Trees       Indices       Help   
Immunity Debugger API Reference
Package Libs :: Module librecognition
[hide private]
[frames] | no frames]

Module librecognition

source code

(c) Immunity, Inc. 2004-2007

Immunity Inc.

Library for function recognizing

Classes [hide private]
  MultiCSVIterator
  FunctionRecognition

Variables [hide private]
  __VERSION__ = '1.2'
  COUNT = 100
  C_BAD = 240
  C_CAL = 112
  C_CMD = 0
  C_FLG = 144
  C_FLT = 64
  C_JMC = 96
  C_JMP = 80
  C_MMX = 48
  C_NOW = 224
  C_POP = 32
  C_PRI = 192
  C_PSH = 16
  C_REP = 176
  C_RET = 128
  C_RTF = 160
  C_SSE = 208
  C_TYPEMASK = 240
  DATA_PTR = 2
  DECR_3DNOW = 45
  DECR_BYTE = 33
  DECR_DWORD = 36
  DECR_FLOAT10 = 41
  DECR_ISREG = 32
  DECR_QWORD = 40
  DECR_SEG = 42
  DECR_SSE = 46
  DECR_TYPEMASK = 63
  DECR_WORD = 34
  DEC_3DNOW = 13
  DEC_BYTE = 1
  DEC_BYTESW = 17
  DEC_CALLDEST = 31
  DEC_CHECKED = 128
  DEC_COMMAND = 29
  DEC_CONST = 64
  DEC_DWORD = 4
  DEC_FLOAT10 = 9
  DEC_FLOAT4 = 5
  DEC_FLOAT8 = 7
  DEC_FWORD = 6
  DEC_JMPDEST = 30
  DEC_NEXTCODE = 19
  DEC_NEXTDATA = 3
  DEC_PBODY = 64
  DEC_PEND = 96
  DEC_PROC = 32
  DEC_PROCMASK = 96
  DEC_QWORD = 8
  DEC_SIGNED = 256
  DEC_SSE = 14
  DEC_STRING = 11
  DEC_TBYTE = 10
  DEC_TEXT = 16
  DEC_TYPEMASK = 31
  DEC_UNICODE = 12
  DEC_UNKNOWN = 0
  DEC_WORD = 2
  DIACRITICAL = 2
  DISASM_ALL = 5
  DISASM_CODE = 4
  DISASM_DATA = 1
  DISASM_FILE = 3
  DISASM_RTRACE = 6
  DISASM_SIZE = 0
  DISASM_TRACE = 2
  DOUBLEL = 4
  DWORD = 2
  FUNCTION_PTR = 1
  INT = 0
  MEM = 1
  MEM_ADDR = 3
  PLAINASCII = 1
  POINTER = 3
  PTR = 0
  RAREASCII = 16
  RST_INDIRECT = 3
  RST_INVALID = 0
  RST_VALUE = 1
  RST_VFIXUP = 2
  RegisterName = {(0, 0, 0, 0, 1, 0, 0, 0): 'ESP', (0, 0, 1, 0, 0, 0,...
  STACK_PTR = 3
  STRING = 1
  UNICODE = 2
  ctable = [0, 0, 0, 0, 0, 0, 0, 0, 0, 19, 19, 0, 0, 19, 0, 0, ...

Variables Details [hide private]

__VERSION__

None
Value:
'1.2'

COUNT

None
Value:
100                                                                   

C_BAD

None
Value:
240                                                                   

C_CAL

None
Value:
112                                                                   

C_CMD

None
Value:
0                                                                     

C_FLG

None
Value:
144                                                                   

C_FLT

None
Value:
64                                                                    

C_JMC

None
Value:
96                                                                    

C_JMP

None
Value:
80                                                                    

C_MMX

None
Value:
48                                                                    

C_NOW

None
Value:
224                                                                   

C_POP

None
Value:
32                                                                    

C_PRI

None
Value:
192                                                                   

C_PSH

None
Value:
16                                                                    

C_REP

None
Value:
176                                                                   

C_RET

None
Value:
128                                                                   

C_RTF

None
Value:
160                                                                   

C_SSE

None
Value:
208                                                                   

C_TYPEMASK

None
Value:
240                                                                   

DATA_PTR

None
Value:
2                                                                     

DECR_3DNOW

None
Value:
45                                                                    

DECR_BYTE

None
Value:
33                                                                    

DECR_DWORD

None
Value:
36                                                                    

DECR_FLOAT10

None
Value:
41                                                                    

DECR_ISREG

None
Value:
32                                                                    

DECR_QWORD

None
Value:
40                                                                    

DECR_SEG

None
Value:
42                                                                    

DECR_SSE

None
Value:
46                                                                    

DECR_TYPEMASK

None
Value:
63                                                                    

DECR_WORD

None
Value:
34                                                                    

DEC_3DNOW

None
Value:
13                                                                    

DEC_BYTE

None
Value:
1                                                                     

DEC_BYTESW

None
Value:
17                                                                    

DEC_CALLDEST

None
Value:
31                                                                    

DEC_CHECKED

None
Value:
128                                                                   

DEC_COMMAND

None
Value:
29                                                                    

DEC_CONST

None
Value:
64                                                                    

DEC_DWORD

None
Value:
4                                                                     

DEC_FLOAT10

None
Value:
9                                                                     

DEC_FLOAT4

None
Value:
5                                                                     

DEC_FLOAT8

None
Value:
7                                                                     

DEC_FWORD

None
Value:
6                                                                     

DEC_JMPDEST

None
Value:
30                                                                    

DEC_NEXTCODE

None
Value:
19                                                                    

DEC_NEXTDATA

None
Value:
3                                                                     

DEC_PBODY

None
Value:
64                                                                    

DEC_PEND

None
Value:
96                                                                    

DEC_PROC

None
Value:
32                                                                    

DEC_PROCMASK

None
Value:
96                                                                    

DEC_QWORD

None
Value:
8                                                                     

DEC_SIGNED

None
Value:
256                                                                   

DEC_SSE

None
Value:
14                                                                    

DEC_STRING

None
Value:
11                                                                    

DEC_TBYTE

None
Value:
10                                                                    

DEC_TEXT

None
Value:
16                                                                    

DEC_TYPEMASK

None
Value:
31                                                                    

DEC_UNICODE

None
Value:
12                                                                    

DEC_UNKNOWN

None
Value:
0                                                                     

DEC_WORD

None
Value:
2                                                                     

DIACRITICAL

None
Value:
2                                                                     

DISASM_ALL

None
Value:
5                                                                     

DISASM_CODE

None
Value:
4                                                                     

DISASM_DATA

None
Value:
1                                                                     

DISASM_FILE

None
Value:
3                                                                     

DISASM_RTRACE

None
Value:
6                                                                     

DISASM_SIZE

None
Value:
0                                                                     

DISASM_TRACE

None
Value:
2                                                                     

DOUBLEL

None
Value:
4                                                                     

DWORD

None
Value:
2                                                                     

FUNCTION_PTR

None
Value:
1                                                                     

INT

None
Value:
0                                                                     

MEM

None
Value:
1                                                                     

MEM_ADDR

None
Value:
3                                                                     

PLAINASCII

None
Value:
1                                                                     

POINTER

None
Value:
3                                                                     

PTR

None
Value:
0                                                                     

RAREASCII

None
Value:
16                                                                    

RST_INDIRECT

None
Value:
3                                                                     

RST_INVALID

None
Value:
0                                                                     

RST_VALUE

None
Value:
1                                                                     

RST_VFIXUP

None
Value:
2                                                                     

RegisterName

None
Value:
{(0, 0, 0, 0, 0, 0, 0, 0): '',
 (0, 0, 0, 0, 0, 0, 0, 1): 'EDI',
 (0, 0, 0, 0, 0, 0, 1, 0): 'ESI',
 (0, 0, 0, 0, 0, 1, 0, 0): 'EBP',
 (0, 0, 0, 0, 1, 0, 0, 0): 'ESP',
 (0, 0, 0, 1, 0, 0, 0, 0): 'EBX',
 (0, 0, 1, 0, 0, 0, 0, 0): 'EDX',
 (0, 1, 0, 0, 0, 0, 0, 0): 'ECX',
...

STACK_PTR

None
Value:
3                                                                     

STRING

None
Value:
1                                                                     

UNICODE

None
Value:
2                                                                     

ctable

None
Value:
[0, 0, 0, 0, 0, 0, 0, 0, 0]

   Trees       Indices       Help   
Immunity Debugger API Reference
Generated by Epydoc 3.0alpha3 on Thu May 29 13:03:06 2008 http://epydoc.sourceforge.net