472 lines
18 KiB
HTML
Executable File
472 lines
18 KiB
HTML
Executable File
<?xml version="1.0" encoding="ascii"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
|
<head>
|
|
<title>Libs.libanalize.Function</title>
|
|
<link rel="stylesheet" href="epydoc.css" type="text/css" />
|
|
<script type="text/javascript" src="epydoc.js"></script>
|
|
</head>
|
|
|
|
<body bgcolor="white" text="black" link="blue" vlink="#204080"
|
|
alink="#204080">
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table width="100%" cellpadding="0" cellspacing="0">
|
|
<tr valign="top">
|
|
<td width="100%">
|
|
<span class="breadcrumbs">
|
|
Package Libs ::
|
|
<a href="Libs.libanalize-module.html">Module libanalize</a> ::
|
|
Class Function
|
|
</span>
|
|
</td>
|
|
<td>
|
|
<table cellpadding="0" cellspacing="0">
|
|
<!-- hide/show private -->
|
|
<tr><td align="right"><span class="options">[<a href="javascript: void(0);" class="privatelink"
|
|
onclick="toggle_private();">hide private</a>]</span></td></tr>
|
|
<tr><td align="right"><span class="options"
|
|
>[<a href="frames.html" target="_top">frames</a
|
|
>] | <a href="Libs.libanalize.Function-class.html"
|
|
target="_top">no frames</a>]</span></td></tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<!-- ==================== CLASS DESCRIPTION ==================== -->
|
|
<h1 class="epydoc">Class Function</h1><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function">source code</a></span><br /><br />
|
|
Class that contains information about a Function<br /><br />
|
|
|
|
<!-- ==================== INSTANCE METHODS ==================== -->
|
|
<a name="section-InstanceMethods"></a>
|
|
<table class="summary" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr bgcolor="#70b0f0" class="table-header">
|
|
<td colspan="2" class="table-header">
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%">
|
|
<tr valign="top">
|
|
<td align="left"><span class="table-header">Instance Methods</span></td>
|
|
<td align="right" valign="top"
|
|
><span class="options">[<a href="#section-InstanceMethods"
|
|
class="privatelink" onclick="toggle_private();"
|
|
>hide private</a>]</span></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type"> </code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#__init__" class="summary-sig-name">__init__</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">imm</span>,
|
|
<span class="summary-sig-arg">start</span>)</span><br />
|
|
Class that contains information about a Function
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type"> </code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#setStart" class="summary-sig-name">setStart</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Change the start of a Function
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type">DWORD</code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#getStart" class="summary-sig-name">getStart</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the Address of the Function
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type">STRING</code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#getName" class="summary-sig-name">getName</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the name of the Function
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type"> </code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#getFunctionEnd" class="summary-sig-name">getFunctionEnd</a>(<span class="summary-sig-arg">self</span>)</span>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type">LIST of BasicBlock</code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#getEnd" class="summary-sig-name">getEnd</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Get the end of the Function (Understanding end as the Basic Block
|
|
with a ret inside)
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type"> </code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#findRetValue" class="summary-sig-name">findRetValue</a>(<span class="summary-sig-arg">self</span>)</span><br />
|
|
Find all the possible ret values on a function (Beta) Note: This
|
|
function only check the modifiers on a Ret BasicBlock, so the result
|
|
might not be precise.
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type">BasicBlock object</code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#hasAddress" class="summary-sig-name">hasAddress</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span><br />
|
|
Check if the given address is part of the Function
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type">LIST of BasicBlock objects</code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#getBasicBlocks" class="summary-sig-name">getBasicBlocks</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">force</span>=<span class="summary-sig-default">False</span>)</span><br />
|
|
Get basic block from the current Function
|
|
</td>
|
|
</tr>
|
|
<tr class="private">
|
|
<td width="15%" align="right" valign="top" class="summary">
|
|
<code class="summary-type"> </code>
|
|
</td><td class="summary">
|
|
<span class="summary-sig"><a href="Libs.libanalize.Function-class.html#_getBB" class="summary-sig-name">_getBB</a>(<span class="summary-sig-arg">self</span>,
|
|
<span class="summary-sig-arg">address</span>)</span>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
<br />
|
|
<!-- ==================== METHOD DETAILS ==================== -->
|
|
<a name="section-MethodDetails"></a>
|
|
<table class="summary" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr bgcolor="#70b0f0" class="table-header">
|
|
<td colspan="2" class="table-header">
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%">
|
|
<tr valign="top">
|
|
<td align="left"><span class="table-header">Method Details</span></td>
|
|
<td align="right" valign="top"
|
|
><span class="options">[<a href="#section-MethodDetails"
|
|
class="privatelink" onclick="toggle_private();"
|
|
>hide private</a>]</span></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<a name="__init__"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">__init__</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">imm</span>,
|
|
<span class="sig-arg">start</span>)</span>
|
|
<br /><em class="fname">(Constructor)</em>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.__init__">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Class that contains information about a Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Parameters:</dt></dl>
|
|
<ul class="nomargin">
|
|
<li><strong class="pname"><code>imm</code></strong> (<code>Debbuger OBJECT</code>) - Debbuger</li>
|
|
<li><strong class="pname"><code>start</code></strong> (<code>DWORD</code>) - Address of the begging of the function</li>
|
|
</ul>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="setStart"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">setStart</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.setStart">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Change the start of a Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Parameters:</dt></dl>
|
|
<ul class="nomargin">
|
|
<li><strong class="pname"><code>address</code></strong> (<code>DWORD</code>) - New address of the function</li>
|
|
</ul>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getStart"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getStart</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.getStart">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Get the Address of the Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Returns: <code>DWORD</code></dt>
|
|
<dd>Address of the function</dd></dl>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getName"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getName</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.getName">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Get the name of the Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Returns: <code>STRING</code></dt>
|
|
<dd>Name of the Function</dd></dl>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getFunctionEnd"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getFunctionEnd</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.getFunctionEnd">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
None
|
|
<dl><dt></dt><dd>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getEnd"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getEnd</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.getEnd">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Get the end of the Function (Understanding end as the Basic Block with
|
|
a ret inside)
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Returns: <code>LIST of BasicBlock</code></dt>
|
|
<dd>A list of all the basic block that end the function</dd></dl>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="findRetValue"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">findRetValue</span>(<span class="sig-arg">self</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.findRetValue">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Find all the possible ret values on a function (Beta) Note: This
|
|
function only check the modifiers on a Ret BasicBlock, so the result
|
|
might not be precise.
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Parameters:</dt></dl>
|
|
<ul class="nomargin">
|
|
<li><strong class="pname"><code>start</code></strong> (<code>LIST OF OPCODE</code>) - Return all the possible modifiers of EAX</li>
|
|
</ul>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="hasAddress"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">hasAddress</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.hasAddress">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Check if the given address is part of the Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Parameters:</dt></dl>
|
|
<ul class="nomargin">
|
|
<li><strong class="pname"><code>force</code></strong> - Address of the instruction to check</li>
|
|
</ul>
|
|
<dl><dt>Returns: <code>BasicBlock object</code></dt>
|
|
<dd>If true, returns the corresponding Basic block else returns
|
|
None</dd></dl>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="getBasicBlocks"></a>
|
|
<div>
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">getBasicBlocks</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">force</span>=<span class="sig-default">False</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function.getBasicBlocks">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
Get basic block from the current Function
|
|
<dl><dt></dt><dd>
|
|
<dl><dt>Parameters:</dt></dl>
|
|
<ul class="nomargin">
|
|
<li><strong class="pname"><code>force</code></strong> (<code>BOOLEAN</code>) - (Optional, Def: False) Force to Function to reparse the basic
|
|
blocks</li>
|
|
</ul>
|
|
<dl><dt>Returns: <code>LIST of BasicBlock objects</code></dt>
|
|
<dd><p>Basic blocks of the current function</p>
|
|
TODO: Recursion here is bad - we need to make this an
|
|
iterative process with a work queue</dd></dl>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<a name="_getBB"></a>
|
|
<div class="private">
|
|
<table class="details" border="1" cellpadding="3"
|
|
cellspacing="0" width="100%" bgcolor="white">
|
|
<tr><td>
|
|
<table width="100%" cellpadding="0" cellspacing="0" border="0">
|
|
<tr valign="top"><td>
|
|
<h3 class="epydoc"><span class="sig"><span class="sig-name">_getBB</span>(<span class="sig-arg">self</span>,
|
|
<span class="sig-arg">address</span>)</span>
|
|
</h3>
|
|
</td><td align="right" valign="top"
|
|
><span class="codelink"><a href="Libs.libanalize-pysrc.html#Function._getBB">source code</a></span> </span
|
|
></td>
|
|
</table>
|
|
|
|
None
|
|
<dl><dt></dt><dd>
|
|
</dd></dl>
|
|
</td></tr></table>
|
|
</div>
|
|
<br />
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%%">
|
|
<tr>
|
|
<td align="left" class="footer">Generated by Epydoc
|
|
3.0alpha3 on Thu May 29 13:03:08 2008</td>
|
|
<td align="right" class="footer">
|
|
<a href="http://epydoc.sourceforge.net">http://epydoc.sourceforge.net</a>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
<script type="text/javascript">
|
|
<!--
|
|
// Private objects are initially displayed (because if
|
|
// javascript is turned off then we want them to be
|
|
// visible); but by default, we want to hide them. So hide
|
|
// them unless we have a cookie that says to show them.
|
|
checkCookie()
|
|
// -->
|
|
</script>
|
|
|
|
</body>
|
|
</html>
|