pub struct Header<'a> { /* private fields */ }
Expand description
Structure that represents the PE header (which follows the DosHeader
)
Implementations§
§impl Header<'_>
impl Header<'_>
pub fn machine(&self) -> MachineType
pub fn machine(&self) -> MachineType
The targeted machine architecture like ARM, x86, AMD64, …
pub fn nb_sections(&self) -> u16
pub fn nb_sections(&self) -> u16
The number of sections in the binary.
pub fn time_date_stamp(&self) -> u32
pub fn time_date_stamp(&self) -> u32
The low 32 bits of the number of seconds since January 1, 1970. It indicates when the file was created.
pub fn pointerto_symbol_table(&self) -> u32
pub fn pointerto_symbol_table(&self) -> u32
The offset of the COFF symbol table. This value should be zero for an image because COFF debugging information is deprecated on in PE binary
pub fn numberof_symbols(&self) -> u32
pub fn numberof_symbols(&self) -> u32
The number of entries in the symbol table. This data can be used to locate the string table which immediately follows the symbol table.
This value should be zero for an image because COFF debugging information is deprecated in PE binary
pub fn sizeof_optional_header(&self) -> u16
pub fn sizeof_optional_header(&self) -> u16
Size of the OptionalHeader AND the data directories which follows this header.
This value is equivalent to:
sizeof(pe_optional_header) + NB_DATA_DIR * sizeof(data_directory)
This size should be either:
- 0xE0 (224) for a PE32 (32 bits)
- 0xF0 (240) for a PE32+ (64 bits)
pub fn characteristics(&self) -> Characteristics
pub fn characteristics(&self) -> Characteristics
Characteristics of the binary like whether it is a DLL or an executable