libdebug.builtin package

Submodules

libdebug.builtin.antidebug_syscall_handler module

libdebug.builtin.antidebug_syscall_handler.on_enter_ptrace(t: ThreadContext, handler: SyscallHandler) → None

Callback for ptrace syscall onenter.

libdebug.builtin.antidebug_syscall_handler.on_exit_ptrace(t: ThreadContext, handler: SyscallHandler) → None

Callback for ptrace syscall onexit.

libdebug.builtin.pretty_print_syscall_handler module

libdebug.builtin.pretty_print_syscall_handler.pprint_on_enter(d: ThreadContext, syscall_number: int, **kwargs: int) → None

Function that will be called when a syscall is entered in pretty print mode.

Parameters:

• d (ThreadContext) – the thread context.

• syscall_number (int) – the syscall number.

• **kwargs (bool) – the keyword arguments.

libdebug.builtin.pretty_print_syscall_handler.pprint_on_exit(syscall_return: int | tuple[int, int]) → None

Function that will be called when a syscall is exited in pretty print mode.

Parameters:

syscall_return (int | list[int]) – the syscall return value.

Module contents