Struct object::pe::MaskedRichHeaderEntry
source · [−]#[repr(C)]pub struct MaskedRichHeaderEntry {
pub masked_comp_id: U32<LE>,
pub masked_count: U32<LE>,
}
Expand description
A PE rich header entry.
Rich headers have no official documentation, but have been heavily reversed-engineered and documented in the wild, e.g.:
http://www.ntcore.com/files/richsign.htm
https://www.researchgate.net/figure/Structure-of-the-Rich-Header_fig1_318145388
This data is “masked”, i.e. XORed with a checksum derived from the file data.
Fields
masked_comp_id: U32<LE>
masked_count: U32<LE>
Trait Implementations
Auto Trait Implementations
impl RefUnwindSafe for MaskedRichHeaderEntry
impl Send for MaskedRichHeaderEntry
impl Sync for MaskedRichHeaderEntry
impl Unpin for MaskedRichHeaderEntry
impl UnwindSafe for MaskedRichHeaderEntry
Blanket Implementations
Mutably borrows from an owned value. Read more