Module Hierarchy

Elf: Kenshoto's Elf parser
- Elf.elf_lookup
envi: The Envi framework allows architecutre abstraction through the use of the ArchitectureModule, Opcode, Operand, and Emulator objects.
- envi.archs: The new top level home for all the envi architecture modules.
  - envi.archs.amd64: The envi architecuture module for the AMD 64 platform.
    - envi.archs.amd64.disasm
    - envi.archs.amd64.regs
  - envi.archs.arm: The initial arm module.
    - envi.archs.arm.armdisasm
    - envi.archs.arm.const
    - envi.archs.arm.disasm
    - envi.archs.arm.emu: The initial arm module.
    - envi.archs.arm.regs
    - envi.archs.arm.thumb
    - envi.archs.arm.thumbdisasm
  - envi.archs.i386
    - envi.archs.i386.disasm: The guts for the i386 envi opcode disassembler.
    - envi.archs.i386.emu: Home for the i386 emulation code.
    - envi.archs.i386.opcode86
    - envi.archs.i386.regs: Home of the i386 module's register specs/code.
  - envi.archs.z80: Z80 architecture base...
    - envi.archs.z80.const
    - envi.archs.z80.disasm
    - envi.archs.z80.regs: Register definition for the z80 architecture
    - envi.archs.z80.z80opcode
- envi.arm: The initial arm module.
- envi.bintree
- envi.bits: A file full of bit twidling helpers
- envi.bytesig: A byte and mask based decision engine for creating byte sequences (and potential comparison masks) for general purpose signature matching.
- envi.cli: Unified CLI code for things like vivisect and vdb.
- envi.codeflow: A module to contain code flow analysis for envi opcode objects...
- envi.config: Unified config object for all vtoys.
- envi.expression: Unified expression helpers.
- envi.memcanvas: The envi.memcanvas module is the home of the base MemoryRenderer object and MemoryCanvas objects.
  - envi.memcanvas.renderers: Some of the basic/universal memory renderers.
- envi.memory
- envi.pagelookup: A home for the page lookup construct.
- envi.pyzip
- envi.qt: Gui objects for things in the envi package.
  - envi.qt.html: The envi.qt.html module contains the HTML template and javascript code used by the renderers (which are based on QtWebKit)
  - envi.qt.memcanvas
  - envi.qt.memory
- envi.registers: Similar to the memory subsystem, this is a unified way to access information about objects which contain registers
- envi.resolver: The API describing what it means to be an envi compliant symbol resolver.
- envi.threads: A couple useful thread related toys...
- envi.util
vdb
- vdb.extensions
  - vdb.extensions.amd64
  - vdb.extensions.android
  - vdb.extensions.arm
  - vdb.extensions.darwin
  - vdb.extensions.gdbstub
  - vdb.extensions.i386
  - vdb.extensions.i486
  - vdb.extensions.i586
  - vdb.extensions.i686
  - vdb.extensions.windows
- vdb.gui
  - vdb.gui.extensions: A package to contain all the extended functionality for platform specific commands and modules.
    - vdb.gui.extensions.windows
- vdb.qt: The package for the QT gui code for VDB.
  - vdb.qt.windows: The heart of the new VDB QT gui!
- vdb.recon: The recon subsystem for monitoring well known library calls and identifying dangerous calling mechanisms.
  - vdb.recon.dopestack: A quick set of tools for doing stack doping.
  - vdb.recon.sniper: Specialized breakpoints which identify dangerous calling mechanisms and tag them.
- vdb.renderers: A home for the vdb specific memory renderers.
- vdb.stalker: The stalker subsystem is a breakpoint based coverage tool
- vdb.testmods
  - vdb.testmods.basictest
visgraph: The new visgraph package...
- visgraph.cli: A package for a basic command interpreter for the graph.
- visgraph.dbcore: Visgraph supports backing the graph objects with a postgres db.
- visgraph.drawing: Some utils for drawing...
  - visgraph.drawing.bezier
  - visgraph.drawing.catmullrom
- visgraph.exc
- visgraph.graphcore: Graphcore contains all the base graph manipulation objects.
- visgraph.layouts: A package for each of the different layout managers.
  - visgraph.layouts.dynadag: A dynadag-ish graph layout calculator...
- visgraph.pathcore: Paths are enumerated threads through a particular graph.
- visgraph.renderers: Home of the code which knows how to actually *draw* a graph which has been layed out.
  - visgraph.renderers.gtkrend: Render a graph full of gtk widgets and draw some lines!
  - visgraph.renderers.qgraphtree
  - visgraph.renderers.svgrend
- visgraph.unittests
  - visgraph.unittests.alltests: Run all the unit tests....
  - visgraph.unittests.basictest
  - visgraph.unittests.graphdbtest
  - visgraph.unittests.pathtest: A module for path related unit tests.
vqt
- vqt.application
- vqt.basics: A place for some no-brainer basics :)
- vqt.cli
- vqt.colors
- vqt.main
- vqt.menubuilder
- vqt.qpython: Home of some helpers for python interactive stuff.
- vqt.shortcut: Some utilities for adding shortcut keys to widgets...
- vqt.tree
vtrace: Vtrace Debugger Framework
- vtrace.archs: Architecture Support Modules
  - vtrace.archs.amd64: Amd64 Support Module
  - vtrace.archs.arm: ARM Support Module
  - vtrace.archs.i386: x86 Support Module
  - vtrace.archs.ppc: PPC Support Module (not done)
- vtrace.audit: Test for platform functionality (for internal use).
- vtrace.breakpoints: Breakpoint Objects
- vtrace.envitools: Some tools that require the envi framework to be installed
- vtrace.notifiers: Vtrace notitifers base classes and examples
- vtrace.platforms: Platform Support Modules
  - vtrace.platforms.android
  - vtrace.platforms.base: Tracer Platform Base
  - vtrace.platforms.darwin: Darwin Platform Module
  - vtrace.platforms.freebsd: FreeBSD support...
  - vtrace.platforms.gdbstub: GDB support
  - vtrace.platforms.linux: Linux Platform Module
  - vtrace.platforms.posix: Posix Signaling Module
  - vtrace.platforms.solaris: Solaris Platform Module (Incomplete)
  - vtrace.platforms.vmware: Underlying platform implementation for kernel debugging with vmware gdbserver.
  - vtrace.platforms.win32: Win32 Platform Module
- vtrace.qt: QtGui objects which assist in GUIs which use vtrace parts.
- vtrace.rmi: Cobra integration for remote debugging
- vtrace.snapshot: All the code related to vtrace process snapshots and TraceSnapshot classes.
- vtrace.tools: Extra tools (mostly for windows)
  - vtrace.tools.iathook: Code for hooking import address tables by making them invalid pointers and catching the exceptions...
  - vtrace.tools.win32alloc: A module with some cute toys for monitoring allocations.
  - vtrace.tools.win32aslr: Utilities for windows tracer objects.
  - vtrace.tools.win32heap: Windows heap allocation helper module
  - vtrace.tools.win32stealth: Try to prevent an executable from knowing it's being debugged.
- vtrace.util: Extra utilities for vtrace
- vtrace.watchpoints: Watchpoint Objects
vwidget
- vwidget.cluster: A module for GUI management of cobra.cluster clients calling into a server.
- vwidget.config
- vwidget.layout: A layout manager for gtk windows.
- vwidget.main
- vwidget.memview: A unified memory analysis view
- vwidget.menubuilder
- vwidget.notebook: A suite of tools for dealing with notebooks...
- vwidget.pydialog
- vwidget.util: Just a place to house some universalish utilities
- vwidget.views
- vwidget.vwvstruct: GUI widgets for use in vstruct enabled applications
- vwidget.vwvtrace
- vwidget.windows