Why Gemfury? Push, build, and install  RubyGems npm packages Python packages Maven artifacts PHP packages Go Modules Debian packages RPM packages NuGet packages

Repository URL to install this package:

Details    
idapro / opt / ida90 / libexec / idapro / python / examples / disassembler / operand_changed.py
Size: Mime:
"""
summary: notify the user when an instruction operand changes

description:
  Show notifications whenever the user changes
  an instruction's operand, or a data item.

level: advanced
"""

import binascii

import ida_idp
import ida_bytes
import ida_nalt
import ida_typeinf

class operand_changed_t(ida_idp.IDB_Hooks):
    def log(self, msg):
        print(">>> %s" % msg)

    def op_type_changed(self, ea, n):
        flags = ida_bytes.get_flags(ea)
        self.log("op_type_changed(ea=0x%08X, n=%d). Flags now: 0x%08X" % (ea, n, flags))

        buf = ida_nalt.opinfo_t()
        opi = ida_bytes.get_opinfo(buf, ea, n, flags)
        if opi:
            if ida_bytes.is_struct(flags):
                try:
                    tif = ida_typeinf.tinfo_t(tid=opi.tid)
                    self.log("New struct: 0x%08X ordinal: %d (name=%s)" % (
                        tif.get_tid(),
                        tif.get_ordinal(),
                        tif.get_type_name()))
                except:
                    self.log("Failed tif")
            elif ida_bytes.is_strlit(flags):
                encidx = ida_nalt.get_str_encoding_idx(opi.strtype)
                if encidx == ida_nalt.STRENC_DEFAULT:
                    encidx = ida_nalt.get_default_encoding_idx(ida_nalt.get_strtype_bpu(opi.strtype))
                encname = ida_nalt.get_encoding_name(encidx)
                strlen = ida_bytes.get_max_strlit_length(
                    ea,
                    opi.strtype,
                    ida_bytes.ALOPT_IGNHEADS | ida_bytes.ALOPT_IGNCLT)
                raw = ida_bytes.get_strlit_contents(ea, strlen, opi.strtype) or b""
                self.log("New strlit: 0x%08X, raw hex=%s (encoding=%s)" % (
                    opi.strtype,
                    binascii.hexlify(raw),
                    encname))
            elif ida_bytes.is_off(flags, n):
                self.log("New offset: refinfo={target=0x%08X, base=0x%08X, tdelta=0x%08X, flags=0x%X}" % (
                    opi.ri.target,
                    opi.ri.base,
                    opi.ri.tdelta,
                    opi.ri.flags))
            elif ida_bytes.is_enum(flags, n):
                try:
                    tif = ida_typeinf.tinfo_t(tid=opi.ec.tid)
                    self.log("New enum: 0x%08X ordinal: %d (enum=%s), serial=%d" % (
                        opi.ec.tid,
                        tif.get_ordinal(),
                        tif.get_type_name(),
                        opi.ec.serial))
                except:
                    self.log("Failed tif")
                pass
            elif ida_bytes.is_stroff(flags, n):
                parts = []
                for i in range(opi.path.len):
                    tid = opi.path.ids[i]
                    parts.append("0x%08X (name=%s)" % (tid, ida_typeinf.get_tid_name(tid)))
                self.log("New stroff: path=[%s] (len=%d, delta=0x%08X)" % (
                    ", ".join(parts),
                    opi.path.len,
                    opi.path.delta))
            elif ida_bytes.is_custom(flags) or ida_bytes.is_custfmt(flags, n):
                self.log("New custom data type") # unimplemented
        else:
            print("Cannot retrieve opinfo_t")