Struct ImportTable

pub struct ImportTable<'data> { /* private fields */ }

Information for parsing a PE import table.

Implementations

impl<'data> ImportTable<'data>

pub fn new( section_data: &'data [u8], section_address: u32, import_address: u32, ) -> Self

Create a new import table parser.

The import descriptors start at import_address. The size declared in the IMAGE_DIRECTORY_ENTRY_IMPORT data directory is ignored by the Windows loader, and so descriptors will be parsed until a null entry.

section_data should be from the section containing import_address, and section_address should be the address of that section. Pointers within the descriptors and thunks may point to anywhere within the section data.

pub fn descriptors(&self) -> Result<ImportDescriptorIterator<'data>>

Return an iterator for the import descriptors.

pub fn name(&self, address: u32) -> Result<&'data [u8]>

Return a library name given its address.

This address may be from pe::ImageImportDescriptor::name.

pub fn thunks(&self, address: u32) -> Result<ImportThunkList<'data>>

Return a list of thunks given its address.

This address may be from pe::ImageImportDescriptor::original_first_thunk or pe::ImageImportDescriptor::first_thunk.

pub fn import<Pe: ImageNtHeaders>( &self, thunk: Pe::ImageThunkData, ) -> Result<Import<'data>>

Parse a thunk.

pub fn hint_name(&self, address: u32) -> Result<(u16, &'data [u8])>

Return the hint and name at the given address.

This address may be from pe::ImageThunkData32 or pe::ImageThunkData64.

The hint is an index into the export name pointer table in the target library.

Trait Implementations

impl<'data> Clone for ImportTable<'data>

fn clone(&self) -> ImportTable<'data>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'data> Debug for ImportTable<'data>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.