mirror of
https://github.com/sampletext32/ParkanPlayground.git
synced 2025-06-20 00:18:02 +03:00
Reorganize PE format code into separate files in PE namespace
This commit is contained in:
31
X86Disassembler/PE/ImportDescriptor.cs
Normal file
31
X86Disassembler/PE/ImportDescriptor.cs
Normal file
@ -0,0 +1,31 @@
|
||||
using System.Collections.Generic;
|
||||
|
||||
namespace X86Disassembler.PE
|
||||
{
|
||||
/// <summary>
|
||||
/// Represents an Import Descriptor in a PE file
|
||||
/// </summary>
|
||||
public class ImportDescriptor
|
||||
{
|
||||
public uint OriginalFirstThunk; // RVA to original first thunk
|
||||
public uint TimeDateStamp; // Time and date stamp
|
||||
public uint ForwarderChain; // Forwarder chain
|
||||
public uint Name; // RVA to the name of the DLL
|
||||
public string DllName; // The actual name of the DLL
|
||||
public uint FirstThunk; // RVA to first thunk
|
||||
|
||||
public List<ImportedFunction> Functions { get; } = new List<ImportedFunction>();
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Represents an imported function in a PE file
|
||||
/// </summary>
|
||||
public class ImportedFunction
|
||||
{
|
||||
public string Name; // Function name
|
||||
public ushort Hint; // Hint value
|
||||
public bool IsOrdinal; // True if imported by ordinal
|
||||
public ushort Ordinal; // Ordinal value (if imported by ordinal)
|
||||
public uint ThunkRVA; // RVA of the thunk for this function
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user