Package winappdbg :: Module util

[frames] | no frames]

Module util

source code

Miscellaneous utility classes and functions.

Classes

[hide private]

Miscellaneous

Regenerator
Calls a generator and iterates it.

PathOperations
Static methods for filename and pathname manipulation.

MemoryAddresses
Class to manipulate memory addresses.

DebugRegister
Class to manipulate debug registers.

Functions

[hide private]

Miscellaneous

generator of win32.MemoryBasicInformation

CustomAddressIterator(memory_map, condition)
Generator function that iterates through a memory map, filtering memory region blocks by any given condition.

source code

generator of win32.MemoryBasicInformation

DataAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that contain data.

source code

generator of win32.MemoryBasicInformation

ImageAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that belong to executable images.

source code

generator of win32.MemoryBasicInformation

MappedAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that belong to memory mapped files.

source code

generator of win32.MemoryBasicInformation

ReadableAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that are readable.

source code

generator of win32.MemoryBasicInformation

WriteableAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that are writeable.

source code

generator of win32.MemoryBasicInformation

ExecutableAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that are executable.

source code

generator of win32.MemoryBasicInformation

ExecutableAndWriteableAddressIterator(memory_map)
Generator function that iterates through a memory map, returning only those memory blocks that are executable and writeable.

source code

Variables

[hide private]

__revision__ = '$Id$'

__package__ = 'winappdbg'

Function Details

[hide private]

CustomAddressIterator(memory_map, condition)

source code

Generator function that iterates through a memory map, filtering memory region blocks by any given condition.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.
condition (function) - Callback function that returns True if the memory block should be returned, or False if it should be filtered.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

DataAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that contain data.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

ImageAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that belong to executable images.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

MappedAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that belong to memory mapped files.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

ReadableAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that are readable.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

WriteableAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that are writeable.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

Note: Writeable memory is always readable too.

ExecutableAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that are executable.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

Note: Executable memory is always readable too.

ExecutableAndWriteableAddressIterator(memory_map)

source code

Generator function that iterates through a memory map, returning only those memory blocks that are executable and writeable.

Parameters:

memory_map (list( win32.MemoryBasicInformation )) - List of memory region information objects. Returned by Process.get_memory_map.

Returns: generator of win32.MemoryBasicInformation

Generator object to iterate memory blocks.

Note: The presence of such pages make memory corruption vulnerabilities much easier to exploit.