`dissect.executable.pe.directory.export`¶

Module Contents¶

Classes¶

`ExportDirectory`	The export directory of a PE file.
`ExportFunction`

class dissect.executable.pe.directory.export.ExportDirectory(pe: dissect.executable.pe.pe.PE, address: int, size: int)¶

Bases: dissect.executable.pe.directory.base.DataDirectory

The export directory of a PE file.

__repr__() → str¶

__iter__() → collections.abc.Iterator[ExportFunction]¶

__getitem__(idx: str | int) → ExportFunction¶

__contains__(idx: str | int) → bool¶

property header: dissect.executable.pe.c_pe.c_pe.IMAGE_EXPORT_DIRECTORY¶: The export directory header.

property timestamp: datetime.datetime | None¶: The timestamp of the export directory, or None if the PE file is compiled as reproducible.

property name: str | None¶: The name of the export directory, if available.

property base: int¶: The base ordinal of the exported functions.

property functions: list[ExportFunction]¶: List of exported functions.

class dissect.executable.pe.directory.export.ExportFunction¶

directory: ExportDirectory¶: The export directory this function belongs to.

unbiased_ordinal: int¶: The unbiased ordinal of the exported function.

name: str¶: The name of the exported function.

address: int¶: The address of the exported function.

forwarder: str | None = None¶: The forwarder of the exported function, if it is a forwarder.

__repr__() → str¶

property ordinal: int¶: The unbiased ordinal with the base ordinal added.