Package PE :: Module carve :: Class CarvedPE
[hide private]
[frames] | no frames]

Class CarvedPE

source code


Instance Methods [hide private]
 
__init__(self, fbytes, offset, xkey)
Construct a PE object.
source code
 
readAtOffset(self, offset, size) source code
 
getFileSize(self) source code

Inherited from PE: __getattr__, checkRva, getDataDirectory, getDllName, getExportName, getExports, getForwarders, getImports, getMaxRva, getPdataEntries, getPdbPath, getRelocations, getResourceDef, getResources, getSectionByName, getSections, getSignCertInfo, getSignature, getVS_VERSIONINFO, parseExports, parseImports, parseLoadConfig, parseRelocations, parseResources, parseSections, readAtRva, readPointerAtOffset, readPointerAtRva, readResource, readRvaFormat, readStringAtRva, readStructAtOffset, readStructAtRva, rvaToOffset

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

__init__(self, fbytes, offset, xkey)
(Constructor)

source code 

Construct a PE object. use inmem=True if you are using a MemObjFile or other "memory like" image.

Overrides: object.__init__
(inherited documentation)

readAtOffset(self, offset, size)

source code 
Overrides: PE.readAtOffset