What is Structure of IMAGE_THUNK_DATA?

4.2k views Asked by At

Can anyone explain the structure of IMAGE_THUNK_DATA?

I just know it has 4 elements, but I want the explanation of these elements.

1

There are 1 answers

0
GuidedHacking On

IMAGE_THUNK_DATA is defined like so:

typedef struct _IMAGE_THUNK_DATA {
    union {
        uint32_t* Function;             // address of imported function
        uint32_t  Ordinal;              // ordinal value of function
        PIMAGE_IMPORT_BY_NAME AddressOfData;        // RVA of imported name
        DWORD ForwarderStringl              // RVA to forwarder string
    } u1;
} IMAGE_THUNK_DATA, *PIMAGE_THUNK_DATA;

The comments should explain it well enough