PEHeaders Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Defines a type that reads PE (Portable Executable) and COFF (Common Object File Format) headers from a stream.
public ref class PEHeaders sealed
public sealed class PEHeaders
type PEHeaders = class
Public NotInheritable Class PEHeaders
- Inheritance
-
PEHeaders
Constructors
PEHeaders(Stream, Int32, Boolean) |
Instantiates a new instance of the PEHeaders class that reads the PE headers from a stream that represents a PE image of a specified size and indicates whether the PE image has been loaded into memory. |
PEHeaders(Stream, Int32) |
Instantiates a new instance of the PEHeaders class that reads the PE headers from a stream that represents a PE image of a specified size. |
PEHeaders(Stream) |
Instantiates a new instance of the PEHeaders class that reads the PE headers from the current location in the specified stream. |
Properties
CoffHeader |
Gets the COFF header of the image. |
CoffHeaderStartOffset |
Gets the byte offset from the start of the PE image to the start of the COFF header. |
CorHeader |
Gets the COR header. |
CorHeaderStartOffset |
Gets the byte offset from the start of the image to the COR header. |
IsCoffOnly |
Gets a value that indicates whether the image is Coff only. |
IsConsoleApplication |
Gets a value that indicates whether the image represents a Windows console application. |
IsDll |
Gets a value that indicates whether the image represents a dynamic link library. |
IsExe |
Gets a value that indicates whether the image represents an executable. |
MetadataSize |
Gets the size of the CLI metadata. |
MetadataStartOffset |
Gets the offset (in bytes) from the start of the PE image to the start of the CLI metadata. |
PEHeader |
Gets the image's PE header. |
PEHeaderStartOffset |
Gets the byte offset of the header from the start of the image. |
SectionHeaders |
Gets the PE section headers. |
Methods
Equals(Object) |
Determines whether the specified object is equal to the current object. (Inherited from Object) |
GetContainingSectionIndex(Int32) |
Searches sections of the PE image for the section that contains the specified Relative Virtual Address. |
GetHashCode() |
Serves as the default hash function. (Inherited from Object) |
GetType() |
Gets the Type of the current instance. (Inherited from Object) |
MemberwiseClone() |
Creates a shallow copy of the current Object. (Inherited from Object) |
ToString() |
Returns a string that represents the current object. (Inherited from Object) |
TryGetDirectoryOffset(DirectoryEntry, Int32) |
Gets the offset (in bytes) from the start of the image to the given directory data. |