예제 #1
0
 def attribute_length(self):
     return int(reverse_hexlify(self.attribute_length_raw), 16)
예제 #2
0
 def file_reference_to_base_record(self):
     return int(reverse_hexlify(self.file_reference_to_base_record_raw), 16)
예제 #3
0
 def attribute_content_initialized_size(self):
     return int(
         reverse_hexlify(self.attribute_content_initialized_size_raw), 16)
예제 #4
0
 def fixup_array_offset(self):
     return int(reverse_hexlify(self.fixup_array_offset_raw), 16)
예제 #5
0
 def link_count(self):
     return int(reverse_hexlify(self.link_count_raw), 16)
예제 #6
0
 def lsn(self):
     return int(reverse_hexlify(self.lsn_raw), 16)
예제 #7
0
 def flags(self):
     return int(reverse_hexlify(self.flags_raw), 16)
예제 #8
0
 def attribute_content_initialized_size(self):
     return int(reverse_hexlify(self.attribute_content_initialized_size_raw), 16)
예제 #9
0
 def type(self):
     return int(reverse_hexlify(self.type_raw), 16)
예제 #10
0
 def compression_unit_size(self):
     # not checked yet if this is correct. see blz 257
     return int(reverse_hexlify(self.compression_unit_size_raw), 16)
예제 #11
0
 def attribute_content_actual_size(self):
     return int(reverse_hexlify(self.attribute_content_actual_size_raw), 16)
예제 #12
0
 def runlist_offset(self):
     return int(reverse_hexlify(self.runlist_offset_raw), 16)
예제 #13
0
 def runlist_ending_vcn(self):
     return int(reverse_hexlify(self.runlist_starting_vcn_raw), 16)
예제 #14
0
 def content_offset(self):
     return int(reverse_hexlify(self.content_offset_raw), 16)
예제 #15
0
 def name_offset(self):
     return int(reverse_hexlify(self.name_offset_raw), 16)
예제 #16
0
 def attribute_length(self):
     return int(reverse_hexlify(self.attribute_length_raw), 16)
예제 #17
0
 def fixup_array_offset(self):
     return int(reverse_hexlify(self.fixup_array_offset_raw), 16)
예제 #18
0
 def non_resident_flag(self):
     return int(reverse_hexlify(self.non_resident_flag_raw), 16)
예제 #19
0
 def link_count(self):
     return int(reverse_hexlify(self.link_count_raw), 16)
예제 #20
0
 def name_offset(self):
     return int(reverse_hexlify(self.name_offset_raw), 16)
예제 #21
0
 def file_reference_to_base_record(self):
     return int(reverse_hexlify(self.file_reference_to_base_record_raw), 16)
예제 #22
0
 def attribute_identifier(self):
     return int(reverse_hexlify(self.attribute_identifier_raw), 16)
예제 #23
0
 def lsn(self):
     return int(reverse_hexlify(self.lsn_raw), 16)
예제 #24
0
 def total_number_of_sectors(self):
     return int(reverse_hexlify(self.total_number_of_sectors_raw), 16)
예제 #25
0
 def flags(self):
     return int(reverse_hexlify(self.flags_raw), 16)
예제 #26
0
 def mft_mirror_starting_cluster(self):
     # Value resembles the amount of clusters from the start of the partition
     return int(reverse_hexlify(self.mft_mirror_starting_cluster_raw), 16)
예제 #27
0
 def __init__(self, data):
     attribute_length = int(reverse_hexlify(data[4:8]), 16)
     self.data = data[:attribute_length]
예제 #28
0
 def serial_number(self):
     return reverse_hexlify(self.serial_number_raw).decode()
예제 #29
0
 def type(self):
     return int(reverse_hexlify(self.type_raw), 16)
예제 #30
0
 def bytes_per_sector(self):
     return int(reverse_hexlify(self.bytes_per_sector_raw), 16)
예제 #31
0
 def non_resident_flag(self):
     return int(reverse_hexlify(self.non_resident_flag_raw), 16)
예제 #32
0
 def mft_mirror_starting_cluster(self):
     # Value resembles the amount of clusters from the start of the partition
     return int(reverse_hexlify(self.mft_mirror_starting_cluster_raw), 16)
예제 #33
0
 def attribute_identifier(self):
     return int(reverse_hexlify(self.attribute_identifier_raw), 16)
예제 #34
0
 def serial_number(self):
     return reverse_hexlify(self.serial_number_raw).decode()
예제 #35
0
 def fixup_array_n_entries(self):
     return int(reverse_hexlify(self.fixup_array_n_entries_raw), 16)
예제 #36
0
 def bytes_per_sector(self):
     return int(reverse_hexlify(self.bytes_per_sector_raw), 16)
예제 #37
0
 def sequence_value(self):
     return int(reverse_hexlify(self.sequence_value_raw), 16)
예제 #38
0
 def total_number_of_sectors(self):
     return int(reverse_hexlify(self.total_number_of_sectors_raw), 16)
예제 #39
0
 def first_attribute_offset(self):
     return int(reverse_hexlify(self.first_attribute_offset_raw), 16)
예제 #40
0
 def content_size(self):
     return int(reverse_hexlify(self.content_size_raw), 16)
예제 #41
0
 def mft_entry_allocated_size(self):
     return int(reverse_hexlify(self.mft_entry_allocated_size_raw), 16)
예제 #42
0
 def __init__(self, data):
     attribute_length = int(reverse_hexlify(data[4:8]), 16)
     self.data = data[:attribute_length]
예제 #43
0
 def next_attribute_id(self):
     return int(reverse_hexlify(self.next_attribute_id_raw), 16)
예제 #44
0
 def content_offset(self):
     return int(reverse_hexlify(self.content_offset_raw), 16)
예제 #45
0
 def fixup_array_n_entries(self):
     return int(reverse_hexlify(self.fixup_array_n_entries_raw), 16)
예제 #46
0
 def runlist_ending_vcn(self):
     return int(reverse_hexlify(self.runlist_starting_vcn_raw), 16)
예제 #47
0
 def sequence_value(self):
     return int(reverse_hexlify(self.sequence_value_raw), 16)
예제 #48
0
 def runlist_offset(self):
     return int(reverse_hexlify(self.runlist_offset_raw), 16)
예제 #49
0
 def first_attribute_offset(self):
     return int(reverse_hexlify(self.first_attribute_offset_raw), 16)
예제 #50
0
 def compression_unit_size(self):
     # not checked yet if this is correct. see blz 257
     return int(reverse_hexlify(self.compression_unit_size_raw), 16)
예제 #51
0
 def mft_entry_allocated_size(self):
     return int(reverse_hexlify(self.mft_entry_allocated_size_raw), 16)
예제 #52
0
 def attribute_content_actual_size(self):
     return int(reverse_hexlify(self.attribute_content_actual_size_raw), 16)
예제 #53
0
 def next_attribute_id(self):
     return int(reverse_hexlify(self.next_attribute_id_raw), 16)
예제 #54
0
 def content_size(self):
     return int(reverse_hexlify(self.content_size_raw), 16)