class documentation

class FileObject(Object):

View In Hierarchy

A class representing a file Windows object at a specific context.

Warning

This object is not meant to be constructed directly. Use reven2.preview.windows.Handle or the static methods of Object instead.

Method __init__ Undocumented
Method __str__ Undocumented
Property current_byte_offset The current byte offset in the file.
Property device The device object pointed associated with this file if found, else `None`.
Property filename The filename of this file.
Property filename_with_device The filename of this file prefixed by the device's name.
Property raw_body The raw `_FILE_OBJECT` structure of this object.
Constant _BODY_STRUCTURE_NAME Undocumented
Instance Variable _current_byte_offset Undocumented
Instance Variable _device Undocumented
Instance Variable _filename Undocumented
Instance Variable _filename_with_device Undocumented

Inherited from Object:

Static Method from_header Retrieve the Object from the address of the `_OBJECT_HEADER`.
Static Method header_address_from_object Retrieve the address of the `_OBJECT_HEADER` from the address of the object.
Method __eq__ Undocumented
Method __hash__ Undocumented
Method __ne__ Undocumented
Property raw_audit_info_header The raw `_OBJECT_HEADER_AUDIT_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_creator_info_header The raw `_OBJECT_HEADER_CREATOR_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_handle_info_header The raw `_OBJECT_HEADER_HANDLE_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_header The raw `_OBJECT_HEADER` structure associated with this object.
Property raw_name_info_header The raw `_OBJECT_HEADER_NAME_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_process_info_header The raw `_OBJECT_HEADER_PROCESS_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_quota_info_header The raw `_OBJECT_HEADER_QUOTA_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property raw_type The raw `_OBJECT_TYPE` structure associated with this object.
Property type_name The name of the type inside the `_OBJECT_TYPE` structure associated with this object.
Method _parse_optional_header Undocumented
Instance Variable _body Undocumented
Instance Variable _ctx Undocumented
Instance Variable _header Undocumented
Instance Variable _header_address Undocumented
Instance Variable _optional_headers Undocumented
Instance Variable _type Undocumented
Instance Variable _type_name Undocumented
def __init__(self, ctx, header_address, header, type, type_name, body):

Undocumented

Parameters
ctx:_ContextUndocumented
header_address:reven2.address._AbstractAddressUndocumented
header:reven2.types.StructInstanceUndocumented
type:reven2.types.StructInstanceUndocumented
type_name:strUndocumented
body:reven2.types.StructInstanceUndocumented
def __str__(self):

Undocumented

Returns
strUndocumented
@property
current_byte_offset: int =

The current byte offset in the file.

@property
device: _Optional[Object] =

The device object pointed associated with this file if found, else `None`.

@property
filename: str =

The filename of this file.

@property
filename_with_device: str =

The filename of this file prefixed by the device's name.

@property
raw_body: reven2.types.StructInstance =

The raw `_FILE_OBJECT` structure of this object.

_BODY_STRUCTURE_NAME: str =

Undocumented

Value
'_FILE_OBJECT'
_current_byte_offset: _Optional[int] =

Undocumented

_device: _Optional[Object] =

Undocumented

_filename: _Optional[str] =

Undocumented

_filename_with_device: _Optional[str] =

Undocumented