Package Libs :: Module libanalyze
[hide private]
[frames] | no frames]

Module libanalyze

source code

(c) Immunity, Inc. 2004-2007

Immunity Inc.

Classes [hide private]
  opCode
  Decode
  Function
Class that contains information about a Function
  BasicBlock
  XREFBasicBlock
  JMCBasicBlock
  JMPBasicBlock
  RETBasicBlock
  TraceArgs
Variables [hide private]
  __VERSION__ = '1.3'
  RST_INVALID = 0
  RST_VALUE = 1
  RST_VFIXUP = 2
  RST_INDIRECT = 3
  DISASM_SIZE = 0
  DISASM_DATA = 1
  DISASM_TRACE = 2
  DISASM_FILE = 3
  DISASM_CODE = 4
  DISASM_ALL = 5
  DISASM_RTRACE = 6
  C_TYPEMASK = 0xF0
  C_CMD = 0x00
  C_PSH = 0x10
  C_POP = 0x20
  C_MMX = 0x30
  C_FLT = 0x40
  C_JMP = 0x50
  C_JMC = 0x60
  C_CAL = 0x70
  C_RET = 0x80
  C_FLG = 0x90
  C_RTF = 0xA0
  C_REP = 0xB0
  C_PRI = 0xC0
  C_SSE = 0xD0
  C_NOW = 0xE0
  C_BAD = 0xF0
  DEC_TYPEMASK = 0x1F
  DEC_UNKNOWN = 0x00
  DEC_BYTE = 0x01
  DEC_WORD = 0x02
  DEC_NEXTDATA = 0x03
  DEC_DWORD = 0x04
  DEC_FLOAT4 = 0x05
  DEC_FWORD = 0x06
  DEC_FLOAT8 = 0x07
  DEC_QWORD = 0x08
  DEC_FLOAT10 = 0x09
  DEC_TBYTE = 0x0A
  DEC_STRING = 0x0B
  DEC_UNICODE = 0x0C
  DEC_3DNOW = 0x0D
  DEC_SSE = 0x0E
  DEC_TEXT = 0x10
  DEC_BYTESW = 0x11
  DEC_NEXTCODE = 0x13
  DEC_COMMAND = 0x1D
  DEC_JMPDEST = 0x1E
  DEC_CALLDEST = 0x1F
  DEC_PROCMASK = 0x60
  DEC_PROC = 0x20
  DEC_PBODY = 0x40
  DEC_PEND = 0x60
  DEC_CHECKED = 0x80
  DEC_SIGNED = 0x100
  DECR_TYPEMASK = 0x3F
  DECR_BYTE = 0x21
  DECR_WORD = 0x22
  DECR_DWORD = 0x24
  DECR_QWORD = 0x28
  DECR_FLOAT10 = 0x29
  DECR_SEG = 0x2A
  DECR_3DNOW = 0x2D
  DECR_SSE = 0x2E
  DECR_ISREG = 0x20
  DEC_CONST = 0x40
  Registers32BitsOrder = ["EAX", "ECX", "EDX", "EBX", "ESP", "EB...
  Registers16BitsOrder = ["AX", "CX", "DX", "BX", "SP", "BP", "S...
  Registers8BitsOrder = ["AL", "CL", "DL", "BL", "AH", "CH", "DH...
  RegisterName = {(0, 0, 0, 0, 0, 0, 0, 0): "", (1, 0, 0, 0, 0, ...
  COUNT = 100
Variables Details [hide private]

Registers32BitsOrder

Value:
["EAX", "ECX", "EDX", "EBX", "ESP", "EBP", "ESI", "EDI"]

Registers16BitsOrder

Value:
["AX", "CX", "DX", "BX", "SP", "BP", "SI", "DI"]

Registers8BitsOrder

Value:
["AL", "CL", "DL", "BL", "AH", "CH", "DH", "BH"]

RegisterName

Value:
{(0, 0, 0, 0, 0, 0, 0, 0): "", (1, 0, 0, 0, 0, 0, 0, 0): "EAX", (0, 1,\
 0, 0, 0, 0, 0, 0): "ECX", (0, 0, 1, 0, 0, 0, 0, 0): "EDX", (0, 0, 0, \
1, 0, 0, 0, 0): "EBX", (0, 0, 0, 0, 1, 0, 0, 0): "ESP", (0, 0, 0, 0, 0\
, 1, 0, 0): "EBP", (0, 0, 0, 0, 0, 0, 1, 0): "ESI", (0, 0, 0, 0, 0, 0,\
 0, 1): "EDI"}