:py:mod:`dissect.executable.pe.directory.imports`
=================================================

.. py:module:: dissect.executable.pe.directory.imports




Module Contents
---------------

Classes
~~~~~~~

.. autoapisummary::

   dissect.executable.pe.directory.imports.ImportDirectory
   dissect.executable.pe.directory.imports.ImportModule
   dissect.executable.pe.directory.imports.ImportFunction




.. py:class:: ImportDirectory(pe: dissect.executable.pe.pe.PE, address: int, size: int)

   Bases: :py:obj:`dissect.executable.pe.directory.base.DataDirectory`


   The import directory of a PE file.


   .. py:method:: __repr__() -> str


   .. py:method:: __len__() -> int


   .. py:method:: __getitem__(idx: str | int) -> ImportModule


   .. py:method:: __contains__(name: str) -> bool


   .. py:property:: modules
      :type: list[ImportModule]


      List of imported modules.


.. py:class:: ImportModule(pe: dissect.executable.pe.pe.PE, descriptor: dissect.executable.pe.c_pe.c_pe.IMAGE_IMPORT_DESCRIPTOR)

   A module imported by a PE file, containing its functions.


   .. py:attribute:: pe


   .. py:attribute:: descriptor


   .. py:method:: __repr__() -> str


   .. py:method:: __iter__() -> collections.abc.Iterator[ImportFunction]


   .. py:method:: __getitem__(idx: str | int) -> ImportFunction


   .. py:method:: __contains__(idx: str | int) -> bool


   .. py:property:: timestamp
      :type: datetime.datetime | None


      The timestamp of this import module, or ``None`` if the PE file is compiled as reproducible.


   .. py:property:: name
      :type: str


      The name of the imported module.


   .. py:property:: functions
      :type: list[ImportFunction]


      List of functions imported from this module.


.. py:class:: ImportFunction(module: ImportModule, lookup_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64, address_thunk: dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA32 | dissect.executable.pe.c_pe.c_pe.IMAGE_THUNK_DATA64)

   A function imported from a module.


   .. py:attribute:: module


   .. py:attribute:: lookup_thunk


   .. py:attribute:: address_thunk


   .. py:attribute:: address


   .. py:method:: __repr__() -> str