Libs.librecognition

Module librecognition

Library for function recognizing

Variables

[hide private]

__VERSION__ = '1.2'

COUNT = 100

C_BAD = 240

C_CAL = 112

C_CMD = 0

C_FLG = 144

C_FLT = 64

C_JMC = 96

C_JMP = 80

C_MMX = 48

C_NOW = 224

C_POP = 32

C_PRI = 192

C_PSH = 16

C_REP = 176

C_RET = 128

C_RTF = 160

C_SSE = 208

C_TYPEMASK = 240

DATA_PTR = 2

DECR_3DNOW = 45

DECR_BYTE = 33

DECR_DWORD = 36

DECR_FLOAT10 = 41

DECR_ISREG = 32

DECR_QWORD = 40

DECR_SEG = 42

DECR_SSE = 46

DECR_TYPEMASK = 63

DECR_WORD = 34

DEC_3DNOW = 13

DEC_BYTE = 1

DEC_BYTESW = 17

DEC_CALLDEST = 31

DEC_CHECKED = 128

DEC_COMMAND = 29

DEC_CONST = 64

DEC_DWORD = 4

DEC_FLOAT10 = 9

DEC_FLOAT4 = 5

DEC_FLOAT8 = 7

DEC_FWORD = 6

DEC_JMPDEST = 30

DEC_NEXTCODE = 19

DEC_NEXTDATA = 3

DEC_PBODY = 64

DEC_PEND = 96

DEC_PROC = 32

DEC_PROCMASK = 96

DEC_QWORD = 8

DEC_SIGNED = 256

DEC_SSE = 14

DEC_STRING = 11

DEC_TBYTE = 10

DEC_TEXT = 16

DEC_TYPEMASK = 31

DEC_UNICODE = 12

DEC_UNKNOWN = 0

DEC_WORD = 2

DIACRITICAL = 2

DISASM_ALL = 5

DISASM_CODE = 4

DISASM_DATA = 1

DISASM_FILE = 3

DISASM_RTRACE = 6

DISASM_SIZE = 0

DISASM_TRACE = 2

DOUBLEL = 4

DWORD = 2

FUNCTION_PTR = 1

INT = 0

MEM = 1

MEM_ADDR = 3

PLAINASCII = 1

POINTER = 3

PTR = 0

RAREASCII = 16

RST_INDIRECT = 3

RST_INVALID = 0

RST_VALUE = 1

RST_VFIXUP = 2

RegisterName = {(0, 0, 0, 0, 0, 0, 0, 0): '', (0, 0, 0, 0, 0, ...

Registers16BitsOrder = ['AX', 'CX', 'DX', 'BX', 'SP', 'BP', 'S...

Registers32BitsOrder = ['EAX', 'ECX', 'EDX', 'EBX', 'ESP', 'EB...

Registers8BitsOrder = ['AL', 'CL', 'DL', 'BL', 'AH', 'CH', 'DH...

STACK_PTR = 3

STRING = 1

UNICODE = 2

ctable = [0, 0, 0, 0, 0, 0, 0, 0, 0, 19, 19, 0, 0, 19, 0, 0, 0...

Variables Details

[hide private]

RegisterName

Value:

{(0, 0, 0, 0, 0, 0, 0, 0): '',
 (0, 0, 0, 0, 0, 0, 0, 1): 'EDI',
 (0, 0, 0, 0, 0, 0, 1, 0): 'ESI',
 (0, 0, 0, 0, 0, 1, 0, 0): 'EBP',
 (0, 0, 0, 0, 1, 0, 0, 0): 'ESP',
 (0, 0, 0, 1, 0, 0, 0, 0): 'EBX',
 (0, 0, 1, 0, 0, 0, 0, 0): 'EDX',
 (0, 1, 0, 0, 0, 0, 0, 0): 'ECX',
...

Registers16BitsOrder

Value:

['AX', 'CX', 'DX', 'BX', 'SP', 'BP', 'SI', 'DI']

Registers32BitsOrder

Value:

['EAX', 'ECX', 'EDX', 'EBX', 'ESP', 'EBP', 'ESI', 'EDI']

Registers8BitsOrder

Value:

['AL', 'CL', 'DL', 'BL', 'AH', 'CH', 'DH', 'BH']

ctable

Value:

[0,
 0,
 0,
 0,
 0,
 0,
 0,
 0,
...