Struct object::read::pe::PeFile

pub struct PeFile<'data, Pe, R = &'data [u8]>
where
    Pe: ImageNtHeaders,
    R: ReadRef<'data>,
{ /* private fields */ }

A PE image file.

Most functionality is provided by the Object trait implementation.

Implementations

impl<'data, Pe, R> PeFile<'data, Pe, R>

where Pe: ImageNtHeaders, R: ReadRef<'data>,

pub fn parse(data: R) -> Result<Self>

Parse the raw PE file data.

pub fn data(&self) -> R

Returns this binary data.

pub fn dos_header(&self) -> &'data ImageDosHeader

Return the DOS header of this file.

pub fn nt_headers(&self) -> &'data Pe

Return the NT Headers of this file.

pub fn rich_header_info(&self) -> Option<RichHeaderInfo<'_>>

Returns information about the rich header of this file (if any).

pub fn section_table(&self) -> SectionTable<'data>

Returns the section table of this binary.

pub fn data_directories(&self) -> DataDirectories<'data>

Returns the data directories of this file.

pub fn data_directory(&self, id: usize) -> Option<&'data ImageDataDirectory>

Returns the data directory at the given index.

pub fn export_table(&self) -> Result<Option<ExportTable<'data>>>

Returns the export table of this file.

The export table is located using the data directory.

pub fn import_table(&self) -> Result<Option<ImportTable<'data>>>

Returns the import table of this file.

The import table is located using the data directory.

Trait Implementations

impl<'data, Pe, R> Debug for PeFile<'data, Pe, R>

where Pe: ImageNtHeaders + Debug, R: ReadRef<'data> + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'data, 'file, Pe, R> Object<'data, 'file> for PeFile<'data, Pe, R>

where Pe: ImageNtHeaders, R: 'file + ReadRef<'data>, 'data: 'file,

type Segment = PeSegment<'data, 'file, Pe, R>

A loadable segment in the object file.

type SegmentIterator = PeSegmentIterator<'data, 'file, Pe, R>

An iterator for the loadable segments in the object file.

type Section = PeSection<'data, 'file, Pe, R>

A section in the object file.

type SectionIterator = PeSectionIterator<'data, 'file, Pe, R>

An iterator for the sections in the object file.

type Comdat = PeComdat<'data, 'file, Pe, R>

A COMDAT section group in the object file.

type ComdatIterator = PeComdatIterator<'data, 'file, Pe, R>

An iterator for the COMDAT section groups in the object file.

type Symbol = CoffSymbol<'data, 'file, R>

A symbol in the object file.

type SymbolIterator = CoffSymbolIterator<'data, 'file, R>

An iterator for symbols in the object file.

type SymbolTable = CoffSymbolTable<'data, 'file, R>

A symbol table in the object file.

type DynamicRelocationIterator = NoDynamicRelocationIterator

An iterator for the dynamic relocations in the file.

fn architecture(&self) -> Architecture

Get the architecture type of the file.

fn sub_architecture(&self) -> Option<SubArchitecture>

Get the sub-architecture type of the file if known.

fn is_little_endian(&self) -> bool

Return true if the file is little endian, false if it is big endian.

fn is_64(&self) -> bool

Return true if the file can contain 64-bit addresses.

fn kind(&self) -> ObjectKind

Return the kind of this object.

fn segments(&'file self) -> PeSegmentIterator<'data, 'file, Pe, R>

Get an iterator for the loadable segments in the file.

fn section_by_name_bytes( &'file self, section_name: &[u8] ) -> Option<PeSection<'data, 'file, Pe, R>>

Like Self::section_by_name, but allows names that are not UTF-8.

fn section_by_index( &'file self, index: SectionIndex ) -> Result<PeSection<'data, 'file, Pe, R>>

Get the section at the given index.

fn sections(&'file self) -> PeSectionIterator<'data, 'file, Pe, R>

Get an iterator for the sections in the file.

fn comdats(&'file self) -> PeComdatIterator<'data, 'file, Pe, R>

Get an iterator for the COMDAT section groups in the file.

fn symbol_by_index( &'file self, index: SymbolIndex ) -> Result<CoffSymbol<'data, 'file, R>>

Get the debugging symbol at the given index.

fn symbols(&'file self) -> CoffSymbolIterator<'data, 'file, R>

Get an iterator for the debugging symbols in the file.

fn symbol_table(&'file self) -> Option<CoffSymbolTable<'data, 'file, R>>

Get the debugging symbol table, if any.

fn dynamic_symbols(&'file self) -> CoffSymbolIterator<'data, 'file, R>

Get an iterator for the dynamic linking symbols in the file.

fn dynamic_symbol_table(&'file self) -> Option<CoffSymbolTable<'data, 'file, R>>

Get the dynamic linking symbol table, if any.

fn dynamic_relocations(&'file self) -> Option<NoDynamicRelocationIterator>

Get the dynamic relocations for this file.

fn imports(&self) -> Result<Vec<Import<'data>>>

Get the imported symbols.

fn exports(&self) -> Result<Vec<Export<'data>>>

Get the exported symbols that expose both a name and an address.

fn pdb_info(&self) -> Result<Option<CodeView<'_>>>

The filename and GUID from the PE CodeView section.

fn has_debug_symbols(&self) -> bool

Return true if the file contains DWARF debug information sections, false if not.

fn relative_address_base(&self) -> u64

Get the base address used for relative virtual addresses.

fn entry(&self) -> u64

Get the virtual address of the entry point of the binary.

fn flags(&self) -> FileFlags

File flags that are specific to each file format.

fn endianness(&self) -> Endianness

Get the endianness of the file.

fn section_by_name(&'file self, section_name: &str) -> Option<Self::Section>

Get the section named section_name, if such a section exists.

fn symbol_by_name(&'file self, symbol_name: &str) -> Option<Self::Symbol>

Get the symbol named symbol_name, if the symbol exists.

fn symbol_by_name_bytes(&'file self, symbol_name: &[u8]) -> Option<Self::Symbol>

Like Self::symbol_by_name, but allows names that are not UTF-8.

fn symbol_map(&'file self) -> SymbolMap<SymbolMapName<'data>>

Construct a map from addresses to symbol names.

fn object_map(&'file self) -> ObjectMap<'data>

Construct a map from addresses to symbol names and object file names.

fn mach_uuid(&self) -> Result<Option<[u8; 16]>>

The UUID from a Mach-O LC_UUID load command.

fn build_id(&self) -> Result<Option<&'data [u8]>>

The build ID from an ELF NT_GNU_BUILD_ID note.

fn gnu_debuglink(&self) -> Result<Option<(&'data [u8], u32)>>

The filename and CRC from a .gnu_debuglink section.

fn gnu_debugaltlink(&self) -> Result<Option<(&'data [u8], &'data [u8])>>

The filename and build ID from a .gnu_debugaltlink section.