Skip to content
hasherezade edited this page Aug 2, 2021 · 25 revisions

PE-sieve (DLL version) exposes a small API.
In order to use it in your projects you need to include the following headers:


Currently, 3 functions are exported:

PE-sieve DLL exports

Their definitions are in the header pe-sieve/include/pe_sieve_api.h:

#define PESIEVE_API_FUNC  __cdecl

void PESIEVE_API_FUNC PESieve_help(void);
DWORD PESIEVE_API PESieve_version;
PEsieve_report PESIEVE_API_FUNC PESieve_scan(PEsieve_params args);

A complete, up-to date documentation is available here


PESieve_help

header:

void PESIEVE_API_FUNC PESieve_help(void);

role: information

  • Shows a MessageBox with the informations about PE-sieve.

PESieve_version

header:

extern const DWORD PESIEVE_API PESieve_version;

role : information


PESieve_scan

header:

PEsieve_report PESIEVE_API_FUNC PESieve_scan(const PEsieve_params args);

role : scan

  • Performs a PE-sieve scan with a supplied set of parameters (defined as a structure t_params). Returns a summary of the scan in a variable of type t_report.