0
mirror of https://github.com/sampletext32/ParkanPlayground.git synced 2025-06-20 00:18:02 +03:00

Reorganize PE format code into separate files in PE namespace

This commit is contained in:
bird_egop
2025-04-12 17:03:04 +03:00
parent bc572f5d33
commit 666a592217
8 changed files with 899 additions and 1 deletions

View File

@ -0,0 +1,31 @@
using System.Collections.Generic;
namespace X86Disassembler.PE
{
/// <summary>
/// Represents an Import Descriptor in a PE file
/// </summary>
public class ImportDescriptor
{
public uint OriginalFirstThunk; // RVA to original first thunk
public uint TimeDateStamp; // Time and date stamp
public uint ForwarderChain; // Forwarder chain
public uint Name; // RVA to the name of the DLL
public string DllName; // The actual name of the DLL
public uint FirstThunk; // RVA to first thunk
public List<ImportedFunction> Functions { get; } = new List<ImportedFunction>();
}
/// <summary>
/// Represents an imported function in a PE file
/// </summary>
public class ImportedFunction
{
public string Name; // Function name
public ushort Hint; // Hint value
public bool IsOrdinal; // True if imported by ordinal
public ushort Ordinal; // Ordinal value (if imported by ordinal)
public uint ThunkRVA; // RVA of the thunk for this function
}
}