Module pychrysalide

Documentation

PyChrysalide is a module containing Chrysalide's features and designed for Python users.

The whole API is defined in a single library named 'so' and can be used in two ways:

  • either from the Chrysalide's GUI, by registering hooks or GLib signals.
  • or from a shell command line, by setting PYTHONPATH to point to the directory containing the library.

In both cases, it is a good start point to have a look at already existing plugins to quickly learn how the API works.

These plugins are located in the 'plugins/python' directory.

Sub modules

Classes

Methods

mod_version()

Provide the version number of Chrysalide module for Python.

revision()

Provide the revision number of Chrysalide.

version()

Provide the version number of Chrysalide.

Class PluginModule

Chrysalide plugin for Python.

Hierarchy

builtins.object
 ╰── gi._gobject.GObject
      ╰── pychrysalide.PluginModule

Methods

log_message(type, msg)

Display a message in the log window, if any.

Constants

PGA_BASIC_NONE = PGA_BASIC_NONE

PGA_PLUGIN_INIT = PGA_PLUGIN_INIT

PGA_PLUGIN_EXIT = PGA_PLUGIN_EXIT

PGA_NATIVE_LOADED = PGA_NATIVE_LOADED

PGA_CONTENT_EXPLORER = PGA_CONTENT_EXPLORER

PGA_CONTENT_RESOLVER = PGA_CONTENT_RESOLVER

PGA_CONTENT_ANALYZED = PGA_CONTENT_ANALYZED

PGA_FORMAT_ANALYSIS_STARTED = PGA_FORMAT_ANALYSIS_STARTED

PGA_FORMAT_PRELOAD = PGA_FORMAT_PRELOAD

PGA_FORMAT_ATTACH_DEBUG = PGA_FORMAT_ATTACH_DEBUG

PGA_FORMAT_ANALYSIS_ENDED = PGA_FORMAT_ANALYSIS_ENDED

PGA_FORMAT_POST_ANALYSIS_STARTED = PGA_FORMAT_POST_ANALYSIS_STARTED

PGA_FORMAT_POST_ANALYSIS_ENDED = PGA_FORMAT_POST_ANALYSIS_ENDED

PGA_DISASSEMBLY_STARTED = PGA_DISASSEMBLY_STARTED

PGA_DISASSEMBLY_RAW = PGA_DISASSEMBLY_RAW

PGA_DISASSEMBLY_HOOKED_LINK = PGA_DISASSEMBLY_HOOKED_LINK

PGA_DISASSEMBLY_HOOKED_POST = PGA_DISASSEMBLY_HOOKED_POST

PGA_DISASSEMBLY_LIMITED = PGA_DISASSEMBLY_LIMITED

PGA_DISASSEMBLY_LOOPS = PGA_DISASSEMBLY_LOOPS

PGA_DISASSEMBLY_LINKED = PGA_DISASSEMBLY_LINKED

PGA_DISASSEMBLY_GROUPED = PGA_DISASSEMBLY_GROUPED

PGA_DISASSEMBLY_RANKED = PGA_DISASSEMBLY_RANKED

PGA_DISASSEMBLY_ENDED = PGA_DISASSEMBLY_ENDED

PGA_DETECTION_OBFUSCATORS = PGA_DETECTION_OBFUSCATORS

Class PyConstvalObject

PyChrysalide object for C constant values

Hierarchy

builtins.object
 ╰── builtins.int
      ╰── pychrysalide.PyConstvalObject

Methods

__reduce__(self)

Provide information to rebuild the object.

__str__(self)

Return str(self).

Class PyStructObject

PyChrysalide structure

Hierarchy

builtins.object
 ╰── builtins.dict
      ╰── pychrysalide.PyStructObject