volatility.plugins.overlays.windows.vad_vtypes._MMVAD_WIN81 Class Reference

Inheritance diagram for volatility.plugins.overlays.windows.vad_vtypes._MMVAD_WIN81:

Public Member Functions
def	Parent (self)
def	Start (self)
def	End (self)
def	VadFlags (self)
def	CommitCharge (self)
def	ControlArea (self)
def	FileObject (self)
def	Length (self)
def	LeftChild (self)
def	RightChild (self)
Public Member Functions inherited from volatility.plugins.overlays.windows.vad_vtypes._MMVAD_SHORT_WIN81
def	Parent (self)
def	Start (self)
def	End (self)
def	VadFlags (self)
def	CommitCharge (self)
def	Length (self)
def	LeftChild (self)
def	RightChild (self)
Public Member Functions inherited from volatility.plugins.overlays.windows.vad_vtypes._RTL_BALANCED_NODE
def	LeftChild (self)
def	RightChild (self)
Public Member Functions inherited from volatility.plugins.overlays.windows.vad_vtypes.VadTraverser
def	is_valid (self)
def	traverse
	Traverse the VAD tree by generating all the left items, then the right items. More...
Public Member Functions inherited from volatility.obj.CType
def	__init__ (self, theType, offset, vm, name=None, members=None, struct_size=0, kwargs)
	This must be instantiated with a dict of members. More...
def	size (self)
def	__repr__ (self)
def	d (self)
def	v (self)
	When a struct is evaluated we just return our offset.
def	m (self, attr)
def	__getattr__ (self, attr)
def	__setattr__ (self, attr, value)
	Change underlying members.
Public Member Functions inherited from volatility.obj.BaseObject
def	__init__ (self, theType, offset, vm, native_vm=None, parent=None, name=None, kwargs)
def	obj_type (self)
def	obj_vm (self)
def	obj_offset (self)
def	obj_parent (self)
def	obj_name (self)
def	obj_native_vm (self)
def	set_native_vm (self, native_vm)
	Sets the native_vm.
def	rebase (self, offset)
def	proxied (self, attr)
def	newattr (self, attr, value)
	Sets a new attribute after the object has been created.
def	write (self, value)
	Function for writing the object back to disk.
def	__getattr__ (self, attr)
	This is only useful for proper methods (not ones that start with __ )
def	__setattr__ (self, attr, value)
def	__nonzero__ (self)
	This method is called when we test the truth value of an Object. More...
def	__eq__ (self, other)
def	__ne__ (self, other)
def	__hash__ (self)
def	m (self, memname)
def	is_valid (self)
def	dereference (self)
def	dereference_as (self, derefType, kwargs)
def	cast (self, castString)
def	v (self)
	Do the actual reading and decoding of this member.
def	__format__ (self, formatspec)
def	__str__ (self)
def	__repr__ (self)
def	d (self)
	Display diagnostic information.
def	__getstate__ (self)
	This controls how we pickle and unpickle the objects.
def	__setstate__ (self, state)

Additional Inherited Members
Public Attributes inherited from volatility.obj.CType
	members
	struct_size
Public Attributes inherited from volatility.obj.BaseObject
	obj_offset
	obj_vm
Static Public Attributes inherited from volatility.plugins.overlays.windows.vad_vtypes._RTL_BALANCED_NODE
dictionary	tag_map
	The actual type depends on this tag value. More...
Static Public Attributes inherited from volatility.plugins.overlays.windows.vad_vtypes.VadTraverser
dictionary	tag_map
	The actual type depends on this tag value. More...

---

The documentation for this class was generated from the following file:

• volatility/plugins/overlays/windows/vad_vtypes.py