Trees | Indices | Help |
|
---|
|
A basic profile for a pe image.
This profile deals with Microsoft Oddities like name mangling, and correcting global offsets to the base image address.
Nested Classes | |
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.obj.Profile) |
|
top_level_class A collection of types relating to a single compilation unit. (Inherited from rekall.obj.Profile) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
|||
|
|||
|
|||
|
Class Variables | |
image_base = 0
|
|
METADATA =
|
|
COMMON_CLASSES =
(Inherited from rekall.obj.Profile)
|
|
EMPTY_DESCRIPTOR =
(Inherited from rekall.obj.Profile)
|
|
applied_modifications = None hash(x) (Inherited from rekall.obj.Profile) |
|
classes =
(Inherited from rekall.obj.Profile)
|
|
classes_by_name =
(Inherited from rekall.obj.Profile)
|
|
constants = None hash(x) (Inherited from rekall.obj.Profile) |
|
overlays = None hash(x) (Inherited from rekall.obj.Profile) |
|
plugin_feature =
(Inherited from rekall.obj.Profile)
|
|
types = None hash(x) (Inherited from rekall.obj.Profile) |
|
vtypes = None hash(x) (Inherited from rekall.obj.Profile) |
Properties | |
Inherited from |
Method Details |
|
Add the demangled constants. This allows us to handle 32 bit vs 64 bit constant names easily since the mangling rules are different.
|
Makes a copy of this profile.
|
Install required types, classes and constants. This method should be extended by derived classes. It is a class method to allow other profiles to call this method and install the various components into their own profiles.
|
|
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:36 2017 | http://epydoc.sourceforge.net |