QuasarApp/pe-parse
4
0
Fork 0
mirror of https://github.com/QuasarApp/pe-parse.git synced 2025-04-27 12:54:31 +00:00
Code Issues Projects Releases Wiki Activity

Document size and RVA changes.

Browse Source
This commit is contained in:
Wesley Shields 2013-12-30 17:10:44 -05:00
parent ec5c49eaff
commit 4e5d6f6902
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
python/README.md
View File

@ -132,6 +132,8 @@ The **resource** object has the following attributes:
* name
* lang
* codepage
* RVA
* size
* data
The **resource** object has the following methods:
@ -171,8 +173,15 @@ for resource in resources:
else:
print "\tLang: %s" % hex(resource.lang)
print "\tCodepage: %s" % hex(resource.codepage)
print "\tRVA: %s" % hex(resource.RVA)
print "\tSize: %s" % hex(resource.size)
```
Note that some binaries (particularly packed) may have corrupt resource entries.
In these cases you may find that len(resource.data) is 0 but resource.size is
greater than 0. The *size* attribute is the size of the data as declared by the
resource data entry.
Authors
=======
pe-parse was designed and implemented by Andrew Ruef (andrew@trailofbits.com)