pe-parser 0.7.0

A blazing fast PE Parser with pretty print
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

use std::path::Path;
use datatest_stable::Result;
use pe_parser::pe::parse_portable_executable;
use std::fs;

fn gauntlet(path: &Path) -> Result<()> {
    let binary = fs::read(path)?;
    let pe = parse_portable_executable(binary.as_slice())?;

    // Binary passed initial parsing, now check if reserved fields are 0

    if let Some(optional) = pe.optional_header_32 {
        assert_eq!(optional.data_directories.architecture.size, 0);
        assert_eq!(optional.data_directories.architecture.virtual_address, 0);
        assert_eq!(optional.data_directories.reserved.size, 0);
        assert_eq!(optional.data_directories.reserved.virtual_address, 0);

        assert_eq!(optional.win32_version_value, 0);
        assert_eq!(optional.loader_flags, 0);
    }

    if let Some(optional) = pe.optional_header_64 {
        assert_eq!(optional.data_directories.architecture.size, 0);
        assert_eq!(optional.data_directories.architecture.virtual_address, 0);
        assert_eq!(optional.data_directories.reserved.size, 0);
        assert_eq!(optional.data_directories.reserved.virtual_address, 0);

        assert_eq!(optional.win32_version_value, 0);
        assert_eq!(optional.loader_flags, 0);
    }

    Ok(())
}

datatest_stable::harness! {
    { test = gauntlet, root = "tests/pe", pattern = r"\.((dat)|(exe)|(dll))$" },
}