mirror of
https://github.com/sampletext32/ParkanPlayground.git
synced 2025-06-20 00:18:02 +03:00
Reorganize PE format code into separate files in PE namespace
This commit is contained in:
33
X86Disassembler/PE/ExportDirectory.cs
Normal file
33
X86Disassembler/PE/ExportDirectory.cs
Normal file
@ -0,0 +1,33 @@
|
||||
namespace X86Disassembler.PE
|
||||
{
|
||||
/// <summary>
|
||||
/// Represents the Export Directory of a PE file
|
||||
/// </summary>
|
||||
public class ExportDirectory
|
||||
{
|
||||
public uint Characteristics; // Reserved, must be 0
|
||||
public uint TimeDateStamp; // Time and date stamp
|
||||
public ushort MajorVersion; // Major version
|
||||
public ushort MinorVersion; // Minor version
|
||||
public uint Name; // RVA of the name of the DLL
|
||||
public string DllName; // The actual name of the DLL
|
||||
public uint Base; // Ordinal base
|
||||
public uint NumberOfFunctions; // Number of functions
|
||||
public uint NumberOfNames; // Number of names
|
||||
public uint AddressOfFunctions; // RVA of the export address table
|
||||
public uint AddressOfNames; // RVA of the export names table
|
||||
public uint AddressOfNameOrdinals; // RVA of the ordinal table
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Represents an exported function in a PE file
|
||||
/// </summary>
|
||||
public class ExportedFunction
|
||||
{
|
||||
public string Name; // Function name
|
||||
public ushort Ordinal; // Function ordinal
|
||||
public uint Address; // Function RVA
|
||||
public bool IsForwarder; // True if this is a forwarder
|
||||
public string ForwarderName; // Name of the forwarded function
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user