Class UNWIND_INFO

The UNWIND_INFO is used for x64 exception handling and to unwind the stack. It is pointed to by the RUNTIME_FUNCTION struct.

Inheritance
System.Object
AbstractStructure
UNWIND_INFO
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
Namespace: PeNet.Structures
Assembly: PeNet.dll
Syntax
public class UNWIND_INFO : AbstractStructure

Constructors

| Improve this Doc View Source

UNWIND_INFO(Byte[], UInt32)

Create a new UNWIND_INFO object.

Declaration
public UNWIND_INFO(byte[] buff, uint offset)
Parameters
Type Name Description
System.Byte[] buff

A PE file as a byte array.
System.UInt32 offset

Raw offset of the UNWIND_INFO struct.

Properties

| Improve this Doc View Source

CountOfCodes

The count of codes is not the count of UNWINDE_CODEs in but the number of 2 byte slots. Some UNWINDW_CODEs need more than one slot, thus the number of UNWIND_CODEs can be lower than the number in CountOfCodes.

Declaration
public byte CountOfCodes { get; set; }
Property Value
Type Description
System.Byte
| Improve this Doc View Source

ExceptionData

Exception Data

Declaration
public uint[] ExceptionData { get; }
Property Value
Type Description
System.UInt32[]
| Improve this Doc View Source

ExceptionHandler

The exception handler for the function.

Declaration
public uint ExceptionHandler { get; set; }
Property Value
Type Description
System.UInt32
| Improve this Doc View Source

Flags

Flags

Declaration
public byte Flags { get; }
Property Value
Type Description
System.Byte
| Improve this Doc View Source

FrameOffset

Frame offset.

Declaration
public byte FrameOffset { get; }
Property Value
Type Description
System.Byte
| Improve this Doc View Source

FrameRegister

Frame register.

Declaration
public byte FrameRegister { get; }
Property Value
Type Description
System.Byte
| Improve this Doc View Source

FunctionEntry

Function entry.

Declaration
public uint FunctionEntry { get; set; }
Property Value
Type Description
System.UInt32
| Improve this Doc View Source

SizeOfProlog

Size of prolog.

Declaration
public byte SizeOfProlog { get; set; }
Property Value
Type Description
System.Byte
| Improve this Doc View Source

UnwindCode

UnwindCode structure.

Declaration
public UNWIND_CODE[] UnwindCode { get; }
Property Value
Type Description
UNWIND_CODE[]
| Improve this Doc View Source

Version

Version

Declaration
public byte Version { get; }
Property Value
Type Description
System.Byte