Επεξεργασία

Κοινή χρήση μέσω


PEHeaders Class

Definition

Defines a type that reads PE (Portable Executable) and COFF (Common Object File Format) headers from a stream.

public ref class PEHeaders sealed
public sealed class PEHeaders
type PEHeaders = class
Public NotInheritable Class PEHeaders
Inheritance
PEHeaders

Constructors

PEHeaders(Stream, Int32, Boolean)

Instantiates a new instance of the PEHeaders class that reads the PE headers from a stream that represents a PE image of a specified size and indicates whether the PE image has been loaded into memory.

PEHeaders(Stream, Int32)

Instantiates a new instance of the PEHeaders class that reads the PE headers from a stream that represents a PE image of a specified size.

PEHeaders(Stream)

Instantiates a new instance of the PEHeaders class that reads the PE headers from the current location in the specified stream.

Properties

CoffHeader

Gets the COFF header of the image.

CoffHeaderStartOffset

Gets the byte offset from the start of the PE image to the start of the COFF header.

CorHeader

Gets the COR header.

CorHeaderStartOffset

Gets the byte offset from the start of the image to the COR header.

IsCoffOnly

Gets a value that indicates whether the image is Coff only.

IsConsoleApplication

Gets a value that indicates whether the image represents a Windows console application.

IsDll

Gets a value that indicates whether the image represents a dynamic link library.

IsExe

Gets a value that indicates whether the image represents an executable.

MetadataSize

Gets the size of the CLI metadata.

MetadataStartOffset

Gets the offset (in bytes) from the start of the PE image to the start of the CLI metadata.

PEHeader

Gets the image's PE header.

PEHeaderStartOffset

Gets the byte offset of the header from the start of the image.

SectionHeaders

Gets the PE section headers.

Methods

Equals(Object)

Determines whether the specified object is equal to the current object.

(Inherited from Object)
GetContainingSectionIndex(Int32)

Searches sections of the PE image for the section that contains the specified Relative Virtual Address.

GetHashCode()

Serves as the default hash function.

(Inherited from Object)
GetType()

Gets the Type of the current instance.

(Inherited from Object)
MemberwiseClone()

Creates a shallow copy of the current Object.

(Inherited from Object)
ToString()

Returns a string that represents the current object.

(Inherited from Object)
TryGetDirectoryOffset(DirectoryEntry, Int32)

Gets the offset (in bytes) from the start of the image to the given directory data.

Applies to