Type

final class ntoseye.Type

A named PDB struct or union layout, or an enum definition.

at(address: int | str | Process | Thread | Module | Driver | Device | Heap) → Struct

Bind this layout to an address as a reflective struct cursor.

property fields: dict[str, FieldInfo]

Field layouts by name, in offset order. An enum has no fields.

property name: str

The PDB type name (for example, _EPROCESS).

property size: int

The size in bytes, which for an enum is the width of the underlying storage.

to_dict() → dict[str, Any]

property values: dict[str, int]

Enum members by name, in declaration order. For a struct or union, this raises an exception.

walk(head: int | str | Process | Thread | Module | Driver | Device | Heap, link_field: str) → list[Struct]

Walk an intrusive list whose head is at head, where link_field is the field that holds the links.