8111 lines
328 KiB
HTML
Executable File
8111 lines
328 KiB
HTML
Executable File
<?xml version="1.0" encoding="ascii"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
|
<head>
|
|
<title>Libs.immlib.Debugger</title>
|
|
<link rel="stylesheet" href="epydoc.css" type="text/css" />
|
|
<script type="text/javascript" src="epydoc.js"></script>
|
|
</head>
|
|
|
|
<body bgcolor="white" text="black" link="blue" vlink="#204080"
|
|
alink="#204080">
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table width="100%" cellpadding="0" cellspacing="0">
|
|
<tr valign="top">
|
|
<td width="100%">
|
|
<span class="breadcrumbs">
|
|
Package Libs ::
|
|
<a href="Libs.immlib-module.html">Module immlib</a> ::
|
|
Class Debugger
|
|
</span>
|
|
</td>
|
|
<td>
|
|
<table cellpadding="0" cellspacing="0">
|
|
<!-- hide/show private -->
|
|
<tr><td align="right"><span class="options">[<a href="javascript:void(0);" class="privatelink"
|
|
onclick="toggle_private();">hide private</a>]</span></td></tr>
|
|
<tr><td align="right"><span class="options"
|
|
>[<a href="frames.html" target="_top">frames</a
|
|
>] | <a href="Libs.immlib.Debugger-class.html"
|
|
target="_top">no frames</a>]</span></td></tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<!-- ==================== CLASS DESCRIPTION ==================== -->
|
|
<h1 class="epydoc">Class Debugger</h1><p class="nomargin-top"><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger">source code</a></span></p>
|
|
<!-- ==================== INSTANCE METHODS ==================== -->
|
|
<a name="section-InstanceMethods"></a>
|
|
<table class="summary" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr bgcolor="#70b0f0" class="table-header">
|
|
<td colspan="2" class="table-header">
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%">
|
|
<tr valign="top">
|
|
<td align="left"><span class="table-header">Instance Methods</span></td>
|
|
<td align="right" valign="top"
|
|
><span class="options">[<a href="#section-InstanceMethods"
|
|
class="privatelink" onclick="toggle_private();"
|
|
>hide private</a>]</span></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="__init__"></a><span class="summary-sig-name">__init__</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Initialize the Immunity Debugger API</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.__init__">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="clearState"></a><span class="summary-sig-name">clearState</span>(<span class="summary-sig-arg">self</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.clearState">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getShellcodeExecutionNoMatterWhat"></a><span class="summary-sig-name">getShellcodeExecutionNoMatterWhat</span>(<span class="summary-sig-arg">self</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getShellcodeExecutionNoMatterWhat">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#addKnowledge" class="summary-sig-name">addKnowledge</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">id</span>,
|
|
<span class="summary-sig-arg">object</span>,
|
|
<span class="summary-sig-arg">force_add</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
This function add a python object to the knowledge database.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addKnowledge">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">PYTHON OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getKnowledge" class="summary-sig-name">getKnowledge</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">id</span>)</span><br />
|
|
Gets python object from the knowledge database.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getKnowledge">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">TUPLE</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#listKnowledge" class="summary-sig-name">listKnowledge</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Gets the list of saved objects in the knowledge database.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.listKnowledge">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST of TUPLES in the form of (DWORD, LIST OF STRING)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findPacker" class="summary-sig-name">findPacker</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">name</span>,
|
|
<span class="summary-sig-arg">OnMemory</span>=<span class="summary-sig-default">True</span>)</span><br />
|
|
Find possible Packer/Cryptors/etc on a Module</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findPacker">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#forgetKnowledge" class="summary-sig-name">forgetKnowledge</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">id</span>)</span><br />
|
|
Remove python object from knowledge database.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.forgetKnowledge">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="cleanKnowledge"></a><span class="summary-sig-name">cleanKnowledge</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Clean ID memory from known objects</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.cleanKnowledge">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="addGenHook"></a><span class="summary-sig-name">addGenHook</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">object</span>)</span><br />
|
|
Add a hook to Immunity Debugger</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addGenHook">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="cleanHooks"></a><span class="summary-sig-name">cleanHooks</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Clean ID memory from hook objects</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.cleanHooks">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="cleanUP"></a><span class="summary-sig-name">cleanUP</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Clean ID memory for every kind of object saved in it</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.cleanUP">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getPEBaddress" class="summary-sig-name">getPEBaddress</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Gets PEB.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPEBaddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#analyseCode" class="summary-sig-name">analyseCode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Analyse module's code</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.analyseCode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isAnalysed" class="summary-sig-name">isAnalysed</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Check if module is already analysed</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isAnalysed">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setVariable" class="summary-sig-name">setVariable</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">string</span>)</span><br />
|
|
Set Variable name to specified address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setVariable">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getVariable" class="summary-sig-name">getVariable</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get Variable name from specified address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getVariable">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Disasm" class="summary-sig-name">Disasm</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">5</span>)</span><br />
|
|
Disasm address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Disasm">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="disasm"></a><span class="summary-sig-name">disasm</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">5</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasm">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmSizeOnly" class="summary-sig-name">disasmSizeOnly</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Determine command size only</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmSizeOnly">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmData" class="summary-sig-name">disasmData</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Determine size and analysis data</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmData">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmTrace" class="summary-sig-name">disasmTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Trace integer registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmFile" class="summary-sig-name">disasmFile</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Disassembly, no symbols/registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmFile">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmCode" class="summary-sig-name">disasmCode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Disassembly, registers undefined</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmCode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmRTrace" class="summary-sig-name">disasmRTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Disassemble with run-trace registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmRTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForward" class="summary-sig-name">disasmForward</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">5</span>)</span><br />
|
|
Disasm nlines forward of given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForward">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardAddressOnly" class="summary-sig-name">disasmForwardAddressOnly</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disasm nlines forward to the given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardAddressOnly">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardSizeOnly" class="summary-sig-name">disasmForwardSizeOnly</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Determine command size only</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardSizeOnly">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardData" class="summary-sig-name">disasmForwardData</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Determine size and analysis data</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardData">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardTrace" class="summary-sig-name">disasmForwardTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Trace integer registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardFile" class="summary-sig-name">disasmForwardFile</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassembly, no symbols/registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardFile">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardCode" class="summary-sig-name">disasmForwardCode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassembly, registers undefined</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardCode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmForwardRTrace" class="summary-sig-name">disasmForwardRTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassemble with run-trace registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardRTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackward" class="summary-sig-name">disasmBackward</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">5</span>)</span><br />
|
|
Disasm nlines backward from the given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackward">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardAddressOnly" class="summary-sig-name">disasmBackwardAddressOnly</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disasm nlines backward of given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardAddressOnly">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardSizeOnly" class="summary-sig-name">disasmBackwardSizeOnly</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Determine command size only</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardSizeOnly">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardData" class="summary-sig-name">disasmBackwardData</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Determine size and analysis data</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardData">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardTrace" class="summary-sig-name">disasmBackwardTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Trace integer registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardFile" class="summary-sig-name">disasmBackwardFile</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassembly, no symbols/registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardFile">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardCode" class="summary-sig-name">disasmBackwardCode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassembly, registers undefined</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardCode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disasmBackwardRTrace" class="summary-sig-name">disasmBackwardRTrace</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">nlines</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Disassemble with run-trace registers</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardRTrace">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Decode OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findDecode" class="summary-sig-name">findDecode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get the internal decode information from an analysed module</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDecode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#goNextProcedure" class="summary-sig-name">goNextProcedure</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Go to next procedure</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goNextProcedure">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#goPreviousProcedure" class="summary-sig-name">goPreviousProcedure</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Go to previous procedure</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goPreviousProcedure">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">opCode Object (Check libanalyze.py)</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getOpcode" class="summary-sig-name">getOpcode</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get address's Opcode</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOpcode">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Assemble" class="summary-sig-name">Assemble</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">code</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Assemble code.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Assemble">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#decodeAddress" class="summary-sig-name">decodeAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Decode given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.decodeAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#undecorateName" class="summary-sig-name">undecorateName</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">decorated</span>)</span><br />
|
|
Undecorate given name</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.undecorateName">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">TUPLES</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getTraceArgs" class="summary-sig-name">getTraceArgs</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">tracedarg</span>,
|
|
<span class="summary-sig-arg">shownonusersupplied</span>=<span class="summary-sig-default">False</span>)</span><br />
|
|
Trace Parameters of a function, return only when is user-supplied</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getTraceArgs">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllFunctions" class="summary-sig-name">getAllFunctions</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Gets all function of given module's address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllFunctions">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Function Object</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getFunction" class="summary-sig-name">getFunction</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get the Function information</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunction">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getFunctionBegin" class="summary-sig-name">getFunctionBegin</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Find start address of funcion</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunctionBegin">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getFunctionEnd" class="summary-sig-name">getFunctionEnd</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">function_address</span>)</span><br />
|
|
Get all the possible ends of a Function</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunctionEnd">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllBasicBlocks" class="summary-sig-name">getAllBasicBlocks</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Gets all basic blocks of given procedure (Deprecated, use Function)</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllBasicBlocks">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findDataRef" class="summary-sig-name">findDataRef</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Find data references to given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDataRef">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getXrefFrom" class="summary-sig-name">getXrefFrom</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get X Reference from a given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getXrefFrom">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getXrefTo" class="summary-sig-name">getXrefTo</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get X Reference to a given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getXrefTo">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getInterCalls" class="summary-sig-name">getInterCalls</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get intermodular calls</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getInterCalls">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getRegs" class="summary-sig-name">getRegs</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get CPU Context values.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getRegs">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getRegsRepr" class="summary-sig-name">getRegsRepr</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
We have to do this to handle the Long integers, which XML-RPC cannot
|
|
do</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getRegsRepr">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setReg" class="summary-sig-name">setReg</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">reg</span>,
|
|
<span class="summary-sig-arg">value</span>)</span><br />
|
|
Set REG value</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setReg">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">PEB OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getPEB" class="summary-sig-name">getPEB</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the PEB information of the debugged process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPEB">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">PHeap OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getHeap" class="summary-sig-name">getHeap</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>,
|
|
<span class="summary-sig-arg">restore</span>=<span class="summary-sig-default">False</span>)</span><br />
|
|
Get Heap Information</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeap">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getDebuggedName" class="summary-sig-name">getDebuggedName</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get debugged name</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getDebuggedName">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getDebuggedPid" class="summary-sig-name">getDebuggedPid</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get debugged pid</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getDebuggedPid">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">INTEGER</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isAdmin" class="summary-sig-name">isAdmin</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is debugger running as admin?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isAdmin">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">TUPLE</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getInfoPanel" class="summary-sig-name">getInfoPanel</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get information displayed on Info Panel</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getInfoPanel">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getCurrentAddress" class="summary-sig-name">getCurrentAddress</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the current address been focus on the Disasm window</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getCurrentAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllModules" class="summary-sig-name">getAllModules</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get all loaded modules.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllModules">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getModulebyAddress"></a><span class="summary-sig-name">getModulebyAddress</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getModulebyAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Module OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getModule" class="summary-sig-name">getModule</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">name</span>)</span><br />
|
|
Get Module Information</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getModule">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr class="private">
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="_getmoduleinfo"></a><span class="summary-sig-name">_getmoduleinfo</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">base_address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger._getmoduleinfo">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getReferencedStrings" class="summary-sig-name">getReferencedStrings</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">code_base</span>)</span><br />
|
|
Get all referenced string from module</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getReferencedStrings">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Ps" class="summary-sig-name">Ps</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
List all active processes.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Ps">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#ps" class="summary-sig-name">ps</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
List all active processes.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ps">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getSehChain" class="summary-sig-name">getSehChain</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the SEH chain.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getSehChain">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Event Object</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getEvent" class="summary-sig-name">getEvent</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the current Event</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getEvent">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Page OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getPage" class="summary-sig-name">getPage</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>)</span><br />
|
|
Get a memory page.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPage">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getMemoryPagebyOwner" class="summary-sig-name">getMemoryPagebyOwner</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">owner</span>)</span><br />
|
|
Get the Memory Pages belonging to the given dll.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyOwner">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getMemoryPagebyOwnerAddress" class="summary-sig-name">getMemoryPagebyOwnerAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">owner_addr</span>)</span><br />
|
|
Get the Memory Pages belonging to the given dll by its base address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyOwnerAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Page OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getMemoryPagebyAddress" class="summary-sig-name">getMemoryPagebyAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get a memory page.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getMemoryPages" class="summary-sig-name">getMemoryPages</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get All memory pages.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPages">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Python List</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#vmQuery" class="summary-sig-name">vmQuery</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Query Memory Page</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.vmQuery">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllHandles" class="summary-sig-name">getAllHandles</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get all handles.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllHandles">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllThreads" class="summary-sig-name">getAllThreads</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get all threads.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllThreads">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllSymbols" class="summary-sig-name">getAllSymbols</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get All Symbols.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllSymbols">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAllSymbolsFromModule" class="summary-sig-name">getAllSymbolsFromModule</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get Symbols from module.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllSymbolsFromModule">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST of Stack OBJECT</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#callStack" class="summary-sig-name">callStack</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get a Back Trace (Call stack).</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.callStack">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST of Call tuples</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getCallTree" class="summary-sig-name">getCallTree</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Get the call tree of given address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getCallTree">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findModule" class="summary-sig-name">findModule</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Find which module an address belongs to.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findModule">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST of DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getHeapsAddress" class="summary-sig-name">getHeapsAddress</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get a the process heaps</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeapsAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAddressOfExpression" class="summary-sig-name">getAddressOfExpression</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">expression</span>)</span><br />
|
|
Get the address from an expression as ntdll.RtlAllocateHeap</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAddressOfExpression">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getAddress" class="summary-sig-name">getAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">expression</span>)</span><br />
|
|
Get the address from an expression as ntdll.RtlAllocateHeap</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Error" class="summary-sig-name">Error</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">msg</span>)</span><br />
|
|
This function shows an Error dialog with a custom message.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Error">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#openTextFile" class="summary-sig-name">openTextFile</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">path</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Opens text file in MDI windows.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.openTextFile">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setStatusBar" class="summary-sig-name">setStatusBar</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">msg</span>)</span><br />
|
|
Sets the status bar message.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setStatusBar">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="clearStatusBar"></a><span class="summary-sig-name">clearStatusBar</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Removes the current status bar message.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.clearStatusBar">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#logLines" class="summary-sig-name">logLines</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">data</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>,
|
|
<span class="summary-sig-arg">highlight</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">gray</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">focus</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Adds multiple lines of ASCII text to the log window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.logLines">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="LogLines"></a><span class="summary-sig-name">LogLines</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">data</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>,
|
|
<span class="summary-sig-arg">highlight</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">gray</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">focus</span>=<span class="summary-sig-default">0</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.LogLines">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Log" class="summary-sig-name">Log</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">msg</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>,
|
|
<span class="summary-sig-arg">highlight</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">gray</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">focus</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Adds a single line of ASCII text to the log window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Log">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#log" class="summary-sig-name">log</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">msg</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>,
|
|
<span class="summary-sig-arg">highlight</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">gray</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">focus</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Adds a single line of ASCII text to the log window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.log">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="updateLog"></a><span class="summary-sig-name">updateLog</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Forces an immediate update of the log window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.updateLog">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="createLogWindow"></a><span class="summary-sig-name">createLogWindow</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Creates or restores the log window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.createLogWindow">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#createWindow" class="summary-sig-name">createWindow</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">title</span>,
|
|
<span class="summary-sig-arg">col_titles</span>)</span><br />
|
|
Creates a custom window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.createWindow">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#createTable" class="summary-sig-name">createTable</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">title</span>,
|
|
<span class="summary-sig-arg">col_titles</span>)</span><br />
|
|
Creates a custom window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.createTable">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setFocus" class="summary-sig-name">setFocus</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">handler</span>)</span><br />
|
|
Set focus on window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setFocus">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isValidHandle" class="summary-sig-name">isValidHandle</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">handler</span>)</span><br />
|
|
Does a window still exist?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isValidHandle">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setStatusBarandLog" class="summary-sig-name">setStatusBarandLog</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>,
|
|
<span class="summary-sig-arg">msg</span>)</span><br />
|
|
Sets and logs a status bar message.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setStatusBarandLog">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#flashMessage" class="summary-sig-name">flashMessage</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">msg</span>)</span><br />
|
|
Flashes a message at status bar.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.flashMessage">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setProgressBar" class="summary-sig-name">setProgressBar</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">message</span>,
|
|
<span class="summary-sig-arg">promille</span>=<span class="summary-sig-default">100</span>)</span><br />
|
|
Displays a progress bar which can contain formatted text and a
|
|
progress percentage.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setProgressBar">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="closeProgressBar"></a><span class="summary-sig-name">closeProgressBar</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Close Progress Bar.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.closeProgressBar">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getComment" class="summary-sig-name">getComment</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">type</span>=<span class="summary-sig-default">253</span>)</span><br />
|
|
Get the comment of the opcode line.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getUserComment"></a><span class="summary-sig-name">getUserComment</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getUserComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getArgumentsComment"></a><span class="summary-sig-name">getArgumentsComment</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getArgumentsComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getAnalyseComment"></a><span class="summary-sig-name">getAnalyseComment</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAnalyseComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getLibraryComment"></a><span class="summary-sig-name">getLibraryComment</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getLibraryComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setComment" class="summary-sig-name">setComment</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">comment</span>)</span><br />
|
|
Set a comment.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setComment">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setLabel" class="summary-sig-name">setLabel</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">label</span>)</span><br />
|
|
Set a label.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setLabel">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="markBegin"></a><span class="summary-sig-name">markBegin</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Place a start mark for timming your script</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.markBegin">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="markEnd"></a><span class="summary-sig-name">markEnd</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Place an End mark for timming your script</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.markEnd">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DICTIONARY</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findDependecies" class="summary-sig-name">findDependecies</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">lookfor</span>)</span><br />
|
|
Find exported function on the loaded dlls.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDependecies">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isvmWare" class="summary-sig-name">isvmWare</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Check if debugger is running under a vmware machine</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isvmWare">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#ManualBreakpoint" class="summary-sig-name">ManualBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">key</span>,
|
|
<span class="summary-sig-arg">shiftkey</span>,
|
|
<span class="summary-sig-arg">font</span>)</span><br />
|
|
Set a Manual Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ManualBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setUnconditionalBreakpoint" class="summary-sig-name">setUnconditionalBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">font</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string">fixed</code><code class="variable-quote">'</code></span>)</span><br />
|
|
Set an Unconditional Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setUnconditionalBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setConditionalBreakpoint" class="summary-sig-name">setConditionalBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">font</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string">fixed</code><code class="variable-quote">'</code></span>)</span><br />
|
|
Set a Conditional Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setConditionalBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setLoggingBreakpoint" class="summary-sig-name">setLoggingBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Set a Logging Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setLoggingBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setWatchPoint" class="summary-sig-name">setWatchPoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Set a watching Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setWatchPoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setTemporaryBreakpoint" class="summary-sig-name">setTemporaryBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">continue_execution</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">stoptrace</span>=<span class="summary-sig-default">False</span>)</span><br />
|
|
Set a Temporary Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setTemporaryBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setBreakpoint" class="summary-sig-name">setBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Set a Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setBreakpointOnName" class="summary-sig-name">setBreakpointOnName</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">name</span>)</span><br />
|
|
Set a Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setBreakpointOnName">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#disableBreakpoint" class="summary-sig-name">disableBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Disable Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disableBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#deleteBreakpoint" class="summary-sig-name">deleteBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">address2</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Delete Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.deleteBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getBreakpointType" class="summary-sig-name">getBreakpointType</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get the Breakpoint type.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getBreakpointType">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#setMemBreakpoint" class="summary-sig-name">setMemBreakpoint</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>,
|
|
<span class="summary-sig-arg">type</span>,
|
|
<span class="summary-sig-arg">size</span>=<span class="summary-sig-default">4</span>)</span><br />
|
|
Modifies or removes a memory breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setMemBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="disableMemBreakpoint"></a><span class="summary-sig-name">disableMemBreakpoint</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>)</span><br />
|
|
Disable Memory Breakpoint.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disableMemBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="setHardwareBreakpoint"></a><span class="summary-sig-name">setHardwareBreakpoint</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>,
|
|
<span class="summary-sig-arg">type</span>=<span class="summary-sig-default">1</span>,
|
|
<span class="summary-sig-arg">size</span>=<span class="summary-sig-default">1</span>)</span><br />
|
|
Sets Hardware breakpoint</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setHardwareBreakpoint">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#writeLong" class="summary-sig-name">writeLong</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">dword</span>)</span><br />
|
|
Write long to memory address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.writeLong">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#writeMemory" class="summary-sig-name">writeMemory</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">buf</span>)</span><br />
|
|
Write buffer to memory address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.writeMemory">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BUFFER</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readMemory" class="summary-sig-name">readMemory</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">size</span>)</span><br />
|
|
Read block of memory.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readMemory">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readLong" class="summary-sig-name">readLong</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Read a Long from the debugged process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readLong">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">String</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readString" class="summary-sig-name">readString</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Read a string from the remote process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readString">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Unicode String</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readWString" class="summary-sig-name">readWString</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Read a unicode string from the remote process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readWString">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readUntil" class="summary-sig-name">readUntil</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">ending</span>)</span><br />
|
|
Read string until ending starting at given address</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readUntil">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">Short Integer</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#readShort" class="summary-sig-name">readShort</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Read a short integer from the remote process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readShort">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">List</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchShort" class="summary-sig-name">searchShort</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">short</span>,
|
|
<span class="summary-sig-arg">flag</span>=<span class="summary-sig-default">None</span>)</span><br />
|
|
Search a short integer on the remote process memory</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchShort">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">List</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchLong" class="summary-sig-name">searchLong</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">long</span>,
|
|
<span class="summary-sig-arg">flag</span>=<span class="summary-sig-default">None</span>)</span><br />
|
|
Search a short integer on the remote process memory</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchLong">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchOnExecute" class="summary-sig-name">searchOnExecute</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">buf</span>)</span><br />
|
|
Search string in executable memory.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnExecute">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchOnWrite" class="summary-sig-name">searchOnWrite</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">buf</span>)</span><br />
|
|
Search string in writable memory.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnWrite">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchOnRead" class="summary-sig-name">searchOnRead</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">buf</span>)</span><br />
|
|
Search string in readable memory.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnRead">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Search" class="summary-sig-name">Search</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">buf</span>,
|
|
<span class="summary-sig-arg">flag</span>=<span class="summary-sig-default">None</span>)</span><br />
|
|
Search string in memory.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Search">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">List</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchCommands" class="summary-sig-name">searchCommands</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">cmd</span>)</span><br />
|
|
Search for a sequence of commands in all executable modules loaded.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchCommands">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">List</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchCommandsOnModule" class="summary-sig-name">searchCommandsOnModule</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">cmd</span>)</span><br />
|
|
Search for a sequence of commands in given executable module.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchCommandsOnModule">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Run" class="summary-sig-name">Run</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Run Process untill address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Run">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="runTillRet"></a><span class="summary-sig-name">runTillRet</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Run Process till ret.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.runTillRet">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="Pause"></a><span class="summary-sig-name">Pause</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Pause process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Pause">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#stepOver" class="summary-sig-name">stepOver</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Step-Over Process untill address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.stepOver">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#stepIn" class="summary-sig-name">stepIn</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Step-in Process untill address.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.stepIn">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="quitDebugger"></a><span class="summary-sig-name">quitDebugger</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Quits debugger</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.quitDebugger">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#ignoreSingleStep" class="summary-sig-name">ignoreSingleStep</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">flag</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string">CONTINUE</code><code class="variable-quote">'</code></span>)</span><br />
|
|
Ignore Single Step events</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ignoreSingleStep">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#openProcess" class="summary-sig-name">openProcess</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">path</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">0</span>)</span><br />
|
|
Open process for debugging</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.openProcess">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#restartProcess" class="summary-sig-name">restartProcess</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">mode</span>=<span class="summary-sig-default">-1</span>)</span><br />
|
|
Restart debuggee</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.restartProcess">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#Attach" class="summary-sig-name">Attach</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">pid</span>)</span><br />
|
|
Attach to an active process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Attach">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="Dettach"></a><span class="summary-sig-name">Dettach</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Dettach from active process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Dettach">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="prepareForNewProcess"></a><span class="summary-sig-name">prepareForNewProcess</span>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Prepare Debugger for fresh debugging session NOTE: be sure to know
|
|
what you are doing when calling this method</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.prepareForNewProcess">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#goSilent" class="summary-sig-name">goSilent</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">silent</span>)</span><br />
|
|
Set/Unset silent debugging flag</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goSilent">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#addHeader" class="summary-sig-name">addHeader</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">header</span>,
|
|
<span class="summary-sig-arg">color</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string">Black</code><code class="variable-quote">'</code></span>)</span><br />
|
|
Add a header to given row.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addHeader">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#removeHeader" class="summary-sig-name">removeHeader</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Removes header from row.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.removeHeader">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#removeLine" class="summary-sig-name">removeLine</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Removes header from row.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.removeLine">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getHeader" class="summary-sig-name">getHeader</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Get Header from row.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeader">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#addLine" class="summary-sig-name">addLine</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">header</span>,
|
|
<span class="summary-sig-arg">color</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string">Black</code><code class="variable-quote">'</code></span>)</span><br />
|
|
Add a line to cpu window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addLine">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#gotoDisasmWindow" class="summary-sig-name">gotoDisasmWindow</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>)</span><br />
|
|
GoTo the Disassembler Window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoDisasmWindow">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#gotoDumpWindow" class="summary-sig-name">gotoDumpWindow</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>)</span><br />
|
|
GoTo Dump Window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoDumpWindow">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#gotoStackWindow" class="summary-sig-name">gotoStackWindow</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">addr</span>)</span><br />
|
|
GoTo the Stack Window.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoStackWindow">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#inputBox" class="summary-sig-name">inputBox</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">title</span>)</span><br />
|
|
Creates Dialog with an Inputbox.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.inputBox">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#comboBox" class="summary-sig-name">comboBox</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">title</span>,
|
|
<span class="summary-sig-arg">combolist</span>)</span><br />
|
|
Creates Dialog with a Combobox.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.comboBox">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getStatus" class="summary-sig-name">getStatus</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the status of the debugged process.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getStatus">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BOOL</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isStopped" class="summary-sig-name">isStopped</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is the debugged process stopped?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isStopped">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BOOL</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isEvent" class="summary-sig-name">isEvent</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is the debugged process in an event state?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isEvent">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BOOL</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isRunning" class="summary-sig-name">isRunning</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is the debugged process running?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isRunning">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BOOL</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isFinished" class="summary-sig-name">isFinished</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is the debugged process finished?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isFinished">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">BOOL</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#isClosing" class="summary-sig-name">isClosing</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Is the debugged process closed?</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isClosing">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#listHooks" class="summary-sig-name">listHooks</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
List of active hooks</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.listHooks">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="removeHook"></a><span class="summary-sig-name">removeHook</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">hook_str</span>)</span><br />
|
|
Unhook from memory</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.removeHook">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr class="private">
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="_getHookEntry"></a><span class="summary-sig-name">_getHookEntry</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">entry</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger._getHookEntry">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr class="private">
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="_createCodeforHook"></a><span class="summary-sig-name">_createCodeforHook</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">memAddress</span>,
|
|
<span class="summary-sig-arg">afterHookAddr</span>,
|
|
<span class="summary-sig-arg">ndx</span>,
|
|
<span class="summary-sig-arg">table</span>,
|
|
<span class="summary-sig-arg">execute_prelude</span>,
|
|
<span class="summary-sig-arg">alloc_size</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger._createCodeforHook">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="addFastLogHook"></a><span class="summary-sig-name">addFastLogHook</span>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">hook</span>,
|
|
<span class="summary-sig-arg">alloc_size</span>=<span class="summary-sig-default">1048576</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addFastLogHook">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#rVirtualAlloc" class="summary-sig-name">rVirtualAlloc</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">lpAddress</span>,
|
|
<span class="summary-sig-arg">dwSize</span>,
|
|
<span class="summary-sig-arg">flAllocationType</span>,
|
|
<span class="summary-sig-arg">flProtect</span>)</span><br />
|
|
Virtual Allocation on the Debugged Process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.rVirtualAlloc">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#rVirtualFree" class="summary-sig-name">rVirtualFree</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">lpAddress</span>,
|
|
<span class="summary-sig-arg">dwSize</span>=<span class="summary-sig-default">0</span>,
|
|
<span class="summary-sig-arg">dwFreeType</span>=<span class="summary-sig-default">32768</span>)</span><br />
|
|
Virtual Free of memory on the Debugged Process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.rVirtualFree">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#remoteVirtualAlloc" class="summary-sig-name">remoteVirtualAlloc</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">size</span>=<span class="summary-sig-default">65536</span>,
|
|
<span class="summary-sig-arg">interactive</span>=<span class="summary-sig-default">True</span>)</span><br />
|
|
Virtual Allocation on the Debugged Process</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.remoteVirtualAlloc">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getOsVersion"></a><span class="summary-sig-name">getOsVersion</span>(<span class="summary-sig-arg">self</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOsVersion">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a name="getOsRelease"></a><span class="summary-sig-name">getOsRelease</span>(<span class="summary-sig-arg">self</span>)</span></td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOsRelease">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">TUPLE</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getOsInformation" class="summary-sig-name">getOsInformation</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get OS information</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOsInformation">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#getThreadId" class="summary-sig-name">getThreadId</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Return current debuggee thread id</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getThreadId">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD|None</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchFunctionByName" class="summary-sig-name">searchFunctionByName</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">name</span>,
|
|
<span class="summary-sig-arg">heuristic</span>=<span class="summary-sig-default">90</span>,
|
|
<span class="summary-sig-arg">module</span>=<span class="summary-sig-default">None</span>,
|
|
<span class="summary-sig-arg">version</span>=<span class="summary-sig-default">None</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Look up into our dictionaries to find a function match.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchFunctionByName">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">DWORD|None</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#searchFunctionByHeuristic" class="summary-sig-name">searchFunctionByHeuristic</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">csvline</span>,
|
|
<span class="summary-sig-arg">heuristic</span>=<span class="summary-sig-default">90</span>,
|
|
<span class="summary-sig-arg">module</span>=<span class="summary-sig-default">None</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Search memory to find a function that fullfit the options.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchFunctionByHeuristic">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#resolvFunctionByAddress" class="summary-sig-name">resolvFunctionByAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">heuristic</span>=<span class="summary-sig-default">90</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Look up into our dictionaries to find a function match.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.resolvFunctionByAddress">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#makeFunctionHashHeuristic" class="summary-sig-name">makeFunctionHashHeuristic</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">compressed</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">followCalls</span>=<span class="summary-sig-default">True</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Returns:
|
|
the first element is described below and the second is the result of
|
|
this same function but over the first call of a single basic block
|
|
function (if applies), each element is like this: a base64
|
|
representation of the compressed version of each bb hash: [4 bytes
|
|
BB(i) start][4 bytes BB(i) 1st edge][4 bytes BB(i) 2nd edge] 0 <=
|
|
i < BB count or the same but like a LIST with raw data.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHashHeuristic">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">STRING</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#makeFunctionHashExact" class="summary-sig-name">makeFunctionHashExact</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Return a SHA-1 hash of the function, taking the raw bytes as data.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHashExact">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type">LIST</span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#makeFunctionHash" class="summary-sig-name">makeFunctionHash</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>,
|
|
<span class="summary-sig-arg">compressed</span>=<span class="summary-sig-default">False</span>,
|
|
<span class="summary-sig-arg">data</span>=<span class="summary-sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span><br />
|
|
Return a list with the best BB to use for a search and the heuristic
|
|
hash of the function.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHash">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#findLoops" class="summary-sig-name">findLoops</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
This function finds Natural Loops inside a function.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findLoops">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<span class="summary-type"> </span>
|
|
</td><td class="summary">
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr>
|
|
<td><span class="summary-sig"><a href="Libs.immlib.Debugger-class.html#sleep_till_stopped" class="summary-sig-name">sleep_till_stopped</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">timeout</span>)</span><br />
|
|
timeout is in seconds.</td>
|
|
<td align="right" valign="top">
|
|
<span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.sleep_till_stopped">source code</a></span>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<!-- ==================== METHOD DETAILS ==================== -->
|
|
<a name="section-MethodDetails"></a>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr bgcolor="#70b0f0" class="table-header">
|
|
<td colspan="2" class="table-header">
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%">
|
|
<tr valign="top">
|
|
<td align="left"><span class="table-header">Method Details</span></td>
|
|
<td align="right" valign="top"
|
|
><span class="options">[<a href="#section-MethodDetails"
|
|
class="privatelink" onclick="toggle_private();"
|
|
>hide private</a>]</span></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<a name="addKnowledge"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">addKnowledge</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">id</span>,
|
|
<span class="sig-arg">object</span>,
|
|
<span class="sig-arg">force_add</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addKnowledge">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>This function add a python object to the knowledge database.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>id</code></strong> (STRING) - unique name tag of the object</li>
|
|
<li><strong class="pname"><code>object</code></strong> (Python object) - Object to be saved in the knowledge database</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getKnowledge"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getKnowledge</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">id</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getKnowledge">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Gets python object from the knowledge database.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>id</code></strong> (STRING) - unique name tag of the object</li>
|
|
</ul></dd>
|
|
<dt>Returns: PYTHON OBJECT</dt>
|
|
<dd>Object retrieved from the knowledge database</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="listKnowledge"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">listKnowledge</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.listKnowledge">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Gets the list of saved objects in the knowledge database.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: TUPLE</dt>
|
|
<dd>List of String ids currently saved</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findPacker"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findPacker</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">name</span>,
|
|
<span class="sig-arg">OnMemory</span>=<span class="sig-default">True</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findPacker">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Find possible Packer/Cryptors/etc on a Module</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>name</code></strong> (STRING) - Module name</li>
|
|
<li><strong class="pname"><code>OnMemory</code></strong> ((Optional, Def: True) BOOLEAN) - Whether to look in memory or on a file.</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST of TUPLES in the form of (DWORD, LIST OF STRING)</dt>
|
|
<dd>A list of the Packer founded (Offset, List of Packer found in
|
|
that address)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="forgetKnowledge"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">forgetKnowledge</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">id</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.forgetKnowledge">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Remove python object from knowledge database.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>id</code></strong> (STRING) - unique name tag of the object</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getPEBaddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getPEBaddress</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPEBaddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Gets PEB.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>PEB address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="analyseCode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">analyseCode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.analyseCode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Analyse module's code</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address from module to be analysed</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isAnalysed"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isAnalysed</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isAnalysed">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Check if module is already analysed</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address from module</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>1 if module already analysed</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setVariable"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setVariable</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">string</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setVariable">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set Variable name to specified address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address from assembly line</li>
|
|
<li><strong class="pname"><code>String</code></strong> (STRING) - Variable name to be set</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getVariable"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getVariable</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getVariable">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get Variable name from specified address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address from assembly line</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>Variable name for given address.</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Disasm"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Disasm</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">mode</span>=<span class="sig-default">5</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Disasm">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disasm address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>Mode</code></strong> ((Optional, Def: DISASM_ALL)) - Disasm mode</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmSizeOnly"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmSizeOnly</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmSizeOnly">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine command size only</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmData"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmData</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmData">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine size and analysis data</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Trace integer registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmFile"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmFile</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmFile">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, no symbols/registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmCode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmCode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmCode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, registers undefined</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmRTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmRTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmRTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassemble with run-trace registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForward"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForward</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>,
|
|
<span class="sig-arg">mode</span>=<span class="sig-default">5</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForward">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disasm nlines forward of given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
<li><strong class="pname"><code>Mode</code></strong> ((Optional, Def: DISASM_ALL)) - Disasm mode</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardAddressOnly"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardAddressOnly</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardAddressOnly">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disasm nlines forward to the given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
<li><strong class="pname"><code>Mode</code></strong> ((Optional, Def: DISASM_ALL)) - Disasm mode</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardSizeOnly"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardSizeOnly</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardSizeOnly">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine command size only</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardData"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardData</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardData">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine size and analysis data</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Trace integer registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardFile"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardFile</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardFile">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, no symbols/registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardCode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardCode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardCode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, registers undefined</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmForwardRTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmForwardRTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmForwardRTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassemble with run-trace registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackward"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackward</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>,
|
|
<span class="sig-arg">mode</span>=<span class="sig-default">5</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackward">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disasm nlines backward from the given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardAddressOnly"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardAddressOnly</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardAddressOnly">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disasm nlines backward of given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardSizeOnly"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardSizeOnly</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardSizeOnly">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine command size only</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardData"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardData</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardData">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Determine size and analysis data</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Trace integer registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardFile"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardFile</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardFile">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, no symbols/registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardCode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardCode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardCode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassembly, registers undefined</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disasmBackwardRTrace"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disasmBackwardRTrace</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">nlines</span>=<span class="sig-default">1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disasmBackwardRTrace">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disassemble with run-trace registers</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
<li><strong class="pname"><code>nlines</code></strong> (DWORD) - (Optional, Def: 1) Number of lines to disassemble forward</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findDecode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findDecode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDecode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the internal decode information from an analysed module</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address in the range of the module page</li>
|
|
</ul></dd>
|
|
<dt>Returns: Decode OBJECT</dt>
|
|
<dd>Decode Object containing the analized information</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="goNextProcedure"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">goNextProcedure</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goNextProcedure">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Go to next procedure</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of next procedure</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="goPreviousProcedure"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">goPreviousProcedure</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goPreviousProcedure">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Go to previous procedure</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of previous procedure</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getOpcode"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getOpcode</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOpcode">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get address's Opcode</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address to disasm</li>
|
|
</ul></dd>
|
|
<dt>Returns: opCode Object (Check libanalyze.py)</dt>
|
|
<dd>Disassmbled Opcode</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Assemble"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Assemble</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">code</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Assemble">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Assemble code.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>code</code></strong> (STRING) - Code to be assembled</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>Opcodes of the assembled code</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="decodeAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">decodeAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.decodeAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Decode given address</p>
|
|
<dl class="fields">
|
|
<dt>Returns: STRING</dt>
|
|
<dd>decoded value</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="undecorateName"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">undecorateName</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">decorated</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.undecorateName">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Undecorate given name</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>decorated</code></strong> (STRING) - decorated name</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>undecorated name</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getTraceArgs"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getTraceArgs</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">tracedarg</span>,
|
|
<span class="sig-arg">shownonusersupplied</span>=<span class="sig-default">False</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getTraceArgs">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Trace Parameters of a function, return only when is user-supplied</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address of the function call</li>
|
|
<li><strong class="pname"><code>Tracedarg</code></strong> (DWORD) - Parameter to trace</li>
|
|
<li><strong class="pname"><code>Shownonusersupplied</code></strong> (BOOLEAN) - (Optional, Def: False) Flag whether or not show user supplied
|
|
param</li>
|
|
</ul></dd>
|
|
<dt>Returns: TUPLES</dt>
|
|
<dd>Returns a tuple of (Push Opcode, TABLE of OPCODES setting the
|
|
PUSH)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllFunctions"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllFunctions</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllFunctions">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Gets all function of given module's address</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>Function start address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getFunction"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getFunction</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunction">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the Function information</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address of the function</li>
|
|
</ul></dd>
|
|
<dt>Returns: Function Object</dt>
|
|
<dd>Function Object containing information of the requested function</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getFunctionBegin"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getFunctionBegin</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunctionBegin">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Find start address of funcion</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Start Address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getFunctionEnd"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getFunctionEnd</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">function_address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getFunctionEnd">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get all the possible ends of a Function</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>function_address</code></strong> (DWORD) - Address of the function</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>List of Address of all the possible ret address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllBasicBlocks"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllBasicBlocks</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllBasicBlocks">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Gets all basic blocks of given procedure (Deprecated, use
|
|
Function)</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>(start,end) addresses of basic blocks</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findDataRef"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findDataRef</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDataRef">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Find data references to given address</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>Table with found references</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getXrefFrom"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getXrefFrom</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getXrefFrom">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get X Reference from a given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>List of X reference from the given address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getXrefTo"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getXrefTo</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getXrefTo">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get X Reference to a given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>List of X reference to the given address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getInterCalls"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getInterCalls</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getInterCalls">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get intermodular calls</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>Dict of intermodular calls to the given address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getRegs"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getRegs</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getRegs">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get CPU Context values.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>x86 Registers</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getRegsRepr"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getRegsRepr</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getRegsRepr">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>We have to do this to handle the Long integers, which XML-RPC cannot
|
|
do</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>x86 registers in string format (repr)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setReg"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setReg</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">reg</span>,
|
|
<span class="sig-arg">value</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setReg">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set REG value</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>reg</code></strong> (STRING) - Register name</li>
|
|
<li><strong class="pname"><code>vale</code></strong> - Value to set the register</li>
|
|
<li><strong class="pname"><code>value</code></strong> (DWORD)</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getPEB"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getPEB</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPEB">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the PEB information of the debugged process</p>
|
|
<dl class="fields">
|
|
<dt>Returns: PEB OBJECT</dt>
|
|
<dd>PEB</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getHeap"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getHeap</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>,
|
|
<span class="sig-arg">restore</span>=<span class="sig-default">False</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeap">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get Heap Information</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address of the heap</li>
|
|
<li><strong class="pname"><code>restore</code></strong> (BOOLEAN) - (Optional, Def: False) Flag whether or not use a restore heap</li>
|
|
</ul></dd>
|
|
<dt>Returns: PHeap OBJECT</dt>
|
|
<dd>Heap</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getDebuggedName"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getDebuggedName</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getDebuggedName">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get debugged name</p>
|
|
<dl class="fields">
|
|
<dt>Returns: STRING</dt>
|
|
<dd>Name of the Process been debugged</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getDebuggedPid"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getDebuggedPid</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getDebuggedPid">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get debugged pid</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Process ID</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isAdmin"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isAdmin</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isAdmin">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is debugger running as admin?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: INTEGER</dt>
|
|
<dd>1 if running as admin</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getInfoPanel"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getInfoPanel</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getInfoPanel">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get information displayed on Info Panel</p>
|
|
<dl class="fields">
|
|
<dt>Returns: TUPLE</dt>
|
|
<dd>Python Tuple with the 3 lines from InfoPanel</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getCurrentAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getCurrentAddress</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getCurrentAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the current address been focus on the Disasm window</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllModules"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllModules</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllModules">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get all loaded modules.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>Dict of Modules</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getModule"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getModule</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">name</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getModule">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get Module Information</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>name</code></strong> (STRING) - Name of the module</li>
|
|
</ul></dd>
|
|
<dt>Returns: Module OBJECT</dt>
|
|
<dd>A Module object</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getReferencedStrings"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getReferencedStrings</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">code_base</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getReferencedStrings">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get all referenced string from module</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>name</code></strong> (DWORD) - Code Base Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>A list of tuples with referenced strings (address, string,
|
|
comment)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Ps"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Ps</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Ps">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>List all active processes.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>A list of tuples with process information (pid, name, path,
|
|
services, tcp list, udp list)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="ps"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">ps</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ps">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>List all active processes.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>A list of tuples with process information (pid, name, path,
|
|
services, tcp list, udp list)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getSehChain"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getSehChain</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getSehChain">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the SEH chain.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>A list of tuples with SEH information (seh, handler)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getEvent"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getEvent</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getEvent">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the current Event</p>
|
|
<dl class="fields">
|
|
<dt>Returns: Event Object</dt>
|
|
<dd>Event</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getPage"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getPage</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getPage">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get a memory page.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address of a beginning of the Page</li>
|
|
</ul></dd>
|
|
<dt>Returns: Page OBJECT</dt>
|
|
<dd>Memory Page</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getMemoryPagebyOwner"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getMemoryPagebyOwner</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">owner</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyOwner">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the Memory Pages belonging to the given dll.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>owner</code></strong> (STRING) - Name of the dll</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>LIST of Memory Pages belonging to the given dll</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getMemoryPagebyOwnerAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getMemoryPagebyOwnerAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">owner_addr</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyOwnerAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the Memory Pages belonging to the given dll by its base
|
|
address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>owner</code></strong> (STRING) - Name of the dll</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>LIST of Memory Pages belonging to the given dll</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getMemoryPagebyAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getMemoryPagebyAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPagebyAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get a memory page.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address in the range of the Page</li>
|
|
</ul></dd>
|
|
<dt>Returns: Page OBJECT</dt>
|
|
<dd>Memory Page</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getMemoryPages"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getMemoryPages</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getMemoryPages">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get All memory pages.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>List of all memory pages</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="vmQuery"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">vmQuery</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.vmQuery">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Query Memory Page</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Base Address of memory page</li>
|
|
</ul></dd>
|
|
<dt>Returns: Python List</dt>
|
|
<dd>List with memory page structure</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllHandles"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllHandles</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllHandles">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get all handles.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>All the process handles</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllThreads"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllThreads</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllThreads">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get all threads.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>All process threads</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllSymbols"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllSymbols</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllSymbols">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get All Symbols.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>All the symbols of the process</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAllSymbolsFromModule"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAllSymbolsFromModule</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAllSymbolsFromModule">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get Symbols from module.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> (DWORD) - Address from module.</li>
|
|
</ul></dd>
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>All the symbols of the module</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="callStack"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">callStack</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.callStack">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get a Back Trace (Call stack).</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST of Stack OBJECT</dt>
|
|
<dd>list of all the stack trace</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getCallTree"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getCallTree</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getCallTree">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the call tree of given address.</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST of Call tuples</dt>
|
|
<dd>list of all the call tree ulong line; //
|
|
Line number in column ulong dummy; //
|
|
Must be 1 ulong type; // Type, set of
|
|
TY_xxx ulong entry; // Address of
|
|
function ulong from; // Address of
|
|
calling instruction ulong calls; //
|
|
Address of called subfunction</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findModule"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findModule</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findModule">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Find which module an address belongs to.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>Tuple of module information (name, base address)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getHeapsAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getHeapsAddress</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeapsAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get a the process heaps</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST of DWORD</dt>
|
|
<dd>List of Heap Address</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAddressOfExpression"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAddressOfExpression</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">expression</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAddressOfExpression">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the address from an expression as ntdll.RtlAllocateHeap</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>expression</code></strong> (STRING) - Expression to translate into an address</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the Expression</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">expression</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the address from an expression as ntdll.RtlAllocateHeap</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>expression</code></strong> (STRING) - Expression to translate into an address</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the Expression</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Error"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Error</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">msg</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Error">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>This function shows an Error dialog with a custom message.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="openTextFile"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">openTextFile</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">path</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.openTextFile">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Opens text file in MDI windows. ( if no path is specified browsefile
|
|
dialog will pop up )</p>
|
|
<dl class="fields">
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setStatusBar"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setStatusBar</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">msg</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setStatusBar">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Sets the status bar message.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="logLines"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">logLines</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">data</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>,
|
|
<span class="sig-arg">highlight</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">gray</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">focus</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.logLines">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Adds multiple lines of ASCII text to the log window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (LIST of STRING) - List of Message to add (max size of msg is 255 bytes)</li>
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address associated with the message</li>
|
|
<li><strong class="pname"><code>highlight</code></strong> (BOOLEAN) - Set highlight text</li>
|
|
<li><strong class="pname"><code>gray</code></strong> (BOOLEAN) - Set gray text</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Log"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Log</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">msg</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>,
|
|
<span class="sig-arg">highlight</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">gray</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">focus</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Log">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Adds a single line of ASCII text to the log window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message (max size is 255 bytes)</li>
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address associated with the message</li>
|
|
<li><strong class="pname"><code>highlight</code></strong> (BOOLEAN) - Set highlight text</li>
|
|
<li><strong class="pname"><code>gray</code></strong> (BOOLEAN) - Set gray text</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="log"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">log</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">msg</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>,
|
|
<span class="sig-arg">highlight</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">gray</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">focus</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.log">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Adds a single line of ASCII text to the log window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message (max size is 255 bytes)</li>
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address associated with the message</li>
|
|
<li><strong class="pname"><code>highlight</code></strong> (BOOLEAN) - Set highlight text</li>
|
|
<li><strong class="pname"><code>gray</code></strong> (BOOLEAN) - Set gray text</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="createWindow"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">createWindow</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">title</span>,
|
|
<span class="sig-arg">col_titles</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.createWindow">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Creates a custom window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>title</code></strong> (STRING) - Window title</li>
|
|
<li><strong class="pname"><code>col_titles</code></strong> (LIST OF STRING) - Column titles list</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="createTable"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">createTable</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">title</span>,
|
|
<span class="sig-arg">col_titles</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.createTable">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Creates a custom window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>title</code></strong> (STRING) - Window title</li>
|
|
<li><strong class="pname"><code>col_titles</code></strong> (LIST OF STRING) - Column titles list</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setFocus"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setFocus</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">handler</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setFocus">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set focus on window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>handler</code></strong> (ULONG) - Windows Handler</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isValidHandle"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isValidHandle</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">handler</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isValidHandle">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Does a window still exist?</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>handler</code></strong> (ULONG) - Windows to check handle</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>INT : 1 Exists, 0 Doesnt exist</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setStatusBarandLog"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setStatusBarandLog</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>,
|
|
<span class="sig-arg">msg</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setStatusBarandLog">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Sets and logs a status bar message.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address related with the message</li>
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="flashMessage"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">flashMessage</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">msg</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.flashMessage">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Flashes a message at status bar.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setProgressBar"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setProgressBar</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">message</span>,
|
|
<span class="sig-arg">promille</span>=<span class="sig-default">100</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setProgressBar">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Displays a progress bar which can contain formatted text and a
|
|
progress percentage. If the formatted text contains a dollar sign ('$')
|
|
it will be replaced by the current progress percentage.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>msg</code></strong> (STRING) - Message</li>
|
|
<li><strong class="pname"><code>promille</code></strong> (DWORD) - Progress. At 0 the progress bar is closed and the previous
|
|
message restored.</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getComment"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getComment</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">type</span>=<span class="sig-default">253</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getComment">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the comment of the opcode line.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the requested comment</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>Requested comment</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setComment"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setComment</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">comment</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setComment">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a comment.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the Comment</li>
|
|
<li><strong class="pname"><code>comment</code></strong> (STRING) - Comment to add</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setLabel"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setLabel</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">label</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setLabel">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a label.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> - Address to the new label</li>
|
|
<li><strong class="pname"><code>label</code></strong> (STRING) - Label to add</li>
|
|
<li><strong class="pname"><code>adresss</code></strong> (DWORD)</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findDependecies"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findDependecies</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">lookfor</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findDependecies">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Find exported function on the loaded dlls.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>lookfor</code></strong> (TABLE of DWORD) - Table of functions to search</li>
|
|
</ul></dd>
|
|
<dt>Returns: DICTIONARY</dt>
|
|
<dd>Dictionary</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isvmWare"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isvmWare</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isvmWare">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Check if debugger is running under a vmware machine</p>
|
|
<dl class="fields">
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>1 if vmware machine exists</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="ManualBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">ManualBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">key</span>,
|
|
<span class="sig-arg">shiftkey</span>,
|
|
<span class="sig-arg">font</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ManualBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Manual Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the breakpoint</li>
|
|
<li><strong class="pname"><code>key</code></strong> (DWORD) - VK_F2 (Conditional Breakpoint) or VK_F4 (Logging Breakpoint)</li>
|
|
<li><strong class="pname"><code>shiftkey</code></strong> (DWORD) - State of the shiftkey</li>
|
|
<li><strong class="pname"><code>font</code></strong> (STRING) - See ImmFonts</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setUnconditionalBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setUnconditionalBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">font</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string">fixed</code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setUnconditionalBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set an Unconditional Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
<li><strong class="pname"><code>font</code></strong> (STRING) - (Optional, Def: fixed) Font for the breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setConditionalBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setConditionalBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">font</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string">fixed</code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setConditionalBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Conditional Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
<li><strong class="pname"><code>font</code></strong> (STRING) - (Optional, Def: fixed) Font for the breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setLoggingBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setLoggingBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setLoggingBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Logging Breakpoint. (This breakpoint will not puase the
|
|
execution, it will just act as a Watch point"</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setWatchPoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setWatchPoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setWatchPoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a watching Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the watchpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setTemporaryBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setTemporaryBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">continue_execution</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">stoptrace</span>=<span class="sig-default">False</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setTemporaryBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Temporary Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
<li><strong class="pname"><code>continue_execution</code></strong> (BOOLEAN) - Automatically removes temporary breakpoint when hit and continue
|
|
execution</li>
|
|
<li><strong class="pname"><code>stoptrace</code></strong> (BOOLEAN) - Stop any kind of trace or animation when hit</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setBreakpointOnName"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setBreakpointOnName</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">name</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setBreakpointOnName">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set a Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Name</code></strong> (STRING) - name of the function to bp</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of name</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="disableBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">disableBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.disableBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Disable Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="deleteBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">deleteBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">address2</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.deleteBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Delete Breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Start range of addresses to delete breakpoints</li>
|
|
<li><strong class="pname"><code>Address</code></strong> - End range of addresses to delete breakpoints</li>
|
|
<li><strong class="pname"><code>address2</code></strong> (DWORD)</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getBreakpointType"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getBreakpointType</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getBreakpointType">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the Breakpoint type.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>Breakpoint type</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setMemBreakpoint"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setMemBreakpoint</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>,
|
|
<span class="sig-arg">type</span>,
|
|
<span class="sig-arg">size</span>=<span class="sig-default">4</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.setMemBreakpoint">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Modifies or removes a memory breakpoint.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address for the breakpoint</li>
|
|
<li><strong class="pname"><code>type</code></strong> (DWORD) - Type of Memory Breakpoint (READ/WRITE/SFX)</li>
|
|
<li><strong class="pname"><code>size</code></strong> (DWORD) - (Optional, Def: 4) Size of Memory Breakpoint</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="writeLong"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">writeLong</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">dword</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.writeLong">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Write long to memory address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address</li>
|
|
<li><strong class="pname"><code>dword</code></strong> (DWORD) - long to write</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="writeMemory"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">writeMemory</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">buf</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.writeMemory">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Write buffer to memory address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address</li>
|
|
<li><strong class="pname"><code>buf</code></strong> (BUFFER) - Buffer</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readMemory"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readMemory</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">size</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readMemory">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read block of memory.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address</li>
|
|
<li><strong class="pname"><code>size</code></strong> (DWORD) - Size</li>
|
|
</ul></dd>
|
|
<dt>Returns: BUFFER</dt>
|
|
<dd>Process memory</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readLong"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readLong</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readLong">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read a Long from the debugged process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Long</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readString"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readString</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readString">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read a string from the remote process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the string</li>
|
|
</ul></dd>
|
|
<dt>Returns: String</dt>
|
|
<dd>String</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readWString"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readWString</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readWString">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read a unicode string from the remote process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the unicode string</li>
|
|
</ul></dd>
|
|
<dt>Returns: Unicode String</dt>
|
|
<dd>Unicode String</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readUntil"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readUntil</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">ending</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readUntil">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read string until ending starting at given address</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>Address</code></strong> - Start address @return Readed String</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="readShort"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">readShort</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.readShort">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Read a short integer from the remote process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the short</li>
|
|
</ul></dd>
|
|
<dt>Returns: Short Integer</dt>
|
|
<dd>Short</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchShort"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchShort</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">short</span>,
|
|
<span class="sig-arg">flag</span>=<span class="sig-default">None</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchShort">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search a short integer on the remote process memory</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>short</code></strong> (SHORT) - Short integer to search for</li>
|
|
<li><strong class="pname"><code>flag</code></strong> (STRING) - Memory Protection String Flag</li>
|
|
</ul></dd>
|
|
<dt>Returns: List</dt>
|
|
<dd>List of address of the short integer founded</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchLong"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchLong</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">long</span>,
|
|
<span class="sig-arg">flag</span>=<span class="sig-default">None</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchLong">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search a short integer on the remote process memory</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>long</code></strong> (DWORD) - integer to search for</li>
|
|
<li><strong class="pname"><code>flag</code></strong> (STRING) - Memory Protection String Flag</li>
|
|
</ul></dd>
|
|
<dt>Returns: List</dt>
|
|
<dd>List of address of the integer founded</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchOnExecute"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchOnExecute</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">buf</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnExecute">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search string in executable memory.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>buf</code></strong> - Buffer to search for</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>A list of address where the string was found on memory</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchOnWrite"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchOnWrite</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">buf</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnWrite">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search string in writable memory.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>buf</code></strong> - Buffer to search for</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>A list of address where the string was found on memory</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchOnRead"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchOnRead</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">buf</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchOnRead">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search string in readable memory.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>buf</code></strong> - Buffer to search for</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>A list of address where the string was found on memory</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Search"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Search</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">buf</span>,
|
|
<span class="sig-arg">flag</span>=<span class="sig-default">None</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Search">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search string in memory.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>buf</code></strong> - Buffer to search for</li>
|
|
<li><strong class="pname"><code>flag</code></strong> - Memory Protection String Flag</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>A list of address where the string was found on memory</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchCommands"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchCommands</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">cmd</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchCommands">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search for a sequence of commands in all executable modules
|
|
loaded.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>cmd</code></strong> (STRING) - Assembly code to search for (Search using regexp is available.
|
|
See Documentation)</li>
|
|
</ul></dd>
|
|
<dt>Returns: List</dt>
|
|
<dd>List of address of the command found
|
|
<p>NOTE: Since ImmunityDebugger 1.2 , the returning tuple[1]
|
|
value is deprecated, if you need the opcode string of the
|
|
resulted address, you'll have to do a
|
|
immlib.Disasm(tuple[0]).</p></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchCommandsOnModule"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchCommandsOnModule</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">cmd</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchCommandsOnModule">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search for a sequence of commands in given executable module.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>cmd</code></strong> (STRING) - Assembly code to search for (Search using regexp is available.
|
|
See Documentation)</li>
|
|
</ul></dd>
|
|
<dt>Returns: List</dt>
|
|
<dd>List of address of the command found
|
|
<p>NOTE: Since ImmunityDebugger 1.2 , the returning tuple[1]
|
|
value is deprecated, if you need the opcode string of the
|
|
resulted address, you'll have to do a
|
|
immlib.Disasm(tuple[0]).</p></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Run"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Run</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Run">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Run Process untill address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> - Address</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="stepOver"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">stepOver</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.stepOver">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Step-Over Process untill address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - (Optional, Def = 0) Address</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="stepIn"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">stepIn</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.stepIn">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Step-in Process untill address.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - (Optional, Def = 0) Address</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="ignoreSingleStep"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">ignoreSingleStep</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">flag</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string">CONTINUE</code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.ignoreSingleStep">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Ignore Single Step events</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>flag</code></strong> (STRING) - How to continue after a single event is catched flag = DISABLE :
|
|
Disable ignoring flag = FORCE : Conventional Force continue
|
|
method flag = CONTINUE : Transparent continue method
|
|
<p>CAUTION: This method overrides GUI option 'single-step
|
|
break'</p></li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="openProcess"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">openProcess</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">path</span>,
|
|
<span class="sig-arg">mode</span>=<span class="sig-default">0</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.openProcess">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Open process for debugging</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>path</code></strong> (STRING) - Path to file to debug</li>
|
|
<li><strong class="pname"><code>mode</code></strong> (INTEGER) - How to start: -2 SILENT, 0 NORMAL</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="restartProcess"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">restartProcess</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">mode</span>=<span class="sig-default">-1</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.restartProcess">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Restart debuggee</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>mode</code></strong> (INTEGER) - How to restart : -2 SILENT, -1 MSGBOX</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="Attach"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">Attach</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">pid</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.Attach">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Attach to an active process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>pid</code></strong> (INTEGER) - Process Id.</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="goSilent"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">goSilent</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">silent</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.goSilent">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Set/Unset silent debugging flag</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>silent</code></strong> (INTEGER) - 1 to set silent, 0 to unset</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="addHeader"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">addHeader</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">header</span>,
|
|
<span class="sig-arg">color</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string">Black</code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addHeader">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Add a header to given row.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address to add the header into</li>
|
|
<li><strong class="pname"><code>header</code></strong> (STRING) - Header string to add into row</li>
|
|
<li><strong class="pname"><code>color</code></strong> (STRING) - Color of text</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="removeHeader"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">removeHeader</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.removeHeader">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Removes header from row.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address to remove the header from</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="removeLine"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">removeLine</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.removeLine">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Removes header from row.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address to remove the header from</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getHeader"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getHeader</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getHeader">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get Header from row.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address to get the headers from</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="addLine"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">addLine</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">header</span>,
|
|
<span class="sig-arg">color</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string">Black</code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.addLine">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Add a line to cpu window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address to add line</li>
|
|
<li><strong class="pname"><code>header</code></strong> (STRING) - Header string to add into row</li>
|
|
<li><strong class="pname"><code>color</code></strong> (STRING) - Color of text</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="gotoDisasmWindow"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">gotoDisasmWindow</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoDisasmWindow">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>GoTo the Disassembler Window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address to show on the Disassembler Window</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="gotoDumpWindow"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">gotoDumpWindow</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoDumpWindow">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>GoTo Dump Window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address to show on the Dump Window</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="gotoStackWindow"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">gotoStackWindow</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">addr</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.gotoStackWindow">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>GoTo the Stack Window.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>addr</code></strong> (DWORD) - Address to show on the Stack Window</li>
|
|
</ul></dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="inputBox"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">inputBox</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">title</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.inputBox">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Creates Dialog with an Inputbox.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>title</code></strong> (STRING) - Title for the Inputbox dialog</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>String from the inputbox</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="comboBox"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">comboBox</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">title</span>,
|
|
<span class="sig-arg">combolist</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.comboBox">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Creates Dialog with a Combobox.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>title</code></strong> (STRING) - Title for the dialog</li>
|
|
<li><strong class="pname"><code>combolist</code></strong> (LIST) - List of items to add to combo dialog</li>
|
|
</ul></dd>
|
|
<dt>Returns:</dt>
|
|
<dd>Selected item</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getStatus"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getStatus</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getStatus">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get the status of the debugged process.</p>
|
|
<dl class="fields">
|
|
<dt>Returns:</dt>
|
|
<dd>Status of the debugged process</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isStopped"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isStopped</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isStopped">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is the debugged process stopped?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: BOOL</dt>
|
|
<dd>Boolean (True/False)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isEvent"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isEvent</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isEvent">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is the debugged process in an event state?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: BOOL</dt>
|
|
<dd>Boolean (True/False)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isRunning"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isRunning</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isRunning">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is the debugged process running?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: BOOL</dt>
|
|
<dd>Boolean (True/False)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isFinished"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isFinished</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isFinished">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is the debugged process finished?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: BOOL</dt>
|
|
<dd>Boolean (True/False)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="isClosing"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">isClosing</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.isClosing">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Is the debugged process closed?</p>
|
|
<dl class="fields">
|
|
<dt>Returns: BOOL</dt>
|
|
<dd>Boolean (True/False)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="listHooks"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">listHooks</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.listHooks">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>List of active hooks</p>
|
|
<dl class="fields">
|
|
<dt>Returns: LIST</dt>
|
|
<dd>List of active hooks</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="rVirtualAlloc"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">rVirtualAlloc</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">lpAddress</span>,
|
|
<span class="sig-arg">dwSize</span>,
|
|
<span class="sig-arg">flAllocationType</span>,
|
|
<span class="sig-arg">flProtect</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.rVirtualAlloc">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Virtual Allocation on the Debugged Process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>lpAddress</code></strong> (DWORD) - Desired starting Address</li>
|
|
<li><strong class="pname"><code>dwSize</code></strong> (DWORD) - Size of the memory to be allocated (in bytes)</li>
|
|
<li><strong class="pname"><code>flAllocationType</code></strong> (DWORD) - Type of Memory Allocation (MEM_COMMIT, MEM_RESERVED, MEM_RESET,
|
|
etc)</li>
|
|
<li><strong class="pname"><code>flProtect</code></strong> (DWORD) - Flag protection of the memory allocated</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the memory allocated</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="rVirtualFree"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">rVirtualFree</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">lpAddress</span>,
|
|
<span class="sig-arg">dwSize</span>=<span class="sig-default">0</span>,
|
|
<span class="sig-arg">dwFreeType</span>=<span class="sig-default">32768</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.rVirtualFree">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Virtual Free of memory on the Debugged Process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>size</code></strong> (DWORD) - (Optional, Def: 0) Size of the memory to free</li>
|
|
<li><strong class="pname"><code>dwFreeType</code></strong> (DWORD) - (Optional, Def: MEM_RELEASE) Type of Free operation</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>On Successful, returns a non zero value</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="remoteVirtualAlloc"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">remoteVirtualAlloc</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">size</span>=<span class="sig-default">65536</span>,
|
|
<span class="sig-arg">interactive</span>=<span class="sig-default">True</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.remoteVirtualAlloc">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Virtual Allocation on the Debugged Process</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>size</code></strong> (DWORD) - (Optional, Def: 0x10000) Size of the memory to allocated, in
|
|
bytes</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD</dt>
|
|
<dd>Address of the memory allocated</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getOsInformation"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getOsInformation</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getOsInformation">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Get OS information</p>
|
|
<dl class="fields">
|
|
<dt>Returns: TUPLE</dt>
|
|
<dd>List with ( system, release, version)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getThreadId"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getThreadId</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.getThreadId">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Return current debuggee thread id</p>
|
|
<dl class="fields">
|
|
<dt>Returns:</dt>
|
|
<dd>Thread ID</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchFunctionByName"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchFunctionByName</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">name</span>,
|
|
<span class="sig-arg">heuristic</span>=<span class="sig-default">90</span>,
|
|
<span class="sig-arg">module</span>=<span class="sig-default">None</span>,
|
|
<span class="sig-arg">version</span>=<span class="sig-default">None</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchFunctionByName">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Look up into our dictionaries to find a function match.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>name</code></strong> (STRING) - Name of the function to search</li>
|
|
<li><strong class="pname"><code>module</code></strong> (STRING) - name of a module to restrict the search</li>
|
|
<li><strong class="pname"><code>version</code></strong> (STRING) - restrict the search to the given version</li>
|
|
<li><strong class="pname"><code>heuristic</code></strong> (INTEGER) - heuristic threasold to consider a real function match</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD|None</dt>
|
|
<dd>the address of the function or None if we can't find it</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="searchFunctionByHeuristic"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">searchFunctionByHeuristic</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">csvline</span>,
|
|
<span class="sig-arg">heuristic</span>=<span class="sig-default">90</span>,
|
|
<span class="sig-arg">module</span>=<span class="sig-default">None</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.searchFunctionByHeuristic">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Search memory to find a function that fullfit the options.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>csvline</code></strong> (STRING) - A line of a Data CSV file. This's a simple support for copy 'n
|
|
paste from a CSV file.</li>
|
|
<li><strong class="pname"><code>heuristic</code></strong> (INTEGER) - heuristic threasold to consider a real function match</li>
|
|
<li><strong class="pname"><code>module</code></strong> (STRING) - name of a module to restrict the search</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: DWORD|None</dt>
|
|
<dd>the address of the function or None if we can't find it</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="resolvFunctionByAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">resolvFunctionByAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">heuristic</span>=<span class="sig-default">90</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.resolvFunctionByAddress">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Look up into our dictionaries to find a function match.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - Address of the function to search</li>
|
|
<li><strong class="pname"><code>heuristic</code></strong> (INTEGER) - heuristic threasold to consider a real function match</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>a STRING with the function's real name or the given address if
|
|
there's no match</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="makeFunctionHashHeuristic"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">makeFunctionHashHeuristic</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">compressed</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">followCalls</span>=<span class="sig-default">True</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHashHeuristic">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - address of the function to hash</li>
|
|
<li><strong class="pname"><code>compressed</code></strong> (Boolean) - return a compressed base64 representation or the raw data</li>
|
|
<li><strong class="pname"><code>followCalls</code></strong> (Boolean) - follow the first call in a single basic block function</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>the first element is described below and the second is the result
|
|
of this same function but over the first call of a single basic
|
|
block function (if applies), each element is like this: a base64
|
|
representation of the compressed version of each bb hash: [4
|
|
bytes BB(i) start][4 bytes BB(i) 1st edge][4 bytes BB(i) 2nd
|
|
edge] 0 <= i < BB count or the same but like a LIST with
|
|
raw data.</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="makeFunctionHashExact"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">makeFunctionHashExact</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHashExact">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Return a SHA-1 hash of the function, taking the raw bytes as data.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - address of the function to hash</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: STRING</dt>
|
|
<dd>SHA-1 hash of the function</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="makeFunctionHash"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">makeFunctionHash</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>,
|
|
<span class="sig-arg">compressed</span>=<span class="sig-default">False</span>,
|
|
<span class="sig-arg">data</span>=<span class="sig-default"><code class="variable-quote">'</code><code class="variable-string"></code><code class="variable-quote">'</code></span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.makeFunctionHash">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>Return a list with the best BB to use for a search and the heuristic
|
|
hash of the function. This two components are the function hash.</p>
|
|
<dl class="fields">
|
|
<dt>Parameters:</dt>
|
|
<dd><ul class="nomargin-top">
|
|
<li><strong class="pname"><code>address</code></strong> (DWORD) - address of the function to hash</li>
|
|
<li><strong class="pname"><code>compressed</code></strong> (Boolean) - return a compressed base64 representation or the raw data</li>
|
|
<li><strong class="pname"><code>data</code></strong> (STRING|LIST) - Name (or list of names) of the .dat file inside the Data folder,
|
|
where're stored the function patterns. Use an empty string to use
|
|
all the files in the Data folder.</li>
|
|
</ul></dd>
|
|
<dt>Returns: LIST</dt>
|
|
<dd>1st element is the generalized instructions to use with
|
|
searchCommand 2nd element is the heuristic function hash
|
|
(makeFunctionHashHeuristic) 3rd element is an exact hash of the
|
|
function (makeFunctionHashExact)</dd>
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findLoops"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findLoops</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.findLoops">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<pre class="literalblock">
|
|
|
|
This function finds Natural Loops inside a function.
|
|
|
|
Each loop item has the following structure:
|
|
[ start, end, nodes ]
|
|
start: address of node receiving the back edge.
|
|
end: address of node which has the back edge.
|
|
node: list of node's addresses involved in this loop.
|
|
|
|
@type address: DWORD
|
|
@param address: function start address
|
|
|
|
@rtype: LIST
|
|
@return: A list of loops
|
|
|
|
</pre>
|
|
<dl class="fields">
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="sleep_till_stopped"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">sleep_till_stopped</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">timeout</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.immlib-pysrc.html#Debugger.sleep_till_stopped">source code</a></span>
|
|
</td>
|
|
</tr></table>
|
|
|
|
<p>timeout is in seconds. this function will sleep 1 second at a time
|
|
until timeout is reached or the debugger has stopped (probably due to AV)
|
|
returns True if we were stopped before timeout happened</p>
|
|
<dl class="fields">
|
|
</dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<br />
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%%">
|
|
<tr>
|
|
<td align="left" class="footer">
|
|
Generated by Epydoc 3.0.1 on Thu Sep 11 14:06:33 2008
|
|
</td>
|
|
<td align="right" class="footer">
|
|
<a target="mainFrame" href="http://epydoc.sourceforge.net"
|
|
>http://epydoc.sourceforge.net</a>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
<script type="text/javascript">
|
|
<!--
|
|
// Private objects are initially displayed (because if
|
|
// javascript is turned off then we want them to be
|
|
// visible); but by default, we want to hide them. So hide
|
|
// them unless we have a cookie that says to show them.
|
|
checkCookie();
|
|
// -->
|
|
</script>
|
|
</body>
|
|
</html>
|