C# 클래스 PeNet.PeFile

This class represents a Portable Executable (PE) file and makes the different header and properties accessible.

공개 프로퍼티들

프로퍼티	타입	설명
Buff	byte[]

공개 메소드들

메소드	설명
GetCrlUrlList ( ) : CrlUrlList	Get an object which holds information about the Certificate Revocation Lists of the signing certificate if any is present.
GetFileType ( ) : string	Returns if the PE file is a EXE, DLL and which architecture is used (32/64). Architectures: "I386", "AMD64", "UNKNOWN" DllOrExe: "DLL", "EXE", "UNKNOWN"
Is32BitPeFile ( string file ) : bool	Returns if the file is a PE file and 32 Bit.
Is64BitPeFile ( string file ) : bool	Returns if the file is a PE file and 64 Bit.
IsPEFile ( string file ) : bool	Tests is a file is a PE file based on the MZ header. It is not checked if the PE file is correct in all other parts.
IsValidCertChain ( bool online ) : bool	Checks if cert is from a trusted CA with a valid certificate chain.
IsValidPEFile ( string file ) : bool	Tries to parse the PE file and checks all directories.
PeFile ( byte buff ) : System	Create a new PeFile object.
PeFile ( string peFile ) : System	Create a new PeFile object.
ToString ( ) : string	Creates a string representation of the objects properties.

메소드 상세

GetCrlUrlList() 공개 메소드

Get an object which holds information about the Certificate Revocation Lists of the signing certificate if any is present.

public GetCrlUrlList ( ) : CrlUrlList
리턴	CrlUrlList

GetFileType() 공개 메소드

Returns if the PE file is a EXE, DLL and which architecture is used (32/64). Architectures: "I386", "AMD64", "UNKNOWN" DllOrExe: "DLL", "EXE", "UNKNOWN"

public GetFileType ( ) : string
리턴	string

Is32BitPeFile() 공개 정적인 메소드

Returns if the file is a PE file and 32 Bit.

public static Is32BitPeFile ( string file ) : bool
file	string	Path to a possible PE file.
리턴	bool

Is64BitPeFile() 공개 정적인 메소드

Returns if the file is a PE file and 64 Bit.

public static Is64BitPeFile ( string file ) : bool
file	string	Path to a possible PE file.
리턴	bool

IsPEFile() 공개 정적인 메소드

Tests is a file is a PE file based on the MZ header. It is not checked if the PE file is correct in all other parts.

public static IsPEFile ( string file ) : bool
file	string	Path to a possible PE file.
리턴	bool

IsValidCertChain() 공개 메소드

Checks if cert is from a trusted CA with a valid certificate chain.

public IsValidCertChain ( bool online ) : bool
online	bool	Check certificate chain online or off-line.
리턴	bool

IsValidPEFile() 공개 정적인 메소드

Tries to parse the PE file and checks all directories.

public static IsValidPEFile ( string file ) : bool
file	string	Path to a possible PE file.
리턴	bool

PeFile() 공개 메소드

Create a new PeFile object.

public PeFile ( byte buff ) : System
buff	byte	A PE file a byte array.
리턴	System

PeFile() 공개 메소드

Create a new PeFile object.

public PeFile ( string peFile ) : System
peFile	string	Path to a PE file.
리턴	System

ToString() 공개 메소드

Creates a string representation of the objects properties.

public ToString ( ) : string
리턴	string

프로퍼티 상세

Buff 공개적으로 프로퍼티

The PE binary as a byte array.

public byte[] Buff
리턴	byte[]