Function parse_exports

src/pe_parser.rs:48–129

(dll_path: &Path)

}

pub fn parse_exports(dll_path: &Path) -> Result<Vec<DllExport>, String> {
    let data = fs::read(dll_path).map_err(|e| format!("Failed to read DLL: {}", e))?;

    if data.len() < 64 || read_u16(&data, 0) != 0x5A4D {
        return Err("Not a valid PE file (bad MZ signature)".into());
    }

    let pe_offset = read_u32(&data, 0x3C) as usize;
    if data.len() < pe_offset + 4 || read_u32(&data, pe_offset) != 0x00004550 {
        return Err("Not a valid PE file (bad PE signature)".into());
    }

    let magic = read_u16(&data, pe_offset + 24);
    let export_dir_rva_offset = match magic {
        0x10b => pe_offset + 24 + 96,  // PE32
        0x20b => pe_offset + 24 + 112, // PE32+
        _ => return Err(format!("Unknown PE optional header magic: 0x{:04x}", magic)),
    };

    let num_sections = read_u16(&data, pe_offset + 6);
    let sections = parse_sections(&data, pe_offset, num_sections);

    let export_rva = read_u32(&data, export_dir_rva_offset);
    let export_size = read_u32(&data, export_dir_rva_offset + 4);

    if export_rva == 0 || export_size == 0 {
        return Ok(vec![]);
    }

    let export_offset =
        rva_to_offset(&sections, export_rva).ok_or("Cannot resolve export directory RVA")?;

    let num_functions = read_u32(&data, export_offset + 20) as usize;
    let num_names = read_u32(&data, export_offset + 24) as usize;
    let ordinal_base = read_u32(&data, export_offset + 16) as u16;

    let addr_table_rva = read_u32(&data, export_offset + 28);
    let name_ptr_rva = read_u32(&data, export_offset + 32);
    let ordinal_table_rva = read_u32(&data, export_offset + 36);

    let addr_table_off =
        rva_to_offset(&sections, addr_table_rva).ok_or("Cannot resolve address table RVA")?;
    let name_ptr_off =
        rva_to_offset(&sections, name_ptr_rva).ok_or("Cannot resolve name pointer RVA")?;
    let ordinal_off =
        rva_to_offset(&sections, ordinal_table_rva).ok_or("Cannot resolve ordinal table RVA")?;

    let mut name_for_index: Vec<Option<String>> = vec![None; num_functions];
    for i in 0..num_names {
        let name_rva = read_u32(&data, name_ptr_off + i * 4);
        let ord_index = read_u16(&data, ordinal_off + i * 2) as usize;
        if let Some(off) = rva_to_offset(&sections, name_rva) {
            if let Some(name) = read_cstring(&data, off) {
                if ord_index < num_functions {
                    name_for_index[ord_index] = Some(name);
                }
            }
        }