Structs§
- ClrData
- Representsa CLR data in a PE file
- ClrSection
Iterator - Iterator over
StorageStream(a CLR section) entries inCor20Header::metadata. - Cor20
Header - to .NET assemblies. This header is found in the COM descriptor directory of a PE file.
- Storage
Header - Represents the header structure for a storage section in .NET metadata. This structure contains information about the storage’s format and the number of streams.
- Storage
Signature - Represents the signature structure for a storage header in a .NET metadata stream. This structure identifies the version and format of the metadata.
- Storage
Stream - Represents an individual stream within the .NET storage section, which may contain metadata or other data specific to the .NET assembly structure.
Constants§
- COMIMAGE_
FLAGS_ 32BITPREFERRED Cor20Header::flags: Indicates that the assembly prefers a 32-bit environment if available, though it can run in a 64-bit environment if necessary.- COMIMAGE_
FLAGS_ 32BITREQUIRED Cor20Header::flags: Indicates that the assembly requires a 32-bit environment to run.- COMIMAGE_
FLAGS_ ILONLY Cor20Header::flags: Indicates that the assembly contains only IL (Intermediate Language) code.- COMIMAGE_
FLAGS_ IL_ LIBRARY Cor20Header::flags: Indicates that the assembly is a library, not a standalone executable.- COMIMAGE_
FLAGS_ NATIVE_ ENTRYPOINT Cor20Header::flags: Indicates that the entry point for the assembly is a native method.- COMIMAGE_
FLAGS_ STRONGNAMESIGNED Cor20Header::flags: Indicates that the assembly is signed with a strong name.- COMIMAGE_
FLAGS_ TRACKDEBUGDATA Cor20Header::flags: Indicates that debug information is tracked for the assembly.- COR_
DELETED_ NAME_ LENGTH - Indicates the length of a “deleted” name in the metadata.
- COR_
VERSION_ MAJOR Cor20Header::major_runtime_version: Indicates the default major runtime version for .NET.- COR_
VERSION_ MAJOR_ V2 Cor20Header::major_runtime_version: Indicates the major version of the .NET runtime.- COR_
VERSION_ MINOR Cor20Header::minor_runtime_version: Indicates the minor version of the .NET runtime.- COR_
VTABLEGAP_ NAME_ LENGTH - Indicates the length of a “vtable gap” name in the metadata.
- COR_
VTABLE_ 32BIT - Indicates that the vtable is 32-bit.
- COR_
VTABLE_ 64BIT - Indicates that the vtable is 64-bit.
- COR_
VTABLE_ CALL_ MOST_ DERIVED - Indicates that the vtable call invokes the most derived method.
- COR_
VTABLE_ FROM_ UNMANAGED - Indicates that the vtable is callable from unmanaged code.
- COR_
VTABLE_ FROM_ UNMANAGED_ RETAIN_ APPDOMAIN - Indicates that calls retain the AppDomain context when using unmanaged code.
- DOTNET_
SIGNATURE ClrData::signature: Indicates a valid signature gathered from first 4-bytes ofCor20Header::metadata('BSJB')