One capability group: analyze_function under ghidra
The capability group for analyze_function in the ghidra candidate of rea capabilities, drawn as two tables. The first table is the provider block: provider.id is ghidra, and shared_limitations holds 4 strings that apply to every group of the block. The second table is the group: operations holds the one name analyze_function, effects names the 2 true flags launches_process and may_write_filesystem, so the other 5 flags are false, limitations holds 5 strings that follow the 4 shared strings, available is true, and reason and availability_code are null.
THE PROVIDER BLOCK
WHAT THE VALUE MEANS
analysis_provider_candidates[0].capabilities[0]
provider.id
ghidra
the engine of the block
shared_limitations
4 strings
they apply to every group
ONE GROUP OF THE BLOCK
groups[2]
operations
1 name
analyze_function
effects
launches_process,
the 2 flags that are true
may_write_filesystem
the other 5 flags are false
limitations
5 strings
they follow the 4 shared strings
available
true
false carries reason and code
reason
null
text when available is false
availability_code
null
a code when available is false