[python api] All information about the PeSectionHeader python object.
This object is used to represent a Section Header entry from the PE binary format.
>>> b = Pe('C:/Windows/System32/notepad.exe')
>>> for section in b.getSectionHeaders():
... print section.getName(), '\t', hex(section.getVirtualAddress())
Python API - Methods of the PeSectionHeader class
- bool getFlags(void)
Returns the section flags. Sections support one-bit flags that describe miscellaneous attributes. If a flag bit is set in triton::format::pe::PeSectionHeader::flags, the attribute is "on" for the section. Otherwise, the attribute is "off" or does not apply. Undefined attributes are set to zero.
- string getName(void)
Returns the section name. This member specifies the name of the section as string.
- integer getRawAddress(void)
Returns the section offset in the binary file. This member's value holds the byte offset from the beginning of the file to the first byte in the section.
- integer getRawSize(void)
Returns the section size. This member holds the section's size in bytes. The section occupies sh_size bytes in the file.
- integer getVirtualAddress(void)
Returns the virtual section address. If this section appears in the memory image of a process, this member holds the address at which the section's first byte should reside. Otherwise, the member contains zero.
- integer getVirtualSize(void)
Returns the virtual section size.