volatility  2.6.1
About: The Volatility Framework is a collection of tools for the extraction of digital artifacts from volatile memory (RAM) samples (requires Python).
  Fossies Dox: volatility-2.6.1.tar.gz  ("inofficial" and yet experimental doxygen-generated source code documentation)  

volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY Class Reference
Inheritance diagram for volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY:
[legend]
Collaboration diagram for volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY:
[legend]

Public Member Functions

def __init__ (self, theType=None, offset=None, vm=None, parent=None, *args, **kwargs)
 
def get_entries (self)
 
- Public Member Functions inherited from volatility.obj.CType
def __init__ (self, theType, offset, vm, name=None, members=None, struct_size=0, **kwargs)
 
def size (self)
 
def __repr__ (self)
 
def d (self)
 
def v (self)
 
def m (self, attr)
 
def __getattr__ (self, attr)
 
def __setattr__ (self, attr, value)
 
- Public Member Functions inherited from volatility.obj.BaseObject
def obj_type (self)
 
def obj_vm (self)
 
def obj_offset (self)
 
def obj_parent (self)
 
def obj_name (self)
 
def obj_native_vm (self)
 
def set_native_vm (self, native_vm)
 
def rebase (self, offset)
 
def proxied (self, attr)
 
def newattr (self, attr, value)
 
def write (self, value)
 
def __nonzero__ (self)
 
def __eq__ (self, other)
 
def __ne__ (self, other)
 
def __hash__ (self)
 
def is_valid (self)
 
def dereference (self)
 
def dereference_as (self, derefType, **kwargs)
 
def cast (self, castString)
 
def __format__ (self, formatspec)
 
def __str__ (self)
 
def __getstate__ (self)
 
def __setstate__ (self, state)
 

Public Attributes

 sectoffset
 
- Public Attributes inherited from volatility.obj.CType
 members
 
 struct_size
 
- Public Attributes inherited from volatility.obj.BaseObject
 obj_offset
 
 obj_vm
 

Detailed Description

Handles Directory Entries

Definition at line 987 of file pe_vtypes.py.

Constructor & Destructor Documentation

◆ __init__()

def volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY.__init__ (   self,
  theType = None,
  offset = None,
  vm = None,
  parent = None,
args,
**  kwargs 
)

Definition at line 989 of file pe_vtypes.py.

Member Function Documentation

◆ get_entries()

def volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY.get_entries (   self)

Member Data Documentation

◆ sectoffset

volatility.plugins.overlays.windows.pe_vtypes._IMAGE_RESOURCE_DIRECTORY.sectoffset

The documentation for this class was generated from the following file: