Struct lief::pe::Header

pub struct Header<'a> { /* private fields */ }

Structure that represents the PE header (which follows the DosHeader)

Implementations

impl Header<'_>

pub fn machine(&self) -> MachineType

The targeted machine architecture like ARM, x86, AMD64, …

pub fn nb_sections(&self) -> u16

The number of sections in the binary.

pub fn time_date_stamp(&self) -> u32

The low 32 bits of the number of seconds since January 1, 1970. It indicates when the file was created.

pub fn pointerto_symbol_table(&self) -> u32

The offset of the COFF symbol table. This value should be zero for an image because COFF debugging information is deprecated on in PE binary

pub fn numberof_symbols(&self) -> u32

The number of entries in the symbol table. This data can be used to locate the string table which immediately follows the symbol table.

This value should be zero for an image because COFF debugging information is deprecated in PE binary

pub fn sizeof_optional_header(&self) -> u16

Size of the OptionalHeader AND the data directories which follows this header.

This value is equivalent to: sizeof(pe_optional_header) + NB_DATA_DIR * sizeof(data_directory)

This size should be either:

• 0xE0 (224) for a PE32 (32 bits)
• 0xF0 (240) for a PE32+ (64 bits)

pub fn characteristics(&self) -> Characteristics

Characteristics of the binary like whether it is a DLL or an executable

Trait Implementations

impl Debug for Header<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.