本文整理匯總了Python中volatility.obj.VolatilityMagic方法的典型用法代碼示例。如果您正苦於以下問題:Python obj.VolatilityMagic方法的具體用法?Python obj.VolatilityMagic怎麽用?Python obj.VolatilityMagic使用的例子?那麽, 這裏精選的方法代碼示例或許可以為您提供幫助。您也可以進一步了解該方法所在類volatility.obj
的用法示例。
在下文中一共展示了obj.VolatilityMagic方法的5個代碼示例,這些例子默認根據受歡迎程度排序。您可以為喜歡或者感覺有用的代碼點讚,您的評價將有助於係統推薦出更棒的Python代碼示例。
示例1: __init__
# 需要導入模塊: from volatility import obj [as 別名]
# 或者: from volatility.obj import VolatilityMagic [as 別名]
def __init__(self, *args, **kwargs):
# Remove the value kwarg since overlaying one
# on the other would give the value precedence
kwargs.pop('value', None)
# Save the distance argument for later
self.distance = kwargs.get('distance', None)
obj.VolatilityMagic.__init__(self, *args, **kwargs)
示例2: __init__
# 需要導入模塊: from volatility import obj [as 別名]
# 或者: from volatility.obj import VolatilityMagic [as 別名]
def __init__(self, *args, **kwargs):
# Remove the value kwarg since overlaying one
# on the other would give the value precedence
kwargs.pop('value', None)
obj.VolatilityMagic.__init__(self, *args, **kwargs)
示例3: modification
# 需要導入模塊: from volatility import obj [as 別名]
# 或者: from volatility.obj import VolatilityMagic [as 別名]
def modification(self, profile):
signature = '\x00\x00\x00\x00\x00\x00\x00\x00' if profile.metadata.get('memory_model', '32bit') == '32bit' else '\x00\xf8\xff\xff'
signature += 'KDBG' + struct.pack('<H', self.kdbgsize)
profile.merge_overlay({'VOLATILITY_MAGIC': [ None, {
'KDBGHeader': [ None, ['VolatilityMagic', dict(value = signature)]]
}
]})
示例4: modification
# 需要導入模塊: from volatility import obj [as 別名]
# 或者: from volatility.obj import VolatilityMagic [as 別名]
def modification(self, profile):
profile.merge_overlay({
'VOLATILITY_MAGIC': [ None, {
'DTBSignature' : [ None, ['VolatilityMagic', dict(value = "\x03\x00\xb6\x00")]],
}]})
示例5: modification
# 需要導入模塊: from volatility import obj [as 別名]
# 或者: from volatility.obj import VolatilityMagic [as 別名]
def modification(self, profile):
build = profile.metadata.get("build", 0)
if build >= 18362:
signature = "\x03\x00\xb8\x00"
else:
signature = "\x03\x00\xb6\x00"
profile.merge_overlay({
'VOLATILITY_MAGIC': [ None, {
'DTBSignature' : [ None, ['VolatilityMagic', dict(value = signature)]],
}]})