Nail K. Yamaleev

19 papers Journal 19
YearRankTypeTitle / Venue / Authors
2025 J jnl
CoRR
Subhash Paudel, Nail K. Yamaleev
2025 J jnl
CoRR
Mohammed Sayyari, Nail K. Yamaleev
2024 J jnl
CoRR
Nail K. Yamaleev, Subhash Paudel
2023 J jnl
J. Sci. Comput.
Johnathon Upperman, Nail K. Yamaleev
2023 J jnl
J. Sci. Comput.
Nail K. Yamaleev, Johnathon Upperman
2022 J jnl
J. Comput. Phys.
Johnathon Upperman, Nail K. Yamaleev
2022 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Johnathon Upperman
2021 J jnl
CoRR
Johnathon Upperman, Nail K. Yamaleev
2021 J jnl
CoRR
Nail K. Yamaleev, Johnathon Upperman
2019 J jnl
J. Comput. Phys.
Johnathon Upperman, Nail K. Yamaleev
2019 J jnl
J. Comput. Phys.
Nail K. Yamaleev, David C. Del Rey Fernández, Jialin Lou, Mark H. Carpenter
2017 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Mark H. Carpenter
2013 J jnl
J. Comput. Phys.
Travis C. Fisher, Mark H. Carpenter, Jan Nordström, Nail K. Yamaleev, Charles Swanson
2013 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Kedar A. Pathak
2011 J jnl
J. Comput. Phys.
Travis C. Fisher, Mark H. Carpenter, Nail K. Yamaleev, Steven H. Frankel
2010 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Boris Diskin, Eric J. Nielsen
2009 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Mark H. Carpenter
2009 J jnl
J. Comput. Phys.
Nail K. Yamaleev, Mark H. Carpenter
2002 J jnl
SIAM J. Sci. Comput.
Nail K. Yamaleev
redb/extractors/decompiler/bninja/analysis/api.py
← Index redb/extractors/decompiler/bninja/analysis/api.py python
from enum import Enum


class ApiCategory(Enum):
    FILE_OP = [
        "CreateFile",
        "ReadFile",
        "WriteFile",
        "DeleteFile",
        "SetFilePointer",
        "CopyFile",
        "MoveFile",
        "FindFirstFile",
        "FindNextFile",
    ]
    MEMORY_OP = [
        "VirtualAlloc",
        "VirtualFree",
        "HeapAlloc",
        "HeapFree",
        "LocalAlloc",
        "GlobalAlloc",
        "MapViewOfFile",
        "VirtualProtect",
    ]
    NETWORK_OP = [
        "socket",
        "connect",
        "bind",
        "send",
        "recv",
        "WSAStartup",
        "InternetOpen",
        "InternetConnect",
        "HttpOpenRequest",
        "HttpSendRequest",
        "InternetReadFile",
        "URLDownloadToFile",
    ]
    REGISTRY_OP = [
        "RegOpenKey",
        "RegCreateKey",
        "RegSetValue",
        "RegQueryValue",
        "RegDeleteKey",
        "RegEnumKey",
        "RegFlushKey",
    ]
    PROCESS_OP = [
        "CreateProcess",
        "OpenProcess",
        "TerminateProcess",
        "GetProcessId",
        "CreateProcessAsUser",
        "NtCreateProcess",
    ]
    THREAD_OP = [
        "CreateThread",
        "SuspendThread",
        "ResumeThread",
        "CreateRemoteThread",
        "SetThreadContext",
        "GetThreadContext",
    ]
    INJECTION_OP = [
        "WriteProcessMemory",
        "VirtualAllocEx",
        "NtWriteVirtualMemory",
        "SetWindowsHookEx",
        "QueueUserAPC",
        "NtMapViewOfSection",
    ]
    EVASION_OP = [
        "IsDebuggerPresent",
        "CheckRemoteDebuggerPresent",
        "NtQueryInformationProcess",
        "GetTickCount",
        "OutputDebugString",
        "Sleep",
        "QueryPerformanceCounter",
    ]
    SPYING_OP = [
        "GetAsyncKeyState",
        "GetKeyboardState",
        "GetKeyState",
        "GetForegroundWindow",
        "SetWindowsHookEx",
        "BitBlt",
        "GetClipboardData",
    ]
    SYSTEM_OP = [
        "CreateToolhelp32Snapshot",
        "EnumDeviceDrivers",
        "EnumProcesses",
        "GetSystemDirectoryA",
        "GetLogicalDrives",
    ]
    SERVICE_OP = [
        "CreateServiceA",
        "OpenServiceA",
        "StartServiceA",
        "DeleteService",
        "OpenSCManagerA",
        "ControlService",
    ]
    CRYPTO_OP = [
        "CryptAcquireContext",
        "CryptGenKey",
        "CryptEncrypt",
        "CryptDecrypt",
        "CryptCreateHash",
        "CryptHashData",
        "CryptGenRandom",
    ]
    DLL_OP = ["LoadLibrary", "GetProcAddress", "FreeLibrary", "LdrLoadDll"]
    UNKNOWN_OP = []

    @classmethod
    def from_api(cls, api_name):
        for category in cls:
            if any(api_name.startswith(api) for api in category.value):
                return category
        return cls.UNKNOWN_OP