angr.procedures.win32.sim_time¶

class angr.procedures.win32.sim_time.GetSystemTimeAsFileTime¶

Bases: SimProcedure

timestamp = None¶

instrument()¶

fill_from_timestamp(ts)¶

fill_symbolic()¶

class angr.procedures.win32.sim_time.GetLocalTime¶

Bases: SimProcedure

wYear = None¶

wMonth = None¶

wDayOfWeek = None¶

wDay = None¶

wHour = None¶

wMinute = None¶

wSecond = None¶

wMilliseconds = None¶

instrument()¶

Override this method, setting the class vars of the same names as the windows SYSTEMTIME structure. By default, fills it with appropriately constrained symbolic data, but makes no attempt to make sure that the value can make sense semantically, e.g. feb 31 can be represented.

…unless the USE_SYSTEM_TIMES state option is present, in which case it will use the system time.

https://msdn.microsoft.com/en-us/library/windows/desktop/ms724950(v=vs.85).aspx

fill_symbolic()¶: Fill the class with constrained symbolic values.

fill_from_timestamp(ts)¶

Fill the class with the appropriate values extracted from the given timestamp.

Parameters:: ts – A POSIX timestamp.

class angr.procedures.win32.sim_time.QueryPerformanceCounter¶: Bases: SimProcedure

class angr.procedures.win32.sim_time.GetTickCount¶: Bases: SimProcedure

class angr.procedures.win32.sim_time.GetTickCount64¶

Bases: SimProcedure

KEY = ('sim_time', 'GetTickCount')¶