Checks for the presence of a decompiler plugin for the database. Note: The decompiler must be loaded by the XML Exporter plu

Replaces a special XML character with an entity string. Args: ch: String containing the character to check.

Determines if any address in a segment contains a value. Args: seg: IDA segment object Retu

Determines if stack frame contains any parameters or local variables. Args: sframe: IDA stack frame for a functi

Frees memory and closes message box and XML file at termination.

Closes the binary data file for the XML Exporter.

Closes the XML data file for the XML Exporter.

清理 .asm 文件

清理 IDB 的临时文件

自动检测体系结构

自动检测 ELF 文件的体系结构

自动检测 PE 文件的体系结构

Displays the elapsed processing time for XML elements. Args: element: XML element object value containing the el

Exports marked location descriptions as BOOKMARK elements.

Exports block and end-of-line comments entered in the decompiler interface.

Exports the address ranges of code sequences as CODE_BLOCK(s) with START and END address attributes.

Exports all comments in the IDA database as <COMMENT> elements.

Exports the data items in the database as <DEFINED_DATA> elements.

Exports the structures and enums in IDA database.

Exports a member of an enum. Args: cid: Integer representing id of enum member bf: Boolean indicates if a bit

Exports the members of an enum. This function can only be called by IDA versions newer than 6.3 Args: e

Exports the enum reference for an operand at an address. Args: addr: Integer representing the instruction addres

Finds and exports enum references at an address. Args: addr: Integer representing the instruction address.

Exports enumerations.

Exports information about all functions.

Exports user-entered "manual instruction" at an address. Args: addr: Integer representing instruction address.

Exports user-entered "manual operands" at an address. Args: addr: Integer representing instruction address.

Exports markup for instructions and data items including references and manual instructions and operands.

Exports the members of a structure or union. Args: s: IDA structure/union instance

Exports the binary memory contents in the database. A MEMORY_CONTENTS element is generated for each contiguous address

Exports information about all memory blocks in the database. A MEMORY_SECTION is generated for each block (segment). If the

Exports the memory reference for operand at the address. Args: addr: Integer representing the instruction addres

Exports the memory references for any operands at the address. Args: addr: Integer representing the instruction

Exports segment information as a MEMORY_SECTIONS element. Args: seg: IDA segment instance binfilenam

Exports basic information about the program as the PROGRAM, INFO_SOURCE, PROCESSOR, and COMPILER elements.

Exports entry points for the program.

Exports segment register value ranges.

Export information about a function stack frame including variables allocated on the stack. Args: functi

Exports references to stack variables at the address. Args: addr: Integer containing instruction address.

Exports the stack variables (parameters and locals) in a stack frame. Args: function: IDA function instance.

Exports information about all structures and unions.

Exports user-defined and non-default names as SYMBOL elements.

Exports a user-specified memory reference at the address. Args: addr: Integer representing the instruction addre

Exports the IDA database to a XML PROGRAM document file.

find child expression in cfunc_t starting at cexpr_t e cfunc: cfunc_t e: cexpr_t q: lambda/function: f(cfunc_t, citem_t) 返回布尔值 retur

find child item in cfunc_t starting at citem_t i cfunc: cfunc_t i: citem_t q: lambda/function: f(cfunc_t, citem_t) 返回布尔值 return: que

Determines if any memory blocks (segments) are overlays. A segment is an overlay if it translates to the same logical

获取定长参数函数的寄存器信息

Returns a string representing the address. The representation is typically a hex string of the address, but may incl

获取某函数执行后的返回值 # TODO 添加参数的变化

获取所有引用到addr的地址

获取某函数执行前的寄存器信息

在当前反编译窗口中创建当前函数的 ctree 图

返回临时函数集合

Returns the data item value at an address based on its size. Args: addr: Integer representing a program address.

Returns the datatype at an address. The type could be a basic type (byte, word, dword, etc.), a structure, an array,

Returns the display format of a data item based on its flags. Args: flags: Integer representing IDA item flags

寻找下一个赋值来源寄存器 返回寄存器名或None

获取已回溯节点数

Displays the options menu and retrieves the option settings.

Displays the options menu and retrieves the option settings.

Processes ADDRESS_RANGE element. Args: address_range: XML element object containing start and end address

Processes a BIT_MASK element as an enum bitmask member. Args: bitmask: XML element object representing the IDA e

Processes an ENUM_ENTRY by creating a member in the enumeration. Args: enum_entry: XML element containing the me

Processes EQUATE element as member of an enumeration. Args: enum_entry: XML element containing the equate name a

Processes REGULAR_CMT and REPEATABLE_CMT elements for members. Args: element: XML element object containing a RE

Processes MEMORY_CONTENTS to load data for a memory block. Args: memory_contents: MEMORY_CONTENTS XML element.

Defines a register variable for a function. Args: register_var: REGISTER_VAR XML element. Contai

Defines a stack frame for a function. Args: stack_frame: STACK_FRAME element with STACK_VAR child elements.

Processes STACK_VAR element. Args: stack_var: STACK_VAR XML element. Stack variables are cr

初始化基本块CFG