Imports

[martinlindhe]

Hi! I've had success using pe-parser for a few small utilities and I'm really grateful for it!

Today, I wanted to try to use it to report imports for a given .exe file, but I'm at a loss.

Is this possible as of right now, or is it a todo, or is it out of scope for pe-parser?

I'd just like to be able to programmatically access a list of imports, similar to what is produced by winedump from the wine project, or similar tools

winedump -j import app.exe 

So, if this is possible today, I'd like to request a example in how to do that. Or if it's not possible today but in scope, I'd like to request that feature!

Thanks again for this lib, much appreciated!

[IsaacMarovitz]

That information is stored in the .idata section, right now pe-parser doesn't extract this information for you, but you can get the raw data yourself from PortableExecutable.section_table

There are some good resources on the section itself like https://0xrick.github.io/win-internals/pe6/, and https://learn.microsoft.com/en-us/windows/win32/debug/pe-format. Over the weekend I could look into adding this functionality myself but I'm not currently actively working on this crate.

[martinlindhe]

Thank you for the response! I ended up using https://github.com/gimli-rs/object last night in order to parse the import section, so I managed to move on to other stuff. Feel free to close this if you want.