Class PE

Constructor.

Args:
  address_space: An address space to examine.

  image_base: The address of the dos header in the virtual address
    space.

  filename: If a filename is provided we open the file as a PE File. In
    this case, image_base and address_space are ignored.

Overrides: object.__init__

A generator over the import directory.

Note that this iterates over the OriginalFirstThunk which still remains
from the on-disk executable. The IAT is constructed by the linker at
load time, and is stored in FirstThunk in memory. Hence the IAT() method
is going to return code objects while this method simply returns names.

Yields:
   a tuple of (dll, function_name)

A generator over the IAT.

Note that this iterates over the FirstThunk imports. In memory, these
contain the IAT which has been resolved by the loader.

Yields:
  a tuple of (dll, function_name)

Scan the export table for a function of the given name.

Similar to the GetProcAddress function.

RSDS

Get Method:

unreachable.RSDS(self)