2017-03-30 16:56:49 +02:00
|
|
|
PE
|
|
|
|
--
|
|
|
|
|
|
|
|
Parser
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autofunction:: lief.PE.parse
|
|
|
|
|
|
|
|
|
|
|
|
Binary
|
|
|
|
******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Binary
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Dos Header
|
|
|
|
**********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DosHeader
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Header
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Header
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Optional Header
|
|
|
|
***************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.OptionalHeader
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Data Directory
|
|
|
|
**************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DataDirectory
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Section
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Section
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Import
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Import
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Import Entry
|
|
|
|
************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ImportEntry
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
TLS
|
|
|
|
***
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.TLS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Symbol
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Symbol
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Relocation
|
|
|
|
**********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Relocation
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Relocation Entry
|
|
|
|
****************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RelocationEntry
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Export
|
|
|
|
******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Export
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Export Entry
|
|
|
|
************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ExportEntry
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Signature
|
|
|
|
*********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Signature
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
AuthenticatedAttributes
|
|
|
|
***********************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.AuthenticatedAttributes
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
x509
|
|
|
|
****
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.x509
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
ContentInfo
|
|
|
|
***********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ContentInfo
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
SignerInfo
|
|
|
|
**********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SignerInfo
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Builder
|
|
|
|
*******
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Builder
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
2017-04-25 09:28:45 +02:00
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Resource Node
|
|
|
|
*************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceNode
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Resource Directory
|
|
|
|
******************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceDirectory
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Resource Data
|
|
|
|
*************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceData
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Resources Manager
|
|
|
|
*****************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourcesManager
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Resource Icon
|
|
|
|
*************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceIcon
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
|
|
|
|
Resource Dialog
|
|
|
|
***************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceDialog
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Resource Version
|
|
|
|
****************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceVersion
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Resource Fixed File Info
|
|
|
|
************************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceFixedFileInfo
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Resource Var File Info
|
|
|
|
**********************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceVarFileInfo
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Resource String File Info
|
|
|
|
*************************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.ResourceStringFileInfo
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Lang code item
|
|
|
|
**************
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.LangCodeItem
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
2017-06-16 17:10:39 +02:00
|
|
|
Rich Header
|
|
|
|
***********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RichHeader
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
Rich Entry
|
|
|
|
**********
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RichEntry
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
2017-07-01 18:35:10 +02:00
|
|
|
Debug
|
|
|
|
*****
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.Debug
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
2017-07-16 18:01:43 +02:00
|
|
|
Utilities
|
|
|
|
*********
|
|
|
|
|
|
|
|
|
|
|
|
.. autofunction:: lief.PE.is_pe
|
|
|
|
|
|
|
|
.. autofunction:: lief.PE.get_type
|
|
|
|
|
|
|
|
.. autofunction:: lief.PE.get_imphash
|
|
|
|
|
|
|
|
.. autofunction:: lief.PE.resolve_ordinals
|
|
|
|
|
|
|
|
-----------
|
2017-07-01 18:35:10 +02:00
|
|
|
|
2017-03-30 16:56:49 +02:00
|
|
|
Enums
|
|
|
|
*****
|
|
|
|
|
|
|
|
PE_TYPE
|
|
|
|
~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.PE_TYPE
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
MACHINE_TYPES
|
|
|
|
~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.MACHINE_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
2017-04-26 09:27:56 +02:00
|
|
|
HEADER_CHARACTERISTICS
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~
|
2017-03-30 16:56:49 +02:00
|
|
|
|
2017-04-26 09:27:56 +02:00
|
|
|
.. autoclass:: lief.PE.HEADER_CHARACTERISTICS
|
2017-03-30 16:56:49 +02:00
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SUBSYSTEM
|
|
|
|
~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SUBSYSTEM
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
DATA_DIRECTORY
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DATA_DIRECTORY
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
DLL_CHARACTERISTICS
|
|
|
|
~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DLL_CHARACTERISTICS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SECTION_CHARACTERISTICS
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SECTION_CHARACTERISTICS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SECTION_TYPES
|
|
|
|
~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SECTION_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SYMBOL_BASE_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SYMBOL_BASE_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SYMBOL_COMPLEX_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SYMBOL_COMPLEX_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SYMBOL_SECTION_NUMBER
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SYMBOL_SECTION_NUMBER
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
SYMBOL_STORAGE_CLASS
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.SYMBOL_STORAGE_CLASS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
RELOCATIONS_BASE_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RELOCATIONS_BASE_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
DEBUG_TYPES
|
|
|
|
~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DEBUG_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
2017-04-25 09:28:45 +02:00
|
|
|
----------
|
|
|
|
|
|
|
|
RESOURCE_TYPES
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RESOURCE_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
RESOURCE_LANGS
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RESOURCE_LANGS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
RESOURCE_SUBLANGS
|
|
|
|
~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.RESOURCE_SUBLANGS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
FIXED_VERSION_FILE_SUB_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.CODE_PAGES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
WINDOW_STYLES
|
|
|
|
~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.WINDOW_STYLES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
EXTENDED_WINDOW_STYLES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.EXTENDED_WINDOW_STYLES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
DIALOG_BOX_STYLES
|
|
|
|
~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.DIALOG_BOX_STYLES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
FIXED_VERSION_OS
|
|
|
|
~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.FIXED_VERSION_OS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
2017-03-30 16:56:49 +02:00
|
|
|
|
2017-04-25 09:28:45 +02:00
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
FIXED_VERSION_FILE_FLAGS
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
.. autoclass:: lief.PE.FIXED_VERSION_FILE_FLAGS
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
FIXED_VERSION_FILE_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.FIXED_VERSION_FILE_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|
|
|
|
|
|
|
|
|
|
|
|
----------
|
|
|
|
|
|
|
|
FIXED_VERSION_FILE_SUB_TYPES
|
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
.. autoclass:: lief.PE.FIXED_VERSION_FILE_SUB_TYPES
|
|
|
|
:members:
|
|
|
|
:inherited-members:
|
|
|
|
:undoc-members:
|