volatility3.framework.objects.utility module

array_of_pointers(array, count, subtype, context)

Takes an object, and recasts it as an array of pointers to subtype.

Return type:

ObjectInterface

array_to_string(array, count=None, errors='replace')

Takes a volatility Array of characters and returns a string.

Return type:

ObjectInterface

bswap_32(value)

Return type:

int

bswap_64(value)

Return type:

int

pointer_to_string(pointer, count, errors='replace')

Takes a volatility Pointer to characters and returns a string.

rol(value, count, max_bits=64)

A rotate-left instruction in Python

Return type:

int