Struct PeView 

pub struct PeView<'a> { /* private fields */ }

View into a mapped PE image.

Implementations

impl<'a> PeView<'a>

pub fn from_bytes<T: AsRef<[u8]> + ?Sized>(image: &'a T) -> Result<PeView<'a>>

Constructs a view from a byte slice.

Errors

• Bounds: The byte slice is too small to fit the PE headers.

• Misaligned: The minimum alignment of 4 is not satisfied.

• BadMagic: This is not a PE file.

• PeMagic: Trying to parse a PE32 file with the PE32+ parser and vice versa.

• Insanity: Reasonable limits on e_lfanew, SizeOfHeaders or NumberOfSections are exceeded.

pub unsafe fn module(base: *const u8) -> PeView<'a>

Constructs a new view from module handle.

Safety

The underlying memory is borrowed and an unbounded lifetime is returned. Ensure the lifetime outlives this view instance!

No sanity or safety checks are done to make sure this is really PE32(+) image. When using this with a HMODULE from the system the caller must be sure this is a PE32(+) image.

pub fn to_file(self) -> Vec<u8>

Converts the view to file alignment.

Trait Implementations

impl<'a> Clone for PeView<'a>

fn clone(&self) -> PeView<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Pe<'a> for PeView<'a>

fn dos_header(self) -> &'a IMAGE_DOS_HEADER

Returns the DOS header.

fn dos_image(self) -> &'a [u8]

Returns the DOS image.

fn nt_headers(self) -> &'a IMAGE_NT_HEADERS

Returns the NT headers.

fn file_header(self) -> &'a IMAGE_FILE_HEADER

Returns the file header.

fn optional_header(self) -> &'a IMAGE_OPTIONAL_HEADER

Returns the optional header.

fn data_directory(self) -> &'a [IMAGE_DATA_DIRECTORY]

Returns the data directory.

fn section_headers(self) -> &'a SectionHeaders

Returns the section headers.

fn headers(self) -> Headers<Self>

Returns the pe headers together in a single struct.

fn rva_to_file_offset(self, rva: Rva) -> Result<usize>

Converts a relative virtual address to file offset.

fn file_offset_to_rva(self, file_offset: usize) -> Result<Rva>

Converts a file offset to relative virtual address.

fn rva_to_va(self, rva: Rva) -> Result<Va>

Converts from relative virtual address to virtual address.

fn va_to_rva(self, va: Va) -> Result<Rva>

Converts from virtual address to relative virtual address.

fn slice(&self, rva: Rva, min_size_of: usize, align: usize) -> Result<&'a [u8]>

Slices the image at the specified rva.

fn slice_bytes(self, rva: Rva) -> Result<&'a [u8]>

where Self: Sized,

Slices the image at the specified rva returning a byte slice with no alignment or minimum size.

fn get_section_bytes( self, section_header: &IMAGE_SECTION_HEADER, ) -> Result<&'a [u8]>

Gets the bytes defined by a section header in this image.

fn read(&self, va: Va, min_size_of: usize, align: usize) -> Result<&'a [u8]>

Reads the image at the specified va.

fn read_bytes(self, va: Va) -> Result<&'a [u8]>

where Self: Sized,

Reads the image at the specified va returning a byte slice with no alignment or minimum size.

fn derva<T>(self, rva: Rva) -> Result<&'a T>

where T: Pod,

Reads an aligned pod T.

fn derva_copy<T>(self, rva: Rva) -> Result<T>

where T: Copy + Pod,

Reads an unaligned pod T.

fn derva_into<T>(self, rva: Rva, dest: &mut T) -> Result<()>

where T: ?Sized + Pod,

Reads and byte-wise copies the content to the given destination.

fn derva_slice<T>(self, rva: Rva, len: usize) -> Result<&'a [T]>

where T: Pod,

Reads an array of pod T with given length.

fn derva_slice_f<T, F>(self, rva: Rva, f: F) -> Result<&'a [T]>

where T: Pod, F: FnMut(&'a T) -> bool,

Reads an array of pod T.

fn derva_slice_s<T>(self, rva: Rva, sentinel: T) -> Result<&'a [T]>

where T: PartialEq + Pod,

Reads an array of pod T.

fn derva_c_str(self, rva: Rva) -> Result<&'a CStr>

Reads a nul-terminated C string.

fn derva_string<T>(self, rva: Rva) -> Result<&'a T>

where T: FromBytes + ?Sized,

Reads a string.

fn deref<T>(self, ptr: Ptr<T>) -> Result<&'a T>

where T: Pod,

Dereferences the pointer to a pod T.

fn deref_copy<T>(self, ptr: Ptr<T>) -> Result<T>

where T: Copy + Pod,

Dereferences the pointer to an unaligned pod T.

fn deref_into<T>(self, ptr: Ptr<T>, dest: &mut T) -> Result<()>

where T: ?Sized + Pod,

Reads and byte-wise copies the content to the given destination.

fn deref_slice<T>(self, ptr: Ptr<[T]>, len: usize) -> Result<&'a [T]>

where T: Pod,

Reads an array of pod T with given length.

fn deref_slice_f<T, F>(self, ptr: Ptr<[T]>, f: F) -> Result<&'a [T]>

where T: Pod, F: FnMut(&'a T) -> bool,

Reads an array of pod T.

fn deref_slice_s<T>(self, ptr: Ptr<[T]>, sentinel: T) -> Result<&'a [T]>

where T: PartialEq + Pod,

Reads an array of pod T.

fn deref_c_str(self, ptr: Ptr<CStr>) -> Result<&'a CStr>

Dereferences the pointer to a nul-terminated C string.

fn deref_string<T>(self, ptr: Ptr<T>) -> Result<&'a T>

where T: FromBytes + ?Sized,

Dereferences the pointer to a string.

fn rich_structure(self) -> Result<RichStructure<'a>>

Returns the Rich structure.

fn exports(self) -> Result<Exports<'a, Self>>

Gets the Export Directory.

fn imports(self) -> Result<Imports<'a, Self>>

Gets the Import Directory.

fn iat(self) -> Result<IAT<'a, Self>>

Gets the Import Address Table.

fn base_relocs(self) -> Result<BaseRelocs<'a>>

Gets the Base Relocations Directory.

fn load_config(self) -> Result<LoadConfig<'a, Self>>

Gets the Load Config Directory.

fn tls(self) -> Result<Tls<'a, Self>>

Gets the TLS Directory.

fn security(self) -> Result<Security<'a>>

Gets the Security Directory.

fn exception(self) -> Result<Exception<'a, Self>>

Gets the Exception Directory.

fn debug(self) -> Result<Debug<'a, Self>>

Gets the Debug Directory.

fn resources(self) -> Result<Resources<'a>>

where Self: Copy,

Gets the Resources.

fn scanner(self) -> Scanner<Self>

Gets Scanner access.

impl<'a> PeObject<'a> for PeView<'a>

fn image(&self) -> &'a [u8]

Returns the image as a byte slice.

fn align(&self) -> Align

Returns whether this image uses file alignment or section alignment.

impl<'a> Copy for PeView<'a>