|
| def | TypeIndex (self) |
| | Wrap the TypeIndex member with a property that decodes it with the nt!ObHeaderCookie value. More...
|
| |
|
def | is_valid (self) |
| | Determine if a given object header is valid.
|
| |
|
def | GrantedAccess (self) |
| | Return the object's granted access permissions.
|
| |
|
def | is_valid (self) |
| | Determine if a given object header is valid.
|
| |
| def | find_optional_headers (self) |
| | Find this object's optional headers. More...
|
| |
|
def | get_object_type (self) |
| | Return the object's type as a string.
|
| |
|
def | __init__ (self, args, kwargs) |
| |
| def | find_optional_headers (self) |
| | Find this object's optional headers. More...
|
| |
|
def | GrantedAccess (self) |
| |
|
def | dereference_as (self, theType) |
| | Instantiate an object from the _OBJECT_HEADER.Body.
|
| |
|
def | get_object_type (self) |
| | Return the object's type as a string.
|
| |
|
def | is_valid (self) |
| |
| def | __init__ (self, theType, offset, vm, name=None, members=None, struct_size=0, kwargs) |
| | This must be instantiated with a dict of members. More...
|
| |
|
def | size (self) |
| |
|
def | __repr__ (self) |
| |
|
def | d (self) |
| |
|
def | v (self) |
| | When a struct is evaluated we just return our offset.
|
| |
|
def | m (self, attr) |
| |
|
def | __getattr__ (self, attr) |
| |
|
def | __setattr__ (self, attr, value) |
| | Change underlying members.
|
| |
|
def | __init__ (self, theType, offset, vm, native_vm=None, parent=None, name=None, kwargs) |
| |
|
def | obj_type (self) |
| |
|
def | obj_vm (self) |
| |
|
def | obj_offset (self) |
| |
|
def | obj_parent (self) |
| |
|
def | obj_name (self) |
| |
|
def | obj_native_vm (self) |
| |
|
def | set_native_vm (self, native_vm) |
| | Sets the native_vm.
|
| |
|
def | rebase (self, offset) |
| |
|
def | proxied (self, attr) |
| |
|
def | newattr (self, attr, value) |
| | Sets a new attribute after the object has been created.
|
| |
|
def | write (self, value) |
| | Function for writing the object back to disk.
|
| |
|
def | __getattr__ (self, attr) |
| | This is only useful for proper methods (not ones that start with __ )
|
| |
|
def | __setattr__ (self, attr, value) |
| |
| def | __nonzero__ (self) |
| | This method is called when we test the truth value of an Object. More...
|
| |
|
def | __eq__ (self, other) |
| |
|
def | __ne__ (self, other) |
| |
|
def | __hash__ (self) |
| |
|
def | m (self, memname) |
| |
|
def | is_valid (self) |
| |
|
def | dereference (self) |
| |
|
def | dereference_as (self, derefType, kwargs) |
| |
|
def | cast (self, castString) |
| |
|
def | v (self) |
| | Do the actual reading and decoding of this member.
|
| |
|
def | __format__ (self, formatspec) |
| |
|
def | __str__ (self) |
| |
|
def | __repr__ (self) |
| |
|
def | d (self) |
| | Display diagnostic information.
|
| |
|
def | __getstate__ (self) |
| | This controls how we pickle and unpickle the objects.
|
| |
|
def | __setstate__ (self, state) |
| |
Public Member Functions inherited from volatility.plugins.overlays.windows.win8._OBJECT_HEADER
1.8.9.1