Name |
Description |
AbstractStructure |
Abstract class for a Windows structure. |
Copyright |
The copyright ASCII (not 0-terminated) string of the PE file if any is given. |
IMAGE_BASE_RELOCATION |
The IMAGE_BASE_RELOCATION structure holds information needed to relocate the image to another virtual address. |
IMAGE_BASE_RELOCATION.TypeOffset |
Represents the type and offset in an IMAGE_BASE_RELOCATION structure. |
IMAGE_BOUND_IMPORT_DESCRIPTOR |
Bound import descriptor. |
IMAGE_DATA_DIRECTORY |
The IMAGE_DATA_DIRECTORY struct represents the data directory, |
IMAGE_DELAY_IMPORT_DESCRIPTOR |
The IMAGE_DELAY_IMPORT_DESCRIPTOR describes delayed imports. |
IMAGE_DOS_HEADER |
The IMAGE_DOS_HEADER with which every PE file starts. |
IMAGE_EXPORT_DIRECTORY |
The export directory contains all exported function, symbols etc. which can be used by other module. |
IMAGE_FILE_HEADER |
The File header contains information about the structure and properties of the PE file. |
IMAGE_IMPORT_BY_NAME |
The IMAGE_IMPORT_BY_NAME structure is used to describes imports of functions or symbols by their name. The AddressOfData in the IMAGE_THUNK_DATA from the IMAGE_IMPORT_DESCRIPTOR points to it. |
IMAGE_IMPORT_DESCRIPTOR |
The IMAGE_IMPORT_DESCRIPTORs are contained in the Import Directory and holds all the information about function and symbol imports. |
IMAGE_LOAD_CONFIG_DIRECTORY |
The IMAGE_LOAD_CONFIG_DIRECTORY hold information important to load the PE file correctly. |
IMAGE_NT_HEADERS |
The NT header is the main header for modern Windows applications. It contains the file header and the optional header. |
IMAGE_OPTIONAL_HEADER_x64 |
Represents the optional header in the NT header. |
IMAGE_RESOURCE_DATA_ENTRY |
The IMAGE_RESOURCE_DATA_ENTRY points to the data of the resources in the PE file like version info, strings etc. |
IMAGE_RESOURCE_DIRECTORY |
The resource directory contains icons, mouse pointer, string language files etc. which are used by the application. |
IMAGE_RESOURCE_DIRECTORY_ENTRY |
The resource directory entry represents one entry (e.g. icon) in a resource directory. |
IMAGE_RESOURCE_DIR_STRING_U |
Represents a Unicode string used for resource names in the resource section. |
IMAGE_SECTION_HEADER |
Represents the section header for one section. |
IMAGE_THUNK_DATA |
The thunk data is used by for the imports in the import section. |
IMAGE_TLS_CALLBACK |
Thread Local Storage callback. |
IMAGE_TLS_DIRECTORY |
Thread Local Storage Directory. |
StructureFacade |
|
UNWIND_CODE |
The UNWIND_CODE is a struct in the UNWIND_INFO used to describe exception handling in x64 applications and to walk the stack. |
UNWIND_INFO |
The UNWIND_INFO is used for x64 exception handling and to unwind the stack. It is pointed to by the RUNTIME_FUNCTION struct. |
WIN_CERTIFICATE |
The WIN_CERTIFICATE the information in the security directory of the PE file. It contains information about any certificates used to sign the binary. |