Package Libs :: Module immlib

[frames] | no frames]

Module immlib

source code

Immunity Debugger API for python

Immunity Inc. Debugger API for python

Classes

[hide private]

DictTypes

Debugger

Variables

[hide private]

__VERSION__ = '1.3'

BpKeys = {'VK_F2': 113, 'VK_F4': 115}

BpFlags = {'TY_KEEPCOND': 16384L, 'TY_RTRACE': 65536, 'TY_DISA...

HB_FREE = 0

HB_CODE = 1

HB_ACCESS = 2

HB_WRITE = 3

HB_IO = 4

HB_ONESHOT = 5

HB_STOPAN = 6

HB_TEMP = 7

DebugerStatus = {'NONE': 0, 'FINISHED': 4, 'RUNNING': 3, 'STOPPED': ...

PageFlags = {32: 'R E', 1: ' ', 2: 'R ', 4: 'RW ', 8: 'RW COW', ...

ImmFonts = {'info': 10, 'main': 8, 'courier': 3, 'lucida': 4, '...

BpMemFlags = {'S': 4096L, 'R': 1, 'W': 2}

MemoryProtection = {'PAGE_EXECUTE_READ': 32, 'PAGE_READWRITE': 4, 'PAGE...

IgnoreSingleStep = {'DISABLE': 0, 'FORCE': 1, 'CONTINUE': 2}

jmpTypeFlags = {'JUMP': 0, 'CALL': 3, 'JUMP_COND': 1, 'JUMP_SWITCH'...

NM_NONAME = 0

NM_MODSEARCH = 253

NM_ANYNAME = 255

NM_PLUGCMD = 48

NM_LABEL = 49

NM_EXPORT = 50

NM_IMPORT = 51

NM_LIBRARY = 52

NM_CONST = 53

NM_COMMENT = 54

NM_LIBCOMM = 55

NM_BREAK = 56

NM_ARG = 57

NM_ANALYSE = 58

NM_BREAKEXPR = 59

NM_BREAKEXPL = 60

NM_ASSUME = 61

NM_STRUCT = 62

NM_CASE = 63

NM_INSPECT = 64

NM_WATCH = 65

NM_ASM = 66

NM_FINDASM = 67

NM_LASTWATCH = 72

NM_SOURCE = 73

NM_REFTXT = 74

NM_GOTO = 75

NM_GOTODUMP = 76

NM_TRPAUSE = 77

NM_DLLPARMS = 80

NM_DEBUG = 128

NM_IMPLIB = 129

NM_IMPNAME = 130

NM_FONT = 131

NM_SCHEME = 132

NM_GOTOSTACK = 133

NM_HILITE = 134

NM_IMCALL = 254

ImmDrawColors = {'Blue': 16711680, 'MedGray': 10789024, 'Fuchsia': 1...

COUNT = 100

C_BAD = 240

C_CAL = 112

C_CMD = 0

C_FLG = 144

C_FLT = 64

C_JMC = 96

C_JMP = 80

C_MMX = 48

C_NOW = 224

C_POP = 32

C_PRI = 192

C_PSH = 16

C_REP = 176

C_RET = 128

C_RTF = 160

C_SSE = 208

C_TYPEMASK = 240

DECR_3DNOW = 45

DECR_BYTE = 33

DECR_DWORD = 36

DECR_FLOAT10 = 41

DECR_ISREG = 32

DECR_QWORD = 40

DECR_SEG = 42

DECR_SSE = 46

DECR_TYPEMASK = 63

DECR_WORD = 34

DEC_3DNOW = 13

DEC_BYTE = 1

DEC_BYTESW = 17

DEC_CALLDEST = 31

DEC_CHECKED = 128

DEC_COMMAND = 29

DEC_CONST = 64

DEC_DWORD = 4

DEC_FLOAT10 = 9

DEC_FLOAT4 = 5

DEC_FLOAT8 = 7

DEC_FWORD = 6

DEC_JMPDEST = 30

DEC_NEXTCODE = 19

DEC_NEXTDATA = 3

DEC_PBODY = 64

DEC_PEND = 96

DEC_PROC = 32

DEC_PROCMASK = 96

DEC_QWORD = 8

DEC_SIGNED = 256

DEC_SSE = 14

DEC_STRING = 11

DEC_TBYTE = 10

DEC_TEXT = 16

DEC_TYPEMASK = 31

DEC_UNICODE = 12

DEC_UNKNOWN = 0

DEC_WORD = 2

DISASM_ALL = 5

DISASM_CODE = 4

DISASM_DATA = 1

DISASM_FILE = 3

DISASM_RTRACE = 6

DISASM_SIZE = 0

DISASM_TRACE = 2

EXCEPTION_CODE = {3221225725L: 'StackOverflow', 2147483649L: 'GuardPa...

FS_HOOK = 1

FS_PAUSE = 2

FS_UNHOOK = 0

HOOK_REG = {'ESP': '[ESP+0xC ]', 'EDI': '[ESP]', 'EAX': '[ESP+0...

HookTypes = {'LOG_BP_HOOK': 3909, 'UNLOAD_DLL_HOOK': 3904, 'POST...

RST_INDIRECT = 3

RST_INVALID = 0

RST_VALUE = 1

RST_VFIXUP = 2

RegisterName = {(0, 0, 0, 0, 1, 0, 0, 0): 'ESP', (0, 0, 1, 0, 0, 0,...

Variables Details

[hide private]

VERSION

None

Value:

'1.3'

BpKeys

None

Value:

{'VK_F2': 113, 'VK_F4': 115}

BpFlags

None

Value:

{'TY_ACTIVE': 512L,
 'TY_DISABLED': 1024,
 'TY_KEEPCODE': 8192L,
 'TY_KEEPCOND': 16384L,
 'TY_NOUPDATE': 32768,
 'TY_ONESHOT': 2048L,
 'TY_RTRACE': 65536,
 'TY_SET': 256L,
...

HB_FREE

None

Value:

HB_CODE

None

Value:

HB_ACCESS

None

Value:

HB_WRITE

None

Value:

HB_IO

None

Value:

HB_ONESHOT

None

Value:

HB_STOPAN

None

Value:

HB_TEMP

None

Value:

DebugerStatus

None

Value:

{'CLOSING': 5,
 'EVENT': 2,
 'FINISHED': 4,
 'NONE': 0,
 'RUNNING': 3,
 'STOPPED': 1}

Register

None

Value:

{'EAX': 0,
 'EBP': 5,
 'EBX': 3,
 'ECX': 1,
 'EDI': 7,
 'EDX': 2,
 'EIP': 8,
 'ESI': 6,
...

PageFlags

None

Value:

{1: '   ',
 2: 'R  ',
 4: 'RW ',
 8: 'RW  COW',
 16: '  E',
 32: 'R E',
 64: 'RWE',
 128: 'RWE  COW'}

ImmFonts

None

Value:

{'courier': 3,
 'fixed': 0,
 'fixedsys': 2,
 'font5': 5,
 'font6': 6,
 'font7': 7,
 'info': 10,
 'lucida': 4,
...

BpMemFlags

None

Value:

{'S': 4096L, 'R': 1, 'W': 2}

MemoryProtection

None

Value:

{'PAGE_EXECUTE': 16,
 'PAGE_EXECUTE_READ': 32,
 'PAGE_EXECUTE_READWRITE': 64,
 'PAGE_EXECUTE_WRITECOPY': 128,
 'PAGE_NOACCESS': 1,
 'PAGE_READONLY': 2,
 'PAGE_READWRITE': 4,
 'PAGE_WRITECOPY': 8}

IgnoreSingleStep

None

Value:

{'DISABLE': 0, 'FORCE': 1, 'CONTINUE': 2}

jmpTypeFlags

None

Value:

{'CALL': 3, 'CALL_INTER': 4, 'JUMP': 0, 'JUMP_COND': 1, 'JUMP_SWITCH':
 2}

NM_NONAME

None

Value:

NM_MODSEARCH

None

Value:

NM_ANYNAME

None

Value:

NM_PLUGCMD

None

Value:

NM_LABEL

None

Value:

NM_EXPORT

None

Value:

NM_IMPORT

None

Value:

NM_LIBRARY

None

Value:

NM_CONST

None

Value:

NM_COMMENT

None

Value:

NM_LIBCOMM

None

Value:

NM_BREAK

None

Value:

NM_ARG

None

Value:

NM_ANALYSE

None

Value:

NM_BREAKEXPR

None

Value:

NM_BREAKEXPL

None

Value:

NM_ASSUME

None

Value:

NM_STRUCT

None

Value:

NM_CASE

None

Value:

NM_INSPECT

None

Value:

NM_WATCH

None

Value:

NM_ASM

None

Value:

NM_FINDASM

None

Value:

NM_LASTWATCH

None

Value:

NM_SOURCE

None

Value:

NM_REFTXT

None

Value:

NM_GOTO

None

Value:

NM_GOTODUMP

None

Value:

NM_TRPAUSE

None

Value:

NM_DLLPARMS

None

Value:

NM_DEBUG

None

Value:

NM_IMPLIB

None

Value:

NM_IMPNAME

None

Value:

NM_FONT

None

Value:

NM_SCHEME

None

Value:

NM_GOTOSTACK

None

Value:

NM_HILITE

None

Value:

NM_IMCALL

None

Value:

ImmDrawColors

None

Value:

{'Aqua': 16776960,
 'Black': 0,
 'Blue': 16711680,
 'Cream': 15793151,
 'DarkGray': 8421504,
 'Fuchsia': 16711935,
 'Gray': 8421504,
 'Green': 32768,
...

COUNT

None

Value:

C_BAD

None

Value:

C_CAL

None

Value:

C_CMD

None

Value:

C_FLG

None

Value:

C_FLT

None

Value:

C_JMC

None

Value:

C_JMP

None

Value:

C_MMX

None

Value:

C_NOW

None

Value:

C_POP

None

Value:

C_PRI

None

Value:

C_PSH

None

Value:

C_REP

None

Value:

C_RET

None

Value:

C_RTF

None

Value:

C_SSE

None

Value:

C_TYPEMASK

None

Value:

DECR_3DNOW

None

Value:

DECR_BYTE

None

Value:

DECR_DWORD

None

Value:

DECR_FLOAT10

None

Value:

DECR_ISREG

None

Value:

DECR_QWORD

None

Value:

DECR_SEG

None

Value:

DECR_SSE

None

Value:

DECR_TYPEMASK

None

Value:

DECR_WORD

None

Value:

DEC_3DNOW

None

Value:

DEC_BYTE

None

Value:

DEC_BYTESW

None

Value:

DEC_CALLDEST

None

Value:

DEC_CHECKED

None

Value:

DEC_COMMAND

None

Value:

DEC_CONST

None

Value:

DEC_DWORD

None

Value:

DEC_FLOAT10

None

Value:

DEC_FLOAT4

None

Value:

DEC_FLOAT8

None

Value:

DEC_FWORD

None

Value:

DEC_JMPDEST

None

Value:

DEC_NEXTCODE

None

Value:

DEC_NEXTDATA

None

Value:

DEC_PBODY

None

Value:

DEC_PEND

None

Value:

DEC_PROC

None

Value:

DEC_PROCMASK

None

Value:

DEC_QWORD

None

Value:

DEC_SIGNED

None

Value:

DEC_SSE

None

Value:

DEC_STRING

None

Value:

DEC_TBYTE

None

Value:

DEC_TEXT

None

Value:

DEC_TYPEMASK

None

Value:

DEC_UNICODE

None

Value:

DEC_UNKNOWN

None

Value:

DEC_WORD

None

Value:

DISASM_ALL

None

Value:

DISASM_CODE

None

Value:

DISASM_DATA

None

Value:

DISASM_FILE

None

Value:

DISASM_RTRACE

None

Value:

6                                               &n