Class I386Platform

Namespace

AsmResolver.PE.Platforms

Assembly

AsmResolver.PE.dll

Provides information and services for the I386 target platform.

public class I386Platform : Platform

Inheritance

object

Platform

I386Platform

Inherited Members

Platform.Get(MachineType)

Platform.TryGet(MachineType, out Platform)

Platform.Is64Bit

Platform.PointerSize

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Properties

Instance

Gets the singleton instance for the I386 platform.

public static I386Platform Instance { get; }

Property Value

I386Platform

Is32Bit

Gets a value indicating whether the platform is a 32-bit platform.

public override bool Is32Bit { get; }

Property Value

bool

IsClrBootstrapperRequired

Gets a value indicating whether PEs with a .NET image embedded requires a CLR bootstrapper.

public override bool IsClrBootstrapperRequired { get; }

Property Value

bool

TargetMachine

Gets the machine type associated to the platform.

public override MachineType TargetMachine { get; }

Property Value

MachineType

Methods

CreateAddressTableInitializer(ISymbol)

Creates a new address table initializer stub.

public override AddressTableInitializerStub CreateAddressTableInitializer(ISymbol virtualProtect)

Parameters

virtualProtect ISymbol

The symbol to kernel32.dll!VirtualProtect to use for temporarily adjusting the memory protection bits while initializing the address table.

Returns

AddressTableInitializerStub

The initializer stub.

CreateThunkStub(ISymbol)

Creates a new thunk stub that transfers control to the provided symbol.

public override RelocatableSegment CreateThunkStub(ISymbol entryPoint)

Parameters

entryPoint ISymbol

The symbol to jump to.

Returns

RelocatableSegment

The created stub.

TryExtractThunkAddress(PEImage, BinaryStreamReader, out uint)

Attempts to extract the original RVA from the code at the provided thunk address reader.

public override bool TryExtractThunkAddress(PEImage image, BinaryStreamReader reader, out uint rva)

Parameters

image PEImage

The image containing the thunk.

reader BinaryStreamReader

The thunk reader.

rva uint

The extracted RVA.

Returns

bool

true if the RVA was extracted successfully from the code, false otherwise.