retdec
Namespaces | Functions
logic.h File Reference

Logic for yara patterns filter. More...

#include <memory>
#include <string>

Go to the source code of this file.

Namespaces

 yaramod
 

Functions

std::size_t getPureInformationSize (const std::shared_ptr< yaramod::HexString > &pattern)
 
bool hasEnoughPureInformation (const std::shared_ptr< yaramod::HexString > &pattern, std::size_t pureMinimum)
 
std::size_t getHexStringSize (const std::shared_ptr< yaramod::HexString > &pattern)
 
std::size_t getTrailingNopSize (const std::shared_ptr< yaramod::HexString > &pattern, const std::uint8_t nopOpCode)
 
std::size_t getNamedRelocationCount (const yaramod::Rule *rule)
 
bool nameFilter (const yaramod::Rule *rule)
 

Detailed Description

Logic for yara patterns filter.

Function Documentation

◆ getHexStringSize()

std::size_t getHexStringSize ( const std::shared_ptr< yaramod::HexString > &  pattern)

◆ getNamedRelocationCount()

std::size_t getNamedRelocationCount ( const yaramod::Rule *  rule)

◆ getPureInformationSize()

std::size_t getPureInformationSize ( const std::shared_ptr< yaramod::HexString > &  pattern)

◆ getTrailingNopSize()

std::size_t getTrailingNopSize ( const std::shared_ptr< yaramod::HexString > &  pattern,
const std::uint8_t  nopOpCode 
)

◆ hasEnoughPureInformation()

bool hasEnoughPureInformation ( const std::shared_ptr< yaramod::HexString > &  pattern,
std::size_t  pureMinimum 
)

◆ nameFilter()

bool nameFilter ( const yaramod::Rule *  rule)