Struct object::read::pe::RichHeaderInfo

pub struct RichHeaderInfo<'data> {
    pub offset: usize,
    pub length: usize,
    pub xor_key: u32,
    /* private fields */
}

Parsed information about a Rich Header.

Fields

offset: usize

The offset at which the rich header starts.

length: usize

The length (in bytes) of the rich header.

This includes the payload, but also the 16-byte start sequence and the 8-byte final “Rich” and XOR key.

xor_key: u32

The XOR key used to mask the rich header.

Unless the file has been tampered with, it should be equal to a checksum of the file header.

Implementations

impl<'data> RichHeaderInfo<'data>

pub fn parse<R: ReadRef<'data>>(data: R, nt_header_offset: u64) -> Option<Self>

Try to locate a rich header and its entries in the current PE file.

pub fn unmasked_entries(&self) -> impl Iterator<Item = RichHeaderEntry> + 'data

Returns an iterator over the unmasked entries.

Trait Implementations

impl<'data> Clone for RichHeaderInfo<'data>

fn clone(&self) -> RichHeaderInfo<'data>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'data> Debug for RichHeaderInfo<'data>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'data> Copy for RichHeaderInfo<'data>