X f ddlZddlZddlmZmZmZmZmZddlm Z m Z m Z eje ZGdde jj ZGdde jj Zy)N)AnyClassVarDictListType) interfaces exceptions constantsceZdZdZdeej jdeddffd Z e de fdZ e de ej jfdZd ede fd Zd edej jfd Zd ej jd ej jddfdZdedefdZdej*j,dej j.dej jfdZxZS)ObjectTemplatea,Factory class that produces objects that adhere to the Object interface on demand. This is effectively a method of currying, but adds more structure to avoid abuse. It also allows inspection of information that should already be known: * Type size * Members * etc object_class type_namereturnNc ||d<t|dd|i||jjj}|j D]-}t ||tjt|||/y)Nr r) super__init__volr VolTemplateProxy_methodssetattr functoolspartialgetattr)selfr r arguments proxy_cls method_name __class__s Y/home/panchajanya/Development/work/volatility3/volatility3/framework/objects/templates.pyrzObjectTemplate.__init__ss %1 .! :9: :HH)):: $-- K !!')["A4H  c`|jjjj|SzReturns the children of the templated object (see :class:`~volatilit y.framework.interfaces.objects.ObjectInterface.VolTemplateProxy`))rr rsizers r r$zObjectTemplate.size*s%xx$$55::4@@r!c`|jjjj|Sr#)rr rchildrenr%s r r'zObjectTemplate.children0s%xx$$55>>tDDr!childcb|jjjj||S)zReturns the relative offset of a child of the templated object (see :class:`~volatility3.framework.interfaces.objects.ObjectInterface.VolTem plateProxy`))rr rrelative_child_offsetrr(s r r*z$ObjectTemplate.relative_child_offset6s(xx$$55KKDRWXXr!cb|jjjj||S)zReturns the template of a child of the templated object (see :class:`~volatility3.framework.interfaces.objects.ObjectInterface.VolTem plateProxy`))rr rchild_templater+s r r-zObjectTemplate.child_template<s'xx$$55DDT5QQr! old_child new_childcd|jjjj|||S)zReplaces `old_child` for `new_child` in the templated object's child list (see :class:`~volatility3.framework.interfaces.objects.ObjectInterf ace.VolTemplateProxy`))rr r replace_child)rr.r/s r r1zObjectTemplate.replace_childBs.xx$$55CC )Y  r! member_namecb|jjjj||S)zMReturns whether the object would contain a member called member_name.)rr r has_member)rr2s r r4zObjectTemplate.has_memberNs'xx$$55@@{SSr!context object_infoci}|jD]}|dk7s |j|||<|jjd||d|S)zConstructs the object. Returns: an object adhering to the :class:`~volatility3.framework.interfaces.objects.ObjectInterface` r r5r6r)rr )rr5r6rargs r __call__zObjectTemplate.__call__Ssb%' 88 /Cn$!%# # /%txx$$  8A  r!)__name__ __module__ __qualname____doc__rrobjectsObjectInterfacestrrpropertyintr$rTemplater'r*r-r1boolr4r5ContextInterfaceObjectInformationr: __classcell__)rs@r r r sS :--==>  "AcAA E$z11::;EE Y3Y3Y RCRJ,>,>,G,GR  %%..  %%..     TcTdT  ##44  ''99     + +  r!r c2eZdZUdZedeejjfdZ de fdZ ee Z e e ed<e Ze e ed<e Ze e ed<e Ze e ed<e Ze e ed <d ej&j(d ejj*fd Zy )ReferenceTemplatezFactory class that produces objects based on a delayed reference type. Attempts to access any standard attributes of a resolved template will result in a :class:`~volatility3.framework.exceptions.SymbolError`. rcgS)Nrr%s r r'zReferenceTemplate.childrenls r!c|jjjtj}d}t |dk(r|d}|d}t j||d|jj)zReferenced symbols must be appropriately resolved before they can provide information such as size This is because the size request has no context within which to determine the actual symbol structure.Nrz6Template contains no information about its structure: )rrsplitr BANGlenr SymbolError)rargskwargsr table_name symbol_names r _unresolvedzReferenceTemplate._unresolvedpssHH&&,,Y^^<  y>Q "1Jm $$  DTXXEWEWDX Y  r!r$r1r*r-r4r5r6ct|jj|jj}|||S)Nr8) symbol_spaceget_typerr)rr5r6templates r r:zReferenceTemplate.__call__s1 ''001C1CD[AAr!N)r;r<r=r>rBrrr?rDr'rrWr$r__annotations__r1r*r-r4r5rFrGr:rr!r rJrJes $z11::;  c  #;/D(3-/#.M8C=.+68C=6$/NHSM/ +J +B##44B ''99Br!rJ)rloggingtypingrrrrrvolatility3.frameworkrr r getLoggerr;vollogr?rDr rJrr!r rbs`22CC   8 $U Z''00U p&B **33&Br!