PE

Parser

lief.PE.parse(*args, **kwargs)

Overloaded function.

  1. parse(filename: str) -> LIEF::PE::Binary

Parse the given binary and return a Binary object

  1. parse(raw: List[int], name: str=’‘) -> LIEF::PE::Binary

Parse the given binary and return a Binary object

  1. parse(io: object, name: str=’‘) -> LIEF::PE::Binary

Binary

class lief.PE.Binary(self: lief.PE.Binary, arg0: str, arg1: lief.PE.PE_TYPE) → None
class VA_TYPES(self: lief.Binary.VA_TYPES, arg0: int) → None
AUTO = VA_TYPES.AUTO
RVA = VA_TYPES.RVA
VA = VA_TYPES.VA
abstract

Return the Binary object

Warning

Getting this property modifies the __class__ attribute so that the current binary looks like a Binary.

Use the concrete to get back to the original binary.

add_import_function(self: lief.PE.Binary, import_name: str, function_name: str) → LIEF::PE::ImportEntry

Add a function to the given Import name

add_library(self: lief.PE.Binary, import_name: str) → LIEF::PE::Import

Add an Import by name

add_relocation(self: lief.PE.Binary, relocation: LIEF::PE::Relocation) → LIEF::PE::Relocation

Add a Relocation to the binary

add_section(self: lief.PE.Binary, section: LIEF::PE::Section, type: lief.PE.SECTION_TYPES=SECTION_TYPES.UNKNOWN) → LIEF::PE::Section

Add a Section to the binary.

concrete

Return either lief.ELF.Binary, lief.PE.Binary, lief.MachO.Binary object

ctor_functions

Constructor functions that are called prior any other functions

data_directories

Return an iterator on the DataDirectory

data_directory(self: lief.PE.Binary, type: lief.PE.DATA_DIRECTORY) → LIEF::PE::DataDirectory

Return the DataDirectory object from the given DATA_DIRECTORY type

debug

Return the Debug

dos_header

Return DosHeader

dos_stub

DOS stub content as a list of bytes

entrypoint

Binary’s entrypoint

exception_functions

Function found in the Exception directory

exported_functions

Return binary’s exported Function

format

File format EXE_FORMATS of the underlying binary.

functions

All Function found in the binary

get_content_from_virtual_address(self: lief.Binary, virtual_address: int, size: int, va_type: lief.Binary.VA_TYPES=VA_TYPES.AUTO) → List[int]

Return the content located at virtual address.

Virtual address is specified in the first argument and size to read (in bytes) in the second. If the underlying binary is a PE, one can specify if the virtual address is a RVA or a VA. By default it is set to AUTO

get_export(self: lief.PE.Binary) → LIEF::PE::Export

Return a Export object

get_function_address(self: lief.Binary, function_name: str) → int

Return the address of the given function name

get_import(self: lief.PE.Binary, import_name: str) → LIEF::PE::Import

Returns the Import from the given name

get_section(self: lief.PE.Binary, section_name: str) → LIEF::PE::Section

Return the Section object from the given name

get_symbol(self: lief.Binary, symbol_name: str) → LIEF::Symbol

Return the Symbol with the given name

has_configuration

True if the current binary has LoadConfiguration

has_debug

True if the current binary has a Debug object

has_exceptions

True if the current binary has Exceptions

has_exports

True if the current binary has a Export object

has_import(self: lief.PE.Binary, import_name: str) → bool

True if the binary import the given library name

has_imports

True if the current binary import libraries (Import)

has_nx

Check if the binary uses NX protection

has_relocations

True if the current binary use Relocation

has_resources

True if the current binary has a Resources object

has_rich_header

True if the current binary has a RichHeader object

has_signature

True if the binary is signed (Signature)

has_symbol(self: lief.Binary, symbol_name: str) → bool

Check if a Symbol with the given name exists

has_tls

True if the current binary has a TLS object

header

Return Header

hook_function(*args, **kwargs)

Overloaded function.

  1. hook_function(self: lief.PE.Binary, function_name: str, hook_address: int) -> None

Hook the given function name

Note

When using this function, the Builder should be configured as follow:

builder.build_imports(True).patch_imports(True)
  1. hook_function(self: lief.PE.Binary, library_name: str, function_name: str, hook_address: int) -> None

Hook the function name from the given library name

imported_functions

Return binary’s imported Function (name)

imports

Return an iterator on the Import libraries

is_pie

Check if the binary is position independent

is_reproducible_build

True if the binary was compiled with a reproducible build directive (Debug)

libraries

Return binary’s imported libraries (name)

load_configuration

Return the LoadConfiguration object

name

Binary’s name

optional_header

Return OptionalHeader

overlay

Return the overlay content as a list of bytes

patch_address(*args, **kwargs)

Overloaded function.

  1. patch_address(self: lief.Binary, address: int, patch_value: List[int], va_type: lief.Binary.VA_TYPES=VA_TYPES.AUTO) -> None

Virtual address is specified in the first argument and the content in the second (as a list of bytes). If the underlying binary is a PE, one can specify if the virtual address is a RVA or a VA. By default it is set to AUTO

  1. patch_address(self: lief.Binary, address: int, patch_value: int, size: int=8, va_type: lief.Binary.VA_TYPES=VA_TYPES.AUTO) -> None

Virtual address is specified in the first argument, integer in the second and sizeof the integer in third one. If the underlying binary is a PE, one can specify if the virtual address is a RVA or a VA. By default it is set to AUTO

predict_function_rva(self: lief.PE.Binary, library: str, function: str) → int

Try to predict the RVA of the given function name in the given import library name

relocations

Return an iterator on the Relocation

remove(self: lief.PE.Binary, section: LIEF::PE::Section, clear: bool=False) → None

Remove the Section given in first parameter

remove_all_libraries(self: lief.PE.Binary) → None

Remove all imported libraries

remove_all_relocations(self: lief.PE.Binary) → None
remove_library(self: lief.PE.Binary, import_name: str) → None

Remove the Import from the given name

remove_section(self: lief.Binary, name: str, clear: bool=False) → None

Remove the section with the given name

resources

Return the ResourceNode tree

resources_manager

Return the ResourcesManager to manage resources

rich_header

RichHeader object (if present)

rva_to_offset(self: lief.PE.Binary, rva_address: int) → int

Convert a relative virtual address to an offset

section_from_offset(self: lief.PE.Binary, offset: int) → LIEF::PE::Section

Return the Section which contains the offset

section_from_rva(self: lief.PE.Binary, rva: int) → LIEF::PE::Section

Return the Section which contains the relative virtual address

sections

Return binary’s Section sections

signature

Return the Signature object

sizeof_headers

Size of all PE headers

symbols

Return binary’s Symbol

tls

TLS object (if present)

va_to_offset(self: lief.PE.Binary, va_address: int) → int

Convert a absolute virtual address to an offset

virtual_size

Binary size when mapped in memory.

This value should matches sizeof_image

write(self: lief.PE.Binary, output_path: str) → None

Build the binary and write the result to the given output

xref(self: lief.Binary, Return all **virtual address** that *use* the ``address`` given in parametervirtual_address: int) → List[int]

Dos Header

class lief.PE.DosHeader(self: lief.PE.DosHeader) → None
addressof_new_exeheader
addressof_relocation_table
checksum
file_size_in_pages
header_size_in_paragraphs
initial_ip
initial_relative_cs
initial_relative_ss
initial_sp
magic
maximum_extra_paragraphs
minimum_extra_paragraphs
numberof_relocation
oem_id
oem_info
overlay_number
used_bytes_in_the_last_page


Optional Header

class lief.PE.OptionalHeader(self: lief.PE.OptionalHeader) → None
add(self: lief.PE.OptionalHeader, characteristic: lief.PE.DLL_CHARACTERISTICS) → None

Add the given DLL_CHARACTERISTICS

addressof_entrypoint

The address of the entry point relative to the image base when the executable file is loaded into memory. For program images, this is the starting address. For device drivers, this is the address of the initialization function. An entry point is optional for DLLs. When no entry point is present, this field must be zero.

baseof_code

The address that is relative to the image base of the beginning-of-code section when it is loaded into memory.

baseof_data

The address that is relative to the image base of the beginning-of-data section when it is loaded into memory.

Warning

This value is not present for PE64

checksum

The image file checksum. The algorithm for computing the checksum is incorporated into IMAGHELP.DLL. The following are checked for validation at load time: all drivers, any DLL loaded at boot time, and any DLL that is loaded into a critical Windows process.

dll_characteristics

The DLL_CHARACTERISTICS characteristics

dll_characteristics_lists

DLL_CHARACTERISTICS as a list

file_alignment

The alignment factor (in bytes) that is used to align the raw data of sections in the image file. The value should be a power of 2 between 512 and 64 K, inclusive. The default is 512. If the section_alignment is less than the architecture’s page size, then file_alignment must match section_alignment.

has(self: lief.PE.OptionalHeader, characteristics: lief.PE.DLL_CHARACTERISTICS) → bool

True if the given DLL_CHARACTERISTICS is in the dll_characteristics

imagebase

The preferred address of the first byte of image when loaded into memory. It must be a multiple of 64K. The default for DLLs is 0x10000000. The default for Windows CE EXEs is 0x00010000. The default for Windows NT, Windows 2000, Windows XP, Windows 95, Windows 98, and Windows Me is 0x00400000.

loader_flags

Reserved, must be zero.

magic

Magic value (PE_TYPE) that identify a PE32 from a PE64

major_image_version

The major version number of the image.

major_linker_version

The linker major version number

major_operating_system_version

The major version number of the required operating system.

major_subsystem_version

The major version number of the subsystem.

minor_image_version

The minor version number of the image.

minor_linker_version

The linker minor version number

minor_operating_system_version

The minor version number of the required operating system.

minor_subsystem_version

The minor version number of the subsystem

numberof_rva_and_size

The number of DataDirectory entries in the remainder of the optional header. Each describes a location and size.

remove(self: lief.PE.OptionalHeader, characteristic: lief.PE.DLL_CHARACTERISTICS) → None

Remove the given DLL_CHARACTERISTICS

section_alignment

The alignment (in bytes) of sections when they are loaded into memory. It must be greater than or equal to file_alignment. The default is the page size for the architecture.

sizeof_code

The size of the code (text) section, or the sum of all code sections if there are multiple sections.

sizeof_headers

The combined size of an MS-DOS stub, PE header, and section headers rounded up to a multiple of file_alignment.

sizeof_heap_commit

The size of the local heap space to commit.

sizeof_heap_reserve

The size of the local heap space to reserve. Only sizeof_heap_commit is committed; the rest is made available one page at a time until the reserve size is reached.

sizeof_image

The size (in bytes) of the image, including all headers, as the image is loaded in memory. It must be a multiple of section_alignment and should match virtual_size.

sizeof_initialized_data

The size of the initialized data section, or the sum of all such sections if there are multiple data sections.

sizeof_stack_commit

The size of the stack to commit.

sizeof_stack_reserve

The size of the stack to reserve. Only sizeof_stack_commit is committed; the rest is made available one page at a time until the reserve size is reached.

sizeof_uninitialized_data

The size of the uninitialized data section (.bss), or the sum of all such sections if there are multiple .bss sections.

subsystem

The SUBSYSTEM that is required to run this image. For more information, see “Windows Subsystem” later in this specification.

win32_version_value

Reserved, must be zero.


Data Directory

class lief.PE.DataDirectory(self: lief.PE.DataDirectory) → None
has_section

True if the current data directory is tied to a Section

rva

Relative virtual address of the content associated with the current data directory

section

Section associated with the current data directory

size

Size in bytes of the content associated with the current data directory

type

Type (DATA_DIRECTORY) of the current data directory


Section

class lief.PE.Section(*args, **kwargs)

Overloaded function.

  1. __init__(self: lief.PE.Section) -> None

  2. __init__(self: lief.PE.Section, content: List[int], name: str=’‘, characteristics: int=0) -> None

Constructor from content, name and characteristics

  1. __init__(self: lief.PE.Section, name: str) -> None

Constructor from name

characteristics

The SECTION_CHARACTERISTICS that describe the characteristics of the section

characteristics_lists

characteristics as a list

content

Section’s content

entropy

Section’s entropy

has_characteristic(self: lief.PE.Section, characteristic: lief.PE.SECTION_CHARACTERISTICS) → bool

True if the a section has the given SECTION_CHARACTERISTICS

name

Section’s name

numberof_line_numbers

The number of line-number entries for the section. This value should be zero for an image because COFF debugging information is deprecated.

numberof_relocations

The number of relocation entries for the section. This is set to zero for executable images.

offset

Section’s offset

pointerto_line_numbers

The file pointer to the beginning of line-number entries for the section. This is set to zero if there are no COFF line numbers. This value should be zero for an image because COFF debugging information is deprecated.

pointerto_raw_data

Alias of offset

pointerto_relocation

The file pointer to the beginning of relocation entries for the section. This is set to zero for executable images or if there are no relocations.

search(*args, **kwargs)

Overloaded function.

  1. search(self: lief.Section, number: int, pos: int=0, size: int=0) -> int

Look for integer within the current section

  1. search(self: lief.Section, str: str, pos: int=0) -> int

Look for string within the current section

search_all(*args, **kwargs)

Overloaded function.

  1. search_all(self: lief.Section, number: int, size: int=0) -> List[int]

Look for all integers within the current section

  1. search_all(self: lief.Section, str: str) -> List[int]

Look for all strings within the current section

size

Section’s size

sizeof_raw_data

Alias of size

virtual_address

Section’s virtual address

virtual_size

The total size of the section when loaded into memory. If this value is greater than sizeof_raw_data, the section is zero-padded.


Import

class lief.PE.Import(*args, **kwargs)

Overloaded function.

  1. __init__(self: lief.PE.Import) -> None

Default constructor with a library name

  1. __init__(self: lief.PE.Import, library_name: str) -> None

Constructor with a library name

add_entry(*args, **kwargs)

Overloaded function.

  1. add_entry(self: lief.PE.Import, entry: LIEF::PE::ImportEntry) -> LIEF::PE::ImportEntry

Add an ImportEntry (function) to the current import

  1. add_entry(self: lief.PE.Import, function_name: str) -> LIEF::PE::ImportEntry

Add an ImportEntry (function) to the current import

directory

DataDirectory associated with the import table

entries

Iterator to the imported ImportEntry (functions)

get_entry(self: lief.PE.Import, function_name: str) → LIEF::PE::ImportEntry

Return ImportEntry with the given name

get_function_rva_from_iat(self: lief.PE.Import, Return the relative virtual address of the given function within the *Import Address Table*function_name: str) → int
iat_directory

DataDirectory associated with the IAT table

import_address_table_rva

The RVA of the import address table. The contents of this table are identical to the contents of the import lookup table until the image is bound.

import_lookup_table_rva

The RVA of the import lookup table. This table contains a name or ordinal for each import.

name

Library name (e.g. kernel32.dll)


Import Entry

class lief.PE.ImportEntry(*args, **kwargs)

Overloaded function.

  1. __init__(self: lief.PE.ImportEntry) -> None

  2. __init__(self: lief.PE.ImportEntry, import_name: str) -> None

Constructor by name

  1. __init__(self: lief.PE.ImportEntry, data: int, name: str=’‘) -> None

Constructor by data and optionally name

data

Raw value

hint

Index into the entries

iat_address

Original address of the entry in the Import Address Table

iat_value

Value of the current entry in the Import Address Table

is_ordinal

True if ordinal is used

name

Import name if not ordinal

ordinal

Ordinal value (if any). See: is_ordinal


TLS

class lief.PE.TLS(self: lief.PE.TLS) → None

Default constructor

addressof_callbacks

The pointer to an array of TLS callback functions. The array is null-terminated, so if no callback function is supported, this field points to 4 bytes set to zero

addressof_index

The location to receive the TLS index, which the loader assigns. This location is in an ordinary data section, so it can be given a symbolic name that is accessible to the program.

addressof_raw_data

Tuple (start address, end address) of the TLS template. The template is a block of data that is used to initialize TLS data. The system copies all of this data each time a thread is created, so it must not be corrupted. Note that these addresses are not RVA; it is addresses for which there should be a base relocation in the .reloc section.

callbacks

List of the callbacks called before any other functions

characteristics

The four bits [23:20] describe alignment info. Possible values are those defined as IMAGE_SCN_ALIGN_*, which are also used to describe alignment of section in object files. The other 28 bits are reserved for future use.

data_template

The data template content

directory

DataDirectory associated with the TLS object

has_data_directory

True if there is a DataDirectory associated with the TLS object

has_section

True if there is a Section associated with the TLS object

section

Section associated with the TLS object

sizeof_zero_fill

The size in bytes of the template, beyond the initialized data delimited by the lief.PE.TLS.addressof_raw_data fields. The total template size should be the same as the total size of TLS data in the image file. The zero fill is the amount of data that comes after the initialized nonzero data.


Symbol

class lief.PE.Symbol(self: lief.PE.Symbol) → None
base_type
complex_type
has_section

True if symbols are located in a section

name
numberof_aux_symbols
section
section_number
size

Symbol’s size

storage_class
type
value

Symbol’s value


Relocation

class lief.PE.Relocation(self: lief.PE.Relocation) → None
add_entry(self: lief.PE.Relocation, new_entry: LIEF::PE::RelocationEntry) → LIEF::PE::RelocationEntry

Add a new RelocationEntry

entries
virtual_address

Relocation Entry

class lief.PE.RelocationEntry(self: lief.PE.RelocationEntry) → None
address

Relocation’s address

data

Raw data of the relocation:

  • The high 4 bits store the relocation type

  • The low 12 bits store the relocation offset (position)

position

Offset - relative to virtual_address - where the relocation occurs

size

Relocation’s size (in bits)

type

Type of the relocation


Export

class lief.PE.Export(self: lief.PE.Export) → None
entries
export_flags
major_version
minor_version
name
ordinal_base
timestamp

Export Entry

class lief.PE.ExportEntry(self: lief.PE.ExportEntry) → None
address
is_extern
name
ordinal

Signature

class lief.PE.Signature
certificates

Return an iterator over x509 certificates

content_info

Return the ContentInfo

digest_algorithm

Return the algorithm (OID) used to sign the content of ContentInfo

original_signature

Return the raw original signature

signer_info

Return the SignerInfo

version

Should be 1


AuthenticatedAttributes

class lief.PE.AuthenticatedAttributes
content_type

Should return the messageDigest OID

message_digest

Return an hash of the signed attributes

more_info

Return an URL to website with more information about the signer

program_name

Return the program description (if any)


x509

class lief.PE.x509
issuer

Issuer informations

serial_number

Unique id for certificate issued by a specific CA.

signature_algorithm

Signature algorithm (OID)

subject

Subject informations

valid_from

Start time of certificate validity

valid_to

End time of certificate validity

version

X.509 version. (1=v1, 2=v2, 3=v3)


ContentInfo

class lief.PE.ContentInfo
content_type

OID of the content type. This value should match SPC_INDIRECT_DATA_OBJID

digest

The digest

digest_algorithm

Algorithm (OID) used to hash the file. This value should match SignerInfo.digest_algorithm and Signature.digest_algorithm

type

SignerInfo

class lief.PE.SignerInfo
authenticated_attributes

Return the AuthenticatedAttributes object

digest_algorithm

Algorithm (OID) used to hash the file. This value should match ContentInfo.digest_algorithm and Signature.digest_algorithm

encrypted_digest

Return the signature created by the signing certificate’s private key

issuer

Issuer and serial number

signature_algorithm

Return the signature algorithm (OID)

version

Should be 1


Builder

class lief.PE.Builder(self: lief.PE.Builder, pe_binary: lief.PE.Binary) → None

Constructor that takes a Binary

build(self: lief.PE.Builder) → None

Perform the build process

build_dos_stub(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuild the DOS stub

build_imports(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuild the import table in another section

build_overlay(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuild the binary’s overlay

build_relocations(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuild the relocation table in another section

build_resources(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuid the resources in another section

build_tls(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Rebuild TLS object in another section

get_build(self: lief.PE.Builder) → List[int]

Return the build result as a list of bytes

patch_imports(self: lief.PE.Builder, enable: bool=True) → lief.PE.Builder

Patch the original import table in order to redirect functions to the new import table.

This setting should be used with build_imports set to True

write(self: lief.PE.Builder, output: str) → None

Write the build result into the output file


Resource Node

class lief.PE.ResourceNode
add_data_node(self: lief.PE.ResourceNode, resource_data: LIEF::PE::ResourceData) → lief.PE.ResourceNode

Add a ResourceData to the current node

add_directory_node(self: lief.PE.ResourceNode, resource_directory: LIEF::PE::ResourceDirectory) → lief.PE.ResourceNode

Add a ResourceDirectory to the current node

childs

Node’s childs

delete_child(*args, **kwargs)

Overloaded function.

  1. delete_child(self: lief.PE.ResourceNode, node: lief.PE.ResourceNode) -> None

Delete the given ResourceNode from childs

  1. delete_child(self: lief.PE.ResourceNode, id: int) -> None

Delete the ResourceNode with the given id from childs

depth

Current depth of the entry in the resource tree

has_name

True if the current resource uses a name

id

Integer that identifies the Type, Name, or Language ID entry.

is_data

True if the current resource is a ResourceData

is_directory

True if the current resource is a ResourceDirectory

name

Resource name

sort_by_id(self: lief.PE.ResourceNode) → None

Sort resource childs by ID


Resource Directory

class lief.PE.ResourceDirectory(self: lief.PE.ResourceDirectory) → None

Default constructor

add_data_node(self: lief.PE.ResourceNode, resource_data: LIEF::PE::ResourceData) → lief.PE.ResourceNode

Add a ResourceData to the current node

add_directory_node(self: lief.PE.ResourceNode, resource_directory: LIEF::PE::ResourceDirectory) → lief.PE.ResourceNode

Add a ResourceDirectory to the current node

characteristics

Resource flags. This field is reserved for future use. It is currently set to zero.

childs

Node’s childs

delete_child(*args, **kwargs)

Overloaded function.

  1. delete_child(self: lief.PE.ResourceNode, node: lief.PE.ResourceNode) -> None

Delete the given ResourceNode from childs

  1. delete_child(self: lief.PE.ResourceNode, id: int) -> None

Delete the ResourceNode with the given id from childs

depth

Current depth of the entry in the resource tree

has_name

True if the current resource uses a name

id

Integer that identifies the Type, Name, or Language ID entry.

is_data

True if the current resource is a ResourceData

is_directory

True if the current resource is a ResourceDirectory

major_version

The major version number, set by the user.

minor_version

The minor version number, set by the user.

name

Resource name

numberof_id_entries

The number of directory entries immediately following the Name entries that use numeric IDs for Type, Name, or Language entries.

numberof_name_entries

The number of directory entries immediately following the table that use strings to identify Type, Name, or Language entries (depending on the level of the table

sort_by_id(self: lief.PE.ResourceNode) → None

Sort resource childs by ID

time_date_stamp

The time that the resource data was created by the resource compiler.


Resource Data

class lief.PE.ResourceData(*args, **kwargs)

Overloaded function.

  1. __init__(self: lief.PE.ResourceData) -> None

Default constructor

  1. __init__(self: lief.PE.ResourceData, content: List[int], code_page: int) -> None

add_data_node(self: lief.PE.ResourceNode, resource_data: LIEF::PE::ResourceData) → lief.PE.ResourceNode

Add a ResourceData to the current node

add_directory_node(self: lief.PE.ResourceNode, resource_directory: LIEF::PE::ResourceDirectory) → lief.PE.ResourceNode

Add a ResourceDirectory to the current node

childs

Node’s childs

code_page

The code page that is used to decode code point values within the resource data. Typically, the code page would be the Unicode code page

content

Resource content

delete_child(*args, **kwargs)

Overloaded function.

  1. delete_child(self: lief.PE.ResourceNode, node: lief.PE.ResourceNode) -> None

Delete the given ResourceNode from childs

  1. delete_child(self: lief.PE.ResourceNode, id: int) -> None

Delete the ResourceNode with the given id from childs

depth

Current depth of the entry in the resource tree

has_name

True if the current resource uses a name

id

Integer that identifies the Type, Name, or Language ID entry.

is_data

True if the current resource is a ResourceData

is_directory

True if the current resource is a ResourceDirectory

name

Resource name

offset

Offset of the content within the resource

reserved

Reserved value. Should be 0

sort_by_id(self: lief.PE.ResourceNode) → None

Sort resource childs by ID


Resources Manager

class lief.PE.ResourcesManager

The Resource Manager provides an enhanced API to manipulate the resource tree

add_icon(self: lief.PE.ResourcesManager, icon: LIEF::PE::ResourceIcon) → None

Add an icon to the resources

change_icon(self: lief.PE.ResourcesManager, old_one: LIEF::PE::ResourceIcon, new_one: LIEF::PE::ResourceIcon) → None

Switch the given icons

dialogs

Return the list of the ResourceDialog present in the resource

get_node_type(self: lief.PE.ResourcesManager, type: lief.PE.RESOURCE_TYPES) → LIEF::PE::ResourceNode

Return ResourceNode with the given RESOURCE_TYPES

has_dialogs

true if resources contain ResourceDialog

has_icons

true if resources contain ResourceIcon

has_manifest

True if resources contain Manifest element

has_type(self: lief.PE.ResourcesManager, type: lief.PE.RESOURCE_TYPES) → bool

True if the resource has the given RESOURCE_TYPES

has_version

true if resources contain ResourceVersion

icons

Return the list of the ResourceIcon present in the resource

langs_available

Return list of RESOURCE_LANGS present in the resources

manifest

Manifest as a string

sublangs_available

Return list of RESOURCE_SUBLANGS present in the resources

types_available

Return list of RESOURCE_TYPES present in the resources

version

Return the ResourceVersion


Resource Icon

class lief.PE.ResourceIcon(self: lief.PE.ResourceIcon, icon_path: str) → None

Constructor that takes a icon path as input

bit_count

Bits per pixel

color_count

Number of colors in image (0 if >=8bpp)

height

Height in pixels of the image

id

Id associated with the icon

lang

Language (RESOURCE_LANGS) associated with the icon

pixels
planes

Color Planes

reserved

Reserved (must be 0)

save(self: lief.PE.ResourceIcon, filepath: str) → None

Save the icon to the given filepath

sublang

Sub language (RESOURCE_SUBLANGS) associated with the icon

width

Width in pixels of the image


Resource Dialog

class lief.PE.ResourceDialog
charset

The character set to be used

cx

The width, in dialog box units, of the dialog box.

cy

The height, in dialog box units, of the dialog box.

dialogbox_style_list

Return list of DIALOG_BOX_STYLES associated with the style member

extended_style

The extended windows styles (EXTENDED_WINDOW_STYLES)

extended_style_list

Return list of EXTENDED_WINDOW_STYLES associated with the extended_style member

has_dialogbox_style(self: lief.PE.ResourceDialog, style: lief.PE.DIALOG_BOX_STYLES) → bool

Check if the style member has the given DIALOG_BOX_STYLES

has_extended_style(self: lief.PE.ResourceDialog, style: lief.PE.EXTENDED_WINDOW_STYLES) → bool

Check if the extended_style member has the given EXTENDED_WINDOW_STYLES

has_style(self: lief.PE.ResourceDialog, style: lief.PE.WINDOW_STYLES) → bool

Check if the style member has the given WINDOW_STYLES

help_id

The help context identifier for the dialog box window

is_extended

True if the dialog is an extended one

items

Iterator on the controls (ResourceDialogItem) that define the Dialog (Button, Label…)

lang

Primary RESOURCE_LANGS associated with the dialog

point_size

The point size of the font to use for the text in the dialog box and its controls.

signature

Indicates whether a template is an extended dialog box template:

  • 0xFFFF: Extended dialog box template

  • Other value: Standard dialog box template

style

The style of the dialog box. This member can be a combination of WINDOW_STYLES and DIALOG_BOX_STYLES

style_list

Return list of WINDOW_STYLES associated with the style member

sub_lang

Secondary RESOURCE_SUBLANGS associated with the dialog

title

The title of the dialog box

typeface

The name of the typeface for the font

version

The version number of the extended dialog box template. This member must be set to 1.

weight

The weight of the font

x

The x-coordinate, in dialog box units, of the upper-left corner of the dialog box.

y

The y-coordinate, in dialog box units, of the upper-left corner of the dialog box.


Resource Dialog Item

class lief.PE.ResourceDialogItem
cx

The width, in dialog box units, of the control

cy

The height, in dialog box units, of the control

extended_style

The extended styles for the window

help_id

The help context identifier for the control

id

The control identifier

is_extended

True if the control is an extended one

style

The style of the control. This member can be a combination of WINDOW_STYLES values and one or more of the control style values.

title

Initial text of the control

x

The x-coordinate, in dialog box units, of the upper-left corner of the control

y

The y-coordinate, in dialog box units, of the upper-left corner of the control


Resource Version

class lief.PE.ResourceVersion

Modelization of the data associated with the RT_VERSION entry See: VS_VERSIONINFO

fixed_file_info

ResourceFixedFileInfo associated with the version (if any).

This object describes various information about the application’s version

has_fixed_file_info

True if the version contains a ResourceFixedFileInfo

has_string_file_info

True if the version contains a ResourceStringFileInfo

has_var_file_info

True if the version contains a ResourceVarFileInfo

key

Signature of the structure. Must be VS_VERSION_INFO

remove_fixed_file_info(self: lief.PE.ResourceVersion) → None

Remove the ResourceFixedFileInfo from the version

remove_string_file_info(self: lief.PE.ResourceVersion) → None

Remove the ResourceStringFileInfo from the version

remove_var_file_info(self: lief.PE.ResourceVersion) → None

Remove the ResourceVarFileInfo from the version

string_file_info

ResourceStringFileInfo associated with the version (if any)

This object describes various information about the application’s version. The underlying structure is basically a dictionary (key/value)

type

The type of data in the version resource

  • 1 if it contains text data

  • 0 if it contains binary data

var_file_info

ResourceVarFileInfo associated with the version (if any)

This object describes information about languages supported by the application


Resource Fixed File Info

class lief.PE.ResourceFixedFileInfo

Modelization of the VS_FIXEDFILEINFO

file_date_LS

The least significant 32 bits of the file’s 64-bit binary creation date and time stamp

file_date_MS

The most significant 32 bits of the file’s 64-bit binary creation date and time stamp

file_flags

Contains a bitmask that specifies the Boolean attributes of the file (FIXED_VERSION_FILE_FLAGS)

file_flags_mask

Contains a bitmask that specifies the valid bits in file_flags.

A bit is valid only if it was defined when the file was created.

file_os

The operating system for which this file was designed (FIXED_VERSION_OS)

file_subtype

The function of the file (FIXED_VERSION_FILE_SUB_TYPES)

file_type

The general type of file (FIXED_VERSION_FILE_TYPES)

file_version_LS

The least significant 32 bits of the file’s binary version number

This member is used with file_version_MS to form a 64-bits value used for numeric comparisons.

file_version_MS

The most significant 32 bits of the file’s binary version number

This member is used with file_version_LS to form a 64-bits value used for numeric comparisons.

product_version_LS

The least significant 32 bits of the product with which this file was distributed

This member is used with product_version_MS to form a 64-bits value used for numeric comparisons.

product_version_MS

The most significant 32 bits of the product with which this file was distributed

This member is used with product_version_LS to form a 64-bits value used for numeric comparisons.

signature

Contains the value 0xFEEF04BD

struct_version

The binary version number of this structure.

  • The high-order word of this member contains the major version number.

  • The low-order word contains the minor version number


Resource Var File Info

class lief.PE.ResourceVarFileInfo

This object describes information about languages supported by the application

key

Signature of the structure. Must be VarFileInfo

translations

List of languages that the application supports

The least significant 16-bits must contain a Microsoft language identifier, and the most significant 16-bits must contain the CODE_PAGES Either most or least 16-bits can be zero, indicating that the file is language or code page independent.

type

The type of data in the version resource

  • 1 if it contains text data

  • 0 if it contains binary data


Resource String File Info

class lief.PE.ResourceStringFileInfo

Modelization of the StringFileInfo structure

See: https://msdn.microsoft.com/fr-fr/library/windows/desktop/ms646989(v=vs.85).aspx

key

Signature of the structure. Must be StringFileInfo

langcode_items

List of the LangCodeItem items

Each key indicates the appropriate language and code page for displaying the key: value of items

type

The type of data in the version resource

  • 1 if it contains text data

  • 0 if it contains binary data


Lang code item

class lief.PE.LangCodeItem

Class which modelize the childs of the ResourceStringFileInfo

See: https://msdn.microsoft.com/fr-fr/library/windows/desktop/ms646992(v=vs.85).aspx

code_page

CODE_PAGES for which items are defined

items
key

A 8-digit hexadecimal number stored as an Unicode string

  • The four most significant digits represent the language identifier.

  • The four least significant digits represent the code page for which the data is formatted.

See:
lang

Lang (RESOURCE_LANGS) for which items are defined

sublang

Sub-lang (RESOURCE_SUBLANGS) for which items are defined

type

The type of data in the version resource

  • 1 if it contains text data

  • 0 if it contains binary data


Rich Header

class lief.PE.RichHeader(self: lief.PE.RichHeader) → None
add_entry(*args, **kwargs)

Overloaded function.

  1. add_entry(self: lief.PE.RichHeader, entry: LIEF::PE::RichEntry) -> None

Add a new RichEntry

  1. add_entry(self: lief.PE.RichHeader, id: int, build_id: int, count: int) -> None

Add a new RichEntry given its id, build_id, count

entries

Return binary’s RichEntry within the header

key

Key used to encode the header (xor operation)


Rich Entry

class lief.PE.RichEntry(*args, **kwargs)

Overloaded function.

  1. __init__(self: lief.PE.RichEntry) -> None

  2. __init__(self: lief.PE.RichEntry, id: int, build_id: int, count: int) -> None

Contructor from id, build_id and count

build_id

Builder number of the tool (if any)

count

Occurrence count

id

Type of the entry


Debug

class lief.PE.Debug(self: lief.PE.Debug) → None
addressof_rawdata

Address of the debug data relative to the image base

characteristics

Reserved should be 0

code_view

Return an object which subclass CodeView representing the code view

The subclassed object can be one of:

has_code_view

Whether or not a code view is present

has_pogo

Whether or not a pogo is present

major_version

The major version number of the debug data format.

minor_version

The minor version number of the debug data format.

pogo

Return an object which subclass Pogo representing the pogo entry

pointerto_rawdata

File offset of the debug data

sizeof_data

Size of the debug data

timestamp

The time and date that the debug data was created.

type

The format (DEBUG_TYPES) of the debugging information


Code View

class lief.PE.CodeView
cv_signature

Type of the code view (CODE_VIEW_SIGNATURES)


Code View PDB

class lief.PE.CodeViewPDB(self: lief.PE.CodeViewPDB) → None
age
cv_signature

Type of the code view (CODE_VIEW_SIGNATURES)

filename
signature

Code Integrity

class lief.PE.CodeIntegrity(self: lief.PE.CodeIntegrity) → None
catalog

0xFFFF means not available

catalog_offset
flags

Flags to indicate if CI information is available, etc.

reserved

Additional bitmask to be defined later


Pogo

class lief.PE.Pogo(self: lief.PE.Pogo) → None
entries
signature

Type of the pogo (POGO_SIGNATURES)


Pogo Entry

class lief.PE.PogoEntry(self: lief.PE.PogoEntry) → None
name
size
start_rva

Load Configuration

class lief.PE.LoadConfiguration(self: lief.PE.LoadConfiguration) → None

Class modeling the default PE’s LoadConfiguration

It’s the base class for any future version of the structure

characteristics

Characteristics of the structure.

critical_section_default_timeout

The default timeout value to use for is process’s critical sections that are abandoned.

csd_version

The service pack version identifier.

decommit_free_block_threshold

Memory that must be freed before it is returned to the system, in bytes.

decommit_total_free_threshold

Total amount of free memory, in bytes

editlist

Reserved for use by the system.

global_flags_clear

The global loader flags to clear for this process as the loader start the process.

global_flags_set

The global loader flags to set for this process as the loader starts the process.

lock_prefix_table

The VA of a list of addresses where the LOCK prefix is used so that they can be replaced with NOP on single processor machines.

major_version

Major Version

maximum_allocation_size

Maximum allocation size, in bytes.

minor_version

Minor version

process_affinity_mask

Setting this field to a non-zero value is equivalent to calling SetProcessAffinityMask with this value during process startup (.exe only)

process_heap_flags

Process heap flags that correspond to the first argument of the HeapCreate function. These flags apply to the process heap that is created during process startup.

reserved1

Must be zero.

A pointer to a cookie that is used by Visual C++ or GS implementation.

timedatestamp

Date and time stamp value

version

(SDK) Version of the structure. (WIN_VERSION)

virtual_memory_threshold

Maximum virtual memory size, in bytes.

Load Configuration V0

class lief.PE.LoadConfigurationV0(self: lief.PE.LoadConfigurationV0) → None

Bases: lief.PE.LoadConfiguration

LoadConfiguration enhanced with SEH.

It is associated with the WIN_VERSION: SEH

se_handler_count

The count of unique handlers in the table.

se_handler_table

The VA of the sorted table of RVAs of each valid, unique SE handler in the image.

Load Configuration V1

class lief.PE.LoadConfigurationV1(self: lief.PE.LoadConfigurationV1) → None

Bases: lief.PE.LoadConfigurationV0

LoadConfigurationV0 enhanced with Control Flow Guard.

It is associated with the WIN_VERSION: WIN_8_1

guard_cf_check_function_pointer

The VA where Control Flow Guard check-function pointer is stored.

guard_cf_dispatch_function_pointer

The VA where Control Flow Guard dispatch-function pointer is stored.

guard_cf_flags_list

Return list of GUARD_CF_FLAGS present in guard_flags

guard_cf_function_count

The count of unique RVAs in the guard_cf_function_table

guard_cf_function_table

The VA of the sorted table of RVAs of each Control Flow Guard function in the image.

guard_flags

Control Flow Guard related flags.

has(self: lief.PE.LoadConfigurationV1, flag: lief.PE.GUARD_CF_FLAGS) → bool

Check if the given GUARD_CF_FLAGS is present in guard_flags

Load Configuration V2

class lief.PE.LoadConfigurationV2(self: lief.PE.LoadConfigurationV2) → None

Bases: lief.PE.LoadConfigurationV1

LoadConfigurationV1 enhanced with code integrity.

It is associated with the WIN_VERSION: WIN10_0_9879

code_integrity

CodeIntegrity object

Load Configuration V3

class lief.PE.LoadConfigurationV3(self: lief.PE.LoadConfigurationV3) → None

Bases: lief.PE.LoadConfigurationV2

LoadConfigurationV2 with Control Flow Guard improved.

It is associated with the WIN_VERSION: WIN10_0_14286

guard_address_taken_iat_entry_count

Number of entries in the guard_address_taken_iat_entry_table

guard_address_taken_iat_entry_table

VA of a table associated with CFG’s IAT checks

guard_long_jump_target_count

Number of entries in the guard_address_taken_iat_entry_table

guard_long_jump_target_table

VA of a table associated with CFG’s long jump

Load Configuration V4

class lief.PE.LoadConfigurationV4(self: lief.PE.LoadConfigurationV4) → None

Bases: lief.PE.LoadConfigurationV3

LoadConfigurationV3 enhanced with:

  • Kind of dynamic relocations

  • Hybrid Metadata Pointer

It is associated with the WIN_VERSION: WIN10_0_14383

dynamic_value_reloc_table

VA of pointing to a IMAGE_DYNAMIC_RELOCATION_TABLE

hybrid_metadata_pointer

Load Configuration V5

class lief.PE.LoadConfigurationV5(self: lief.PE.LoadConfigurationV5) → None

Bases: lief.PE.LoadConfigurationV4

LoadConfigurationV4 enhanced with Return Flow Guard.

It is associated with the WIN_VERSION: WIN10_0_14901

dynamic_value_reloctable_offset

Offset of dynamic relocation table relative to the relocation table

dynamic_value_reloctable_section

The section index of the dynamic value relocation table

guard_rf_failure_routine

VA of the failure routine

guard_rf_failure_routine_function_pointer

VA of the failure routine fptr

reserved2

Must be zero

Load Configuration V6

class lief.PE.LoadConfigurationV6(self: lief.PE.LoadConfigurationV6) → None

Bases: lief.PE.LoadConfigurationV5

LoadConfigurationV5 enhanced with Hotpatch and improved RFG.

It is associated with the WIN_VERSION: WIN10_0_15002

guard_rf_verify_stackpointer_function_pointer

VA of the Function verifying the stack pointer

hotpatch_table_offset

Offset to the hotpatch table

Load Configuration V7

class lief.PE.LoadConfigurationV7(self: lief.PE.LoadConfigurationV7) → None

Bases: lief.PE.LoadConfigurationV6

addressof_unicode_string
reserved3

Utilities

lief.PE.is_pe(*args, **kwargs)

Overloaded function.

  1. is_pe(file: str) -> bool

Check if the given file is a PE

  1. is_pe(raw: List[int]) -> bool

Check if the given raw data is a PE

lief.PE.get_type(*args, **kwargs)

Overloaded function.

  1. get_type(file: str) -> lief.PE.PE_TYPE

If the input file is a PE one, return the PE_TYPE

  1. get_type(raw: List[int]) -> lief.PE.PE_TYPE

If the input raw data represent a PE file, return the PE_TYPE

lief.PE.get_imphash(binary: lief.PE.Binary) → str

Compute the hash of imported functions

Properties of the hash generated:
  • Order agnostic

  • Casse agnostic

  • Ordinal (in some extent) agnostic

lief.PE.resolve_ordinals(import: lief.PE.Import, strict: bool=False) → lief.PE.Import

Take an Import as entry and try to resolve its ordinal imports

The strict boolean parameter enables to throw a not_found exception if the ordinal can’t be resolved. Otherwise it skips the entry.


Enums

PE_TYPE

class lief.PE.PE_TYPE(self: lief.PE.PE_TYPE, arg0: int) → None
PE32 = PE_TYPE.PE32
PE32_PLUS = PE_TYPE.PE32_PLUS

MACHINE_TYPES

class lief.PE.MACHINE_TYPES(self: lief.PE.MACHINE_TYPES, arg0: int) → None
AM33 = MACHINE_TYPES.AM33
AMD64 = MACHINE_TYPES.AMD64
ARM = MACHINE_TYPES.ARM
ARM64 = MACHINE_TYPES.ARM64
ARMNT = MACHINE_TYPES.ARMNT
EBC = MACHINE_TYPES.EBC
I386 = MACHINE_TYPES.I386
IA64 = MACHINE_TYPES.IA64
INVALID = MACHINE_TYPES.INVALID
M32R = MACHINE_TYPES.M32R
MIPS16 = MACHINE_TYPES.MIPS16
MIPSFPU = MACHINE_TYPES.MIPSFPU
MIPSFPU16 = MACHINE_TYPES.MIPSFPU16
POWERPC = MACHINE_TYPES.POWERPC
POWERPCFP = MACHINE_TYPES.POWERPCFP
R4000 = MACHINE_TYPES.R4000
SH3 = MACHINE_TYPES.SH3
SH3DSP = MACHINE_TYPES.SH3DSP
SH4 = MACHINE_TYPES.SH4
SH5 = MACHINE_TYPES.SH5
THUMB = MACHINE_TYPES.THUMB
UNKNOWN = MACHINE_TYPES.UNKNOWN
WCEMIPSV2 = MACHINE_TYPES.WCEMIPSV2

HEADER_CHARACTERISTICS

class lief.PE.HEADER_CHARACTERISTICS(self: lief.PE.HEADER_CHARACTERISTICS, arg0: int) → None
AGGRESSIVE_WS_TRIM = HEADER_CHARACTERISTICS.AGGRESSIVE_WS_TRIM
BYTES_REVERSED_HI = HEADER_CHARACTERISTICS.BYTES_REVERSED_HI
BYTES_REVERSED_LO = HEADER_CHARACTERISTICS.BYTES_REVERSED_LO
CHARA_32BIT_MACHINE = HEADER_CHARACTERISTICS.CHARA_32BIT_MACHINE
DEBUG_STRIPPED = HEADER_CHARACTERISTICS.DEBUG_STRIPPED
DLL = HEADER_CHARACTERISTICS.DLL
EXECUTABLE_IMAGE = HEADER_CHARACTERISTICS.EXECUTABLE_IMAGE
LARGE_ADDRESS_AWARE = HEADER_CHARACTERISTICS.LARGE_ADDRESS_AWARE
LINE_NUMS_STRIPPED = HEADER_CHARACTERISTICS.LINE_NUMS_STRIPPED
LOCAL_SYMS_STRIPPED = HEADER_CHARACTERISTICS.LOCAL_SYMS_STRIPPED
NET_RUN_FROM_SWAP = HEADER_CHARACTERISTICS.NET_RUN_FROM_SWAP
RELOCS_STRIPPED = HEADER_CHARACTERISTICS.RELOCS_STRIPPED
REMOVABLE_RUN_FROM_SWAP = HEADER_CHARACTERISTICS.REMOVABLE_RUN_FROM_SWAP
SYSTEM = HEADER_CHARACTERISTICS.SYSTEM
UP_SYSTEM_ONLY = HEADER_CHARACTERISTICS.UP_SYSTEM_ONLY

SUBSYSTEM

class lief.PE.SUBSYSTEM(self: lief.PE.SUBSYSTEM, arg0: int) → None
EFI_APPLICATION = SUBSYSTEM.EFI_APPLICATION
EFI_BOOT_SERVICE_DRIVER = SUBSYSTEM.EFI_BOOT_SERVICE_DRIVER
EFI_ROM = SUBSYSTEM.EFI_ROM
EFI_RUNTIME_DRIVER = SUBSYSTEM.EFI_RUNTIME_DRIVER
NATIVE = SUBSYSTEM.NATIVE
NATIVE_WINDOWS = SUBSYSTEM.NATIVE_WINDOWS
OS2_CUI = SUBSYSTEM.OS2_CUI
POSIX_CUI = SUBSYSTEM.POSIX_CUI
UNKNOWN = SUBSYSTEM.UNKNOWN
WINDOWS_BOOT_APPLICATION = SUBSYSTEM.WINDOWS_BOOT_APPLICATION
WINDOWS_CE_GUI = SUBSYSTEM.WINDOWS_CE_GUI
WINDOWS_CUI = SUBSYSTEM.WINDOWS_CUI
WINDOWS_GUI = SUBSYSTEM.WINDOWS_GUI
XBOX = SUBSYSTEM.XBOX

DATA_DIRECTORY

class lief.PE.DATA_DIRECTORY(self: lief.PE.DATA_DIRECTORY, arg0: int) → None
ARCHITECTURE = DATA_DIRECTORY.ARCHITECTURE
BASE_RELOCATION_TABLE = DATA_DIRECTORY.BASE_RELOCATION_TABLE
BOUND_IMPORT = DATA_DIRECTORY.BOUND_IMPORT
CERTIFICATE_TABLE = DATA_DIRECTORY.CERTIFICATE_TABLE
CLR_RUNTIME_HEADER = DATA_DIRECTORY.CLR_RUNTIME_HEADER
DEBUG = DATA_DIRECTORY.DEBUG
DELAY_IMPORT_DESCRIPTOR = DATA_DIRECTORY.DELAY_IMPORT_DESCRIPTOR
EXCEPTION_TABLE = DATA_DIRECTORY.EXCEPTION_TABLE
EXPORT_TABLE = DATA_DIRECTORY.EXPORT_TABLE
GLOBAL_PTR = DATA_DIRECTORY.GLOBAL_PTR
IAT = DATA_DIRECTORY.IAT
IMPORT_TABLE = DATA_DIRECTORY.IMPORT_TABLE
LOAD_CONFIG_TABLE = DATA_DIRECTORY.LOAD_CONFIG_TABLE
RESOURCE_TABLE = DATA_DIRECTORY.RESOURCE_TABLE
TLS_TABLE = DATA_DIRECTORY.TLS_TABLE

DLL_CHARACTERISTICS

class lief.PE.DLL_CHARACTERISTICS(self: lief.PE.DLL_CHARACTERISTICS, arg0: int) → None
APPCONTAINER = DLL_CHARACTERISTICS.APPCONTAINER
DYNAMIC_BASE = DLL_CHARACTERISTICS.DYNAMIC_BASE
FORCE_INTEGRITY = DLL_CHARACTERISTICS.FORCE_INTEGRITY
GUARD_CF = DLL_CHARACTERISTICS.GUARD_CF
HIGH_ENTROPY_VA = DLL_CHARACTERISTICS.HIGH_ENTROPY_VA
NO_BIND = DLL_CHARACTERISTICS.NO_BIND
NO_ISOLATION = DLL_CHARACTERISTICS.NO_ISOLATION
NO_SEH = DLL_CHARACTERISTICS.NO_SEH
NX_COMPAT = DLL_CHARACTERISTICS.NX_COMPAT
TERMINAL_SERVER_AWARE = DLL_CHARACTERISTICS.TERMINAL_SERVER_AWARE
WDM_DRIVER = DLL_CHARACTERISTICS.WDM_DRIVER

SECTION_CHARACTERISTICS

class lief.PE.SECTION_CHARACTERISTICS(self: lief.PE.SECTION_CHARACTERISTICS, arg0: int) → None
ALIGN_1024BYTES = SECTION_CHARACTERISTICS.ALIGN_1024BYTES
ALIGN_128BYTES = SECTION_CHARACTERISTICS.ALIGN_128BYTES
ALIGN_16BYTES = SECTION_CHARACTERISTICS.ALIGN_16BYTES
ALIGN_1BYTES = SECTION_CHARACTERISTICS.ALIGN_1BYTES
ALIGN_2048BYTES = SECTION_CHARACTERISTICS.ALIGN_2048BYTES
ALIGN_256BYTES = SECTION_CHARACTERISTICS.ALIGN_256BYTES
ALIGN_2BYTES = SECTION_CHARACTERISTICS.ALIGN_2BYTES
ALIGN_32BYTES = SECTION_CHARACTERISTICS.ALIGN_32BYTES
ALIGN_4096BYTES = SECTION_CHARACTERISTICS.ALIGN_4096BYTES
ALIGN_4BYTES = SECTION_CHARACTERISTICS.ALIGN_4BYTES
ALIGN_512BYTES = SECTION_CHARACTERISTICS.ALIGN_512BYTES
ALIGN_64BYTES = SECTION_CHARACTERISTICS.ALIGN_64BYTES
ALIGN_8192BYTES = SECTION_CHARACTERISTICS.ALIGN_8192BYTES
ALIGN_8BYTES = SECTION_CHARACTERISTICS.ALIGN_8BYTES
CNT_CODE = SECTION_CHARACTERISTICS.CNT_CODE
CNT_INITIALIZED_DATA = SECTION_CHARACTERISTICS.CNT_INITIALIZED_DATA
CNT_UNINITIALIZED_DATA = SECTION_CHARACTERISTICS.CNT_UNINITIALIZED_DATA
GPREL = SECTION_CHARACTERISTICS.GPREL
LNK_COMDAT = SECTION_CHARACTERISTICS.LNK_COMDAT
LNK_INFO = SECTION_CHARACTERISTICS.LNK_INFO
LNK_NRELOC_OVFL = SECTION_CHARACTERISTICS.LNK_NRELOC_OVFL
LNK_OTHER = SECTION_CHARACTERISTICS.LNK_OTHER
LNK_REMOVE = SECTION_CHARACTERISTICS.LNK_REMOVE
MEM_16BIT = SECTION_CHARACTERISTICS.MEM_16BIT
MEM_DISCARDABLE = SECTION_CHARACTERISTICS.MEM_DISCARDABLE
MEM_EXECUTE = SECTION_CHARACTERISTICS.MEM_EXECUTE
MEM_LOCKED = SECTION_CHARACTERISTICS.MEM_LOCKED
MEM_NOT_CACHED = SECTION_CHARACTERISTICS.MEM_NOT_CACHED
MEM_NOT_PAGED = SECTION_CHARACTERISTICS.MEM_NOT_PAGED
MEM_PRELOAD = SECTION_CHARACTERISTICS.MEM_PRELOAD
MEM_READ = SECTION_CHARACTERISTICS.MEM_READ
MEM_SHARED = SECTION_CHARACTERISTICS.MEM_SHARED
MEM_WRITE = SECTION_CHARACTERISTICS.MEM_WRITE
TYPE_NO_PAD = SECTION_CHARACTERISTICS.TYPE_NO_PAD

SECTION_TYPES

class lief.PE.SECTION_TYPES(self: lief.PE.SECTION_TYPES, arg0: int) → None
BSS = SECTION_TYPES.BSS
DATA = SECTION_TYPES.DATA
EXPORT = SECTION_TYPES.EXPORT
IDATA = SECTION_TYPES.IDATA
RELOCATION = SECTION_TYPES.RELOCATION
RESOURCE = SECTION_TYPES.RESOURCE
TEXT = SECTION_TYPES.TEXT
TLS_ = SECTION_TYPES.TLS_
UNKNOWN = SECTION_TYPES.UNKNOWN

SYMBOL_BASE_TYPES

class lief.PE.SYMBOL_BASE_TYPES(self: lief.PE.SYMBOL_BASE_TYPES, arg0: int) → None
BYTE = SYMBOL_BASE_TYPES.BYTE
CHAR = SYMBOL_BASE_TYPES.CHAR
DOUBLE = SYMBOL_BASE_TYPES.DOUBLE
DWORD = SYMBOL_BASE_TYPES.DWORD
ENUM = SYMBOL_BASE_TYPES.ENUM
FLOAT = SYMBOL_BASE_TYPES.FLOAT
INT = SYMBOL_BASE_TYPES.INT
LONG = SYMBOL_BASE_TYPES.LONG
MOE = SYMBOL_BASE_TYPES.MOE
NULL = SYMBOL_BASE_TYPES.NULL
SHORT = SYMBOL_BASE_TYPES.SHORT
STRUCT = SYMBOL_BASE_TYPES.STRUCT
UINT = SYMBOL_BASE_TYPES.UINT
UNION = SYMBOL_BASE_TYPES.UNION
VOID = SYMBOL_BASE_TYPES.VOID
WORD = SYMBOL_BASE_TYPES.WORD

SYMBOL_COMPLEX_TYPES

class lief.PE.SYMBOL_COMPLEX_TYPES(self: lief.PE.SYMBOL_COMPLEX_TYPES, arg0: int) → None
ARRAY = SYMBOL_COMPLEX_TYPES.ARRAY
COMPLEX_TYPE_SHIFT = SYMBOL_COMPLEX_TYPES.COMPLEX_TYPE_SHIFT
FUNCTION = SYMBOL_COMPLEX_TYPES.FUNCTION
NULL = SYMBOL_COMPLEX_TYPES.NULL
POINTER = SYMBOL_COMPLEX_TYPES.POINTER

SYMBOL_SECTION_NUMBER

class lief.PE.SYMBOL_SECTION_NUMBER(self: lief.PE.SYMBOL_SECTION_NUMBER, arg0: int) → None
ABSOLUTE = SYMBOL_SECTION_NUMBER.ABSOLUTE
DEBUG = SYMBOL_SECTION_NUMBER.DEBUG
UNDEFINED = SYMBOL_SECTION_NUMBER.UNDEFINED

SYMBOL_STORAGE_CLASS

class lief.PE.SYMBOL_STORAGE_CLASS(self: lief.PE.SYMBOL_STORAGE_CLASS, arg0: int) → None
AUTOMATIC = SYMBOL_STORAGE_CLASS.AUTOMATIC
BIT_FIELD = SYMBOL_STORAGE_CLASS.BIT_FIELD
BLOCK = SYMBOL_STORAGE_CLASS.BLOCK
CLR_TOKEN = SYMBOL_STORAGE_CLASS.CLR_TOKEN
END_OF_FUNCTION = SYMBOL_STORAGE_CLASS.END_OF_FUNCTION
END_OF_STRUCT = SYMBOL_STORAGE_CLASS.END_OF_STRUCT
ENUM_TAG = SYMBOL_STORAGE_CLASS.ENUM_TAG
EXTERNAL = SYMBOL_STORAGE_CLASS.EXTERNAL
EXTERNAL_DEF = SYMBOL_STORAGE_CLASS.EXTERNAL_DEF
FILE = SYMBOL_STORAGE_CLASS.FILE
FUNCTION = SYMBOL_STORAGE_CLASS.FUNCTION
LABEL = SYMBOL_STORAGE_CLASS.LABEL
MEMBER_OF_ENUM = SYMBOL_STORAGE_CLASS.MEMBER_OF_ENUM
MEMBER_OF_STRUCT = SYMBOL_STORAGE_CLASS.MEMBER_OF_STRUCT
NULL = SYMBOL_STORAGE_CLASS.NULL
REGISTER = SYMBOL_STORAGE_CLASS.REGISTER
REGISTER_PARAM = SYMBOL_STORAGE_CLASS.REGISTER_PARAM
SECTION = SYMBOL_STORAGE_CLASS.SECTION
STATIC = SYMBOL_STORAGE_CLASS.STATIC
TYPE_DEFINITION = SYMBOL_STORAGE_CLASS.TYPE_DEFINITION
UDEFINED_STATIC = SYMBOL_STORAGE_CLASS.UDEFINED_STATIC
UNDEFINED_LABEL = SYMBOL_STORAGE_CLASS.UNDEFINED_LABEL
UNION_TAG = SYMBOL_STORAGE_CLASS.UNION_TAG
WEAK_EXTERNAL = SYMBOL_STORAGE_CLASS.WEAK_EXTERNAL

RELOCATIONS_BASE_TYPES

class lief.PE.RELOCATIONS_BASE_TYPES(self: lief.PE.RELOCATIONS_BASE_TYPES, arg0: int) → None
ABSOLUTE = RELOCATIONS_BASE_TYPES.ABSOLUTE
DIR64 = RELOCATIONS_BASE_TYPES.DIR64
HIGH = RELOCATIONS_BASE_TYPES.HIGH
HIGH3ADJ = RELOCATIONS_BASE_TYPES.HIGH3ADJ
HIGHADJ = RELOCATIONS_BASE_TYPES.HIGHADJ
HIGHLOW = RELOCATIONS_BASE_TYPES.HIGHLOW
JMPADDR = RELOCATIONS_BASE_TYPES.JMPADDR
JMPADDR16 = RELOCATIONS_BASE_TYPES.JMPADDR16
LOW = RELOCATIONS_BASE_TYPES.LOW
REL = RELOCATIONS_BASE_TYPES.REL
SECTION = RELOCATIONS_BASE_TYPES.SECTION

DEBUG_TYPES

class lief.PE.DEBUG_TYPES(self: lief.PE.DEBUG_TYPES, arg0: int) → None
BORLAND = DEBUG_TYPES.BORLAND
CLSID = DEBUG_TYPES.CLSID
CODEVIEW = DEBUG_TYPES.CODEVIEW
COFF = DEBUG_TYPES.COFF
EXCEPTION = DEBUG_TYPES.EXCEPTION
FIXUP = DEBUG_TYPES.FIXUP
FPO = DEBUG_TYPES.FPO
ILTCG = DEBUG_TYPES.ILTCG
MISC = DEBUG_TYPES.MISC
MPX = DEBUG_TYPES.MPX
POGO = DEBUG_TYPES.POGO
REPRO = DEBUG_TYPES.REPRO
SRC = DEBUG_TYPES.SRC
UNKNOWN = DEBUG_TYPES.UNKNOWN
VC_FEATURE = DEBUG_TYPES.VC_FEATURE

RESOURCE_TYPES

class lief.PE.RESOURCE_TYPES(self: lief.PE.RESOURCE_TYPES, arg0: int) → None
ACCELERATOR = RESOURCE_TYPES.ACCELERATOR
ANICURSOR = RESOURCE_TYPES.ANICURSOR
ANIICON = RESOURCE_TYPES.ANIICON
BITMAP = RESOURCE_TYPES.BITMAP
CURSOR = RESOURCE_TYPES.CURSOR
DIALOG = RESOURCE_TYPES.DIALOG
DLGINCLUDE = RESOURCE_TYPES.DLGINCLUDE
FONT = RESOURCE_TYPES.FONT
FONTDIR = RESOURCE_TYPES.FONTDIR
GROUP_CURSOR = RESOURCE_TYPES.GROUP_CURSOR
GROUP_ICON = RESOURCE_TYPES.GROUP_ICON
HTML = RESOURCE_TYPES.HTML
ICON = RESOURCE_TYPES.ICON
MANIFEST = RESOURCE_TYPES.MANIFEST
MENU = RESOURCE_TYPES.MENU
MESSAGETABLE = RESOURCE_TYPES.MESSAGETABLE
PLUGPLAY = RESOURCE_TYPES.PLUGPLAY
RCDATA = RESOURCE_TYPES.RCDATA
STRING = RESOURCE_TYPES.STRING
VERSION = RESOURCE_TYPES.VERSION
VXD = RESOURCE_TYPES.VXD

RESOURCE_LANGS

class lief.PE.RESOURCE_LANGS(self: lief.PE.RESOURCE_LANGS, arg0: int) → None
AFRIKAANS = RESOURCE_LANGS.AFRIKAANS
ALBANIAN = RESOURCE_LANGS.ALBANIAN
ARABIC = RESOURCE_LANGS.ARABIC
ARMENIAN = RESOURCE_LANGS.ARMENIAN
ASSAMESE = RESOURCE_LANGS.ASSAMESE
AZERI = RESOURCE_LANGS.AZERI
BANGLA = RESOURCE_LANGS.BANGLA
BASQUE = RESOURCE_LANGS.BASQUE
BELARUSIAN = RESOURCE_LANGS.BELARUSIAN
BOSNIAN = RESOURCE_LANGS.BOSNIAN
BRETON = RESOURCE_LANGS.BRETON
BULGARIAN = RESOURCE_LANGS.BULGARIAN
CATALAN = RESOURCE_LANGS.CATALAN
CHINESE = RESOURCE_LANGS.CHINESE
CORNISH = RESOURCE_LANGS.CORNISH
CZECH = RESOURCE_LANGS.CZECH
DANISH = RESOURCE_LANGS.DANISH
DIVEHI = RESOURCE_LANGS.DIVEHI
DUTCH = RESOURCE_LANGS.DUTCH
ENGLISH = RESOURCE_LANGS.ENGLISH
ESPERANTO = RESOURCE_LANGS.ESPERANTO
ESTONIAN = RESOURCE_LANGS.ESTONIAN
FAEROESE = RESOURCE_LANGS.FAEROESE
FARSI = RESOURCE_LANGS.FARSI
FINNISH = RESOURCE_LANGS.FINNISH
FRENCH = RESOURCE_LANGS.FRENCH
GAELIC = RESOURCE_LANGS.GAELIC
GALICIAN = RESOURCE_LANGS.GALICIAN
GEORGIAN = RESOURCE_LANGS.GEORGIAN
GERMAN = RESOURCE_LANGS.GERMAN
GREEK = RESOURCE_LANGS.GREEK
GUJARATI = RESOURCE_LANGS.GUJARATI
HEBREW = RESOURCE_LANGS.HEBREW
HINDI = RESOURCE_LANGS.HINDI
HUNGARIAN = RESOURCE_LANGS.HUNGARIAN
ICELANDIC = RESOURCE_LANGS.ICELANDIC
INDONESIAN = RESOURCE_LANGS.INDONESIAN
INUKTITUT = RESOURCE_LANGS.INUKTITUT
INVARIANT = RESOURCE_LANGS.INVARIANT
ITALIAN = RESOURCE_LANGS.ITALIAN
JAPANESE = RESOURCE_LANGS.JAPANESE
KANNADA = RESOURCE_LANGS.KANNADA
KASHMIRI = RESOURCE_LANGS.KASHMIRI
KAZAK = RESOURCE_LANGS.KAZAK
KONKANI = RESOURCE_LANGS.KONKANI
KOREAN = RESOURCE_LANGS.KOREAN
KYRGYZ = RESOURCE_LANGS.KYRGYZ
LATVIAN = RESOURCE_LANGS.LATVIAN
LITHUANIAN = RESOURCE_LANGS.LITHUANIAN
LOWER_SORBIAN = RESOURCE_LANGS.LOWER_SORBIAN
MACEDONIAN = RESOURCE_LANGS.MACEDONIAN
MALAY = RESOURCE_LANGS.MALAY
MALAYALAM = RESOURCE_LANGS.MALAYALAM
MALTESE = RESOURCE_LANGS.MALTESE
MANIPURI = RESOURCE_LANGS.MANIPURI
MAORI = RESOURCE_LANGS.MAORI
MARATHI = RESOURCE_LANGS.MARATHI
MONGOLIAN = RESOURCE_LANGS.MONGOLIAN
NEPALI = RESOURCE_LANGS.NEPALI
NEUTRAL = RESOURCE_LANGS.NEUTRAL
NORWEGIAN = RESOURCE_LANGS.NORWEGIAN
ORIYA = RESOURCE_LANGS.ORIYA
POLISH = RESOURCE_LANGS.POLISH
PORTUGUESE = RESOURCE_LANGS.PORTUGUESE
PULAR = RESOURCE_LANGS.PULAR
PUNJABI = RESOURCE_LANGS.PUNJABI
QUECHUA = RESOURCE_LANGS.QUECHUA
RHAETO_ROMANCE = RESOURCE_LANGS.RHAETO_ROMANCE
ROMANIAN = RESOURCE_LANGS.ROMANIAN
RUSSIAN = RESOURCE_LANGS.RUSSIAN
SAMI = RESOURCE_LANGS.SAMI
SANSKRIT = RESOURCE_LANGS.SANSKRIT
SINDHI = RESOURCE_LANGS.SINDHI
SLOVAK = RESOURCE_LANGS.SLOVAK
SLOVENIAN = RESOURCE_LANGS.SLOVENIAN
SPANISH = RESOURCE_LANGS.SPANISH
SUTU = RESOURCE_LANGS.SUTU
SWAHILI = RESOURCE_LANGS.SWAHILI
SWEDISH = RESOURCE_LANGS.SWEDISH
SYRIAC = RESOURCE_LANGS.SYRIAC
TAMAZIGHT = RESOURCE_LANGS.TAMAZIGHT
TAMIL = RESOURCE_LANGS.TAMIL
TATAR = RESOURCE_LANGS.TATAR
TELUGU = RESOURCE_LANGS.TELUGU
THAI = RESOURCE_LANGS.THAI
TIGRINYA = RESOURCE_LANGS.TIGRINYA
TSONGA = RESOURCE_LANGS.TSONGA
TSWANA = RESOURCE_LANGS.TSWANA
TURKISH = RESOURCE_LANGS.TURKISH
UKRAINIAN = RESOURCE_LANGS.UKRAINIAN
URDU = RESOURCE_LANGS.URDU
UZBEK = RESOURCE_LANGS.UZBEK
VENDA = RESOURCE_LANGS.VENDA
VIETNAMESE = RESOURCE_LANGS.VIETNAMESE
WALON = RESOURCE_LANGS.WALON
WELSH = RESOURCE_LANGS.WELSH
XHOSA = RESOURCE_LANGS.XHOSA
ZULU = RESOURCE_LANGS.ZULU

RESOURCE_SUBLANGS

class lief.PE.RESOURCE_SUBLANGS(self: lief.PE.RESOURCE_SUBLANGS, arg0: int) → None
AFRIKAANS_SOUTH_AFRICA = RESOURCE_SUBLANGS.AFRIKAANS_SOUTH_AFRICA
ALBANIAN_ALBANIA = RESOURCE_SUBLANGS.ALBANIAN_ALBANIA
ALSATIAN_FRANCE = RESOURCE_SUBLANGS.ALSATIAN_FRANCE
AMHARIC_ETHIOPIA = RESOURCE_SUBLANGS.AMHARIC_ETHIOPIA
ARABIC_ALGERIA = RESOURCE_SUBLANGS.ARABIC_ALGERIA
ARABIC_BAHRAIN = RESOURCE_SUBLANGS.ARABIC_BAHRAIN
ARABIC_EGYPT = RESOURCE_SUBLANGS.ARABIC_EGYPT
ARABIC_IRAQ = RESOURCE_SUBLANGS.ARABIC_IRAQ
ARABIC_JORDAN = RESOURCE_SUBLANGS.ARABIC_JORDAN
ARABIC_KUWAIT = RESOURCE_SUBLANGS.ARABIC_KUWAIT
ARABIC_LEBANON = RESOURCE_SUBLANGS.ARABIC_LEBANON
ARABIC_LIBYA = RESOURCE_SUBLANGS.ARABIC_LIBYA
ARABIC_MOROCCO = RESOURCE_SUBLANGS.ARABIC_MOROCCO
ARABIC_OMAN = RESOURCE_SUBLANGS.ARABIC_OMAN
ARABIC_QATAR = RESOURCE_SUBLANGS.ARABIC_QATAR
ARABIC_SAUDI_ARABIA = RESOURCE_SUBLANGS.ARABIC_SAUDI_ARABIA
ARABIC_SYRIA = RESOURCE_SUBLANGS.ARABIC_SYRIA
ARABIC_TUNISIA = RESOURCE_SUBLANGS.ARABIC_TUNISIA
ARABIC_UAE = RESOURCE_SUBLANGS.ARABIC_UAE
ARABIC_YEMEN = RESOURCE_SUBLANGS.ARABIC_YEMEN
ARMENIAN_ARMENIA = RESOURCE_SUBLANGS.ARMENIAN_ARMENIA
ASSAMESE_INDIA = RESOURCE_SUBLANGS.ASSAMESE_INDIA
AZERI_CYRILLIC = RESOURCE_SUBLANGS.AZERI_CYRILLIC
AZERI_LATIN = RESOURCE_SUBLANGS.AZERI_LATIN
BANGLA_BANGLADESH = RESOURCE_SUBLANGS.BANGLA_BANGLADESH
BANGLA_INDIA = RESOURCE_SUBLANGS.BANGLA_INDIA
BASHKIR_RUSSIA = RESOURCE_SUBLANGS.BASHKIR_RUSSIA
BASQUE_BASQUE = RESOURCE_SUBLANGS.BASQUE_BASQUE
BELARUSIAN_BELARUS = RESOURCE_SUBLANGS.BELARUSIAN_BELARUS
BOSNIAN_BOSNIA_HERZEGOVINA_CYRILLIC = RESOURCE_SUBLANGS.BOSNIAN_BOSNIA_HERZEGOVINA_CYRILLIC
BOSNIAN_BOSNIA_HERZEGOVINA_LATIN = RESOURCE_SUBLANGS.BOSNIAN_BOSNIA_HERZEGOVINA_LATIN
BRETON_FRANCE = RESOURCE_SUBLANGS.BRETON_FRANCE
BULGARIAN_BULGARIA = RESOURCE_SUBLANGS.BULGARIAN_BULGARIA
CATALAN_CATALAN = RESOURCE_SUBLANGS.CATALAN_CATALAN
CHINESE_HONGKONG = RESOURCE_SUBLANGS.CHINESE_HONGKONG
CHINESE_MACAU = RESOURCE_SUBLANGS.CHINESE_MACAU
CHINESE_SIMPLIFIED = RESOURCE_SUBLANGS.CHINESE_SIMPLIFIED
CHINESE_SINGAPORE = RESOURCE_SUBLANGS.CHINESE_SINGAPORE
CHINESE_TRADITIONAL = RESOURCE_SUBLANGS.CHINESE_TRADITIONAL
CORSICAN_FRANCE = RESOURCE_SUBLANGS.CORSICAN_FRANCE
CROATIAN_BOSNIA_HERZEGOVINA_LATIN = RESOURCE_SUBLANGS.CROATIAN_BOSNIA_HERZEGOVINA_LATIN
CROATIAN_CROATIA = RESOURCE_SUBLANGS.CROATIAN_CROATIA
CUSTOM_DEFAULT = RESOURCE_SUBLANGS.CUSTOM_DEFAULT
CUSTOM_UNSPECIFIED = RESOURCE_SUBLANGS.CUSTOM_UNSPECIFIED
CZECH_CZECH_REPUBLIC = RESOURCE_SUBLANGS.CZECH_CZECH_REPUBLIC
DANISH_DENMARK = RESOURCE_SUBLANGS.DANISH_DENMARK
DARI_AFGHANISTAN = RESOURCE_SUBLANGS.DARI_AFGHANISTAN
DEFAULT = RESOURCE_SUBLANGS.DEFAULT
DIVEHI_MALDIVES = RESOURCE_SUBLANGS.DIVEHI_MALDIVES
DUTCH = RESOURCE_SUBLANGS.DUTCH
DUTCH_BELGIAN = RESOURCE_SUBLANGS.DUTCH_BELGIAN
ENGLISH_AUS = RESOURCE_SUBLANGS.ENGLISH_AUS
ENGLISH_BELIZE = RESOURCE_SUBLANGS.ENGLISH_BELIZE
ENGLISH_CAN = RESOURCE_SUBLANGS.ENGLISH_CAN
ENGLISH_CARIBBEAN = RESOURCE_SUBLANGS.ENGLISH_CARIBBEAN
ENGLISH_EIRE = RESOURCE_SUBLANGS.ENGLISH_EIRE
ENGLISH_INDIA = RESOURCE_SUBLANGS.ENGLISH_INDIA
ENGLISH_IRELAND = RESOURCE_SUBLANGS.ENGLISH_IRELAND
ENGLISH_JAMAICA = RESOURCE_SUBLANGS.ENGLISH_JAMAICA
ENGLISH_MALAYSIA = RESOURCE_SUBLANGS.ENGLISH_MALAYSIA
ENGLISH_NZ = RESOURCE_SUBLANGS.ENGLISH_NZ
ENGLISH_PHILIPPINES = RESOURCE_SUBLANGS.ENGLISH_PHILIPPINES
ENGLISH_SINGAPORE = RESOURCE_SUBLANGS.ENGLISH_SINGAPORE
ENGLISH_SOUTH_AFRICA = RESOURCE_SUBLANGS.ENGLISH_SOUTH_AFRICA
ENGLISH_TRINIDAD = RESOURCE_SUBLANGS.ENGLISH_TRINIDAD
ENGLISH_UK = RESOURCE_SUBLANGS.ENGLISH_UK
ENGLISH_US = RESOURCE_SUBLANGS.ENGLISH_US
ENGLISH_ZIMBABWE = RESOURCE_SUBLANGS.ENGLISH_ZIMBABWE
ESTONIAN_ESTONIA = RESOURCE_SUBLANGS.ESTONIAN_ESTONIA
FAEROESE_FAROE_ISLANDS = RESOURCE_SUBLANGS.FAEROESE_FAROE_ISLANDS
FILIPINO_PHILIPPINES = RESOURCE_SUBLANGS.FILIPINO_PHILIPPINES
FINNISH_FINLAND = RESOURCE_SUBLANGS.FINNISH_FINLAND
FRENCH = RESOURCE_SUBLANGS.FRENCH
FRENCH_BELGIAN = RESOURCE_SUBLANGS.FRENCH_BELGIAN
FRENCH_CANADIAN = RESOURCE_SUBLANGS.FRENCH_CANADIAN
FRENCH_LUXEMBOURG = RESOURCE_SUBLANGS.FRENCH_LUXEMBOURG
FRENCH_MONACO = RESOURCE_SUBLANGS.FRENCH_MONACO
FRENCH_SWISS = RESOURCE_SUBLANGS.FRENCH_SWISS
FRISIAN_NETHERLANDS = RESOURCE_SUBLANGS.FRISIAN_NETHERLANDS
GALICIAN_GALICIAN = RESOURCE_SUBLANGS.GALICIAN_GALICIAN
GEORGIAN_GEORGIA = RESOURCE_SUBLANGS.GEORGIAN_GEORGIA
GERMAN = RESOURCE_SUBLANGS.GERMAN
GERMAN_AUSTRIAN = RESOURCE_SUBLANGS.GERMAN_AUSTRIAN
GERMAN_LIECHTENSTEIN = RESOURCE_SUBLANGS.GERMAN_LIECHTENSTEIN
GERMAN_LUXEMBOURG = RESOURCE_SUBLANGS.GERMAN_LUXEMBOURG
GERMAN_SWISS = RESOURCE_SUBLANGS.GERMAN_SWISS
GREEK_GREECE = RESOURCE_SUBLANGS.GREEK_GREECE
GREENLANDIC_GREENLAND = RESOURCE_SUBLANGS.GREENLANDIC_GREENLAND
GUJARATI_INDIA = RESOURCE_SUBLANGS.GUJARATI_INDIA
HAUSA_NIGERIA_LATIN = RESOURCE_SUBLANGS.HAUSA_NIGERIA_LATIN
HEBREW_ISRAEL = RESOURCE_SUBLANGS.HEBREW_ISRAEL
HINDI_INDIA = RESOURCE_SUBLANGS.HINDI_INDIA
HUNGARIAN_HUNGARY = RESOURCE_SUBLANGS.HUNGARIAN_HUNGARY
ICELANDIC_ICELAND = RESOURCE_SUBLANGS.ICELANDIC_ICELAND
IGBO_NIGERIA = RESOURCE_SUBLANGS.IGBO_NIGERIA
INDONESIAN_INDONESIA = RESOURCE_SUBLANGS.INDONESIAN_INDONESIA
INUKTITUT_CANADA = RESOURCE_SUBLANGS.INUKTITUT_CANADA
INUKTITUT_CANADA_LATIN = RESOURCE_SUBLANGS.INUKTITUT_CANADA_LATIN
IRISH_IRELAND = RESOURCE_SUBLANGS.IRISH_IRELAND
ITALIAN = RESOURCE_SUBLANGS.ITALIAN
ITALIAN_SWISS = RESOURCE_SUBLANGS.ITALIAN_SWISS
JAPANESE_JAPAN = RESOURCE_SUBLANGS.JAPANESE_JAPAN
KANNADA_INDIA = RESOURCE_SUBLANGS.KANNADA_INDIA
KASHMIRI_INDIA = RESOURCE_SUBLANGS.KASHMIRI_INDIA
KASHMIRI_SASIA = RESOURCE_SUBLANGS.KASHMIRI_SASIA
KAZAK_KAZAKHSTAN = RESOURCE_SUBLANGS.KAZAK_KAZAKHSTAN
KHMER_CAMBODIA = RESOURCE_SUBLANGS.KHMER_CAMBODIA
KICHE_GUATEMALA = RESOURCE_SUBLANGS.KICHE_GUATEMALA
KINYARWANDA_RWANDA = RESOURCE_SUBLANGS.KINYARWANDA_RWANDA
KONKANI_INDIA = RESOURCE_SUBLANGS.KONKANI_INDIA
KOREAN = RESOURCE_SUBLANGS.KOREAN
KYRGYZ_KYRGYZSTAN = RESOURCE_SUBLANGS.KYRGYZ_KYRGYZSTAN
LAO_LAO = RESOURCE_SUBLANGS.LAO_LAO
LATVIAN_LATVIA = RESOURCE_SUBLANGS.LATVIAN_LATVIA
LITHUANIAN = RESOURCE_SUBLANGS.LITHUANIAN
LITHUANIAN_CLASSIC = RESOURCE_SUBLANGS.LITHUANIAN_CLASSIC
LOWER_SORBIAN_GERMANY = RESOURCE_SUBLANGS.LOWER_SORBIAN_GERMANY
LUXEMBOURGISH_LUXEMBOURG = RESOURCE_SUBLANGS.LUXEMBOURGISH_LUXEMBOURG
MACEDONIAN_MACEDONIA = RESOURCE_SUBLANGS.MACEDONIAN_MACEDONIA
MALAYALAM_INDIA = RESOURCE_SUBLANGS.MALAYALAM_INDIA
MALAY_BRUNEI_DARUSSALAM = RESOURCE_SUBLANGS.MALAY_BRUNEI_DARUSSALAM
MALAY_MALAYSIA = RESOURCE_SUBLANGS.MALAY_MALAYSIA
MALTESE_MALTA = RESOURCE_SUBLANGS.MALTESE_MALTA
MAORI_NEW_ZEALAND = RESOURCE_SUBLANGS.MAORI_NEW_ZEALAND
MAPUDUNGUN_CHILE = RESOURCE_SUBLANGS.MAPUDUNGUN_CHILE
MARATHI_INDIA = RESOURCE_SUBLANGS.MARATHI_INDIA
MOHAWK_MOHAWK = RESOURCE_SUBLANGS.MOHAWK_MOHAWK
MONGOLIAN_CYRILLIC_MONGOLIA = RESOURCE_SUBLANGS.MONGOLIAN_CYRILLIC_MONGOLIA
MONGOLIAN_PRC = RESOURCE_SUBLANGS.MONGOLIAN_PRC
NEPALI_INDIA = RESOURCE_SUBLANGS.NEPALI_INDIA
NEPALI_NEPAL = RESOURCE_SUBLANGS.NEPALI_NEPAL
NEUTRAL = RESOURCE_SUBLANGS.NEUTRAL
NORWEGIAN_BOKMAL = RESOURCE_SUBLANGS.NORWEGIAN_BOKMAL
NORWEGIAN_NYNORSK = RESOURCE_SUBLANGS.NORWEGIAN_NYNORSK
OCCITAN_FRANCE = RESOURCE_SUBLANGS.OCCITAN_FRANCE
ORIYA_INDIA = RESOURCE_SUBLANGS.ORIYA_INDIA
PASHTO_AFGHANISTAN = RESOURCE_SUBLANGS.PASHTO_AFGHANISTAN
PERSIAN_IRAN = RESOURCE_SUBLANGS.PERSIAN_IRAN
POLISH_POLAND = RESOURCE_SUBLANGS.POLISH_POLAND
PORTUGUESE = RESOURCE_SUBLANGS.PORTUGUESE
PORTUGUESE_BRAZILIAN = RESOURCE_SUBLANGS.PORTUGUESE_BRAZILIAN
PUNJABI_INDIA = RESOURCE_SUBLANGS.PUNJABI_INDIA
PUNJABI_PAKISTAN = RESOURCE_SUBLANGS.PUNJABI_PAKISTAN
QUECHUA_BOLIVIA = RESOURCE_SUBLANGS.QUECHUA_BOLIVIA
QUECHUA_ECUADOR = RESOURCE_SUBLANGS.QUECHUA_ECUADOR
QUECHUA_PERU = RESOURCE_SUBLANGS.QUECHUA_PERU
ROMANIAN_ROMANIA = RESOURCE_SUBLANGS.ROMANIAN_ROMANIA
ROMANSH_SWITZERLAND = RESOURCE_SUBLANGS.ROMANSH_SWITZERLAND
RUSSIAN_RUSSIA = RESOURCE_SUBLANGS.RUSSIAN_RUSSIA
SAMI_INARI_FINLAND = RESOURCE_SUBLANGS.SAMI_INARI_FINLAND
SAMI_LULE_NORWAY = RESOURCE_SUBLANGS.SAMI_LULE_NORWAY
SAMI_LULE_SWEDEN = RESOURCE_SUBLANGS.SAMI_LULE_SWEDEN
SAMI_NORTHERN_FINLAND = RESOURCE_SUBLANGS.SAMI_NORTHERN_FINLAND
SAMI_NORTHERN_NORWAY = RESOURCE_SUBLANGS.SAMI_NORTHERN_NORWAY
SAMI_NORTHERN_SWEDEN = RESOURCE_SUBLANGS.SAMI_NORTHERN_SWEDEN
SAMI_SKOLT_FINLAND = RESOURCE_SUBLANGS.SAMI_SKOLT_FINLAND
SAMI_SOUTHERN_NORWAY = RESOURCE_SUBLANGS.SAMI_SOUTHERN_NORWAY
SAMI_SOUTHERN_SWEDEN = RESOURCE_SUBLANGS.SAMI_SOUTHERN_SWEDEN
SANSKRIT_INDIA = RESOURCE_SUBLANGS.SANSKRIT_INDIA
SERBIAN_BOSNIA_HERZEGOVINA_CYRILLIC = RESOURCE_SUBLANGS.SERBIAN_BOSNIA_HERZEGOVINA_CYRILLIC
SERBIAN_BOSNIA_HERZEGOVINA_LATIN = RESOURCE_SUBLANGS.SERBIAN_BOSNIA_HERZEGOVINA_LATIN
SERBIAN_CROATIA = RESOURCE_SUBLANGS.SERBIAN_CROATIA
SERBIAN_CYRILLIC = RESOURCE_SUBLANGS.SERBIAN_CYRILLIC
SERBIAN_LATIN = RESOURCE_SUBLANGS.SERBIAN_LATIN
SINDHI_AFGHANISTAN = RESOURCE_SUBLANGS.SINDHI_AFGHANISTAN
SINDHI_INDIA = RESOURCE_SUBLANGS.SINDHI_INDIA
SINDHI_PAKISTAN = RESOURCE_SUBLANGS.SINDHI_PAKISTAN
SINHALESE_SRI_LANKA = RESOURCE_SUBLANGS.SINHALESE_SRI_LANKA
SLOVAK_SLOVAKIA = RESOURCE_SUBLANGS.SLOVAK_SLOVAKIA
SLOVENIAN_SLOVENIA = RESOURCE_SUBLANGS.SLOVENIAN_SLOVENIA
SOTHO_NORTHERN_SOUTH_AFRICA = RESOURCE_SUBLANGS.SOTHO_NORTHERN_SOUTH_AFRICA
SPANISH = RESOURCE_SUBLANGS.SPANISH
SPANISH_ARGENTINA = RESOURCE_SUBLANGS.SPANISH_ARGENTINA
SPANISH_BOLIVIA = RESOURCE_SUBLANGS.SPANISH_BOLIVIA
SPANISH_CHILE = RESOURCE_SUBLANGS.SPANISH_CHILE
SPANISH_COLOMBIA = RESOURCE_SUBLANGS.SPANISH_COLOMBIA
SPANISH_COSTA_RICA = RESOURCE_SUBLANGS.SPANISH_COSTA_RICA
SPANISH_DOMINICAN_REPUBLIC = RESOURCE_SUBLANGS.SPANISH_DOMINICAN_REPUBLIC
SPANISH_ECUADOR = RESOURCE_SUBLANGS.SPANISH_ECUADOR
SPANISH_EL_SALVADOR = RESOURCE_SUBLANGS.SPANISH_EL_SALVADOR
SPANISH_GUATEMALA = RESOURCE_SUBLANGS.SPANISH_GUATEMALA
SPANISH_HONDURAS = RESOURCE_SUBLANGS.SPANISH_HONDURAS
SPANISH_MEXICAN = RESOURCE_SUBLANGS.SPANISH_MEXICAN
SPANISH_MODERN = RESOURCE_SUBLANGS.SPANISH_MODERN
SPANISH_NICARAGUA = RESOURCE_SUBLANGS.SPANISH_NICARAGUA
SPANISH_PANAMA = RESOURCE_SUBLANGS.SPANISH_PANAMA
SPANISH_PARAGUAY = RESOURCE_SUBLANGS.SPANISH_PARAGUAY
SPANISH_PERU = RESOURCE_SUBLANGS.SPANISH_PERU
SPANISH_PUERTO_RICO = RESOURCE_SUBLANGS.SPANISH_PUERTO_RICO
SPANISH_URUGUAY = RESOURCE_SUBLANGS.SPANISH_URUGUAY
SPANISH_US = RESOURCE_SUBLANGS.SPANISH_US
SPANISH_VENEZUELA = RESOURCE_SUBLANGS.SPANISH_VENEZUELA
SWAHILI_KENYA = RESOURCE_SUBLANGS.SWAHILI_KENYA
SWEDISH = RESOURCE_SUBLANGS.SWEDISH
SWEDISH_FINLAND = RESOURCE_SUBLANGS.SWEDISH_FINLAND
SYRIAC_SYRIA = RESOURCE_SUBLANGS.SYRIAC_SYRIA
SYS_DEFAULT = RESOURCE_SUBLANGS.SYS_DEFAULT
TAJIK_TAJIKISTAN = RESOURCE_SUBLANGS.TAJIK_TAJIKISTAN
TAMAZIGHT_ALGERIA_LATIN = RESOURCE_SUBLANGS.TAMAZIGHT_ALGERIA_LATIN
TAMIL_INDIA = RESOURCE_SUBLANGS.TAMIL_INDIA
TAMIL_SRI_LANKA = RESOURCE_SUBLANGS.TAMIL_SRI_LANKA
TATAR_RUSSIA = RESOURCE_SUBLANGS.TATAR_RUSSIA
TELUGU_INDIA = RESOURCE_SUBLANGS.TELUGU_INDIA
THAI_THAILAND = RESOURCE_SUBLANGS.THAI_THAILAND
TIBETAN_PRC = RESOURCE_SUBLANGS.TIBETAN_PRC
TIGRIGNA_ERITREA = RESOURCE_SUBLANGS.TIGRIGNA_ERITREA
TIGRINYA_ERITREA = RESOURCE_SUBLANGS.TIGRINYA_ERITREA
TIGRINYA_ETHIOPIA = RESOURCE_SUBLANGS.TIGRINYA_ETHIOPIA
TSWANA_BOTSWANA = RESOURCE_SUBLANGS.TSWANA_BOTSWANA
TSWANA_SOUTH_AFRICA = RESOURCE_SUBLANGS.TSWANA_SOUTH_AFRICA
TURKISH_TURKEY = RESOURCE_SUBLANGS.TURKISH_TURKEY
TURKMEN_TURKMENISTAN = RESOURCE_SUBLANGS.TURKMEN_TURKMENISTAN
UIGHUR_PRC = RESOURCE_SUBLANGS.UIGHUR_PRC
UI_CUSTOM_DEFAULT = RESOURCE_SUBLANGS.UI_CUSTOM_DEFAULT
UKRAINIAN_UKRAINE = RESOURCE_SUBLANGS.UKRAINIAN_UKRAINE
UPPER_SORBIAN_GERMANY = RESOURCE_SUBLANGS.UPPER_SORBIAN_GERMANY
URDU_INDIA = RESOURCE_SUBLANGS.URDU_INDIA
URDU_PAKISTAN = RESOURCE_SUBLANGS.URDU_PAKISTAN
UZBEK_CYRILLIC = RESOURCE_SUBLANGS.UZBEK_CYRILLIC
UZBEK_LATIN = RESOURCE_SUBLANGS.UZBEK_LATIN
VALENCIAN_VALENCIA = RESOURCE_SUBLANGS.VALENCIAN_VALENCIA
VIETNAMESE_VIETNAM = RESOURCE_SUBLANGS.VIETNAMESE_VIETNAM
WELSH_UNITED_KINGDOM = RESOURCE_SUBLANGS.WELSH_UNITED_KINGDOM
WOLOF_SENEGAL = RESOURCE_SUBLANGS.WOLOF_SENEGAL
XHOSA_SOUTH_AFRICA = RESOURCE_SUBLANGS.XHOSA_SOUTH_AFRICA
YAKUT_RUSSIA = RESOURCE_SUBLANGS.YAKUT_RUSSIA
YI_PRC = RESOURCE_SUBLANGS.YI_PRC
YORUBA_NIGERIA = RESOURCE_SUBLANGS.YORUBA_NIGERIA
ZULU_SOUTH_AFRICA = RESOURCE_SUBLANGS.ZULU_SOUTH_AFRICA

FIXED_VERSION_FILE_SUB_TYPES

class lief.PE.CODE_PAGES(self: lief.PE.CODE_PAGES, arg0: int) → None
ASMO_708 = CODE_PAGES.ASMO_708
BIG5 = CODE_PAGES.BIG5
CP1025 = CODE_PAGES.CP1025
CP866 = CODE_PAGES.CP866
CP875 = CODE_PAGES.CP875
CSISO2022JP = CODE_PAGES.CSISO2022JP
DOS_720 = CODE_PAGES.DOS_720
DOS_862 = CODE_PAGES.DOS_862
EUC_CN = CODE_PAGES.EUC_CN
EUC_JP = CODE_PAGES.EUC_JP
EUC_JP_JIS = CODE_PAGES.EUC_JP_JIS
EUC_KR = CODE_PAGES.EUC_KR
GB18030 = CODE_PAGES.GB18030
GB2312 = CODE_PAGES.GB2312
HZ_GB_2312 = CODE_PAGES.HZ_GB_2312
IBM00858 = CODE_PAGES.IBM00858
IBM00924 = CODE_PAGES.IBM00924
IBM01047 = CODE_PAGES.IBM01047
IBM01140 = CODE_PAGES.IBM01140
IBM01141 = CODE_PAGES.IBM01141
IBM01142 = CODE_PAGES.IBM01142
IBM01143 = CODE_PAGES.IBM01143
IBM01144 = CODE_PAGES.IBM01144
IBM01145 = CODE_PAGES.IBM01145
IBM01146 = CODE_PAGES.IBM01146
IBM01147 = CODE_PAGES.IBM01147
IBM01148 = CODE_PAGES.IBM01148
IBM01149 = CODE_PAGES.IBM01149
IBM037 = CODE_PAGES.IBM037
IBM1026 = CODE_PAGES.IBM1026
IBM273 = CODE_PAGES.IBM273
IBM277 = CODE_PAGES.IBM277
IBM278 = CODE_PAGES.IBM278
IBM280 = CODE_PAGES.IBM280
IBM284 = CODE_PAGES.IBM284
IBM285 = CODE_PAGES.IBM285
IBM290 = CODE_PAGES.IBM290
IBM297 = CODE_PAGES.IBM297
IBM420 = CODE_PAGES.IBM420
IBM423 = CODE_PAGES.IBM423
IBM424 = CODE_PAGES.IBM424
IBM437 = CODE_PAGES.IBM437
IBM500 = CODE_PAGES.IBM500
IBM737 = CODE_PAGES.IBM737
IBM775 = CODE_PAGES.IBM775
IBM850 = CODE_PAGES.IBM850
IBM852 = CODE_PAGES.IBM852
IBM855 = CODE_PAGES.IBM855
IBM857 = CODE_PAGES.IBM857
IBM860 = CODE_PAGES.IBM860
IBM861 = CODE_PAGES.IBM861
IBM863 = CODE_PAGES.IBM863
IBM864 = CODE_PAGES.IBM864
IBM865 = CODE_PAGES.IBM865
IBM869 = CODE_PAGES.IBM869
IBM870 = CODE_PAGES.IBM870
IBM871 = CODE_PAGES.IBM871
IBM880 = CODE_PAGES.IBM880
IBM905 = CODE_PAGES.IBM905
IBM_THAI = CODE_PAGES.IBM_THAI
ISO_2022_JP = CODE_PAGES.ISO_2022_JP
ISO_2022_JP_JIS = CODE_PAGES.ISO_2022_JP_JIS
ISO_2022_KR = CODE_PAGES.ISO_2022_KR
ISO_8859_1 = CODE_PAGES.ISO_8859_1
ISO_8859_13 = CODE_PAGES.ISO_8859_13
ISO_8859_15 = CODE_PAGES.ISO_8859_15
ISO_8859_2 = CODE_PAGES.ISO_8859_2
ISO_8859_3 = CODE_PAGES.ISO_8859_3
ISO_8859_4 = CODE_PAGES.ISO_8859_4
ISO_8859_5 = CODE_PAGES.ISO_8859_5
ISO_8859_6 = CODE_PAGES.ISO_8859_6
ISO_8859_7 = CODE_PAGES.ISO_8859_7
ISO_8859_8 = CODE_PAGES.ISO_8859_8
ISO_8859_8_I = CODE_PAGES.ISO_8859_8_I
ISO_8859_9 = CODE_PAGES.ISO_8859_9
JOHAB = CODE_PAGES.JOHAB
KOI8_R = CODE_PAGES.KOI8_R
KOI8_U = CODE_PAGES.KOI8_U
KS_C_5601_1987 = CODE_PAGES.KS_C_5601_1987
MACINTOSH = CODE_PAGES.MACINTOSH
SHIFT_JIS = CODE_PAGES.SHIFT_JIS
UNICODEFFFE = CODE_PAGES.UNICODEFFFE
US_ASCII = CODE_PAGES.US_ASCII
UTF_16 = CODE_PAGES.UTF_16
UTF_32 = CODE_PAGES.UTF_32
UTF_32BE = CODE_PAGES.UTF_32BE
UTF_7 = CODE_PAGES.UTF_7
UTF_8 = CODE_PAGES.UTF_8
WINDOWS_1250 = CODE_PAGES.WINDOWS_1250
WINDOWS_1251 = CODE_PAGES.WINDOWS_1251
WINDOWS_1252 = CODE_PAGES.WINDOWS_1252
WINDOWS_1253 = CODE_PAGES.WINDOWS_1253
WINDOWS_1254 = CODE_PAGES.WINDOWS_1254
WINDOWS_1255 = CODE_PAGES.WINDOWS_1255
WINDOWS_1256 = CODE_PAGES.WINDOWS_1256
WINDOWS_1257 = CODE_PAGES.WINDOWS_1257
WINDOWS_1258 = CODE_PAGES.WINDOWS_1258
WINDOWS_874 = CODE_PAGES.WINDOWS_874
X_CHINESE_CNS = CODE_PAGES.X_CHINESE_CNS
X_CHINESE_ETEN = CODE_PAGES.X_CHINESE_ETEN
X_CP20001 = CODE_PAGES.X_CP20001
X_CP20003 = CODE_PAGES.X_CP20003
X_CP20004 = CODE_PAGES.X_CP20004
X_CP20005 = CODE_PAGES.X_CP20005
X_CP20261 = CODE_PAGES.X_CP20261
X_CP20269 = CODE_PAGES.X_CP20269
X_CP20936 = CODE_PAGES.X_CP20936
X_CP20949 = CODE_PAGES.X_CP20949
X_CP50227 = CODE_PAGES.X_CP50227
X_EBCDIC_KOREANEXTENDED = CODE_PAGES.X_EBCDIC_KOREANEXTENDED
X_EUROPA = CODE_PAGES.X_EUROPA
X_IA5 = CODE_PAGES.X_IA5
X_IA5_GERMAN = CODE_PAGES.X_IA5_GERMAN
X_IA5_NORWEGIAN = CODE_PAGES.X_IA5_NORWEGIAN
X_IA5_SWEDISH = CODE_PAGES.X_IA5_SWEDISH
X_ISCII_AS = CODE_PAGES.X_ISCII_AS
X_ISCII_BE = CODE_PAGES.X_ISCII_BE
X_ISCII_DE = CODE_PAGES.X_ISCII_DE
X_ISCII_GU = CODE_PAGES.X_ISCII_GU
X_ISCII_KA = CODE_PAGES.X_ISCII_KA
X_ISCII_MA = CODE_PAGES.X_ISCII_MA
X_ISCII_OR = CODE_PAGES.X_ISCII_OR
X_ISCII_PA = CODE_PAGES.X_ISCII_PA
X_ISCII_TA = CODE_PAGES.X_ISCII_TA
X_ISCII_TE = CODE_PAGES.X_ISCII_TE
X_MAC_ARABIC = CODE_PAGES.X_MAC_ARABIC
X_MAC_CE = CODE_PAGES.X_MAC_CE
X_MAC_CHINESESIMP = CODE_PAGES.X_MAC_CHINESESIMP
X_MAC_CHINESETRAD = CODE_PAGES.X_MAC_CHINESETRAD
X_MAC_CROATIAN = CODE_PAGES.X_MAC_CROATIAN
X_MAC_CYRILLIC = CODE_PAGES.X_MAC_CYRILLIC
X_MAC_GREEK = CODE_PAGES.X_MAC_GREEK
X_MAC_HEBREW = CODE_PAGES.X_MAC_HEBREW
X_MAC_ICELANDIC = CODE_PAGES.X_MAC_ICELANDIC
X_MAC_JAPANESE = CODE_PAGES.X_MAC_JAPANESE
X_MAC_KOREAN = CODE_PAGES.X_MAC_KOREAN
X_MAC_ROMANIAN = CODE_PAGES.X_MAC_ROMANIAN
X_MAC_THAI = CODE_PAGES.X_MAC_THAI
X_MAC_TURKISH = CODE_PAGES.X_MAC_TURKISH
X_MAC_UKRAINIAN = CODE_PAGES.X_MAC_UKRAINIAN

WINDOW_STYLES

class lief.PE.WINDOW_STYLES(self: lief.PE.WINDOW_STYLES, arg0: int) → None
BORDER = WINDOW_STYLES.BORDER
CAPTION = WINDOW_STYLES.CAPTION
CHILD = WINDOW_STYLES.CHILD
CLIPCHILDREN = WINDOW_STYLES.CLIPCHILDREN
CLIPSIBLINGS = WINDOW_STYLES.CLIPSIBLINGS
DISABLED = WINDOW_STYLES.DISABLED
DLGFRAME = WINDOW_STYLES.DLGFRAME
GROUP = WINDOW_STYLES.GROUP
HSCROLL = WINDOW_STYLES.HSCROLL
MAXIMIZE = WINDOW_STYLES.MAXIMIZE
MAXIMIZEBOX = WINDOW_STYLES.MAXIMIZEBOX
MINIMIZE = WINDOW_STYLES.MINIMIZE
OVERLAPPED = WINDOW_STYLES.OVERLAPPED
POPUP = WINDOW_STYLES.POPUP
SYSMENU = WINDOW_STYLES.SYSMENU
THICKFRAME = WINDOW_STYLES.THICKFRAME
VISIBLE = WINDOW_STYLES.VISIBLE
VSCROLL = WINDOW_STYLES.VSCROLL

EXTENDED_WINDOW_STYLES

class lief.PE.EXTENDED_WINDOW_STYLES(self: lief.PE.EXTENDED_WINDOW_STYLES, arg0: int) → None
ACCEPTFILES = EXTENDED_WINDOW_STYLES.ACCEPTFILES
APPWINDOW = EXTENDED_WINDOW_STYLES.APPWINDOW
CLIENTEDGE = EXTENDED_WINDOW_STYLES.CLIENTEDGE
CONTEXTHELP = EXTENDED_WINDOW_STYLES.CONTEXTHELP
CONTROLPARENT = EXTENDED_WINDOW_STYLES.CONTROLPARENT
DLGMODALFRAME = EXTENDED_WINDOW_STYLES.DLGMODALFRAME
LEFT = EXTENDED_WINDOW_STYLES.LEFT
LEFTSCROLLBAR = EXTENDED_WINDOW_STYLES.LEFTSCROLLBAR
MDICHILD = EXTENDED_WINDOW_STYLES.MDICHILD
NOPARENTNOTIFY = EXTENDED_WINDOW_STYLES.NOPARENTNOTIFY
RIGHT = EXTENDED_WINDOW_STYLES.RIGHT
RTLREADING = EXTENDED_WINDOW_STYLES.RTLREADING
STATICEDGE = EXTENDED_WINDOW_STYLES.STATICEDGE
TOOLWINDOW = EXTENDED_WINDOW_STYLES.TOOLWINDOW
TOPMOST = EXTENDED_WINDOW_STYLES.TOPMOST
TRANSPARENT = EXTENDED_WINDOW_STYLES.TRANSPARENT
WINDOWEDGE = EXTENDED_WINDOW_STYLES.WINDOWEDGE

DIALOG_BOX_STYLES

class lief.PE.DIALOG_BOX_STYLES(self: lief.PE.DIALOG_BOX_STYLES, arg0: int) → None
ABSALIGN = DIALOG_BOX_STYLES.ABSALIGN
CENTER = DIALOG_BOX_STYLES.CENTER
CENTERMOUSE = DIALOG_BOX_STYLES.CENTERMOUSE
CONTEXTHELP = DIALOG_BOX_STYLES.CONTEXTHELP
CONTROL = DIALOG_BOX_STYLES.CONTROL
D3DLOOK = DIALOG_BOX_STYLES.D3DLOOK
FIXEDSYS = DIALOG_BOX_STYLES.FIXEDSYS
LOCALEDIT = DIALOG_BOX_STYLES.LOCALEDIT
MODALFRAME = DIALOG_BOX_STYLES.MODALFRAME
NOFAILCREATE = DIALOG_BOX_STYLES.NOFAILCREATE
NOIDLEMSG = DIALOG_BOX_STYLES.NOIDLEMSG
SETFONT = DIALOG_BOX_STYLES.SETFONT
SETFOREGROUND = DIALOG_BOX_STYLES.SETFOREGROUND
SHELLFONT = DIALOG_BOX_STYLES.SHELLFONT
SYSMODAL = DIALOG_BOX_STYLES.SYSMODAL

FIXED_VERSION_OS

class lief.PE.FIXED_VERSION_OS(self: lief.PE.FIXED_VERSION_OS, arg0: int) → None
DOS = FIXED_VERSION_OS.DOS
DOS_WINDOWS16 = FIXED_VERSION_OS.DOS_WINDOWS16
DOS_WINDOWS32 = FIXED_VERSION_OS.DOS_WINDOWS32
NT = FIXED_VERSION_OS.NT
NT_WINDOWS32 = FIXED_VERSION_OS.NT_WINDOWS32
OS216 = FIXED_VERSION_OS.OS216
OS216_PM16 = FIXED_VERSION_OS.OS216_PM16
OS232 = FIXED_VERSION_OS.OS232
OS232_PM32 = FIXED_VERSION_OS.OS232_PM32
PM16 = FIXED_VERSION_OS.PM16
PM32 = FIXED_VERSION_OS.PM32
UNKNOWN = FIXED_VERSION_OS.UNKNOWN
WINDOWS16 = FIXED_VERSION_OS.WINDOWS16
WINDOWS32 = FIXED_VERSION_OS.WINDOWS32

FIXED_VERSION_FILE_FLAGS

class lief.PE.FIXED_VERSION_FILE_FLAGS(self: lief.PE.FIXED_VERSION_FILE_FLAGS, arg0: int) → None
DEBUG = FIXED_VERSION_FILE_FLAGS.DEBUG
INFOINFERRED = FIXED_VERSION_FILE_FLAGS.INFOINFERRED
PATCHED = FIXED_VERSION_FILE_FLAGS.PATCHED
PRERELEASE = FIXED_VERSION_FILE_FLAGS.PRERELEASE
PRIVATEBUILD = FIXED_VERSION_FILE_FLAGS.PRIVATEBUILD
SPECIALBUILD = FIXED_VERSION_FILE_FLAGS.SPECIALBUILD

FIXED_VERSION_FILE_TYPES

class lief.PE.FIXED_VERSION_FILE_TYPES(self: lief.PE.FIXED_VERSION_FILE_TYPES, arg0: int) → None
APP = FIXED_VERSION_FILE_TYPES.APP
DLL = FIXED_VERSION_FILE_TYPES.DLL
DRV = FIXED_VERSION_FILE_TYPES.DRV
FONT = FIXED_VERSION_FILE_TYPES.FONT
STATIC_LIB = FIXED_VERSION_FILE_TYPES.STATIC_LIB
UNKNOWN = FIXED_VERSION_FILE_TYPES.UNKNOWN
VXD = FIXED_VERSION_FILE_TYPES.VXD

FIXED_VERSION_FILE_SUB_TYPES

class lief.PE.FIXED_VERSION_FILE_SUB_TYPES(self: lief.PE.FIXED_VERSION_FILE_SUB_TYPES, arg0: int) → None
DRV_COMM = FIXED_VERSION_FILE_SUB_TYPES.DRV_COMM
DRV_DISPLAY = FIXED_VERSION_FILE_SUB_TYPES.DRV_DISPLAY
DRV_INSTALLABLE = FIXED_VERSION_FILE_SUB_TYPES.DRV_INSTALLABLE
DRV_MOUSE = FIXED_VERSION_FILE_SUB_TYPES.DRV_MOUSE
DRV_NETWORK = FIXED_VERSION_FILE_SUB_TYPES.DRV_NETWORK
DRV_PRINTER = FIXED_VERSION_FILE_SUB_TYPES.DRV_PRINTER
DRV_SOUND = FIXED_VERSION_FILE_SUB_TYPES.DRV_SOUND
DRV_SYSTEM = FIXED_VERSION_FILE_SUB_TYPES.DRV_SYSTEM
DRV_VERSIONED_PRINTER = FIXED_VERSION_FILE_SUB_TYPES.DRV_VERSIONED_PRINTER
FONT_TRUETYPE = FIXED_VERSION_FILE_SUB_TYPES.FONT_TRUETYPE
FONT_VECTOR = FIXED_VERSION_FILE_SUB_TYPES.FONT_VECTOR
UNKNOWN = FIXED_VERSION_FILE_SUB_TYPES.UNKNOWN

WIN_VERSION

class lief.PE.WIN_VERSION(self: lief.PE.WIN_VERSION, arg0: int) → None
SEH = WIN_VERSION.SEH
UNKNOWN = WIN_VERSION.UNKNOWN
WIN10_0_14286 = WIN_VERSION.WIN10_0_14286
WIN10_0_14383 = WIN_VERSION.WIN10_0_14383
WIN10_0_14901 = WIN_VERSION.WIN10_0_14901
WIN10_0_15002 = WIN_VERSION.WIN10_0_15002
WIN10_0_16237 = WIN_VERSION.WIN10_0_16237
WIN10_0_9879 = WIN_VERSION.WIN10_0_9879
WIN_8_1 = WIN_VERSION.WIN_8_1

GUARD_CF_FLAGS

class lief.PE.GUARD_CF_FLAGS(self: lief.PE.GUARD_CF_FLAGS, arg0: int) → None
ENABLE_EXPORT_SUPPRESSION = GUARD_CF_FLAGS.ENABLE_EXPORT_SUPPRESSION
EXPORT_SUPPRESSION_INFO_PRESENT = GUARD_CF_FLAGS.EXPORT_SUPPRESSION_INFO_PRESENT
FUNCTION_TABLE_PRESENT = GUARD_CF_FLAGS.FUNCTION_TABLE_PRESENT
INSTRUMENTED = GUARD_CF_FLAGS.INSTRUMENTED
LONGJUMP_TABLE_PRESENT = GUARD_CF_FLAGS.LONGJUMP_TABLE_PRESENT
NONE = GUARD_CF_FLAGS.NONE
W_INSTRUMENTED = GUARD_CF_FLAGS.W_INSTRUMENTED

GUARD_RF_FLAGS

class lief.PE.GUARD_RF_FLAGS(self: lief.PE.GUARD_RF_FLAGS, arg0: int) → None
ENABLE = GUARD_RF_FLAGS.ENABLE
INSTRUMENTED = GUARD_RF_FLAGS.INSTRUMENTED
STRICT = GUARD_RF_FLAGS.STRICT

CODE_VIEW_SIGNATURES

class lief.PE.CODE_VIEW_SIGNATURES(self: lief.PE.CODE_VIEW_SIGNATURES, arg0: int) → None
CV_41 = CODE_VIEW_SIGNATURES.CV_41
CV_50 = CODE_VIEW_SIGNATURES.CV_50
PDB_20 = CODE_VIEW_SIGNATURES.PDB_20
PDB_70 = CODE_VIEW_SIGNATURES.PDB_70
UNKNOWN = CODE_VIEW_SIGNATURES.UNKNOWN

POGO_SIGNATURES

class lief.PE.POGO_SIGNATURES(self: lief.PE.POGO_SIGNATURES, arg0: int) → None
LCTG = POGO_SIGNATURES.LCTG
PGI = POGO_SIGNATURES.PGI
UNKNOWN = POGO_SIGNATURES.UNKNOWN