rekall.plugins.overlays.native

Different models: http://www.unix.org/version2/whatsnew/lp64_wp.html http://en.wikipedia.org/wiki/64-bit_computing

Python standard types: http://docs.python.org/2/library/struct.html#format-characters

LP64

Value:

{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_string= '<c'), 
'char': obj.Curry(obj.NativeType, type_name= 'char', format_string= '<
c'), 'unsigned char': obj.Curry(obj.NativeType, type_name= 'unsigned c
har', format_string= '<B'), 'signed byte': obj.Curry(obj.NativeType, t
ype_name= 'signed byte', format_string= '<b'), 'short': obj.Curry(obj.
NativeType, type_name= 'short', format_string= '<h'), 'unsigned short'
: obj.Curry(obj.NativeType, type_name= 'unsigned short', format_string
= '<H'), 'int': obj.Curry(obj.NativeType, type_name= 'int', format_str
...

LLP64

Value:

{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_string= '<c'), 
'char': obj.Curry(obj.NativeType, type_name= 'char', format_string= '<
c'), 'unsigned char': obj.Curry(obj.NativeType, type_name= 'unsigned c
har', format_string= '<B'), 'signed byte': obj.Curry(obj.NativeType, t
ype_name= 'signed byte', format_string= '<b'), 'short': obj.Curry(obj.
NativeType, type_name= 'short', format_string= '<h'), 'unsigned short'
: obj.Curry(obj.NativeType, type_name= 'unsigned short', format_string
= '<H'), 'int': obj.Curry(obj.NativeType, type_name= 'int', format_str
...

ILP32

Value:

{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_string= '<c'), 
'char': obj.Curry(obj.NativeType, type_name= 'char', format_string= '<
c'), 'unsigned char': obj.Curry(obj.NativeType, type_name= 'unsigned c
har', format_string= '<B'), 'signed byte': obj.Curry(obj.NativeType, t
ype_name= 'signed byte', format_string= '<b'), 'short': obj.Curry(obj.
NativeType, type_name= 'short', format_string= '<h'), 'unsigned short'
: obj.Curry(obj.NativeType, type_name= 'unsigned short', format_string
= '<H'), 'int': obj.Curry(obj.NativeType, type_name= 'int', format_str
...

BE32

Value:

{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_string= '>c'), 
'char': obj.Curry(obj.NativeType, type_name= 'char', format_string= '>
c'), 'unsigned char': obj.Curry(obj.NativeType, type_name= 'unsigned c
har', format_string= '>B'), 'signed byte': obj.Curry(obj.NativeType, t
ype_name= 'signed byte', format_string= '<b'), 'short': obj.Curry(obj.
NativeType, type_name= 'short', format_string= '>h'), 'unsigned short'
: obj.Curry(obj.NativeType, type_name= 'unsigned short', format_string
= '>H'), 'int': obj.Curry(obj.NativeType, type_name= 'int', format_str
...

model

Value:

{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_string= '>c'), 
'char': obj.Curry(obj.NativeType, type_name= 'char', format_string= '>
c'), 'unsigned char': obj.Curry(obj.NativeType, type_name= 'unsigned c
har', format_string= '>B'), 'signed byte': obj.Curry(obj.NativeType, t
ype_name= 'signed byte', format_string= '<b'), 'short': obj.Curry(obj.
NativeType, type_name= 'short', format_string= '>h'), 'unsigned short'
: obj.Curry(obj.NativeType, type_name= 'unsigned short', format_string
= '>H'), 'int': obj.Curry(obj.NativeType, type_name= 'int', format_str
...

Variables
	LP64 = `{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_...`
	LLP64 = `{'bool': obj.Curry(obj.Bool, type_name= 'bool', format...`
	ILP32 = `{'bool': obj.Curry(obj.Bool, type_name= 'bool', format...`
	BE32 = `{'bool': obj.Curry(obj.Bool, type_name= 'bool', format_...`
	__package__ = `'rekall.plugins.overlays'`
	model = `{'bool': obj.Curry(obj.Bool, type_name= 'bool', format...`
	new = `'short unsigned int'`
	old = `'unsigned short'`

Module native_types

LP64

LLP64

ILP32

BE32

model