Namespace AsmResolver.PE.Imports
Classes
- DefaultSymbolResolver
Provides an implementation of the ISymbolResolver that includes some static ordinal-name mappings from known Windows libraries.
- DelegatedSymbolClassifier
Implements a IImportedSymbolClassifier using a delegate.
- EmptySymbolResolver
Provides an empty implementation for the ISymbolResolver interface that always returns
null.
- ImportHash
Provides an implementation of the import hash (ImpHash) introduced by Mandiant.
Reference: https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html
- ImportedModule
Represents a single module that was imported into a portable executable as part of the imports data directory. Each instance represents one entry in the imports directory.
- ImportedSymbol
Represents one member of an external module that was imported into a PE image.
- SerializedImportedModule
Provides an implementation of a module import entry present in a PE file.
- SerializedImportedModuleList
Provides a lazy-initialized list of module import entries that is stored in a PE file.
Interfaces
- IImportedSymbolClassifier
Provides members for classifying imported symbols by their kind.
- ISymbolResolver
Provides members for resolving imported symbols.
Enums
- ImportedSymbolType
Provides members describing the different types of symbols that can be imported into a PE.