Struct object::read::pe::DelayLoadImportTable

pub struct DelayLoadImportTable<'data> { /* private fields */ }

Information for parsing a PE delay-load import table.

Implementations

impl<'data> DelayLoadImportTable<'data>

pub fn new( section_data: &'data [u8], section_address: u32, import_address: u32, ) -> Self

Create a new delay load import table parser.

The import descriptors start at import_address. This table works in the same way the import table does: descriptors will be parsed until a null entry.

section_data should be from the section containing import_address, and section_address should be the address of that section. Pointers within the descriptors and thunks may point to anywhere within the section data.

pub fn descriptors(&self) -> Result<DelayLoadDescriptorIterator<'data>>

Return an iterator for the import descriptors.

pub fn name(&self, address: u32) -> Result<&'data [u8]>

Return a library name given its address.

This address may be from pe::ImageDelayloadDescriptor::dll_name_rva.

pub fn thunks(&self, address: u32) -> Result<ImportThunkList<'data>>

Return a list of thunks given its address.

This address may be from the INT, i.e. from pe::ImageDelayloadDescriptor::import_name_table_rva.

Please note that others RVA values from pe::ImageDelayloadDescriptor are used by the delay loader at runtime to store values, and thus do not point inside the same section as the INT. Calling this function on those addresses will fail.

pub fn import<Pe: ImageNtHeaders>( &self, thunk: Pe::ImageThunkData, ) -> Result<Import<'data>>

Parse a thunk.

pub fn hint_name(&self, address: u32) -> Result<(u16, &'data [u8])>

Return the hint and name at the given address.

This address may be from pe::ImageThunkData32 or pe::ImageThunkData64.

The hint is an index into the export name pointer table in the target library.

Trait Implementations

impl<'data> Clone for DelayLoadImportTable<'data>

fn clone(&self) -> DelayLoadImportTable<'data>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'data> Debug for DelayLoadImportTable<'data>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.