Show / Hide Table of Contents

Class OpcodeDisassembler

OpcodeDisassembler class, can be declared and inherit from a ProcessInfo object to inherit the values of the current process or be called as a static function to disassemble opcodes.

Inheritance
System.Object
ErcCore
ProcessInfo
OpcodeDisassembler
Inherited Members
ProcessInfo.ProcessName
ProcessInfo.ProcessDescription
ProcessInfo.ProcessPath
ProcessInfo.ProcessID
ProcessInfo.ProcessHandle
ProcessInfo.ProcessCurrent
ProcessInfo.ProcessMachineType
ProcessInfo.ModulesInfo
ProcessInfo.ThreadsInfo
ProcessInfo.ListLocalProcesses(ErcCore)
ProcessInfo.ListRemoteProcesses(ErcCore, String)
ProcessInfo.GetProcessModules()
ProcessInfo.Is64Bit(Process)
ProcessInfo.SearchAllMemoryPPR(List<String>)
ProcessInfo.SearchAllMemoryPPR(Byte[], List<String>)
ProcessInfo.SearchMemory(Int32, Byte[], String, List<String>)
ProcessInfo.SearchMemory(Int32, Byte[], Byte[], String, List<String>)
ProcessInfo.FindNRP(Int32, Boolean)
ProcessInfo.CreateExcludesList(Boolean, Boolean, Boolean, Boolean, Boolean)
ProcessInfo.ToString()
ProcessInfo.GetModuleHandles()
ProcessInfo.GetProcessModuleInformation()
ProcessInfo.GetProcessThreadInformation()
ProcessInfo.DumpMemoryRegion(IntPtr, Int32)
ErcCore.ErcVersion
ErcCore.WorkingDirectory
ErcCore.Author
ErcCore.SystemErrorLogPath
ErcCore.PatternStandardPath
ErcCore.PatternExtendedPath
ErcCore.GetHandleInformation(IntPtr, UInt32)
ErcCore.SetWorkingDirectory(String)
ErcCore.SetPatternStandardPath(String)
ErcCore.SetPatternExtendedPath(String)
ErcCore.SetAuthor(String)
ErcCore.SetErrorFile(String)
ErcCore.LogEvent(Exception)
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
Namespace: ERC.Utilities
Assembly: ERC.Net.dll
Syntax
public class OpcodeDisassembler : ProcessInfo

Constructors

OpcodeDisassembler(ProcessInfo)

Constructor.

Declaration
public OpcodeDisassembler(ProcessInfo parent)
Parameters
Type Name Description
ProcessInfo parent

ProcessInfo object to be inherited from.

Methods

Disassemble(Byte[])

Disassembles opcodes into the associated instructions. Takes a byte array containing opcodes.

Declaration
public ErcResult<string> Disassemble(byte[] opcodes)
Parameters
Type Name Description
System.Byte[] opcodes

The opcodes to be disassembled

Returns
Type Description
ErcResult<System.String>

Returns an ERC_Result containing associated instructions.

Disassemble(Byte[], MachineType)

Disassembles opcodes into the associated instructions. Takes a byte array containing opcodes, a MachineType of I386 or x64, an instance of the ERC_Core object and returns an ERC_Result containing associated instructions.

Declaration
public static ErcResult<string> Disassemble(byte[] opcodes, MachineType machineType)
Parameters
Type Name Description
System.Byte[] opcodes

A byte array containing opcodes to be disassembled

MachineType machineType

a ERC.MachineType of either I386 or x64

Returns
Type Description
ErcResult<System.String>

Returns an ERC_Result containing associated instructions.

Back to top Generated by DocFX