Struct goblin::pe::optional_header::WindowsFields32

#[repr(C)]
pub struct WindowsFields32 {

    pub image_base: u32,
    pub section_alignment: u32,
    pub file_alignment: u32,
    pub major_operating_system_version: u16,
    pub minor_operating_system_version: u16,
    pub major_image_version: u16,
    pub minor_image_version: u16,
    pub major_subsystem_version: u16,
    pub minor_subsystem_version: u16,
    pub win32_version_value: u32,
    pub size_of_image: u32,
    pub size_of_headers: u32,
    pub check_sum: u32,
    pub subsystem: u16,
    pub dll_characteristics: u16,
    pub size_of_stack_reserve: u32,
    pub size_of_stack_commit: u32,
    pub size_of_heap_reserve: u32,
    pub size_of_heap_commit: u32,
    pub loader_flags: u32,
    pub number_of_rva_and_sizes: u32,
}

Windows specific fields for 32-bit binary (PE32). They’re also known as “NT additional fields”.

In winnt.h, this is a subset of IMAGE_OPTIONAL_HEADER32.

• For 64-bit version, see WindowsFields64.
• For unified version, see WindowsFields.

Fields

image_base: u32

See docs for WindowsFields::image_base.

section_alignment: u32

See docs for WindowsFields::section_alignment.

file_alignment: u32

See docs for WindowsFields::file_alignment.

major_operating_system_version: u16

See docs for WindowsFields::major_operating_system_version.

minor_operating_system_version: u16

See docs for WindowsFields::minor_operating_system_version.

major_image_version: u16

See docs for WindowsFields::major_image_version.

minor_image_version: u16

See docs for WindowsFields::minor_image_version.

major_subsystem_version: u16

See docs for WindowsFields::major_subsystem_version.

minor_subsystem_version: u16

See docs for WindowsFields::minor_subsystem_version.

win32_version_value: u32

See docs for WindowsFields::win32_version_value.

size_of_image: u32

See docs for WindowsFields::size_of_image.

size_of_headers: u32

See docs for WindowsFields::size_of_headers.

check_sum: u32

See docs for WindowsFields::check_sum.

subsystem: u16

See docs for WindowsFields::subsystem.

dll_characteristics: u16

See docs for WindowsFields::dll_characteristics.

size_of_stack_reserve: u32

See docs for WindowsFields::size_of_stack_reserve.

size_of_stack_commit: u32

See docs for WindowsFields::size_of_stack_commit.

size_of_heap_reserve: u32

See docs for WindowsFields::size_of_heap_reserve.

size_of_heap_commit: u32

See docs for WindowsFields::size_of_heap_commit.

loader_flags: u32

See docs for WindowsFields::loader_flags.

number_of_rva_and_sizes: u32

See docs for WindowsFields::number_of_rva_and_sizes.

Trait Implementations

impl Clone for WindowsFields32

fn clone(&self) -> WindowsFields32

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WindowsFields32

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WindowsFields32

fn default() -> WindowsFields32

Returns the “default value” for a type.

impl From<WindowsFields32> for WindowsFields

fn from(windows: WindowsFields32) -> Self

Converts to this type from the input type.

impl PartialEq for WindowsFields32

fn eq(&self, other: &WindowsFields32) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl SizeWith<Endian> for WindowsFields32

fn size_with(ctx: &Endian) -> usize

impl TryFrom<WindowsFields64> for WindowsFields32

type Error = Error

The type returned in the event of a conversion error.

fn try_from(value: WindowsFields64) -> Result<Self, Self::Error>

Performs the conversion.

impl<'a> TryFromCtx<'a, Endian> for WindowsFields32

where WindowsFields32: 'a,

type Error = Error

fn try_from_ctx( src: &'a [u8], ctx: Endian ) -> Result<(Self, usize), Self::Error>

impl<'a> TryIntoCtx<Endian> for &'a WindowsFields32

type Error = Error

fn try_into_ctx(self, dst: &mut [u8], ctx: Endian) -> Result<usize, Self::Error>

impl TryIntoCtx<Endian> for WindowsFields32

type Error = Error

fn try_into_ctx(self, dst: &mut [u8], ctx: Endian) -> Result<usize, Self::Error>

impl Copy for WindowsFields32

impl StructuralPartialEq for WindowsFields32