Library for PE file parsing.
PEImage
PEImage
represents a parsed executable containing information about the file:
PEImage exe = PEImage.FromFile(@"C:\Windows\explorer.exe");
// Optional header
uint entryPoint = exe.OptionalHeader.AddressOfEntryPoint;
// Sections
foreach (ImageSection section in exe.Sections)
{
if (section.Header.Name == ".text")
{
byte[] code = section.Data;
}
}
- Initial release