1815 lines
192 KiB
HTML
Executable File
1815 lines
192 KiB
HTML
Executable File
<?xml version="1.0" encoding="ascii"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
|
<head>
|
|
<title>Libs.libhook</title>
|
|
<link rel="stylesheet" href="epydoc.css" type="text/css" />
|
|
<script type="text/javascript" src="epydoc.js"></script>
|
|
</head>
|
|
|
|
<body bgcolor="white" text="black" link="blue" vlink="#204080"
|
|
alink="#204080">
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table width="100%" cellpadding="0" cellspacing="0">
|
|
<tr valign="top">
|
|
<td width="100%">
|
|
<span class="breadcrumbs">
|
|
Package Libs ::
|
|
Module libhook
|
|
</span>
|
|
</td>
|
|
<td>
|
|
<table cellpadding="0" cellspacing="0">
|
|
<!-- hide/show private -->
|
|
<tr><td align="right"><span class="options">[<a href="javascript:void(0);" class="privatelink"
|
|
onclick="toggle_private();">hide private</a>]</span></td></tr>
|
|
<tr><td align="right"><span class="options"
|
|
>[<a href="frames.html" target="_top">frames</a
|
|
>] | <a href="Libs.libhook-pysrc.html"
|
|
target="_top">no frames</a>]</span></td></tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<h1 class="epydoc">Source Code for <a href="Libs.libhook-module.html">Module Libs.libhook</a></h1>
|
|
<pre class="py-src">
|
|
<a name="L1"></a><tt class="py-lineno"> 1</tt> <tt class="py-line"><tt class="py-comment">#!/usr/bin/env python</tt> </tt>
|
|
<a name="L2"></a><tt class="py-lineno"> 2</tt> <tt class="py-line"><tt class="py-comment"></tt> </tt>
|
|
<a name="L3"></a><tt class="py-lineno"> 3</tt> <tt class="py-line"><tt class="py-docstring">"""</tt> </tt>
|
|
<a name="L4"></a><tt class="py-lineno"> 4</tt> <tt class="py-line"><tt class="py-docstring">(c) Immunity, Inc. 2004-2007</tt> </tt>
|
|
<a name="L5"></a><tt class="py-lineno"> 5</tt> <tt class="py-line"><tt class="py-docstring"></tt> </tt>
|
|
<a name="L6"></a><tt class="py-lineno"> 6</tt> <tt class="py-line"><tt class="py-docstring"></tt> </tt>
|
|
<a name="L7"></a><tt class="py-lineno"> 7</tt> <tt class="py-line"><tt class="py-docstring">U{Immunity Inc.<http://www.immunityinc.com>}</tt> </tt>
|
|
<a name="L8"></a><tt class="py-lineno"> 8</tt> <tt class="py-line"><tt class="py-docstring"></tt> </tt>
|
|
<a name="L9"></a><tt class="py-lineno"> 9</tt> <tt class="py-line"><tt class="py-docstring"></tt> </tt>
|
|
<a name="L10"></a><tt class="py-lineno"> 10</tt> <tt class="py-line"><tt class="py-docstring">"""</tt> </tt>
|
|
<a name="L11"></a><tt class="py-lineno"> 11</tt> <tt class="py-line"> </tt>
|
|
<a name="L12"></a><tt class="py-lineno"> 12</tt> <tt class="py-line"><tt id="link-0" class="py-name" targets="Variable Libs.immlib.__VERSION__=Libs.immlib-module.html#__VERSION__,Variable Libs.immutils.__VERSION__=Libs.immutils-module.html#__VERSION__,Variable Libs.immvcglib.__VERSION__=Libs.immvcglib-module.html#__VERSION__,Variable Libs.internals.__VERSION__=Libs.internals-module.html#__VERSION__,Variable Libs.libanalyze.__VERSION__=Libs.libanalyze-module.html#__VERSION__,Variable Libs.libdatatype.__VERSION__=Libs.libdatatype-module.html#__VERSION__,Variable Libs.libevent.__VERSION__=Libs.libevent-module.html#__VERSION__,Variable Libs.libheap.__VERSION__=Libs.libheap-module.html#__VERSION__,Variable Libs.libhook.__VERSION__=Libs.libhook-module.html#__VERSION__,Variable Libs.librecognition.__VERSION__=Libs.librecognition-module.html#__VERSION__,Variable Libs.pelib.__VERSION__=Libs.pelib-module.html#__VERSION__"><a title="Libs.immlib.__VERSION__
|
|
Libs.immutils.__VERSION__
|
|
Libs.immvcglib.__VERSION__
|
|
Libs.internals.__VERSION__
|
|
Libs.libanalyze.__VERSION__
|
|
Libs.libdatatype.__VERSION__
|
|
Libs.libevent.__VERSION__
|
|
Libs.libheap.__VERSION__
|
|
Libs.libhook.__VERSION__
|
|
Libs.librecognition.__VERSION__
|
|
Libs.pelib.__VERSION__" class="py-name" href="#" onclick="return doclink('link-0', '__VERSION__', 'link-0');">__VERSION__</a></tt> <tt class="py-op">=</tt> <tt class="py-string">'1.1'</tt> </tt>
|
|
<a name="L13"></a><tt class="py-lineno"> 13</tt> <tt class="py-line"> </tt>
|
|
<a name="L14"></a><tt class="py-lineno"> 14</tt> <tt class="py-line"><tt class="py-keyword">import</tt> <tt class="py-name">struct</tt> </tt>
|
|
<a name="L15"></a><tt class="py-lineno"> 15</tt> <tt class="py-line"><tt class="py-keyword">import</tt> <tt class="py-name">debugger</tt> </tt>
|
|
<a name="L16"></a><tt class="py-lineno"> 16</tt> <tt class="py-line"><tt class="py-keyword">import</tt> <tt class="py-name">pickle</tt> </tt>
|
|
<a name="L17"></a><tt class="py-lineno"> 17</tt> <tt class="py-line"> </tt>
|
|
<a name="L18"></a><tt class="py-lineno"> 18</tt> <tt class="py-line"><tt id="link-1" class="py-name" targets="Variable Libs.immlib.FS_UNHOOK=Libs.immlib-module.html#FS_UNHOOK,Variable Libs.libhook.FS_UNHOOK=Libs.libhook-module.html#FS_UNHOOK"><a title="Libs.immlib.FS_UNHOOK
|
|
Libs.libhook.FS_UNHOOK" class="py-name" href="#" onclick="return doclink('link-1', 'FS_UNHOOK', 'link-1');">FS_UNHOOK</a></tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L19"></a><tt class="py-lineno"> 19</tt> <tt class="py-line"><tt id="link-2" class="py-name" targets="Variable Libs.immlib.FS_HOOK=Libs.immlib-module.html#FS_HOOK,Variable Libs.libhook.FS_HOOK=Libs.libhook-module.html#FS_HOOK"><a title="Libs.immlib.FS_HOOK
|
|
Libs.libhook.FS_HOOK" class="py-name" href="#" onclick="return doclink('link-2', 'FS_HOOK', 'link-2');">FS_HOOK</a></tt> <tt class="py-op">=</tt> <tt class="py-number">1</tt> <tt class="py-comment"># hooked and running</tt> </tt>
|
|
<a name="L20"></a><tt class="py-lineno"> 20</tt> <tt class="py-line"><tt id="link-3" class="py-name" targets="Variable Libs.immlib.FS_PAUSE=Libs.immlib-module.html#FS_PAUSE,Variable Libs.libhook.FS_PAUSE=Libs.libhook-module.html#FS_PAUSE"><a title="Libs.immlib.FS_PAUSE
|
|
Libs.libhook.FS_PAUSE" class="py-name" href="#" onclick="return doclink('link-3', 'FS_PAUSE', 'link-3');">FS_PAUSE</a></tt> <tt class="py-op">=</tt> <tt class="py-number">2</tt> </tt>
|
|
<a name="L21"></a><tt class="py-lineno"> 21</tt> <tt class="py-line"> </tt>
|
|
<a name="L22"></a><tt class="py-lineno"> 22</tt> <tt class="py-line"><tt id="link-4" class="py-name" targets="Variable Libs.immlib.HookTypes=Libs.immlib-module.html#HookTypes,Variable Libs.libhook.HookTypes=Libs.libhook-module.html#HookTypes"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-4', 'HookTypes', 'link-4');">HookTypes</a></tt> <tt class="py-op">=</tt> <tt class="py-op">{</tt><tt class="py-string">"ORDINARY_BP_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3900</tt><tt class="py-op">,</tt> <tt class="py-string">"LOG_BP_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3909</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L23"></a><tt class="py-lineno"> 23</tt> <tt class="py-line"> <tt class="py-string">"EVERY_EXCEPTION_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3901</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L24"></a><tt class="py-lineno"> 24</tt> <tt class="py-line"> <tt class="py-string">"POST_ANALYSIS_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3902</tt><tt class="py-op">,</tt> <tt class="py-string">"ACCESS_VIOLATION_HOOK"</tt><tt class="py-op">:</tt> <tt class="py-number">3910</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L25"></a><tt class="py-lineno"> 25</tt> <tt class="py-line"> <tt class="py-string">"LOAD_DLL_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3903</tt><tt class="py-op">,</tt> <tt class="py-string">"UNLOAD_DLL_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3904</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L26"></a><tt class="py-lineno"> 26</tt> <tt class="py-line"> <tt class="py-string">"CREATE_THREAD_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3905</tt><tt class="py-op">,</tt> <tt class="py-string">"EXIT_THREAD_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3906</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L27"></a><tt class="py-lineno"> 27</tt> <tt class="py-line"> <tt class="py-string">"CREATE_PROCESS_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3907</tt><tt class="py-op">,</tt> <tt class="py-string">"EXIT_PROCESS_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3908</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L28"></a><tt class="py-lineno"> 28</tt> <tt class="py-line"> <tt class="py-string">"PRE_BP_HOOK"</tt> <tt class="py-op">:</tt> <tt class="py-number">3911</tt><tt class="py-op">}</tt> </tt>
|
|
<a name="L29"></a><tt class="py-lineno"> 29</tt> <tt class="py-line"> </tt>
|
|
<a name="L30"></a><tt class="py-lineno"> 30</tt> <tt class="py-line"><tt id="link-5" class="py-name" targets="Variable Libs.immlib.HOOK_REG=Libs.immlib-module.html#HOOK_REG,Variable Libs.libhook.HOOK_REG=Libs.libhook-module.html#HOOK_REG"><a title="Libs.immlib.HOOK_REG
|
|
Libs.libhook.HOOK_REG" class="py-name" href="#" onclick="return doclink('link-5', 'HOOK_REG', 'link-5');">HOOK_REG</a></tt> <tt class="py-op">=</tt> <tt class="py-op">{</tt><tt class="py-string">'ESI'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+4 ]'</tt><tt class="py-op">,</tt> <tt class="py-string">'EDI'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP]'</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L31"></a><tt class="py-lineno"> 31</tt> <tt class="py-line"> <tt class="py-string">'EBX'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0x10]'</tt><tt class="py-op">,</tt> <tt class="py-string">'EAX'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0x1C]'</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L32"></a><tt class="py-lineno"> 32</tt> <tt class="py-line"> <tt class="py-string">'ECX'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0x18]'</tt><tt class="py-op">,</tt> <tt class="py-string">'EDX'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0x14]'</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L33"></a><tt class="py-lineno"> 33</tt> <tt class="py-line"> <tt class="py-string">'EBP'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0x8 ]'</tt><tt class="py-op">,</tt> <tt class="py-string">'ESP'</tt><tt class="py-op">:</tt> <tt class="py-string">'[ESP+0xC ]'</tt><tt class="py-op">}</tt> </tt>
|
|
<a name="L34"></a><tt class="py-lineno"> 34</tt> <tt class="py-line"> </tt>
|
|
<a name="L35"></a><tt class="py-lineno"> 35</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook"></a><div id="FastLogHook-def"><a name="L36"></a><tt class="py-lineno"> 36</tt> <a class="py-toggle" href="#" id="FastLogHook-toggle" onclick="return toggle('FastLogHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html">FastLogHook</a><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="FastLogHook-expanded"><a name="FastLogHook.__init__"></a><div id="FastLogHook.__init__-def"><a name="L37"></a><tt class="py-lineno"> 37</tt> <a class="py-toggle" href="#" id="FastLogHook.__init__-toggle" onclick="return toggle('FastLogHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">imm</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.__init__-expanded"><a name="L38"></a><tt class="py-lineno"> 38</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt> <tt class="py-op">=</tt> <tt class="py-name">None</tt> </tt>
|
|
<a name="L39"></a><tt class="py-lineno"> 39</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L40"></a><tt class="py-lineno"> 40</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">list</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L41"></a><tt class="py-lineno"> 41</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L42"></a><tt class="py-lineno"> 42</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">hooked</tt> <tt class="py-op">=</tt> <tt class="py-name">False</tt> </tt>
|
|
<a name="L43"></a><tt class="py-lineno"> 43</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> <tt class="py-op">=</tt> <tt class="py-name">None</tt> </tt>
|
|
<a name="L44"></a><tt class="py-lineno"> 44</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt> <tt class="py-op">=</tt> <tt class="py-name">imm</tt> </tt>
|
|
<a name="L45"></a><tt class="py-lineno"> 45</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">restore</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L46"></a><tt class="py-lineno"> 46</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">=</tt> <tt id="link-6" class="py-name"><a title="Libs.immlib.FS_UNHOOK
|
|
Libs.libhook.FS_UNHOOK" class="py-name" href="#" onclick="return doclink('link-6', 'FS_UNHOOK', 'link-1');">FS_UNHOOK</a></tt> </tt>
|
|
<a name="L47"></a><tt class="py-lineno"> 47</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">AllocSize</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L48"></a><tt class="py-lineno"> 48</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">memAddress</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
</div><a name="L49"></a><tt class="py-lineno"> 49</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.isHooked"></a><div id="FastLogHook.isHooked-def"><a name="L50"></a><tt class="py-lineno"> 50</tt> <a class="py-toggle" href="#" id="FastLogHook.isHooked-toggle" onclick="return toggle('FastLogHook.isHooked');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#isHooked">isHooked</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.isHooked-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.isHooked-expanded"><a name="L51"></a><tt class="py-lineno"> 51</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">==</tt> <tt id="link-7" class="py-name"><a title="Libs.immlib.FS_HOOK
|
|
Libs.libhook.FS_HOOK" class="py-name" href="#" onclick="return doclink('link-7', 'FS_HOOK', 'link-2');">FS_HOOK</a></tt> </tt>
|
|
</div><a name="L52"></a><tt class="py-lineno"> 52</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.isPause"></a><div id="FastLogHook.isPause-def"><a name="L53"></a><tt class="py-lineno"> 53</tt> <a class="py-toggle" href="#" id="FastLogHook.isPause-toggle" onclick="return toggle('FastLogHook.isPause');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#isPause">isPause</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.isPause-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.isPause-expanded"><a name="L54"></a><tt class="py-lineno"> 54</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">==</tt> <tt id="link-8" class="py-name"><a title="Libs.immlib.FS_PAUSE
|
|
Libs.libhook.FS_PAUSE" class="py-name" href="#" onclick="return doclink('link-8', 'FS_PAUSE', 'link-3');">FS_PAUSE</a></tt> </tt>
|
|
</div><a name="L55"></a><tt class="py-lineno"> 55</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.Pause"></a><div id="FastLogHook.Pause-def"><a name="L56"></a><tt class="py-lineno"> 56</tt> <a class="py-toggle" href="#" id="FastLogHook.Pause-toggle" onclick="return toggle('FastLogHook.Pause');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#Pause">Pause</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.Pause-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.Pause-expanded"><a name="L57"></a><tt class="py-lineno"> 57</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-keyword">not</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-9" class="py-name" targets="Method Libs.libhook.FastLogHook.isHooked()=Libs.libhook.FastLogHook-class.html#isHooked"><a title="Libs.libhook.FastLogHook.isHooked" class="py-name" href="#" onclick="return doclink('link-9', 'isHooked', 'link-9');">isHooked</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L58"></a><tt class="py-lineno"> 58</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">False</tt> </tt>
|
|
<a name="L59"></a><tt class="py-lineno"> 59</tt> <tt class="py-line"> </tt>
|
|
<a name="L60"></a><tt class="py-lineno"> 60</tt> <tt class="py-line"> <tt class="py-comment"># Removing Hook on every function</tt> </tt>
|
|
<a name="L61"></a><tt class="py-lineno"> 61</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">for</tt> <tt class="py-name">ndx</tt> <tt class="py-keyword">in</tt> <tt class="py-name">range</tt><tt class="py-op">(</tt><tt class="py-number">0</tt><tt class="py-op">,</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L62"></a><tt class="py-lineno"> 62</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-10" class="py-name" targets="Method Libs.immlib.Debugger.writeMemory()=Libs.immlib.Debugger-class.html#writeMemory"><a title="Libs.immlib.Debugger.writeMemory" class="py-name" href="#" onclick="return doclink('link-10', 'writeMemory', 'link-10');">writeMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">restore</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L63"></a><tt class="py-lineno"> 63</tt> <tt class="py-line"> </tt>
|
|
<a name="L64"></a><tt class="py-lineno"> 64</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">=</tt> <tt id="link-11" class="py-name"><a title="Libs.immlib.FS_PAUSE
|
|
Libs.libhook.FS_PAUSE" class="py-name" href="#" onclick="return doclink('link-11', 'FS_PAUSE', 'link-3');">FS_PAUSE</a></tt> </tt>
|
|
<a name="L65"></a><tt class="py-lineno"> 65</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">True</tt> </tt>
|
|
</div><a name="L66"></a><tt class="py-lineno"> 66</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.Continue"></a><div id="FastLogHook.Continue-def"><a name="L67"></a><tt class="py-lineno"> 67</tt> <a class="py-toggle" href="#" id="FastLogHook.Continue-toggle" onclick="return toggle('FastLogHook.Continue');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#Continue">Continue</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.Continue-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.Continue-expanded"><a name="L68"></a><tt class="py-lineno"> 68</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-keyword">not</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-12" class="py-name" targets="Method Libs.libhook.FastLogHook.isPause()=Libs.libhook.FastLogHook-class.html#isPause"><a title="Libs.libhook.FastLogHook.isPause" class="py-name" href="#" onclick="return doclink('link-12', 'isPause', 'link-12');">isPause</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L69"></a><tt class="py-lineno"> 69</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">False</tt> </tt>
|
|
<a name="L70"></a><tt class="py-lineno"> 70</tt> <tt class="py-line"> </tt>
|
|
<a name="L71"></a><tt class="py-lineno"> 71</tt> <tt class="py-line"> <tt class="py-keyword">for</tt> <tt class="py-name">ndx</tt> <tt class="py-keyword">in</tt> <tt class="py-name">range</tt><tt class="py-op">(</tt><tt class="py-number">0</tt><tt class="py-op">,</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L72"></a><tt class="py-lineno"> 72</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-13" class="py-name"><a title="Libs.immlib.Debugger.writeMemory" class="py-name" href="#" onclick="return doclink('link-13', 'writeMemory', 'link-10');">writeMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">restore</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">1</tt><tt class="py-op">]</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L73"></a><tt class="py-lineno"> 73</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">=</tt> <tt id="link-14" class="py-name"><a title="Libs.immlib.FS_HOOK
|
|
Libs.libhook.FS_HOOK" class="py-name" href="#" onclick="return doclink('link-14', 'FS_HOOK', 'link-2');">FS_HOOK</a></tt> </tt>
|
|
<a name="L74"></a><tt class="py-lineno"> 74</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">True</tt> </tt>
|
|
</div><a name="L75"></a><tt class="py-lineno"> 75</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.unHook"></a><div id="FastLogHook.unHook-def"><a name="L76"></a><tt class="py-lineno"> 76</tt> <a class="py-toggle" href="#" id="FastLogHook.unHook-toggle" onclick="return toggle('FastLogHook.unHook');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#unHook">unHook</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.unHook-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.unHook-expanded"><a name="L77"></a><tt class="py-lineno"> 77</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-keyword">not</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-15" class="py-name"><a title="Libs.libhook.FastLogHook.isHooked" class="py-name" href="#" onclick="return doclink('link-15', 'isHooked', 'link-9');">isHooked</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L78"></a><tt class="py-lineno"> 78</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">False</tt> </tt>
|
|
<a name="L79"></a><tt class="py-lineno"> 79</tt> <tt class="py-line"> </tt>
|
|
<a name="L80"></a><tt class="py-lineno"> 80</tt> <tt class="py-line"> <tt class="py-comment"># Removing Hook on every function</tt> </tt>
|
|
<a name="L81"></a><tt class="py-lineno"> 81</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">for</tt> <tt class="py-name">ndx</tt> <tt class="py-keyword">in</tt> <tt class="py-name">range</tt><tt class="py-op">(</tt><tt class="py-number">0</tt><tt class="py-op">,</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L82"></a><tt class="py-lineno"> 82</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-16" class="py-name"><a title="Libs.immlib.Debugger.writeMemory" class="py-name" href="#" onclick="return doclink('link-16', 'writeMemory', 'link-10');">writeMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">restore</tt><tt class="py-op">[</tt><tt class="py-name">ndx</tt><tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> <tt class="py-op">)</tt> <tt class="py-comment"># Cleaning up Hook Memory</tt> </tt>
|
|
<a name="L83"></a><tt class="py-lineno"> 83</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-17" class="py-name" targets="Method Libs.immlib.Debugger.rVirtualFree()=Libs.immlib.Debugger-class.html#rVirtualFree"><a title="Libs.immlib.Debugger.rVirtualFree" class="py-name" href="#" onclick="return doclink('link-17', 'rVirtualFree', 'link-17');">rVirtualFree</a></tt><tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L84"></a><tt class="py-lineno"> 84</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">=</tt> <tt id="link-18" class="py-name"><a title="Libs.immlib.FS_UNHOOK
|
|
Libs.libhook.FS_UNHOOK" class="py-name" href="#" onclick="return doclink('link-18', 'FS_UNHOOK', 'link-1');">FS_UNHOOK</a></tt> </tt>
|
|
<a name="L85"></a><tt class="py-lineno"> 85</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">True</tt> </tt>
|
|
</div><a name="L86"></a><tt class="py-lineno"> 86</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.setRestore"></a><div id="FastLogHook.setRestore-def"><a name="L87"></a><tt class="py-lineno"> 87</tt> <a class="py-toggle" href="#" id="FastLogHook.setRestore-toggle" onclick="return toggle('FastLogHook.setRestore');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#setRestore">setRestore</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">restore</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><a name="L88"></a><tt class="py-lineno"> 88</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">restore</tt> <tt class="py-op">=</tt> <tt class="py-name">restore</tt> </tt>
|
|
</div><a name="L89"></a><tt class="py-lineno"> 89</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.Hook"></a><div id="FastLogHook.Hook-def"><a name="L90"></a><tt class="py-lineno"> 90</tt> <a class="py-toggle" href="#" id="FastLogHook.Hook-toggle" onclick="return toggle('FastLogHook.Hook');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#Hook">Hook</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.Hook-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.Hook-expanded"><a name="L91"></a><tt class="py-lineno"> 91</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-19" class="py-name" targets="Method Libs.immlib.Debugger.addFastLogHook()=Libs.immlib.Debugger-class.html#addFastLogHook,Method Libs.libhook.FastLogHook.addFastLogHook()=Libs.libhook.FastLogHook-class.html#addFastLogHook"><a title="Libs.immlib.Debugger.addFastLogHook
|
|
Libs.libhook.FastLogHook.addFastLogHook" class="py-name" href="#" onclick="return doclink('link-19', 'addFastLogHook', 'link-19');">addFastLogHook</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L92"></a><tt class="py-lineno"> 92</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">status</tt> <tt class="py-op">=</tt> <tt id="link-20" class="py-name"><a title="Libs.immlib.FS_HOOK
|
|
Libs.libhook.FS_HOOK" class="py-name" href="#" onclick="return doclink('link-20', 'FS_HOOK', 'link-2');">FS_HOOK</a></tt> </tt>
|
|
<a name="L93"></a><tt class="py-lineno"> 93</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">True</tt> </tt>
|
|
</div><a name="L94"></a><tt class="py-lineno"> 94</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.setMem"></a><div id="FastLogHook.setMem-def"><a name="L95"></a><tt class="py-lineno"> 95</tt> <a class="py-toggle" href="#" id="FastLogHook.setMem-toggle" onclick="return toggle('FastLogHook.setMem');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#setMem">setMem</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">mem</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.setMem-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.setMem-expanded"><a name="L96"></a><tt class="py-lineno"> 96</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> <tt class="py-op">=</tt> <tt class="py-name">mem</tt> </tt>
|
|
</div><a name="L97"></a><tt class="py-lineno"> 97</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.logFunction"></a><div id="FastLogHook.logFunction-def"><a name="L98"></a><tt class="py-lineno"> 98</tt> <a class="py-toggle" href="#" id="FastLogHook.logFunction-toggle" onclick="return toggle('FastLogHook.logFunction');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#logFunction">logFunction</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">address</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.logFunction-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.logFunction-expanded"><a name="L99"></a><tt class="py-lineno"> 99</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L100"></a><tt class="py-lineno">100</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">.</tt><tt id="link-21" class="py-name" targets="Method Libs.libheap.PLook.append()=Libs.libheap.PLook-class.html#append"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-21', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L101"></a><tt class="py-lineno">101</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L102"></a><tt class="py-lineno">102</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt> <tt class="py-op">=</tt> <tt class="py-name">address</tt> </tt>
|
|
</div><a name="L103"></a><tt class="py-lineno">103</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.logRegister"></a><div id="FastLogHook.logRegister-def"><a name="L104"></a><tt class="py-lineno">104</tt> <a class="py-toggle" href="#" id="FastLogHook.logRegister-toggle" onclick="return toggle('FastLogHook.logRegister');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#logRegister">logRegister</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">REG</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.logRegister-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.logRegister-expanded"><a name="L105"></a><tt class="py-lineno">105</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt><tt class="py-op">.</tt><tt id="link-22" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-22', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt><tt class="py-name">REG</tt><tt class="py-op">,</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
</div><a name="L106"></a><tt class="py-lineno">106</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.logDirectMemory"></a><div id="FastLogHook.logDirectMemory-def"><a name="L107"></a><tt class="py-lineno">107</tt> <a class="py-toggle" href="#" id="FastLogHook.logDirectMemory-toggle" onclick="return toggle('FastLogHook.logDirectMemory');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#logDirectMemory">logDirectMemory</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">address</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.logDirectMemory-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.logDirectMemory-expanded"><a name="L108"></a><tt class="py-lineno">108</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt><tt class="py-op">.</tt><tt id="link-23" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-23', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt><tt class="py-name">address</tt><tt class="py-op">,</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
</div><a name="L109"></a><tt class="py-lineno">109</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.logBaseDisplacement"></a><div id="FastLogHook.logBaseDisplacement-def"><a name="L110"></a><tt class="py-lineno">110</tt> <a class="py-toggle" href="#" id="FastLogHook.logBaseDisplacement-toggle" onclick="return toggle('FastLogHook.logBaseDisplacement');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#logBaseDisplacement">logBaseDisplacement</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">REG</tt><tt class="py-op">,</tt> <tt class="py-param">offset</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.logBaseDisplacement-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.logBaseDisplacement-expanded"><a name="L111"></a><tt class="py-lineno">111</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt><tt class="py-op">.</tt><tt id="link-24" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-24', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt> <tt class="py-name">REG</tt><tt class="py-op">,</tt> <tt class="py-name">offset</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
</div><a name="L112"></a><tt class="py-lineno">112</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.getAllUniqueFunctions"></a><div id="FastLogHook.getAllUniqueFunctions-def"><a name="L113"></a><tt class="py-lineno">113</tt> <a class="py-toggle" href="#" id="FastLogHook.getAllUniqueFunctions-toggle" onclick="return toggle('FastLogHook.getAllUniqueFunctions');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#getAllUniqueFunctions">getAllUniqueFunctions</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.getAllUniqueFunctions-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.getAllUniqueFunctions-expanded"><a name="L114"></a><tt class="py-lineno">114</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L115"></a><tt class="py-lineno">115</tt> <tt class="py-line"> <tt class="py-name">addr</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> </tt>
|
|
<a name="L116"></a><tt class="py-lineno">116</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">_fn</tt> <tt class="py-op">=</tt> <tt class="py-op">{</tt><tt class="py-op">}</tt> </tt>
|
|
<a name="L117"></a><tt class="py-lineno">117</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">ret</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L118"></a><tt class="py-lineno">118</tt> <tt class="py-line"> </tt>
|
|
<a name="L119"></a><tt class="py-lineno">119</tt> <tt class="py-line"> <tt class="py-keyword">while</tt> <tt class="py-name">ndx</tt> <tt class="py-op">!=</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-op">:</tt> </tt>
|
|
<a name="L120"></a><tt class="py-lineno">120</tt> <tt class="py-line"> <tt class="py-name">mem</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-25" class="py-name" targets="Method Libs.immlib.Debugger.readMemory()=Libs.immlib.Debugger-class.html#readMemory"><a title="Libs.immlib.Debugger.readMemory" class="py-name" href="#" onclick="return doclink('link-25', 'readMemory', 'link-25');">readMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">addr</tt><tt class="py-op">,</tt> <tt class="py-number">0x1000</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L121"></a><tt class="py-lineno">121</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-26" class="py-name" targets="Method Libs.libhook.FastLogHook._parseUniqueFn()=Libs.libhook.FastLogHook-class.html#_parseUniqueFn"><a title="Libs.libhook.FastLogHook._parseUniqueFn" class="py-name" href="#" onclick="return doclink('link-26', '_parseUniqueFn', 'link-26');">_parseUniqueFn</a></tt><tt class="py-op">(</tt> <tt class="py-name">mem</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L122"></a><tt class="py-lineno">122</tt> <tt class="py-line"> <tt class="py-name">addr</tt> <tt class="py-op">+=</tt> <tt class="py-name">ndx</tt> </tt>
|
|
<a name="L123"></a><tt class="py-lineno">123</tt> <tt class="py-line"> </tt>
|
|
<a name="L124"></a><tt class="py-lineno">124</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">_fn</tt> </tt>
|
|
</div><a name="L125"></a><tt class="py-lineno">125</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.getAllLog"></a><div id="FastLogHook.getAllLog-def"><a name="L126"></a><tt class="py-lineno">126</tt> <a class="py-toggle" href="#" id="FastLogHook.getAllLog-toggle" onclick="return toggle('FastLogHook.getAllLog');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#getAllLog">getAllLog</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.getAllLog-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.getAllLog-expanded"><a name="L127"></a><tt class="py-lineno">127</tt> <tt class="py-line"> <tt class="py-name">mem</tt> <tt class="py-op">=</tt> <tt class="py-string">""</tt> </tt>
|
|
<a name="L128"></a><tt class="py-lineno">128</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">ret</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L129"></a><tt class="py-lineno">129</tt> <tt class="py-line"> <tt class="py-name">flag</tt> <tt class="py-op">=</tt> <tt class="py-name">False</tt> </tt>
|
|
<a name="L130"></a><tt class="py-lineno">130</tt> <tt class="py-line"> <tt class="py-name">addr</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> </tt>
|
|
<a name="L131"></a><tt class="py-lineno">131</tt> <tt class="py-line"> <tt class="py-name">end</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-27" class="py-name" targets="Method Libs.immlib.Debugger.readLong()=Libs.immlib.Debugger-class.html#readLong"><a title="Libs.immlib.Debugger.readLong" class="py-name" href="#" onclick="return doclink('link-27', 'readLong', 'link-27');">readLong</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">memAddress</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L132"></a><tt class="py-lineno">132</tt> <tt class="py-line"> </tt>
|
|
<a name="L133"></a><tt class="py-lineno">133</tt> <tt class="py-line"> <tt class="py-name">mem</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-28" class="py-name"><a title="Libs.immlib.Debugger.readMemory" class="py-name" href="#" onclick="return doclink('link-28', 'readMemory', 'link-25');">readMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">addr</tt><tt class="py-op">,</tt> <tt class="py-name">end</tt><tt class="py-op">-</tt><tt class="py-name">addr</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L134"></a><tt class="py-lineno">134</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-29" class="py-name" targets="Method Libs.libhook.FastLogHook._parseMem()=Libs.libhook.FastLogHook-class.html#_parseMem"><a title="Libs.libhook.FastLogHook._parseMem" class="py-name" href="#" onclick="return doclink('link-29', '_parseMem', 'link-29');">_parseMem</a></tt><tt class="py-op">(</tt> <tt class="py-name">mem</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L135"></a><tt class="py-lineno">135</tt> <tt class="py-line"> </tt>
|
|
<a name="L136"></a><tt class="py-lineno">136</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">ret</tt> </tt>
|
|
</div><a name="L137"></a><tt class="py-lineno">137</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook._parseUniqueFn"></a><div id="FastLogHook._parseUniqueFn-def"><a name="L138"></a><tt class="py-lineno">138</tt> <a class="py-toggle" href="#" id="FastLogHook._parseUniqueFn-toggle" onclick="return toggle('FastLogHook._parseUniqueFn');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#_parseUniqueFn">_parseUniqueFn</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">mem</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook._parseUniqueFn-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook._parseUniqueFn-expanded"><a name="L139"></a><tt class="py-lineno">139</tt> <tt class="py-line"> <tt class="py-name">mem_size</tt> <tt class="py-op">=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">mem</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L140"></a><tt class="py-lineno">140</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L141"></a><tt class="py-lineno">141</tt> <tt class="py-line"> <tt class="py-keyword">while</tt> <tt class="py-name">ndx</tt> <tt class="py-op"><</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">mem</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L142"></a><tt class="py-lineno">142</tt> <tt class="py-line"> <tt class="py-name">index</tt> <tt class="py-op">=</tt> <tt class="py-name">struct</tt><tt class="py-op">.</tt><tt class="py-name">unpack</tt><tt class="py-op">(</tt><tt class="py-string">"L"</tt><tt class="py-op">,</tt> <tt class="py-name">mem</tt><tt class="py-op">[</tt> <tt class="py-name">ndx</tt> <tt class="py-op">:</tt> <tt class="py-name">ndx</tt><tt class="py-op">+</tt><tt class="py-number">4</tt> <tt class="py-op">]</tt> <tt class="py-op">)</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L143"></a><tt class="py-lineno">143</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">index</tt> <tt class="py-op">==</tt> <tt class="py-number">0</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L144"></a><tt class="py-lineno">144</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-comment"># Finished correctly</tt> </tt>
|
|
<a name="L145"></a><tt class="py-lineno">145</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">index</tt> <tt class="py-op">></tt> <tt class="py-op">(</tt><tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">)</tt> <tt class="py-op">+</tt> <tt class="py-number">1</tt><tt class="py-op">)</tt> <tt class="py-op">:</tt> </tt>
|
|
<a name="L146"></a><tt class="py-lineno">146</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> </tt>
|
|
<a name="L147"></a><tt class="py-lineno">147</tt> <tt class="py-line"> </tt>
|
|
<a name="L148"></a><tt class="py-lineno">148</tt> <tt class="py-line"> <tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt> <tt class="py-name">index</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">1</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L149"></a><tt class="py-lineno">149</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">+=</tt> <tt class="py-number">4</tt> </tt>
|
|
<a name="L150"></a><tt class="py-lineno">150</tt> <tt class="py-line"> <tt class="py-name">size_e</tt> <tt class="py-op">=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">entry</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L151"></a><tt class="py-lineno">151</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-op">(</tt><tt class="py-name">size_e</tt><tt class="py-op">*</tt><tt class="py-number">4</tt> <tt class="py-op">+</tt> <tt class="py-name">ndx</tt><tt class="py-op">)</tt> <tt class="py-op">></tt> <tt class="py-op">(</tt> <tt class="py-name">mem_size</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L152"></a><tt class="py-lineno">152</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">ndx</tt> <tt class="py-op">-</tt> <tt class="py-number">4</tt> <tt class="py-comment"># REQUEST MORE MEM </tt> </tt>
|
|
<a name="L153"></a><tt class="py-lineno">153</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">+=</tt> <tt class="py-name">size_e</tt> <tt class="py-op">*</tt> <tt class="py-number">4</tt> </tt>
|
|
<a name="L154"></a><tt class="py-lineno">154</tt> <tt class="py-line"> </tt>
|
|
<a name="L155"></a><tt class="py-lineno">155</tt> <tt class="py-line"> <tt class="py-name">addr</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt> <tt class="py-name">index</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L156"></a><tt class="py-lineno">156</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">_fn</tt><tt class="py-op">.</tt><tt class="py-name">has_key</tt><tt class="py-op">(</tt> <tt class="py-name">addr</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L157"></a><tt class="py-lineno">157</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">_fn</tt><tt class="py-op">[</tt> <tt class="py-name">addr</tt> <tt class="py-op">]</tt> <tt class="py-op">+=</tt> <tt class="py-number">1</tt> </tt>
|
|
<a name="L158"></a><tt class="py-lineno">158</tt> <tt class="py-line"> <tt class="py-keyword">else</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L159"></a><tt class="py-lineno">159</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">_fn</tt><tt class="py-op">[</tt> <tt class="py-name">addr</tt> <tt class="py-op">]</tt> <tt class="py-op">=</tt> <tt class="py-number">1</tt> </tt>
|
|
<a name="L160"></a><tt class="py-lineno">160</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">ndx</tt> </tt>
|
|
</div><a name="L161"></a><tt class="py-lineno">161</tt> <tt class="py-line"> </tt>
|
|
<a name="L162"></a><tt class="py-lineno">162</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.Clear"></a><div id="FastLogHook.Clear-def"><a name="L163"></a><tt class="py-lineno">163</tt> <a class="py-toggle" href="#" id="FastLogHook.Clear-toggle" onclick="return toggle('FastLogHook.Clear');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#Clear">Clear</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.Clear-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.Clear-expanded"><a name="L164"></a><tt class="py-lineno">164</tt> <tt class="py-line"> <tt class="py-comment">#self.imm.writeLong( self.mem, 0x0 )</tt> </tt>
|
|
<a name="L165"></a><tt class="py-lineno">165</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-30" class="py-name" targets="Method Libs.immlib.Debugger.writeLong()=Libs.immlib.Debugger-class.html#writeLong"><a title="Libs.immlib.Debugger.writeLong" class="py-name" href="#" onclick="return doclink('link-30', 'writeLong', 'link-30');">writeLong</a></tt><tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">memAddress</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mem</tt> <tt class="py-op">)</tt> </tt>
|
|
</div><a name="L166"></a><tt class="py-lineno">166</tt> <tt class="py-line"> </tt>
|
|
<a name="L167"></a><tt class="py-lineno">167</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook._parseMem"></a><div id="FastLogHook._parseMem-def"><a name="L168"></a><tt class="py-lineno">168</tt> <a class="py-toggle" href="#" id="FastLogHook._parseMem-toggle" onclick="return toggle('FastLogHook._parseMem');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#_parseMem">_parseMem</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">mem</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook._parseMem-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook._parseMem-expanded"><a name="L169"></a><tt class="py-lineno">169</tt> <tt class="py-line"> <tt class="py-name">mem_size</tt> <tt class="py-op">=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">mem</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L170"></a><tt class="py-lineno">170</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L171"></a><tt class="py-lineno">171</tt> <tt class="py-line"> <tt class="py-comment">#self.imm.Log("table: %d" % len(self.tbl) )</tt> </tt>
|
|
<a name="L172"></a><tt class="py-lineno">172</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">while</tt> <tt class="py-name">ndx</tt> <tt class="py-op"><</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">mem</tt><tt class="py-op">)</tt> <tt class="py-op">:</tt> </tt>
|
|
<a name="L173"></a><tt class="py-lineno">173</tt> <tt class="py-line"> <tt class="py-name">index</tt> <tt class="py-op">=</tt> <tt class="py-name">struct</tt><tt class="py-op">.</tt><tt class="py-name">unpack</tt><tt class="py-op">(</tt><tt class="py-string">"L"</tt><tt class="py-op">,</tt> <tt class="py-name">mem</tt><tt class="py-op">[</tt> <tt class="py-name">ndx</tt> <tt class="py-op">:</tt> <tt class="py-name">ndx</tt><tt class="py-op">+</tt><tt class="py-number">4</tt> <tt class="py-op">]</tt> <tt class="py-op">)</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L174"></a><tt class="py-lineno">174</tt> <tt class="py-line"> <tt class="py-comment">#self.imm.Log("Index: %d" % index)</tt> </tt>
|
|
<a name="L175"></a><tt class="py-lineno">175</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">if</tt> <tt class="py-name">index</tt> <tt class="py-op">==</tt> <tt class="py-number">0</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L176"></a><tt class="py-lineno">176</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-comment"># Finished correctly</tt> </tt>
|
|
<a name="L177"></a><tt class="py-lineno">177</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">index</tt> <tt class="py-op">></tt> <tt class="py-op">(</tt><tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">)</tt> <tt class="py-op">+</tt> <tt class="py-number">1</tt><tt class="py-op">)</tt> <tt class="py-op">:</tt> </tt>
|
|
<a name="L178"></a><tt class="py-lineno">178</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> </tt>
|
|
<a name="L179"></a><tt class="py-lineno">179</tt> <tt class="py-line"> </tt>
|
|
<a name="L180"></a><tt class="py-lineno">180</tt> <tt class="py-line"> <tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt> <tt class="py-name">index</tt> <tt class="py-op">-</tt><tt class="py-number">1</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">1</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L181"></a><tt class="py-lineno">181</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">+=</tt> <tt class="py-number">4</tt> </tt>
|
|
<a name="L182"></a><tt class="py-lineno">182</tt> <tt class="py-line"> <tt class="py-name">size_e</tt> <tt class="py-op">=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">entry</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L183"></a><tt class="py-lineno">183</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-op">(</tt><tt class="py-name">size_e</tt><tt class="py-op">*</tt><tt class="py-number">4</tt> <tt class="py-op">+</tt> <tt class="py-name">ndx</tt><tt class="py-op">)</tt> <tt class="py-op">></tt> <tt class="py-op">(</tt> <tt class="py-name">mem_size</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L184"></a><tt class="py-lineno">184</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">ndx</tt> <tt class="py-op">-</tt> <tt class="py-number">4</tt> <tt class="py-comment"># REQUEST MORE MEM </tt> </tt>
|
|
<a name="L185"></a><tt class="py-lineno">185</tt> <tt class="py-line"> <tt class="py-name">ret</tt> <tt class="py-op">=</tt> <tt class="py-name">struct</tt><tt class="py-op">.</tt><tt class="py-name">unpack</tt><tt class="py-op">(</tt> <tt class="py-string">"L"</tt> <tt class="py-op">*</tt> <tt class="py-name">size_e</tt><tt class="py-op">,</tt> <tt class="py-name">mem</tt><tt class="py-op">[</tt> <tt class="py-name">ndx</tt> <tt class="py-op">:</tt> <tt class="py-name">ndx</tt> <tt class="py-op">+</tt> <tt class="py-name">size_e</tt> <tt class="py-op">*</tt><tt class="py-number">4</tt> <tt class="py-op">]</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L186"></a><tt class="py-lineno">186</tt> <tt class="py-line"> <tt class="py-name">ndx</tt> <tt class="py-op">+=</tt> <tt class="py-name">size_e</tt> <tt class="py-op">*</tt> <tt class="py-number">4</tt> </tt>
|
|
<a name="L187"></a><tt class="py-lineno">187</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">ret</tt><tt class="py-op">.</tt><tt id="link-31" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-31', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">[</tt> <tt class="py-name">index</tt> <tt class="py-op">-</tt> <tt class="py-number">1</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt><tt class="py-op">,</tt> <tt class="py-name">ret</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L188"></a><tt class="py-lineno">188</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">ndx</tt> </tt>
|
|
</div><a name="L189"></a><tt class="py-lineno">189</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.get"></a><div id="FastLogHook.get-def"><a name="L190"></a><tt class="py-lineno">190</tt> <a class="py-toggle" href="#" id="FastLogHook.get-toggle" onclick="return toggle('FastLogHook.get');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#get">get</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.get-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.get-expanded"><a name="L191"></a><tt class="py-lineno">191</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-32" class="py-name" targets="Method Libs.libhook.FastLogHook.logFunction()=Libs.libhook.FastLogHook-class.html#logFunction,Method Libs.libhook.STDCALLFastLogHook.logFunction()=Libs.libhook.STDCALLFastLogHook-class.html#logFunction"><a title="Libs.libhook.FastLogHook.logFunction
|
|
Libs.libhook.STDCALLFastLogHook.logFunction" class="py-name" href="#" onclick="return doclink('link-32', 'logFunction', 'link-32');">logFunction</a></tt><tt class="py-op">(</tt><tt class="py-name">None</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L192"></a><tt class="py-lineno">192</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt> </tt>
|
|
</div><a name="L193"></a><tt class="py-lineno">193</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.setTable"></a><div id="FastLogHook.setTable-def"><a name="L194"></a><tt class="py-lineno">194</tt> <a class="py-toggle" href="#" id="FastLogHook.setTable-toggle" onclick="return toggle('FastLogHook.setTable');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#setTable">setTable</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">tbl</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="FastLogHook.setTable-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="FastLogHook.setTable-expanded"><a name="L195"></a><tt class="py-lineno">195</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt> <tt class="py-op">=</tt> <tt class="py-name">tbl</tt> </tt>
|
|
</div><a name="L196"></a><tt class="py-lineno">196</tt> <tt class="py-line"> </tt>
|
|
<a name="FastLogHook.addFastLogHook"></a><div id="FastLogHook.addFastLogHook-def"><a name="L197"></a><tt class="py-lineno">197</tt> <a class="py-toggle" href="#" id="FastLogHook.addFastLogHook-toggle" onclick="return toggle('FastLogHook.addFastLogHook');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.FastLogHook-class.html#addFastLogHook">addFastLogHook</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">alloc_size</tt> <tt class="py-op">=</tt> <tt class="py-number">0x100000</tt><tt class="py-op">,</tt> <tt class="py-param">memAddress</tt> <tt class="py-op">=</tt> <tt class="py-number">0x0</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><a name="L198"></a><tt class="py-lineno">198</tt> <tt class="py-line"> <tt class="py-name">CODE_HOOK_START</tt> <tt class="py-op">=</tt> <tt class="py-number">8</tt> </tt>
|
|
<a name="L199"></a><tt class="py-lineno">199</tt> <tt class="py-line"> <tt class="py-comment">#flh = hook</tt> </tt>
|
|
<a name="L200"></a><tt class="py-lineno">200</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># Get the table of functions from the hook</tt> </tt>
|
|
<a name="L201"></a><tt class="py-lineno">201</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">AllocSize</tt> <tt class="py-op">=</tt> <tt class="py-name">alloc_size</tt> </tt>
|
|
<a name="L202"></a><tt class="py-lineno">202</tt> <tt class="py-line"> </tt>
|
|
<a name="L203"></a><tt class="py-lineno">203</tt> <tt class="py-line"> <tt class="py-name">table</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-33" class="py-name" targets="Method Libs.debugtypes.Module.get()=Libs.debugtypes.Module-class.html#get,Method Libs.libanalyze.TraceArgs.get()=Libs.libanalyze.TraceArgs-class.html#get,Method Libs.libheap.win32heapchunk.get()=Libs.libheap.win32heapchunk-class.html#get,Method Libs.libhook.FastLogHook.get()=Libs.libhook.FastLogHook-class.html#get,Method Libs.pelib.Directory.get()=Libs.pelib.Directory-class.html#get,Method Libs.pelib.IMGOPThdr.get()=Libs.pelib.IMGOPThdr-class.html#get,Method Libs.pelib.IMGhdr.get()=Libs.pelib.IMGhdr-class.html#get,Method Libs.pelib.ImageExportDirectory.get()=Libs.pelib.ImageExportDirectory-class.html#get,Method Libs.pelib.ImageImportByName.get()=Libs.pelib.ImageImportByName-class.html#get,Method Libs.pelib.ImportDescriptor.get()=Libs.pelib.ImportDescriptor-class.html#get,Method Libs.pelib.MZ.get()=Libs.pelib.MZ-class.html#get,Method Libs.pelib.PE.get()=Libs.pelib.PE-class.html#get,Method Libs.pelib.Section.get()=Libs.pelib.Section-class.html#get"><a title="Libs.debugtypes.Module.get
|
|
Libs.libanalyze.TraceArgs.get
|
|
Libs.libheap.win32heapchunk.get
|
|
Libs.libhook.FastLogHook.get
|
|
Libs.pelib.Directory.get
|
|
Libs.pelib.IMGOPThdr.get
|
|
Libs.pelib.IMGhdr.get
|
|
Libs.pelib.ImageExportDirectory.get
|
|
Libs.pelib.ImageImportByName.get
|
|
Libs.pelib.ImportDescriptor.get
|
|
Libs.pelib.MZ.get
|
|
Libs.pelib.PE.get
|
|
Libs.pelib.Section.get" class="py-name" href="#" onclick="return doclink('link-33', 'get', 'link-33');">get</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L204"></a><tt class="py-lineno">204</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-34" class="py-name" targets="Method Libs.debugtypes.Table.Log()=Libs.debugtypes.Table-class.html#Log,Method Libs.immlib.Debugger.Log()=Libs.immlib.Debugger-class.html#Log"><a title="Libs.debugtypes.Table.Log
|
|
Libs.immlib.Debugger.Log" class="py-name" href="#" onclick="return doclink('link-34', 'Log', 'link-34');">Log</a></tt><tt class="py-op">(</tt><tt class="py-string">"TABLE SIZE: %d"</tt> <tt class="py-op">%</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">table</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L205"></a><tt class="py-lineno">205</tt> <tt class="py-line"> <tt class="py-comment"># Allocate memory for the hook and the log</tt> </tt>
|
|
<a name="L206"></a><tt class="py-lineno">206</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">if</tt> <tt class="py-keyword">not</tt> <tt class="py-name">memAddress</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L207"></a><tt class="py-lineno">207</tt> <tt class="py-line"> <tt class="py-name">memAddress</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-35" class="py-name" targets="Method Libs.immlib.Debugger.remoteVirtualAlloc()=Libs.immlib.Debugger-class.html#remoteVirtualAlloc"><a title="Libs.immlib.Debugger.remoteVirtualAlloc" class="py-name" href="#" onclick="return doclink('link-35', 'remoteVirtualAlloc', 'link-35');">remoteVirtualAlloc</a></tt><tt class="py-op">(</tt> <tt class="py-name">alloc_size</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L208"></a><tt class="py-lineno">208</tt> <tt class="py-line"> </tt>
|
|
<a name="L209"></a><tt class="py-lineno">209</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">memAddress</tt> <tt class="py-op">=</tt> <tt class="py-name">memAddress</tt> </tt>
|
|
<a name="L210"></a><tt class="py-lineno">210</tt> <tt class="py-line"> </tt>
|
|
<a name="L211"></a><tt class="py-lineno">211</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-36" class="py-name"><a title="Libs.debugtypes.Table.Log
|
|
Libs.immlib.Debugger.Log" class="py-name" href="#" onclick="return doclink('link-36', 'Log', 'link-34');">Log</a></tt><tt class="py-op">(</tt> <tt class="py-string">"Logging at 0x%08x"</tt> <tt class="py-op">%</tt> <tt class="py-name">memAddress</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L212"></a><tt class="py-lineno">212</tt> <tt class="py-line"> </tt>
|
|
<a name="L213"></a><tt class="py-lineno">213</tt> <tt class="py-line"> <tt class="py-comment"># MEMORY LOOKS LIKE:</tt> </tt>
|
|
<a name="L214"></a><tt class="py-lineno">214</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mem [ ptr to data ]</tt> </tt>
|
|
<a name="L215"></a><tt class="py-lineno">215</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mem + 4 [ deadlock ]</tt> </tt>
|
|
<a name="L216"></a><tt class="py-lineno">216</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mem + 8 [ start of hook code ]</tt> </tt>
|
|
<a name="L217"></a><tt class="py-lineno">217</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mem + n [ ... ]</tt> </tt>
|
|
<a name="L218"></a><tt class="py-lineno">218</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mem + n [ start of data ]</tt> </tt>
|
|
<a name="L219"></a><tt class="py-lineno">219</tt> <tt class="py-line"><tt class="py-comment"></tt> </tt>
|
|
<a name="L220"></a><tt class="py-lineno">220</tt> <tt class="py-line"> <tt class="py-name">ptr</tt> <tt class="py-op">=</tt> <tt class="py-name">memAddress</tt> <tt class="py-op">+</tt> <tt class="py-name">CODE_HOOK_START</tt> </tt>
|
|
<a name="L221"></a><tt class="py-lineno">221</tt> <tt class="py-line"> </tt>
|
|
<a name="L222"></a><tt class="py-lineno">222</tt> <tt class="py-line"> <tt class="py-name">fn_restore</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L223"></a><tt class="py-lineno">223</tt> <tt class="py-line"> </tt>
|
|
<a name="L224"></a><tt class="py-lineno">224</tt> <tt class="py-line"><tt class="py-comment"># for fn_ndx in range( 0, len(table) ):</tt> </tt>
|
|
<a name="L225"></a><tt class="py-lineno">225</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-name">fn_ndx</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L226"></a><tt class="py-lineno">226</tt> <tt class="py-line"> <tt class="py-keyword">while</tt> <tt class="py-name">fn_ndx</tt> <tt class="py-op"><</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">table</tt><tt class="py-op">)</tt> <tt class="py-op">:</tt> </tt>
|
|
<a name="L227"></a><tt class="py-lineno">227</tt> <tt class="py-line"> <tt class="py-name">hookAddress</tt> <tt class="py-op">=</tt> <tt class="py-name">table</tt><tt class="py-op">[</tt> <tt class="py-name">fn_ndx</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L228"></a><tt class="py-lineno">228</tt> <tt class="py-line"> <tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-name">table</tt><tt class="py-op">[</tt> <tt class="py-name">fn_ndx</tt> <tt class="py-op">]</tt><tt class="py-op">[</tt><tt class="py-number">1</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L229"></a><tt class="py-lineno">229</tt> <tt class="py-line"> </tt>
|
|
<a name="L230"></a><tt class="py-lineno">230</tt> <tt class="py-line"> <tt class="py-name">idx</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> </tt>
|
|
<a name="L231"></a><tt class="py-lineno">231</tt> <tt class="py-line"> <tt class="py-comment">#patch_code = self.imm.Assemble( "PUSH 0x%08x\nRET" % ptr )</tt> </tt>
|
|
<a name="L232"></a><tt class="py-lineno">232</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-name">patch_code</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-37" class="py-name" targets="Method Libs.immlib.Debugger.Assemble()=Libs.immlib.Debugger-class.html#Assemble"><a title="Libs.immlib.Debugger.Assemble" class="py-name" href="#" onclick="return doclink('link-37', 'Assemble', 'link-37');">Assemble</a></tt><tt class="py-op">(</tt> <tt class="py-string">"JMP 0x%08x"</tt> <tt class="py-op">%</tt> <tt class="py-name">ptr</tt><tt class="py-op">,</tt> <tt class="py-name">address</tt> <tt class="py-op">=</tt> <tt class="py-name">hookAddress</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L233"></a><tt class="py-lineno">233</tt> <tt class="py-line"> </tt>
|
|
<a name="L234"></a><tt class="py-lineno">234</tt> <tt class="py-line"> <tt class="py-keyword">while</tt> <tt class="py-name">idx</tt> <tt class="py-op"><</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">patch_code</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L235"></a><tt class="py-lineno">235</tt> <tt class="py-line"> <tt class="py-name">op</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-38" class="py-name" targets="Method Libs.immlib.Debugger.Disasm()=Libs.immlib.Debugger-class.html#Disasm"><a title="Libs.immlib.Debugger.Disasm" class="py-name" href="#" onclick="return doclink('link-38', 'Disasm', 'link-38');">Disasm</a></tt><tt class="py-op">(</tt> <tt class="py-name">hookAddress</tt> <tt class="py-op">+</tt> <tt class="py-name">idx</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L236"></a><tt class="py-lineno">236</tt> <tt class="py-line"> <tt class="py-name">idx</tt> <tt class="py-op">+=</tt> <tt class="py-name">op</tt><tt class="py-op">.</tt><tt id="link-39" class="py-name" targets="Method Libs.libanalyze.opCode.getOpSize()=Libs.libanalyze.opCode-class.html#getOpSize"><a title="Libs.libanalyze.opCode.getOpSize" class="py-name" href="#" onclick="return doclink('link-39', 'getOpSize', 'link-39');">getOpSize</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L237"></a><tt class="py-lineno">237</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">op</tt><tt class="py-op">.</tt><tt id="link-40" class="py-name" targets="Method Libs.libanalyze.opCode.isCall()=Libs.libanalyze.opCode-class.html#isCall"><a title="Libs.libanalyze.opCode.isCall" class="py-name" href="#" onclick="return doclink('link-40', 'isCall', 'link-40');">isCall</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> <tt class="py-keyword">or</tt> <tt class="py-name">op</tt><tt class="py-op">.</tt><tt id="link-41" class="py-name" targets="Method Libs.libanalyze.BasicBlock.isJmp()=Libs.libanalyze.BasicBlock-class.html#isJmp,Method Libs.libanalyze.opCode.isJmp()=Libs.libanalyze.opCode-class.html#isJmp"><a title="Libs.libanalyze.BasicBlock.isJmp
|
|
Libs.libanalyze.opCode.isJmp" class="py-name" href="#" onclick="return doclink('link-41', 'isJmp', 'link-41');">isJmp</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L238"></a><tt class="py-lineno">238</tt> <tt class="py-line"> <tt class="py-name">op</tt> <tt class="py-op">=</tt> <tt class="py-name">None</tt> </tt>
|
|
<a name="L239"></a><tt class="py-lineno">239</tt> <tt class="py-line"> <tt class="py-keyword">break</tt> </tt>
|
|
<a name="L240"></a><tt class="py-lineno">240</tt> <tt class="py-line"> </tt>
|
|
<a name="L241"></a><tt class="py-lineno">241</tt> <tt class="py-line"> <tt class="py-comment"># Removing the BP from the table</tt> </tt>
|
|
<a name="L242"></a><tt class="py-lineno">242</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">if</tt> <tt class="py-keyword">not</tt> <tt class="py-name">op</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L243"></a><tt class="py-lineno">243</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-42" class="py-name"><a title="Libs.debugtypes.Table.Log
|
|
Libs.immlib.Debugger.Log" class="py-name" href="#" onclick="return doclink('link-42', 'Log', 'link-34');">Log</a></tt><tt class="py-op">(</tt><tt class="py-string">"deleting: %d"</tt> <tt class="py-op">%</tt> <tt class="py-name">fn_ndx</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L244"></a><tt class="py-lineno">244</tt> <tt class="py-line"> <tt class="py-keyword">del</tt> <tt class="py-name">table</tt><tt class="py-op">[</tt> <tt class="py-name">fn_ndx</tt> <tt class="py-op">]</tt> </tt>
|
|
<a name="L245"></a><tt class="py-lineno">245</tt> <tt class="py-line"> <tt class="py-keyword">continue</tt> </tt>
|
|
<a name="L246"></a><tt class="py-lineno">246</tt> <tt class="py-line"> </tt>
|
|
<a name="L247"></a><tt class="py-lineno">247</tt> <tt class="py-line"> <tt class="py-name">ex_prelude</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-43" class="py-name"><a title="Libs.immlib.Debugger.readMemory" class="py-name" href="#" onclick="return doclink('link-43', 'readMemory', 'link-25');">readMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">hookAddress</tt><tt class="py-op">,</tt> <tt class="py-name">idx</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L248"></a><tt class="py-lineno">248</tt> <tt class="py-line"> </tt>
|
|
<a name="L249"></a><tt class="py-lineno">249</tt> <tt class="py-line"> <tt class="py-name">code</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-44" class="py-name" targets="Method Libs.immlib.Debugger._createCodeforHook()=Libs.immlib.Debugger-class.html#_createCodeforHook"><a title="Libs.immlib.Debugger._createCodeforHook" class="py-name" href="#" onclick="return doclink('link-44', '_createCodeforHook', 'link-44');">_createCodeforHook</a></tt><tt class="py-op">(</tt> <tt class="py-name">memAddress</tt><tt class="py-op">,</tt> <tt class="py-name">hookAddress</tt> <tt class="py-op">+</tt> <tt class="py-name">idx</tt><tt class="py-op">,</tt>\ </tt>
|
|
<a name="L250"></a><tt class="py-lineno">250</tt> <tt class="py-line"> <tt class="py-name">fn_ndx</tt> <tt class="py-op">+</tt> <tt class="py-number">1</tt><tt class="py-op">,</tt> <tt class="py-name">entry</tt><tt class="py-op">,</tt> <tt class="py-name">ex_prelude</tt><tt class="py-op">,</tt> <tt class="py-name">alloc_size</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L251"></a><tt class="py-lineno">251</tt> <tt class="py-line"> </tt>
|
|
<a name="L252"></a><tt class="py-lineno">252</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-45" class="py-name"><a title="Libs.immlib.Debugger.writeMemory" class="py-name" href="#" onclick="return doclink('link-45', 'writeMemory', 'link-10');">writeMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">ptr</tt> <tt class="py-op">,</tt> <tt class="py-name">code</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L253"></a><tt class="py-lineno">253</tt> <tt class="py-line"> <tt class="py-name">ptr</tt> <tt class="py-op">+=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">code</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L254"></a><tt class="py-lineno">254</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-46" class="py-name"><a title="Libs.immlib.Debugger.writeMemory" class="py-name" href="#" onclick="return doclink('link-46', 'writeMemory', 'link-10');">writeMemory</a></tt><tt class="py-op">(</tt> <tt class="py-name">hookAddress</tt><tt class="py-op">,</tt> <tt class="py-name">patch_code</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L255"></a><tt class="py-lineno">255</tt> <tt class="py-line"> </tt>
|
|
<a name="L256"></a><tt class="py-lineno">256</tt> <tt class="py-line"> <tt class="py-name">fn_restore</tt><tt class="py-op">.</tt><tt id="link-47" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-47', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt><tt class="py-name">ex_prelude</tt><tt class="py-op">,</tt> <tt class="py-name">patch_code</tt> <tt class="py-op">)</tt> <tt class="py-op">)</tt> <tt class="py-comment"># Correspond in index with function address</tt> </tt>
|
|
<a name="L257"></a><tt class="py-lineno">257</tt> <tt class="py-line"> <tt class="py-name">fn_ndx</tt> <tt class="py-op">+=</tt> <tt class="py-number">1</tt> </tt>
|
|
<a name="L258"></a><tt class="py-lineno">258</tt> <tt class="py-line"> </tt>
|
|
<a name="L259"></a><tt class="py-lineno">259</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-48" class="py-name" targets="Method Libs.libhook.FastLogHook.setTable()=Libs.libhook.FastLogHook-class.html#setTable"><a title="Libs.libhook.FastLogHook.setTable" class="py-name" href="#" onclick="return doclink('link-48', 'setTable', 'link-48');">setTable</a></tt><tt class="py-op">(</tt> <tt class="py-name">table</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L260"></a><tt class="py-lineno">260</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">ptr</tt> <tt class="py-op">%</tt> <tt class="py-number">4</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L261"></a><tt class="py-lineno">261</tt> <tt class="py-line"> <tt class="py-name">ptr</tt> <tt class="py-op">=</tt> <tt class="py-number">4</tt> <tt class="py-op">+</tt> <tt class="py-name">ptr</tt> <tt class="py-op">&</tt> <tt class="py-op">~</tt><tt class="py-op">(</tt><tt class="py-number">4</tt><tt class="py-op">-</tt><tt class="py-number">1</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L262"></a><tt class="py-lineno">262</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-49" class="py-name" targets="Method Libs.libhook.FastLogHook.setMem()=Libs.libhook.FastLogHook-class.html#setMem"><a title="Libs.libhook.FastLogHook.setMem" class="py-name" href="#" onclick="return doclink('link-49', 'setMem', 'link-49');">setMem</a></tt><tt class="py-op">(</tt> <tt class="py-name">ptr</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L263"></a><tt class="py-lineno">263</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-50" class="py-name"><a title="Libs.immlib.Debugger.writeLong" class="py-name" href="#" onclick="return doclink('link-50', 'writeLong', 'link-30');">writeLong</a></tt><tt class="py-op">(</tt> <tt class="py-name">memAddress</tt><tt class="py-op">,</tt> <tt class="py-name">ptr</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L264"></a><tt class="py-lineno">264</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-51" class="py-name" targets="Method Libs.libhook.FastLogHook.setRestore()=Libs.libhook.FastLogHook-class.html#setRestore"><a title="Libs.libhook.FastLogHook.setRestore" class="py-name" href="#" onclick="return doclink('link-51', 'setRestore', 'link-51');">setRestore</a></tt><tt class="py-op">(</tt> <tt class="py-name">fn_restore</tt> <tt class="py-op">)</tt> </tt>
|
|
</div></div><a name="L265"></a><tt class="py-lineno">265</tt> <tt class="py-line"> </tt>
|
|
<a name="L266"></a><tt class="py-lineno">266</tt> <tt class="py-line"> </tt>
|
|
<a name="L267"></a><tt class="py-lineno">267</tt> <tt class="py-line"> </tt>
|
|
<a name="STDCALLFastLogHook"></a><div id="STDCALLFastLogHook-def"><a name="L268"></a><tt class="py-lineno">268</tt> <a class="py-toggle" href="#" id="STDCALLFastLogHook-toggle" onclick="return toggle('STDCALLFastLogHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.STDCALLFastLogHook-class.html">STDCALLFastLogHook</a><tt class="py-op">(</tt><tt class="py-base-class">FastLogHook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="STDCALLFastLogHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="STDCALLFastLogHook-expanded"><a name="STDCALLFastLogHook.__init__"></a><div id="STDCALLFastLogHook.__init__-def"><a name="L269"></a><tt class="py-lineno">269</tt> <a class="py-toggle" href="#" id="STDCALLFastLogHook.__init__-toggle" onclick="return toggle('STDCALLFastLogHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.STDCALLFastLogHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">imm</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="STDCALLFastLogHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="STDCALLFastLogHook.__init__-expanded"><a name="L270"></a><tt class="py-lineno">270</tt> <tt class="py-line"> <tt id="link-52" class="py-name" targets="Class Libs.libhook.FastLogHook=Libs.libhook.FastLogHook-class.html"><a title="Libs.libhook.FastLogHook" class="py-name" href="#" onclick="return doclink('link-52', 'FastLogHook', 'link-52');">FastLogHook</a></tt><tt class="py-op">.</tt><tt id="link-53" class="py-name" targets="Method Libs.debugtypes.Handle.__init__()=Libs.debugtypes.Handle-class.html#__init__,Method Libs.debugtypes.MemoryPage.__init__()=Libs.debugtypes.MemoryPage-class.html#__init__,Method Libs.debugtypes.Module.__init__()=Libs.debugtypes.Module-class.html#__init__,Method Libs.debugtypes.PEB.__init__()=Libs.debugtypes.PEB-class.html#__init__,Method Libs.debugtypes.Stack.__init__()=Libs.debugtypes.Stack-class.html#__init__,Method Libs.debugtypes.Symbol.__init__()=Libs.debugtypes.Symbol-class.html#__init__,Method Libs.debugtypes.Table.__init__()=Libs.debugtypes.Table-class.html#__init__,Method Libs.graphclass.Draw.__init__()=Libs.graphclass.Draw-class.html#__init__,Method Libs.graphclass.Graph.__init__()=Libs.graphclass.Graph-class.html#__init__,Method Libs.graphclass.Line.__init__()=Libs.graphclass.Line-class.html#__init__,Method Libs.graphclass.Vertex.__init__()=Libs.graphclass.Vertex-class.html#__init__,Method Libs.graphclass.vcgNode.__init__()=Libs.graphclass.vcgNode-class.html#__init__,Method Libs.immlib.Debugger.__init__()=Libs.immlib.Debugger-class.html#__init__,Method Libs.immlib.DictTypes.__init__()=Libs.immlib.DictTypes-class.html#__init__,Method Libs.immutils.antifloatdict.__init__()=Libs.immutils.antifloatdict-class.html#__init__,Method Libs.immvcglib.ParseVCGList.__init__()=Libs.immvcglib.ParseVCGList-class.html#__init__,Method Libs.immvcglib.graphTree.__init__()=Libs.immvcglib.graphTree-class.html#__init__,Method Libs.libanalyze.BasicBlock.__init__()=Libs.libanalyze.BasicBlock-class.html#__init__,Method Libs.libanalyze.Decode.__init__()=Libs.libanalyze.Decode-class.html#__init__,Method Libs.libanalyze.Function.__init__()=Libs.libanalyze.Function-class.html#__init__,Method Libs.libanalyze.JMCBasicBlock.__init__()=Libs.libanalyze.JMCBasicBlock-class.html#__init__,Method Libs.libanalyze.JMPBasicBlock.__init__()=Libs.libanalyze.JMPBasicBlock-class.html#__init__,Method Libs.libanalyze.RETBasicBlock.__init__()=Libs.libanalyze.RETBasicBlock-class.html#__init__,Method Libs.libanalyze.TraceArgs.__init__()=Libs.libanalyze.TraceArgs-class.html#__init__,Method Libs.libanalyze.XREFBasicBlock.__init__()=Libs.libanalyze.XREFBasicBlock-class.html#__init__,Method Libs.libanalyze.opCode.__init__()=Libs.libanalyze.opCode-class.html#__init__,Method Libs.libdatatype.Data.__init__()=Libs.libdatatype.Data-class.html#__init__,Method Libs.libdatatype.DataTypes.__init__()=Libs.libdatatype.DataTypes-class.html#__init__,Method Libs.libdatatype.DoubleLinkedList.__init__()=Libs.libdatatype.DoubleLinkedList-class.html#__init__,Method Libs.libdatatype.Pointer.__init__()=Libs.libdatatype.Pointer-class.html#__init__,Method Libs.libdatatype.String.__init__()=Libs.libdatatype.String-class.html#__init__,Method Libs.libdatatype.Unicode.__init__()=Libs.libdatatype.Unicode-class.html#__init__,Method Libs.libevent.CreateProcessEvent.__init__()=Libs.libevent.CreateProcessEvent-class.html#__init__,Method Libs.libevent.CreateThreadEvent.__init__()=Libs.libevent.CreateThreadEvent-class.html#__init__,Method Libs.libevent.Event.__init__()=Libs.libevent.Event-class.html#__init__,Method Libs.libevent.ExceptionEvent.__init__()=Libs.libevent.ExceptionEvent-class.html#__init__,Method Libs.libevent.ExceptionRecord.__init__()=Libs.libevent.ExceptionRecord-class.html#__init__,Method Libs.libevent.ExitProcessEvent.__init__()=Libs.libevent.ExitProcessEvent-class.html#__init__,Method Libs.libevent.ExitThreadEvent.__init__()=Libs.libevent.ExitThreadEvent-class.html#__init__,Method Libs.libevent.LoadDLLEvent.__init__()=Libs.libevent.LoadDLLEvent-class.html#__init__,Method Libs.libevent.OutputDebugEvent.__init__()=Libs.libevent.OutputDebugEvent-class.html#__init__,Method Libs.libevent.RIPEvent.__init__()=Libs.libevent.RIPEvent-class.html#__init__,Method Libs.libevent.UnloadDLLEvent.__init__()=Libs.libevent.UnloadDLLEvent-class.html#__init__,Method Libs.libheap.Blocks.__init__()=Libs.libheap.Blocks-class.html#__init__,Method Libs.libheap.Bucket.__init__()=Libs.libheap.Bucket-class.html#__init__,Method Libs.libheap.LFHeap.__init__()=Libs.libheap.LFHeap-class.html#__init__,Method Libs.libheap.LocalData.__init__()=Libs.libheap.LocalData-class.html#__init__,Method Libs.libheap.LocalSegmentInfo.__init__()=Libs.libheap.LocalSegmentInfo-class.html#__init__,Method Libs.libheap.PHeap.__init__()=Libs.libheap.PHeap-class.html#__init__,Method Libs.libheap.PHeapLookaside.__init__()=Libs.libheap.PHeapLookaside-class.html#__init__,Method Libs.libheap.PLook.__init__()=Libs.libheap.PLook-class.html#__init__,Method Libs.libheap.SearchHeap.__init__()=Libs.libheap.SearchHeap-class.html#__init__,Method Libs.libheap.Segment.__init__()=Libs.libheap.Segment-class.html#__init__,Method Libs.libheap.SubSegment.__init__()=Libs.libheap.SubSegment-class.html#__init__,Method Libs.libheap.UserData.__init__()=Libs.libheap.UserData-class.html#__init__,Method Libs.libheap.UserMemoryCache.__init__()=Libs.libheap.UserMemoryCache-class.html#__init__,Method Libs.libheap.VistaPHeap.__init__()=Libs.libheap.VistaPHeap-class.html#__init__,Method Libs.libheap.win32heapchunk.__init__()=Libs.libheap.win32heapchunk-class.html#__init__,Method Libs.libheap.win32vistaheapchunk.__init__()=Libs.libheap.win32vistaheapchunk-class.html#__init__,Method Libs.libhook.AccessViolationHook.__init__()=Libs.libhook.AccessViolationHook-class.html#__init__,Method Libs.libhook.AllExceptHook.__init__()=Libs.libhook.AllExceptHook-class.html#__init__,Method Libs.libhook.BpHook.__init__()=Libs.libhook.BpHook-class.html#__init__,Method Libs.libhook.CreateProcessHook.__init__()=Libs.libhook.CreateProcessHook-class.html#__init__,Method Libs.libhook.CreateThreadHook.__init__()=Libs.libhook.CreateThreadHook-class.html#__init__,Method Libs.libhook.ExitProcessHook.__init__()=Libs.libhook.ExitProcessHook-class.html#__init__,Method Libs.libhook.ExitThreadHook.__init__()=Libs.libhook.ExitThreadHook-class.html#__init__,Method Libs.libhook.FastLogHook.__init__()=Libs.libhook.FastLogHook-class.html#__init__,Method Libs.libhook.Hook.__init__()=Libs.libhook.Hook-class.html#__init__,Method Libs.libhook.LoadDLLHook.__init__()=Libs.libhook.LoadDLLHook-class.html#__init__,Method Libs.libhook.LogBpHook.__init__()=Libs.libhook.LogBpHook-class.html#__init__,Method Libs.libhook.PostAnalysisHook.__init__()=Libs.libhook.PostAnalysisHook-class.html#__init__,Method Libs.libhook.PreBpHook.__init__()=Libs.libhook.PreBpHook-class.html#__init__,Method Libs.libhook.RunUntilAV.__init__()=Libs.libhook.RunUntilAV-class.html#__init__,Method Libs.libhook.STDCALLFastLogHook.__init__()=Libs.libhook.STDCALLFastLogHook-class.html#__init__,Method Libs.libhook.UnloadDLLHook.__init__()=Libs.libhook.UnloadDLLHook-class.html#__init__,Method Libs.librecognition.FunctionRecognition.__init__()=Libs.librecognition.FunctionRecognition-class.html#__init__,Method Libs.librecognition.MultiCSVIterator.__init__()=Libs.librecognition.MultiCSVIterator-class.html#__init__,Method Libs.pelib.Directory.__init__()=Libs.pelib.Directory-class.html#__init__,Method Libs.pelib.IMGOPThdr.__init__()=Libs.pelib.IMGOPThdr-class.html#__init__,Method Libs.pelib.IMGhdr.__init__()=Libs.pelib.IMGhdr-class.html#__init__,Method Libs.pelib.ImageExportDirectory.__init__()=Libs.pelib.ImageExportDirectory-class.html#__init__,Method Libs.pelib.ImageImportByName.__init__()=Libs.pelib.ImageImportByName-class.html#__init__,Method Libs.pelib.ImportDescriptor.__init__()=Libs.pelib.ImportDescriptor-class.html#__init__,Method Libs.pelib.MZ.__init__()=Libs.pelib.MZ-class.html#__init__,Method Libs.pelib.PE.__init__()=Libs.pelib.PE-class.html#__init__,Method Libs.pelib.PElib.__init__()=Libs.pelib.PElib-class.html#__init__,Method Libs.pelib.Section.__init__()=Libs.pelib.Section-class.html#__init__"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-53', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">,</tt> <tt class="py-name">imm</tt><tt class="py-op">)</tt> </tt>
|
|
</div><a name="STDCALLFastLogHook.logFunction"></a><div id="STDCALLFastLogHook.logFunction-def"><a name="L271"></a><tt class="py-lineno">271</tt> <a class="py-toggle" href="#" id="STDCALLFastLogHook.logFunction-toggle" onclick="return toggle('STDCALLFastLogHook.logFunction');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.STDCALLFastLogHook-class.html#logFunction">logFunction</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">address</tt><tt class="py-op">,</tt> <tt class="py-param">args</tt> <tt class="py-op">=</tt> <tt class="py-number">0</tt> <tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="STDCALLFastLogHook.logFunction-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="STDCALLFastLogHook.logFunction-expanded"><a name="L272"></a><tt class="py-lineno">272</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L273"></a><tt class="py-lineno">273</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">tbl</tt><tt class="py-op">.</tt><tt id="link-54" class="py-name"><a title="Libs.libheap.PLook.append" class="py-name" href="#" onclick="return doclink('link-54', 'append', 'link-21');">append</a></tt><tt class="py-op">(</tt> <tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt><tt class="py-op">)</tt> <tt class="py-op">)</tt> </tt>
|
|
<a name="L274"></a><tt class="py-lineno">274</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">entry</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L275"></a><tt class="py-lineno">275</tt> <tt class="py-line"> </tt>
|
|
<a name="L276"></a><tt class="py-lineno">276</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt> <tt class="py-op">=</tt> <tt class="py-name">address</tt> </tt>
|
|
<a name="L277"></a><tt class="py-lineno">277</tt> <tt class="py-line"> <tt class="py-keyword">for</tt> <tt class="py-name">ndx</tt> <tt class="py-keyword">in</tt> <tt class="py-name">range</tt><tt class="py-op">(</tt><tt class="py-number">0</tt><tt class="py-op">,</tt> <tt class="py-name">args</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L278"></a><tt class="py-lineno">278</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-55" class="py-name" targets="Method Libs.libhook.FastLogHook.logBaseDisplacement()=Libs.libhook.FastLogHook-class.html#logBaseDisplacement"><a title="Libs.libhook.FastLogHook.logBaseDisplacement" class="py-name" href="#" onclick="return doclink('link-55', 'logBaseDisplacement', 'link-55');">logBaseDisplacement</a></tt><tt class="py-op">(</tt> <tt class="py-string">"ESP"</tt><tt class="py-op">,</tt> <tt class="py-name">ndx</tt><tt class="py-op">*</tt><tt class="py-number">4</tt> <tt class="py-op">+</tt> <tt class="py-number">4</tt> <tt class="py-op">)</tt> </tt>
|
|
</div></div><a name="L279"></a><tt class="py-lineno">279</tt> <tt class="py-line"> </tt>
|
|
<a name="L280"></a><tt class="py-lineno">280</tt> <tt class="py-line"><tt class="py-comment">#HOOK class</tt> </tt>
|
|
<a name="Hook"></a><div id="Hook-def"><a name="L281"></a><tt class="py-lineno">281</tt> <a class="py-toggle" href="#" id="Hook-toggle" onclick="return toggle('Hook');">-</a><tt class="py-line"><tt class="py-comment"></tt><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html">Hook</a><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="Hook-expanded"><a name="Hook.__init__"></a><div id="Hook.__init__-def"><a name="L282"></a><tt class="py-lineno">282</tt> <a class="py-toggle" href="#" id="Hook.__init__-toggle" onclick="return toggle('Hook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.__init__-expanded"><a name="L283"></a><tt class="py-lineno">283</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt><tt class="py-op">=</tt><tt class="py-number">0</tt> </tt>
|
|
<a name="L284"></a><tt class="py-lineno">284</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">msg</tt><tt class="py-op">=</tt><tt class="py-string">""</tt> </tt>
|
|
<a name="L285"></a><tt class="py-lineno">285</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">string</tt><tt class="py-op">=</tt><tt class="py-string">""</tt> </tt>
|
|
<a name="L286"></a><tt class="py-lineno">286</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">=</tt><tt class="py-number">0</tt> </tt>
|
|
<a name="L287"></a><tt class="py-lineno">287</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">enabled</tt><tt class="py-op">=</tt><tt class="py-name">True</tt> <tt class="py-comment"># by default hook is enabled</tt> </tt>
|
|
</div><a name="L288"></a><tt class="py-lineno">288</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook.enable"></a><div id="Hook.enable-def"><a name="L289"></a><tt class="py-lineno">289</tt> <a class="py-toggle" href="#" id="Hook.enable-toggle" onclick="return toggle('Hook.enable');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#enable">enable</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.enable-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.enable-expanded"><a name="L290"></a><tt class="py-lineno">290</tt> <tt class="py-line"> <tt class="py-docstring">"""Enable hook execution"""</tt> </tt>
|
|
<a name="L291"></a><tt class="py-lineno">291</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">enabled</tt><tt class="py-op">=</tt><tt class="py-name">True</tt> </tt>
|
|
</div><a name="L292"></a><tt class="py-lineno">292</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook.disable"></a><div id="Hook.disable-def"><a name="L293"></a><tt class="py-lineno">293</tt> <a class="py-toggle" href="#" id="Hook.disable-toggle" onclick="return toggle('Hook.disable');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#disable">disable</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.disable-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.disable-expanded"><a name="L294"></a><tt class="py-lineno">294</tt> <tt class="py-line"> <tt class="py-docstring">"""Disable hook execution"""</tt> </tt>
|
|
<a name="L295"></a><tt class="py-lineno">295</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">enabled</tt><tt class="py-op">=</tt><tt class="py-name">False</tt> </tt>
|
|
</div><a name="L296"></a><tt class="py-lineno">296</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook.UnHook"></a><div id="Hook.UnHook-def"><a name="L297"></a><tt class="py-lineno">297</tt> <a class="py-toggle" href="#" id="Hook.UnHook-toggle" onclick="return toggle('Hook.UnHook');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#UnHook">UnHook</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.UnHook-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.UnHook-expanded"><a name="L298"></a><tt class="py-lineno">298</tt> <tt class="py-line"> <tt class="py-docstring">"""Remove the hook"""</tt> </tt>
|
|
<a name="L299"></a><tt class="py-lineno">299</tt> <tt class="py-line"> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt class="py-name">Removehook</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt><tt class="py-op">)</tt> </tt>
|
|
</div><a name="L300"></a><tt class="py-lineno">300</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook.add"></a><div id="Hook.add-def"><a name="L301"></a><tt class="py-lineno">301</tt> <a class="py-toggle" href="#" id="Hook.add-toggle" onclick="return toggle('Hook.add');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#add">add</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">description</tt><tt class="py-op">,</tt><tt class="py-param">address</tt><tt class="py-op">=</tt><tt class="py-number">0</tt><tt class="py-op">,</tt><tt class="py-param">force</tt><tt class="py-op">=</tt><tt class="py-number">0</tt><tt class="py-op">,</tt><tt class="py-param">timeout</tt><tt class="py-op">=</tt><tt class="py-number">0</tt><tt class="py-op">,</tt><tt class="py-param">mode</tt><tt class="py-op">=</tt><tt class="py-number">0</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.add-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.add-expanded"><a name="L302"></a><tt class="py-lineno">302</tt> <tt class="py-line"> <tt class="py-docstring">"""Add hook to Immunity Debugger hook database</tt> </tt>
|
|
<a name="L303"></a><tt class="py-lineno">303</tt> <tt class="py-line"><tt class="py-docstring"> @param type: Type of hook</tt> </tt>
|
|
<a name="L304"></a><tt class="py-lineno">304</tt> <tt class="py-line"><tt class="py-docstring"> @param desc: Descriptive string</tt> </tt>
|
|
<a name="L305"></a><tt class="py-lineno">305</tt> <tt class="py-line"><tt class="py-docstring"> @param force: Force hook adding</tt> </tt>
|
|
<a name="L306"></a><tt class="py-lineno">306</tt> <tt class="py-line"><tt class="py-docstring"> @param timeout: time to live in memory</tt> </tt>
|
|
<a name="L307"></a><tt class="py-lineno">307</tt> <tt class="py-line"><tt class="py-docstring"> @param mode: thread mode of ttl execution</tt> </tt>
|
|
<a name="L308"></a><tt class="py-lineno">308</tt> <tt class="py-line"><tt class="py-docstring"> """</tt> </tt>
|
|
<a name="L309"></a><tt class="py-lineno">309</tt> <tt class="py-line"> </tt>
|
|
<a name="L310"></a><tt class="py-lineno">310</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-name">description</tt> </tt>
|
|
<a name="L311"></a><tt class="py-lineno">311</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt> <tt class="py-op">=</tt> <tt class="py-name">address</tt> </tt>
|
|
<a name="L312"></a><tt class="py-lineno">312</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">force</tt><tt class="py-op">=</tt><tt class="py-name">force</tt> </tt>
|
|
<a name="L313"></a><tt class="py-lineno">313</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">timeout</tt><tt class="py-op">=</tt><tt class="py-name">timeout</tt> </tt>
|
|
<a name="L314"></a><tt class="py-lineno">314</tt> <tt class="py-line"> <tt class="py-comment"># mode = 1 then, execute ttl hook in the same thread enviroment as the python command/script</tt> </tt>
|
|
<a name="L315"></a><tt class="py-lineno">315</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># mode = 0 use your own thread enviroment to place and execute the ttl hook </tt> </tt>
|
|
<a name="L316"></a><tt class="py-lineno">316</tt> <tt class="py-line"><tt class="py-comment"></tt> <tt class="py-comment"># you'll be using mode = 0 at least you really know what you are doing.</tt> </tt>
|
|
<a name="L317"></a><tt class="py-lineno">317</tt> <tt class="py-line"><tt class="py-comment"></tt> </tt>
|
|
<a name="L318"></a><tt class="py-lineno">318</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mode</tt><tt class="py-op">=</tt><tt class="py-name">mode</tt> </tt>
|
|
<a name="L319"></a><tt class="py-lineno">319</tt> <tt class="py-line"> <tt class="py-keyword">if</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">==</tt> <tt id="link-56" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-56', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"ORDINARY_BP_HOOK"</tt><tt class="py-op">]</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L320"></a><tt class="py-lineno">320</tt> <tt class="py-line"> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt class="py-name">Setbreakpoint</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">,</tt><tt class="py-number">0x200L</tt><tt class="py-op">,</tt><tt class="py-string">""</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L321"></a><tt class="py-lineno">321</tt> <tt class="py-line"> <tt class="py-keyword">elif</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">==</tt> <tt id="link-57" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-57', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"LOG_BP_HOOK"</tt><tt class="py-op">]</tt><tt class="py-op">:</tt> </tt>
|
|
<a name="L322"></a><tt class="py-lineno">322</tt> <tt class="py-line"> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt class="py-name">Setloggingbreakpoint</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L323"></a><tt class="py-lineno">323</tt> <tt class="py-line"> <tt class="py-name">pickled_object</tt> <tt class="py-op">=</tt> <tt class="py-name">pickle</tt><tt class="py-op">.</tt><tt class="py-name">dumps</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L324"></a><tt class="py-lineno">324</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt class="py-name">Addhook</tt><tt class="py-op">(</tt> <tt class="py-name">pickled_object</tt> <tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt><tt class="py-op">,</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">address</tt><tt class="py-op">,</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">force</tt><tt class="py-op">,</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">timeout</tt><tt class="py-op">,</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">mode</tt><tt class="py-op">)</tt> </tt>
|
|
</div><a name="L325"></a><tt class="py-lineno">325</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook._run"></a><div id="Hook._run-def"><a name="L326"></a><tt class="py-lineno">326</tt> <a class="py-toggle" href="#" id="Hook._run-toggle" onclick="return toggle('Hook._run');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#_run">_run</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">regs</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook._run-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook._run-expanded"><a name="L327"></a><tt class="py-lineno">327</tt> <tt class="py-line"> <tt class="py-docstring">"""regs is the actual cpu context, be sure of using this values</tt> </tt>
|
|
<a name="L328"></a><tt class="py-lineno">328</tt> <tt class="py-line"><tt class="py-docstring"> and not the ones from imm.getRegs() at hook time"""</tt> </tt>
|
|
<a name="L329"></a><tt class="py-lineno">329</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">regs</tt><tt class="py-op">=</tt><tt class="py-name">regs</tt> </tt>
|
|
<a name="L330"></a><tt class="py-lineno">330</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-58" class="py-name" targets="Method Libs.libhook.Hook.run()=Libs.libhook.Hook-class.html#run"><a title="Libs.libhook.Hook.run" class="py-name" href="#" onclick="return doclink('link-58', 'run', 'link-58');">run</a></tt><tt class="py-op">(</tt><tt class="py-name">regs</tt><tt class="py-op">)</tt> </tt>
|
|
</div><a name="L331"></a><tt class="py-lineno">331</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook._runTimeout"></a><div id="Hook._runTimeout-def"><a name="L332"></a><tt class="py-lineno">332</tt> <a class="py-toggle" href="#" id="Hook._runTimeout-toggle" onclick="return toggle('Hook._runTimeout');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#_runTimeout">_runTimeout</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">regs</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook._runTimeout-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook._runTimeout-expanded"><a name="L333"></a><tt class="py-lineno">333</tt> <tt class="py-line"> <tt class="py-docstring">"""regs is the actual cpu context, be sure of using this values</tt> </tt>
|
|
<a name="L334"></a><tt class="py-lineno">334</tt> <tt class="py-line"><tt class="py-docstring"> and not the ones from imm.getRegs() at hook time"""</tt> </tt>
|
|
<a name="L335"></a><tt class="py-lineno">335</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">regs</tt><tt class="py-op">=</tt><tt class="py-name">regs</tt> </tt>
|
|
<a name="L336"></a><tt class="py-lineno">336</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-59" class="py-name" targets="Method Libs.libhook.Hook.runTimeout()=Libs.libhook.Hook-class.html#runTimeout"><a title="Libs.libhook.Hook.runTimeout" class="py-name" href="#" onclick="return doclink('link-59', 'runTimeout', 'link-59');">runTimeout</a></tt><tt class="py-op">(</tt><tt class="py-name">regs</tt><tt class="py-op">)</tt> </tt>
|
|
</div><a name="L337"></a><tt class="py-lineno">337</tt> <tt class="py-line"> </tt>
|
|
<a name="L338"></a><tt class="py-lineno">338</tt> <tt class="py-line"> </tt>
|
|
<a name="L339"></a><tt class="py-lineno">339</tt> <tt class="py-line"> <tt class="py-comment"># function that will be runned once the hook is triggered</tt> </tt>
|
|
<a name="Hook.run"></a><div id="Hook.run-def"><a name="L340"></a><tt class="py-lineno">340</tt> <a class="py-toggle" href="#" id="Hook.run-toggle" onclick="return toggle('Hook.run');">-</a><tt class="py-line"><tt class="py-comment"></tt> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#run">run</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">regs</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.run-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.run-expanded"><a name="L341"></a><tt class="py-lineno">341</tt> <tt class="py-line"> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt id="link-60" class="py-name" targets="Method Libs.immlib.Debugger.Error()=Libs.immlib.Debugger-class.html#Error"><a title="Libs.immlib.Debugger.Error" class="py-name" href="#" onclick="return doclink('link-60', 'Error', 'link-60');">Error</a></tt><tt class="py-op">(</tt><tt class="py-string">"Your hook doesnt seem to have run() defined"</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L342"></a><tt class="py-lineno">342</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> </tt>
|
|
</div><a name="L343"></a><tt class="py-lineno">343</tt> <tt class="py-line"> </tt>
|
|
<a name="Hook.runTimeout"></a><div id="Hook.runTimeout-def"><a name="L344"></a><tt class="py-lineno">344</tt> <a class="py-toggle" href="#" id="Hook.runTimeout-toggle" onclick="return toggle('Hook.runTimeout');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.Hook-class.html#runTimeout">runTimeout</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">regs</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="Hook.runTimeout-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="Hook.runTimeout-expanded"><a name="L345"></a><tt class="py-lineno">345</tt> <tt class="py-line"> <tt class="py-name">debugger</tt><tt class="py-op">.</tt><tt id="link-61" class="py-name"><a title="Libs.immlib.Debugger.Error" class="py-name" href="#" onclick="return doclink('link-61', 'Error', 'link-60');">Error</a></tt><tt class="py-op">(</tt><tt class="py-string">"Your hook doesnt seem to have runTimeout() defined"</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L346"></a><tt class="py-lineno">346</tt> <tt class="py-line"> <tt class="py-keyword">return</tt> </tt>
|
|
</div></div><a name="L347"></a><tt class="py-lineno">347</tt> <tt class="py-line"> </tt>
|
|
<a name="L348"></a><tt class="py-lineno">348</tt> <tt class="py-line"> </tt>
|
|
<a name="BpHook"></a><div id="BpHook-def"><a name="L349"></a><tt class="py-lineno">349</tt> <a class="py-toggle" href="#" id="BpHook-toggle" onclick="return toggle('BpHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.BpHook-class.html">BpHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="BpHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="BpHook-expanded"><a name="BpHook.__init__"></a><div id="BpHook.__init__-def"><a name="L350"></a><tt class="py-lineno">350</tt> <a class="py-toggle" href="#" id="BpHook.__init__-toggle" onclick="return toggle('BpHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.BpHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="BpHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="BpHook.__init__-expanded"><a name="L351"></a><tt class="py-lineno">351</tt> <tt class="py-line"> <tt id="link-62" class="py-name" targets="Method Libs.libhook.FastLogHook.Hook()=Libs.libhook.FastLogHook-class.html#Hook,Class Libs.libhook.Hook=Libs.libhook.Hook-class.html"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-62', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-63" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-63', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L352"></a><tt class="py-lineno">352</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-64" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-64', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"ORDINARY_BP_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L353"></a><tt class="py-lineno">353</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"BreakpointHook"</tt> </tt>
|
|
</div></div><a name="L354"></a><tt class="py-lineno">354</tt> <tt class="py-line"> </tt>
|
|
<a name="LogBpHook"></a><div id="LogBpHook-def"><a name="L355"></a><tt class="py-lineno">355</tt> <a class="py-toggle" href="#" id="LogBpHook-toggle" onclick="return toggle('LogBpHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.LogBpHook-class.html">LogBpHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="LogBpHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="LogBpHook-expanded"><a name="LogBpHook.__init__"></a><div id="LogBpHook.__init__-def"><a name="L356"></a><tt class="py-lineno">356</tt> <a class="py-toggle" href="#" id="LogBpHook.__init__-toggle" onclick="return toggle('LogBpHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.LogBpHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="LogBpHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="LogBpHook.__init__-expanded"><a name="L357"></a><tt class="py-lineno">357</tt> <tt class="py-line"> <tt id="link-65" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-65', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-66" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-66', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L358"></a><tt class="py-lineno">358</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-67" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-67', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"LOG_BP_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L359"></a><tt class="py-lineno">359</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"LoggingPointHook"</tt> </tt>
|
|
</div></div><a name="L360"></a><tt class="py-lineno">360</tt> <tt class="py-line"> </tt>
|
|
<a name="PreBpHook"></a><div id="PreBpHook-def"><a name="L361"></a><tt class="py-lineno">361</tt> <a class="py-toggle" href="#" id="PreBpHook-toggle" onclick="return toggle('PreBpHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.PreBpHook-class.html">PreBpHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="PreBpHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="PreBpHook-expanded"><a name="PreBpHook.__init__"></a><div id="PreBpHook.__init__-def"><a name="L362"></a><tt class="py-lineno">362</tt> <a class="py-toggle" href="#" id="PreBpHook.__init__-toggle" onclick="return toggle('PreBpHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.PreBpHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="PreBpHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="PreBpHook.__init__-expanded"><a name="L363"></a><tt class="py-lineno">363</tt> <tt class="py-line"> <tt id="link-68" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-68', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-69" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-69', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L364"></a><tt class="py-lineno">364</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-70" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-70', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"PRE_BP_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L365"></a><tt class="py-lineno">365</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"PreBreakpointHook"</tt> </tt>
|
|
</div></div><a name="L366"></a><tt class="py-lineno">366</tt> <tt class="py-line"> </tt>
|
|
<a name="AllExceptHook"></a><div id="AllExceptHook-def"><a name="L367"></a><tt class="py-lineno">367</tt> <a class="py-toggle" href="#" id="AllExceptHook-toggle" onclick="return toggle('AllExceptHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.AllExceptHook-class.html">AllExceptHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="AllExceptHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="AllExceptHook-expanded"><a name="AllExceptHook.__init__"></a><div id="AllExceptHook.__init__-def"><a name="L368"></a><tt class="py-lineno">368</tt> <a class="py-toggle" href="#" id="AllExceptHook.__init__-toggle" onclick="return toggle('AllExceptHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.AllExceptHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="AllExceptHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="AllExceptHook.__init__-expanded"><a name="L369"></a><tt class="py-lineno">369</tt> <tt class="py-line"> <tt id="link-71" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-71', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-72" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-72', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L370"></a><tt class="py-lineno">370</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-73" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-73', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"EVERY_EXCEPTION_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L371"></a><tt class="py-lineno">371</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"EveryExceptionHook"</tt> </tt>
|
|
</div></div><a name="L372"></a><tt class="py-lineno">372</tt> <tt class="py-line"> </tt>
|
|
<a name="PostAnalysisHook"></a><div id="PostAnalysisHook-def"><a name="L373"></a><tt class="py-lineno">373</tt> <a class="py-toggle" href="#" id="PostAnalysisHook-toggle" onclick="return toggle('PostAnalysisHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.PostAnalysisHook-class.html">PostAnalysisHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="PostAnalysisHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="PostAnalysisHook-expanded"><a name="PostAnalysisHook.__init__"></a><div id="PostAnalysisHook.__init__-def"><a name="L374"></a><tt class="py-lineno">374</tt> <a class="py-toggle" href="#" id="PostAnalysisHook.__init__-toggle" onclick="return toggle('PostAnalysisHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.PostAnalysisHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="PostAnalysisHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="PostAnalysisHook.__init__-expanded"><a name="L375"></a><tt class="py-lineno">375</tt> <tt class="py-line"> <tt id="link-74" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-74', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-75" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-75', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L376"></a><tt class="py-lineno">376</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-76" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-76', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"POST_ANALYSIS_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L377"></a><tt class="py-lineno">377</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"PostAnalysisHook"</tt> </tt>
|
|
</div></div><a name="L378"></a><tt class="py-lineno">378</tt> <tt class="py-line"> </tt>
|
|
<a name="AccessViolationHook"></a><div id="AccessViolationHook-def"><a name="L379"></a><tt class="py-lineno">379</tt> <a class="py-toggle" href="#" id="AccessViolationHook-toggle" onclick="return toggle('AccessViolationHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.AccessViolationHook-class.html">AccessViolationHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="AccessViolationHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="AccessViolationHook-expanded"><a name="AccessViolationHook.__init__"></a><div id="AccessViolationHook.__init__-def"><a name="L380"></a><tt class="py-lineno">380</tt> <a class="py-toggle" href="#" id="AccessViolationHook.__init__-toggle" onclick="return toggle('AccessViolationHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.AccessViolationHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="AccessViolationHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="AccessViolationHook.__init__-expanded"><a name="L381"></a><tt class="py-lineno">381</tt> <tt class="py-line"> <tt id="link-77" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-77', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-78" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-78', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L382"></a><tt class="py-lineno">382</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-79" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-79', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"ACCESS_VIOLATION_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L383"></a><tt class="py-lineno">383</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"AcessViolationHook"</tt> </tt>
|
|
</div></div><a name="L384"></a><tt class="py-lineno">384</tt> <tt class="py-line"> </tt>
|
|
<a name="RunUntilAV"></a><div id="RunUntilAV-def"><a name="L385"></a><tt class="py-lineno">385</tt> <a class="py-toggle" href="#" id="RunUntilAV-toggle" onclick="return toggle('RunUntilAV');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.RunUntilAV-class.html">RunUntilAV</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="RunUntilAV-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="RunUntilAV-expanded"><a name="RunUntilAV.__init__"></a><div id="RunUntilAV.__init__-def"><a name="L386"></a><tt class="py-lineno">386</tt> <a class="py-toggle" href="#" id="RunUntilAV.__init__-toggle" onclick="return toggle('RunUntilAV.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.RunUntilAV-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt><tt class="py-param">imm</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="RunUntilAV.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="RunUntilAV.__init__-expanded"><a name="L387"></a><tt class="py-lineno">387</tt> <tt class="py-line"> <tt id="link-80" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-80', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-81" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-81', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L388"></a><tt class="py-lineno">388</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-82" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-82', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"ACCESS_VIOLATION_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L389"></a><tt class="py-lineno">389</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"AcessViolationHook"</tt> </tt>
|
|
<a name="L390"></a><tt class="py-lineno">390</tt> <tt class="py-line"> <tt class="py-name">imm</tt><tt class="py-op">.</tt><tt id="link-83" class="py-name" targets="Method Libs.immlib.Debugger.Run()=Libs.immlib.Debugger-class.html#Run"><a title="Libs.immlib.Debugger.Run" class="py-name" href="#" onclick="return doclink('link-83', 'Run', 'link-83');">Run</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
|
|
</div></div><a name="L391"></a><tt class="py-lineno">391</tt> <tt class="py-line"> </tt>
|
|
<a name="L392"></a><tt class="py-lineno">392</tt> <tt class="py-line"> </tt>
|
|
<a name="LoadDLLHook"></a><div id="LoadDLLHook-def"><a name="L393"></a><tt class="py-lineno">393</tt> <a class="py-toggle" href="#" id="LoadDLLHook-toggle" onclick="return toggle('LoadDLLHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.LoadDLLHook-class.html">LoadDLLHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="LoadDLLHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="LoadDLLHook-expanded"><a name="LoadDLLHook.__init__"></a><div id="LoadDLLHook.__init__-def"><a name="L394"></a><tt class="py-lineno">394</tt> <a class="py-toggle" href="#" id="LoadDLLHook.__init__-toggle" onclick="return toggle('LoadDLLHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.LoadDLLHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="LoadDLLHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="LoadDLLHook.__init__-expanded"><a name="L395"></a><tt class="py-lineno">395</tt> <tt class="py-line"> <tt id="link-84" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-84', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-85" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-85', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L396"></a><tt class="py-lineno">396</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-86" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-86', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"LOAD_DLL_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L397"></a><tt class="py-lineno">397</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"LoadDLLHook"</tt> </tt>
|
|
</div></div><a name="L398"></a><tt class="py-lineno">398</tt> <tt class="py-line"> </tt>
|
|
<a name="UnloadDLLHook"></a><div id="UnloadDLLHook-def"><a name="L399"></a><tt class="py-lineno">399</tt> <a class="py-toggle" href="#" id="UnloadDLLHook-toggle" onclick="return toggle('UnloadDLLHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.UnloadDLLHook-class.html">UnloadDLLHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="UnloadDLLHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="UnloadDLLHook-expanded"><a name="UnloadDLLHook.__init__"></a><div id="UnloadDLLHook.__init__-def"><a name="L400"></a><tt class="py-lineno">400</tt> <a class="py-toggle" href="#" id="UnloadDLLHook.__init__-toggle" onclick="return toggle('UnloadDLLHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.UnloadDLLHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="UnloadDLLHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="UnloadDLLHook.__init__-expanded"><a name="L401"></a><tt class="py-lineno">401</tt> <tt class="py-line"> <tt id="link-87" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-87', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-88" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-88', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L402"></a><tt class="py-lineno">402</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-89" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-89', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"UNLOAD_DLL_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L403"></a><tt class="py-lineno">403</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"UnloadDLLHook"</tt> </tt>
|
|
</div></div><a name="L404"></a><tt class="py-lineno">404</tt> <tt class="py-line"> </tt>
|
|
<a name="CreateThreadHook"></a><div id="CreateThreadHook-def"><a name="L405"></a><tt class="py-lineno">405</tt> <a class="py-toggle" href="#" id="CreateThreadHook-toggle" onclick="return toggle('CreateThreadHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.CreateThreadHook-class.html">CreateThreadHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="CreateThreadHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="CreateThreadHook-expanded"><a name="CreateThreadHook.__init__"></a><div id="CreateThreadHook.__init__-def"><a name="L406"></a><tt class="py-lineno">406</tt> <a class="py-toggle" href="#" id="CreateThreadHook.__init__-toggle" onclick="return toggle('CreateThreadHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.CreateThreadHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="CreateThreadHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="CreateThreadHook.__init__-expanded"><a name="L407"></a><tt class="py-lineno">407</tt> <tt class="py-line"> <tt id="link-90" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-90', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-91" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-91', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L408"></a><tt class="py-lineno">408</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-92" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-92', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"CREATE_THREAD_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L409"></a><tt class="py-lineno">409</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"CreateThreadHook"</tt> </tt>
|
|
</div></div><a name="L410"></a><tt class="py-lineno">410</tt> <tt class="py-line"> </tt>
|
|
<a name="ExitThreadHook"></a><div id="ExitThreadHook-def"><a name="L411"></a><tt class="py-lineno">411</tt> <a class="py-toggle" href="#" id="ExitThreadHook-toggle" onclick="return toggle('ExitThreadHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.ExitThreadHook-class.html">ExitThreadHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="ExitThreadHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="ExitThreadHook-expanded"><a name="ExitThreadHook.__init__"></a><div id="ExitThreadHook.__init__-def"><a name="L412"></a><tt class="py-lineno">412</tt> <a class="py-toggle" href="#" id="ExitThreadHook.__init__-toggle" onclick="return toggle('ExitThreadHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.ExitThreadHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="ExitThreadHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="ExitThreadHook.__init__-expanded"><a name="L413"></a><tt class="py-lineno">413</tt> <tt class="py-line"> <tt id="link-93" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-93', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-94" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-94', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L414"></a><tt class="py-lineno">414</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-95" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-95', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"EXIT_THREAD_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L415"></a><tt class="py-lineno">415</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"ExitThreadHook"</tt> </tt>
|
|
</div></div><a name="L416"></a><tt class="py-lineno">416</tt> <tt class="py-line"> </tt>
|
|
<a name="CreateProcessHook"></a><div id="CreateProcessHook-def"><a name="L417"></a><tt class="py-lineno">417</tt> <a class="py-toggle" href="#" id="CreateProcessHook-toggle" onclick="return toggle('CreateProcessHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.CreateProcessHook-class.html">CreateProcessHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="CreateProcessHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="CreateProcessHook-expanded"><a name="CreateProcessHook.__init__"></a><div id="CreateProcessHook.__init__-def"><a name="L418"></a><tt class="py-lineno">418</tt> <a class="py-toggle" href="#" id="CreateProcessHook.__init__-toggle" onclick="return toggle('CreateProcessHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.CreateProcessHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="CreateProcessHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="CreateProcessHook.__init__-expanded"><a name="L419"></a><tt class="py-lineno">419</tt> <tt class="py-line"> <tt id="link-96" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-96', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-97" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-97', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L420"></a><tt class="py-lineno">420</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-98" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-98', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"CREATE_PROCESS_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L421"></a><tt class="py-lineno">421</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"CreateProcessHook"</tt> </tt>
|
|
</div></div><a name="L422"></a><tt class="py-lineno">422</tt> <tt class="py-line"> </tt>
|
|
<a name="ExitProcessHook"></a><div id="ExitProcessHook-def"><a name="L423"></a><tt class="py-lineno">423</tt> <a class="py-toggle" href="#" id="ExitProcessHook-toggle" onclick="return toggle('ExitProcessHook');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="Libs.libhook.ExitProcessHook-class.html">ExitProcessHook</a><tt class="py-op">(</tt><tt class="py-base-class">Hook</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="ExitProcessHook-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="ExitProcessHook-expanded"><a name="ExitProcessHook.__init__"></a><div id="ExitProcessHook.__init__-def"><a name="L424"></a><tt class="py-lineno">424</tt> <a class="py-toggle" href="#" id="ExitProcessHook.__init__-toggle" onclick="return toggle('ExitProcessHook.__init__');">-</a><tt class="py-line"> <tt class="py-keyword">def</tt> <a class="py-def-name" href="Libs.libhook.ExitProcessHook-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
|
|
</div><div id="ExitProcessHook.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="ExitProcessHook.__init__-expanded"><a name="L425"></a><tt class="py-lineno">425</tt> <tt class="py-line"> <tt id="link-99" class="py-name"><a title="Libs.libhook.FastLogHook.Hook
|
|
Libs.libhook.Hook" class="py-name" href="#" onclick="return doclink('link-99', 'Hook', 'link-62');">Hook</a></tt><tt class="py-op">.</tt><tt id="link-100" class="py-name"><a title="Libs.debugtypes.Handle.__init__
|
|
Libs.debugtypes.MemoryPage.__init__
|
|
Libs.debugtypes.Module.__init__
|
|
Libs.debugtypes.PEB.__init__
|
|
Libs.debugtypes.Stack.__init__
|
|
Libs.debugtypes.Symbol.__init__
|
|
Libs.debugtypes.Table.__init__
|
|
Libs.graphclass.Draw.__init__
|
|
Libs.graphclass.Graph.__init__
|
|
Libs.graphclass.Line.__init__
|
|
Libs.graphclass.Vertex.__init__
|
|
Libs.graphclass.vcgNode.__init__
|
|
Libs.immlib.Debugger.__init__
|
|
Libs.immlib.DictTypes.__init__
|
|
Libs.immutils.antifloatdict.__init__
|
|
Libs.immvcglib.ParseVCGList.__init__
|
|
Libs.immvcglib.graphTree.__init__
|
|
Libs.libanalyze.BasicBlock.__init__
|
|
Libs.libanalyze.Decode.__init__
|
|
Libs.libanalyze.Function.__init__
|
|
Libs.libanalyze.JMCBasicBlock.__init__
|
|
Libs.libanalyze.JMPBasicBlock.__init__
|
|
Libs.libanalyze.RETBasicBlock.__init__
|
|
Libs.libanalyze.TraceArgs.__init__
|
|
Libs.libanalyze.XREFBasicBlock.__init__
|
|
Libs.libanalyze.opCode.__init__
|
|
Libs.libdatatype.Data.__init__
|
|
Libs.libdatatype.DataTypes.__init__
|
|
Libs.libdatatype.DoubleLinkedList.__init__
|
|
Libs.libdatatype.Pointer.__init__
|
|
Libs.libdatatype.String.__init__
|
|
Libs.libdatatype.Unicode.__init__
|
|
Libs.libevent.CreateProcessEvent.__init__
|
|
Libs.libevent.CreateThreadEvent.__init__
|
|
Libs.libevent.Event.__init__
|
|
Libs.libevent.ExceptionEvent.__init__
|
|
Libs.libevent.ExceptionRecord.__init__
|
|
Libs.libevent.ExitProcessEvent.__init__
|
|
Libs.libevent.ExitThreadEvent.__init__
|
|
Libs.libevent.LoadDLLEvent.__init__
|
|
Libs.libevent.OutputDebugEvent.__init__
|
|
Libs.libevent.RIPEvent.__init__
|
|
Libs.libevent.UnloadDLLEvent.__init__
|
|
Libs.libheap.Blocks.__init__
|
|
Libs.libheap.Bucket.__init__
|
|
Libs.libheap.LFHeap.__init__
|
|
Libs.libheap.LocalData.__init__
|
|
Libs.libheap.LocalSegmentInfo.__init__
|
|
Libs.libheap.PHeap.__init__
|
|
Libs.libheap.PHeapLookaside.__init__
|
|
Libs.libheap.PLook.__init__
|
|
Libs.libheap.SearchHeap.__init__
|
|
Libs.libheap.Segment.__init__
|
|
Libs.libheap.SubSegment.__init__
|
|
Libs.libheap.UserData.__init__
|
|
Libs.libheap.UserMemoryCache.__init__
|
|
Libs.libheap.VistaPHeap.__init__
|
|
Libs.libheap.win32heapchunk.__init__
|
|
Libs.libheap.win32vistaheapchunk.__init__
|
|
Libs.libhook.AccessViolationHook.__init__
|
|
Libs.libhook.AllExceptHook.__init__
|
|
Libs.libhook.BpHook.__init__
|
|
Libs.libhook.CreateProcessHook.__init__
|
|
Libs.libhook.CreateThreadHook.__init__
|
|
Libs.libhook.ExitProcessHook.__init__
|
|
Libs.libhook.ExitThreadHook.__init__
|
|
Libs.libhook.FastLogHook.__init__
|
|
Libs.libhook.Hook.__init__
|
|
Libs.libhook.LoadDLLHook.__init__
|
|
Libs.libhook.LogBpHook.__init__
|
|
Libs.libhook.PostAnalysisHook.__init__
|
|
Libs.libhook.PreBpHook.__init__
|
|
Libs.libhook.RunUntilAV.__init__
|
|
Libs.libhook.STDCALLFastLogHook.__init__
|
|
Libs.libhook.UnloadDLLHook.__init__
|
|
Libs.librecognition.FunctionRecognition.__init__
|
|
Libs.librecognition.MultiCSVIterator.__init__
|
|
Libs.pelib.Directory.__init__
|
|
Libs.pelib.IMGOPThdr.__init__
|
|
Libs.pelib.IMGhdr.__init__
|
|
Libs.pelib.ImageExportDirectory.__init__
|
|
Libs.pelib.ImageImportByName.__init__
|
|
Libs.pelib.ImportDescriptor.__init__
|
|
Libs.pelib.MZ.__init__
|
|
Libs.pelib.PE.__init__
|
|
Libs.pelib.PElib.__init__
|
|
Libs.pelib.Section.__init__" class="py-name" href="#" onclick="return doclink('link-100', '__init__', 'link-53');">__init__</a></tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">)</tt> </tt>
|
|
<a name="L426"></a><tt class="py-lineno">426</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">type</tt> <tt class="py-op">=</tt> <tt id="link-101" class="py-name"><a title="Libs.immlib.HookTypes
|
|
Libs.libhook.HookTypes" class="py-name" href="#" onclick="return doclink('link-101', 'HookTypes', 'link-4');">HookTypes</a></tt><tt class="py-op">[</tt><tt class="py-string">"EXIT_PROCESS_HOOK"</tt><tt class="py-op">]</tt> </tt>
|
|
<a name="L427"></a><tt class="py-lineno">427</tt> <tt class="py-line"> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">desc</tt> <tt class="py-op">=</tt> <tt class="py-string">"ExitProcessHook"</tt> </tt>
|
|
</div></div><a name="L428"></a><tt class="py-lineno">428</tt> <tt class="py-line"> </tt><script type="text/javascript">
|
|
<!--
|
|
expandto(location.href);
|
|
// -->
|
|
</script>
|
|
</pre>
|
|
<br />
|
|
<!-- ==================== NAVIGATION BAR ==================== -->
|
|
<table class="navbar" border="0" width="100%" cellpadding="0"
|
|
bgcolor="#a0c0ff" cellspacing="0">
|
|
<tr valign="middle">
|
|
|
|
<!-- Tree link -->
|
|
<th> <a
|
|
href="module-tree.html">Trees</a> </th>
|
|
|
|
<!-- Index link -->
|
|
<th> <a
|
|
href="identifier-index.html">Indices</a> </th>
|
|
|
|
<!-- Help link -->
|
|
<th> <a
|
|
href="help.html">Help</a> </th>
|
|
|
|
<!-- Project homepage -->
|
|
<th class="navbar" align="right" width="100%">
|
|
<table border="0" cellpadding="0" cellspacing="0">
|
|
<tr><th class="navbar" align="center"
|
|
>Immunity Debugger API Reference</th>
|
|
</tr></table></th>
|
|
</tr>
|
|
</table>
|
|
<table border="0" cellpadding="0" cellspacing="0" width="100%%">
|
|
<tr>
|
|
<td align="left" class="footer">
|
|
Generated by Epydoc 3.0.1 on Thu Sep 11 14:06:38 2008
|
|
</td>
|
|
<td align="right" class="footer">
|
|
<a target="mainFrame" href="http://epydoc.sourceforge.net"
|
|
>http://epydoc.sourceforge.net</a>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
<script type="text/javascript">
|
|
<!--
|
|
// Private objects are initially displayed (because if
|
|
// javascript is turned off then we want them to be
|
|
// visible); but by default, we want to hide them. So hide
|
|
// them unless we have a cookie that says to show them.
|
|
checkCookie();
|
|
// -->
|
|
</script>
|
|
</body>
|
|
</html>
|