Function parse_authenticode

Source
pub unsafe extern "C" fn parse_authenticode(
    pe_data: *const u8,
    pe_len: u64,
) -> *mut AuthenticodeArray
Expand description

@brief Constructs AuthenticodeArray from PE file data. Authenticode can contains nested Authenticode signatures as its unsigned attribute, which can also contain nested signatures. For this reason the function returns an Array of parsed Authenticode signatures. Any field of the parsed out structures can be NULL, depending on the input data. Verification result is stored in verify_flags with the first verification error.

@param pe_data PE binary data @param pe_len @return AuthenticodeArray*