Class IMAGE_THUNK_DATA

The thunk data is used by for the imports in the import section.

Inheritance
System.Object
AbstractStructure
IMAGE_THUNK_DATA
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
Namespace: PeNet.Structures
Assembly: PeNet.dll
Syntax
public class IMAGE_THUNK_DATA : AbstractStructure

Constructors

| Improve this Doc View Source

IMAGE_THUNK_DATA(Byte[], UInt32, Boolean)

Create a new IMAGE_THUNK_DATA object.

Declaration
public IMAGE_THUNK_DATA(byte[] buff, uint offset, bool is64Bit)
Parameters
Type Name Description
System.Byte[] buff

A PE file as a byte array.
System.UInt32 offset

Raw offset of the thunk data.
System.Boolean is64Bit

Set to true if the PE file is a x64 application.

Properties

| Improve this Doc View Source

AddressOfData

Points to the address in the IAT or to an IMAGE_IMPORT_BY_NAME struct.

Declaration
public ulong AddressOfData { get; set; }
Property Value
Type Description
System.UInt64
| Improve this Doc View Source

ForwarderString

Same as AddressOfFunction.

Declaration
public ulong ForwarderString { get; set; }
Property Value
Type Description
System.UInt64
| Improve this Doc View Source

Function

Same as AddressOfFunction.

Declaration
public ulong Function { get; set; }
Property Value
Type Description
System.UInt64
| Improve this Doc View Source

Ordinal

Same as AddressOfFunction.

Declaration
public ulong Ordinal { get; set; }
Property Value
Type Description
System.UInt64