Module pychrysalide

Documentation

PyChrysalide is a module containing Chrysalide's features and designed for Python users.

The whole API is defined in a single library named 'pychrysalide.so' and can be used in two ways:

  • either from the Chrysalide's GUI, by registering hooks or GLib signals.
  • or from a shell command line, by setting PYTHONPATH to point to the directory containing the library.

In both cases, it is a good start point to have a look at already existing plugins to quickly learn how the API works.

These plugins are located in the 'plugins/python' directory.

Sub modules

Classes

Methods

mod_version()

Provide the version number of Chrysalide module for Python.

revision()

Provide the revision number of Chrysalide.

version()

Provide the version number of Chrysalide.

Class PluginModule

Chrysalide plugin for Python.

Hierarchy

builtins.object
 ╰── gi._gobject.GObject
      ╰── pychrysalide.PluginModule

Constants

PGA_BASIC_NONE = 0

PGA_PLUGIN_INIT = 65536

PGA_PLUGIN_EXIT = 65537

PGA_CONTENT_EXPLORER = 33554432

PGA_CONTENT_RESOLVER = 33554433

PGA_CONTENT_ANALYZED = 33554434

PGA_FORMAT_ANALYSIS_STARTED = 33619968

PGA_FORMAT_PRELOAD = 33619969

PGA_FORMAT_ATTACH_DEBUG = 33619970

PGA_FORMAT_ANALYSIS_ENDED = 33619971

PGA_FORMAT_POST_ANALYSIS_STARTED = 33619972

PGA_FORMAT_POST_ANALYSIS_ENDED = 33619973

PGA_DISASSEMBLY_STARTED = 33685504

PGA_DISASSEMBLY_RAW = 33685505

PGA_DISASSEMBLY_HOOKED_LINK = 33685506

PGA_DISASSEMBLY_HOOKED_POST = 33685507

PGA_DISASSEMBLY_LIMITED = 33685508

PGA_DISASSEMBLY_LOOPS = 33685509

PGA_DISASSEMBLY_LINKED = 33685510

PGA_DISASSEMBLY_GROUPED = 33685511

PGA_DISASSEMBLY_RANKED = 33685512

PGA_DISASSEMBLY_ENDED = 33685513

PGA_DETECTION_OBFUSCATORS = 33751040

Class PyConstvalObject

PyChrysalide object for C constant values

Hierarchy

builtins.object
 ╰── builtins.int
      ╰── pychrysalide.PyConstvalObject

Methods

__new__(args, kwargs)

Create and return a new object. See help(type) for accurate signature.

__str__(self)

Return str(self).

Class PyStructObject

PyChrysalide structure

Hierarchy

builtins.object
 ╰── builtins.dict
      ╰── pychrysalide.PyStructObject