Home | Trees | Indices | Help |
|
---|
|
object --+ | PE
PE object.
|
|||
|
|||
bool |
|
||
bool |
|
||
|
|||
str |
|
||
str |
|
||
|
|||
|
|||
|
|||
str |
|
||
str |
|
||
str |
|
||
str |
|
||
int |
|
||
int |
|
||
int |
|
||
int |
|
||
int |
|
||
|
|||
|
|||
|
|||
|
|||
|
|||
int |
|
||
int |
|
||
DWORD |
|
||
WORD |
|
||
DWORD |
|
||
WORD |
|
||
QWORD |
|
||
QWORD |
|
||
str |
|
||
str |
|
||
String |
|
||
bool |
|
||
bool |
|
||
bool |
|
||
bool |
|
||
bool |
|
||
bool |
|
||
|
|||
str |
|
||
str |
|
||
str |
|
||
ImageBoundImportDescriptor |
|
||
TLSDirectory |
|
||
ImageBaseRelocation |
|
||
ImageExportTable |
|
||
ImageDebugDirectory |
|
||
ImageImportDescriptor |
|
||
NETDirectory |
|
||
str |
|
||
str |
|
||
str |
|
||
str |
|
||
int |
|
||
Inherited from |
|
|||
str |
|
|
|||
dosHeader DosHeader dosHeader. |
|||
dosStubstr dosStub.
|
|||
ntHeaders NtHeaders ntHeaders. |
|||
sectionHeaders SectionHeaders sectionHeaders. |
|||
sections Sections sections. |
|
|||
Inherited from |
|
A class representation of the Portable Executable format.
See Also: PE format http://msdn.microsoft.com/en-us/library/windows/desktop/ms680547%28v=vs.85%29.aspx To Do:
|
Check for MZ signature. |
Check for PE signature. |
Performs validations over some fields of the PE structure to determine if the loaded file has a valid PE format.
|
Returns data from a file.
|
Writes data from PE object to a file.
|
Write data to a file.
|
str(x)
|
Updates the data in every Directory object. |
Returns the data between the last section header and the begenning of data from the first section.
|
Returns the digital signature within a digital signed PE file.
|
Returns the overlay data from the PE file.
|
Converts an offset to an RVA.
|
Converts a RVA to an offset.
|
Given an offset in the file, tries to determine the section this offset belong to.
|
Given a RVA in the file, tries to determine the section this RVA belongs to.
|
Returns a default DOS stub.
|
Returns the offset to last section header present in the PE file.
|
Populates the attributes of the PE object. |
Adds a new section to the existing PE instance.
|
Extends an existing section in the PE instance.
|
Fixes the necessary fields in the PE file instance in order to create a valid PE32. i.e. SizeOfImage. |
Align a value to
|
Align a value to
|
Returns a |
Returns a |
Returns a |
Returns a |
Returns a |
Returns a |
Gets binary data at a given RVA.
|
Gets binary data at a given offset.
|
Returns a String object from a given RVA. |
Determines if the current PE instance is an Executable file.
|
Determines if the current PE instance is a Dynamic Link Library file.
|
Determines if the current PE instance is a driver (.sys) file.
|
Determines if the current PE instance is a PE32 file.
|
Determines if the current PE instance is a PE64 file.
|
Determines if the current PE instance is bounded, i.e. has a
|
Parses all the directories in the PE instance.
|
Parses the
|
Parses the
|
Parses the delay imports directory.
|
Parses the bound import directory.
|
Parses the TLS directory.
Note: if the PE instance is a PE64 file then a new TLSDirectory64 is returned. |
Parses the relocation directory.
|
Parses the
|
Parses the
|
Parses the
|
Parses the NET directory.
|
Get MD5 hash from PE file.
|
Get SHA1 hash from PE file.
|
Get SHA256 hash from PE file.
|
Get SHA512 hash from PE file.
|
Get CRC32 checksum from PE file.
|
Home | Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Fri Jul 12 18:53:46 2013 | http://epydoc.sourceforge.net |