PEReader Class
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Provides a reader for Portable Executable format (PE) files.
public ref class PEReader sealed : IDisposable
public sealed class PEReader : IDisposable
type PEReader = class
interface IDisposable
Public NotInheritable Class PEReader
Implements IDisposable
- Inheritance
-
PEReader
- Implements
The implementation is thread-safe. That is, multiple threads can read data from the reader in parallel. Disposal of the reader is not thread-safe (see Dispose()).
PEReader(Byte*, Int32, Boolean) |
Creates a Portable Executable reader over a PE image stored in memory. A flag indicates whether the image has already been loaded into memory. |
PEReader(Byte*, Int32) |
Creates a Portable Executable reader over a PE image stored in memory. |
PEReader(Immutable |
Creates a Portable Executable reader over a PE image stored in a byte array. |
PEReader(Stream, PEStream |
Creates a Portable Executable reader over a PE image of the given size beginning at the stream's current position. |
PEReader(Stream, PEStream |
Creates a Portable Executable reader over a PE image stored in a stream beginning at its current position and ending at the end of the stream. |
PEReader(Stream) |
Creates a Portable Executable reader over a PE image stored in a stream. |
Has |
Gets a value that indicates if the PE image contains CLI metadata. |
Is |
Gets a value that indicates if the reader can access the entire PE image. |
Is |
Gets a value that indicates if the PE image has been loaded into memory by the OS loader. |
PEHeaders |
Gets the PE headers. |
Dispose() |
Disposes all memory allocated by the reader. |
Equals(Object) |
Determines whether the specified object is equal to the current object. (Inherited from Object) |
Get |
Gets a PEMemoryBlock object containing the entire PE image. |
Get |
Serves as the default hash function. (Inherited from Object) |
Get |
Loads a PE section that contains CLI metadata. |
Get |
Loads the PE section that contains the specified relative virtual address into memory and returns a memory block that starts at that address and ends at the end of the containing section. |
Get |
Loads the PE section with the specified name into memory and returns a memory block that spans the section. |
Get |
Gets the Type of the current instance. (Inherited from Object) |
Memberwise |
Creates a shallow copy of the current Object. (Inherited from Object) |
Read |
Reads the data pointed to by the specified Debug Directory entry and interprets it as CodeView. |
Read |
Reads all Debug Directory table entries. |
Read |
Reads the data pointed to by the specified Debug Directory entry and interprets it as an Embedded Portable PDB blob. |
Read |
Reads the data pointed to by the specified Debug Directory entry and interprets it as a PDB Checksum entry. |
To |
Returns a string that represents the current object. (Inherited from Object) |
Try |
Opens a Portable PDB associated with this PE image. |
Get |
Gets a metadata reader with the specified metadata reading configuration and encoding configuration from a PEReader. |
Get |
Gets a metadata reader with the specified metadata reading configuration from a PEReader. |
Get |
Gets a MetadataReader from a PEReader. |
Get |
Returns a body block of a method with the specified Relative Virtual Address (RVA). |
Product | Versions |
---|---|
.NET | Core 1.0, Core 1.1, Core 2.0, Core 2.1, Core 2.2, Core 3.0, Core 3.1, 5, 6, 7, 8 (package-provided), 8, 9 (package-provided), 9 |
.NET Framework | 4.7 (package-provided), 4.7.1 (package-provided), 4.7.2 (package-provided), 4.8 (package-provided) |
.NET Standard | 2.0 (package-provided) |
UWP | 10.0 |
.NET feedback
.NET is an open source project. Select a link to provide feedback: