reven2.ossi.ossi.OssiContext(object) class documentation

Part of reven2.ossi.ossi (View In Hierarchy)

Object that provide useful OSSI information for a particular context.

Warnings

Must not be directly constructed but retrieved through the following examples.

Examples

>>> # From a Transition
>>> transition.context_before().ossi # from the context before the transition
>>> transition.context_after().ossi  # from the context after the transition
>>> # From a Context
>>> context.ossi
Method __init__ Undocumented
Method location Useful OSSI information related to an address, such as the nearest symbol or the base address.
Method process Information about the process currently executing at this context, such as the process's name and PID.
Method __repr__ Undocumented
def __init__(self, _datasource, _ctx_id):
Undocumented
def location(self, addr=None):

Useful OSSI information related to an address, such as the nearest symbol or the base address.

If the location could not be resolved, None is returned.

Examples

>>> print(context.ossi.location())
'ntoskrnl!KiIsrLinkage+0x5a'

Information

ParametersaddrThe address on which the symbol context is query. if None, the value stored in the pc register is used as address. (type: int, long or None.)
ReturnsA Location or None.
def process(self):

Information about the process currently executing at this context, such as the process's name and PID.

If the current process cannot be resolved, None is returned.

Examples

>>> print(context.ossi.process())
MpCmdRun.exe (4936)

Information

ReturnsA ossi.process.Process, or None.
def __repr__(self):
Undocumented
API Documentation for reven2, generated by pydoctor at 2020-09-17 15:57:19.