WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-30 21:44:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Black formatting updates

Browse Source
This commit is contained in:
hsarkey
2025-01-24 13:24:33 -05:00
parent d172e12717
commit 9ce1fd7ac0
1 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/windows/extensions/__init__.py
+11 -8
View File
@@ -816,17 +816,17 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
if self._context.symbol_space.has_type(
sym_table + constants.BANG + "_EWOW64PROCESS"
):
offset=proc.Peb
offset = proc.Peb
# vista sp0-sp1 and 2003 sp1-sp2
elif self._context.symbol_space.has_type(
sym_table + constants.BANG + "_WOW64_PROCESS"
):
offset=proc.Wow64
offset = proc.Wow64
else:
offset=proc
offset = proc
peb32 = self._context.object(
f"{self._32bit_table_name}{constants.BANG}_PEB32",
layer_name=proc_layer_name,
@@ -838,7 +838,8 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
"""Generator for DLLs in the order that they were loaded."""
try:
pebs = [
self.get_peb(), self.get_peb32(),
self.get_peb(),
self.get_peb32(),
]
for peb in pebs:
if peb:
@@ -850,7 +851,7 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
peb.Ldr = peb.Ldr.cast("pointer", subtype=ldr_data)
sym_table = self._32bit_table_name
for entry in peb.Ldr.InLoadOrderModuleList.to_list(
f"{sym_table}{constants.BANG}" + "_LDR_DATA_TABLE_ENTRY",
f"{sym_table}{constants.BANG}" + "_LDR_DATA_TABLE_ENTRY",
"InLoadOrderLinks",
):
yield entry
@@ -862,7 +863,8 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
try:
pebs = [
self.get_peb(), self.get_peb32(),
self.get_peb(),
self.get_peb32(),
]
for peb in pebs:
if peb:
@@ -885,7 +887,8 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
"""Generator for DLLs in the order that they appear in memory"""
try:
pebs = [
self.get_peb(), self.get_peb32(),
self.get_peb(),
self.get_peb32(),
]
for peb in pebs:
if peb: