalysis *analysis, const char *class_name);
RZ_API RzAnalysisClassErr rz_analysis_class_vtable_set(RzAnalysis *analysis, const char *class_name, RzAnalysisVTable *vtable);
RZ_API RzAnalysisClassErr rz_analysis_class_vtable_delete(RzAnalysis *analysis, const char *class_name, const char *vtable_id);
RZ_API RzGraph /*<RzGraphNodeInfo *, None *>*/ *rz_analysis_class_get_inheritance_graph(RzAnalysis *analysis);
RZ_API RZ_OWN RzPVector /*<RzAnalysisVar *>*/ *rz_analysis_function_args(RzAnalysis *a, RzAnalysisFunction *fcn);
RZ_API RZ_OWN RzPVector /*<RzAnalysisVar *>*/ *rz_analysis_function_vars(RZ_NONNULL RzAnalysis *a, RZ_NONNULL RzAnalysisFunction *fcn);
RZ_API RZ_BORROW RzAnalysisVar *rz_analysis_function_get_arg_idx(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL RzAnalysisFunction *f, size_t index);
RZ_API RZ_OWN RzList /*<RzType *>*/ *rz_analysis_types_from_fcn(RzAnalysis *analysis, RzAnalysisFunction *fcn);
RZ_API RZ_OWN RzCallable *rz_analysis_function_derive_type(RzAnalysis *analysis, RzAnalysisFunction *f);
RZ_API bool rz_analysis_function_is_malloc(const RzAnalysisFunction *fcn);
/* PDB */
RZ_API RzType *rz_type_db_pdb_parse(const RzTypeDB *typedb, RzPdbTpiStream *stream, RzPdbTpiType *type);
RZ_API void rz_type_db_pdb_load(const RzTypeDB *typedb, const RzPdb *pdb);
/* LUAC */
RZ_API void rz_analysis_luac_integrate_functions(RzAnalysis *analysis);
/* DWARF */
RZ_API void rz_analysis_dwarf_preprocess_info(
RZ_NONNULL RZ_BORROW RzAnalysis *analysis,
RZ_NONNULL RZ_BORROW RzBinDWARF *dw);
RZ_API void rz_analysis_dwarf_process_info(RzAnalysis *analysis, RzBinDWARF *dw);
RZ_API void rz_analysis_dwarf_integrate_functions(RzAnalysis *analysis, RzFlag *flags);
RZ_API void rz_analysis_omf166_integrate_functions(RzAnalysis *analysis);
RZ_API RzAnalysisDebugInfo *rz_analysis_debug_info_new();
RZ_API void rz_analysis_debug_info_free(RzAnalysisDebugInfo *debuginfo);
/* serialize */
typedef void *RzSerializeAnalysisVarParser;
typedef void *RzSerializeAnalysisGlobalVarParser;
typedef struct {
RzAnalysis *analysis;
RzKeyParser *parser;
RzSerializeAnalysisVarParser var_parser;
RzKeyParser *storage_parser;
RzKeyParser *piece_parser;
} RzSerializeAnalysisFunctionLoadCtx;
RZ_API void rz_serialize_analysis_case_op_save(RZ_NONNULL PJ *j, RZ_NONNULL RzAnalysisCaseOp *op);
RZ_API void rz_serialize_analysis_switch_op_save(RZ_NONNULL PJ *j, RZ_NONNULL RzAnalysisSwitchOp *op);
RZ_API RzAnalysisSwitchOp *rz_serialize_analysis_switch_op_load(RZ_NONNULL const RzJson *json);
RZ_API void rz_serialize_analysis_blocks_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API void rz_serialize_analysis_global_var_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *a);
RZ_API RzSerializeAnalysisGlobalVarParser rz_serialize_analysis_global_var_parser_new(void);
RZ_API void rz_serialize_analysis_global_var_parser_free(RzSerializeAnalysisGlobalVarParser parser);
RZ_API bool rz_serialize_analysis_global_var_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
/**
* RzAnalysis must not contain any blocks when calling this function!
* All loaded blocks will have a ref of 1 after this function and should be unrefd once after loading functions.
*/
RZ_API bool rz_serialize_analysis_blocks_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API RzSerializeAnalysisVarParser rz_serialize_analysis_var_parser_new(void);
RZ_API void rz_serialize_analysis_var_parser_free(RzSerializeAnalysisVarParser parser);
RZ_API RzSerializeAnalysisVarParser rz_serialize_analysis_var_storage_parser_new(void);
RZ_API RZ_OWN RzAnalysisVar *rz_serialize_analysis_var_load(
RZ_NONNULL RzSerializeAnalysisFunctionLoadCtx *ctx,
RZ_NONNULL RzAnalysisFunction *fcn,
RZ_NONNULL const RzJson *json);
RZ_API bool rz_serialize_analysis_var_storage_load(
RZ_NONNULL RzSerializeAnalysisFunctionLoadCtx *ctx,
RZ_NONNULL const RzJson *json,
RZ_NONNULL RZ_BORROW RZ_OUT RzAnalysisVarStorage *storage);
RZ_API void rz_serialize_analysis_functions_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_functions_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_function_noreturn_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_function_noreturn_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_xrefs_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_xrefs_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_meta_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_meta_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_hints_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_hints_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_classes_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_classes_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_types_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_types_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_sign_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_sign_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_imports_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_imports_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_cc_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_cc_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
RZ_API void rz_serialize_analysis_save(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis);
RZ_API bool rz_serialize_analysis_load(RZ_NONNULL Sdb *db, RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzSerializeResultInfo *res);
#endif
#ifdef __cplusplus
}
#endif
#endif // RZ_ANALYSIS_H