reven2.preview.windows.object.FileObject

class documentation

class FileObject(Object):

A class representing a file Windows object at a specific context.

Warning

This object is not meant to be constructed directly. Use reven2.preview.windows.Handle or the static methods of Object instead.

Method	`__init__`	Undocumented
Method	`__str__`	Undocumented
Property	`current_byte_offset`	The current byte offset in the file.
Property	`device`	The device object pointed associated with this file if found, else `None`.
Property	`filename`	The filename of this file.
Property	`filename_with_device`	The filename of this file prefixed by the device's name.
Property	`raw_body`	The raw `_FILE_OBJECT` structure of this object.
Constant	`_BODY_STRUCTURE_NAME`	Undocumented
Instance Variable	`_current_byte_offset`	Undocumented
Instance Variable	`_device`	Undocumented
Instance Variable	`_filename`	Undocumented
Instance Variable	`_filename_with_device`	Undocumented

Inherited from Object:

Static Method	`from_header`	Retrieve the `Object` from the address of the `_OBJECT_HEADER`.
Static Method	`header_address_from_object`	Retrieve the address of the `_OBJECT_HEADER` from the address of the object.
Method	`__eq__`	Undocumented
Method	`__hash__`	Undocumented
Method	`__ne__`	Undocumented
Property	`raw_audit_info_header`	The raw `_OBJECT_HEADER_AUDIT_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_creator_info_header`	The raw `_OBJECT_HEADER_CREATOR_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_handle_info_header`	The raw `_OBJECT_HEADER_HANDLE_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_header`	The raw `_OBJECT_HEADER` structure associated with this object.
Property	`raw_name_info_header`	The raw `_OBJECT_HEADER_NAME_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_process_info_header`	The raw `_OBJECT_HEADER_PROCESS_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_quota_info_header`	The raw `_OBJECT_HEADER_QUOTA_INFO` structure associated with this object. If the optional header isn't found, `None`.
Property	`raw_type`	The raw `_OBJECT_TYPE` structure associated with this object.
Property	`type_name`	The name of the type inside the `_OBJECT_TYPE` structure associated with this object.
Method	`_parse_optional_header`	Undocumented
Instance Variable	`_body`	Undocumented
Instance Variable	`_ctx`	Undocumented
Instance Variable	`_header`	Undocumented
Instance Variable	`_header_address`	Undocumented
Instance Variable	`_optional_headers`	Undocumented
Instance Variable	`_type`	Undocumented
Instance Variable	`_type_name`	Undocumented

def __init__(self, ctx, header_address, header, type, type_name, body):

overrides reven2.preview.windows.object.Object.__init__

Undocumented

Parameters
ctx:`_Context`	Undocumented
header_address:`reven2.address._AbstractAddress`	Undocumented
header:`reven2.types.StructInstance`	Undocumented
type:`reven2.types.StructInstance`	Undocumented
type_name:`str`	Undocumented
body:`reven2.types.StructInstance`	Undocumented

def __str__(self):

overrides reven2.preview.windows.object.Object.__str__

Undocumented

Returns
`str`	Undocumented

@property
current_byte_offset: int =

The current byte offset in the file.

@property
device: _Optional[Object] =

The device object pointed associated with this file if found, else `None`.

@property
filename: str =

The filename of this file.

@property
filename_with_device: str =

The filename of this file prefixed by the device's name.

@property
raw_body: reven2.types.StructInstance =

overrides reven2.preview.windows.object.Object.raw_body

The raw `_FILE_OBJECT` structure of this object.

_BODY_STRUCTURE_NAME: str =

overrides reven2.preview.windows.object.Object._BODY_STRUCTURE_NAME

Undocumented

Value

'_FILE_OBJECT'

_current_byte_offset: _Optional[int] =

Undocumented

_device: _Optional[Object] =

Undocumented

_filename: _Optional[str] =

Undocumented

_filename_with_device: _Optional[str] =

Undocumented