kernelcache.kernelcache module¶

Bases: object

CacheImage(name: str, header_virtual_address: int, header_file_address: int)

__init__(name: str, header_virtual_address: int, header_file_address: int) → None¶

Parameters:

• name (str) –

• header_virtual_address (int) –

• header_file_address (int) –

Return type:

None

header_file_address: int¶

header_virtual_address: int¶

name: str¶

Bases: object

CacheSymbol(symbol_type: ctypes.c_int, address: int, name: str)

__init__(symbol_type: c_int, address: int, name: str) → None¶

Parameters:

• symbol_type (c_int) –

• address (int) –

• name (str) –

Return type:

None

address: int¶

name: str¶

symbol_type: c_int¶

Bases: object

__init__(view: BinaryView)[source]¶

Retrieve the shared cache controller for a given view. Call is_valid to check if the controller is valid.

Parameters:

view (BinaryView) –

apply_image(view: BinaryView, image: CacheImage) → bool[source]¶

Parameters:

• view (BinaryView) –

• image (CacheImage) –

Return type:

bool

get_image_at(address: int) → CacheImage | None[source]¶

Parameters:

address (int) –

Return type:

CacheImage | None

get_image_containing(address: int) → CacheImage | None[source]¶

Parameters:

address (int) –

Return type:

CacheImage | None

get_image_dependencies(image: CacheImage) → [<class 'str'>][source]¶

Returns a list of image names that this image depends on.

Parameters:

image (CacheImage) –

Return type:

[<class ‘str’>]

get_image_with_name(name: str) → CacheImage | None[source]¶

Parameters:

name (str) –

Return type:

CacheImage | None

get_symbol_at(address: int) → CacheSymbol | None[source]¶

Parameters:

address (int) –

Return type:

CacheSymbol | None

get_symbol_with_name(name: str) → CacheSymbol | None[source]¶

Parameters:

name (str) –

Return type:

CacheSymbol | None

is_image_loaded(image: CacheImage) → bool[source]¶

Parameters:

image (CacheImage) –

Return type:

bool

is_valid() → bool[source]¶

Return type:

bool

property images: [<class 'binaryninja.kernelcache.kernelcache.CacheImage'>]¶

property loaded_images: [<class 'binaryninja.kernelcache.kernelcache.CacheImage'>]¶

Get a list of images that are currently loaded in the view.

property symbols: [<class 'binaryninja.kernelcache.kernelcache.CacheSymbol'>]¶