Module Import alias Import alias Import alias Import alias Import alias Import alias Assign NameStore Call AttributeLoad NameLoad attr Str FunctionDef arguments args NameParam NameParam defaults body Expr Str TryExcept body Assign NameStore BinOpLShift Call NameLoad SubscriptLoad NameLoad Index Num Num AugAssignBitOr NameStore Call NameLoad SubscriptLoad NameLoad Index Num Assign NameStore BinOpBitAnd NameLoad Num Assign NameStore BinOpRShift BinOpBitAnd NameLoad Num Num Assign NameStore BinOpRShift BinOpBitAnd NameLoad Num Num AugAssignAdd NameStore Num Assign NameStore BinOpLShift Call NameLoad SubscriptLoad NameLoad Index Num Num AugAssignBitOr NameStore Call NameLoad SubscriptLoad NameLoad Index Num Assign NameStore BinOpBitAnd NameLoad Num AugAssignMult NameStore Num Assign NameStore BinOpRShift BinOpBitAnd NameLoad Num Num Assign NameStore BinOpRShift BinOpBitAnd NameLoad Num Num Return Call AttributeLoad NameLoad attr NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad handlers ExceptHandler body Return AttributeLoad AttributeLoad NameLoad attr attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str If CompareEq BinOpMod NameLoad NameLoad Num body Return NameLoad Return BinOpAdd NameLoad BinOpSub NameLoad BinOpMod NameLoad NameLoad decorator_list ClassDef bases NameLoad body Expr Str FunctionDef arguments args NameParam NameParam defaults body Expr Str Expr Call AttributeLoad Call NameLoad NameLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return Call NameLoad Call NameLoad NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return BinOpMod Str AttributeLoad NameLoad attr decorator_list decorator_list ClassDef bases NameLoad body Expr Str FunctionDef arguments args NameParam NameParam NameParam defaults body Assign NameStore BinOpMod Str TupleLoad Call NameLoad NameLoad Call NameLoad NameLoad Expr Call AttributeLoad Call NameLoad NameLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return Call NameLoad Call NameLoad NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return BinOpMod Str AttributeLoad NameLoad attr decorator_list decorator_list ClassDef bases NameLoad body Expr Str FunctionDef arguments args NameParam NameParam NameParam NameParam defaults body Expr Str Assign AttributeStore NameLoad attr NameLoad Assign AttributeStore NameLoad attr NameLoad Assign AttributeStore NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return BinOpMod Str Call NameLoad Call AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam defaults body Return Call NameLoad Call NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults NameLoad body Expr Str For NameStore NameLoad body FunctionDef arguments args defaults body Assign NameStore Call NameLoad NameLoad BinOpAdd Str SubscriptLoad NameLoad Index Num Return Call NameLoad SubscriptLoad NameLoad Slice Num decorator_list Expr Call NameLoad NameLoad SubscriptLoad NameLoad Index Num NameLoad Assign NameStore Call NameLoad If Call NameLoad NameLoad AttributeLoad NameLoad attr body Assign NameStore Call AttributeLoad NameLoad attr Str orelse Assign NameStore Call NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr BinOpMod Str TupleLoad Call AttributeLoad SubscriptLoad NameLoad Index Num attr SubscriptLoad NameLoad Index Num Call NameLoad Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Num NameLoad Expr Call NameLoad NameLoad BinOpAdd Str SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam defaults NameLoad body Expr Str If NameLoad body Expr Call AttributeLoad NameLoad attr ListLoad TupleLoad NameLoad NameLoad NameLoad NameLoad orelse Expr Call AttributeLoad NameLoad attr ListLoad TupleLoad NameLoad NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad Return Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad NameLoad attr Str AttributeLoad NameLoad attr NameLoad Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad If UnaryOpNot NameLoad body Assign NameStore Call AttributeLoad AttributeLoad NameLoad attr attr Str NameLoad Assign NameStore BinOpSub NameLoad NameLoad TryExcept body Return SubscriptLoad Call AttributeLoad SubscriptLoad Call AttributeLoad NameLoad attr BinOpMod Str NameLoad AttributeLoad NameLoad attr NameLoad Index Num attr Str Index Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad body Expr Str Assign NameStore SubscriptLoad AttributeLoad NameLoad attr Slice BinOpAdd AttributeLoad NameLoad attr NameLoad If NameLoad body Assign NameStore SubscriptLoad NameLoad Slice NameLoad If BinOpMod Call NameLoad NameLoad Num body Assign NameStore SubscriptLoad NameLoad Slice Num TryExcept body Assign NameStore Call AttributeLoad ListComp SubscriptLoad NameLoad Slice NameLoad BinOpAdd NameLoad Num comprehension NameStore Call NameLoad Num Call NameLoad NameLoad Num attr Str Assign NameStore SubscriptLoad NameLoad Slice BinOpMult NameLoad Num handlers ExceptHandler type NameLoad body Pass Return Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str TryExcept body Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad Return Call NameLoad SubscriptLoad AttributeLoad NameLoad attr Slice NameLoad BinOpAdd NameLoad Num SubscriptLoad AttributeLoad NameLoad attr Slice BinOpAdd NameLoad Num BinOpAdd NameLoad Num handlers ExceptHandler type AttributeLoad NameLoad attr body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Assign NameStore BinOpAdd AttributeLoad NameLoad attr NameLoad TryExcept body Assign NameStore SubscriptLoad AttributeLoad NameLoad attr Slice NameLoad BinOpAdd NameLoad Num handlers ExceptHandler type NameLoad body Raise Call NameLoad NameLoad Call NameLoad AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad NameLoad Return BinOpMod Str TupleLoad SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Expr Str Return BinOpAdd AttributeLoad NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Str Return AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam defaults body Expr Str Return AttributeLoad NameLoad attr decorator_list decorator_list
N/A N/A sys N/A struct N/A logging N/A datetime N/A binascii N/A six N/A g_logger N/A N/A logging getLogger BinaryParser dosdate N/A N/A dosdate dostime N/A N/A N/A 
    `dosdate`: 2 bytes, little endian.
    `dostime`: 2 bytes, little endian.
    returns: datetime.datetime or datetime.datetime.min on error
     N/A N/A N/A t N/A N/A ord N/A dosdate N/A 1 8 N/A t N/A ord N/A dosdate N/A 0 N/A day N/A t 31 N/A month N/A N/A t 480 5 N/A year N/A N/A t 65024 9 N/A year 1980 N/A t N/A N/A ord N/A dostime N/A 1 8 N/A t N/A ord N/A dostime N/A 0 N/A sec N/A t 31 N/A sec 2 N/A minute N/A N/A t 2016 5 N/A hour N/A N/A t 63488 11 N/A N/A N/A datetime datetime year month day hour minute sec N/A N/A N/A N/A N/A N/A datetime datetime min N/A align N/A N/A offset alignment N/A N/A N/A 
    Return the offset aligned to the nearest greater given alignment
    Arguments:
    - `offset`: An integer
    - `alignment`: An integer
     N/A N/A N/A offset alignment 0 N/A N/A offset N/A N/A offset N/A alignment N/A offset alignment N/A ParseException N/A Exception N/A N/A 
    An exception to be thrown during parsing, such as
    when an invalid header is encountered.
     __init__ N/A N/A self value N/A N/A N/A 
        Constructor.
        Arguments:
        - `value`: A string description.
         N/A N/A N/A N/A super ParseException self __init__ value N/A __str__ N/A N/A self N/A N/A N/A N/A str N/A unicode self N/A __unicode__ N/A N/A self N/A N/A N/A N/A Parse Exception(%s) N/A self _value N/A N/A OverrunBufferException N/A ParseException N/A N/A 
    An exception to be thrown during parsing when something is unpack into
    or from a location beyond the boundaries of a buffer.
     __init__ N/A N/A self readOffs bufLen N/A N/A N/A tvalue N/A read: %s, buffer length: %s N/A N/A hex readOffs N/A hex bufLen N/A N/A N/A N/A super ParseException self __init__ tvalue N/A __str__ N/A N/A self N/A N/A N/A N/A str N/A unicode self N/A __unicode__ N/A N/A self N/A N/A N/A N/A Tried to parse beyond the end of the file (%s) N/A self _value N/A N/A Block N/A object N/A N/A 
    Base class for structured blocks used in parsing.
    A block is associated with a offset into a byte-string.
     __init__ N/A N/A self buf offset parent N/A N/A N/A 
        Constructor.
        Arguments:
        - `buf`: Byte string containing binary data.
        - `offset`: The offset into the buffer at which the block starts.
        - `parent`: The parent block, which links to this block.
         N/A N/A self _buf buf N/A N/A self _offset offset N/A N/A self _parent parent N/A __unicode__ N/A N/A self N/A N/A N/A N/A BLOCK @ %s. N/A hex N/A N/A self offset N/A __str__ N/A N/A self N/A N/A N/A N/A str N/A unicode self N/A _prepare_fields N/A N/A self fields N/A False N/A N/A 
        Declaratively add fields to this block.
        self._fields should contain a list of tuples ("type", "name", offset).
        This method will dynamically add corresponding offset and unpacker methods
          to this block.
        Arguments:
        - `fields`: (Optional) A list of tuples to add. Otherwise,
            self._fields is used.
         N/A field fields N/A handler N/A N/A N/A N/A N/A f N/A getattr self N/A unpack_ N/A field N/A 0 N/A N/A f N/A field N/A 2 N/A N/A N/A setattr self N/A field N/A 1 handler N/A debug_payload N/A handler N/A N/A isinstance debug_payload N/A six text_type N/A N/A debug_payload N/A N/A debug_payload encode utf8 N/A N/A debug_payload N/A str debug_payload N/A debug_payload N/A N/A binascii hexlify debug_payload N/A N/A N/A g_logger debug N/A (%s) %s	@ %s	: %s N/A N/A N/A N/A field N/A 0 upper N/A field N/A 1 N/A hex N/A N/A self absolute_offset N/A field N/A 2 debug_payload N/A N/A setattr self N/A _off_ N/A field N/A 1 N/A field N/A 2 N/A declare_field N/A N/A self type name offset length N/A False N/A N/A 
        A shortcut to add a field.
        Arguments:
        - `type`: A string. Should be one of the unpack_* types.
        - `name`: A string.
        - `offset`: A number.
        - `length`: (Optional) A number.
         N/A length N/A N/A N/A N/A self _prepare_fields N/A N/A type name offset length N/A N/A N/A N/A self _prepare_fields N/A N/A type name offset N/A unpack_byte N/A N/A self offset N/A N/A N/A 
        Returns a little-endian unsigned byte from the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A N/A N/A N/A struct unpack_from <B N/A self _buf o N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_word N/A N/A self offset N/A N/A N/A 
        Returns a little-endian WORD (2 bytes) from the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A N/A N/A N/A struct unpack_from <H N/A self _buf o N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A pack_word N/A N/A self offset word N/A N/A N/A 
        Applies the little-endian WORD (2 bytes) to the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        - `word`: The data to apply.
         N/A o N/A N/A self _offset offset N/A N/A N/A struct pack_into <H N/A self _buf o word N/A unpack_dword N/A N/A self offset N/A N/A N/A 
        Returns a little-endian DWORD (4 bytes) from the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A N/A N/A N/A struct unpack_from <I N/A self _buf o N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_int N/A N/A self offset N/A N/A N/A 
        Returns a little-endian signed integer (4 bytes) from the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A N/A N/A N/A struct unpack_from <i N/A self _buf o N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_qword N/A N/A self offset N/A N/A N/A 
        Returns a little-endian QWORD (8 bytes) from the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A N/A N/A N/A struct unpack_from <Q N/A self _buf o N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_string N/A N/A self offset length N/A False N/A N/A 
        Returns a string from the relative offset with the given length.
        The string does not include the final NULL character.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        - `length`: (Optional) The length of the string. If no length is provided,
                       the string runs until a NULL.
        Throws:
        - `OverrunBufferException`
        - `IndexError`
         N/A o N/A N/A self _offset offset N/A N/A length N/A N/A end N/A N/A N/A self _buf find o N/A length N/A end o N/A N/A N/A N/A N/A N/A N/A N/A N/A struct unpack_from N/A <%ds length N/A self _buf o N/A 0 partition N/A 0 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_wstring N/A N/A self offset ilength N/A False N/A N/A 
        Returns a UTF-16 decoded string from the relative offset with
        the given length, where each character is a wchar (2 bytes).
        The string does not include the final
        NULL character.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        - `length`: (Optional) The length of the string. If no length is provided,
                       the string runs until a double NULL.
        Throws:
        - `UnicodeDecodeError`
        - `IndexError`
         N/A raw_bytes N/A N/A self _buf N/A N/A N/A self _offset offset N/A ilength N/A N/A raw_bytes N/A raw_bytes N/A ilength N/A N/A N/A len raw_bytes 2 N/A N/A raw_bytes N/A raw_bytes N/A -1 N/A N/A N/A index N/A N/A N/A N/A raw_bytes N/A i N/A i 2 N/A i N/A range 0 N/A len raw_bytes 2 index N/A raw_bytes N/A raw_bytes N/A N/A index 2 N/A N/A N/A ValueError N/A N/A N/A N/A N/A raw_bytes decode utf-16-le N/A unpack_dosdate N/A N/A self offset N/A N/A N/A 
        Returns a datetime from the DOSDATE and DOSTIME starting at
        the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A N/A N/A o N/A N/A self _offset offset N/A N/A dosdate N/A N/A self _buf N/A o N/A o 2 N/A N/A self _buf N/A N/A o 2 N/A o 4 N/A N/A N/A N/A struct error N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A unpack_guid N/A N/A self offset N/A N/A N/A 
        Returns a string containing a GUID starting at the relative offset.
        Arguments:
        - `offset`: The relative offset from the start of the block.
        Throws:
        - `OverrunBufferException`
         N/A o N/A N/A self _offset offset N/A N/A N/A _bin N/A N/A self _buf N/A o N/A o 16 N/A N/A N/A IndexError N/A N/A N/A OverrunBufferException o N/A len N/A self _buf N/A h N/A map ord _bin N/A N/A %02x%02x%02x%02x-%02x%02x-%02x%02x-%02x%02x-%02x%02x%02x%02x%02x%02x N/A N/A h N/A 3 N/A h N/A 2 N/A h N/A 1 N/A h N/A 0 N/A h N/A 5 N/A h N/A 4 N/A h N/A 7 N/A h N/A 6 N/A h N/A 8 N/A h N/A 9 N/A h N/A 10 N/A h N/A 11 N/A h N/A 12 N/A h N/A 13 N/A h N/A 14 N/A h N/A 15 N/A absolute_offset N/A N/A self offset N/A N/A N/A 
        Get the absolute offset from an offset relative to this block
        Arguments:
        - `offset`: The relative offset into this block.
         N/A N/A N/A self _offset offset N/A parent N/A N/A self N/A N/A N/A 
        Get the parent block. See the class documentation for what the
        parent link is.
         N/A N/A self _parent N/A offset N/A N/A self N/A N/A N/A 
        Equivalent to self.absolute_offset(0x0), which is the starting
        offset of this block.
         N/A N/A self _offset N/A N/A