Files
2013-03-25 15:33:17 -04:00

370 lines
14 KiB
HTML
Executable File

<?xml version="1.0" encoding="ascii"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Libs.libhook</title>
<link rel="stylesheet" href="epydoc.css" type="text/css" />
<script type="text/javascript" src="epydoc.js"></script>
</head>
<body bgcolor="white" text="black" link="blue" vlink="#204080"
alink="#204080">
<!-- ==================== NAVIGATION BAR ==================== -->
<table class="navbar" border="0" width="100%" cellpadding="0"
bgcolor="#a0c0ff" cellspacing="0">
<tr valign="middle">
<!-- Tree link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="module-tree.html">Trees</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Index link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="identifier-index.html">Indices</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Help link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="help.html">Help</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Project homepage -->
<th class="navbar" align="right" width="100%">
<table border="0" cellpadding="0" cellspacing="0">
<tr><th class="navbar" align="center"
>Immunity Debugger API Reference</th>
</tr></table></th>
</tr>
</table>
<table width="100%" cellpadding="0" cellspacing="0">
<tr valign="top">
<td width="100%">
<span class="breadcrumbs">
Package&nbsp;Libs ::
Module&nbsp;libhook
</span>
</td>
<td>
<table cellpadding="0" cellspacing="0">
<!-- hide/show private -->
<tr><td align="right"><span class="options">[<a href="javascript:void(0);" class="privatelink"
onclick="toggle_private();">hide&nbsp;private</a>]</span></td></tr>
<tr><td align="right"><span class="options"
>[<a href="frames.html" target="_top">frames</a
>]&nbsp;|&nbsp;<a href="Libs.libhook-module.html"
target="_top">no&nbsp;frames</a>]</span></td></tr>
</table>
</td>
</tr>
</table>
<!-- ==================== MODULE DESCRIPTION ==================== -->
<h1 class="epydoc">Module libhook</h1><p class="nomargin-top"><span class="codelink"><a href="Libs.libhook-pysrc.html">source&nbsp;code</a></span></p>
<p>(c) Immunity, Inc. 2004-2007</p>
<p><a href="http://www.immunityinc.com" target="_top">Immunity
Inc.</a></p>
<!-- ==================== CLASSES ==================== -->
<a name="section-Classes"></a>
<table class="summary" border="1" cellpadding="3"
cellspacing="0" width="100%" bgcolor="white">
<tr bgcolor="#70b0f0" class="table-header">
<td colspan="2" class="table-header">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td align="left"><span class="table-header">Classes</span></td>
<td align="right" valign="top"
><span class="options">[<a href="#section-Classes"
class="privatelink" onclick="toggle_private();"
>hide private</a>]</span></td>
</tr>
</table>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.FastLogHook-class.html" class="summary-name">FastLogHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.STDCALLFastLogHook-class.html" class="summary-name">STDCALLFastLogHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.Hook-class.html" class="summary-name">Hook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.BpHook-class.html" class="summary-name">BpHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.LogBpHook-class.html" class="summary-name">LogBpHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.PreBpHook-class.html" class="summary-name">PreBpHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.AllExceptHook-class.html" class="summary-name">AllExceptHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.PostAnalysisHook-class.html" class="summary-name">PostAnalysisHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.AccessViolationHook-class.html" class="summary-name">AccessViolationHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.RunUntilAV-class.html" class="summary-name">RunUntilAV</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.LoadDLLHook-class.html" class="summary-name">LoadDLLHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.UnloadDLLHook-class.html" class="summary-name">UnloadDLLHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.CreateThreadHook-class.html" class="summary-name">CreateThreadHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.ExitThreadHook-class.html" class="summary-name">ExitThreadHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.CreateProcessHook-class.html" class="summary-name">CreateProcessHook</a>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook.ExitProcessHook-class.html" class="summary-name">ExitProcessHook</a>
</td>
</tr>
</table>
<!-- ==================== VARIABLES ==================== -->
<a name="section-Variables"></a>
<table class="summary" border="1" cellpadding="3"
cellspacing="0" width="100%" bgcolor="white">
<tr bgcolor="#70b0f0" class="table-header">
<td colspan="2" class="table-header">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td align="left"><span class="table-header">Variables</span></td>
<td align="right" valign="top"
><span class="options">[<a href="#section-Variables"
class="privatelink" onclick="toggle_private();"
>hide private</a>]</span></td>
</tr>
</table>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a name="__VERSION__"></a><span class="summary-name">__VERSION__</span> = <code title="'1.1'">'1.1'</code>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a name="FS_UNHOOK"></a><span class="summary-name">FS_UNHOOK</span> = <code title="0">0</code>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a name="FS_HOOK"></a><span class="summary-name">FS_HOOK</span> = <code title="1">1</code>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a name="FS_PAUSE"></a><span class="summary-name">FS_PAUSE</span> = <code title="2">2</code>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook-module.html#HookTypes" class="summary-name">HookTypes</a> = <code title="{&quot;ORDINARY_BP_HOOK&quot;: 3900, &quot;LOG_BP_HOOK&quot;: 3909, &quot;EVERY_EXCEPTION_HOOK&quot;\
: 3901, &quot;POST_ANALYSIS_HOOK&quot;: 3902, &quot;ACCESS_VIOLATION_HOOK&quot;: 3910, &quot;LO\
AD_DLL_HOOK&quot;: 3903, &quot;UNLOAD_DLL_HOOK&quot;: 3904, &quot;CREATE_THREAD_HOOK&quot;: 390\
5, &quot;EXIT_THREAD_HOOK&quot;: 3906, &quot;CREATE_PROCESS_HOOK&quot;: 3907, &quot;EXIT_PROCES\
S_HOOK&quot;: 3908, &quot;PRE_BP_HOOK&quot;: 3911}">{&quot;ORDINARY_BP_HOOK&quot;: 3900, &quot;LOG_BP_HOOK&quot;: 3909, &quot;E<code class="variable-ellipsis">...</code></code>
</td>
</tr>
<tr>
<td width="15%" align="right" valign="top" class="summary">
<span class="summary-type">&nbsp;</span>
</td><td class="summary">
<a href="Libs.libhook-module.html#HOOK_REG" class="summary-name">HOOK_REG</a> = <code title="{'ESI': '[ESP+4 ]', 'EDI': '[ESP]', 'EBX': '[ESP+0x10]', 'EAX': '[ES\
P+0x1C]', 'ECX': '[ESP+0x18]', 'EDX': '[ESP+0x14]', 'EBP': '[ESP+0x8 ]\
', 'ESP': '[ESP+0xC ]'}">{'ESI': '[ESP+4 ]', 'EDI': '[ESP]', 'EBX': '[ESP+<code class="variable-ellipsis">...</code></code>
</td>
</tr>
</table>
<!-- ==================== VARIABLES DETAILS ==================== -->
<a name="section-VariablesDetails"></a>
<table class="details" border="1" cellpadding="3"
cellspacing="0" width="100%" bgcolor="white">
<tr bgcolor="#70b0f0" class="table-header">
<td colspan="2" class="table-header">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td align="left"><span class="table-header">Variables Details</span></td>
<td align="right" valign="top"
><span class="options">[<a href="#section-VariablesDetails"
class="privatelink" onclick="toggle_private();"
>hide private</a>]</span></td>
</tr>
</table>
</td>
</tr>
</table>
<a name="HookTypes"></a>
<div>
<table class="details" border="1" cellpadding="3"
cellspacing="0" width="100%" bgcolor="white">
<tr><td>
<h3 class="epydoc">HookTypes</h3>
<dl class="fields">
</dl>
<dl class="fields">
<dt>Value:</dt>
<dd><table><tr><td><pre class="variable">
{&quot;ORDINARY_BP_HOOK&quot;: 3900, &quot;LOG_BP_HOOK&quot;: 3909, &quot;EVERY_EXCEPTION_HOOK&quot;<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
: 3901, &quot;POST_ANALYSIS_HOOK&quot;: 3902, &quot;ACCESS_VIOLATION_HOOK&quot;: 3910, &quot;LO<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
AD_DLL_HOOK&quot;: 3903, &quot;UNLOAD_DLL_HOOK&quot;: 3904, &quot;CREATE_THREAD_HOOK&quot;: 390<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
5, &quot;EXIT_THREAD_HOOK&quot;: 3906, &quot;CREATE_PROCESS_HOOK&quot;: 3907, &quot;EXIT_PROCES<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
S_HOOK&quot;: 3908, &quot;PRE_BP_HOOK&quot;: 3911}
</pre></td></tr></table>
</dd>
</dl>
</td></tr></table>
</div>
<a name="HOOK_REG"></a>
<div>
<table class="details" border="1" cellpadding="3"
cellspacing="0" width="100%" bgcolor="white">
<tr><td>
<h3 class="epydoc">HOOK_REG</h3>
<dl class="fields">
</dl>
<dl class="fields">
<dt>Value:</dt>
<dd><table><tr><td><pre class="variable">
{'ESI': '[ESP+4 ]', 'EDI': '[ESP]', 'EBX': '[ESP+0x10]', 'EAX': '[ES<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
P+0x1C]', 'ECX': '[ESP+0x18]', 'EDX': '[ESP+0x14]', 'EBP': '[ESP+0x8 ]<span class="variable-linewrap"><img src="crarr.png" alt="\" /></span>
', 'ESP': '[ESP+0xC ]'}
</pre></td></tr></table>
</dd>
</dl>
</td></tr></table>
</div>
<br />
<!-- ==================== NAVIGATION BAR ==================== -->
<table class="navbar" border="0" width="100%" cellpadding="0"
bgcolor="#a0c0ff" cellspacing="0">
<tr valign="middle">
<!-- Tree link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="module-tree.html">Trees</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Index link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="identifier-index.html">Indices</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Help link -->
<th>&nbsp;&nbsp;&nbsp;<a
href="help.html">Help</a>&nbsp;&nbsp;&nbsp;</th>
<!-- Project homepage -->
<th class="navbar" align="right" width="100%">
<table border="0" cellpadding="0" cellspacing="0">
<tr><th class="navbar" align="center"
>Immunity Debugger API Reference</th>
</tr></table></th>
</tr>
</table>
<table border="0" cellpadding="0" cellspacing="0" width="100%%">
<tr>
<td align="left" class="footer">
Generated by Epydoc 3.0.1 on Thu Mar 17 18:43:02 2011
</td>
<td align="right" class="footer">
<a target="mainFrame" href="http://epydoc.sourceforge.net"
>http://epydoc.sourceforge.net</a>
</td>
</tr>
</table>
<script type="text/javascript">
<!--
// Private objects are initially displayed (because if
// javascript is turned off then we want them to be
// visible); but by default, we want to hide them. So hide
// them unless we have a cookie that says to show them.
checkCookie();
// -->
</script>
</body>
</html>