Describes several class libraries in. net pe format.

1. Mono. Cecil

The well-known mono. Cecil does not need to be introduced more. Anyone who does not need to use it can go to Baidu. There are also many related introductions in the blog Park.Article.

Home: http://www.mono-project.com/Cecil

 

2. Mono. petoolkit

It should be the predecessor of mono. Cecil, which is not as powerful as mono. Cecil, but it is enough to read. net pe files.

ProgramI can't find it. I didn't find it in SVN just now, so I had to upload the version I used to return from SVN. It's easy to use,

1 Mono. petoolkit. Image img =   New Mono. petoolkit. Image ("dotnet pe file path ");
2 IMG. open ();
3 IMG. readheaders ();
4 // Specific operations
5 IMG. Close ();

Source code download

 

3. ASMEX

The earlier tool to view. net pe format was well known and open-source, so many later tools were made based on the source code. HoweverCodeThe author has not fixed some bugs.

The specific usage will not be written. The source code is available.

The author's homepage seems to have been closed, and the post on codeproject is still in progress.

Download

 

4.. net pe File Format Library

A Vietnamese. net fans (rongchaua) Write A for reading. net pe format tool, write is relatively simple, to achieve most of the common functions, but the metadata flow that part does not seem to continue writing. In addition, no table is imported.

Author blog: http://rongchaua.net/blog/net-pe-file-format-library/

 

5. pe-file reader writer API (perwapi)

I accidentally found it on codeplex. If you are interested, study it yourself.

Home: http://perwapi.codeplex.com/

 

6. netpe

It is also a project on codeplex. Function is not bad.

Home: http://netpe.codeplex.com/

 

PS: Always do not leave among them, any of the above is based on the ECMA-335 standards to complete, so it is recommended that the best combination of ECMA-335 documentation to view. In addition, we suggest you download another CFF explorer, with the use of ECMA-335, to speed up the understanding of. net pe.

ECMA-335

CFF Explorer