Home/ Questions/Q 5936769
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-22T15:26:43+00:00

Gang, I apologize if this is a really dumb question… I am wanting to

  • 0

Gang,

I apologize if this is a really dumb question… I am wanting to use the super convenient python script pefile (http://code.google.com/p/pefile/) that parses an executable and lists particular information about the PE structure. My question is where can I find information about how to access particular members of the executable? I’ve scoured the wiki and read the usage examples but that documentation only covered 4-5 members. What I am wondering is if you guys have a list of members I can access to display the information I care about. So specifically, if I wanted to list the Stack Commit Size of an executable, does it look like this: pe.FILE_HEADER.StackCommitSize, obviously I can run this code and figure it out but have you guys seen API DOC floating around that I find the members i need?

THANKS!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    From the PE docstring:

    Basic headers information will be available in the attributes:

DOS_HEADER  
NT_HEADERS  
FILE_HEADER  
OPTIONAL_HEADER

All of them will contain among their attributes the members of the  
corresponding structures as defined in WINNT.H

    So, look at winnt.h and you’ll see which attributes are available.

    Or just read the source code for the module. It’s big, but everything you need to know is in there.

    • 0