Package Libs :: Module immlib

[frames] | no frames]

Module immlib

source code

Immunity Debugger API for python

Immunity Inc. Debugger API for python

Classes

[hide private]

DictTypes

Debugger

Variables

[hide private]

__VERSION__ = '1.3'

BpKeys = {'VK_F2': 113, 'VK_F4': 115}

BpFlags = {'TY_ACTIVE': 512, 'TY_DISABLED': 1024, 'TY_KEEPCODE...

HB_FREE = 0

HB_CODE = 1

HB_ACCESS = 2

HB_WRITE = 3

HB_IO = 4

HB_ONESHOT = 5

HB_STOPAN = 6

HB_TEMP = 7

DebugerStatus = {'CLOSING': 5, 'EVENT': 2, 'FINISHED': 4, 'NON...

PageFlags = {1: ' ', 2: 'R ', 4: 'RW ', 8: 'RW COW', 16: '...

ImmFonts = {'courier': 3, 'fixed': 0, 'fixedsys': 2, 'font5': ...

BpMemFlags = {'R': 1, 'S': 4096, 'W': 2}

MemoryProtection = {'PAGE_EXECUTE': 16, 'PAGE_EXECUTE_READ': 3...

IgnoreSingleStep = {'CONTINUE': 2, 'DISABLE': 0, 'FORCE': 1}

jmpTypeFlags = {'CALL': 3, 'CALL_INTER': 4, 'JUMP': 0, 'JUMP_C...

NM_NONAME = 0

NM_MODSEARCH = 253

NM_ANYNAME = 255

NM_PLUGCMD = 48

NM_LABEL = 49

NM_EXPORT = 50

NM_IMPORT = 51

NM_LIBRARY = 52

NM_CONST = 53

NM_COMMENT = 54

NM_LIBCOMM = 55

NM_BREAK = 56

NM_ARG = 57

NM_ANALYSE = 58

NM_BREAKEXPR = 59

NM_BREAKEXPL = 60

NM_ASSUME = 61

NM_STRUCT = 62

NM_CASE = 63

NM_INSPECT = 64

NM_WATCH = 65

NM_ASM = 66

NM_FINDASM = 67

NM_LASTWATCH = 72

NM_SOURCE = 73

NM_REFTXT = 74

NM_GOTO = 75

NM_GOTODUMP = 76

NM_TRPAUSE = 77

NM_DLLPARMS = 80

NM_DEBUG = 128

NM_IMPLIB = 129

NM_IMPNAME = 130

NM_FONT = 131

NM_SCHEME = 132

NM_GOTOSTACK = 133

NM_HILITE = 134

NM_IMCALL = 254

ImmDrawColors = {'Aqua': 16776960, 'Black': 0, 'Blue': 1671168...

COUNT = 100

C_BAD = 240

C_CAL = 112

C_CMD = 0

C_FLG = 144

C_FLT = 64

C_JMC = 96

C_JMP = 80

C_MMX = 48

C_NOW = 224

C_POP = 32

C_PRI = 192

C_PSH = 16

C_REP = 176

C_RET = 128

C_RTF = 160

C_SSE = 208

C_TYPEMASK = 240

DECR_3DNOW = 45

DECR_BYTE = 33

DECR_DWORD = 36

DECR_FLOAT10 = 41

DECR_ISREG = 32

DECR_QWORD = 40

DECR_SEG = 42

DECR_SSE = 46

DECR_TYPEMASK = 63

DECR_WORD = 34

DEC_3DNOW = 13

DEC_BYTE = 1

DEC_BYTESW = 17

DEC_CALLDEST = 31

DEC_CHECKED = 128

DEC_COMMAND = 29

DEC_CONST = 64

DEC_DWORD = 4

DEC_FLOAT10 = 9

DEC_FLOAT4 = 5

DEC_FLOAT8 = 7

DEC_FWORD = 6

DEC_JMPDEST = 30

DEC_NEXTCODE = 19

DEC_NEXTDATA = 3

DEC_PBODY = 64

DEC_PEND = 96

DEC_PROC = 32

DEC_PROCMASK = 96

DEC_QWORD = 8

DEC_SIGNED = 256

DEC_SSE = 14

DEC_STRING = 11

DEC_TBYTE = 10

DEC_TEXT = 16

DEC_TYPEMASK = 31

DEC_UNICODE = 12

DEC_UNKNOWN = 0

DEC_WORD = 2

DISASM_ALL = 5

DISASM_CODE = 4

DISASM_DATA = 1

DISASM_FILE = 3

DISASM_RTRACE = 6

DISASM_SIZE = 0

DISASM_TRACE = 2

EXCEPTION_CODE = {2147483649: 'GuardPage', 2147483651: 'Breakp...

FS_HOOK = 1

FS_PAUSE = 2

FS_UNHOOK = 0

HOOK_REG = {'EAX': '[ESP+0x1C]', 'EBP': '[ESP+0x8 ]', 'EBX': '...

HookTypes = {'ACCESS_VIOLATION_HOOK': 3910, 'CREATE_PROCESS_HO...

RST_INDIRECT = 3

RST_INVALID = 0

RST_VALUE = 1

RST_VFIXUP = 2

RegisterName = {(0, 0, 0, 0, 0, 0, 0, 0): '', (0, 0, 0, 0, 0, ...

Registers16BitsOrder = ['AX', 'CX', 'DX', 'BX', 'SP', 'BP', 'S...

Registers32BitsOrder = ['EAX', 'ECX', 'EDX', 'EBX', 'ESP', 'EB...

Registers8BitsOrder = ['AL', 'CL', 'DL', 'BL', 'AH', 'CH', 'DH...

Variables Details

[hide private]

BpFlags

Value:

{'TY_ACTIVE': 512,
 'TY_DISABLED': 1024,
 'TY_KEEPCODE': 8192,
 'TY_KEEPCOND': 16384,
 'TY_NOUPDATE': 32768,
 'TY_ONESHOT': 2048,
 'TY_RTRACE': 65536,
 'TY_SET': 256,
...

DebugerStatus

Value:

{'CLOSING': 5,
 'EVENT': 2,
 'FINISHED': 4,
 'NONE': 0,
 'RUNNING': 3,
 'STOPPED': 1}

Register

Value:

{'EAX': 0,
 'EBP': 5,
 'EBX': 3,
 'ECX': 1,
 'EDI': 7,
 'EDX': 2,
 'EIP': 8,
 'ESI': 6,
...

PageFlags

Value:

{1: '   ',
 2: 'R  ',
 4: 'RW ',
 8: 'RW  COW',
 16: '  E',
 32: 'R E',
 64: 'RWE',
 128: 'RWE  COW'}

ImmFonts

Value:

{'courier': 3,
 'fixed': 0,
 'fixedsys': 2,
 'font5': 5,
 'font6': 6,
 'font7': 7,
 'info': 10,
 'lucida': 4,
...

MemoryProtection

Value:

{'PAGE_EXECUTE': 16,
 'PAGE_EXECUTE_READ': 32,
 'PAGE_EXECUTE_READWRITE': 64,
 'PAGE_EXECUTE_WRITECOPY': 128,
 'PAGE_NOACCESS': 1,
 'PAGE_READONLY': 2,
 'PAGE_READWRITE': 4,
 'PAGE_WRITECOPY': 8}

jmpTypeFlags

Value:

{'CALL': 3,
 'CALL_INTER': 4,
 'JUMP': 0,
 'JUMP_COND': 1,
 'JUMP_SWITCH': 2}

ImmDrawColors

Value:

{'Aqua': 16776960,
 'Black': 0,
 'Blue': 16711680,
 'Cream': 15793151,
 'DarkGray': 8421504,
 'Fuchsia': 16711935,
 'Gray': 8421504,
 'Green': 32768,
...

EXCEPTION_CODE

Value:

{2147483649: 'GuardPage',
 2147483651: 'Breakpoint',
 2147483652: 'SingleStep',
 3221225477: 'AccessViolation',
 3221225501: 'IllegalInstruction',
 3221225509: 'NonContinuableException',
 3221225612: 'ArrayBoundsExceeded',
 3221225613: 'FltDenormalOperand',
...

HOOK_REG

Value:

{'EAX': '[ESP+0x1C]',
 'EBP': '[ESP+0x8 ]',
 'EBX': '[ESP+0x10]',
 'ECX': '[ESP+0x18]',
 'EDI': '[ESP]',
 'EDX': '[ESP+0x14]',
 'ESI': '[ESP+4   ]',
 'ESP': '[ESP+0xC ]'}

HookTypes

Value:

{'ACCESS_VIOLATION_HOOK': 3910,
 'CREATE_PROCESS_HOOK': 3907,
 'CREATE_THREAD_HOOK': 3905,
 'EVERY_EXCEPTION_HOOK': 3901,
 'EXIT_PROCESS_HOOK': 3908,
 'EXIT_THREAD_HOOK': 3906,
 'LOAD_DLL_HOOK': 3903,
 'LOG_BP_HOOK': 3909,
...

RegisterName

Value:

{(0, 0, 0, 0, 0, 0, 0, 0): '',
 (0, 0, 0, 0, 0, 0, 0, 1): 'EDI',
 (0, 0, 0, 0, 0, 0, 1, 0): 'ESI',
 (0, 0, 0, 0, 0, 1, 0, 0): 'EBP',
 (0, 0, 0, 0, 1, 0, 0, 0): 'ESP',
 (0, 0, 0, 1, 0, 0, 0, 0): 'EBX',
 (0, 0, 1, 0, 0, 0, 0, 0): 'EDX',
 (0, 1, 0, 0, 0, 0, 0, 0): 'ECX',
...

Registers16BitsOrder

Value:

['AX', 'CX', 'DX', 'BX', 'SP', 'BP', 'SI', 'DI']

Registers32BitsOrder

Value:

['EAX', 'ECX', 'EDX', 'EBX', 'ESP', 'EBP', 'ESI', 'EDI']

Registers8BitsOrder

Value:

['AL', 'CL', 'DL', 'BL', 'AH', 'CH', 'DH', 'BH']