mirror of
https://github.com/sampletext32/ParkanPlayground.git
synced 2025-05-19 11:51:17 +03:00
34 lines
1.4 KiB
C#
34 lines
1.4 KiB
C#
![]() |
namespace X86Disassembler.PE
|
||
|
{
|
||
|
/// <summary>
|
||
|
/// Represents the Export Directory of a PE file
|
||
|
/// </summary>
|
||
|
public class ExportDirectory
|
||
|
{
|
||
|
public uint Characteristics; // Reserved, must be 0
|
||
|
public uint TimeDateStamp; // Time and date stamp
|
||
|
public ushort MajorVersion; // Major version
|
||
|
public ushort MinorVersion; // Minor version
|
||
|
public uint Name; // RVA of the name of the DLL
|
||
|
public string DllName; // The actual name of the DLL
|
||
|
public uint Base; // Ordinal base
|
||
|
public uint NumberOfFunctions; // Number of functions
|
||
|
public uint NumberOfNames; // Number of names
|
||
|
public uint AddressOfFunctions; // RVA of the export address table
|
||
|
public uint AddressOfNames; // RVA of the export names table
|
||
|
public uint AddressOfNameOrdinals; // RVA of the ordinal table
|
||
|
}
|
||
|
|
||
|
/// <summary>
|
||
|
/// Represents an exported function in a PE file
|
||
|
/// </summary>
|
||
|
public class ExportedFunction
|
||
|
{
|
||
|
public string Name; // Function name
|
||
|
public ushort Ordinal; // Function ordinal
|
||
|
public uint Address; // Function RVA
|
||
|
public bool IsForwarder; // True if this is a forwarder
|
||
|
public string ForwarderName; // Name of the forwarded function
|
||
|
}
|
||
|
}
|