winappdbg.system

Module system

Instrumentation module.

Classes

Instrumentation

Module
Interface to a DLL library loaded in the context of another process.

Thread
Interface to a thread in another process.

Process
Interface to a process.

System
Interface to a batch of processes, plus some system wide settings.

Handles (private)

Handle
Encapsulates win32 handles to avoid leaking them.

ProcessHandle
Win32 process handle.

ThreadHandle
Win32 thread handle.

FileHandle
Win32 file handle.

Capabilities (private)

ModuleContainer
Encapsulates the capability to contain Module objects.

ThreadContainer
Encapsulates the capability to contain Thread objects.

MemoryAddresses
Class to manipulate memory addresses.

MemoryOperations
Encapsulates the capabilities to manipulate the memory of a process.

SymbolOperations
Encapsulates symbol operations capabilities.

ThreadDebugOperations
Encapsulates several useful debugging routines for threads.

ProcessDebugOperations
Encapsulates several useful debugging routines for processes.

ProcessContainer
Encapsulates the capability to contain Process objects.

Functions

dllbaseparam(f)
Decorator to perform type checking on the lpBaseOfDll parameter.

threadidparam(f)
Decorator to perform type checking on the dwThreadId parameter.

processidparam(f)
Decorator to perform type checking on the dwProcessId parameter.

Variables

Decode32Bits = 1

Function Details

Decorator to perform type checking on the lpBaseOfDll parameter.

Warning: This is only useful for debugging the debugger itself, otherwise the code should be commented out.

Decorator to perform type checking on the dwThreadId parameter.

Warning: This is only useful for debugging the debugger itself, otherwise the code should be commented out.

Decorator to perform type checking on the dwProcessId parameter.

Warning: This is only useful for debugging the debugger itself, otherwise the code should be commented out.