Struct ManualMapper 

pub struct ManualMapper<S> { /* private fields */ }

manual mapper with type-state progression

the type parameter ensures mapping steps happen in correct order: Parsed -> Allocated -> SectionsMapped -> Relocated -> ImportsResolved -> TlsProcessed -> Ready

Implementations

impl ManualMapper<Parsed>

pub fn parse(data: &[u8]) -> Result<Self>

parse PE from bytes

pub fn from_file(path: &str) -> Result<Self>

parse PE from file

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn allocate(self) -> Result<ManualMapper<Allocated>>

allocate memory for the PE image

tries preferred base first, falls back to any available address

pub fn allocate_at(self, base: usize) -> Result<ManualMapper<Allocated>>

allocate at specific address

fails if address is not available

pub fn allocate_anywhere(self) -> Result<ManualMapper<Allocated>>

allocate anywhere (no preference)

impl ManualMapper<Allocated>

pub fn base(&self) -> usize

get allocated base address

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn map_sections(self) -> Result<ManualMapper<SectionsMapped>>

map PE sections to allocated memory

impl ManualMapper<SectionsMapped>

pub fn base(&self) -> usize

get base address

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn relocate(self) -> Result<ManualMapper<Relocated>>

apply base relocations

pub fn skip_relocations(self) -> ManualMapper<Relocated>

skip relocations (use if loaded at preferred base)

impl ManualMapper<Relocated>

pub fn base(&self) -> usize

get base address

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn resolve_imports(self) -> Result<ManualMapper<ImportsResolved>>

resolve import address table

pub fn resolve_imports_with<F>( self, resolver_fn: F, ) -> Result<ManualMapper<ImportsResolved>>

where F: Fn(&str, &str) -> Option<usize>,

resolve imports with custom resolver function

pub fn skip_imports(self) -> ManualMapper<ImportsResolved>

skip import resolution (use if PE has no imports or manually resolved)

impl ManualMapper<ImportsResolved>

pub fn base(&self) -> usize

get base address

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn process_tls(self) -> Result<ManualMapper<TlsProcessed>>

process TLS callbacks

pub fn skip_tls(self) -> ManualMapper<TlsProcessed>

skip TLS processing

impl ManualMapper<TlsProcessed>

pub fn base(&self) -> usize

get base address

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn finalize(self) -> Result<ManualMapper<Ready>>

finalize mapping with proper memory protections

pub fn finalize_without_protections(self) -> ManualMapper<Ready>

finalize without setting protections (keeps RW everywhere)

impl ManualMapper<Ready>

pub fn call_entry_point(&self) -> Result<bool>

call DllMain with DLL_PROCESS_ATTACH

pub fn call_entry_point_with_reason(&self, call_reason: u32) -> Result<bool>

call DllMain with custom reason

pub fn get_export(&self, name: &str) -> Result<usize>

get export address by name

pub fn get_export_by_ordinal(&self, ordinal: u16) -> Result<usize>

get export address by ordinal

pub fn base(&self) -> usize

get base address of mapped image

pub fn size(&self) -> usize

get size of mapped image

pub fn pe(&self) -> &ParsedPe

get reference to parsed PE

pub fn into_memory(self) -> MappedMemory

consume and return raw memory handle

pub fn ptr_at(&self, offset: usize) -> *mut u8

get pointer to specific offset in mapped image

pub fn unmap(self) -> Result<()>

unmap and free memory