Namespace PeNet.Header.Pe

The ImageImportByName structure is used to describes imports of functions or symbols by their name. The AddressOfData in the ImageThunkData from the ImageImportDescriptor points to it.

ImageImportDescriptor

The ImageImportDescriptors are contained in the Import Directory and holds all the information about function and symbol imports.

ImageLoadConfigDirectory

The ImageLoadConfigDirectory hold information important to load the PE file correctly.

ImageNtHeaders

The NT header is the main header for modern Windows applications. It contains the file header and the optional header.

ImageOptionalHeader

Represents the optional header in the NT header.

ImageResourceDataEntry

The ImageResourceDataEntry points to the data of the resources in the PE file like version info, strings etc.

ImageResourceDirectory

The resource directory contains icons, mouse pointer, string language files etc. which are used by the application.

ImageResourceDirectoryEntry

The resource directory entry represents one entry (e.g. icon) in a resource directory.

ImageResourceDirStringU

Represents a Unicode string used for resource names in the resource section.

ImageSectionHeader

Represents the section header for one section.

ImageThunkData

The thunk data is used by for the imports in the import section.

ImageTlsCallback

Thread Local Storage callback.

ImageTlsDirectory

Thread Local Storage Directory.

ImportFunction

Represents an imported function.

RuntimeFunction

The runtime function struct is represents a function in the exception header for x64 applications.

UnwindCode

The UnwindCode is a struct in the UnwindInfo used to describe exception handling in x64 applications and to walk the stack.

UnwindInfo

The UnwindInfo is used for x64 exception handling and to unwind the stack. It is pointed to by the RuntimeFunction struct.

WinCertificate

The WinCertificate the information in the security directory of the PE file. It contains information about any certificates used to sign the binary.

Structs

Enums

ComFlagsType

ImageCor20Header Flags

DataDirectoryType

The data directory indices used to resolve which directory is which.

DebugDirectoryType

An image has potentially multiple entries of ImageDebugDirectory. This is the "Type" of an entry. Main source is winnt.h See https://docs.microsoft.com/en-us/windows/win32/debug/pe-format#debug-type and https://docs.microsoft.com/en-us/dotnet/api/system.reflection.portableexecutable.debugdirectoryentrytype?view=net-5.0