Skip to content

ExportedFunctionInfo

Namespace: Dotsider.Core.Analysis.Models

Assembly: Dotsider.Core.dll

A single entry in the PE export table.

public sealed record ExportedFunctionInfo : IEquatable<ExportedFunctionInfo>

ObjectExportedFunctionInfo

ExportedFunctionInfo(int, string?, int, string?)

Section titled “ExportedFunctionInfo(int, string?, int, string?)”

A single entry in the PE export table.

Parameters:

  • Ordinal (Int32): The biased export ordinal (ordinal base applied).
  • Name (String): The exported name, or null for ordinal-only exports.
  • Rva (Int32): The RVA of the exported symbol, or of the forwarder string.
  • ForwardedTo (String): The forwarder target (e.g. “NTDLL.RtlAllocateHeap”) when the export forwards to another module, or null for regular exports.
public ExportedFunctionInfo(int Ordinal, string? Name, int Rva, string? ForwardedTo)

The forwarder target (e.g. “NTDLL.RtlAllocateHeap”) when the export forwards to another module, or null for regular exports.

Returns: String

public string? ForwardedTo { get; init; }

The exported name, or null for ordinal-only exports.

Returns: String

public string? Name { get; init; }

The biased export ordinal (ordinal base applied).

Returns: Int32

public int Ordinal { get; init; }

The RVA of the exported symbol, or of the forwarder string.

Returns: Int32

public int Rva { get; init; }

Deconstruct(out int, out string?, out int, out string?)

Section titled “Deconstruct(out int, out string?, out int, out string?)”

Parameters:

public void Deconstruct(out int Ordinal, out string? Name, out int Rva, out string? ForwardedTo)

Parameters:

Returns: Boolean

public bool Equals(ExportedFunctionInfo? other)

Parameters:

Returns: Boolean

public override bool Equals(object? obj)

Returns: Int32

public override int GetHashCode()

Returns: String

public override string ToString()

operator !=(ExportedFunctionInfo?, ExportedFunctionInfo?)

Section titled “operator !=(ExportedFunctionInfo?, ExportedFunctionInfo?)”

Parameters:

Returns: Boolean

public static bool operator !=(ExportedFunctionInfo? left, ExportedFunctionInfo? right)

operator ==(ExportedFunctionInfo?, ExportedFunctionInfo?)

Section titled “operator ==(ExportedFunctionInfo?, ExportedFunctionInfo?)”

Parameters:

Returns: Boolean

public static bool operator ==(ExportedFunctionInfo? left, ExportedFunctionInfo? right)