Workflows

Detailed Description

Classes
class	BinaryNinja::AnalysisContext
class	BinaryNinja::Activity
class	BinaryNinja::Workflow
	A Binary Ninja Workflow is an abstraction of a computational binary analysis pipeline and it provides the extensibility mechanism needed for tailored binary analysis and decompilation. More...

---

Class Documentation

BinaryNinja::AnalysisContext

class BinaryNinja::AnalysisContext

Public Member Functions
	AnalysisContext (BNAnalysisContext *analysisContext)
virtual	~AnalysisContext ()
Ref< Function >	GetFunction ()
	Get the Function for the current AnalysisContext. More...
Ref< LowLevelILFunction >	GetLowLevelILFunction ()
	Get the low level IL function for the current AnalysisContext. More...
Ref< MediumLevelILFunction >	GetMediumLevelILFunction ()
	Get the medium level IL function for the current AnalysisContext. More...
Ref< HighLevelILFunction >	GetHighLevelILFunction ()
	Get the high level IL function for the current AnalysisContext. More...
void	SetBasicBlockList (std::vector< Ref< BasicBlock > > basicBlocks)
	Set a new BasicBlock list for the current analysis context. More...
void	SetLiftedILFunction (Ref< LowLevelILFunction > liftedIL)
	Set new lifted IL for the current analysis context. More...
void	SetLowLevelILFunction (Ref< LowLevelILFunction > lowLevelIL)
	Set the new Low Level IL for the current analysis context. More...
void	SetMediumLevelILFunction (Ref< MediumLevelILFunction > mediumLevelIL)
	Set the new Medium Level IL for the current analysis context. More...
void	SetHighLevelILFunction (Ref< HighLevelILFunction > highLevelIL)
	Set the new High Level IL for the current analysis context. More...
bool	Inform (const std::string &request)
Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNAnalysisContext, BNNewAnalysisContextReference, BNFreeAnalysisContext >
	CoreRefCountObject ()
virtual	~CoreRefCountObject ()
BNAnalysisContext *	GetObject () const
void	AddRef ()
void	Release ()
void	AddRefForRegistration ()
void	ReleaseForRegistration ()
void	AddRefForCallback ()
void	ReleaseForCallback ()

Additional Inherited Members
Static Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNAnalysisContext, BNNewAnalysisContextReference, BNFreeAnalysisContext >
static BNAnalysisContext *	GetObject (CoreRefCountObject *obj)
static BNAnalysisContext *	GetObject (const CoreRefCountObject *obj)
Public Attributes inherited from BinaryNinja::CoreRefCountObject< BNAnalysisContext, BNNewAnalysisContextReference, BNFreeAnalysisContext >
std::atomic< int >	m_refs
bool	m_registeredRef
BNAnalysisContext *	m_object

Constructor & Destructor Documentation

AnalysisContext()

AnalysisContext::AnalysisContext

(

BNAnalysisContext *

analysisContext

)

~AnalysisContext()

AnalysisContext::~AnalysisContext ( )

virtual

Member Function Documentation

GetFunction()

Ref< Function > AnalysisContext::GetFunction

(

)

Get the Function for the current AnalysisContext.

Returns

The function for the current context

GetLowLevelILFunction()

Ref< LowLevelILFunction > AnalysisContext::GetLowLevelILFunction

(

)

Get the low level IL function for the current AnalysisContext.

Returns

The LowLevelILFunction for the current context

GetMediumLevelILFunction()

Ref< MediumLevelILFunction > AnalysisContext::GetMediumLevelILFunction

(

)

Get the medium level IL function for the current AnalysisContext.

Returns

The MediumLevelILFunction for the current context

GetHighLevelILFunction()

Ref< HighLevelILFunction > AnalysisContext::GetHighLevelILFunction

(

)

Get the high level IL function for the current AnalysisContext.

Returns

The HighLevelILFunction for the current context

SetBasicBlockList()

void AnalysisContext::SetBasicBlockList

(

std::vector< Ref< BasicBlock > >

basicBlocks

)

Set a new BasicBlock list for the current analysis context.

Parameters

basicBlocks

The new list of BasicBlocks

SetLiftedILFunction()

void AnalysisContext::SetLiftedILFunction

(

Ref< LowLevelILFunction >

liftedIL

)

Set new lifted IL for the current analysis context.

Parameters

liftedIL

The new lifted IL

SetLowLevelILFunction()

void AnalysisContext::SetLowLevelILFunction

(

Ref< LowLevelILFunction >

lowLevelIL

)

Set the new Low Level IL for the current analysis context.

Parameters

lowLevelIL

the new Low Level IL

SetMediumLevelILFunction()

void AnalysisContext::SetMediumLevelILFunction

(

Ref< MediumLevelILFunction >

mediumLevelIL

)

Set the new Medium Level IL for the current analysis context.

Parameters

mediumLevelIL

the new Medium Level IL

SetHighLevelILFunction()

void AnalysisContext::SetHighLevelILFunction

(

Ref< HighLevelILFunction >

highLevelIL

)

Set the new High Level IL for the current analysis context.

Parameters

highLevelIL

the new High Level IL

Inform()

bool AnalysisContext::Inform

(

const std::string &

request

)

BinaryNinja::Activity

class BinaryNinja::Activity

Public Member Functions
	Activity (const std::string &configuration, const std::function< void(Ref< AnalysisContext >)> &action)
	Activity (BNActivity *activity)
virtual	~Activity ()
std::string	GetName () const
	Get the Activity name. More...
Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNActivity, BNNewActivityReference, BNFreeActivity >
	CoreRefCountObject ()
virtual	~CoreRefCountObject ()
BNActivity *	GetObject () const
void	AddRef ()
void	Release ()
void	AddRefForRegistration ()
void	ReleaseForRegistration ()
void	AddRefForCallback ()
void	ReleaseForCallback ()
Static Protected Member Functions
static void	Run (void *ctxt, BNAnalysisContext *analysisContext)
Protected Attributes
std::function< void(Ref< AnalysisContext > analysisContext)>	m_action

Additional Inherited Members
Static Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNActivity, BNNewActivityReference, BNFreeActivity >
static BNActivity *	GetObject (CoreRefCountObject *obj)
static BNActivity *	GetObject (const CoreRefCountObject *obj)
Public Attributes inherited from BinaryNinja::CoreRefCountObject< BNActivity, BNNewActivityReference, BNFreeActivity >
std::atomic< int >	m_refs
bool	m_registeredRef
BNActivity *	m_object

Constructor & Destructor Documentation

Activity() [1/2]

BinaryNinja::Activity::Activity	(	const std::string &	configuration,
		const std::function< void(Ref< AnalysisContext >)> &	action
	)

MyClass::MyActionMethod(Ref<AnalysisContext> ac);
...
// Create a clone of the default workflow named "core.function.myWorkflowName"
Ref<Workflow> wf = BinaryNinja::Workflow::Instance()->Clone("core.function.myWorkflowName");
wf->RegisterActivity(new BinaryNinja::Activity("core.function.myWorkflowName.resolveMethodCalls", &MyClass::MyActionMethod));

Parameters

configuration	a JSON representation of the activity configuration
action	Workflow action, a function taking a Ref<AnalysisContext> as an argument.

Activity() [2/2]

Activity::Activity

(

BNActivity *

activity

)

~Activity()

Activity::~Activity ( )

virtual

Member Function Documentation

Run()

void Activity::Run ( void *  ctxt, BNAnalysisContext *  analysisContext  )

staticprotected

GetName()

string Activity::GetName

(

)

const

Get the Activity name.

Returns

Activity name

Member Data Documentation

m_action

std::function<void(Ref<AnalysisContext> analysisContext)> BinaryNinja::Activity::m_action

protected

BinaryNinja::Workflow

class BinaryNinja::Workflow

A Binary Ninja Workflow is an abstraction of a computational binary analysis pipeline and it provides the extensibility mechanism needed for tailored binary analysis and decompilation.

More specifically, a Workflow is a repository of activities along with a unique strategy to execute them. Binary Ninja provides two Workflows named ``core.module.defaultAnalysis`` and ``core.function.defaultAnalysis`` which expose the core analysis.

A Workflow starts in the unregistered state from either creating a new empty Workflow, or cloning an existing Workflow. While unregistered it's possible to add and remove activities, as well as change the execution strategy. In order to use the Workflow on a binary it must be registered. Once registered the Workflow is immutable and available for use.

Public Member Functions
	Workflow (const std::string &name="")
	Workflow (BNWorkflow *workflow)
virtual	~Workflow ()
Ref< Workflow >	Clone (const std::string &name, const std::string &activity="")
	Clone a workflow, copying all Activities and the execution strategy. More...
Ref< Activity >	RegisterActivity (const std::string &configuration, const std::function< void(Ref< AnalysisContext >)> &action, const std::vector< std::string > &subactivities={})
	Register an Activity with this Workflow. More...
Ref< Activity >	RegisterActivity (Ref< Activity > activity, const std::vector< std::string > &subactivities={})
	Register an Activity with this Workflow. More...
bool	Contains (const std::string &activity)
	Determine if an Activity exists in this Workflow. More...
std::string	GetConfiguration (const std::string &activity="")
	Retrieve the configuration as an adjacency list in JSON for the Workflow, or if specified just for the given ``activity``. More...
std::string	GetName () const
	Get the workflow name. More...
bool	IsRegistered () const
	Check whether the workflow is registered. More...
size_t	Size () const
	Get the amount of registered activities for this Workflow. More...
Ref< Activity >	GetActivity (const std::string &activity)
	Retrieve an activity by name. More...
std::vector< std::string >	GetActivityRoots (const std::string &activity="")
	Retrieve the list of activity roots for the Workflow, or if specified just for the given `activity`. More...
std::vector< std::string >	GetSubactivities (const std::string &activity="", bool immediate=true)
	Retrieve the list of all activities, or optionally a filtered list. More...
bool	AssignSubactivities (const std::string &activity, const std::vector< std::string > &subactivities={})
	Assign the list of `activities` as the new set of children for the specified `activity`. More...
bool	Clear ()
	Remove all activity nodes from this Workflow. More...
bool	Insert (const std::string &activity, const std::string &newActivity)
	Insert an activity before the specified activity and at the same level. More...
bool	Insert (const std::string &activity, const std::vector< std::string > &activities)
	Insert a list of activities before the specified activity and at the same level. More...
bool	Remove (const std::string &activity)
	Remove an activity by name. More...
bool	Replace (const std::string &activity, const std::string &newActivity)
	Replace the activity name. More...
Ref< FlowGraph >	GetGraph (const std::string &activity="", bool sequential=false)
	Generate a FlowGraph object for the current Workflow. More...
void	ShowReport (const std::string &name)
Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNWorkflow, BNNewWorkflowReference, BNFreeWorkflow >
	CoreRefCountObject ()
virtual	~CoreRefCountObject ()
BNWorkflow *	GetObject () const
void	AddRef ()
void	Release ()
void	AddRefForRegistration ()
void	ReleaseForRegistration ()
void	AddRefForCallback ()
void	ReleaseForCallback ()
Static Public Member Functions
static std::vector< Ref< Workflow > >	GetList ()
	Get a list of all workflows. More...
static Ref< Workflow >	Instance (const std::string &name="")
	Get an instance of a workflow by name. More...
static bool	RegisterWorkflow (Ref< Workflow > workflow, const std::string &description="")
	Register a workflow, making it immutable and available for use. More...
Static Public Member Functions inherited from BinaryNinja::CoreRefCountObject< BNWorkflow, BNNewWorkflowReference, BNFreeWorkflow >
static BNWorkflow *	GetObject (CoreRefCountObject *obj)
static BNWorkflow *	GetObject (const CoreRefCountObject *obj)

Additional Inherited Members
Public Attributes inherited from BinaryNinja::CoreRefCountObject< BNWorkflow, BNNewWorkflowReference, BNFreeWorkflow >
std::atomic< int >	m_refs
bool	m_registeredRef
BNWorkflow *	m_object

Constructor & Destructor Documentation

Workflow() [1/2]

BinaryNinja::Workflow::Workflow

(

const std::string &

name = ""

)

Workflow() [2/2]

Workflow::Workflow

(

BNWorkflow *

workflow

)

~Workflow()

virtual BinaryNinja::Workflow::~Workflow ( )

inlinevirtual

Member Function Documentation

GetList()

vector< Ref< Workflow > > Workflow::GetList ( )

static

Get a list of all workflows.

Returns

A list of Workflows

Instance()

Ref< Workflow > Workflow::Instance ( const std::string &  name = "" )

static

Get an instance of a workflow by name.

If it is already registered, this will return the registered Workflow. If not, it will create and return a new Workflow.

Parameters

name	Workflow name

Returns

The registered workflow.

RegisterWorkflow()

bool Workflow::RegisterWorkflow ( Ref< Workflow >  workflow, const std::string &  description = ""  )

static

Register a workflow, making it immutable and available for use.

Parameters

workflow	The workflow to register
description	A JSON description of the Workflow

Returns

true on success, false otherwise

Clone()

Ref< Workflow > Workflow::Clone	(	const std::string &	name,
		const std::string &	activity = ""
	)

Clone a workflow, copying all Activities and the execution strategy.

Parameters

name	Name for the new Workflow
activity	If specified, perform the clone with `activity` as the root

Returns

A new Workflow

RegisterActivity() [1/2]

Ref< Activity > BinaryNinja::Workflow::RegisterActivity	(	const std::string &	configuration,
		const std::function< void(Ref< AnalysisContext >)> &	action,
		const std::vector< std::string > &	subactivities = {}
	)

Register an Activity with this Workflow.

Parameters

activity	The Activity to register
description	A JSON description of the Activity

Returns

Register an Activity with this Workflow

Parameters

configuration	a JSON representation of the activity configuration
action	Workflow action, a function taking a Ref<AnalysisContext> as an argument.
subactivities	The list of Activities to assign

Returns

RegisterActivity() [2/2]

Ref< Activity > BinaryNinja::Workflow::RegisterActivity	(	Ref< Activity >	activity,
		const std::vector< std::string > &	subactivities = {}
	)

Register an Activity with this Workflow.

Parameters

activity	The Activity to register
subactivities	The list of Activities to assign

Returns

Contains()

bool Workflow::Contains

(

const std::string &

activity

)

Determine if an Activity exists in this Workflow.

Parameters

activity

The Activity name

Returns

Whether the Activity exists in this workflow

GetConfiguration()

string Workflow::GetConfiguration

(

const std::string &

activity = ""

)

Retrieve the configuration as an adjacency list in JSON for the Workflow, or if specified just for the given ``activity``.

Parameters

activity

If specified, return the configuration for the ``activity``

Returns

An adjacency list representation of the configuration in JSON

GetName()

string Workflow::GetName

(

)

const

Get the workflow name.

Returns

The workflow name

IsRegistered()

bool Workflow::IsRegistered

(

)

const

Check whether the workflow is registered.

Returns

Whether the workflow is registered

Size()

size_t Workflow::Size

(

)

const

Get the amount of registered activities for this Workflow.

Returns

The amount of registered workflows

GetActivity()

Ref< Activity > Workflow::GetActivity

(

const std::string &

activity

)

Retrieve an activity by name.

Parameters

activity

The Activity name

Returns

The Activity object

GetActivityRoots()

vector< string > Workflow::GetActivityRoots

(

const std::string &

activity = ""

)

Retrieve the list of activity roots for the Workflow, or if specified just for the given `activity`.

Parameters

activity

If specified, return the roots for `activity`

Returns

A list of root activity names.

GetSubactivities()

vector< string > Workflow::GetSubactivities	(	const std::string &	activity = "",
		bool	immediate = true
	)

Retrieve the list of all activities, or optionally a filtered list.

Parameters

activity	If specified, return the direct children and optionally the descendants of the `activity` (includes `activity`)
immediate	whether to include only direct children of `activity` or all descendants

Returns

A list of Activity names

AssignSubactivities()

bool Workflow::AssignSubactivities	(	const std::string &	activity,
		const std::vector< std::string > &	subactivities = {}
	)

Assign the list of `activities` as the new set of children for the specified `activity`.

Parameters

activity	The activity node to assign children
subactivities	the list of Activities to assign

Returns

true on success, false otherwise

Clear()

bool Workflow::Clear

(

)

Remove all activity nodes from this Workflow.

Returns

true on success, false otherwise

Insert() [1/2]

bool BinaryNinja::Workflow::Insert	(	const std::string &	activity,
		const std::string &	newActivity
	)

Insert an activity before the specified activity and at the same level.

Parameters

activity	Name of the activity to insert the new one before
newActivity	Name of the new activity to be inserted

Returns

true on success, false otherwise

Insert() [2/2]

bool BinaryNinja::Workflow::Insert	(	const std::string &	activity,
		const std::vector< std::string > &	activities
	)

Insert a list of activities before the specified activity and at the same level.

Parameters

activity	Name of the activity to insert the new one before
newActivity	Name of the new activities to be inserted

Returns

true on success, false otherwise

Remove()

bool Workflow::Remove

(

const std::string &

activity

)

Remove an activity by name.

Parameters

activity

Name of the activity to remove

Returns

true on success, false otherwise

Replace()

bool Workflow::Replace	(	const std::string &	activity,
		const std::string &	newActivity
	)

Replace the activity name.

Parameters

activity	Name of the activity to replace
newActivity	Name of the new activity

Returns

true on success, false otherwise

GetGraph()

Ref< FlowGraph > Workflow::GetGraph	(	const std::string &	activity = "",
		bool	sequential = false
	)

Generate a FlowGraph object for the current Workflow.

Parameters

activity	if specified, generate the Flowgraph using ``activity`` as the root
sequential	whether to generate a **Composite** or **Sequential** style graph

Returns

FlowGraph on success

ShowReport()

void Workflow::ShowReport

(

const std::string &

name

)