Struct mmap_loader::pe::PortableExecutable

pub struct PortableExecutable<'a> { /* private fields */ }

A portable executable that is all nicely wrapped up in a class

Implementations

impl<'a> PortableExecutable<'a>

pub fn load(
    path: &str,
    context: NtContext
) -> Result<PortableExecutable<'a>, Error>

Loads the portable executable, processing any options

Arguments

path: The path to the executable file

context: The resolved Nt Context

pub fn load_as_primary(
    path: &str,
    context: NtContext,
    primary: bool
) -> Result<PortableExecutable<'a>, Error>

Loads the portable executable, processing any options

Arguments

path: The path to the executable file

context: The resolved Nt Context

primary: Whether or not this module should be the primary module, and be returned upon invocation of GetModuleHandle(null)

pub fn module_handle(&mut self) -> HMODULE

Returns the handle for the loaded process

pub fn resolve_import_descriptors(
    &mut self,
    table: &[IMAGE_IMPORT_DESCRIPTOR]
) -> Result<()>

Resolves imports from the specified import descriptors. This is separate because some executables have separate IATs from the NT header IATs, and it is necessary to resolve them as well

Arguments

table: The import descriptors

pub unsafe fn run(&mut self) -> u8

Runs the executable’s entry point with DLL_PROCESS_ATTACH

Safety

The safety of this function is entirely dependent on whether or not the underlying executable is safe. This function panics if the executable entry point has already been called

Trait Implementations

impl<'a> Drop for PortableExecutable<'a>

fn drop(&mut self)

Executes the destructor for this type.

impl<'a> Send for PortableExecutable<'a>