+ iXRt^RIHt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI!t!^RI"t"^RI#t#^RI$t$^RI%t%^RI&t&^RI't']PPR8Ht)])'dRMRt*!RR]+4t,/t-Rt.Rt/R t0]PPt(]Pbt1]!Pdt2] Pf!]4R R R3/4]Pjt5]Plt6R t7R t8Rt9]Ptt:]Pvt;]Pxt<]Pzt=]P|t>Rt?Rt@RtARtBRtC]PtD]PtE]PtF]PtG]PtH]PtI]PtJ]I]H,tKRtLRtMRtNRtORtP]PtQ]PtR]PtS]PtT]PtU]PtV]PtW]PtX]PtY]PtZ]Pt[]Pt\]Pt]]Pt^]Pt_]Pt`]Pta]Ptb]Ptc]Ptd]Pte]Ptf]Ptg]Pth]Pti]PtjRtkRtlRtmRtnRtoRtpRtqR trR!tsR"ttR#tuR$tvR%twR&txR'tyR(tzR)t{R*t|R+t}R,t~R-tR.tR/tR0t]EPR,t]EPR,t]EP R,t]EP R,t]EPR,t]EPR,t]EPR,t]EPR,t]EPR,t]EPR,t]EPR,t]EPR,t]EPR,tR1tR2tR3tR4tR5tR6tR7tR8tR9tR:tR;tR<t]EP8R,t]EP:R,t]EP<R,t]EP>R,t]EP@t]EPBt]EPDt]EPFt]EPHt]EPJt]EPLt]EPNt]EPPt]EPRtR=tR>tR?tR@tRAtRBtRCtRDtREtRFtRGtRHtRItRJtRKtRLtRMtRNtROt^tERtERtERt]EPt]EPt]EPt]EPtRPtRQtERRRlt]EPtERRSlt]EPtRTtRUt]EPt] EPtRVt]EPtERRWlt]EP3RXlt]EPt]EPt]EPt]EPt]EPt]EPt]EPt]EPt]EPt]EPt]EPt]EPtRYtRZt]EPtR[tR\tR]tR^tR_tR`tRatRbtRctRdtRet]EPt]EPtRft]EPt]EPt]EPt]EPtRgt^t^t^t^t^t^t^t^ t^0t]EPt]EPEt]EPEt]EPEt]EPEtRhEt]EP Et]EP Et]EPEt]EPEt]EPEt ]EPEt ]EPEt ]EPEt ]EPEt ]EPEt^Et^ Et^EtRiEtRjEt]EP(Et]EP*Et]EP,Et]EP.Et]EP2EtRkEt]EP6EtRlEt]EP:EtRmEtRnEt]EP@Et ]EPBEt!]EPDEt"]EPFEt#]EPHEt$]EPJEt%]EPLEt&]EPNEt(]EPREt)]EPTEt*]EPVEt+]EPXEt,^Et-^Et.^Et/^Et0E].3RolEt1]EPdEt2]EPfEt3RpEt4]EPjEt5]EPlEt6]EPnEt7]EPpEt8]EPrEt9]EPtEt:RqEt;]EPxEt<]EPzEt=]EP|Et>]EP~Et?]EPEt@]EPEtA]EPEtB]EPEtC]EPEtD]EPEtE]EPEtF]EPEtG]EPEtH]EPEtIRrEtJRsEtKRtEtLRuEtMRvEtNRwEtORxEtP]EPEtQ]EPEtR]EPEtSRyEtT]EPEtU]EPEtV]EPEtWERRzlEtX]EPEtYR{EtZR|Et[R}Et\R~Et]REt^]EPEt`REta]EPEtb]EPEtc]EPEtd]EPEteREtfREtgREth]EPEtiREtj]EPEtkREtlREtmREtnREto]EPEtp]EPEtq](3RlEtrERRlEts]EPEtt]EPEtu]EPEtv]EPEtwREtxREty]EPEtz]EPEt{]EPEt|]EPEt}]EPEt~]EPEt]EPEt]EPEt]EPEt]EPEtERRlEtREtREt]EPEt]EPEtREtREtREtREt]EPEt]EPEt]EPEt]EP Et]EP"Et]EP$Et]EP&Et]EP(Et]EP*Et]EP,Et]EP.Et]EP0Et]EP2Et]EP4Et]EP*Et]EP,Et]EP.Et]EP0Et]EP2Et]EP4Et]EP,Et]EP.Et]EP0Et]EP2Et]EP4Et]EP4^,Et]EP*Et]EP,Et]EP.Et]EP0Et]EP2Et]EP4EtREt]EP\EtE]Et]EP`Et]EPbEt]EPdEt]EPfEt]EPhEt]EPjEt]EPlEt]EPnEt]EPpEt]EPrEt]EPtEt]EPvEt]EPxEt]EPzEt]EP|Et]EP~Et]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEtE]EtERE]3RlEtREt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEtREt^Et^Et^Et^Et^EtE]Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^ Et^ Et^ Et^ Et^ Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^Et^ Et^@Et^EtRiEt^Et^ Et^ EtREtE]!] .ERO4^ Et^ Et ^ Et ^Et ^Et ^Et ^Et^Et^Et^Et^Et^Et^EtE]Et^EtE]Et^Et^EtE]Et^EtE]Et^Et^Et^EtE]Et ^ Et!E]!Et"^!Et#E]#Et$^"Et%^#Et&^$Et'E]'Et(^%Et)E])Et*^&Et+^'Et,^(Et-^)Et.^)Et/^*Et0^+Et1^,Et2^-Et3E]3Et4^.Et5E]5Et6^/Et7E]7Et8^0Et9^1Et:^2Et;^3Et<^4Et=^5Et>^6Et?^7Et@^9EtA^EtB^EtC^EtD^EtE^EtF^EtG^EtH^EtI^:EtJ^;EtK^EtN^?EtO^@EtP^AEtQ^BEtRE]AEtSE]JEtTE]KEtUE]LEtVE]MEtWE]NEtXE]OEtYE]PEtZE]QEt[E]REt\^CEt]^DEt^/E]]] EP] EP3bE]] EP] EP3bE]] EP] EP3bE]^] EP] EP3bE]] EP] EP3bE]] EP] EP3bE] ] EP] EP3bE]7] EP] EP3bE]J] EP] EP3bE]N] EP] EP3bE]A] EP] EP3bE]L] EP] EP3bE]M] EP] EP3bE]K] EP] EP3bE]P] EP] EP3bE]R] EP] EP3bE]Q] EP] EP3b/E]O] EP] EP3bE]4] EP] EP3bE].] EP ] EP 3bE]] EP] EP3bE]@] EP] EP3bE]+] EP] EP3bE]] EP] EP3bE]] EP] EP 3bE]] EP"] EP$3bE]] EP&] EP(3bE]-] EP*] EP,3bE]1] EP.] EP03bE]] EP2] EP43bE]5] EP6] EP83bE],] EP:] EP<3bE])] EP>] EP@3bE]] EPB] EPD3bC/E]] EPF] EPH3bE]0] EPJ] EPL3bE]] EPN] EPP3bE]%] EPR] EPT3bE]] EPV] EPX3bE]] EPZ] EP\3bE]T] EP] EP3bE]&] EP^] EP`3bE]] EPb] EPd3bE]] EPf] EPh3bE]] EPj] EPl3bE]] EPn] EPp3bE]2] EPr] EPt3bE]9] EPv] EPx3bE]] EP] EP3bE]] EPz] EP|3bE]] EP~] EP3bC/E]!] EP] EP3bE]'] EP] EP3bE]] EP] EP3bE] ] EP] EP3bE] ] EP] EP3bE] ] EP] EP3bE]] EPz] EP|3bE]] EP] EP3bE] ] EP] EP3bE];] EP] EP3bE]:] EP] EP3bE]>] EP] EP3bE]?] EP] EP3bE]<] EP] EP3bE]=] EP] EP3bE]] EP] EP3bE]] EP] EP3bCE]#] EP] EP3E]] EP] EP3/CEtREtREt]EPEt]EPEt]EPEt]EPEt]EPEtREtREt]EPEtREtERRlEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt^Et^Et^Et^Et]EPEt]EPEtREtREt]EPEt]EPEtREtREtREtREtREtREt]EPEt ]EPEt ]EPEt ]EPEt ]EPEt ]EPEtREt]EP Et]EP"Et]EP$Et]EP&EtREtREtREtREt]EP0Et]EP2Et]EP4Et]EP6Et]EP8Et]EP:Et]EP<Et]EP>Et]EP@Et ]EPBEt!]EPDEt"REt#]EPHEt$]EPJEt%]EPLEt&]EPNEt']EPPEt(]EPREt)REt*REt+REt,REt-]EP\Et.]EP^Et/]EP`Et0]EPbEt1]EPdEt2]EPfEt3]EPhEt4]EPjEt5]EPlEt6]EPnEt7]EPpEt8]EPrEt9REt:REt;^Et<^Et=^Et>^Et?^Et@^EtA^EtB^EtC^EtD^ EtE^$EtF^(EtG^,EtH^0EtI^4EtJ^`EtK^dEtL])'d4^Et<^Et=^ Et>^(Et?^)Et@^*EtA^+EtB^,EtC^0EtD^8EtE^@EtF^HEtG^PEtH^XEtI^`EtJ^EtK^EtL/E]ERbE]?ERbE]@ERbE]AERbE]BERbE]CERbE]DERbE]EERbE]FERbE]GERbE]HERbE]IERbE]JERbE]KERbE]LERbEtM^EtN^EtO^EtP^EtQ^EtR^ EtSREtT^EtU^EtV^EtW^EtX^EtYEREtZEREt[EREt\EREt]EREt^EREt_EREt`EREtaEREtbEREtcEREtd]EPEte]EPEtg^Eth^Eti^Etj^Etk^Etl^Etm^Etn^ Eto] EPEtp] EPEtq] EPEtr] EPEts] EPEtt] EPEtu] EPEtv] EPEtw] EPEtx] EPEty] EPEtz] EPEt{] EPEt|] EPEt}] EPEt~] EPEt] EPEt] EPEt] EPEt] EPEt] EPEtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREt] EP0Et] EP2Et] EP4EtREtREtREtREt^Et^Et^Et^Et^Et^Et^Et^ Et^$Et^Et^Et])'d"^Et^Et^Et^Et^ Et^(Et^0Et^8Et^@Et^Et^ EtE]ERE]ERE]ERE]ERE]ERE]ERE]ERE]ERE]ERE]ERE]ER/ EtREt] EPXEt] EPZEt] EP\Et] EP^Et] EPbEt] EPdEt] EPfEt] EPhEt] EPjEt] EPlEt] EPnEt] EPpEt] EPrEt] EPtEt] EPvEtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREtREt] EPEtREtREtREtREtREtREtREtREt] EPEtREtREt] EPEt]EPEt]EPEt]EPEt]EPEt]EPEt]EPEt] EPEt] EPEtREt^ Et^Et^Et^Et^Et^Et^Et^Et^Et^ Et^ EtRuEtREt^Et^Et^Et^EtREtREtREtREt] EPEt]EPEt]EPEt]EPEtREtREtREtREtREtREtREtREtREtREtERRlEt REt REt REt REt REtREtERRlEtER^E] 3RlEtEREtEREtER^E] 3ERlEtEREtERERlEt^EtEREtERERlEtEREtEREtER EtER EtER EtER EtER Et EREt!EREt"EREt#EREt$EREt%EREt&EREt'EREt(EREt)ERERlEt*ERERlEt+ERERlEt,ERERlEt-EREt.ERERlEt/EREt0EREt1EREt2ER Et3ER!Et4ER"Et5ER#Et6ER$Et7ER%Et8ER&Et9ERER'lEt:ERER(lEt;ER)EtER,Et?ER-Et@]EPEtB]EPEtD!ER.ER/E]E4EtFE]F!4E]FEnGER0EtHER1EtIER2EtJER3EtKER4EtLER5EtMER6EtNER7EtOER8EtPER9EtQER:EtRER;EtSER<EtTER=EtUER>EtVER?EtWER@EtXERAEtYERBEtZERCEt[ERDEt\EREEt]]EPEt^]EPEt_]EPEt`]EPEta]EPEtb]EPEtcERFEtdERGEteERHEtfERIEtgE]gEthERJEtiERKEtjERLEtk^Etl^Etm^EtnE]m3ERMlEto]EPEtp]EPEtq]EPEtr]EPEts]EPEtt]EPEtu]EPEtv]EPEtw]EPEtxE]pEty^Etz^Et{^ Et|^0Et}^@Et~^PEtERNEt]E PEtEROEtERPEtERERQlEtERREt^Et^Et^Et^EtERSEtERTEtERUEt^Et^Et^Et^Et^Et^Et^ Et^@Et^EtRiEtRjEtRvEtERVEtRsEtERWEtERXEt]E P<EtERYEt]E P@Et]E PBEt]E PDEt]E PFEt]E PHEt]E PJEt]E PLEt]E PNEt]E PPEt]E PREt]E PTEt]E PVEt]E PXEt]E PZEt]E P\EtERZEtER[EtER\EtER]EtER^Et]E PhEt]E PjEt]E PlEt]E PnEt]E PpEtER_EtER`Et^Et^Et^Et^Et^EtEREtEREt^Et^Et^Et^Et^Et^Et^ Et^@Et^EtRiEtRjEtRvEtERVEtRsEt]E PEt]E PEt]E PEtEREt^Et^Et^Et^EtERaEtERbEtERcEtERdEtEReEtERfEtERgEtERhEtERiEtERjEtERkEtERlEtERmEtERnEtERoEt]E PEt^Et^Et^Et^Et^Et^@Et^EtRiEtRjEtRvEtERVEtRsEtERpEt^EtERWEtERpEtRuEt]E PEt]E PEt]E PEt]E PEt^Et^Et]E PEtERqEt]E PEtERrEtERsEt^Et^Et^Et^Et^Et ^Et ^Et E] E] ,Et ^Et ^Et^Et^Et^Et^Et^Et^ Et^@Et^EtRiEt^Et^Et^Et^Et^Et^EtERtEtERERulEt]E P@Et ]E PBEt!]E PDEt"]E PFEt#EREt$^Et%^Et&^Et'ERvEt(^Et)^Et*^Et+]E PXEt,]E PZEt-^Et.^Et/^Et0^Et1]E PdEt2]E PfEt3]E PhEt4]E PjEt5ERwEt6]E PnEt7]E PpEt8]E PrEt9]E PtEt:^Et;^Et<^Et=^Et>^Et?^Et@^EtA]E PEtB]E PEtC]E PEtE]E PEtG]E PEtI]E PEtK]E PEtL]E PEtM]E PEtNERxEtO^EtP^EtQ^EtRREtSERyEtTERzEtUER{EtVER|EtWER}EtXER~EtY.EtZR#(a` IDC compatibility module This file contains IDA built-in function declarations and internal bit definitions. Each byte of the program has 32-bit flags (low 8 bits keep the byte value). These 32 bits are used in get_full_flags/get_flags functions. This file is subject to change without any notice. Future versions of IDA may use other definitions. )print_functionNllc]tRt^HtRtRtR#)DeprecatedIDCErrorz) Exception for deprecated function calls N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r;C:\Users\user\Downloads\ida93sp2\portable_win\python\idc.pyrrHs  r rc bV\9d$\RV: RV: RV: R24R\V&R#R#)z NOTE: idc.z/ is deprecated due to signature confusion with z . Please use z insteadTN)#__warned_deprecated_proto_confusionprint)what alternatives&&r &__warn_once_deprecated_proto_confusionrOs3 66    59+D1 7r cW!9d9\WV,^,4'd\WV,^,4#RV,p\V4h)zf Internal function to generically get object attributes Do not use unless you know what you are doing Kattribute with offset %d not found, check the offset and report the problem)hasattrgetattrKeyError)objattrmapattroffserrormsgs&&& r _IDC_GetAttrrWsI wsH,=a,@AAsH-a011`ckkx  r cW!9daW,^,'d\RV,4h\WV,^,4'd\WV,^,V4#RV,p\V4h)zf Internal function to generically set object attributes Do not use unless you know what you are doing z%attribute with offset %d is read-onlyr)rrsetattr)rrrvaluers&&&& r _IDC_SetAttrr!csk   Q  BXMN N S(+A. / /3 1! 4e< <\_ggH 8 r MAXADDRc,\P!4#N)ida_idainf_get_privrange_start_earr r r'xs W??Ar c"V\,^8g#)FF_IVLFs&r has_valuer.sq6za/0r cV\,#)z Get byte value from flags Get value of byte provided that the byte is initialized. This macro works ok only for 8-bit byte machines. )MS_VALr,s&r byte_valuer1s Jr c*\\V44#)zIs the byte initialized?)r.get_full_flagseas&r is_loadedr6s ^B' ((r c*V\,\8H#r$)MS_CLSFF_CODEr,s&r is_coder:q6zg56r c*V\,\8H#r$)r8FF_DATAr,s&r is_datar>r;r c*V\,\8H#r$)r8FF_TAILr,s&r is_tailrAr;r c*V\,\8H#r$)r8FF_UNKr,s&r is_unknownrDsq6zf45r c"V\,^8g#r))r=r,s&r is_headrFq7{q01r c"V\,^8g#r))FF_FLOWr,s&r is_flowrJrGr c"V\,^8g#r))FF_LINEr,s&r isExtrarMa'ka/0r c"V\,^8g#r))FF_REFr,s&r isRefrQsa&ja/0r c"V\,^8g#r))FF_NAMEr,s&r hasNamerTrNr c*V\,\8H#r$) FF_ANYNAMErSr,s&r hasUserNamerWsa*n89r c*V\,\8g#r$)MS_0TYPEFF_0VOIDr,s&r is_defarg0r[q8|89r c*V\,\8g#r$)MS_1TYPEFF_1VOIDr,s&r is_defarg1r`r\r c*V\,\8H#r$)rYFF_0NUMDr,s&r isDec0rca(lx78r c*V\,\8H#r$)r^FF_1NUMDr,s&r isDec1rgrdr c*V\,\8H#r$)rYFF_0NUMHr,s&r isHex0rjrdr c*V\,\8H#r$)r^FF_1NUMHr,s&r isHex1rmrdr c*V\,\8H#r$)rYFF_0NUMOr,s&r isOct0rprdr c*V\,\8H#r$)r^FF_1NUMOr,s&r isOct1rsrdr c*V\,\8H#r$)rYFF_0NUMBr,s&r isBin0rvrdr c*V\,\8H#r$)r^FF_1NUMBr,s&r isBin1ryrdr c*V\,\8H#r$)rYFF_0OFFr,s&r is_off0r|q8|78r c*V\,\8H#r$)r^FF_1OFFr,s&r is_off1rr}r c*V\,\8H#r$)rYFF_0CHARr,s&r is_char0rr\r c*V\,\8H#r$)r^FF_1CHARr,s&r is_char1rr\r c*V\,\8H#r$)rYFF_0SEGr,s&r is_seg0rr}r c*V\,\8H#r$)r^FF_1SEGr,s&r is_seg1rr}r c*V\,\8H#r$)rYFF_0ENUMr,s&r is_enum0rr\r c*V\,\8H#r$)r^FF_1ENUMr,s&r is_enum1rr\r c*V\,\8H#r$)rYFF_0FOPr,s&r is_manual0r!h,7!:;r c*V\,\8H#r$)r^FF_1FOPr,s&r is_manual1rrr c*V\,\8H#r$)rYFF_0STROr,s&r is_stroff0rr\r c*V\,\8H#r$)r^FF_1STROr,s&r is_stroff1rr\r c*V\,\8H#r$)rYFF_0STKr,s&r is_stkvar0rr}r c*V\,\8H#r$)r^FF_1STKr,s&r is_stkvar1rr}r cP\V4;'dV\,\8H#r$)r>DT_TYPEFF_BYTEr,s&r is_byterGAJCCAKG+CDr cP\V4;'dV\,\8H#r$)r>rFF_WORDr,s&r is_wordrrr cP\V4;'dV\,\8H#r$)r>rFF_DWORDr,s&r is_dwordrWQZEEQ[X,EFr cP\V4;'dV\,\8H#r$)r>rFF_QWORDr,s&r is_qwordrrr cP\V4;'dV\,\8H#r$)r>rFF_OWORDr,s&r is_owordrrr cP\V4;'dV\,\8H#r$)r>rFF_TBYTEr,s&r is_tbyterrr cP\V4;'dV\,\8H#r$)r>rFF_FLOATr,s&r is_floatrGAJDDAKH+DEr cP\V4;'dV\,\8H#r$)r>r FF_DOUBLEr,s&r is_doublerGAJEEAKI+EFr cP\V4;'dV\,\8H#r$)r>r FF_PACKREALr,s&r is_pack_realrsWQZHHQ[[,HIr cP\V4;'dV\,\8H#r$)r>r FF_STRLITr,s&r is_strlitrsWQZFFQ[Y,FGr cP\V4;'dV\,\8H#r$)r>r FF_STRUCTr,s&r is_structrrr cP\V4;'dV\,\8H#r$)r>rFF_ALIGNr,s&r is_alignrrr c\R4hz%this function is not needed in PythonNotImplementedErrorvars&r value_is_stringr, 34[ \\r c\R4hrrrs&r value_is_longr-rr c\R4hrrrs&r value_is_floatr.rr c\R4hrrrs&r value_is_funcr/rr c\R4hrrrs&r value_is_pvoidr0rr c\R4hrrrs&r value_is_int64r1rr c"V^,V,#)z. Return value of expression: ((seg<<4) + off) r)segoffs&&r to_ear3s 1H r c\R4h)z;form() is deprecated. Use python string operations instead.r)formatargss&*r formr9 Z [[r c\R4h)z=substr() is deprecated. Use python string operations instead.r)sx1x2s&&&r substrr< \ ]]r c\R4h)z=strstr() is deprecated. Use python string operations instead.r)s1s2s&&r strstrr?rr c\R4h)z=strlen() is deprecated. Use python string operations instead.rrs&r strlenrBrr c\R4h)z0xtol() is deprecated. Use python long() instead.rrs&r xtolrE O PPr c.\P!V4#)z Convert address value to a string Return address in the form 'seg000:1234' (the same as in line prefixes) :param ea: address to format ) ida_kernwinea2strr4s&r atoarHs   b !!r c\R4h)z;ltoa() is deprecated. Use python string operations instead.r)nradixs&&r ltoarRrr c\R4h)z0atol() is deprecated. Use python long() instead.rrs&r atolrUrr c<V^8gQR4hV^8gQR4hW,p^W2,,^V,, pW,pV^8dY\V4FHpWSV,^, , ^,'dV^,^V,,pK?V^,pKJ MW\V)4FGpWS, ^,'d'V^, ^W2,^, ,,pK>V^, pKI WV,, WT,,pV#)a_ Rotate a value to the left (or right) :param value: value to rotate :param count: number of times to rotate. negative counter means rotate to the right :param nbits: number of bits to rotate :param offset: offset of the first bit to rotate :returns: the value with the specified field rotated all other bits are not modified zoffset must be >= 0znbits must be > 0)range)r countnbitsoffsetmasktmpxs&&&& r rotate_leftr Ys Q;---; 19)))9 NE v| q&y (D ,C qyuAu Q'1,,axAK0ax  vA ""axA&,q.$9:ax  $J CJ /E Lr c\W^ ^4#) r r rs&&r rotate_dwordr;qQ#??r c\W^^4#)rrs&&r rotate_wordrrr c\W^^4#)rrs&&r rotate_byters;qA#>>r c\P!4p\P!V\V4pV'd RV,#VPR8Xd VP #VPR8XdVP 4#\R4h)a) Evaluate an IDC expression :param expr: an expression :returns: the expression value. If there are problems, the returned value will be "IDC_FAILURE: xxx" where xxx is the error description NOTE: Python implementation evaluates IDC only, while IDC can call other registered languages IDC_FAILURE: z?eval_idc() supports only expressions returning strings or longs)ida_expr idc_value_t eval_idc_exprBADADDRvtypenumc_strr)exprrverrs& r eval_idcr(sm    B  Wd 3C s"" 88v 66M XX 88: %&gh hr cX\V4\8H;'dVPR4#)z Check the result of eval_idc() for evaluation failures :param code: result of eval_idc() :returns: True if there was an evaluation error r)typebytes startswith)codes&r EVAL_FAILUREr.s$ :  C C4???#CCr c\V4^8Xd \4p\P\P,\P ,p\P !WV,4#)z Save current database to the specified idb file :param idbname: name of the idb file. if empty, the current idb file will be used. :param flags: combination of ida_loader.DBFL_... bits or 0 )len get_idb_path ida_loader DBFL_KILL DBFL_COMPDBFL_BAK save_database)idbnameflagsr s&& r r6r6sM 7|q.   *"6"6 69L9L LD  # #GT\ ::r c.\P!V4#)z check consistency of IDB name records :param do_repair: try to repair netnode header it TRUE :returns: number of inconsistent name records )ida_naltvalidate_idb_names) do_repairs&r r;r;s  & &y 11r c.\P!V4#)a  Execute an OS command. :param command: command line to execute :returns: error code from OS NOTE: IDA will wait for the started program to finish. In order to start the command in parallel, use OS methods. For example, you may start another program in parallel using "start" command. )ossystem)commands&r call_systemrAs 99W r cR\P!\V4R, 4R#)z qsleep the specified number of milliseconds This function suspends IDA for the specified amount of time :param milliseconds: time to sleep iN)timesleepfloat) millisecondss&r qsleeprGs JJu\"4'(r c8\P!4pV\8wEdyV\P!48:Ed\\P !V4\P !V4\P!V4pV'dG\P!VRR4\P!VRR4\P!V4\P!V4\P!V4pV'dk\P!VRR4\P!VRR4\P !V\P"\P$,4\P&!V\P!44pEKR#R#)zV Delete all segments, instructions, comments, i.e. everything except values of bytes. FTN)r%inf_get_min_ear!inf_get_max_eaida_namedel_local_namedel_global_name ida_funcsget_func set_func_cmtdel_func ida_bytesdel_hidden_range ida_segmentgetsegset_segment_cmtdel_segm SEGMOD_KEEP SEGMOD_SILENT next_head)r5funcrs r delete_all_segmentsr]s    !B -B'"8"8"::#  $!!"%   " "4U 3  " "4T 2   r """2&  $   ' 'R 7  ' 'R 6  [%<%<{?X?X%X Y  W%;%;%= >;-r c0\P!WV4#)z Perform full analysis of the range :param sEA: starting linear address :param eEA: ending linear address (excluded) :param final_pass: make the final pass over the specified range :returns: 1-ok, 0-Ctrl-Break was pressed. )ida_auto plan_and_wait)sEAeEA final_passs&&&r r`r`s  ! !#J 77r c0\P!WV4#)z Rename an address :param ea: linear address :param name: new name of address. If name == "", then delete old name :param flags: combination of SN_... constants :returns: 1-ok, 0-failure )rLset_name)r5namer8s&&&r reres   Ru --r c\P!V4p\P!V4'g9\P!V4'g\P!V4'dR#\P !V4'd\P p\P!V4'd_\P!4p\P!W0^V4'gQR4h\P!WV4pVPpM\P!V4p\p\P!WWA,V4#)a Create an array. :param ea: linear address :param nitems: size of array in items NOTE: This function will create an array of the items with the same type as the type of the item at 'ea'. If the byte at 'ea' is undefined, then this function will create an array of bytes. Fzget_opinfo() failed)rS get_flagsr:rArrDrrr:opinfo_t get_opinfoget_data_elsizetid get_item_sizer! create_data)r5nitemsr8tiitemsizerls&& r make_arrayrrAs    #E9#4#4U#;#;y?Q?QRW?X?XE""!!5!!    ##BAu55L7LL5,,R;ff**2.  HOS AAr cp\P!Y\8Xd^MW, \\44#)a Create a string. This function creates a string (the string type is determined by the value of get_inf_attr(INF_STRTYPE)) :param ea: linear address :param endea: ending address of the string (excluded) if endea == BADADDR, then length of string will be calculated by the kernel :returns: 1-ok, 0-failure NOTE: The type of an existing string is returned by get_str_type() )rS create_strlitr! get_inf_attr INF_STRTYPE)r5endeas&&r rtrt`s(  " "2W,QWWQZ#++D @S@ST_TkTk@lmmqtstt##DdKKr c*\RWW#3,4#)aU Set array representation format :param ea: linear address :param flags: combination of AP_... constants or 0 :param litems: number of items per line. 0 means auto :param align: element alignment - -1: do not align - 0: automatic alignment - other values: element width :returns: 1-ok, 0-failure z$set_array_params(0x%X, 0x%X, %d, %d)r()r5r8litemsaligns&&&&r set_array_paramsr.s :Bv;UU VVr crV\8Xd\P!W4#\P!WV4#)a  Convert operand to an offset (for the explanations of 'ea' and 'n' please see op_bin()) Example: ======== seg000:2000 dw 1234h and there is a segment at paragraph 0x1000 and there is a data item within the segment at 0x1234: seg000:1234 MyString db 'Hello, world!',0 Then you need to specify a linear address of the segment base to create a proper offset: op_plain_offset(["seg000",0x2000],0,0x10000); and you will have: seg000:2000 dw offset MyString Motorola 680x0 processor have a concept of "outer offsets". If you want to create an outer offset, you need to combine number of the operand with the following bit: Please note that the outer offsets are meaningful only for Motorola 680x0. :param ea: linear address :param n: number of operand - 0 - the first operand - 1 - the second, third and all other operands - -1 - all operands :param base: base of the offset as a linear address If base == BADADDR then the current operand becomes non-offset )r!rS clr_op_type ida_offsetop_plain_offset)r5rbases&&&r rrOs0N w$$R++))"66r ic2\P!W4R#)z Toggle the bitwise not operator for the operand :param ea: linear address :param n: number of operand - 0 - the first operand - 1 - the second, third and all other operands - -1 - all operands T)rS toggle_bnot)r5rs&&r rrs" r c \P!^4pW$^&\V\P4'dTpM+\P!4p\P !WP4\ P!WQVP4^V4#)a Convert operand to an offset in a structure :param ea: linear address :param n: number of operand - 0 - the first operand - 1 - the second, third and all other operands - -1 - all operands :param strid: id of a structure type :param delta: struct offset delta. usually 0. denotes the difference between the structure base and the pointer into the structure. ) ida_pro tid_array isinstanceida_uainsn_t decode_insnrS op_stroffcast)r5rstriddeltapathinsns&&&& r rrsg   Q DG"fmm$$}}4$   t Q >>r cN\P!W\PV4#)a| Convert operand to a high offset High offset is the upper 16bits of an offset. This type is used by TMS320C6 processors (and probably by other RISC processors too) :param ea: linear address :param n: number of operand - 0 - the first operand - 1 - the second, third and all other operands - -1 - all operands :param target: the full value (all 32bits) of the offset )r op_offsetr: REF_HIGH16)r5rtargets&&&r op_offset_high16rs   x':':F CCr cR#r$rr4s&r MakeVarrsr cn\P!V4pVR8XdR#\P!WW#4#)a Set value of a segment register. :param ea: linear address :param reg: name of a register, like "cs", "ds", "es", etc. :param value: new value of the segment register. :param tag: of SR_... constants NOTE: IDA keeps tracks of all the points where segment register change their values. This function allows you to specify the correct value of a segment register if IDA is not able to find the correct value. Fr)rstr2sreg ida_segregssplit_sreg_range)r5regr tags&&&&r rrs1   3 C by  ' ' <<) ida_idaapi__struct_unpack_tablerrstructunpackr% inf_is_be)r5r0rs&& r __DbgValuers *222(A94H&--8I8I8K8KQTXbXxXxy|X}~YA1ACD#EFG#HHr c\V^4#)zx Get value of program byte using the debugger memory :param ea: linear address :returns: The value or None on failure. rr4s&r read_dbg_byter b! r c\V^4#)zx Get value of program word using the debugger memory :param ea: linear address :returns: The value or None on failure. rr4s&r read_dbg_wordr rr c\V^4#)z Get value of program double-word using the debugger memory :param ea: linear address :returns: The value or None on failure. rr4s&r read_dbg_dwordr rr c\V^4#)z Get value of program quadro-word using the debugger memory :param ea: linear address :returns: The value or None on failure. rr4s&r read_dbg_qwordr rr c\RR4\P!4'gR#\V4^8d\P !W4#R#)z Write to debugger memory. :param ea: linear address :param data: string to write :returns: number of written bytes (-1 - network/debugger error) Thread-safe function (may be called only from the main thread and debthread) write_dbg_memoryzida_dbg.write_dbg_memoryNr)rida_dbg dbg_can_queryr0rdbg_write_memory)r5datas&&r rrsE++=?YZ  " " TQ''11 r c~\P!R\V44p\P!RV4^,#)z Get value of a floating point number (4 bytes) This function assumes number stored using IEEE format and in the same endianness as integers. :param ea: linear address :returns: float If)rpackget_wide_dwordrr5r s& r GetFloatrs/ ++c>"- .C ==c "1 %%r c~\P!R\V44p\P!RV4^,#)z Get value of a floating point number (8 bytes) This function assumes number stored using IEEE format and in the same endianness as integers. :param ea: linear address :returns: double Qd)rr get_qwordrrs& r GetDoublers. ++c9R= )C ==c "1 %%r c8\P!\V4#)z Get linear address of a name :param name: name of program byte :returns: address of the name BADADDR - No such name )rL get_name_ear!rfs&r get_name_ea_simpler#s    ..r c\P!V4p\P!V4pV'd VP#\#)z Get segment by segment base :param base: segment base paragraph or selector :returns: linear address of the start of the segment or BADADDR if no such segment )rU find_selectorget_segm_by_selstart_ear!)rselrs& r r&r&s6  # #D )C  % %c *C ||r cT\P!\P!44#)z: Get the disassembly line at the cursor :returns: string ) ida_lines tag_remover get_curlinerr r r,r,(s    7 7 9 ::r cR\P!R4wrpV^8XdV#\#)z^ Get start address of the selected range returns BADADDR - the user has not selected an range Nrread_range_selectionr! selection startaddrendaddrs r read_selection_startr41s+ %0$D$DT$J!I'A~r cR\P!R4wrpV^8XdV#\#)z_ Get end address of the selected range :returns: BADADDR - the user has not selected an range Nr.r0s r read_selection_endr6>s* %0$D$DT$J!I'A~r cl\P!V4pVR8XdR#\P!W4#)ah Get value of segment register at the specified address :param ea: linear address :param reg: name of segment register :returns: the value of the segment register or -1 on error NOTE: The segment registers in 32bit program usually contain selectors, so to get paragraph pointed to by the segment register you need to call sel2para() function. r)rrrget_sreg)r5rs&&r r8r8Ls1   3 C by    ((r c.\P!W4#)z Get next defined item (instruction or data) in the program :param ea: linear address to start search from :param maxea: the search will stop at the address maxea is not included in the search range :returns: BADADDR - no (more) defined items )rSr[)r5maxeas&&r r[r[b   r ))r c.\P!W4#)z Get previous defined item (instruction or data) in the program :param ea: linear address to start search from :param minea: the search will stop at the address minea is included in the search range :returns: BADADDR - no (more) defined items )rS prev_head)r5mineas&&r r=r=or;r c<\P!V4V, #)zZ Get size of instruction or data item in bytes :param ea: linear address :returns: 1..n )rS get_item_endr4s&r rmrms  ! !" % **r cn\P!V4pV'd\P!W!4#R#)z Does the given function contain the given address? :param func_ea: any address belonging to the function :param ea: linear address :returns: success F)rOrP func_contains)func_ear5r\s&& r rBrBs+   g &D &&t00 r c.\P!W4#)z Get name at the specified address :param ea: linear address :param gtn_flags: how exactly the name should be retrieved. combination of GN_ bits :returns: "" - byte has no name )rL get_ea_name)r5 gtn_flagss&&r get_namerGs    ..r cL\P!W\P4#)a: demangle_name a name :param name: name to demangle :param disable_mask: a mask that tells how to demangle the name it is a good idea to get this mask using get_inf_attr(INF_SHORT_DN) or get_inf_attr(INF_LONG_DN) :returns: a demangled name If the input name cannot be demangled, returns None )rL demangle_nameDQT_FULL)rf disable_masks&&r rIrIs  ! !$h6G6G HHr cn\P!W4pV'd\P!V4#R#)a Get disassembly line :param ea: linear address of instruction :param flags: combination of the GENDSM_ flags, or 0 :returns: "" - could not decode instruction at the specified location NOTE: this function may not return exactly the same mnemonics as you see on the screen. rI)r*generate_disasm_liner+)r5r8texts&& r rMrMs+  ) )" 4D ##D))r c\V^4#)z Get disassembly line :param ea: linear address of instruction :returns: "" - could not decode instruction at the specified location NOTE: this function may not return exactly the same mnemonics as you see on the screen. )rMr4s&r GetDisasmrPs A &&r cF\P!V4pV'gR#V#)z Get instruction mnemonics :param ea: linear address of instruction :returns: "" - no instruction at the specified location NOTE: this function may not return exactly the same mnemonics as you see on the screen. rI)rua_mnem)r5ress& r print_insn_mnemrTs .. C  r cn\P!W4pV'gR#\P!V4#)z Get operand of an instruction or data :param ea: linear address of the item :param n: number of operand: 0 - the first operand 1 - the second operand :returns: the current text representation of operand or "" rI)r print_operandr*r+)r5rrSs&& r rVrVs+   r %C ##C((r c\P!4p\P!W 4pV^8XdR#VPV,P#)z Get type of instruction operand :param ea: linear address of instruction :param n: number of operand: 0 - the first operand 1 - the second operand :returns: any of o_* constants or -1 on error r)rrropsr*)r5rrinslens&& r get_operand_typerZs> ==?D    )F122$((1+"2"22r cp\P!4p\P!W 4pV^8XdR#VPV,pV'gR#VP\P \P \P\P39dVPpV#VP\P8XdVPpV#VP\P8XdVPpV#VP\P8XdVPpV#RpV#)a Get number used in the operand This function returns an immediate number used in the operand :param ea: linear address of instruction :param n: the operand number :returns: value operand is an immediate value => immediate value operand has a displacement => displacement operand is a direct memory ref => memory address operand is a register => register number operand is a register phrase => phrase number otherwise => -1 r)rrrrXr*o_memo_faro_nearo_displaddro_regro_immr o_phrasephrase)r5rrrYopr s&& r get_operand_valuerfOs" ==?D    )F { !B   wwFLL&,, v~~OO L FLL  L FLL  L FOO #  L Lr cVR8Xd&\P!W\P4p\P!WV4#)z Get string contents :param ea: linear address :param length: string length. -1 means to calculate the max string length :param strtype: the string type (one of STRTYPE_... constants) :returns: string contents or empty string r)rSget_max_strlit_lengthALOPT_IGNHEADSget_strlit_contents)r5lengthstrtypes&&&r rjrjs6|00i>V>VW  ( (W ==r c\P!V4p\P!V4'dB\P!4p\P !W ^V4'd VP #R#R#)zT Get string type :param ea: linear address :returns: One of STRTYPE_... constants N)rSrhrr:rirjrl)r5r8ois& r get_str_typeros\    #E5!!       5 1 1::  2"r cN\R\P!V4,4#)z: Obsolete. Please use ida_idp.process_config_directive(). zprocess_config_directive("%s"))r(rstr2user) directives&r process_config_linerss  4{7K7KI7VV WWr c\V\4'dV.pVFhp\V4FVpVPV4'gK\ W4p\V\ P 4'gKIV\4V&KX Kj R#r$)rstrdirr,rr integer_typesglobals)moduleprefixesprefixkeyr s&& r _import_module_flag_setsr}se(C  :v;C~~f%%,eZ%=%=>>%*GIcN r c4\V,^,!4#)z/ Deprecated. Please ida_ida.inf_get_* instead. _INF_attrs_accessors)attrs&r rurus  %a ( **r c:\V,^,!V4^#)z/ Deprecated. Please ida_ida.inf_set_* instead. r)rr s&&r set_inf_attrrsq!%( r c"\V\4#r$)set_processor_type SETPROC_USER) processors&r SetPrcsrrs 29l KKr c,\P!4#)z< Get name of the current processor :returns: processor name )r%inf_get_procnamerr r get_processor_namers  # # %%r cd\PPpV\PnV#)z Enable/disable batch mode of operation :param batch: batch mode 0 - ida will display dialog boxes and wait for the user input 1 - ida will not display dialog boxes, warnings, etc. :returns: old balue of batch flag )rcvarbatch)r batch_prevs& r rrs)!!''J"K r c.\P!W4#)zt Invokes an IDA UI action by name :param name: Command name :param flags: Reserved. Must be zero :returns: Boolean )rprocess_ui_action)rfr8s&&r rr!s  ( ( 55r c\P!4p\P!4p\P!WP 4VP 44wr4V'gV#VP 4#)z Get a selector value :param sel: the selector number :returns: selector value if found otherwise the input value (sel) NOTE: selector values are always in paragraphs )r sel_pointer ea_pointerrU getn_selectorrr )r(rrrSr s& r sel2parar@sT A    D''VVXtyy{CGC  zz|r c<\P!V4R,#)z Find a selector which has the specified value :param val: value to search for :returns: the selector number if found, otherwise the input value (val & 0xFFFF) NOTE: selector values are always in paragraphs i)rUr%)vals&r r%r%Us  $ $S )F 22r c`\P!4pV'g\#VP#)zn Get first segment :returns: address of the start of the first segment BADADDR - no segments are defined )rU get_first_segr!r')rs r rrgs$  # # %C ||r cb\P!V4pV'g\#VP#)zu Get next segment :param ea: linear address :returns: start of the next segment BADADDR - no next segment )rU get_next_segr!r')r5nextsegs& r rrus(&&r*G r cb\P!V4pV'g\#VP#)z Get start address of a segment :param ea: any address in the segment :returns: start of segment BADADDR - the specified address doesn't belong to any segment )rUrVr!r'r5rs& r get_segm_startrs&   R C ||r cb\P!V4pV'g\#VP#)z Get end address of a segment :param ea: any address in the segment :returns: end of segment (an address past end of the segment) BADADDR - the specified address doesn't belong to any segment )rUrVr!end_ears& r get_segm_endrs&   R C zzr c\P!V4pV'gR#\P!V4pV'gR#V#)zr Get name of a segment :param ea: any address in the segment :returns: "" - no segment at the specified address rI)rUrV get_segm_name)r5rrfs& r rrs5   R C ((-Kr c\P!4pWnWn\P!V4VnW7nWGnWWn\P!VRRV4#)a Create a new segment :param startea: linear address of the start of the segment :param endea: linear address of the end of the segment this address will not belong to the segment 'endea' should be higher than 'startea' :param base: base paragraph or selector of the segment. a paragraph is 16byte memory chunk. If a selector value is specified, the selector should be already defined. :param use32: 0: 16bit segment, 1: 32bit segment, 2: 64bit segment :param align: segment alignment. see below for alignment values :param comb: segment combination. see below for combination values. :param flags: combination of ADDSEG_... bits :returns: 0-failed, 1-ok rI) rU segment_tr'rsetup_selectorr(bitnessrcomb add_segm_ex)startearwruse32rrr8rs&&&&&&& r rrsT& AJH++D1AEIGF  " "1b"e 44r c &\WW#WE\4#r$)r ADDSEG_NOSREG)rrwrrrrs&&&&&&r AddSegrs wtE OOr ch\P!WV4\P!WV4,#)z Change segment boundaries :param ea: any address in the segment :param startea: new start address of the segment :param endea: new end address of the segment :param flags: combination of SEGMOD_... flags :returns: boolean success )rUset_segm_start set_segm_end)r5rrwr8s&&&&r set_segment_boundsrs.  % %b5 9  # #Bu 5 66r cn\P!V4pV'gR#\P!W!4#)z Change name of the segment :param ea: any address in the segment :param name: new name of the segment :returns: success (boolean) F)rUrV set_segm_name)r5rfrs&& r rr s+   R C   $ $S //r cn\P!V4pV'gR#\P!W!4#)z Change class of the segment :param ea: any address in the segment :param segclass: new class of the segment :returns: success (boolean) F)rUrVset_segm_class)r5segclassrs&& r rr s+   R C   % %c 44r c$\V\V4#)z Change alignment of the segment :param ea: any address in the segment :param alignment: new alignment of the segment (one of the sa... constants) :returns: success (boolean) ) set_segm_attr SEGATTR_ALIGN)r5 alignments&&r set_segm_alignmentr% s ]I 66r c$\V\V4#)z Change combination of the segment :param segea: any address in the segment :param comb: new combination of the segment (one of the sc... constants) :returns: success (boolean) )r SEGATTR_COMB)segears&&r set_segm_combinationrC s  d 33r cR\P!V4pV'gR#WnR#)z Change segment addressing :param ea: any address in the segment :param bitness: 0: 16bit, 1: 32bit, 2: 64bit :returns: success (boolean) FT)rUrVr)r5rrs&& r set_segm_addressingrZ s"   R C K r cb\P!V4pV'g\#VP#)zf Get segment selector by name :param segname: name of segment :returns: segment selector or BADADDR )rUget_segm_by_namer!r()segnamers& r selector_by_namerm s%  & &w /C  77Nr c\P!V4p\P!V4pVR8XdR#\P !W1V4#)a, Set default segment register value for a segment :param ea: any address in the segment if no segment is present at the specified address then all segments will be affected :param reg: name of segment register :param value: default value of the segment register. -1-undefined. Fr)rUrVrrrset_default_sreg_value)r5rr rs&&& r rr} sA   R C   3 C by  - -c >>r cn\P!V4pV'gR#WnVP4#)zr Set segment type :param segea: any address within segment :param segtype: new segment type: :returns: !=0 - ok F)rUrVr*update)rsegtypers&& r set_segm_typer s+   U #C H ::<r c\P!V4pV'gQRV,4hV\\\\ \ \39d*\P!V\V,^,4#\V\V4#)zk Get segment attribute :param segea: any address within segment :param attr: one of SEGATTR_... constants could not find segment at 0x%x) rUrV SEGATTR_ES SEGATTR_CS SEGATTR_SS SEGATTR_DS SEGATTR_FS SEGATTR_GS get_defsr _SEGATTRMAPr)rrrs&& r get_segm_attrr sh   U #C 805883 ZZZYY$$S+d*;A*>??Cd33r cZ\P!V4pV'gQRV,4hV\\\\ \ \39d;\P!V\V,^,V4VP4#\V\W4VP4#)a Set segment attribute :param segea: any address within segment :param attr: one of SEGATTR_... constants NOTE: Please note that not all segment attributes are modifiable. Also some of them should be modified using special functions like set_segm_addressing, etc. r) rUrVrrrrrr set_defsrrr!r)rrr rs&&& r rr s   U #C 805883 ZZZYYc;t#4Q#7? ::< S+t3 ::<r cx\P!V4pV'g\#\P!W1V4#)a Move a segment to a new address This function moves all information to the new address It fixes up address sensitive information in the kernel The total effect is equal to reloading the segment to the target address :param ea: any address within the segment to move :param to: new segment start address :param flags: combination MFS_... constants :returns: MOVE_SEGM_... error code )rUrVMOVE_SEGM_PARAM move_segm)r5tor8rs&&& r rr s0   R C   % 00r c\R4h)zj Return type of the last xref obtained by [RD]first/next[B0] functions. :returns: constants fl_* or dr_* z0use XrefsFrom() XrefsTo() from idautils instead.rrr r get_xref_typerz s O PPr c\R4h)z4fopen() deprecated. Use Python file objects instead.r)rmodes&&r rr  S TTr c\R4h)z5fclose() deprecated. Use Python file objects instead.rhandles&r fcloser s T UUr c\R4h)z9filelength() deprecated. Use Python file objects instead.rrs&r filelengthr  X YYr c\R4h)z4fseek() deprecated. Use Python file objects instead.r)rr origins&&&r fseekr rr c\R4h)z4ftell() deprecated. Use Python file objects instead.rrs&r ftellr rr c\P!VR4pV'd8\P!WAW"V,R4p\P!V4V#^#)z Load file into IDA database :param filepath: path to input file :param pos: position in the file :param ea: linear address to load :param size: number of bytes to load :returns: 0 - error, 1 - ok F)r open_linputr2 file2base close_linput)filepathposr5rlirs&&&& r LoadFiler sG   % 0B %%brd7EB# r c\WW#4#r$)rrrr5rs&&&&r loadfiler hxb.O'Or c$\PPV4'd\P!V4pM\P !V4pV'd6\ P!WAW"V,4p^RIpVPV4V#^#)z Save from IDA database to file :param filepath: path to output file :param pos: position in the file :param ea: linear address to save from :param size: number of bytes to save :returns: 0 - error, 1 - ok N) r>risfilerfopenMrr2 base2filerr)rrr5rrrrs&&&& r SaveFiler si  ! !   x (    ) %%brd7; r c\WW#4#r$)rrs&&&&r savefiler rr c\R4h)z4fgetc() deprecated. Use Python file objects instead.rrs&r fgetcr rr c\R4h)z4fputc() deprecated. Use Python file objects instead.r)byters&&r fputcr rr c\R4h)z6fprintf() deprecated. Use Python file objects instead.r)rrrs&&*r fprintfr   U VVr c\R4h)z8readshort() deprecated. Use Python file objects instead.rr mostfirsts&&r readshortr  W XXr c\R4h)z7readlong() deprecated. Use Python file objects instead.rr s&&r readlongr  V WWr c\R4h)z9writeshort() deprecated. Use Python file objects instead.r)rwordrs&&&r writeshortr rr c\R4h)z8writelong() deprecated. Use Python file objects instead.r)rdwordrs&&&r writelongr rr c\R4h)z6readstr() deprecated. Use Python file objects instead.rrs&r readstrr r r c\R4h)z7writestr() deprecated. Use Python file objects instead.r)rrs&&r writestrr rr cb\P!V4pV'g\#VP#)z Find next function :param ea: any address belonging to the function :returns: BADADDR - no more functions otherwise returns the next function start address )rO get_next_funcr!r'r5r\s& r rr &  " "2 &D }}r cb\P!V4pV'g\#VP#)z Find previous function :param ea: any address belonging to the function :returns: BADADDR - no more functions otherwise returns the previous function start address )rO get_prev_funcr!r'r s& r r#r# r!r cl\P!V4pV'd\V\V4#\#)z Get a function attribute :param ea: any address belonging to the function :param attr: one of FUNCATTR_... constants :returns: BADADDR - error otherwise returns the attribute value )rOrPr _FUNCATTRMAPr!r5rr\s&& r get_func_attrr' s*   b !D59<lD 1FwFr c\P!V4pV'd(\V\W4\P!V4#^#)z Set a function attribute :param ea: any address belonging to the function :param attr: one of FUNCATTR_... constants :param value: new value of the attribute :returns: 1-ok, 0-failed )rOrPr!r% update_func)r5rr r\s&&& r set_func_attrr* s7   b !D T<5$$T** r cZ\P!V4pV'gR#VP#)z Retrieve function flags :param ea: any address belonging to the function :returns: -1 - function doesn't exist otherwise returns the flags r)rOrPr8r s& r get_func_flagsr,X s&   b !D  zzr c~\P!V4pV'g^#Wn\P!V4^#)z Change function flags :param ea: any address belonging to the function :param flags: see get_func_flags() for explanations :returns: !=0 - ok )rOrPr8r))r5r8r\s&& r set_func_flagsr. s0   b !D  d#r cF\P!V4pV'gR#V#)z Retrieve function name :param ea: any address belonging to the function :returns: null string - function doesn't exist otherwise returns function name rI)rO get_func_name)r5rfs& r r0r0 s  " "2 &D  r c\P!V4pV'gR#\P!W!4pV'gR#V#)z Retrieve function comment :param ea: any address belonging to the function :param repeatable: 1: get repeatable comment 0: get regular comment :returns: function comment string rI)rOrP get_func_cmt)r5 repeatabler\comments&& r r2r2 s5   b !D ((:Nr cp\P!V4pV'gR#\P!W1V4#)z Set function comment :param ea: any address belonging to the function :param cmt: a function comment line :param repeatable: 1: get repeatable comment 0: get regular comment N)rOrPrQ)r5cmtr3r\s&&& r rQrQ s-   b !D %%d< Get size of saved registers in function frame :param ea: any address belonging to the function :returns: Size of saved registers in bytes. If the function doesn't have a frame, return 0 This value is used as offset for BP (if FUNC_FRAME is set) If the function doesn't exist, return None )r'FUNCATTR_FRREGSr4s&r get_frame_regs_sizerL s _ --r c"\V\4#)a Get size of arguments in function frame which are purged upon return :param ea: any address belonging to the function :returns: Size of function arguments in bytes. If the function doesn't have a frame, return 0 If the function doesn't exist, return -1 )r'FUNCATTR_ARGSIZEr4s&r get_frame_args_sizerO- s - ..r cn\P!V4pV'g^#\P!V4#)a Get full size of function frame :param ea: any address belonging to the function :returns: Size of function frame in bytes. This function takes into account size of local variables + size of saved registers + size of return address + size of function arguments If the function doesn't have a frame, return size of function return address in the stack. If the function doesn't exist, return 0 )rOrPrget_frame_sizer s& r rQrQ: s+   b !D ''--r c\P!V4pVfR#\P!WAW#4pV'g \P!WAW#4'gR#VP #)ag Make function frame :param ea: any address belonging to the function :param lvsize: size of function local variables :param frregs: size of saved registers :param argsize: size of function arguments :returns: ID of function frame or -1 If the function did not have a frame, the frame will be created. Otherwise the frame will be modified r)rOrPr add_frameset_frame_sizeframe)r5lvsizefrregsargsizer\frameids&&&& r rTrTO sU   b !D | !!$@G ''fFFI ::r cn\P!V4pV'gR#\P!W4#)a Get current delta for the stack pointer :param ea: end address of the instruction i.e.the last address of the instruction+1 :returns: The difference between the original SP upon entering the function and SP for the specified address N)rOrPrget_spdr s& r r[r[i s+   b !D    T &&r cn\P!V4pV'gR#\P!W4#)aS Get modification of SP made by the instruction :param ea: end address of the instruction i.e.the last address of the instruction+1 :returns: Get modification of SP made at the specified location If the specified location doesn't contain a SP change point, return 0 Otherwise return delta of SP modification N)rOrPr get_sp_deltar s& r r]r]{ s+   b !D   ! !$ ++r cl\P!V4pV'd\V\V4#\#)z Get a function chunk attribute :param ea: any address in the chunk :param attr: one of: FUNCATTR_START, FUNCATTR_END, FUNCATTR_OWNER, FUNCATTR_REFQTY :returns: desired attribute or -1 )rO get_fchunkrr%r!r&s&& r get_fchunk_attrr` s*    #D59<lD 1FwFr cV\\\39dF\P!V4pV'd(\ V\ W4\P!V4#^#)z Set a function chunk attribute :param ea: any address in the chunk :param attr: only FUNCATTR_START, FUNCATTR_END, FUNCATTR_OWNER :param value: desired value :returns: 0 if failed, 1 if success )FUNCATTR_START FUNCATTR_ENDFUNCATTR_OWNERrOr_r!r%r))r5rr chunks&&& r set_fchunk_attrrf sF ~??$$R(   d :((/ / r cb\P!V4pV'd VP#\#)z Get next function chunk :param ea: any address :returns: the starting address of the next function chunk or BADADDR NOTE: This function enumerates all chunks of all functions in the database )rOget_next_fchunkr'r!r s& r rhrh &  $ $R (D }}r cb\P!V4pV'd VP#\#)z Get previous function chunk :param ea: any address :returns: the starting address of the function chunk or BADADDR NOTE: This function enumerates all chunks of all functions in the database )rOget_prev_fchunkr'r!r s& r rkrk rir cp\P!V4pV'g^#\P!W1V4#)a' Append a function chunk to the function :param funcea: any address in the function :param ea1: start of function tail :param ea2: end of function tail :returns: 0 if failed, 1 if success NOTE: If a chunk exists at the specified addresses, it must have exactly the specified boundaries )rOrPappend_func_tail)funcearrr\s&&& r rmrm s-   f %D ))$S99r cn\P!V4pV'g^#\P!W!4#)z Remove a function chunk from the function :param funcea: any address in the function :param tailea: any address in the function chunk to remove :returns: 0 if failed, 1 if success )rOrPremove_func_tail)rntailear\s&& r remove_fchunkrr s+   f %D ))$77r cn\P!V4pV'gR#\P!W!4#)z Change the function chunk owner :param tailea: any address in the function chunk :param funcea: the starting address of the new owner :returns: False if failed, True if success NOTE: The new owner must already have the chunk appended before the call F)rOr_set_tail_owner)rqrntails&& r rtrt s+    'D ''55r c\P!V4p\P!W4pVP4'dVP 4P #\ #)z Get the first function chunk of the specified function :param funcea: any address in the function :returns: the function entry point or BADADDR NOTE: This function returns the first (main) chunk of the specified function )rOrPfunc_tail_iterator_tmainrer'r!)rnr\fcis& r first_func_chunkrz sF   f %D  ( ( 6C xxzzyy{###r c\P!V4p\P!W 4pVP4'g\#RpVP 4P V8:d#VP 4PV8dRpM\V4'dKUV'd,\V4'dVP 4P #\#)a Get the next function chunk of the specified function :param funcea: any address in the function :param tailea: any address in the current chunk :returns: the starting address of the next function chunk or BADADDR NOTE: This function returns the next chunk of the specified function FT) rOrPrwrxr!rer'rnext)rnrqr\ryfounds&& r next_func_chunkr~ s   f %D  ( ( 6C 88:: E  99;  6 ) 99;   &E Cyy  cyy{###r cp\P!V4pV'g^#\P!W1V4#)a; Add automatic SP register change point :param func_ea: function start :param ea: linear address where SP changes usually this is the end of the instruction which modifies the stack pointer (insn.ea+insn.size) :param delta: difference between old and new values of SP :returns: 1-ok, 0-failed )rOrPradd_auto_stkpnt)rCr5rpfns&&& r rrD s-   W %C   $ $Se 44r cn\P!V4pV'g^#\P!W!4#)zt Delete SP register change point :param func_ea: function start :param ea: linear address :returns: 1-ok, 0-failed )rOrPr del_stkpnt)rCr5rs&& r rrU s+   W %C     ((r cv\P!V4pV'g\#\P!V4#)z Return the address with the minimal spd (stack pointer delta) If there are no SP change points, then return BADADDR. :param func_ea: function start :returns: BADDADDR - no such function )rOrPr!rget_min_spd_ea)rCrs& r rrb s-   W %C   # #C ((r c~\P!4pVPV4'g^#VP4#)z Get fixup target type :param ea: address to get information about :returns: 0 - no fixup at the specified address otherwise returns fixup type ) ida_fixup fixup_data_tgetget_typer5fds& r get_fixup_target_typer s.    !B 66":: ;;=r c~\P!4pVPV4'g^#VP4#)z Get fixup target flags :param ea: address to get information about :returns: 0 - no fixup at the specified address otherwise returns fixup target flags )rrrrhrs& r get_fixup_target_flagsr s.    !B 66":: <<>r c~\P!4pVPV4'g\#VP#)z Get fixup target selector :param ea: address to get information about :returns: BADSEL - no fixup at the specified address otherwise returns fixup target selector )rrrBADSELr(rs& r get_fixup_target_selr s-    !B 66":: 66Mr c~\P!4pVPV4'g\#VP#)z Get fixup target offset :param ea: address to get information about :returns: BADADDR - no fixup at the specified address otherwise returns fixup target offset )rrrr!rrs& r get_fixup_target_offr s-    !B 66":: 66Mr cv\P!4pVPV4'g^#VP#)z Get fixup target displacement :param ea: address to get information about :returns: 0 - no fixup at the specified address otherwise returns fixup target displacement )rrr displacementrs& r get_fixup_target_disr s,    !B 66":: ??r cx\P!W4pW6nWFnWVnVP V4R#)a Set fixup information :param ea: address to set fixup information about :param fixuptype: fixup type. see get_fixup_target_type() for possible fixup types. :param fixupflags: fixup flags. see get_fixup_target_flags() for possible fixup types. :param targetsel: target selector :param targetoff: target offset :param displ: displacement :returns: none N)rrr(rrset)r5 fixuptype fixupflags targetsel targetoffdisplrs&&&&&& r set_fixupr s.    6B F FOFF2Jr c\P!V4p\P!4pV\8wd0VP V4'dVP 4'dV#\#r$)rget_named_type_tidrr!get_type_by_tidr)rfrlrs& r get_struc_idrsK  ( ( .C    C g~#--c22szz|| Nr c.\P!V4#r$)r get_tid_name)rls&r get_struc_namer s  # #C ((r c\P!4pVPV4'd)VP4'dVP 4#R#R#r$)rrrr get_type_cmtrlrs& r get_struc_cmtr$sB    C 3CJJLL!!%1r c\P!4pVPV4'd)VP4'dVP 4#R#R#r$)rrrrrrs& r get_struc_sizer*s?    C 3CJJLL||~%1r c\P!4pVPV4'd'VP4'dVP 4#R#)z Get number of members of a structure :param sid: structure type ID :returns: -1 if bad structure type ID is passed otherwise returns number of members. r)rrrrget_udt_nmemberssidrs& r get_member_qtyr0sA    C 3CJJLL##%% Ir c\P!4pV^8dSVPV4'd<VP4'd&WP 48dVP V4#R#)z Get member ID by member ordinal number :param sid: structure type ID :param idx: member ordinal number :returns: -1 if bad structure type ID is passed or there is no member with the specified index otherwise returns the member ID. r)rrrrr get_udm_tid)ridxrs&& r get_member_by_idxr?sU    C axC'',,#H\H\H^B^s## Ir cV\P!4pVPRV4R8g#)z Is a member id? :param sid: structure type ID :returns: True there is structure member with the specified ID False otherwise Nr)rrget_udm_by_tidrs& r is_member_idrPs*    C   dC (B ..r c0\P!4pVPV4'djVP4'dT\P!4pWnVP V\P4pVR8wdVPV4#R#)aT :param sid: structure type ID :param member_offset:. The offset can be any offset in the member. For example, is a member is 4 bytes long and starts at offset 2, then 2,3,4,5 denote the same structure member. :returns: -1 if bad structure type ID is passed or there is no member at the specified offset. otherwise returns the member id. r) rrrrudm_tr find_udm STRMEM_AUTOrr member_offsetrudmrs&& r get_member_idr]sq    C 3CJJLL!" ll3 7 78 "9??3' ' Ir cVR8Xd\PpVR8Xd\Pp\P!4pVP V4'dlVP 4'dV\P!4pWnVPV\P4pVR8wdVP^,#R#)a Get offset of a member of a structure by the member name :param sid: structure type ID :param member_name: name of structure member :returns: -1 if bad structure type ID is passed or no such member in the structure otherwise returns offset of the specified member. NOTE: Union members are, in IDA's internals, located at subsequent byte offsets: member 0 -> offset 0x0, member 1 -> offset 0x1, etc... z rz sr) rFRAME_UDM_NAME_RFRAME_UDM_NAME_Srrrrrrfr STRMEM_NAMEr )r member_namerrrs&& r get_member_offsetrusd00 d00    C 3CJJLL!ll3 7 78 "9::? " Ir c&\P!4pVPV4'deVP4'dO\P!4pWnVP V\P4pVR8wd VP#R#)a Get name of a member of a structure :param sid: structure type ID :param member_offset: member offset. The offset can be any offset in the member. For example, is a member is 4 bytes long and starts at offset 2, then 2,3,4,5 denote the same structure member. :returns: None if bad structure type ID is passed or no such member in the structure otherwise returns name of the specified member. Nr) rrrrrr rrrfrs&& r get_member_namersi    C 3CJJLL!" ll3 7 78 "988O r c&\P!4pVPV4'deVP4'dO\P!4pWnVP V\P4pVR8wd VP#R#)a Get comment of a member :param sid: structure type ID :param member_offset: member offset. The offset can be any offset in the member. For example, is a member is 4 bytes long and starts at offset 2, then 2,3,4,5 denote the same structure member. :param repeatable: is not used anymore :returns: None if bad structure type ID is passed or no such member in the structure otherwise returns comment of the specified member. Nr) rrrrrr rrr6)rrr3rrrs&&& r get_member_cmtrsi    C 3CJJLL!" ll3 7 78 "977N r c4\P!4pVPV4'dlVP4'dV\P!4pWnVP V\P4pVR8wdVP^,#R#)a Get size of a member :param sid: structure type ID :param member_offset: member offset. The offset can be any offset in the member. For example, is a member is 4 bytes long and starts at offset 2, then 2,3,4,5 denote the same structure member. :returns: None if bad structure type ID is passed, or no such member in the structure otherwise returns size of the specified member in bytes. r) rrrrrr rrrrs&& r get_member_sizersp    C 3CJJLL!" ll3 7 78 "988q= Ir c\\P!4pVPV4'dVP4'dj\P!4pWnVP V\P4pVR8wd(VPP4pV\8wdV#R#)a( Get structure id of a member :param sid: structure type ID :param member_offset: member offset. The offset can be any offset in the member. For example, is a member is 4 bytes long and starts at offset 2, then 2,3,4,5 denote the same structure member. :returns: -1 if bad structure type ID is passed or no such member in the structure otherwise returns structure id of the member. If the current member is not a structure, returns -1. r) rrrrrr rrr*rr!)rrrrrrls&& r get_member_stridrs    C 3CJJLL!" ll3 7 78 "9((""$Cg~ Ir c\P!4pVPV4'd'VP4'dVP 4#R#)z Is a structure a union? :param sid: structure type ID :returns: True: yes, this is a union id False: no NOTE: Unions are a special kind of structures F)rrrris_unionrs& r rrs<    C 3CJJLL||~ r c\P!4pW#n\P!4pVP V4'd6VP RV4\P 8XdVP4#\#)ad Define a new structure type :param index: -1 :param name: name of the new structure type. :param is_union: 0: structure 1: union :returns: -1 if can't define structure type because of bad structure name: the name is ill-formed or is already used in the program. otherwise returns ID of the new structure type N) rudt_type_data_trr create_udtset_named_typeTERR_OKrr!)indexrfrudtrs&&& r add_strucr s_  % % 'CL    C ~~cs11$=ATATT{{} Nr c\P!4pVPV4\P!RVP 44#)a) Delete a structure type :param sid: structure type ID :returns: 0 if bad structure type ID is passed 1 otherwise the structure type is deleted. All data and other structure types referencing to the deleted structure type will be displayed as array of bytes. N)rrrdel_numbered_type get_ordinalrs& r del_strucr"s:    C  ( (s/@ AAr c\P!4pVPV4'd#VPV4\P8H#R#F)rrr rename_typer)rrfrs&& r set_struc_namer3s>    C 3t$ (;(;;; r c\P!4pVPV4'd(VPW'*4\P8H#R#r$)rrr set_type_cmtr)rr6r3rs&&& r set_struc_cmtr:sD    C 3^4 8K8KKK r c \V4'd7\RT\P!T;'gR4W#WEWgV3 ,4#\RT\P!T;'gR4W#WE3,4#)a Add structure member :param sid: structure type ID :param name: name of the new member :param offset: offset of the new member -1 means to add at the end of the structure :param flag: type of the new member. Should be one of FF_BYTE..FF_PACKREAL (see above) combined with FF_DATA :param typeid: if is_struct(flag) then typeid specifies the structure id for the member if is_off0(flag) then typeid specifies the offset base. if is_strlit(flag) then typeid specifies the string type (STRTYPE_...). if is_stroff(flag) then typeid specifies the structure id if is_enum(flag) then typeid specifies the enum id if is_custom(flags) then typeid specifies the dtid and fid: dtid|(fid<<16) Otherwise typeid should be -1. :param nbytes: number of bytes in the new member :param target: target address of the offset expr. You may specify it as -1, ida will calculate it itself :param tdelta: offset target delta. usually 0 :param reftype: see REF_... definitions NOTE: The remaining arguments are allowed only if is_off0(flag) and you want to specify a complex offset expression :returns: 0 - ok, otherwise error code (one of typeinf.TERR_*) z7add_struc_member(%d, "%s", %d, %d, %d, %d, %d, %d, %d);rIz+add_struc_member(%d, "%s", %d, %d, %d, %d);)r|r(rrq) rrfr flagtypeidnbytesrtdeltareftypes &&&&&&&&&r add_struc_memberr@s<t}}QUXZeZnZnosoyoywyZz}CKQOU_fUhhi iEkNbNbcgcmcmkmNnpvEINNO Or cR\P!4pVPV4'd{VP4'de\P!4pWnVP V\P4pVR8wd#VPV4\P8H#R#)z Delete structure member :param sid: structure type ID :param member_offset: offset of the member :returns: != 0 - ok. NOTE: IDA allows 'holes' between members of a structure. It treats these 'holes' as unnamed arrays of bytes. Fr) rrrrrr rrdel_udmrrs&& r del_struc_memberresz    C 3CJJLL!" ll3 7 78 "9;;s#{':':: : r cR\P!4pVPV4'd{VP4'de\P!4pWnVP V\P4pVR8wd#VPWR4\P8H#R#)z Change structure member name :param sid: structure type ID :param member_offset: offset of the member :param name: new name of the member :returns: != 0 - ok. Fr) rrrrrr rr rename_udmr)rrrfrrrs&&& r set_member_namer|sz    C 3CJJLL!" ll3 7 78 "9>>#, 0C0CC C r c |\V4'd\RWW#VWVV3,4#\RWW#V3,4#)ax Change structure member type :param sid: structure type ID :param member_offset: offset of the member :param flag: new type of the member. Should be one of FF_BYTE..FF_PACKREAL (see above) combined with FF_DATA :param typeid: if is_struct(flag) then typeid specifies the structure id for the member if is_off0(flag) then typeid specifies the offset base. if is_strlit(flag) then typeid specifies the string type (STRTYPE_...). if is_stroff(flag) then typeid specifies the structure id if is_enum(flag) then typeid specifies the enum id if is_custom(flags) then typeid specifies the dtid and fid: dtid|(fid<<16) Otherwise typeid should be -1. :param nitems: number of items in the member :param target: target address of the offset expr. You may specify it as -1, ida will calculate it itself :param tdelta: offset target delta. usually 0 :param reftype: see REF_... definitions NOTE: The remaining arguments are allowed only if is_off0(flag) and you want to specify a complex offset expression :returns: !=0 - ok. z0set_member_type(%d, %d, %d, %d, %d, %d, %d, %d);z$set_member_type(%d, %d, %d, %d, %d);)r|r()rrrrrorrrs&&&&&&&&r set_member_typersV6t}}JcbfpvNT^eNggh h>#VZdjAkkllr c^\P!4pVPV4'dVP4'dk\P!4pWnVP V\P4pVR8wd)VPWbV'*4\P8H#R#)a Change structure member comment :param sid: structure type ID :param member_offset: offset of the member :param comment: new comment of the structure member :param repeatable: 1: change repeatable comment 0: change regular comment :returns: != 0 - ok Fr) rrrrrr rr set_udm_cmtr)rrr4r3rrrs&&&& r set_member_cmtrs~    C 3CJJLL!" ll3 7 78 "9??3Z@KDWDWW W r c\P!4pVPV4'dVP4'd\P!4pV^,VnVP V\P\P,4pVR8wd#VPWb4\P8H#R#)z Expand or shrink a structure type :param id: structure type ID :param offset: offset in the structure :param delta: how many bytes to add or remove :param recalc: is not used anymore :returns: True if ok, False on error Fr) rrrrrr r STRMEM_LOWBNDSTRMEM_SKIP_GAPS expand_udtr)rr rrecalcrrrs&&&& r expand_strucrs    C 3CJJLL!AX ll3 9 9+:V:V VW "9>>#-1D1DD D r c\P!4pVPRV4'd'VP4'dVP 4#\ #)zS Get enum by name :param name: enum type name :returns: enum type TID or BADADDR N)rrris_enumrr!)rfrs& r get_enumrs@    C $%%#++--{{} Nr c\P!4pVPV4'd3V\,^8wdVP 4#VP 4#R#)z{ Get name of enum :param enum_id: enum TID :param flags: use ENFL_REGEX to beautify the name :returns: enum name or None N)rrr ENFL_REGEXget_nice_type_name get_type_name)enum_idr8rs&& r get_enum_namersO    C 7##,1J,>1+Ds%%']#J[J[J]] r cn\P!4pVPV4VP4#)zD Get enum comment :param enum_id: enum TID :returns: enum comment )rrrrrrs& r get_enum_cmtrs/    C    r cn\P!4pVPV4VP4#)zb Get the number of the members of the enum :param enum_id: enum TID :returns: number of members )rrrget_enum_nmembersrs& r get_enum_sizer  s/    C  ""r cn\P!4pVPV4VP4#)z Get the width of a enum element allowed values: 0 (unspecified),1,2,4,8,16,32,64 :param enum_id: enum TID :returns: enum width or -1 in case of error )rrrget_enum_widthrs& r r r s/    C    r c\P!4p^pVPV4'Ed.VP4'EdVP 4pV^8Xd'\ P !\ P^4pMV^8Xd'\ P !\ P^4pMV^8Xd'\ P !\ P^4pMRV^ 8Xd'\ P !\ P^4pM%\ P !\ P^4pVP4'dV\ P,pV#)z Get flags determining the representation of the enum. (currently they define the numeric base: octal, decimal, hex, bin) and signness. :param enum_id: enum TID :returns: flag of 0 )rrrrget_enum_radixrSget_operand_flag FF_N_CHAR FF_N_NUMB FF_N_NUMO FF_N_NUMD FF_N_NUMH is_signedFF_SIGN)rrr-rs& r get_enum_flagr$s    C A 7## ""$ A:**9+>+>BA aZ**9+>+>BA aZ**9+>+>BA b[**9+>+>BA**9+>+>BA ==?? "" "A Hr c\P!4pVPV4pVR8wdVPV4#\#)zt Get a reference to an enum member by its name :param name: enum member name :returns: enum member TID or BADADDR r)rrget_edm_by_name get_edm_tidr!)rfrrs& r get_enum_member_by_namer@s=    C  d #C bys## Nr c\P!4pVPV4'd'VP4'dVP 4#\ #)zd Get the parent enum of an enum member :param const_id: id of const :returns: enum TID or BADADDR )rrrrrr!)const_idrs& r get_enum_member_enumrOs>    C 8$${{} Nr c@V^8dV\,p\P!4pVPV4\P!4pVPV4'd8VP WQW24R8wd!\P !VP4#R#)a: Get id of constant :param enum_id: id of enum :param value: value of constant :param serial: serial number of the constant in the enumeration. See op_enum() for details. :param bmask: bitmask of the constant ordinary enums accept only -1 as a bitmask :returns: id of constant or -1 if error r)r!rrredm_tfind_edmrrf)rr serialbmaskredms&&&& r get_enum_memberr%]s} qy     C    C 7## S(OSU(U--chh77 Ir c.\P!4pVPV4\P!4pVP V4VP P 4'g)V^,PVP4,#R#)zd Get first bitmask in the enum :param enum_id: id of enum :returns: id of constant or -1 if error r) rrrenum_type_data_tget_enum_details group_sizesemptyr calc_mask)rreis& r get_first_bmaskr-tsm    C  % % 'B >>   ! !!u{{R\\^++ Ir c"\P!4pVPV4\P!4pVP V4RpVP 4F,wrEW$,P VP4,pK. V#)zc Get last bitmask in the enum :param enum_id: id of enum :returns: id of constant or -1 if error r)rrrr'r( all_groupsr r+)rrr,r grp_startgrp_sizes& r get_last_bmaskr2sq    C  % % 'B A!# M  ",,. 0"1 Hr cV^8dV\,p\P!4pVPV4\P!4pVP V4RpVP 4pW,pVP4F<wrgW6,PV,pV'g W8XdRpK0V'gK:Vu# R#)zp Get next bitmask in the enum :param enum_id: id of enum :param bmask :returns: id of constant or -1 if error FTr r!rrrr'r(r+r/r ) rr#rr,r}vmaskr0r1rs && r get_next_bmaskr6s qy     C  % % 'B E LLNE NE!# M  % 'E UH "1 Ir cV^8dV\,p\P!4pVPV4\P!4pVP V4RpVP 4pW,pVP4FLwrgW6,PV,pW8Xd'VR8wdW4,PV,u#Ru#TpKN R#)zp Get prev bitmask in the enum :param enum_id: id of enum :param bmask :returns: id of constant or -1 if error rr4) rr#rr,prev_grp_startr5r0r1rs && r get_prev_bmaskr9s qy     C  % % 'BN LLNE NE!# M  % ' :7E7K2%++e3 SQS S" "1 Ir cV^8dV\,p\P!4pVPV4\P!4pVP W14pVR8wd VP #R#)z Get bitmask name (only for bitfields) :param enum_id: id of enum :param bmask: bitmask of the constant :returns: name of bitmask or None Nr)r!rrrr r!rf)rr#rr$rs&& r get_bmask_namer;s` qy     C    C ,,s "C byxx r cV^8dV\,p\P!4pVPV4\P!4pVP WA4pVR8wd VP #R#)z Get bitmask comment (only for bitfields) :param enum_id: id of enum :param bmask: bitmask of the constant :param repeatable: type of comment, 0-regular, 1-repeatable :returns: comment attached to bitmask or None Nr)r!rrrr r!r6)rr#r3rr$rs&&& r get_bmask_cmtr=s` qy     C    C ,,s "C byww r cV^8dV\,p\P!4pVPV4VP RV4pVR8wd#VP WB4\P 8H#R#)z Set bitmask name (only for bitfields) :param enum_id: id of enum :param bmask: bitmask of the constant :param name: name of bitmask :returns: True-ok, False-failed NFr)r!rrrr! rename_edmr)rr#rfrrs&&& r set_bmask_namer@se qy     C ,,tU #C by~~c(K,?,??? r cV^8dV\,p\P!4pVPV4VP RV4pVR8wd#VP WR4\P 8H#R#)z Set bitmask comment (only for bitfields) :param enum_id: id of enum :param bmask: bitmask of the constant :param cmt: comment repeatable - is not used anymore :returns: 1-ok, 0-failed NFr)r!rrrr! set_edm_cmtr)rr#r6r3rrs&&&& r set_bmask_cmtrC se qy     C ,,tU #C bys(K,?,??? r cNVP4p\4pV\8XdEVP4F/wppVP W,P V,4K1 MVP 4'dW,pVP4FwwrgW,P V,V8XgK%Wg,pV^8wd V^, p\Wh4F+pVP W,P V,4K- M \\V44#) r+rr! all_constantsaddr is_bfr/rlistsorted) r,r#r5valuesr_r0r1grp_ends && r __collect_enum_valuerOs LLNE UF ++-KS!Q JJrw}}u, -.  %']]_ !Y ##e+5#.q=NI 4CJJrw}}u455&5 v r cV^8dV\,p\P!4pVPV4\P!4pVP V4'd%\ W14p\V4^8wd V^,#R#)a Get first constant in the enum :param enum_id: id of enum :param bmask: bitmask of the constant (ordinary enums accept only -1 as a bitmask) :returns: value of constant or -1 if no constants are defined All constants are sorted by their values as unsigned longs. rr!rrrr'r(rOr0rr#rr,rLs&& r get_first_enum_memberrS1su qy     C  % % 'B B%b0 v;! !9  Ir cV^8dV\,p\P!4pVPV4\P!4pVP V4'd%\ W14p\V4^8wd VR,#R#)a Get last constant in the enum :param enum_id: id of enum :param bmask: bitmask of the constant (ordinary enums accept only -1 as a bitmask) :returns: value of constant or -1 if no constants are defined All constants are sorted by their values as unsigned longs. rrQrRs&& r get_last_enum_memberrUGsu qy     C  % % 'B B%b0 v;! ":  Ir cV^8dV\,p\P!4pVPV4\P!4pVP V4'dV\ WB4pWP4,pVPV4pV\V48dWV^,,#R#R# R#;i)ap Get next constant in the enum :param enum_id: id of enum :param bmask: bitmask of the constant ordinary enums accept only -1 as a bitmask :param value: value of the current constant :returns: value of a constant with value higher than the specified value. -1 if no such constants exist. All constants are sorted by their values as unsigned longs. r) r!rrrr'r(rOr+rr0rr r#rr,rLrs&&& r get_next_enum_memberrX^s qy     C  % % 'B B%b0  ,,u%CS[ !e}$! I2I   Is /B>>CczV^8dV\,p\P!4pVPV4\P!4pVP V4'dM\ WB4pWP4,pVPV4pV^8wdWV^, ,#R#R# R#;i)aq Get prev constant in the enum :param enum_id: id of enum :param bmask : bitmask of the constant ordinary enums accept only -1 as a bitmask :param value: value of the current constant :returns: value of a constant with value lower than the specified value. -1 if no such constants exist. All constants are sorted by their values as unsigned longs. r) r!rrrr'r(rOr+rrWs&&& r get_prev_enum_memberrZ{s qy     C  % % 'B B%b0  ,,u%Cax!e}$ I2I   Is &B55B:c\P!4p\P!4pVPW 4R8wd VP#R#)zQ Get name of a constant :param const_id: id of const Returns: name of constant Nr)rrr get_edm_by_tidrfrrr$s& r get_enum_member_namer^s?    C    C #(B.xx r c\P!4p\P!4pVPW04R8wd VP#R#)zw Get comment of a constant :param const_id: id of const :param repeatable: not used anymore :returns: comment string Nr)rrr r\r6)rr3rr$s&& r get_enum_member_cmtr`s?    C    C #(B.ww r c\P!4p\P!4pVPW 4R8wd"VPVP 4,#R#)z[ Get value of an enum member :param const_id: id of const :returns: member value or None Nr)rrr r\r calc_enum_maskr]s& r get_enum_member_valuercsN    C    C #(B.yy3--/// r cB\P!4pVPRV4pVR8wdqVP4'd[\P!4pVP V4'd/VP V4pVeW4^,,P#R#)z] Get bitmask of an enum member :param const_id: id of const :returns: member value or None Nr)rrr\is_bitmask_enumr'r(get_constant_groupr )rrrr,grps& r get_enum_member_bmaskrhs    C  T8 ,C byS((**  ) ) +    # #'',Ca&z''' r c\P!4p\P!V4'd^M\P!V^4pVP WB\P ,^8g4\P!4pVPV4'd6VPRV4\P8XdVP4#\#)z Add a new enum type :param idx: is not used anymore :param name: name of the enum. :param flag: flags for representation of numeric constants in the definition of enum. :returns: id of new enum or BADADDR N) rr'rSr get_radixset_enum_radixrr create_enumrrrr!)rrfrr,rrs&&& r add_enumrms  % % 'B##D))Ay/B/B4/KEeY%6%661<=    C rs11$=ATATT{{} Nr cv\P!R\P!V4\P4#)zD Delete an enum type :param enum_id: id of enum :returns: success N)rdel_named_typerNTF_TYPE)rs&r del_enumrqs*  % %dK,D,DW,M{OcOc ddr c\P!4pVPV4'dVPV4'd^#^#)zh Set name of enum type :param enum_id: id of enum :param name: new enum name :returns: 1-ok, 0-failed )rrrr)rrfrs&& r set_enum_namerss7    C 7##(=(= r c>\P!4p\P!V4'd^pM\P!V^4pVP V4;'d;VP W1\P,^8g4\P8H#)za Set enum constant representation flags :param enum_id: enum TID :param flag :returns: success ) rrrSrrjrrkrr)rrrrs&& r set_enum_flagrus{    C$##D!,   w ' } }C,>,>uiN_N_G_deFe,fjuj}j},}}r cp\P!4pVPV4VPV4#)z Set the width of enum base type :param enum_id: enum TID :param nbytes: width of enum base type, allowed values: 0 (unspecified),1,2,4,8,16,32,64 :returns: success )rrrset_enum_width)rrrs&& r rwrws1    C   f %%r cn\P!4pVPV4VP4#)zo Is enum a bitmask ? :param enum_id: enum TID :returns: if it is a bitmask enum return True, otherwise False )rrrrers& r rIrI's/    C     r c\P!4pVPV4;'d]TPV'd\PPM\PP 4\P 8H#)z} Set or clear the 'bitmask' attribute of an enum :param enum_id: enum TID :param bf: bitmask enum or not :returns: success )rrrset_enum_is_bitmask ENUMBM_ON ENUMBM_OFFr)rbfrs&& r set_enum_bfr~4s    C   w ' d dC,C,CegKDWDWDaDamxnAnAnLnL-MQ\QdQd-ddr c\P!4pVPV4'dVPW'*4'd^#^#)z Set comment for enum type :param enum_id: enum TID :param cmt: comment :param repeatable: is comment repeatable ? :returns: 1-ok, 0-failed )rrrr)rr6r3rs&&& r set_enum_cmtrAs;    C 7##(8(8n(M(M r cV^8dV\,p\P!4pVPV4'd3\P!4pWnW%nVPWS4#\P#)a Add a member of enum - a symbolic constant :param enum_id: id of enum :param name: name of symbolic constant. Must be unique in the program. :param value: value of symbolic constant. :param bmask: bitmask of the constant ordinary enums accept only -1 as a bitmask all bits set in value should be set in bmask too :returns: 0-ok, otherwise error code (one of ENUM_MEMBER_ERROR_*) ) r!rrrr rfr add_edm TERR_BAD_TYPE)rrfr r#rr$s&&&& r add_enum_memberrQsg qy     C 7##! {{3&&  $ $$r cV^8dV\,p\P!4pVPV4VP RWV4pVR8wd'VP V4\P 8Xd^#^#)aH Delete a member of enum - a symbolic constant :param enum_id: id of enum :param value: value of symbolic constant. :param serial: serial number of the constant in the enumeration. See op_enum() for for details. :param bmask: bitmask of the constant ordinary enums accept only -1 as a bitmask :returns: 1-ok, 0-failed Nr)r!rrrr!del_edmr)rr r"r#rrs&&&& r del_enum_memberrisf qy     C ,,tU6 2C byS[[%)<)<< r c\P!4pVPRV4pVR8wd'VPW14\P8Xd^#^#)zt Set name of enum member :param const_id: enum constant TID :param name: new member name :returns: 1-ok, 0-failed Nr)rrr\r?r)rrfrrs&& r set_enum_member_namersG    C  T8 ,C byS^^C.+2E2EE r c\P!V4p\P!4pVPV4pVR8wd'VP WQ4\P 8Xd^#^#)z Set comment for enum member :param const_id: enum constant TID :param cmt: comment :param repeatable: is not used anymore :returns: 1-ok, 0-failed r)rrrrrBr)rr6r3rfrrs&&& r set_enum_member_cmtrsU  # #H -D    C  d #C byS__S.+2E2EE r z $ idc_array c4V\P8XdR#V#)zs Long to minus 1: If the 'v' appears to be the 'signed long' version of -1, then return -1. Otherwise, return 'v'. r ida_netnodeBADNODEvs&r __l2m1rs  K   r c4VR8Xd\P#V#)z{ Long -1 to BADNODE: If the 'v' appears to be the 'signed long' version of -1, then return BADNODE. Otherwise, return 'v'. rrrs&r __m1tolrs  Bw"""r ca]tRtRtoRtRtRtRtRtRt Rt R t R t R t R tR tRtRtRtRtRtRtRtRtRtRtRtRtRtRtRtRtRt Rt!R t"Vt#R!#)"__dummy_netnodeia Implements, in an "always failing" fashion, the netnode functions that are necessary for the array-related functions. The sole purpose of this singleton class is to serve as a placeholder for netnode-manipulating functions, that don't want to each have to perform checks on the existence of the netnode. (..in other words: it avoids a bunch of if/else's). See __GetArrayById() for more info. c^#r)rselfrs&*r rename__dummy_netnode.renameAr cR#r$rrs&*r kill__dummy_netnode.kills4r cR#rFrrrs&*r r__dummy_netnode.indexs2Ir c^#r)rrs&*r altset__dummy_netnode.altsetrr c^#r)rrs&*r supset__dummy_netnode.supsetrr c^#r)rrs&*r altval__dummy_netnode.altvalrr c^#r)rrs&*r supval__dummy_netnode.supvalrr c^#r)rrs&*r altdel__dummy_netnode.altdelrr c^#r)rrs&*r supdel__dummy_netnode.supdelrr cR#rrrs&*r altfirst__dummy_netnode.altfirstbyr cR#rrrs&*r supfirst__dummy_netnode.supfirstrr cR#rrrs&*r altlast__dummy_netnode.altlastRir cR#rrrs&*r suplast__dummy_netnode.suplastrr cR#rrrs&*r altnext__dummy_netnode.altnextrr cR#rrrs&*r supnext__dummy_netnode.supnextrr cR#rrrs&*r altprev__dummy_netnode.altprevrr cR#rrrs&*r supprev__dummy_netnode.supprevrr c^#r)rrs&*r hashset__dummy_netnode.hashsetQr c^#r)rrs&*r hashval__dummy_netnode.hashvalrr c^#r)rrs&*r hashstr__dummy_netnode.hashstrrr c^#r)rrs&*r hashstr_buf__dummy_netnode.hashstr_bufr c^#r)rrs&*r hashset_idx__dummy_netnode.hashset_idxrr c^#r)rrs&*r hashset_buf__dummy_netnode.hashset_bufrr c^#r)rrs&*r hashval_long__dummy_netnode.hashval_longs!r c^#r)rrs&*r hashdel__dummy_netnode.hashdelrr c^#r)rrs&*r hashfirst__dummy_netnode.hashfirstsqr c^#r)rrs&*r hashnext__dummy_netnode.hashnextar c^#r)rrs&*r hashprev__dummy_netnode.hashprevrr c^#r)rrs&*r hashlast__dummy_netnode.hashlastrr rN)$rrrr r rrrrrrrrrrrrrrrrrrrrrrrrrrrrrr __classdictcell__ __classdict__s@r rrsf &%%%%%%%((''''''&&&***+&(''''r rc,\P!V4pVP4pVeVP\4'g\ P #V# \d\ P u#\d\ P u#i;i)a- Get an array, by its ID. This (internal) wrapper around 'idaaip.netnode(array_id)' will ensure a certain safety around the retrieval of arrays (by catching quite unexpect[ed|able] exceptions, and making sure we don't create & use `transient' netnodes). :param array_id: A positive, valid array ID. ) rnetnoderGr,_IDC_ARRAY_PREFIXrinstance TypeErrorr)array_idnodenodenames& r __GetArrayByIdrsy (""8,==?  8#6#67H#I#I"++ +K (''' ('''(s*AAAAB6B?BBc\P!4pVP\V,4pVR8XdR#VP 4#)zk Create array. :param name: The array name. :returns: -1 in case of failure, a valid array_id otherwise. Fr)rrcreaterr)rfrrSs& r create_arrayr s>    D ;;(4/ 0C e| zz|r cv\\P!\V,^R4P 44#)z Get array array_id, by name. :param name: The array name. :returns: -1 in case of failure (i.e., no array with that name exists), a valid array_id otherwise. F)rrrrrr"s&r get_array_idrs- +%%&7$&>5IOOQ RRr cR\V4P\V,4^8H#)z Rename array, by its ID. :param id: The ID of the array to rename. :param newname: The new name of the array. :returns: 1 in case of success, 0 otherwise )rrr)rnewnames&&r rename_arrayr )s% ( # * *+ ( # * *3 66r c6\V4PW4#)z Sets the string value of an array element. :param array_id: The array ID. :param idx: Index of an element. :param value: String value to store in the array :returns: 1 in case of success, 0 otherwise )rrr s&&&r set_array_stringrKrr c\V4pV\8XdVPW 4#V\8XdVP W 4pVf^#T#^#)aV Get value of array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :param idx: Index of an element. :returns: Value of the specified array element. Note that this function may return char or long result. Unexistent array elements give zero as a result. )rAR_LONGrAR_STRr)rrrrrSs&&& r get_array_elementrXsK ( #D g~{{3$$ kk##Kq(S(r c\V4pV\8XdVPW 4#V\8XdVP W 4#^#)z Delete an array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :param idx: Index of an element. :returns: 1 in case of success, 0 otherwise. )rrrrrrrrrs&&& r del_array_elementrns= ( #D g~{{3$$ {{3$$r c\V4pV\8Xd\VPV44#V\8Xd\VP V44#R#)a Get index of the first existing array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :returns: -1 if the array is empty, otherwise index of first array element of given type. r)rrrrrrrrrs&& r get_first_indexrsI ( #D g~dmmC()) dmmC()) r c\V4pV\8Xd\VPV44#V\8Xd\VP V44#R#)z Get index of last existing array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :returns: -1 if the array is empty, otherwise index of first array element of given type. r)rrrrrrrs&& r get_last_indexrsI ( #D g~dll3'(( dll3'(( r c\V4pV\8Xd%\VP\ V4V44#V\ 8Xd%\VP \ V4V44#R# \dRu#i;i)a2 Get index of the next existing array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :param idx: Index of the current element. :returns: -1 if no more elements, otherwise returns index of the next array element of given type. r)rrrrrrr OverflowErrorrs&&& r get_next_indexr n ( #D  '>$,,ws|S9: : F]$,,ws|S9: :I  .A-.A-+A-- A=<A=c\V4pV\8Xd%\VP\ V4V44#V\ 8Xd%\VP \ V4V44#R# \dRu#i;i)a: Get index of the previous existing array element. :param tag: Tag of array, specifies one of two array types: AR_LONG, AR_STR :param array_id: The array ID. :param idx: Index of the current element. :returns: -1 if no more elements, otherwise returns index of the previous array element of given type. r)rrrrrrrrrs&&& r get_prev_indexr$r!r"c6\V4PW4#)z Sets the long value of a hash element. :param hash_id: The hash ID. :param key: Key of an element. :param value: 32bit or 64bit value to store in the hash :returns: 1 in case of success, 0 otherwise )rrhash_idr|r s&&&r set_hash_longr( ' " . .s ::r c6\V4PV4#)z Gets the long value of a hash element. :param hash_id: The hash ID. :param key: Key of an element. :returns: the 32bit or 64bit value of the element, or 0 if no such element. )rrr'r|s&&r get_hash_longr,s ' " / / 44r c6\V4PW4#)z Sets the string value of a hash element. :param hash_id: The hash ID. :param key: Key of an element. :param value: string value to store in the hash :returns: 1 in case of success, 0 otherwise )rrr&s&&&r set_hash_stringr.r)r c6\V4PV4#)z Gets the string value of a hash element. :param hash_id: The hash ID. :param key: Key of an element. :returns: the string value of the element, or None if no such element. )rrr+s&&r get_hash_stringr0s ' " . .s 33r c6\V4PV4#)z| Delete a hash element. :param hash_id: The hash ID. :param key: Key of an element :returns: 1 upon success, 0 otherwise. )rrr+s&&r del_hash_stringr2 s ' " * *3 //r cD\V4P4pVf^#T#)z_ Get the first key in the hash. :param hash_id: The hash ID. :returns: the key, 0 otherwise. )rrr'rs& r get_first_hash_keyr5s& w))+A 1 q r cD\V4P4pVf^#T#)z^ Get the last key in the hash. :param hash_id: The hash ID. :returns: the key, 0 otherwise. )rrr4s& r get_last_hash_keyr7%s& w((*A 1 q r cF\V4PV4pVf^#T#)z Get the next key in the hash. :param hash_id: The hash ID. :param key: The current key. :returns: the next key, 0 otherwise )rrr'r|rs&& r get_next_hash_keyr:1( w((-A 1 q r cF\V4PV4pVf^#T#)z Get the previous key in the hash. :param hash_id: The hash ID. :param key: The current key. :returns: the previous key, 0 otherwise )rrr9s&& r get_prev_hash_keyr=>r;r cd\P!V\P4pV'd^#^#)zS Load a type library :param name: name of type library. :returns: 1-ok, 0-failed. )radd_tilADDTIL_DEFAULT)rftils& r add_default_tilrB]s%   dK$>$> ?C r c\P!4pVPRV4'dVP4#\#)a Copy information from type library to database Copy structure, union, or enum definition from the type library to the IDA database. :param idx: -1, ignored :param type_name: name of type to copy :returns: BADNODE-failed, otherwise the type id (structure id or enum id) N)rrr force_tidr!)r type_namers&& r import_typerFks6    C $ **}} Nr c.\P!V4#)zn Get type of function/variable :param ea: the address of the object :returns: type string or None if failed )r idc_get_typer4s&r rr|s  # #B ''r c\V\4'd8\V4^8Xd V^,pM[\V4^8Xd V^,pMARpM>\V\4'dTpM%\V\4'd\ V^4wr!p\X\4'd \ P!RV4pVfR#T#\R4h)aF Returns the size of the type. It is equivalent to IDC's sizeof(). :param typestr: can be specified as a typeinfo tuple (e.g. the result of get_tinfo()), serialized type byte string, or a string with C declaration (e.g. "int") :returns: -1 if typestring is not valid or has no size. otherwise size of the type NzKidc.sizeof(): expected type tuple, serialized type string, or C declarationr) rtupler0r+ru parse_declrcalc_type_sizer)typestrtprfrMrs& r sizeofrOs'5!! g,! aj LA qz GU # # GS ! !!'1-1"e  % %dB /qIb%A% d eer c.\P!V4#)z Get type information of function/variable as 'typeinfo' object :param ea: the address of the object :returns: None on failure, or (type, fields) tuple. )ridc_get_type_rawr4s&r get_tinforRs  ' ' ++r c.\P!V4#)z Get local type information as 'typeinfo' object :param ordinal: slot number (1...NumberOfLocalTypes) :returns: None on failure, or (type, fields) tuple. )ridc_get_local_type_rawordinals&r get_local_tinforWs  - -g 66r c.\P!V4#)z Guess type of function/variable :param ea: the address of the object, can be the structure member id too :returns: type string or None if failed )ridc_guess_typer4s&r guess_typerZs  % %b ))r cVfRp\V\P4'd\V4^8XdRpM\V4^8Xd VR,pMTp\P !RV^,V^,W4#)a Apply the specified type to the address :param ea: the address of the object :param py_type: typeinfo tuple (type, fields) as get_tinfo() returns or tuple (name, type, fields) as parse_decl() returns or None if specified as None, then the item associated with 'ea' will be deleted. :param flags: combination of TINFO_... constants or 0 :returns: Boolean NrI:rFNN)r r )rr string_typesr0r apply_type)r5py_typer8pts&&& r r]r]sj':2233G 8I  w<1 r{""  ! !$1r!ub @@r icbVR8wd\V\4pVfR#MRp\W\4#)a- Set type of function/variable :param ea: the address of the object :param newtype: the type string in C declaration form. Must contain the closing ';' if specified as an empty string, then the item associated with 'ea' will be deleted. :returns: 1-ok, 0-failed. rIN)rKPT_SILr]TINFO_DEFINITE)r5newtyper_s&& r SetTyperds8"}  ( :  bn --r c~\V4^8wdVR,R8wd VR,p\P!RW4#)z Parse type declaration :param inputtype: file name or C declarations (depending on the flags) :param flags: combination of PT_... constants or 0 :returns: None on failure or (name, type, fields) tuple ;Nr)r0ridc_parse_decl inputtyper8s&&r rKrKs7 9~y}3O  % %dI ==r c.\P!W4#)z Parse type declarations :param inputtype: file name or C declarations (depending on the flags) :param flags: combination of PT_... constants or 0 :returns: number of parsing errors (0 no errors) )ridc_parse_typesrhs&&r parse_declsrls  & &y 88r c!RR\P4pV!4p\\RVP R444p\P !VRWA4VP #)z Print types in a format suitable for use in a header file :param ordinals: comma-separated list of type ordinals :param flags: combination of PDF_... constants or 0 :returns: string containing the type definitions c,a]tRtRtoRtRtRtVtR#)print_decls..def_sinki1cR\PPV4RVnR#)rIN)r text_sink_t__init__rN)rs&r rr&print_decls..def_sink.__init__3s  # # , ,T 2DIr c8V;PV, un^#r)rN)rdefstrs&&r _print$print_decls..def_sink._print7s II Ir ruN)rrrr rrrwr rrs@r def_sinkro1s   r ryc\V4#r$)r)ls&r r'print_decls..<sc!fr ,N)rrqrJmapsplit print_declsrN)ordinalsr8rysink py_ordinalss&& r rr(sT;** :Ds,hnnS.ABCKD$ ; 99r c.\P!R4#)z] Get number of local types + 1 :returns: value >= 1. 1 means that there are no local types. N)rget_ordinal_limitrr r rrHs  ( ( ..r c0\P!WV4#)at Parse one type declaration and store it in the specified slot :param ordinal: slot number (1...NumberOfLocalTypes) -1 means allocate new slot or reuse the slot of the existing named type :param input: C declaration. Empty input empties the slot :param flags: combination of PT_... constants or 0 :returns: slot number or 0 if error )ridc_set_local_type)rVinputr8s&&&r set_local_typerQs  ) )'% @@r ct\V4wr#V'd#\V4p\P!W#WA4#R#)zy Retrieve a local type declaration :param flags: any of PRTYPE_* constants :returns: local type as a C declaration or "" rI)rWget_numbered_type_nameridc_print_type)rVr8r*fieldsrfs&& r GetLocalTyper`s3 %W-NT #G ,d  ' 'd BB r ii c.\P!V4#)zu Retrieve a local type name :param ordinal: slot number (1...NumberOfLocalTypes) returns: local type name or None )ridc_get_local_type_namerUs&r rr}s  . .w 77r cz\P!V4pV'g^#Wn\P!V4#)z Set hidden range state :param ea: any address belonging to the hidden range :param visible: new state of the range :returns: != 0 - ok )rSget_hidden_rangevisibleupdate_hidden_range)r5rhas&& r rrs0  # #B 'B  ,,R00r c#"\P!4p\P!V4pV'dVx\P!V4pK$R#5i)z% INTERNAL: Enumerate process modules N)r modinfo_trget_first_moduleget_next_module)ryresults r _get_modulesrsB   F  % %f -F  ((0 s 3AAc@\4FpVPu# R#)zU Enumerate process modules :returns: first module's base address or None on failure Nrr)rys r rrs .{{!r cRp\4F.pV'dVPu#VPV8XgK,RpK0 R#)z Enumerate process modules :param base: previous module's base address :returns: next module's base address or None on failure FTNr)rfounditrys& r rrs8G. ;;  ;;$ G ! r cf\4F"pVPV8XgKVPu# ^#)zg Get process module name :param base: the base address of the module :returns: required info or None )rrrfrrys& r get_module_namers+. ;;$ ;; !r cf\4F"pVPV8XgKVPu# R#)ze Get process module size :param base: the base address of the module :returns: required info or -1 r)rrrrs& r get_module_sizers-. ;;$ ;; ! r c8\\\,^4#r))wait_for_next_event WFNE_CONT WFNE_NOWAITrr r resume_processrs y4a 88r c\R\P!V4,4pVPR4'd \ R4hV#)zSends a command to the debugger module and returns the output string. An exception will be raised if the debugger is not running or the current debugger does not export the 'send_dbg_command' IDC command. zsend_dbg_command("%s"); IDC_FAILUREz?Debugger command is available only when the debugger is active!)r(rrqr, Exception)cmdrs& r send_dbg_commandrs? *[-A-A#-FFGA||M""YZZ Hr cj\P!4pV'gQR4hVP4#)z+ Get ID of debug event :returns: event ID Could not retrieve debug event)rget_debug_eventeidevs r get_event_idrDs+  "B ///2 668Or cb\P!4pV'gQR4hVP#)z6 Get process ID for debug event :returns: process ID r)rrpidrs r get_event_pidrO)  "B ///2 66Mr cb\P!4pV'gQR4hVP#)z0 Get type ID for debug event :returns: type ID r)rrrlrs r get_event_tidrZrr cb\P!4pV'gQR4hVP#)z& Get ea for debug event :returns: ea r)rrr5rs r get_event_eares)  "B ///2 55Lr cb\P!4pV'gQR4hVP#)z0 Is the debug event handled? :returns: boolean r)rrhandledrs r is_event_handledrps*  "B ///2 ::r cv\P!4pV'gQR4h\P!V4#)z8 Get module name for debug event :returns: module name r)rrrget_event_module_namers r rr}1  "B ///2  ( ( ,,r cv\P!4pV'gQR4h\P!V4#)z8 Get module base for debug event :returns: module base r)rrrget_event_module_basers r rrrr cv\P!4pV'gQR4h\P!V4#)z8 Get module size for debug event :returns: module size r)rrrget_event_module_sizers r rrrr cj\P!4pV'gQR4hVP4#)z] Get exit code for debug event :returns: exit code for PROCESS_EXITED, THREAD_EXITED events r)rr exit_coders r get_event_exit_coders,  "B ///2 <<>r cv\P!4pV'gQR4h\P!V4#)z Get debug event info :returns: event info: for THREAD_STARTED (thread name) for LIB_UNLOADED (unloaded library name) for INFORMATION (message to display) r)rrrget_event_infors r rrs1  "B ///2  ! !" %%r cv\P!4pV'gQR4h\P!V4#)zG Get hardware address for BREAKPOINT event :returns: hardware address r)rrrget_event_bpt_hears r rrs1  "B ///2  $ $R ((r cv\P!4pV'gQR4h\P!V4#)zB Get exception code for EXCEPTION event :returns: exception code r)rrrget_event_exc_coders r rr1  "B ///2  % %b ))r cv\P!4pV'gQR4h\P!V4#)z@ Get address for EXCEPTION event :returns: adress of exception r)rrrget_event_exc_ears r rr1  "B ///2  # #B ''r cv\P!4pV'gQR4h\P!V4#)z; Can it continue after EXCEPTION event? :returns: boolean r)rrrcan_exc_continuers r rrrr cv\P!4pV'gQR4h\P!V4#)z5 Get info for EXCEPTION event :returns: info string r)rrrget_event_exc_infors r rrrr i`c.\P!W4#)a  Set register value :param name: the register name :param value: new register value NOTE: The debugger should be running It is not necessary to use this function to set register values. A register name in the left side of an assignment will do too. )r set_reg_val)r rfs&&r set_reg_valuers   t ++r c\P!4p\P!W4'd VP#\#)z Get breakpoint address :param n: number of breakpoint, is in range 0..get_bpt_qty()-1 :returns: address of the breakpoint or BADADDR )rbpt_tgetn_bptr5r!)rbpts& r get_bpt_ear"s. --/Cvv r c\P!4p\P!W4'gR#V\8Xd VP#V\ 8Xd VP #V\8Xd VP#V\8Xd VP#V\8Xd VP#V\8Xd VP#V\8Xd VP #V\"8Xd VP$#R#)z Get the characteristics of a breakpoint :param ea: any address in the breakpoint range :param bptattr: the desired attribute code, one of BPTATTR_... constants :returns: the desired attribute value or -1 r)rrget_bpt BPTATTR_EAr5 BPTATTR_SIZEr BPTATTR_TYPEr* BPTATTR_COUNT pass_count BPTATTR_FLAGSr8 BPTATTR_COND condition BPTATTR_PIDr BPTATTR_TIDrl)r5bptattrrs&& r get_bpt_attrr2s --/C ??2 # # j 66M l "88O l "88O m #>> ! m #99  l "== k !77N k !77N r c\P!4p\P!W4'gR#V\\\ \ \\39dR#V\8XdW#n V\8XdW#n V\ 8XdW#n V\ 8XdW#n V\8XdW#n V\8XdW#n\P!V4#)a modifiable characteristics of a breakpoint :param address: any address in the breakpoint range :param bptattr: the attribute code, one of BPTATTR_* constants BPTATTR_CND is not allowed, see set_bpt_cond() :param value: the attribute value :returns: success F)rrrrrrrrrrr*rr8rrl update_bpt)addressrr rs&&& r set_bpt_attrr~s --/C ??7 ( ( L, }Vacnp p l "H l "H m #"N m #I k !G k !G!!#&&r c(\P!4p\P!W4'gR#WnV'dV;P\ ,unMV;P\ (,un\P !V4#)z Set breakpoint condition :param ea: any address in the breakpoint range :param cnd: breakpoint condition :param is_lowcnd: 0 - regular condition, 1 - low level condition :returns: success F)rrrrr8 BPT_LOWCNDr)r5cnd is_lowcndrs&&& r set_bpt_condrsX --/C ??2 # #M Z  j[   c ""r cV\\\39gQR4hV\8Xd\P!V4#V\8Xd\P !V4#V\8Xd\P !V4#R#)z Enable step tracing :param trace_level: what kind of trace to modify :param enable: 0: turn off, 1: turn on :returns: success z,trace_level must be one of TRACE_* constantsF) TRACE_STEP TRACE_INSN TRACE_FUNCrenable_step_traceenable_insn_traceenable_func_trace) trace_levelenables&&r enable_tracingrss J J@ @767 @j ((00j ((00j ((00 r c,\P!4#)z Clear the current trace buffer )r clear_trace)filenames&r rrs     r cvV\\\39d \R4hV\8Xd\P !V4#V\8Xd1\ P!V4pV'd VP#\#V\8Xd1\P!V4pV'd VP#\#R#)z Get item color :param ea: address of the item :param what: type of the item (one of CIC_* constants) :returns: color code in RGB (hex 0xBBGGRR) 5'what' must be one of CIC_ITEM, CIC_FUNC and CIC_SEGMN) CIC_ITEMCIC_FUNCCIC_SEGM ValueErrorr:get_item_colorrOrPcolorDEFCOLORrUrV)r5rr\rs&& r get_colorrs Xx33PQQ x&&r** x!!"% :: O x  $ 99 O r cV\\\39d \R4hV\8Xd\P !W4#V\8XdF\ P!V4pV'd&W#n\\ P!V44#R#V\8Xd@\P!V4pV'd W$n\VP44#R#R#)z Set item color :param ea: address of the item :param what: type of the item (one of CIC_* constants) :param color: new color code in RGB (hex 0xBBGGRR) :returns: success (True or False) rFN)rrr r r:set_item_colorrOrPr boolr)rUrVr)r5rr r\rs&&& r set_colorr4s Xx33PQQ x&&r11 x!!"% J --d34 4 x  $ I % % r c&\RV,4#)a Some ARM compilers in Thumb mode use BL (branch-and-link) instead of B (branch) for long jumps, since BL has more range. By default, IDA tries to determine if BL is a jump or a call. You can override IDA's decision using commands in Edit/Other menu (Force BL call/Force BL jump) or the following two functions. Force BL instruction to be a jump :param ea: address of the BL instruction :returns: 1-ok, 0-failed zforce_bl_jump(0x%x)rr4s&r force_bl_jumprXs )", --r c&\RV,4#)zg Force BL instruction to be a call :param ea: address of the BL instruction :returns: 1-ok, 0-failed zforce_bl_call(0x%x)rr4s&r force_bl_callris )", --r cf\V4pV'd W1,pM W1(,p\W4R#r$)rur)rbitr rs&&& r set_flagrus'3!  A DAsr c\4#r$) get_screen_earr r herer~s =? "r c,\V^,4V8H#rE) prev_addrr4s&r is_mappedrs9RT?B./r rr))Tr)INFFL_LFLG_IDB_AF_AF2_SW_NM_DEMNAM_LN_OFLG_SCF_LMT_PREF_STRF_ABI_)Tr')Tr)Forgbase)Fr)Fr)Fperm)Fr)Fr8)Fr()Fr*)FrF)F)F)F)F)Fr*)Fr i)i)i)i)i)i)TrU)Tfrsize)TrW)TrX)Ffpd)Towner)Trefqty)r([r __future__rrr_rr ida_entryrrrrOrr%ida_idcrSrrrr*r2 ida_movesr:rLrrr ida_searchrUrrrida_xref _ida_idaapir>rrrCtypessysr!__EA64__WORDMASKrrrrrr!rSIZE_MAX__set_module_dynattrsrr0r+r.r1r6r8r9r=r@rCr:r>rArDrFMS_COMMFF_COMMrPrLrSFF_LABLrIrVrJrMrQrTrWrYrZrirbrrr{rurorrrrr^r_rlrfrrrrxrrrrrrr[r`rcrgrjrmrprsrvryr|rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrMS_CODEFF_FUNCFF_IMMDFF_JUMPNEF_SEGSNEF_RSCSNEF_NAMENEF_MANNEF_FILLNEF_IMPS NEF_FIRSTNEF_CODE NEF_RELOADNEF_FLATrrrrrrrrrrrrrrrr rrrIDCHK_OK IDCHK_ARG IDCHK_KEY IDCHK_MAXadd_idc_hotkeydel_idc_hotkeyjumpto auto_waitr(r.r6r5r;qexitrArGload_and_run_pluginplan_to_apply_idasgnr] create_insnr`SN_CHECKre SN_NOCHECK SN_PUBLIC SN_NON_PUBLICSN_WEAK SN_NON_WEAKSN_AUTO SN_NON_AUTO SN_NOLIST SN_NOWARNSN_LOCALset_cmtrrrtrnryr|r~rrrrrrrrcreate_custdatacreate_custom_data create_alignr del_items DELIT_SIMPLE DELIT_EXPANDDELIT_DELNAMESr AP_ALLOWDUPS AP_SIGNEDAP_INDEXAP_ARRAYAP_IDXBASEMASK AP_IDXDEC AP_IDXHEX AP_IDXOCT AP_IDXBINop_binop_octop_decop_hexop_chrr OPND_OUTERrREF_OFF8 REF_OFF16 REF_OFF32REF_LOW8 REF_LOW16 REF_HIGH8r REF_OFF64 REFINFO_RVAREFINFO_PASTENDREFINFO_NOBASEREFINFO_SUBTRACTREFINFO_SIGNEDOPop_segop_numop_fltset_forced_operandop_man toggle_signrop_enumr op_stkvarrrE_PREVE_NEXT get_extra_cmtupdate_extra_cmt del_extra_cmtset_manual_insnget_manual_insn put_dbg_bytepatch_dbg_byte patch_byte patch_word patch_dword patch_qword SR_inheritSR_userSR_auto SR_autostartrr auto_unmarkrAU_UNKAU_CODEAU_PROCAU_USEDAU_LIBFAU_FINALr OFILE_MAPr OFILE_IDC OFILE_LST OFILE_ASM OFILE_DIF GENFLG_MAPSEGGENFLG_MAPNAMEGENFLG_MAPDMNG GENFLG_MAPLOCGENFLG_IDCTYPEGENFLG_ASMTYPEGENFLG_GENHTML GENFLG_ASMINCrCHART_PRINT_NAMES CHART_GEN_GDLCHART_WINGRAPHCHART_NOLIBFUNCSrrget_root_filenameget_input_file_pathset_root_filenamer1retrieve_input_file_md5r3 get_db_byter get_wide_byterrr r r rread_dbg_memoryrget_original_byte get_wide_wordrrrrr#r!r&rr,r4r6r8 next_addrrr[r= next_not_tail prev_not_tail get_item_headr@rmrB GN_VISIBLE GN_COLORED GN_DEMANGLED GN_STRICTGN_SHORTGN_LONGGN_LOCALGN_ISRET GN_NOT_ISRETcalc_gtn_flagsrGrIrMGENDSM_FORCE_CODEGENDSM_MULTI_LINErPrTrVrZo_voidrar\rcr_rbr]r^ o_idpspec0 o_idpspec1 o_idpspec2 o_idpspec3 o_idpspec4 o_idpspec5o_trrego_dbrego_crrego_fprego_mmxrego_xmmreg o_reglist o_creglisto_creg o_fpreglisto_texto_condo_spro_twofpro_shmbmeo_crfo_crbo_dcrrfget_cmt GetCommentExget_forced_operandBPU_1BBPU_2BBPU_4B STRWIDTH_1B STRWIDTH_2B STRWIDTH_4B STRWIDTH_MASKSTRLYT_TERMCHRSTRLYT_PASCAL1STRLYT_PASCAL2STRLYT_PASCAL4 STRLYT_MASK STRLYT_SHIFTSTRTYPE_TERMCHR STRTYPE_C STRTYPE_C_16 STRTYPE_C_32STRTYPE_PASCALSTRTYPE_PASCAL_16 STRTYPE_LEN2STRTYPE_LEN2_16 STRTYPE_LEN4STRTYPE_LEN4_16 STRTYPE_C16rjro find_suspop find_code find_data find_unknown find_definedfind_imm find_text find_bytesrs INF_VERSION INF_PROCNAME INF_GENFLAGS INF_LFLAGSINF_DATABASE_CHANGE_COUNTINF_CHANGE_COUNTER INF_FILETYPE FT_EXE_OLD FT_COM_OLDFT_BINFT_DRVFT_WINFT_HEXFT_MEXFT_LXFT_LEFT_NLMFT_COFFFT_PEFT_OMFFT_SRECFT_ZIP FT_OMFLIBFT_AR FT_LOADERFT_ELF FT_W32RUNFT_AOUTFT_PRCFT_EXEFT_COMFT_AIXARFT_MACHO INF_OSTYPE OSTYPE_MSDOS OSTYPE_WIN OSTYPE_OS2 OSTYPE_NETW INF_APPTYPE APPT_CONSOLE APPT_GRAPHIC APPT_PROGRAM APPT_LIBRARY APPT_DRIVER APPT_1THREAD APPT_MTHREAD APPT_16BIT APPT_32BIT INF_ASMTYPE INF_SPECSEGSINF_AFr}INF_AF2 INF_BASEADDR INF_START_SS INF_START_CS INF_START_IP INF_START_EA INF_START_SPINF_MAIN INF_MIN_EA INF_MAX_EA INF_OMIN_EA INF_OMAX_EA INF_LOWOFF INF_LOW_OFF INF_HIGHOFF INF_HIGH_OFF INF_MAXREFINF_PRIVRANGE_START_EAINF_START_PRIVRANGEINF_PRIVRANGE_END_EAINF_END_PRIVRANGE INF_NETDELTA INF_XREFNUMINF_TYPE_XREFNUMINF_TYPE_XREFS INF_REFCMTNUM INF_REFCMTS INF_XREFFLAG INF_XREFSINF_MAX_AUTONAME_LEN INF_NAMETYPEINF_SHORT_DEMNAMES INF_SHORT_DNINF_LONG_DEMNAMES INF_LONG_DN INF_DEMNAMES INF_LISTNAMES INF_INDENTINF_CMT_INDENT INF_COMMENT INF_MARGIN INF_LENXREF INF_OUTFLAGS INF_CMTFLG INF_CMTFLAG INF_LIMITER INF_BORDERINF_BIN_PREFIX_SIZE INF_BINPREF INF_PREFFLAGINF_STRLIT_FLAGSINF_STRLIT_BREAKINF_STRLIT_ZEROESrvINF_STRLIT_PREFINF_STRLIT_SERNUM INF_DATATYPES INF_CC_ID COMP_MASKCOMP_UNKCOMP_MSCOMP_BC COMP_WATCOMCOMP_GNU COMP_VISAGECOMP_BP INF_CC_CM INF_CC_SIZE_I INF_CC_SIZE_B INF_CC_SIZE_EINF_CC_DEFALIGN INF_CC_SIZE_S INF_CC_SIZE_LINF_CC_SIZE_LLINF_CC_SIZE_LDBL INF_COMPILER INF_MODELINF_SIZEOF_INTINF_SIZEOF_BOOLINF_SIZEOF_ENUMINF_SIZEOF_ALGNINF_SIZEOF_SHORTINF_SIZEOF_LONGINF_SIZEOF_LLONGINF_SIZEOF_LDBL INF_ABIBITSINF_APPCALL_OPTIONSinf_get_abibitsinf_set_abibits inf_get_af inf_set_af inf_get_af2 inf_set_af2inf_get_appcall_optionsinf_set_appcall_optionsinf_get_apptypeinf_set_apptypeinf_get_asmtypeinf_set_asmtypeinf_get_baseaddrinf_set_baseaddrinf_get_bin_prefix_sizeinf_set_bin_prefix_size inf_get_cc_cm inf_set_cc_cminf_get_cc_defaligninf_set_cc_defalign inf_get_cc_id inf_set_cc_idinf_get_cc_size_binf_set_cc_size_binf_get_cc_size_einf_set_cc_size_einf_get_cc_size_iinf_set_cc_size_iinf_get_cc_size_linf_set_cc_size_linf_get_cc_size_ldblinf_set_cc_size_ldblinf_get_cc_size_llinf_set_cc_size_llinf_get_cc_size_sinf_set_cc_size_sinf_get_cmtflginf_set_cmtflginf_get_cmt_indentinf_set_cmt_indentinf_get_database_change_countinf_set_database_change_countinf_get_datatypesinf_set_datatypesinf_get_demnamesinf_set_demnamesinf_get_privrange_end_eainf_set_privrange_end_eainf_get_filetypeinf_set_filetypeinf_get_genflagsinf_set_genflagsinf_get_highoffinf_set_highoffinf_get_indentinf_set_indentinf_get_lenxrefinf_set_lenxrefinf_get_lflagsinf_set_lflagsinf_get_limiterinf_set_limiterinf_get_listnamesinf_set_listnamesinf_get_long_demnamesinf_set_long_demnamesinf_get_lowoffinf_set_lowoff inf_get_main inf_set_maininf_get_margininf_set_margininf_get_maxrefinf_set_maxrefinf_get_max_autoname_leninf_set_max_autoname_lenrKinf_set_max_earJinf_set_min_eainf_get_nametypeinf_set_nametypeinf_get_netdeltainf_set_netdeltainf_get_omax_eainf_set_omax_eainf_get_omin_eainf_set_omin_eainf_get_ostypeinf_set_ostypeinf_get_outflagsinf_set_outflagsinf_get_prefflaginf_set_prefflagr&inf_set_privrange_start_earinf_set_procnameinf_get_refcmtnuminf_set_refcmtnuminf_get_short_demnamesinf_set_short_demnamesinf_get_specsegsinf_set_specsegsinf_get_start_csinf_set_start_csinf_get_start_eainf_set_start_eainf_get_start_ipinf_set_start_ipinf_get_start_spinf_set_start_spinf_get_start_ssinf_set_start_ssinf_get_strlit_breakinf_set_strlit_breakinf_get_strlit_flagsinf_set_strlit_flagsinf_get_strlit_prefinf_set_strlit_prefinf_get_strlit_sernuminf_set_strlit_sernuminf_get_strlit_zeroesinf_set_strlit_zeroesinf_get_strtypeinf_set_strtypeinf_get_type_xrefnuminf_set_type_xrefnuminf_get_versioninf_set_versioninf_get_xrefflaginf_set_xrefflaginf_get_xrefnuminf_set_xrefnumrrurr SETPROC_IDBSETPROC_LOADERSETPROC_LOADER_NON_FATALrrrset_target_assemblerrrask_segask_ynmsgwarningerror set_ida_stateIDA_STATUS_READYIDA_STATUS_THINKINGIDA_STATUS_WAITINGIDA_STATUS_WORKrefresh_idaview_anywayrefresh_choosers refresh_listsrr% set_selector del_selectorrrrrrrr ADDSEG_OR_DIEADDSEG_NOTRUNC ADDSEG_QUIETADDSEG_FILLGAP ADDSEG_SPARSErrX SEGMOD_KILLrYrZrrrrsaAbs saRelByte saRelWord saRelPara saRelPage saRelDblesaRel4KsaGroup saRel32Bytes saRel64Bytes saRelQwordrscPrivscPubscPub2scStackscCommonscPub3rrrrSEG_NORMSEG_XTRNSEG_CODESEG_DATASEG_IMPSEG_GRPSEG_NULLSEG_UNDFSEG_BSS SEG_ABSSYMSEG_COMMSEG_IMEMrr SEGATTR_START SEGATTR_ENDSEGATTR_ORGBASErr SEGATTR_PERMSEGATTR_BITNESS SEGATTR_FLAGS SEGATTR_SELrrrrrr SEGATTR_TYPE SEGATTR_COLORr SFL_COMORGSFL_OBOK SFL_HIDDEN SFL_DEBUG SFL_LOADER SFL_HIDETYPEr MSF_SILENT MSF_NOFIX MSF_LDKEEP MSF_FIXONCE MOVE_SEGM_OKrMOVE_SEGM_ROOM MOVE_SEGM_IDPMOVE_SEGM_CHUNKMOVE_SEGM_LOADER MOVE_SEGM_ODDMOVE_SEGM_ORPHANMOVE_SEGM_DEBUGMOVE_SEGM_SOURCEFILESMOVE_SEGM_MAPPINGMOVE_SEGM_INVALrebase_programchange_storage_typeset_storage_typeSTT_VASTT_MMfl_CFfl_CNfl_JFfl_JNfl_F XREF_USERadd_crefdel_crefget_first_cref_fromget_next_cref_fromget_first_cref_toget_next_cref_toget_first_fcref_fromget_next_fcref_fromget_first_fcref_toget_next_fcref_todr_Odr_Wdr_Rdr_Tdr_Iadd_drefdel_drefget_first_dref_fromget_next_dref_fromget_first_dref_toget_next_dref_torrrrrrrrrrrrr rrrrrradd_funcrR set_func_endrr#r'r*rbrcFUNCATTR_FLAGSrErHrKrN FUNCATTR_FPDFUNCATTR_COLORrdFUNCATTR_REFQTYr%r, FUNC_NORETFUNC_FARFUNC_LIBFUNC_STATICDEF FUNC_STATIC FUNC_FRAME FUNC_USERFAR FUNC_HIDDEN FUNC_THUNK FUNC_BOTTOMBPFUNC_NORET_PENDING FUNC_SP_READYFUNC_PURGED_OK FUNC_TAIL FUNC_LUMINA FUNC_OUTLINEr.r0r2rQr8r=rCrFrIrLrOrQrTr[r]r`rfget_fchunk_refererrhrkrmrrrtrzr~radd_user_stkpntrr recalc_spd get_entry_qty add_entryget_entry_ordinal get_entryget_entry_name rename_entryget_next_fixup_eaget_prev_fixup_ear FIXUP_OFF8 FIXUP_OFF16 FIXUP_SEG16 FIXUP_PTR32 FIXUP_OFF32 FIXUP_PTR48 FIXUP_HI8 FIXUP_HI16 FIXUP_LOW8 FIXUP_LOW16 FIXUP_OFF64 FIXUP_CUSTOMr FIXUPF_REL FIXUPF_EXTDEF FIXUPF_UNUSEDFIXUPF_CREATEDrrrr del_fixup mark_position put_bookmarkget_marked_pos get_bookmarkget_mark_commentget_bookmark_descrrrrrrrrrrrrrrrrrrrrrrrrrrrrr r rrrr%r-r2r6r9r;r=r@rCrOrSrUrXrZr^r`rcrhrmrqrsrurwrIr~rrrrrrrratagrstagrobjectrrrrrr r rrrrrrr r$r(r,r.r0r2r5r7r:r=add_sourcefileget_sourcefiledel_sourcefileset_source_linnumget_source_linnumdel_source_linnumrBrFrrOSizeOfrRrWrZ TINFO_GUESSEDrbTINFO_DELAYFUNCr]raPT_NDCPT_TYPPT_VAR PT_PACKMASKPT_HIGHPT_LOWER PT_REPLACE PT_RAWARGS PT_SILENT PT_PAKDEFPT_PAK1PT_PAK2PT_PAK4PT_PAK8PT_PAK16PT_FILEHTI_STANDALONE PT_STANDALONErdrKrlr PDF_INCL_DEPS PDF_DEF_FWD PDF_DEF_BASEPDF_HEADER_CMTrrr PRTYPE_1LINE PRTYPE_MULTI PRTYPE_TYPE PRTYPE_PRAGMA PRTYPE_SEMI PRTYPE_CPP PRTYPE_DEF PRTYPE_NOARGS PRTYPE_NOARRS PRTYPE_NORESPRTYPE_RESTOREPRTYPE_NOREGEXPRTYPE_COLOREDPRTYPE_METHODSPRTYPE_1LINCMTradd_hidden_rangerrT load_debugger start_process exit_processsuspend_process get_processesattach_processdetach_processget_thread_qty getn_threadget_current_threadgetn_thread_name select_threadsuspend_thread resume_threadrrrrr step_into step_overrun_tostep_until_retrrrWFNE_ANY WFNE_SUSP WFNE_SILENTrrNOTASK DBG_ERROR DBG_TIMEOUTPROCESS_STARTEDPROCESS_EXITEDTHREAD_STARTED THREAD_EXITED BREAKPOINTSTEP EXCEPTION LIB_LOADED LIB_UNLOADED INFORMATIONPROCESS_ATTACHEDPROCESS_DETACHEDPROCESS_SUSPENDEDrefresh_debugger_memorytake_memory_snapshotget_process_state DSTATE_SUSP DSTATE_NOTASK DSTATE_RUNDSTATE_RUN_WAIT_ATTACHDSTATE_RUN_WAIT_ENDrrrrrrrrrrrrrrrset_debugger_optionsDOPT_SEGM_MSGSDOPT_START_BPTDOPT_THREAD_MSGSDOPT_THREAD_BPT DOPT_BPT_MSGS DOPT_LIB_MSGS DOPT_LIB_BPTDOPT_INFO_MSGS DOPT_INFO_BPTDOPT_REAL_MEMORYDOPT_REDO_STACKDOPT_ENTRY_BPT DOPT_EXCDLG EXCDLG_NEVEREXCDLG_UNKNOWN EXCDLG_ALWAYSDOPT_LOAD_DINFOget_debugger_event_condset_debugger_event_condset_remote_debuggerdefine_exception EXC_BREAK EXC_HANDLE get_reg_val get_reg_valuer get_bpt_qtyrrrrr BPT_WRITEBPT_RDWRBPT_SOFTBPT_EXEC BPT_DEFAULTrrBPT_BRK BPT_TRACE BPT_UPDMEM BPT_ENABLEDr BPT_TRACEONBPT_TRACE_INSNBPT_TRACE_FUNCBPT_TRACE_BBLKrrrBPLT_ABSBPLT_RELBPLT_SYMrradd_bptdel_bpt enable_bpt check_bpt BPTCK_NONEBPTCK_NO BPTCK_YES BPTCK_ACTrrrrget_step_trace_optionsset_step_trace_optionsST_OVER_DEBUG_SEGST_OVER_LIB_FUNCST_ALREADY_LOGGED ST_SKIP_LOOPSload_trace_filesave_trace_fileis_valid_trace_filediff_trace_filerget_trace_file_descset_trace_file_desc get_tev_qty get_tev_eaTEV_NONETEV_INSNTEV_CALLTEV_RETTEV_BPTTEV_MEM TEV_EVENT get_tev_type get_tev_tidget_tev_reg_val get_tev_regget_tev_reg_mem_qtyget_tev_mem_qtyget_tev_reg_mem get_tev_memget_tev_reg_mem_eaget_tev_mem_eaget_call_tev_calleeget_ret_tev_returnget_bpt_tev_earrrr r rrrrrrARGVrr r r s-$ &    !3 3!) z  ')#9 ! $$##&& A4H       1)               66651                      w  10009                                                                               :98888888888998899;;9988   z )  :-  :-""Z/""Z/""Z/$$z1 $$z1 ""Z/!!J.""Z/ $$z1 !!J.DDFFFFEFIGFE   z )   z )   z )   z )               ! !    " "  ]\\\\\ \^^^Q"\Q#L@?>   ++++       i2D ;   2    )!44 55?4   8&.. .!!## "" &&   $$   $$ "" "" !!   B>i&## (())**)*IC<*..%% #LL    '' '' ))W                     *7Z ! !           !!               % %##     ?0    D"      '' --'' ++++%%  ! !  ! ! ## ##   )0=&**"" * ??               4 ! !  ! !  ! !  ! !  ! !  ! ! )) ****)) ******))  I  T!..22..9#::))## -&'' H))2"//'' ))     & & /"" $)) ;  )$        * *'' '' '' %% +    $$               $$ (( / I,//// '&)( 3 ]] \\ \\ __ ^^ \\ \\ ]]                   """""""""""""" "" """" ""##A%""""""""""""#L  11   $$ $$ $$ && ((((((((%% && ,,&& )) )) ++..)) ,,)) ,,! %'9 > &%% ## ## && && ""## ## X    ,                       + (               *&                                        ! "  G!8!8H_H_ `G !3!3HZHZ [G !4!4H[H[ \G!@!@HgHg h G !8!8H_H_ ` G !8!8H_H_ ` G!9!9H`H` aG!@!@HgHg hG!6!6H]H] ^G!!8!8H_H_ `?G@!:!:HaHa bAGB!>!>HeHe fCGD!7!7H^H^ _EGF !5!5H\H\ ]GGH!7!7H^H^ _IGJ!7!7H^H^ _KGL!A!AHhHh iMGN!7!7H^H^ _OGP!7!7H^H^ _QGR!6!6H]H] ^SGT!9!9H`H` aUGV!9!9H`H` aWGX!8!8H_H_ `YGZ!8!8H_H_ `[G\!7!7H^H^ _]G^!9!9H`H` a_G`!9!9H`H` aaGb!A!AHhHh icGd!C!CHjHj keGf!9!9H`H` agGh!:!:HaHa biGj!?!?HfHf gkGl!9!9H`H` amGn!9!9H`H` aoGp!9!9H`H` aqGr!9!9H`H` asGt!C!CHjHj kuGv!9!9H`H` awGx!9!9H`H` ayGz!=!=HdHd e{G|!=!=HdHd e}G~!!>HeHe fAGB!>!>HeHe fCGD!8!8H_H_ `EGF!=!=HdHd eGGH!8!8H_H_ `IGJ!9!9H`H` a!8!8H_H_ `MGR+  00".. "11";;"// K&33 $6      oo   && %;;,, * 3'' ''    ""*58** ++ ++)) ++** P   '' '' ))  60"5" 7  $$ $$ $$ $$ $$ """"'' '' %%  4                  &  ?"$ ! !  ! !  ! !  ! !      ! !  ! !    # #  ! !  ! ! 4(                MKOMLLOMKJJJJJJLM(&(&  o  o (&njjjjjj o!"&# *     1&       ++00               2200..,, 442200.. -- -- -- -- --      2200..,,QUVZUU(P0PUUWYXZYWX      %% "" G $   NLNNOOLNNO)''''(~''    )) ''''-- )) ++ ** )) ,, 11,, -- (( ** ++ &".=" 0 5( - . . /.*4'$,$ G $11$$:(8"6&$N 5++ ) ) ! ! ''    //    ))%% ////"            "   """.    $$ %% ,,)"  " /0<2446",B"L FHPQ[d"OJ.(FHPQ[dmD,*     #   8  ." $64(*(* &,.:<   &(e  " & ! d  %0 .   ,#        *(f*(V+,(0  S M$ 7 7,&&&04 ; 6 ; 5 0 ! ! ! !$))))))...... "(f> ,7* %3A4        %% !!""$$ $$        ** .* > 94   / A           8--1$-- %% %% ## ))%% ''''''!! //++%% ''%% 1 $         ''119             "99"77--   --- &)*((*33       "99!9911++   ##  ,!!   B    !            'D#0__ __          .   !77 77 ))))11))! 1111!!          ## !! %% --%% ++11//''<    H.".#/ Ar