PeNet by Stefan Hausotte

<PackageReference Include="PeNet" Version="2.3.1" />

---

API Diff between 2.3.1 and 0.8.2

1094 Additions 116 Removals

PeNet

• public static class Constants
• public class CrlUrlList
• public static class DotNetConstants
• public class ExportFunction
• public class FileCharacteristics
• public class ImportFunction
• public class AdditionalImport
  • public List<string> Functions { get; }
  • public string Module { get; }
  • public AdditionalImport(string module, List<string> funcs)
• public static class ExtensionMethods
  • public static bool Is32Bit(this IRawFile peFile)
  • public static bool Is64Bit(this IRawFile peFile)
  • public static ulong OffsetToRva(this ulong offset, ICollection<ImageSectionHeader> sectionHeaders)
  • public static uint OffsetToRva(this uint offset, ICollection<ImageSectionHeader> sectionHeaders)
  • public static uint PaddingBytes(this long offset, int alignment)
  • public static uint PaddingBytes(this int offset, int alignment)
  • public static uint PaddingBytes(this uint offset, int alignment)
  • public static ulong RvaToOffset(this ulong rva, ICollection<ImageSectionHeader> sectionHeaders)
  • public static uint RvaToOffset(this uint rva, ICollection<ImageSectionHeader> sectionHeaders)
  • public static string ToHexString(this ICollection<byte> bytes)
  • public static string ToHexString(this ICollection<ushort> values)
  • public static string ToHexString(this byte value)
  • public static string ToHexString(this ushort value)
  • public static string ToHexString(this uint value)
  • public static string ToHexString(this ulong value)
  • public static List<string> ToHexString(this byte[] input, ulong from, ulong length)
  • public static long ToIntFromHexString(this string hexString)
  • public static bool TryRvaToOffset(this uint rva, ICollection<ImageSectionHeader> sectionHeaders, out uint fileOffset)
  • public static int UStringByteLength(this string s)
  • public static ulong VaToOffset(this ulong va, ICollection<ImageSectionHeader> sectionHeaders)
• public class PeFile
  • public readonly byte[] Buff
  • public AuthenticodeInfo Authenticode { get; }
  • public RUNTIME_FUNCTION[] ExceptionDirectory { get; }
  • public ExportFunction[] ExportedFunctions { get; }
  • public string FileLocation { get; }
  • public int FileSize { get; }
  • public bool HasValidComDescriptor { get; }
  • public bool HasValidDir { get; }
  • public bool HasValidExportDir { get; }
  • public bool HasValidImportDir { get; }
  • public bool HasValidRelocDir { get; }
  • public bool HasValidResourceDir { get; }
  • public bool HasValidSecurityDir { get; }
  • public IMAGE_BOUND_IMPORT_DESCRIPTOR ImageBoundImportDescriptor { get; }
  • public IMAGE_COR20_HEADER ImageComDescriptor { get; }
  • public IMAGE_DEBUG_DIRECTORY ImageDebugDirectory { get; }
  • public IMAGE_DELAY_IMPORT_DESCRIPTOR ImageDelayImportDescriptor { get; }
  • public IMAGE_DOS_HEADER ImageDosHeader { get; }
  • public IMAGE_EXPORT_DIRECTORY ImageExportDirectory { get; }
  • public IMAGE_IMPORT_DESCRIPTOR[] ImageImportDescriptors { get; }
  • public IMAGE_LOAD_CONFIG_DIRECTORY ImageLoadConfigDirectory { get; }
  • public IMAGE_NT_HEADERS ImageNtHeaders { get; }
  • public IMAGE_BASE_RELOCATION[] ImageRelocationDirectory { get; }
  • public IMAGE_RESOURCE_DIRECTORY ImageResourceDirectory { get; }
  • public IMAGE_SECTION_HEADER[] ImageSectionHeaders { get; }
  • public IMAGE_TLS_DIRECTORY ImageTlsDirectory { get; }
  • public AuthenticodeInfo Authenticode { get; }
  • public Guid? ClrComTypeLibId { get; }
  • public List<Guid> ClrModuleVersionIds { get; }
  • public RuntimeFunction[] ExceptionDirectory { get; }
  • public ExportFunction[] ExportedFunctions { get; }
  • public long FileSize { get; }
  • public bool HasValidSignature { get; }
  • public ImageBoundImportDescriptor ImageBoundImportDescriptor { get; }
  • public ImageCor20Header ImageComDescriptor { get; }
  • public ImageDebugDirectory[] ImageDebugDirectory { get; }
  • public ImageDelayImportDescriptor ImageDelayImportDescriptor { get; }
  • public ImageDosHeader ImageDosHeader { get; }
  • public ImageExportDirectory ImageExportDirectory { get; }
  • public ImageImportDescriptor[] ImageImportDescriptors { get; }
  • public ImageLoadConfigDirectory ImageLoadConfigDirectory { get; }
  • public ImageNtHeaders ImageNtHeaders { get; }
  • public ImageBaseRelocation[] ImageRelocationDirectory { get; }
  • public ImageResourceDirectory ImageResourceDirectory { get; }
  • public ImageSectionHeader[] ImageSectionHeaders { get; }
  • public ImageTlsDirectory ImageTlsDirectory { get; }
  • public ImportFunction[] ImportedFunctions { get; }
  • public ImportFunction[] ImportedFunctions { get; }
  • public bool IsDLL { get; }
  • public bool IsDll { get; }
  • public bool IsDotNet { get; }
  • public bool IsEXE { get; }
  • public bool IsSignatureValid { get; }
  • public bool IsExe { get; }
  • public string MD5 { get; }
  • public METADATAHDR MetaDataHdr { get; }
  • public string Md5 { get; }
  • public MetaDataHdr MetaDataHdr { get; }
  • public IMETADATASTREAM_GUID MetaDataStreamGUID { get; }
  • public IMETADATASTREAM_STRING MetaDataStreamString { get; }
  • public METADATATABLESHDR MetaDataStreamTablesHeader { get; }
  • public IMETADATASTREAM_US MetaDataStreamUS { get; }
  • public MetaDataTables MetaDataTables { get; }
  • public X509Certificate2 PKCS7 { get; }
  • public string SHA1 { get; }
  • public string SHA256 { get; }
  • public Stream Stream { get; }
  • public WIN_CERTIFICATE WinCertificate { get; }
  • public MetaDataStreamGuid MetaDataStreamGuid { get; }
  • public MetaDataStreamString MetaDataStreamString { get; }
  • public MetaDataTablesHdr MetaDataStreamTablesHeader { get; }
  • public MetaDataStreamUs MetaDataStreamUs { get; }
  • public X509Certificate2 Pkcs7 { get; }
  • public IRawFile RawFile { get; }
  • public Resources Resources { get; }
  • public string Sha1 { get; }
  • public string Sha256 { get; }
  • public WinCertificate WinCertificate { get; }
  • public PeFile(IRawFile peFile)
  • public static bool Is32BitPeFile(string file)
  • public static bool Is64BitPeFile(string file)
  • public static bool IsPEFile(string file)
  • public CrlUrlList GetCrlUrlList()
  • public string GetFileType()
  • public bool IsValidCertChain(bool online)
  • public PeFile(Stream peFile)
  • public static bool IsPeFile(string file)
  • public static bool IsPeFile(Stream file)
  • public static bool IsPeFile(MMFile file)
  • public static bool IsPeFile(Span<byte> buf)
  • public static bool TryParse(string file, out PeFile peFile)
  • public static bool TryParse(byte[] buff, out PeFile peFile)
  • public static bool TryParse(Stream file, out PeFile peFile)
  • public static bool TryParse(MMFile file, out PeFile peFile)
  • public void AddImport(string module, string function)
  • public void AddImports(List<AdditionalImport> additionalImports)
  • public void AddSection(string name, int size, ScnCharacteristicsType characteristics)
  • public CrlUrlList GetCrlUrlList()
  • public bool HasValidCertChain(bool useOnlineCrl)
  • public bool HasValidCertChain(X509Certificate2 cert, TimeSpan urlRetrievalTimeout, bool useOnlineCRL = true, bool excludeRoot = true)
  • public void RemoveSection(string name, bool removeContent = true)

PeNet.Authenticode

• public class AuthenticodeInfo
• public class ContentInfo
• public class SignedData

PeNet.FileParser

• public class BufferFile : IRawFile
  • public long Length { get; }
  • public BufferFile(byte[] file)
  • public int AppendBytes(Span<byte> bytes)
  • public Span<byte> AsSpan(long offset, long length)
  • public string ReadAsciiString(long offset)
  • public byte ReadByte(long offset)
  • public uint ReadUInt(long offset)
  • public ulong ReadULong(long offset)
  • public string ReadUnicodeString(long offset)
  • public string ReadUnicodeString(long offset, long length)
  • public ushort ReadUShort(long offset)
  • public void RemoveRange(long offset, long length)
  • public byte[] ToArray()
  • public void WriteByte(long offset, byte value)
  • public void WriteBytes(long offset, Span<byte> bytes)
  • public void WriteUInt(long offset, uint value)
  • public void WriteULong(long offset, ulong value)
  • public void WriteUShort(long offset, ushort value)
• public interface IRawFile
  • long Length { get; }
  • int AppendBytes(Span<byte> bytes)
  • Span<byte> AsSpan(long offset, long length)
  • string ReadAsciiString(long offset)
  • byte ReadByte(long offset)
  • uint ReadUInt(long offset)
  • ulong ReadULong(long offset)
  • string ReadUnicodeString(long offset)
  • string ReadUnicodeString(long offset, long length)
  • ushort ReadUShort(long offset)
  • void RemoveRange(long offset, long length)
  • byte[] ToArray()
  • void WriteByte(long offset, byte value)
  • void WriteBytes(long offset, Span<byte> bytes)
  • void WriteUInt(long offset, uint value)
  • void WriteULong(long offset, ulong value)
  • void WriteUShort(long offset, ushort value)
• public class MMFile : IRawFile, IDisposable
  • public long Length { get; }
  • public MMFile(string file)
  • public int AppendBytes(Span<byte> bytes)
  • public Span<byte> AsSpan(long offset, long length)
  • public void Dispose()
  • public string ReadAsciiString(long offset)
  • public byte ReadByte(long offset)
  • public uint ReadUInt(long offset)
  • public ulong ReadULong(long offset)
  • public string ReadUnicodeString(long offset)
  • public string ReadUnicodeString(long offset, long length)
  • public ushort ReadUShort(long offset)
  • public void RemoveRange(long offset, long length)
  • public byte[] ToArray()
  • public void WriteByte(long offset, byte value)
  • public void WriteBytes(long offset, Span<byte> bytes)
  • public void WriteUInt(long offset, uint value)
  • public void WriteULong(long offset, ulong value)
  • public void WriteUShort(long offset, ushort value)
• public class StreamFile : IRawFile, IDisposable
  • public long Length { get; }
  • public StreamFile(Stream file)
  • public int AppendBytes(Span<byte> bytes)
  • public Span<byte> AsSpan(long offset, long length)
  • public void Dispose()
  • public string ReadAsciiString(long offset)
  • public byte ReadByte(long offset)
  • public uint ReadUInt(long offset)
  • public ulong ReadULong(long offset)
  • public string ReadUnicodeString(long offset)
  • public string ReadUnicodeString(long offset, long length)
  • public ushort ReadUShort(long offset)
  • public void RemoveRange(long offset, long length)
  • public byte[] ToArray()
  • public void WriteByte(long offset, byte value)
  • public void WriteBytes(long offset, Span<byte> bytes)
  • public void WriteUInt(long offset, uint value)
  • public void WriteULong(long offset, ulong value)
  • public void WriteUShort(long offset, ushort value)

PeNet.Header

• public abstract class AbstractStructure
  • protected AbstractStructure(IRawFile peFile, long offset)

PeNet.Header.Authenticode

• public class AuthenticodeInfo
  • public bool IsAuthenticodeValid { get; }
  • public byte[] SignedHash { get; }
  • public string SignerSerialNumber { get; }
  • public X509Certificate2 SigningCertificate { get; }
  • public AuthenticodeInfo(PeFile peFile)
• public class ContentInfo
  • public Asn1Node Content { get; }
  • public string ContentType { get; }
  • public ContentInfo(Span<byte> data)
  • public ContentInfo(Asn1Node asn1)
• public class CrlUrlList
  • public List<string> Urls { get; }
  • public CrlUrlList(byte[] rawData)
  • public CrlUrlList(X509Certificate2 cert)
• public class SignedData
  • public ContentInfo ContentInfo { get; }
  • public SignedData(Asn1Node asn1)

PeNet.Header.ImpHash

• public class ImportHash
  • public string ImpHash { get; }
  • public ImportHash(ICollection<ImportFunction> importedFunctions)

PeNet.Header.Net

• public class HeapSizes
  • public uint Blob { get; }
  • public uint Guid { get; }
  • public uint String { get; }
  • public HeapSizes(byte heapSizes)
• public interface IMetaDataTablesHdr
  • byte HeapSizes { get; set; }
  • List<MetaDataTableInfo> TableDefinitions { get; }
• public enum Index
  • AssemblyRef = 9
  • CustomAttributeType = 21
  • Event = 5
  • Field = 3
  • GenericParam = 10
  • Guid = 1
  • HasConstant = 12
  • HasCustomAttribute = 13
  • HasDeclSecurity = 15
  • HasFieldMarshal = 14
  • HasSemantics = 17
  • Implementation = 20
  • MemberForwarded = 19
  • MemberRefParent = 16
  • MethodDef = 2
  • MethodDefOrRef = 18
  • ModuleRef = 8
  • Param = 4
  • Property = 7
  • ResolutionScope = 22
  • String = 0
  • TypeDef = 6
  • TypeDefOrRef = 11
  • TypeOrMethodDef = 23
• public class IndexSize
  • public uint this[Index index] { get; }
  • public IndexSize(MetaDataTableInfo[] tables)
• public enum MaskValidType
  • Assembly = 4294967296
  • AssemblyOS = 17179869184
  • AssemblyProcessor = 8589934592
  • AssemblyRef = 34359738368
  • AssemblyRefOS = 137438953472
  • AssemblyRefProcessor = 68719476736
  • ClassLayout = 32768
  • Constant = 2048
  • CustomAttribute = 4096
  • DeclSecurity = 16384
  • Event = 1048576
  • EventMap = 262144
  • ExportedType = 549755813888
  • Field = 16
  • FieldLayout = 65536
  • FieldMarshal = 8192
  • FieldRva = 536870912
  • File = 274877906944
  • GenericParam = 4398046511104
  • GenericParamConstraint = 17592186044416
  • ImplMap = 268435456
  • InterfaceImpl = 512
  • ManifestResource = 1099511627776
  • MemberRef = 1024
  • MethodDef = 64
  • MethodImpl = 33554432
  • MethodSemantics = 16777216
  • MethodSpec = 8796093022208
  • Module = 1
  • ModuleRef = 67108864
  • NestedClass = 2199023255552
  • Param = 256
  • Property = 8388608
  • PropertyMap = 2097152
  • StandAloneSig = 131072
  • TypeDef = 4
  • TypeRef = 2
  • TypeSpec = 134217728
• public class MetaDataHdr : AbstractStructure
  • public ushort Flags { get; set; }
  • public ushort MajorVersion { get; set; }
  • public MetaDataStreamHdr[] MetaDataStreamsHdrs { get; }
  • public ushort MinorVersion { get; set; }
  • public uint Reserved { get; set; }
  • public uint Signature { get; set; }
  • public ushort Streams { get; set; }
  • public string Version { get; }
  • public uint VersionLength { get; set; }
  • public MetaDataHdr(IRawFile peFile, long offset)
• public class MetaDataStreamGuid : AbstractStructure
  • public List<Guid> Guids { get; }
  • public List<Tuple<Guid, uint>> GuidsAndIndices { get; }
  • public MetaDataStreamGuid(IRawFile peFile, long offset, uint size)
  • public Guid? GetGuidAtIndex(uint index)
• public class MetaDataStreamHdr : AbstractStructure
  • public uint RelOffset { get; set; }
  • public uint Size { get; set; }
  • public string StreamName { get; }
  • public MetaDataStreamHdr(IRawFile peFile, long offset)
• public class MetaDataStreamString : AbstractStructure
  • public MetaDataStreamString(IRawFile peFile, long offset, uint size)
  • public string GetStringAtIndex(uint index)
• public class MetaDataStreamUs : AbstractStructure
  • public List<string> UserStrings { get; }
  • public List<Tuple<string, uint>> UserStringsAndIndices { get; }
  • public MetaDataStreamUs(IRawFile peFile, long offset, uint size)
  • public string GetUserStringAtIndex(uint index)
• public class MetaDataTablesHdr : AbstractStructure, IMetaDataTablesHdr
  • public struct MetaDataTableInfo
  • public byte HeapSizes { get; set; }
  • public byte MajorVersion { get; set; }
  • public ulong MaskSorted { get; set; }
  • public MaskValidType MaskValid { get; set; }
  • public List<string> MaskValidResolved { get; }
  • public byte MinorVersion { get; set; }
  • public uint Reserved1 { get; set; }
  • public byte Reserved2 { get; set; }
  • public List<MetaDataTableInfo> TableDefinitions { get; }
  • public Tables Tables { get; }
  • public MetaDataTablesHdr(IRawFile peFile, long offset)
  • public static List<string> ResolveMaskValid(MaskValidType maskValid)

PeNet.Header.Net.MetaDataTables

• public class AbstractTable : AbstractStructure
  • protected long CurrentOffset
  • protected HeapSizes HeapSizes { get; }
  • protected IndexSize IndexSizes { get; }
  • public AbstractTable(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
  • protected uint ReadSize(uint size)
• public class Assembly : AbstractTable
  • public ushort BuildNumber { get; }
  • public uint Culture { get; }
  • public uint Flags { get; }
  • public uint HashAlgId { get; }
  • public ushort MajorVersion { get; }
  • public ushort MinorVersion { get; }
  • public uint Name { get; }
  • public uint PublicKey { get; }
  • public ushort RevisionNumber { get; }
  • public Assembly(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class AssemblyOS : AbstractTable
  • public uint OSMajorVersion { get; }
  • public uint OSMinorVersion { get; }
  • public uint OSPlatformID { get; }
  • public AssemblyOS(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class AssemblyProcessor : AbstractTable
  • public uint Processor { get; }
  • public AssemblyProcessor(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class AssemblyRef : AbstractTable
  • public ushort BuildNumber { get; }
  • public uint Culture { get; }
  • public uint Flags { get; }
  • public uint HashValue { get; }
  • public ushort MajorVersion { get; }
  • public ushort MinorVersion { get; }
  • public uint Name { get; }
  • public uint PublicKeyOrToken { get; }
  • public ushort RevisionNumber { get; }
  • public AssemblyRef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class AssemblyRefOS : AbstractTable
  • public uint AssemblyRef { get; }
  • public uint OSMajorVersion { get; }
  • public uint OSMinorVersion { get; }
  • public uint OSPlatformID { get; }
  • public AssemblyRefOS(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class AssemblyRefProcessor : AbstractTable
  • public uint AssemblyRef { get; }
  • public uint Processor { get; }
  • public AssemblyRefProcessor(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class ClassLayout : AbstractTable
  • public uint ClassSize { get; }
  • public ushort PackingSize { get; }
  • public uint Parent { get; }
  • public ClassLayout(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Constant : AbstractTable
  • public uint Parent { get; }
  • public byte Type { get; }
  • public uint Value { get; }
  • public Constant(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class CustomAttribute : AbstractTable
  • public uint Parent { get; }
  • public uint Type { get; }
  • public uint Value { get; }
  • public CustomAttribute(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class DeclSecurity : AbstractTable
  • public ushort Action { get; }
  • public uint Parent { get; }
  • public uint PermissionSet { get; }
  • public DeclSecurity(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Event : AbstractTable
  • public ushort EventFlags { get; }
  • public uint EventType { get; }
  • public uint Name { get; }
  • public Event(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class EventMap : AbstractTable
  • public uint EventList { get; }
  • public uint Parent { get; }
  • public EventMap(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class ExportedType : AbstractTable
  • public uint Flags { get; }
  • public uint TypeDefId { get; }
  • public uint TypeName { get; }
  • public uint TypeNamespace { get; }
  • public ExportedType(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Field : AbstractTable
  • public ushort Flags { get; }
  • public uint Name { get; }
  • public uint Signature { get; }
  • public Field(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class FieldLayout : AbstractTable
  • public uint Field { get; }
  • public uint Offset { get; }
  • public FieldLayout(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class FieldMarshal : AbstractTable
  • public uint NativeType { get; }
  • public uint Parent { get; }
  • public FieldMarshal(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class FieldRVA : AbstractTable
  • public uint Field { get; }
  • public uint RVA { get; }
  • public FieldRVA(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class File : AbstractTable
  • public uint Flags { get; }
  • public uint HashValue { get; }
  • public uint Name { get; }
  • public File(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class GenericParam : AbstractTable
  • public ushort Flags { get; }
  • public uint Name { get; }
  • public ushort Number { get; }
  • public uint Owner { get; }
  • public GenericParam(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class GenericParamConstraint : AbstractTable
  • public uint Constraint { get; }
  • public uint Owner { get; }
  • public GenericParamConstraint(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class ImplMap : AbstractTable
  • public uint ImportName { get; }
  • public uint ImportScope { get; }
  • public ushort MappingFlags { get; }
  • public uint MemberForwarded { get; }
  • public ImplMap(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class InterfaceImpl : AbstractTable
  • public uint Class { get; }
  • public uint Interface { get; }
  • public InterfaceImpl(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class ManifestResource : AbstractTable
  • public uint Flags { get; }
  • public uint Implementation { get; }
  • public uint Name { get; }
  • public uint Offset { get; }
  • public ManifestResource(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class MemberRef : AbstractTable
  • public uint Class { get; }
  • public uint Name { get; }
  • public uint Signature { get; }
  • public MemberRef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class MethodDef : AbstractTable
  • public ushort Flags { get; }
  • public ushort ImplFlags { get; }
  • public uint Name { get; }
  • public uint ParamList { get; }
  • public uint RVA { get; }
  • public uint Signature { get; }
  • public MethodDef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class MethodImpl : AbstractTable
  • public uint Class { get; }
  • public uint MethodBody { get; }
  • public uint MethodDeclaration { get; }
  • public MethodImpl(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class MethodSemantics : AbstractTable
  • public uint Association { get; }
  • public uint Method { get; }
  • public ushort Semantics { get; }
  • public MethodSemantics(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Module : AbstractTable
  • public uint EncBaseId { get; }
  • public uint EncId { get; }
  • public ushort Generation { get; }
  • public uint Mvid { get; }
  • public uint Name { get; }
  • public Module(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class ModuleRef : AbstractTable
  • public uint Name { get; }
  • public ModuleRef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class NestedClass : AbstractTable
  • public uint EnclosingClassType { get; }
  • public uint NestedClassType { get; }
  • public NestedClass(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Param : AbstractTable
  • public ushort Flags { get; }
  • public uint Name { get; }
  • public ushort Sequence { get; }
  • public Param(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Property : AbstractTable
  • public ushort Flags { get; }
  • public uint Name { get; }
  • public uint Type { get; }
  • public Property(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class PropertyMap : AbstractTable
  • public uint Parent { get; }
  • public uint PropertyList { get; }
  • public PropertyMap(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class StandAloneSig : AbstractTable
  • public uint Signature { get; }
  • public StandAloneSig(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class Tables
  • public List<Assembly> Assembly { get; set; }
  • public List<AssemblyOS> AssemblyOS { get; set; }
  • public List<AssemblyProcessor> AssemblyProcessor { get; set; }
  • public List<AssemblyRef> AssemblyRef { get; set; }
  • public List<AssemblyRefOS> AssemblyRefOS { get; set; }
  • public List<AssemblyRefProcessor> AssemblyRefProcessor { get; set; }
  • public List<ClassLayout> ClassLayout { get; set; }
  • public List<Constant> Constant { get; set; }
  • public List<CustomAttribute> CustomAttribute { get; set; }
  • public List<DeclSecurity> DeclSecurity { get; set; }
  • public List<Event> Event { get; set; }
  • public List<EventMap> EventMap { get; set; }
  • public List<ExportedType> ExportedType { get; set; }
  • public List<Field> Field { get; set; }
  • public List<FieldLayout> FieldLayout { get; set; }
  • public List<FieldMarshal> FieldMarshal { get; set; }
  • public List<FieldRVA> FieldRVA { get; set; }
  • public List<File> File { get; set; }
  • public List<GenericParam> GenericParam { get; set; }
  • public List<GenericParamConstraint> GenericParamConstraints { get; set; }
  • public List<ImplMap> ImplMap { get; set; }
  • public List<InterfaceImpl> InterfaceImpl { get; set; }
  • public List<ManifestResource> ManifestResource { get; set; }
  • public List<MemberRef> MemberRef { get; set; }
  • public List<MethodDef> MethodDef { get; set; }
  • public List<MethodImpl> MethodImpl { get; set; }
  • public List<MethodSemantics> MethodSemantic { get; set; }
  • public List<Module> Module { get; set; }
  • public List<ModuleRef> ModuleRef { get; set; }
  • public List<NestedClass> NestedClass { get; set; }
  • public List<Param> Param { get; set; }
  • public List<Property> Property { get; set; }
  • public List<PropertyMap> PropertyMap { get; set; }
  • public List<StandAloneSig> StandAloneSig { get; set; }
  • public List<TypeDef> TypeDef { get; set; }
  • public List<TypeRef> TypeRef { get; set; }
  • public List<TypeSpec> TypeSpec { get; set; }
  • public Tables()
• public class TypeDef : AbstractTable
  • public uint Extends { get; }
  • public uint FieldList { get; }
  • public uint Flags { get; }
  • public uint MethodList { get; }
  • public uint Name { get; }
  • public uint Namespace { get; }
  • public TypeDef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class TypeRef : AbstractTable
  • public uint ResolutionScope { get; }
  • public uint TypeName { get; }
  • public uint TypeNamespace { get; }
  • public TypeRef(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)
• public class TypeSpec : AbstractTable
  • public uint Signature { get; }
  • public TypeSpec(IRawFile peFile, long offset, HeapSizes heapSizes, IndexSize indexSizes)

PeNet.Header.Pe

• public enum ComFlagsType
  • BitRequired32 = 2
  • IlLibrary = 4
  • IlOnly = 1
  • NativeEntrypoint = 16
  • StrongNameSigned = 8
  • TrackDebugData = 65536
• public class Copyright : AbstractStructure
  • public string CopyrightString { get; }
  • public Copyright(IRawFile peFile, long offset)
• public enum DataDirectoryType
  • BaseReloc = 5
  • BoundImport = 11
  • ComDescriptor = 14
  • Copyright = 7
  • Debug = 6
  • DelayImport = 13
  • Exception = 3
  • Export = 0
  • Globalptr = 8
  • IAT = 12
  • Import = 1
  • LoadConfig = 10
  • Reserved = 15
  • Resource = 2
  • Security = 4
  • TLS = 9
• public enum DllCharacteristicsType
  • DynamicBase = 64
  • ForceIntegrity = 128
  • NoBind = 1025
  • NoIsolation = 512
  • NoSeh = 1024
  • NxCompat = 256
  • TerminalServerAware = 32768
  • WdmDriver = 8192
• public class ExportFunction
  • public uint Address { get; }
  • public string ForwardName { get; }
  • public bool HasForward { get; }
  • public bool HasName { get; }
  • public bool HasOrdinal { get; }
  • public string Name { get; }
  • public ushort Ordinal { get; }
  • public ExportFunction(string name, uint address, ushort ordinal)
  • public ExportFunction(string name, uint address, ushort ordinal, string forwardName)
• public enum FileCharacteristicsType
  • AggresiveWsTrim = 16
  • BitMachine32 = 256
  • BytesReversedHi = 32768
  • BytesReversedLo = 128
  • DebugStripped = 512
  • Dll = 8192
  • ExecutableImage = 2
  • LargeAddressAware = 32
  • LineNumsStripped = 4
  • LocalSymsStripped = 8
  • NetRunFromSwap = 2048
  • RelocsStripped = 1
  • RemovableRunFromSwap = 1024
  • System = 4096
  • UpSystemOnly = 16384
• public class ImageBaseRelocation : AbstractStructure
  • public class TypeOffset
  • public uint SizeOfBlock { get; set; }
  • public TypeOffset[] TypeOffsets { get; }
  • public uint VirtualAddress { get; set; }
  • public ImageBaseRelocation(IRawFile peFile, long offset, uint relocSize)
• public class ImageBoundImportDescriptor : AbstractStructure
  • public ushort NumberOfModuleForwarderRefs { get; set; }
  • public ushort OffsetModuleName { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ImageBoundImportDescriptor(IRawFile peFile, long offset)
• public class ImageCor20Header : AbstractStructure
  • public uint Cb { get; set; }
  • public ImageDataDirectory CodeManagerTable { get; }
  • public uint EntryPointRva { get; set; }
  • public uint EntryPointToken { get; set; }
  • public ImageDataDirectory ExportAddressTableJumps { get; }
  • public ComFlagsType Flags { get; }
  • public List<string> FlagsResolved { get; }
  • public ushort MajorRuntimeVersion { get; set; }
  • public ImageDataDirectory ManagedNativeHeader { get; }
  • public ImageDataDirectory MetaData { get; }
  • public ushort MinorRuntimeVersion { get; set; }
  • public ImageDataDirectory Resources { get; }
  • public ImageDataDirectory StrongNameSignature { get; }
  • public ImageDataDirectory VTableFixups { get; }
  • public ImageCor20Header(IRawFile peFile, long offset)
  • public static List<string> ResolveComFlags(ComFlagsType comFlags)
• public class ImageDataDirectory : AbstractStructure
  • public uint Size { get; set; }
  • public uint VirtualAddress { get; set; }
  • public ImageDataDirectory(IRawFile peFile, long offset)
• public class ImageDebugDirectory : AbstractStructure
  • public uint AddressOfRawData { get; set; }
  • public uint Characteristics { get; set; }
  • public CvInfoPdb70 CvInfoPdb70 { get; }
  • public ushort MajorVersion { get; set; }
  • public ushort MinorVersion { get; set; }
  • public uint PointerToRawData { get; set; }
  • public uint SizeOfData { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public uint Type { get; set; }
  • public ImageDebugDirectory(IRawFile peFile, long offset)
• public class ImageDelayImportDescriptor : AbstractStructure
  • public uint DwTimeStamp { get; set; }
  • public uint GrAttrs { get; set; }
  • public uint PBoundIAT { get; set; }
  • public uint Phmod { get; set; }
  • public uint PIat { get; set; }
  • public uint PInt { get; set; }
  • public uint PUnloadIAT { get; set; }
  • public uint SzName { get; set; }
  • public ImageDelayImportDescriptor(IRawFile peFile, long offset)
• public class ImageDosHeader : AbstractStructure
  • public ushort E_cblp { get; set; }
  • public ushort E_cp { get; set; }
  • public ushort E_cparhdr { get; set; }
  • public ushort E_crlc { get; set; }
  • public ushort E_cs { get; set; }
  • public ushort E_csum { get; set; }
  • public ushort E_ip { get; set; }
  • public uint E_lfanew { get; set; }
  • public ushort E_lfarlc { get; set; }
  • public ushort E_magic { get; set; }
  • public ushort E_maxalloc { get; set; }
  • public ushort E_minalloc { get; set; }
  • public ushort E_oemid { get; set; }
  • public ushort E_oeminfo { get; set; }
  • public ushort E_ovno { get; set; }
  • public ushort[] E_res { get; set; }
  • public ushort[] E_res2 { get; set; }
  • public ushort E_sp { get; set; }
  • public ushort E_ss { get; set; }
  • public ImageDosHeader(IRawFile peFile, long offset)
• public class ImageExportDirectory : AbstractStructure
  • public uint AddressOfFunctions { get; set; }
  • public uint AddressOfNameOrdinals { get; set; }
  • public uint AddressOfNames { get; set; }
  • public uint Base { get; set; }
  • public uint Characteristics { get; set; }
  • public ushort MajorVersion { get; set; }
  • public ushort MinorVersion { get; set; }
  • public uint Name { get; set; }
  • public uint NumberOfFunctions { get; set; }
  • public uint NumberOfNames { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ImageExportDirectory(IRawFile peFile, long offset)
• public class ImageFileHeader : AbstractStructure
  • public FileCharacteristicsType Characteristics { get; set; }
  • public List<string> CharacteristicsResolved { get; }
  • public MachineType Machine { get; set; }
  • public string MachineResolved { get; }
  • public ushort NumberOfSections { get; set; }
  • public uint NumberOfSymbols { get; set; }
  • public uint PointerToSymbolTable { get; set; }
  • public ushort SizeOfOptionalHeader { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ImageFileHeader(IRawFile peFile, long offset)
  • public static List<string> ResolveFileCharacteristics(FileCharacteristicsType characteristics)
  • public static string ResolveMachine(MachineType targetMachine)
• public class ImageImportByName : AbstractStructure
  • public ushort Hint { get; set; }
  • public string Name { get; set; }
  • public ImageImportByName(IRawFile peFile, uint offset)
• public class ImageImportDescriptor : AbstractStructure
  • public uint FirstThunk { get; set; }
  • public uint ForwarderChain { get; set; }
  • public uint Name { get; set; }
  • public uint OriginalFirstThunk { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ImageImportDescriptor(IRawFile peFile, long offset)
• public class ImageLoadConfigDirectory : AbstractStructure
  • public uint CriticalSectionDefaultTimeout { get; set; }
  • public ushort CSDVersion { get; set; }
  • public ulong DeCommitFreeBlockThreshold { get; set; }
  • public ulong DeCommitTotalFreeThreshold { get; set; }
  • public ulong EditList { get; set; }
  • public uint GlobalFlagsClear { get; set; }
  • public uint GlobalFlagsSet { get; set; }
  • public ulong GuardCFCheckFunctionPointer { get; set; }
  • public ulong GuardCFFunctionCount { get; set; }
  • public ulong GuardCFFunctionTable { get; set; }
  • public uint GuardFlags { get; set; }
  • public ulong LockPrefixTable { get; set; }
  • public ushort MajorVesion { get; set; }
  • public ulong MaximumAllocationSize { get; set; }
  • public ushort MinorVersion { get; set; }
  • public ulong ProcessAffinityMask { get; set; }
  • public uint ProcessHeapFlags { get; set; }
  • public ushort Reserved1 { get; set; }
  • public ulong Reserved2 { get; set; }
  • public ulong SecurityCoockie { get; set; }
  • public ulong SEHandlerCount { get; set; }
  • public ulong SEHandlerTable { get; set; }
  • public uint Size { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ulong VirtualMemoryThreshold { get; set; }
  • public ImageLoadConfigDirectory(IRawFile peFile, long offset, bool is64Bit)
• public class ImageNtHeaders : AbstractStructure
  • public readonly ImageFileHeader FileHeader
  • public readonly ImageOptionalHeader OptionalHeader
  • public uint Signature { get; set; }
  • public ImageNtHeaders(IRawFile peFile, long offset)
• public class ImageOptionalHeader : AbstractStructure
  • public readonly ImageDataDirectory[] DataDirectory
  • public uint AddressOfEntryPoint { get; set; }
  • public uint BaseOfCode { get; set; }
  • public uint BaseOfData { get; set; }
  • public uint CheckSum { get; set; }
  • public DllCharacteristicsType DllCharacteristics { get; set; }
  • public uint FileAlignment { get; set; }
  • public ulong ImageBase { get; set; }
  • public uint LoaderFlags { get; set; }
  • public MagicType Magic { get; set; }
  • public ushort MajorImageVersion { get; set; }
  • public byte MajorLinkerVersion { get; set; }
  • public ushort MajorOperatingSystemVersion { get; set; }
  • public ushort MajorSubsystemVersion { get; set; }
  • public ushort MinorImageVersion { get; set; }
  • public byte MinorLinkerVersion { get; set; }
  • public ushort MinorOperatingSystemVersion { get; set; }
  • public ushort MinorSubsystemVersion { get; set; }
  • public uint NumberOfRvaAndSizes { get; set; }
  • public uint SectionAlignment { get; set; }
  • public uint SizeOfCode { get; set; }
  • public uint SizeOfHeaders { get; set; }
  • public ulong SizeOfHeapCommit { get; set; }
  • public ulong SizeOfHeapReserve { get; set; }
  • public uint SizeOfImage { get; set; }
  • public uint SizeOfInitializedData { get; set; }
  • public ulong SizeOfStackCommit { get; set; }
  • public ulong SizeOfStackReserve { get; set; }
  • public uint SizeOfUninitializedData { get; set; }
  • public SubsystemType Subsystem { get; }
  • public string SubsystemResolved { get; }
  • public uint Win32VersionValue { get; set; }
  • public ImageOptionalHeader(IRawFile peFile, long offset, bool is64Bit)
  • public static string ResolveSubsystem(SubsystemType subsystem)
• public class ImageResourceDataEntry : AbstractStructure
  • public uint CodePage { get; set; }
  • public uint OffsetToData { get; set; }
  • public uint Reserved { get; set; }
  • public uint Size1 { get; set; }
  • public ImageResourceDataEntry(IRawFile peFile, long offset)
• public class ImageResourceDirectory : AbstractStructure
  • public readonly List<ImageResourceDirectoryEntry> DirectoryEntries
  • public uint Characteristics { get; set; }
  • public ushort MajorVersion { get; set; }
  • public ushort MinorVersion { get; set; }
  • public ushort NumberOfIdEntries { get; set; }
  • public ushort NumberOfNameEntries { get; set; }
  • public uint TimeDateStamp { get; set; }
  • public ImageResourceDirectory(IRawFile peFile, long offset, long resourceDirOffset)
• public class ImageResourceDirectoryEntry : AbstractStructure
  • public bool DataIsDirectory { get; }
  • public uint ID { get; set; }
  • public bool IsIdEntry { get; }
  • public bool IsNamedEntry { get; }
  • public uint Name { get; set; }
  • public string NameResolved { get; }
  • public uint OffsetToData { get; set; }
  • public uint OffsetToDirectory { get; }
  • public ImageResourceDataEntry ResourceDataEntry { get; }
  • public ImageResourceDirectory ResourceDirectory { get; }
  • public ImageResourceDirectoryEntry(IRawFile peFile, long offset, long resourceDirOffset)
  • public static string ResolveResourceId(uint id)
• public class ImageResourceDirStringU : AbstractStructure
  • public ushort Length { get; set; }
  • public string NameString { get; }
  • public ImageResourceDirStringU(IRawFile peFile, long offset)
• public class ImageSectionHeader : AbstractStructure
  • public ScnCharacteristicsType Characteristics { get; set; }
  • public List<string> CharacteristicsResolved { get; }
  • public ulong ImageBaseAddress { get; }
  • public string Name { get; set; }
  • public ushort NumberOfLinenumbers { get; set; }
  • public ushort NumberOfRelocations { get; set; }
  • public uint PointerToLinenumbers { get; set; }
  • public uint PointerToRawData { get; set; }
  • public uint PointerToRelocations { get; set; }
  • public uint SizeOfRawData { get; set; }
  • public uint VirtualAddress { get; set; }
  • public uint VirtualSize { get; set; }
  • public ImageSectionHeader(IRawFile peFile, long offset, ulong imageBaseAddress)
  • public static List<string> ResolveCharacteristics(ScnCharacteristicsType sectionFlags)
  • public byte[] ToArray()
• public class ImageThunkData : AbstractStructure
  • public ulong AddressOfData { get; set; }
  • public ulong ForwarderString { get; set; }
  • public ulong Function { get; set; }
  • public ulong Ordinal { get; set; }
  • public ImageThunkData(IRawFile peFile, uint offset, bool is64Bit)
• public class ImageTlsCallback : AbstractStructure
  • public ulong Callback { get; set; }
  • public ImageTlsCallback(IRawFile peFile, long offset, bool is64Bit)
• public class ImageTlsDirectory : AbstractStructure
  • public ulong AddressOfCallBacks { get; set; }
  • public ulong AddressOfIndex { get; set; }
  • public uint Characteristics { get; set; }
  • public ulong EndAddressOfRawData { get; set; }
  • public uint SizeOfZeroFill { get; set; }
  • public ulong StartAddressOfRawData { get; set; }
  • public ImageTlsCallback[] TlsCallbacks { get; set; }
  • public ImageTlsDirectory(IRawFile peFile, long offset, bool is64Bit)
• public class ImportFunction
  • public string DLL { get; }
  • public ushort Hint { get; }
  • public uint IATOffset { get; }
  • public string Name { get; }
  • public ImportFunction(string name, string dll, ushort hint, uint iatOffset)
• public enum MachineType
  • Alpha = 388
  • Alpha64 = 644
  • Am33 = 467
  • Amd64 = 34404
  • Arm = 448
  • Arm64 = 43620
  • ArmNt = 452
  • Axp64 = 644
  • Cee = 49390
  • Cef = 3311
  • Ebc = 3772
  • FreeBSDDotnet32 = 44168
  • FreeBSDDotnet64 = 11168
  • I386 = 332
  • I860 = 333
  • Ia64 = 512
  • LinuxDotnet32 = 18184
  • LinuxDotnet64 = 49184
  • M32R = 36929
  • M68K = 616
  • Mips16 = 614
  • MipsFpu = 870
  • MipsFpu16 = 1126
  • NetBSDDotnet32 = 6367
  • NetBSDDotnet64 = 40951
  • OldAlpha = 387
  • OsXDotnet32 = 31285
  • OsXDotnet64 = 64797
  • PowerPc = 496
  • PowerPcFp = 497
  • R10000 = 360
  • R3000 = 354
  • R4000 = 358
  • Sh3 = 418
  • Sh3Dsp = 419
  • Sh3E = 420
  • Sh4 = 422
  • Sh5 = 424
  • SunDotnet32 = 6366
  • SunDotnet64 = 40950
  • TargetHost = 1
  • Thumb = 450
  • TriCore = 1312
  • Unknown = 0
  • Wcemipsv2 = 361
• public enum MagicType
  • Bit32 = 267
  • Bit64 = 523
  • Rom = 263
• public enum ResourceGroupIdType
  • Accelerator = 9
  • AnimatedCurser = 21
  • AnimatedIcon = 22
  • Bitmap = 2
  • Cursor = 1
  • Dialog = 5
  • DlgInclude = 17
  • Fonst = 8
  • FontDirectory = 7
  • GroupIcon = 14
  • HTML = 23
  • Icon = 3
  • Manifest = 24
  • Menu = 4
  • MessageTable = 11
  • PlugAndPlay = 19
  • RcData = 10
  • String = 6
  • Version = 16
  • VXD = 20
• public class RuntimeFunction : AbstractStructure
  • public uint FunctionEnd { get; set; }
  • public uint FunctionStart { get; set; }
  • public UnwindInfo ResolvedUnwindInfo { get; }
  • public uint UnwindInfo { get; set; }
  • public RuntimeFunction(IRawFile peFile, long offset, ImageSectionHeader[] sh)
• public enum ScnCharacteristicsType
  • Align1024Bytes = 11534336
  • Align128Bytes = 8388608
  • Align16Bytes = 5242880
  • Align1Bytes = 1048576
  • Align2048Bytes = 12582912
  • Align256Bytes = 9437184
  • Align2Bytes = 2097152
  • Align32Bytes = 6291456
  • Align4096Bytes = 13631488
  • Align4Bytes = 3145728
  • Align512Bytes = 10485760
  • Align64Bytes = 7340032
  • Align8192Bytes = 14680064
  • Align8Bytes = 4194304
  • AlignMask = 15728640
  • CntCode = 32
  • CntInitializedData = 64
  • CntUninitializedData = 128
  • Gprel = 32768
  • LnkComdat = 4096
  • LnkInfo = 512
  • LnkNrelocOvfl = 16777216
  • LnkOther = 256
  • LnkRemove = 2048
  • Mem16Bit = 131072
  • MemDiscardable = 33554432
  • MemExecute = 536870912
  • MemFardata = 32768
  • MemLocked = 262144
  • MemNotCached = 67108864
  • MemNotPaged = 134217728
  • MemPreload = 524288
  • MemPurgeable = 131072
  • MemRead = 1073741824
  • MemShared = 268435456
  • MemWrite = 2147483648
  • NoDeferSpecExc = 16384
  • TypeNoPad = 8
• public enum SubsystemType
  • EfiApplication = 10
  • EfiBootServiceDriver = 11
  • EfiRom = 13
  • EfiRuntimeDriver = 12
  • Native = 1
  • Os2Cui = 5
  • PosixCui = 7
  • Unknown = 0
  • WindowsBootApplication = 16
  • WindowsCeGui = 9
  • WindowsCui = 3
  • WindowsGui = 2
  • Xbox = 14
• public class UnwindCode : AbstractStructure
  • public byte CodeOffset { get; set; }
  • public ushort FrameOffset { get; set; }
  • public byte Opinfo { get; }
  • public UnwindOpType UnwindOp { get; }
  • public UnwindCode(IRawFile peFile, long offset)
• public class UnwindInfo : AbstractStructure
  • public byte CountOfCodes { get; set; }
  • public uint ExceptionHandler { get; set; }
  • public byte Flags { get; }
  • public byte FrameOffset { get; }
  • public byte FrameRegister { get; }
  • public uint FunctionEntry { get; set; }
  • public byte SizeOfProlog { get; set; }
  • public UnwindCode[] UnwindCode { get; }
  • public byte Version { get; }
  • public UnwindInfo(IRawFile peFile, uint offset)
• public enum UnwindOpType
  • AllocLarge = 1
  • AllocSmall = 2
  • PushMachframe = 10
  • PushNonvol = 0
  • SaveNonvol = 4
  • SaveNonvolFar = 5
  • SaveXmm128 = 8
  • SaveXmm128Far = 9
  • SetFpreg = 3
• public class WinCertificate : AbstractStructure
  • public Span<byte> BCertificate { get; }
  • public uint DwLength { get; set; }
  • public WinCertificateType WCertificateType { get; set; }
  • public ushort WRevision { get; set; }
  • public WinCertificate(IRawFile peFile, long offset)
• public enum WinCertificateType
  • Pkcs1Sign = 9
  • PkcsSignedData = 2
  • Reserved1 = 3
  • X509 = 1

PeNet.Header.Resource

• public class CvInfoPdb70 : AbstractStructure
  • public uint Age { get; set; }
  • public uint CvSignature { get; set; }
  • public string PdbFileName { get; }
  • public Guid Signature { get; set; }
  • public CvInfoPdb70(IRawFile peFile, uint offset)
• public class Resources : AbstractStructure
  • public VsVersionInfo VsVersionInfo { get; }
  • public Resources(IRawFile peFile, long offset, uint vsVersionOffset)
• public class StringFileInfo : AbstractStructure
  • public StringTable[] StringTable { get; }
  • public string SzKey { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public StringFileInfo(IRawFile peFile, long offset)
• public class StringTable : AbstractStructure
  • public string Comments { get; }
  • public string CompanyName { get; }
  • public string FileDescription { get; }
  • public string FileVersion { get; }
  • public string InternalName { get; }
  • public string LegalCopyright { get; }
  • public string LegalTrademarks { get; }
  • public string OriginalFilename { get; }
  • public string PrivateBuild { get; }
  • public string ProductName { get; }
  • public string ProductVersion { get; }
  • public string SpecialBuild { get; }
  • public TString[] String { get; }
  • public string SzKey { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public StringTable(IRawFile peFile, long offset)
• public class TString : AbstractStructure
  • public string SzKey { get; }
  • public string Value { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public TString(IRawFile peFile, long offset)
• public class Var : AbstractStructure
  • public string SzKey { get; }
  • public uint[] Value { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public Var(IRawFile peFile, long offset)
• public class VarFileInfo : AbstractStructure
  • public Var[] Children { get; }
  • public string SzKey { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public VarFileInfo(IRawFile peFile, long offset)
• public class VsFixedFileInfo : AbstractStructure
  • public uint DwFileDateLS { get; set; }
  • public uint DwFileDateMS { get; set; }
  • public uint DwFileFlags { get; set; }
  • public uint DwFileFlagsMask { get; set; }
  • public uint DwFileOS { get; set; }
  • public uint DwFileSubType { get; set; }
  • public uint DwFileType { get; set; }
  • public uint DwFileVersionLS { get; set; }
  • public uint DwFileVersionMS { get; set; }
  • public uint DwProductVersionLS { get; set; }
  • public uint DwProductVersionMS { get; set; }
  • public uint DwSignature { get; set; }
  • public uint DwStrucVersion { get; set; }
  • public VsFixedFileInfo(IRawFile peFile, int offset)
• public class VsVersionInfo : AbstractStructure
  • public StringFileInfo StringFileInfo { get; }
  • public string SzKey { get; }
  • public VarFileInfo VarFileInfo { get; }
  • public VsFixedFileInfo VsFixedFileInfo { get; }
  • public ushort WLength { get; set; }
  • public ushort WType { get; set; }
  • public ushort WValueLength { get; set; }
  • public VsVersionInfo(IRawFile peFile, long offset)

PeNet.ImpHash

• public class ImportHash

PeNet.PatternMatching

• public class Trie : Trie<byte, string>
• public class Trie<T, TValue>

PeNet.Structures

• public abstract class AbstractStructure
• public class Copyright : AbstractStructure
• public class IMAGE_BASE_RELOCATION : AbstractStructure
• public class IMAGE_BOUND_IMPORT_DESCRIPTOR : AbstractStructure
• public class IMAGE_COR20_HEADER : AbstractStructure
• public class IMAGE_DATA_DIRECTORY : AbstractStructure
• public class IMAGE_DEBUG_DIRECTORY : AbstractStructure
• public class IMAGE_DELAY_IMPORT_DESCRIPTOR : AbstractStructure
• public class IMAGE_DOS_HEADER : AbstractStructure
• public class IMAGE_EXPORT_DIRECTORY : AbstractStructure
• public class IMAGE_FILE_HEADER : AbstractStructure
• public class IMAGE_IMPORT_BY_NAME : AbstractStructure
• public class IMAGE_IMPORT_DESCRIPTOR : AbstractStructure
• public class IMAGE_LOAD_CONFIG_DIRECTORY : AbstractStructure
• public class IMAGE_NT_HEADERS : AbstractStructure
• public class IMAGE_OPTIONAL_HEADER : AbstractStructure
• public class IMAGE_RESOURCE_DATA_ENTRY : AbstractStructure
• public class IMAGE_RESOURCE_DIR_STRING_U : AbstractStructure
• public class IMAGE_RESOURCE_DIRECTORY : AbstractStructure
• public class IMAGE_RESOURCE_DIRECTORY_ENTRY : AbstractStructure
• public class IMAGE_SECTION_HEADER : AbstractStructure
• public class IMAGE_THUNK_DATA : AbstractStructure
• public class IMAGE_TLS_CALLBACK : AbstractStructure
• public class IMAGE_TLS_DIRECTORY : AbstractStructure
• public interface IMETADATASTREAM_BLOB
• public interface IMETADATASTREAM_GUID
• public interface IMETADATASTREAM_STRING
• public interface IMETADATASTREAM_US
• public interface IMETADATATABLESHDR
• public class METADATAHDR : AbstractStructure
• public class METADATASTREAM_BLOB : IMETADATASTREAM_BLOB
• public class METADATASTREAM_GUID : AbstractStructure, IMETADATASTREAM_GUID
• public class METADATASTREAM_STRING : AbstractStructure, IMETADATASTREAM_STRING
• public class METADATASTREAM_US : AbstractStructure, IMETADATASTREAM_US
• public class METADATASTREAMHDR : AbstractStructure
• public class METADATATABLESHDR : AbstractStructure, IMETADATATABLESHDR
• public class RUNTIME_FUNCTION : AbstractStructure
• public class UNWIND_CODE : AbstractStructure
• public class UNWIND_INFO : AbstractStructure
• public class WIN_CERTIFICATE : AbstractStructure

PeNet.Structures.MetaDataTables

• public abstract class AbstractMetaDataTable<T> : AbstractStructure where T : AbstractMetaDataTableRow
• public abstract class AbstractMetaDataTableRow : AbstractStructure
• public class AssemblyRefTable : AbstractMetaDataTable<AssemblyRefTableRow>
• public class AssemblyRefTableRow : AbstractMetaDataTableRow
• public class MetaDataTableIndexComputation
• public class MetaDataTables
• public class ModuleTable : AbstractMetaDataTable<ModuleTableRow>
• public class ModuleTableRow : AbstractMetaDataTableRow

PeNet.Structures.MetaDataTables.Indices

• public class AbstractIndex
• public class HeapOffsetSizes : IHeapOffsetSizes
• public interface IHeapOffsetSizes
• public class TypeDefOrRef : AbstractIndex

PeNet.Utilities

• public static class ExtensionMethods
• public static class FlagResolver
• public static class Hashes
• public static class SignatureInformation