From 16ffc3e237f703cb5e24c8a7006d4631ad26ed10 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sat, 16 Jan 2016 13:20:40 +0000 Subject: [PATCH] Refactor the location of xp_sp2_x86_vtypes. --- test_rig.py | 5 +++-- .../framework/{ => symbols/windows}/xp_sp2_x86_vtypes.py | 0 2 files changed, 3 insertions(+), 2 deletions(-) rename volatility/framework/{ => symbols/windows}/xp_sp2_x86_vtypes.py (100%) diff --git a/test_rig.py b/test_rig.py index 3cc962627..3de442aab 100644 --- a/test_rig.py +++ b/test_rig.py @@ -9,9 +9,10 @@ import pdb from volatility import framework from volatility.framework import contexts -from volatility.framework import xp_sp2_x86_vtypes, layers, plugins +from volatility.framework import layers, plugins from volatility.framework.interfaces import objects from volatility.framework.symbols import vtypes, native, windows +from volatility.framework.symbols.windows import xp_sp2_x86_vtypes def utils_load_as(): @@ -20,7 +21,7 @@ def utils_load_as(): ctx = framework.contexts.Context(native_list) ctx.symbol_space.append(native_list) - from volatility.framework import xp_sp2_x86_vtypes + from volatility.framework.symbols.windows import xp_sp2_x86_vtypes virtual_types = xp_sp2_x86_vtypes.ntkrnlmp_types ntkrnlmp = vtypes.VTypeSymbolTable('ntkrnlmp', virtual_types, ctx.symbol_space.natives) diff --git a/volatility/framework/xp_sp2_x86_vtypes.py b/volatility/framework/symbols/windows/xp_sp2_x86_vtypes.py similarity index 100% rename from volatility/framework/xp_sp2_x86_vtypes.py rename to volatility/framework/symbols/windows/xp_sp2_x86_vtypes.py