本文整理汇总了Python中volatility.obj.VolatilityMagic方法的典型用法代码示例。如果您正苦于以下问题：Python obj.VolatilityMagic方法的具体用法？Python obj.VolatilityMagic怎么用？Python obj.VolatilityMagic使用的例子？那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类volatility.obj的用法示例。
在下文中一共展示了obj.VolatilityMagic方法的5个代码示例，这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞，您的评价将有助于系统推荐出更棒的Python代码示例。
示例1: __init__
# 需要导入模块: from volatility import obj [as 别名]
# 或者: from volatility.obj import VolatilityMagic [as 别名]
def __init__(self, *args, **kwargs):
# Remove the value kwarg since overlaying one
# on the other would give the value precedence
kwargs.pop('value', None)
# Save the distance argument for later
self.distance = kwargs.get('distance', None)
obj.VolatilityMagic.__init__(self, *args, **kwargs) 示例2: __init__
# 需要导入模块: from volatility import obj [as 别名]
# 或者: from volatility.obj import VolatilityMagic [as 别名]
def __init__(self, *args, **kwargs):
# Remove the value kwarg since overlaying one
# on the other would give the value precedence
kwargs.pop('value', None)
obj.VolatilityMagic.__init__(self, *args, **kwargs) 示例3: modification
# 需要导入模块: from volatility import obj [as 别名]
# 或者: from volatility.obj import VolatilityMagic [as 别名]
def modification(self, profile):
signature = '\x00\x00\x00\x00\x00\x00\x00\x00' if profile.metadata.get('memory_model', '32bit') == '32bit' else '\x00\xf8\xff\xff'
signature += 'KDBG' + struct.pack('<H', self.kdbgsize)
profile.merge_overlay({'VOLATILITY_MAGIC': [ None, {
'KDBGHeader': [ None, ['VolatilityMagic', dict(value = signature)]]
}
]}) 示例4: modification
# 需要导入模块: from volatility import obj [as 别名]
# 或者: from volatility.obj import VolatilityMagic [as 别名]
def modification(self, profile):
profile.merge_overlay({
'VOLATILITY_MAGIC': [ None, {
'DTBSignature' : [ None, ['VolatilityMagic', dict(value = "\x03\x00\xb6\x00")]],
}]}) 示例5: modification
# 需要导入模块: from volatility import obj [as 别名]
# 或者: from volatility.obj import VolatilityMagic [as 别名]
def modification(self, profile):
build = profile.metadata.get("build", 0)
if build >= 18362:
signature = "\x03\x00\xb8\x00"
else:
signature = "\x03\x00\xb6\x00"
profile.merge_overlay({
'VOLATILITY_MAGIC': [ None, {
'DTBSignature' : [ None, ['VolatilityMagic', dict(value = signature)]],
}]})