Package rekall :: Package plugins :: Package tools :: Module disassembler :: Class CapstoneInstruction
[frames] | no frames]

Class CapstoneInstruction

source code


A capstone decoded instruction.

Instance Methods
 
__init__(self, insn, session=None, address_space=None)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
GetCanonical(self)
Returns the canonical model of the instruction.
source code
 
format_indirect(self, operand, size) source code
 
is_return(self) source code
 
is_branch(self)
Is this instruction a branch?
source code
 
match_rule(self, rule, context)
Match the rule against this instruction.
source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables
  INSTRUCTIONS = {}
  REGISTERS = {}
  OP = {}
Properties
  operands
  comment
  op_str
  text
  hexbytes
  target

Inherited from object: __class__

Method Details

__init__(self, insn, session=None, address_space=None)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)

is_branch(self)

source code 

Is this instruction a branch?

e.g. JNE JE JG JLE JL JGE JMP JA JAE JB JBE JO JNO JZ JNZ JS JNS


Property Details

operands

Get Method:
unreachable.operands(self)

comment

Get Method:
unreachable.comment(self)

op_str

Get Method:
unreachable.op_str(self)

text

Get Method:
unreachable.text(self)

hexbytes

Get Method:
unreachable.hexbytes(self)

target

Get Method:
unreachable.target(self)