Crate pelite

source ·
Expand description

Your adventure starts with a choice:

Do you wish to inspect 64-bit PE binares? ⟶ continue

Do you wish to inspect 32-bit PE binaries? ⟶ continue

The pelite::pe module is aliased to the target of the compiled crate. Use it if you want to work with modules in your own process. Evidently this is only available on Windows targets.

Due to small but incompatible differences the two formats are not unified.

Re-exports

pub use self::pe32 as pe;

Modules

Base Relocations Directory.
Image structures as defined by Windows.
Scanner Patterns.
PE32 binary files.
PE32+ binary files.
Resources.
Rich Structure.
Security Directory.
Stringify image constants.
Analyzing strings in binary data.
Utilities and other tidbits.

Macros

Compile time pattern parser.

Structs

Memory mapped file.
Memory mapped image.
Typed relative virtual address.

Enums

The specific alignment used by the view.
Errors while parsing the PE binary.
Wraps 32-bit and 64-bit variants.

Traits

Types whose values can be safely transmuted between byte arrays of the same size.

Type Definitions

Format agnostic PE file.
Format agnostic PE view.
Specialized Result type for PE errors.

Derive Macros

Derive macro for the Pod trait.