Class Hierarchy

object: The most base type
- winappdbg.breakpoint.Breakpoint: Base class for breakpoints.
  - winappdbg.breakpoint.CodeBreakpoint: Code execution breakpoints (using an int3 opcode).
  - winappdbg.breakpoint.HardwareBreakpoint: Hardware breakpoint (using debug registers).
  - winappdbg.breakpoint.PageBreakpoint: Page access breakpoint (using guard pages).
- winappdbg.breakpoint.BreakpointContainer: Encapsulates the capability to contain Breakpoint objects.
  - winappdbg.debug.Debug: The main debugger class.
- winappdbg.breakpoint.BufferWatch: Used by Debug.watch_buffer.
- winappdbg.crash.Crash: Represents a crash, bug, or another interesting event in the debugee.
- winappdbg.crash.CrashContainer: Manages a database of persistent Crash objects, trying to avoid duplicates.
  - winappdbg.crash.DummyCrashContainer: Fakes a database of volatile Crash objects, trying to mimic part of it's interface.
  - winappdbg.crash.VolatileCrashContainer: Manages a database of volatile Crash objects, trying to avoid duplicates if requested.
- winappdbg.textio.CrashDump: Static functions for crash dumps.
- winappdbg.crash.CrashTable: Manages a database of persistent Crash objects, trying to avoid duplicates only when requested.
- winappdbg.textio.DebugLog: Static functions for debug logging.
- winappdbg.breakpoint.DebugRegister: Class to manipulate debug registers.
- winappdbg.event.Event: Event object.
  - winappdbg.event.CreateProcessEvent: Process creation event.
  - winappdbg.event.CreateThreadEvent: Thread creation event.
  - winappdbg.event.ExceptionEvent: Exception event.
  - winappdbg.event.ExitProcessEvent: Process termination event.
  - winappdbg.event.ExitThreadEvent: Thread termination event.
  - winappdbg.event.LoadDLLEvent: Module load event.
  - winappdbg.event.NoEvent: No event.
  - winappdbg.event.OutputDebugStringEvent: Debug string output event.
  - winappdbg.event.RIPEvent: RIP event.
  - winappdbg.event.UnloadDLLEvent: Module unload event.
- winappdbg.event.EventDispatcher: Implements debug event dispatching capabilities.
  - winappdbg.debug.Debug: The main debugger class.
- winappdbg.event.EventFactory: Factory of Event objects.
- winappdbg.event.EventHandler: Base class for debug event handlers.
- winappdbg.win32.kernel32.FILE_INFO_BY_HANDLE_CLASS
- winappdbg.win32.defines.FakeWinDll
- winappdbg.system.Thread.Flags: Commonly used processor flags
- winappdbg.win32.defines.GuessStringType: Decorator that guesses the correct version (A or W) to call based on the types of the strings passed as parameters.
- winappdbg.win32.kernel32.Handle: Encapsulates Win32 handles to avoid leaking them.
  - winappdbg.win32.kernel32.FileHandle: Win32 file handle.
  - winappdbg.win32.kernel32.ProcessHandle: Win32 process handle.
  - winappdbg.win32.kernel32.ThreadHandle: Win32 thread handle.
- winappdbg.textio.HexDump: Static functions for hexadecimal dumps.
- winappdbg.textio.HexInput: Static functions for user input parsing.
- winappdbg.textio.HexOutput: Static functions for user output parsing.
- winappdbg.breakpoint.Hook: Used by Debug.hook_function.
  - winappdbg.breakpoint.ApiHook: Used by EventHandler.
- winappdbg.textio.Logger: Logs text to standard output and/or a text file.
- winappdbg.win32.defines.MakeANSIVersion: Decorator that generates an ANSI version of a Unicode (wide) only API call.
- winappdbg.system.MemoryAddresses: Class to manipulate memory addresses.
- winappdbg.win32.kernel32.MemoryBasicInformation: Memory information object returned by VirtualQueryEx.
- winappdbg.system.MemoryOperations: Encapsulates the capabilities to manipulate the memory of a process.
  - winappdbg.system.Process: Interface to a process.
- winappdbg.system.ModuleContainer: Encapsulates the capability to contain Module objects.
  - winappdbg.system.Process: Interface to a process.
- winappdbg.system.PathOperations: Static methods for filename and pathname manipulation.
- winappdbg.win32.kernel32.ProcThreadAttributeList: Extended process and thread attribute support.
- winappdbg.system.ProcessContainer: Encapsulates the capability to contain Process objects.
  - winappdbg.system.System: Interface to a batch of processes, plus some system wide settings.
- winappdbg.system.ProcessDebugOperations: Encapsulates several useful debugging routines for processes.
  - winappdbg.system.Process: Interface to a process.
- winappdbg.win32.kernel32.ProcessInformation: Process information object returned by CreateProcess.
- winappdbg.system.SymbolContainer: Capability to contain symbols.
  - winappdbg.system.Module: Interface to a DLL library loaded in the context of another process.
- winappdbg.system.SymbolEnumerator: Internally used by SymbolContainer to enumerate symbols in a module.
- winappdbg.system.SymbolOperations: Encapsulates symbol operations capabilities.
  - winappdbg.system.Process: Interface to a process.
- winappdbg.textio.Table: Text based table.
- winappdbg.system.ThreadContainer: Encapsulates the capability to contain Thread objects.
  - winappdbg.system.Process: Interface to a process.
- winappdbg.system.ThreadDebugOperations: Encapsulates several useful debugging routines for threads.
  - winappdbg.system.Thread: Interface to a thread in another process.
- winappdbg.system.Window
- unreachable._CData: XXX to be provided
  - _ctypes.Structure: Structure base class
  - _ctypes.Union: Union base class
  - _ctypes._Pointer: XXX to be provided
  - _ctypes._SimpleCData: XXX to be provided
    - ctypes.c_long.__ctype_be__
    - ctypes.c_ushort.__ctype_be__
    - ctypes.c_short.__ctype_be__
    - ctypes.c_ulong.__ctype_be__
    - ctypes.c_byte
    - ctypes.c_long
    - ctypes.c_short
    - ctypes.c_ubyte
    - ctypes.c_ulong
    - ctypes.c_ushort
    - ctypes.c_void_p
- winappdbg.crash.CrashContainer.__CrashContainerIterator: Iterator of Crash objects.
- winappdbg.system.Process.__ThreadsAndModulesIterator: Iterator object for Process objects.
- winappdbg.win32.user32.__WindowEnumerator
  - winappdbg.win32.user32.__EnumChildProc
  - winappdbg.win32.user32.__EnumThreadWndProc
  - winappdbg.win32.user32.__EnumWndProc
- dict: dict() -> new empty dictionary.
  - winappdbg.win32.context_ia64.Context
  - winappdbg.win32.context_amd64.Context
  - winappdbg.win32.context_i386.Context

Home

Indices

Help