Namespace PeNet.Structures
Classes
AbstractStructure
Abstract class for a Windows structure.
Copyright
The copyright ASCII (not 0-terminated) string of the PE file if any is given.
CvInfoPdb70
Codeview PDB information from the Debug directory.
HeapSizes
Size of the meta data heaps.
IMAGE_BASE_RELOCATION
The IMAGE_BASE_RELOCATION structure holds information needed to relocate the image to another virtual address.
IMAGE_BASE_RELOCATION.TypeOffset
Represents the type and offset in an IMAGE_BASE_RELOCATION structure.
IMAGE_BOUND_IMPORT_DESCRIPTOR
Bound import descriptor.
IMAGE_COR20_HEADER
COM+ 2.0 (CLI) Header https://www.codeproject.com/Articles/12585/The-NET-File-Format
IMAGE_DATA_DIRECTORY
The IMAGE_DATA_DIRECTORY struct represents the data directory,
IMAGE_DEBUG_DIRECTORY
The IMAGE_DEBUG_DIRECTORY hold debug information about the PE file.
IMAGE_DELAY_IMPORT_DESCRIPTOR
The IMAGE_DELAY_IMPORT_DESCRIPTOR describes delayed imports.
IMAGE_DOS_HEADER
The IMAGE_DOS_HEADER with which every PE file starts.
IMAGE_EXPORT_DIRECTORY
The export directory contains all exported function, symbols etc. which can be used by other module.
IMAGE_FILE_HEADER
The File header contains information about the structure and properties of the PE file.
IMAGE_IMPORT_BY_NAME
The IMAGE_IMPORT_BY_NAME structure is used to describes imports of functions or symbols by their name. The AddressOfData in the IMAGE_THUNK_DATA from the IMAGE_IMPORT_DESCRIPTOR points to it.
IMAGE_IMPORT_DESCRIPTOR
The IMAGE_IMPORT_DESCRIPTORs are contained in the Import Directory and holds all the information about function and symbol imports.
IMAGE_LOAD_CONFIG_DIRECTORY
The IMAGE_LOAD_CONFIG_DIRECTORY hold information important to load the PE file correctly.
IMAGE_NT_HEADERS
The NT header is the main header for modern Windows applications. It contains the file header and the optional header.
IMAGE_OPTIONAL_HEADER
Represents the optional header in the NT header.
IMAGE_RESOURCE_DATA_ENTRY
The IMAGE_RESOURCE_DATA_ENTRY points to the data of the resources in the PE file like version info, strings etc.
IMAGE_RESOURCE_DIR_STRING_U
Represents a Unicode string used for resource names in the resource section.
IMAGE_RESOURCE_DIRECTORY
The resource directory contains icons, mouse pointer, string language files etc. which are used by the application.
IMAGE_RESOURCE_DIRECTORY_ENTRY
The resource directory entry represents one entry (e.g. icon) in a resource directory.
IMAGE_SECTION_HEADER
Represents the section header for one section.
IMAGE_THUNK_DATA
The thunk data is used by for the imports in the import section.
IMAGE_TLS_CALLBACK
Thread Local Storage callback.
IMAGE_TLS_DIRECTORY
Thread Local Storage Directory.
IndexSize
METADATAHDR
The Meta Data Header is part of the .Net/CLI (COM+ 2) header and is reachable from the .Net/CLI (COM+2) header IMAGE_COR20_HEADER. It contains information about embedded streams (sections) in the .Net assembly.
METADATASTREAM_BLOB
METADATASTREAM_GUID
Represents the "GUID" meta data stream from the .Net header which contains all application GUIDs to idenfitfy different assembly versions.
METADATASTREAM_STRING
Represents the "String" meta data stream from the .Net header which contains all application interal strings.
METADATASTREAM_US
Represents the "US" (user string) meta data stream from the .Net header which contains all application interal strings.
METADATASTREAMHDR
The Meta Data Stream Header contains information about data streams (sections) in a .Net assembly.
METADATATABLESHDR
The Meta Data Tables Header contains information about all present data tables in the .Net assembly.
Resources
Parsed version of the Resource data directory.
RUNTIME_FUNCTION
The runtime function struct is represents a function in the exception header for x64 applications.
StringFileInfo
Describes the data representation in a file-version resource. Information about different languages and codes pages is contained in this structure.
StringTable
One ore more StringTable structures, where each tables szKey indicates the language and code page for displaying the text in the StringTable.
TString
Contains a string that describes specifics of a file. For example the version, copyright information or original file name.
UNWIND_CODE
The UNWIND_CODE is a struct in the UNWIND_INFO used to describe exception handling in x64 applications and to walk the stack.
UNWIND_INFO
The UNWIND_INFO is used for x64 exception handling and to unwind the stack. It is pointed to by the RUNTIME_FUNCTION struct.
Var
Usually a list of languages that the application or DLL supports.
VarFileInfo
Information about the file not dependent on any language and code page combination.
VS_FIXEDFILEINFO
Language and code page independent version information about the PE file.
VS_VERSIONINFO
Optional Resource member which contains version information and compile time information about the PE file.
WIN_CERTIFICATE
The WIN_CERTIFICATE the information in the security directory of the PE file. It contains information about any certificates used to sign the binary.
Structs
METADATATABLESHDR.MetaDataTableInfo
Represents an table definition entry from the list of available tables in the Meta Data Tables Header in the .Net header of an assembly.