angr.analyses.flirt.flirt

class angr.analyses.flirt.flirt.FlirtAnalysis

Bases: Analysis

FlirtAnalysis accomplishes two purposes:

• If a FLIRT signature file is specified, it will match the given signature file against the current binary and rename recognized functions accordingly.

• If no FLIRT signature file is specified, it will use strings to determine possible libraries embedded in the current binary, and then match all possible signatures for the architecture.

__init__(sig=None, max_mismatched_bytes=0, dry_run=False, match_named_functions=False)

Parameters:

• sig (FlirtSignature | str | None)

• max_mismatched_bytes (int)

• dry_run (bool)

• match_named_functions (bool)