Module goblin::pe::optional_header

The module for the PE optional header (OptionalHeader) and related items.

Structs

• OptionalHeader
  Unified 32/64-bit optional header (for PE32 and PE32+).
• StandardFields
  Unified 32/64-bit standard COFF fields (for PE32 and PE32+).
• StandardFields32
  Standard 32-bit COFF fields (for PE32).
• StandardFields64
  Standard 64-bit COFF fields (for PE32+).
• WindowsFields32
  Windows specific fields for 32-bit binary (PE32). They’re also known as “NT additional fields”.
• WindowsFields64
  Windows specific fields for 64-bit binary (PE32+). They’re also known as “NT additional fields”.

Constants

• IMAGE_NT_OPTIONAL_HDR32_MAGIC
  Magic number for 32-bit binary (PE32).
• IMAGE_NT_OPTIONAL_HDR64_MAGIC
  Magic number for 64-bit binary (PE32+).
• IMAGE_ROM_OPTIONAL_HDR_MAGIC
  Magic number for a ROM image.
• MAGIC_32
  Standard fields magic number for 32-bit binary (PE32).
• MAGIC_64
  Standard fields magic number for 64-bit binary (PE32+).
• OFFSET_WINDOWS_FIELDS_32_CHECKSUM
  Offset of the check_sum field in WindowsFields32.
• OFFSET_WINDOWS_FIELDS_64_CHECKSUM
  Offset of the check_sum field in WindowsFields64.
• SIZEOF_STANDARD_FIELDS_32
  Convenience constant for core::mem::size_of::<StandardFields32>().
• SIZEOF_STANDARD_FIELDS_64
  Convenience constant for core::mem::size_of::<StandardFields64>().
• SIZEOF_WINDOWS_FIELDS_32
  Convenience constant for core::mem::size_of::<WindowsFields32>().
• SIZEOF_WINDOWS_FIELDS_64
  Convenience constant for core::mem::size_of::<WindowsFields64>().

Type Aliases

• WindowsFields
  Unified 32/64-bit Windows fields (for PE32 and PE32+). Since 64-bit fields are a superset of 32-bit fields, WindowsFields is an alias for WindowsFields64.