Skip to content

ExportedFunctionInfo

Namespace: Dotsider.Core.Analysis.Models

Assembly: Dotsider.Core.dll

A single entry in the PE export table.

public sealed record ExportedFunctionInfo : IEquatable<ExportedFunctionInfo>

ObjectExportedFunctionInfo

ExportedFunctionInfo(int, string?, int, string?)

Section titled “ExportedFunctionInfo(int, string?, int, string?)”

A single entry in the PE export table.

Parameters:

  • Ordinal (Int32): The biased export ordinal (ordinal base applied).
  • Name (String): The exported name, or null for ordinal-only exports.
  • Rva (Int32): The RVA of the exported symbol, or of the forwarder string.
  • ForwardedTo (String): The forwarder target (e.g. “NTDLL.RtlAllocateHeap”) when the export forwards to another module, or null for regular exports.
public ExportedFunctionInfo(int Ordinal, string? Name, int Rva, string? ForwardedTo)

The forwarder target (e.g. “NTDLL.RtlAllocateHeap”) when the export forwards to another module, or null for regular exports.

Returns: String

public string? ForwardedTo { get; init; }

The exported name, or null for ordinal-only exports.

Returns: String

public string? Name { get; init; }

The biased export ordinal (ordinal base applied).

Returns: Int32

public int Ordinal { get; init; }

The RVA of the exported symbol, or of the forwarder string.

Returns: Int32

public int Rva { get; init; }