mirror of
https://github.com/sampletext32/ParkanPlayground.git
synced 2025-05-19 11:51:17 +03:00
32 lines
1.1 KiB
C#
32 lines
1.1 KiB
C#
using System.Collections.Generic;
|
|
|
|
namespace X86Disassembler.PE
|
|
{
|
|
/// <summary>
|
|
/// Represents an Import Descriptor in a PE file
|
|
/// </summary>
|
|
public class ImportDescriptor
|
|
{
|
|
public uint OriginalFirstThunk; // RVA to original first thunk
|
|
public uint TimeDateStamp; // Time and date stamp
|
|
public uint ForwarderChain; // Forwarder chain
|
|
public uint Name; // RVA to the name of the DLL
|
|
public string DllName; // The actual name of the DLL
|
|
public uint FirstThunk; // RVA to first thunk
|
|
|
|
public List<ImportedFunction> Functions { get; } = new List<ImportedFunction>();
|
|
}
|
|
|
|
/// <summary>
|
|
/// Represents an imported function in a PE file
|
|
/// </summary>
|
|
public class ImportedFunction
|
|
{
|
|
public string Name; // Function name
|
|
public ushort Hint; // Hint value
|
|
public bool IsOrdinal; // True if imported by ordinal
|
|
public ushort Ordinal; // Ordinal value (if imported by ordinal)
|
|
public uint ThunkRVA; // RVA of the thunk for this function
|
|
}
|
|
}
|