libTriton  version 0.4 build 1356
PeExportEntry

Table of Contents

[python api] All information about the PeExportEntry python object.

Description


This object is used to represent an exported symbol from the PE binary format.

Example

>>> b = Pe('C:/Windows/System32/kernel32.dll')
>>> tbl = b.getExportTable()
>>> for entry in tbl.getEntries():
... print " ",hex(entry.getOrdinal())," - ",entry.getName(),
... if entry.isForward():
... print "->",entry.getForwarderName(),
... print
...
0x0L - BaseThreadInitThunk
0x1L - InterlockedPushListSList -> NTDLL.RtlInterlockedPushListSList
0x2L - Wow64Transition
0x3L - AcquireSRWLockExclusive -> NTDLL.RtlAcquireSRWLockExclusive
0x4L - AcquireSRWLockShared -> NTDLL.RtlAcquireSRWLockShared
0x5L - ActivateActCtx
0x6L - ActivateActCtxWorker
...

Python API - Methods of the PeExportEntry class