disassembler

Utilities to disassemble some X86/ X86_64 byte code.

Members

Aliases

Sub
alias Sub = DisasmParams*[]

Array of Disasm. Usually used to store a full function.

Subs
alias Subs = Sub[void*]

Associates an array of Disasm to a particular address.

SubsCrossRefs
alias SubsCrossRefs = void*[][void*]

Associates an address to an array of address. Used to store the cross references.

Enums

EolMode
enum EolMode

end-of-line modes

Functions

disasmSub
void disasmSub(T eip, ref Subs subs, ref SubsCrossRefs xrefs, ref short nesting)

Disassembling kernel.

disasmSub
void disasmSub(void* eip, ref Subs subs, ref SubsCrossRefs xrefs, ref short nesting)

Disassembling kernel.

formatSub
string formatSub(const ref Sub sub, const ref void*[]* crossRefs)

Formats an array of Disasm as a string.

prettyDisasm
string prettyDisasm(void* eip, short maxNesting = 1)
string prettyDisasm(T eip, short maxNesting = 1)

Disassembles a function and returns its string representation.

Properties

addressPrefix
string addressPrefix [@property getter]
void addressPrefix [@property getter]

defines the prefix used to format an address.

addressSuffix
string addressSuffix [@property getter]
void addressSuffix [@property getter]

defines the suffix used to format an address.

eolMode
EolMode eolMode [@property getter]
void eolMode [@property getter]

Defines the end-of-line used to format the disassembling. Useful under Windows when prettyDisasm() is written to stdout.

Structs

symbolTable
struct symbolTable

Handles the translation of the disassembler addresses to a symbol.

Meta