def __init__(self,addr_space):
GenMemScanObject.__init__(self, addr_space)
self.pool_tag = "\x4D\x6D\x4C\x64"
self.pool_size = 0x4c
def __init__(self,addr_space):
GenMemScanObject.__init__(self, addr_space)
self.pool_tag = "\x54\x43\x50\x41"
self.pool_size = 0x170
def __init__(self, addr_space):
GenMemScanObject.__init__(self, addr_space)
self.pool_size = obj_size(types, '_EPROCESS')
self.matches = []
def __init__(self, addr_space):
GenMemScanObject.__init__(self, addr_space)
self.pool_size = obj_size(types, '_EPROCESS')
self.matches = []
def __init__(self,addr_space):
GenMemScanObject.__init__(self, addr_space)
self.pool_tag = "\x50\x72\x6F\xE3"
self.pool_size = 0x280