Show / Hide Table of Contents

Class RUNTIME_FUNCTION

The runtime function struct is represents a function in the exception header for x64 applications.

Inheritance
System.Object
AbstractStructure
RUNTIME_FUNCTION
Inherited Members
AbstractStructure.ToString()
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
Namespace: PeNet.Structures
Assembly: PeNet.dll
Syntax
public class RUNTIME_FUNCTION : AbstractStructure

Constructors

| Improve this Doc View Source

RUNTIME_FUNCTION(Byte[], UInt32, IMAGE_SECTION_HEADER[])

Create a new RUNTIME_FUNCTION object.

Declaration
public RUNTIME_FUNCTION(byte[] buff, uint offset, IMAGE_SECTION_HEADER[] sh)
Parameters
Type Name Description
System.Byte[] buff

A PE file as a byte array.

System.UInt32 offset

Raw offset of the runtime function struct.

IMAGE_SECTION_HEADER[] sh

Section Headers of the PE file.

Properties

| Improve this Doc View Source

FunctionEnd

RVA End of the function in code.

Declaration
public uint FunctionEnd { get; set; }
Property Value
Type Description
System.UInt32
| Improve this Doc View Source

FunctionStart

RVA Start of the function in code.

Declaration
public uint FunctionStart { get; set; }
Property Value
Type Description
System.UInt32
| Improve this Doc View Source

ResolvedUnwindInfo

Unwind Info object belonging to this Runtime Function.

Declaration
public UNWIND_INFO ResolvedUnwindInfo { get; }
Property Value
Type Description
UNWIND_INFO
| Improve this Doc View Source

UnwindInfo

Pointer to the unwind information.

Declaration
public uint UnwindInfo { get; set; }
Property Value
Type Description
System.UInt32
  • Improve this Doc
  • View Source
Back to top Generated by DocFX