Class Function

Class that contains information about a Function

Parameters:

• imm (Debbuger OBJECT) - Debbuger
• start (DWORD) - Address of the begging of the function

Change the start of a Function

Parameters:

• address (DWORD) - New address of the function

Get the Address of the Function

Returns: DWORD

Address of the function

Get the name of the Function

Returns: STRING

Name of the Function

Get the end of the Function (Understanding end as the Basic Block with a ret inside)

Returns: LIST of BasicBlock

A list of all the basic block that end the function

Find all the possible ret values on a function (Beta) Note: This function only check the modifiers on a Ret BasicBlock, so the result might not be precise.

Parameters:

• start (LIST OF OPCODE) - Return all the possible modifiers of EAX

Check if the given address is part of the Function

Parameters:

• force - Address of the instruction to check
• address (DWORD)

Returns: BasicBlock object

If true, returns the corresponding Basic block else returns None

Get basic block from the current Function

Parameters:

• force (BOOLEAN) - (Optional, Def: False) Force to Function to reparse the basic blocks

Returns: LIST of BasicBlock objects

Basic blocks of the current function

TODO: Recursion here is bad - we need to make this an iterative process with a work queue