Interpret¶

The main purpose of this class is to interpret the data that has been extracted.

class FoRREST.plugins.interpret.Interpret.Interpret(forrest)¶

get_exports()¶

Description:

Returns a list of functions and variables that the binary makes available to outside programs.

Example:

[

‘printf’

]

Returns:

[str, ...] - A list of strings that are the names of exported functions.

get_header_information()¶

Returns the header information for a file.

Returns maybe a list? Maybe Dictionary?

PEView - Windows only

get_imports()¶

Description:

Returns a list of all the functions the binary references from a linked file object.

Example:

file = random.out returns [

‘__isoc99_scanf’, ‘__libc_start_main’, ‘printf’, etc

]

Returns:

[str, ...] - A list of strings that are the names of imported functions.

get_opcodes()¶

Description:

Returns a list of the assembly code in binary. Each instruction is a list of bytes.

Example:

file = random.out returns [

‘4008534’, 55, ‘4889e5’, ‘4883ec20’, etc

]

Returns:

[[str], ...] - A list of binary instructions.

get_strings()¶

Description:

Returns a list of strings found in the binary. The string must be four consecutive printable ASCII characters.

Example:

file = random.out returns [

‘/lib64/ld-linux-x86-64.so.2’, ‘libc.so.6’ ‘__isoc99_scanf’, etc

]

Returns:

[str, ...] - A list of strings found in the binary file.