:py:mod:`dissect.executable.pe.directory.delay_import`
======================================================

.. py:module:: dissect.executable.pe.directory.delay_import




Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.executable.pe.directory.delay_import.DelayImportDirectory
   dissect.executable.pe.directory.delay_import.DelayImportModule
   dissect.executable.pe.directory.delay_import.DelayImportFunction




.. py:class:: DelayImportDirectory(pe: dissect.executable.pe.pe.PE, address: int, size: int)

   Bases: :py:obj:`dissect.executable.pe.directory.base.DataDirectory`


   The delay import directory of a PE file.


   .. py:method:: __repr__() -> str


   .. py:method:: __len__() -> int


   .. py:method:: __getitem__(idx: str | int) -> DelayImportModule


   .. py:method:: __contains__(name: str) -> bool


   .. py:property:: modules
      :type: list[DelayImportModule]


      List of delay imported modules.


.. py:class:: DelayImportModule(pe: dissect.executable.pe.pe.PE, descriptor: dissect.executable.pe.c_pe.c_pe.IMAGE_DELAYLOAD_DESCRIPTOR)

   A module delay imported by a PE file, containing its functions.


   .. py:attribute:: pe


   .. py:attribute:: descriptor


   .. py:method:: __repr__() -> str


   .. py:method:: __iter__() -> collections.abc.Iterator[DelayImportFunction]


   .. py:method:: __getitem__(idx: str | int) -> DelayImportFunction


   .. py:method:: __contains__(idx: str | int) -> bool


   .. py:property:: timestamp
      :type: datetime.datetime | None


      The timestamp of the target DLL of this delay import module, or ``None`` if the PE file is
      compiled as reproducible.

      Will be ``0`` (so epoch) if it's not bound yet.


   .. py:property:: name
      :type: str


      The name of the delay import module.


   .. py:property:: functions
      :type: list[DelayImportFunction]


      List of delay imported functions from this module.


.. py:class:: DelayImportFunction(module: DelayImportModule, name_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64, address_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64, bound_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64 | None = None, unload_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64 | None = None)

   A function delay imported from a module.


   .. py:attribute:: module


   .. py:attribute:: name_thunk


   .. py:attribute:: address_thunk


   .. py:attribute:: address


   .. py:attribute:: bound_address


   .. py:attribute:: unload_address


   .. py:method:: __repr__() -> str