Struct PeFile 

pub struct PeFile<'a> { /* private fields */ }

View into an unmapped PE file.

Implementations

impl<'a> PeFile<'a>

pub fn from_bytes<T: AsRef<[u8]> + ?Sized>(image: &'a T) -> Result<PeFile<'a>>

Constructs a file view from a byte slice.

Errors

• Bounds: The byte slice is too small to fit the PE headers.

• Misaligned: The minimum alignment of 4 is not satisfied.

• BadMagic: This is not a PE file.

• PeMagic: Trying to parse a PE32 file with the PE32+ parser and vice versa.

• Insanity: Reasonable limits on e_lfanew, SizeOfHeaders or NumberOfSections are exceeded.

pub fn to_view(self) -> Vec<u8>

Converts the file to section alignment.

Trait Implementations

impl<'a> Clone for PeFile<'a>

fn clone(&self) -> PeFile<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Pe<'a> for PeFile<'a>

fn dos_header(self) -> &'a IMAGE_DOS_HEADER

Returns the DOS header.

fn dos_image(self) -> &'a [u8]

Returns the DOS image.

fn nt_headers(self) -> &'a IMAGE_NT_HEADERS

Returns the NT headers.

fn file_header(self) -> &'a IMAGE_FILE_HEADER

Returns the file header.

fn optional_header(self) -> &'a IMAGE_OPTIONAL_HEADER

Returns the optional header.

fn data_directory(self) -> &'a [IMAGE_DATA_DIRECTORY]

Returns the data directory.

fn section_headers(self) -> &'a SectionHeaders

Returns the section headers.

fn headers(self) -> Headers<Self>

Returns the pe headers together in a single struct.

fn rva_to_file_offset(self, rva: Rva) -> Result<usize>

Converts a relative virtual address to file offset.

fn file_offset_to_rva(self, file_offset: usize) -> Result<Rva>

Converts a file offset to relative virtual address.

fn rva_to_va(self, rva: Rva) -> Result<Va>

Converts from relative virtual address to virtual address.

fn va_to_rva(self, va: Va) -> Result<Rva>

Converts from virtual address to relative virtual address.

fn slice(&self, rva: Rva, min_size_of: usize, align: usize) -> Result<&'a [u8]>

Slices the image at the specified rva.

fn slice_bytes(self, rva: Rva) -> Result<&'a [u8]>

where Self: Sized,

Slices the image at the specified rva returning a byte slice with no alignment or minimum size.

fn get_section_bytes( self, section_header: &IMAGE_SECTION_HEADER, ) -> Result<&'a [u8]>

Gets the bytes defined by a section header in this image.

fn read(&self, va: Va, min_size_of: usize, align: usize) -> Result<&'a [u8]>

Reads the image at the specified va.

fn read_bytes(self, va: Va) -> Result<&'a [u8]>

where Self: Sized,

Reads the image at the specified va returning a byte slice with no alignment or minimum size.

fn derva<T>(self, rva: Rva) -> Result<&'a T>

where T: Pod,

Reads an aligned pod T.

fn derva_copy<T>(self, rva: Rva) -> Result<T>

where T: Copy + Pod,

Reads an unaligned pod T.

fn derva_into<T>(self, rva: Rva, dest: &mut T) -> Result<()>

where T: ?Sized + Pod,

Reads and byte-wise copies the content to the given destination.

fn derva_slice<T>(self, rva: Rva, len: usize) -> Result<&'a [T]>

where T: Pod,

Reads an array of pod T with given length.

fn derva_slice_f<T, F>(self, rva: Rva, f: F) -> Result<&'a [T]>

where T: Pod, F: FnMut(&'a T) -> bool,

Reads an array of pod T.

fn derva_slice_s<T>(self, rva: Rva, sentinel: T) -> Result<&'a [T]>

where T: PartialEq + Pod,

Reads an array of pod T.

fn derva_c_str(self, rva: Rva) -> Result<&'a CStr>

Reads a nul-terminated C string.

fn derva_string<T>(self, rva: Rva) -> Result<&'a T>

where T: FromBytes + ?Sized,

Reads a string.

fn deref<T>(self, ptr: Ptr<T>) -> Result<&'a T>

where T: Pod,

Dereferences the pointer to a pod T.

fn deref_copy<T>(self, ptr: Ptr<T>) -> Result<T>

where T: Copy + Pod,

Dereferences the pointer to an unaligned pod T.

fn deref_into<T>(self, ptr: Ptr<T>, dest: &mut T) -> Result<()>

where T: ?Sized + Pod,

Reads and byte-wise copies the content to the given destination.

fn deref_slice<T>(self, ptr: Ptr<[T]>, len: usize) -> Result<&'a [T]>

where T: Pod,

Reads an array of pod T with given length.

fn deref_slice_f<T, F>(self, ptr: Ptr<[T]>, f: F) -> Result<&'a [T]>

where T: Pod, F: FnMut(&'a T) -> bool,

Reads an array of pod T.

fn deref_slice_s<T>(self, ptr: Ptr<[T]>, sentinel: T) -> Result<&'a [T]>

where T: PartialEq + Pod,

Reads an array of pod T.

fn deref_c_str(self, ptr: Ptr<CStr>) -> Result<&'a CStr>

Dereferences the pointer to a nul-terminated C string.

fn deref_string<T>(self, ptr: Ptr<T>) -> Result<&'a T>

where T: FromBytes + ?Sized,

Dereferences the pointer to a string.

fn rich_structure(self) -> Result<RichStructure<'a>>

Returns the Rich structure.

fn exports(self) -> Result<Exports<'a, Self>>

Gets the Export Directory.

fn imports(self) -> Result<Imports<'a, Self>>

Gets the Import Directory.

fn iat(self) -> Result<IAT<'a, Self>>

Gets the Import Address Table.

fn base_relocs(self) -> Result<BaseRelocs<'a>>

Gets the Base Relocations Directory.

fn load_config(self) -> Result<LoadConfig<'a, Self>>

Gets the Load Config Directory.

fn tls(self) -> Result<Tls<'a, Self>>

Gets the TLS Directory.

fn security(self) -> Result<Security<'a>>

Gets the Security Directory.

fn exception(self) -> Result<Exception<'a, Self>>

Gets the Exception Directory.

fn debug(self) -> Result<Debug<'a, Self>>

Gets the Debug Directory.

fn resources(self) -> Result<Resources<'a>>

where Self: Copy,

Gets the Resources.

fn scanner(self) -> Scanner<Self>

Gets Scanner access.

impl<'a> PeObject<'a> for PeFile<'a>

fn image(&self) -> &'a [u8]

Returns the image as a byte slice.

fn align(&self) -> Align

Returns whether this image uses file alignment or section alignment.

impl<'a> Copy for PeFile<'a>