AsmResolver.PE
Provides members for constructing a PE file from a PE image.
Assembles a new PE file based on a PE image.
The image to assemble.
The assembled PE file.
Provides a mechanism for constructing PE files from images containing .NET metadata.
This PE builder is focused on .NET images only, and assumes that every input PE image is either a fully .NET
image with only architecture independent code (CIL), or contains native methods that are fully well-defined,
i.e. they are represented by a single segment. Any method definition in the metadata table that references a
native method body of which the size is not explicitly defined will cause an exception. This class also might
replace rows in the method and/or field RVA metadata tables with new ones containing the updated references to
method bodies and/or field data. All remaining metadata in the tables stream and in the other metadata streams
is written as-is without any change or verification.
This class might modify the final imports directory (exposed by the property),
as well as the base relocations directory (exposed by the property). In
particular, it might add or remove the entry to mscoree.dll!_CorExeMain or mscoree.dll!_CorDllMain,
depending on the machine type specified by the property.
This class builds up at most four PE sections; .text, .sdata, .rsrc and .reloc,
similar to what a normal .NET language compiler would emit. Almost everything is put into the .text section,
including the import and debug directories. The win32 resources are put into .rsrc section, and this
section will only be added if there is at least one entry in the root resource directory of the
property. Similarly, the .sdata section is only added if at least
one unmanaged export is added to the PE image. Finally, the .reloc section is only added if at least
one base relocation was put into the directory, or when the CLR bootstrapper requires one.
Creates a new managed PE file builder with default settings.
Creates a new managed PE file builder with the provided error listener.
Gets or sets the object responsible for recording diagnostic information during the building process.
Builds up the main text section (.text) of the new .NET PE file.
The working space of the builder.
The .text section.
Creates the .sdata section containing the exports and vtables directory of the new .NET PE file.
The working space of the builder.
The section.
Creates the win32 resources section (.rsrc) of the new .NET PE file.
The working space of the builder.
The resources section.
Creates the base relocations section (.reloc) of the new .NET PE file.
The working space of the builder.
The base relocations section.
Adds all method bodies referenced by the method metadata table to the PE file.
The context for the new PE file.
The tables stream to get the method body RVAs from.
Adds all segments referenced by the FieldRva metadata table to the PE file.
The context for the new PE file.
The tables stream to get the Field RVAs from.
Provides a mechanism for building up a method body table that can be stored in a PE file.
Creates a new method body table buffer.
Gets a value determining whether the buffer has any methods added to it.
Adds a CIL method body to the buffer.
The method body to add.
Adds a native method body to the buffer.
The method body to add.
The byte-boundary to align the body to.
Provides a base for a PE file builder.
Provides a base for a PE file builder.
The type that this builder uses to store intermediate values in.
Creates a new context for temporary storage of intermediate values during the construction of a PE image.
The image to build.
The context.
Creates the sections of the PE image.
The object containing the intermediate values used during the PE file construction.
The sections.
Creates the data directory headers stored in the optional header of the PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file that contains the sections.
The data directories.
Gets the relative virtual address (RVA) to the entry point of the PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file.
The relative virtual address to the entry point.
Gets the file alignment for the new PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file.
The file alignment. This should be a power of 2 between 512 and 64,000.
Gets the section alignment for the new PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file.
The section alignment. Must be greater or equal to the file alignment. Default is the page size for
the architecture.
Gets the image base for the new PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file.
The image base.
Updates the fields in the file header and optional header of the PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file to update.
Updates the fields in the optional header of the PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file to update.
Updates the fields in the file header of the PE file.
The object containing the intermediate values used during the PE file construction.
The (incomplete) PE file to update.
Populates all buffers with data from the input image.
The builder context.
Populates the import directory buffer.
The builder context.
Populates the debug directory buffer.
The builder context.
Populates the exports directory buffer.
The builder context.
Populates the resources directory buffer.
The builder context.
Populates the base relocations directory buffer.
The builder context.
Gets the required alignment of a field RVA, according to the CoreCLR ECMA-335 augments.
The context from which the field type will be resolved.
The field RVA row.
The required alignment of the field, or 0 if it could not be determined.
Provides a working space for constructing a portable executable file.
Creates a new PE file builder context.
The image to build.
Gets the input PE image to construct a file for.
Gets the target platform of the image.
Gets the buffer that builds up a new import lookup and address directory.
Gets the buffer that builds up a new export directory.
Gets the buffer that builds up a new debug directory.
Gets the buffer that builds up the win32 resources directory.
Gets the buffer that builds up the base relocations directory.
Gets the code segment used as a native entry point of the resulting PE file.
This property might be null if no bootstrapper is to be emitted. For example, since the
bootstrapper is a legacy feature from older versions of the CLR, we do not see this segment in
managed PE files targeting 64-bit architectures.
Gets the object responsible for reading a field RVA data.
Gets a table containing all constants used as initial values for fields defined in the .NET assembly.
Gets a table containing method bodies for methods defined in the .NET assembly.
Represents a buffer of code trampolines used to redirect functions stored in address tables such as import
address tables and VTable fixups.
Creates a new buffer for the designated platform.
The platform.
Gets a value indicating whether the trampoline table will require dynamic initialization.
Currently, this is only the case if data slots are added to the table.
When the buffer has data initializers registered, gets the symbol for the main initializer of the trampoline.
Gets or sets the symbol to kernel32.dll!VirtualProtect that is used during dynamic initialization of the
trampolined table.
Adds a new trampoline for the provided function table slot symbol.
The function table slot to redirect.
The function table slot to redirect to.
Adds an initializer for the provided data table slot symbol.
The original data table slot to initialize.
The data table slot to initialize the original slot with.
Applies the trampoline address patches to the provided PE file.
The file to patch.
Applies the trampoline address patches to the provided PE file sections.
The sections to patch.
Obtains the base relocations that are required to be applied on all the generated trampoline code.
The base relocations.
Provides a mechanism for constructing PE files containing unmanaged code or metadata, based on a template PE file.
This PE file builder attempts to preserve as much data as possible in the original executable file, and is well
suited for input binaries that contain unmanaged code and/or depend on raw offsets, RVAs or similar. However, it
may therefore not necessarily produce the most space-efficient output binaries, and may leave in original data
directories or sometimes entire PE sections that are no longer in use.
This class might modify the final imports directory (exposed by the property),
as well as the base relocations directory (exposed by the property). In
particular, it might add or remove the entry to mscoree.dll!_CorExeMain or mscoree.dll!_CorDllMain,
and it may also add a reference to kernel32.dll!VirtualProtect in case dynamic initializers need to be
injected to initialize reconstructed some parts of the original import address tables (IATs).
By default, the Import Address Table (IATs) and .NET's VTable Fixup Table are not reconstructed and are preserved.
When changing any imports or VTable fixups in the PE image, set the appropriate or
properties to true. This will instruct the builder to patch the original
address tables and trampoline them to their new layout. This may also result in the builder injecting additional
initializer code to be inserted in .auxtext, depending on the type of imports that are present. This
initialization code is added as a TLS callback to the final PE file.
This class will add at most 5 new auxiliary sections to the final output PE file, next to the sections that were
already present in the input PE file, to fit in reconstructed data directories that did not fit in the original
location.
Creates a new unmanaged PE file builder.
Creates a new unmanaged PE file builder using the provided error listener.
The error listener to use.
Creates a new unmanaged PE file builder using the provided error listener and base PE file.
The error listener to use.
The template file to base the resulting file on.
Gets or sets the service used for registering exceptions that occur during the construction of the PE.
Gets or sets the template file to base the resulting file on.
Gets or sets a value indicating whether the imports directory of the new file is supposed to be reconstructed
and that the old, existing imports directory should be patched and rewired via trampolines.
Gets or sets a value indicating whether the VTable fixups directory of the new file is supposed to be
reconstructed and that the old, existing VTable fixups directory should be patched and rewired via trampolines.
Gets or sets the service that is used for determining whether an imported symbol is a function or a data symbol.
This is required when is set to true and the IAT is reconstructed.
Builds up an auxiliary main text section (.auxtext) of the new .NET PE file when necessary.
The working space of the builder.
The new .text section, or null if no auxiliary text section was required.
Creates an auxiliary .rdata section containing a TLS data directory, its template data and callback function
table (when present in the image).
The working space of the builder.
The new .rdata section.
Creates the .sdata section containing the exports, vtable fixup tokens, and the TLS index.
The working space of the builder.
The section.
Creates the win32 resources section (.rsrc) of the new .NET PE file.
The working space of the builder.
The resources section.
Creates the base relocations section (.reloc) of the new .NET PE file.
The working space of the builder.
The base relocations section.
Adds all method bodies referenced by the method metadata table to the PE file.
The context for the new PE file.
The tables stream to get the method body RVAs from.
Adds all segments referenced by the FieldRva metadata table to the PE file.
The context for the new PE file.
The tables stream to get the Field RVAs from.
Provides a workspace for .
Creates a new builder context.
The image to build a PE file for.
The template image to base the file on.
Gets a collection of sections that were cloned from the template file.
Gets the template image to base the file on.
Gets the trampolines table for all imported symbols.
Gets the trampolines table for all fixed up managed method addresses.
Searches for a cloned section containing the provided RVA.
The RVA.
The section.
true if the section was found, false otherwise.
When derived from this class, represents a single certificate in the attribute certificate data directory of
a signed portable executable file.
Defines the size of a single header of a certificate.
Gets the revision of the file format that is used for this certificate.
Gets the type of the certificate.
Gets a value indicating whether the raw contents of the signature can be read using a
instance.
Creates a binary reader that reads the raw contents of the stored signature.
The reader.
Gets the total size in bytes of the certificate contents itself, excluding the header.
The number of bytes.
Writes the contents of the certificate to the provided output stream.
The output stream.
Represents the collection of attribute certificates that are stored in a signed portable executable file.
Provides members describing all possible file format revisions that can be used in an attribute certificate entry.
Indicates version 1.0 of the file format is used.
Indicates version 2.0 of the file format is used.
Provides members describing all possible certificate types a single attribute certificate in a signed portable
executable file can contain.
Indicates the contents of the attribute is a X.509 certificate.
Indicates the contents of the attribute is a PKCS#7 SignedData structure.
Reserved.
Indicates the contents of the attribute is a Terminal Server Protocol stack certificate.
Represents an attribute certificate that contains a custom or unsupported certificate type or file format.
Creates a new custom attribute certificate with the provided contents.
The certificate type to store.
The certificate data.
Creates a new custom attribute certificate with the provided contents.
The revision of the file format to use.
The certificate type to store.
The certificate data.
Gets or sets the raw contents of the certificate.
Provides a default implementation of an attribute certificate reader. This reader defaults to instantiating
if an unknown or unsupported file format is encountered.
Gets the singleton instance of the class.
Provides members for reading and interpreting the contents of an attribute certificate in a signed
portable executable file.
Reads a single attribute certificate.
The context in which the reader is situated in.
The file format revision to use.
The type of certificate to read.
The reader pointing to the start of the raw data of the certificate.
The read attribute certificate.
Provides information about a symbol referenced within a segment for which the final RVA is yet to be determined.
Creates a new instance of the structure.
The offset relative to the start of the code segment pointing to the reference.
The type of fixup to apply at the offset.
The reference to write the RVA for.
Gets the offset relative to the start of the code segment pointing to the reference.
Gets the type of fixup to apply at the offset.
Gets the object that is referenced at the offset.
Provides extensions to that adds patch overloads to quickly construct instances of
.
Adds an address fixup to the list of patches to apply.
The segment to add the patch to.
The offset to start writing the address at, relative to the start of the segment.
The type of address to write.
The reference to write the RVA for.
The patched segment.
Adds an address fixup to the list of patches to apply.
The segment to add the patch to.
The offset to start writing the address at, relative to the start of the segment.
The type of address to write.
The offset within the segment to point to, relative to the start of the segment.
The patched segment.
Adds an address fixup to the list of patches to apply.
The segment to add the patch to.
The fixup to apply.
The patched segment.
Implements a patch that patches a segment with an address to a symbol.
Creates a new instance of the class.
The fixup to apply.
Gets the fixup to apply.
Defines all possible address fixup types that can be applied in an .
Indicates the fixup writes a 32-bit absolute address at the provided offset.
Indicates the fixup writes a 64-bit absolute address at the provided offset.
Indicates the fixup writes a 32-bit address relative to the instruction pointer at the provided offset.
Represents a chunk of native code in a portable executable.
Creates a new segment of native code.
The raw native code stream.
Creates a new segment of native code.
The base address of the image the segment is going to be stored in.
The raw native code stream.
Gets the base address of the image the segment is stored in.
Gets or sets the raw native code stream.
Gets a collection of fixups that need to be applied upon writing the code to the output stream.
This includes addresses to imported symbols and global fields stored in data sections.
Provides a mechanism for building a debug directory in a portable executable (PE) file.
Gets the segment buffer that contains all the data streams referenced by the debug directory.
Gets a value indicating whether the buffer has no entries added to it.
Adds a debug data entry to the buffer.
The entry.
Represents a debug data stream using the CodeView format
Get uniquely identifying signature for PDB format
Creates a new CodeViewDataSegment depending on CodeView Signature
Context for the reader
The input stream to read from.
Enum of the different CodeView Signatures
RSDS Format Signature
NB05 Format Signature
NB09 Format Signature
NB10 Format Signature
NB11 Format Signature
Represents a debug data stream with a custom or unsupported format, wrapping an instance of
into a .
Creates a new instance of the class.
The format of the data.
The contents of the code.
Gets or sets the raw data of the segment.
Represents a single entry in the debug data directory.
Gets the static size of a single debug data entry header.
Initializes an empty instance.
Creates a new instance of the class.
The contents.
Reserved, must be zero.
Gets or sets the time and date that the debug data was created.
Gets or sets the major version number of the debug data format.
Gets or sets the minor version number of the debug data format.
Gets or sets the raw contents of the debug data entry.
Obtains the contents of the entry.
The contents.
This method is called upon initialization of the property.
Provides members defining all possible debug type data that is stored in a debug directory entry.
Indicates an unknown value that is ignored by all tools.
Indicates the COFF debug information (line numbers, symbol table, and string table).
This type of debug information is also pointed to by fields in the file headers.
Indicates the Visual C++ debug information type.
Indicates frame pointer omission (FPO) information. This information tells the debugger how to
interpret nonstandard stack frames, which use the EBP register for a purpose other than as a frame pointer.
Indicates the location of a DBG file.
Indicates a copy of .pdata section.
Reserved.
Indicates a mapping from an RVA in image to an RVA in source image.
Indicates a mapping from an RVA in source image to an RVA in image.
Reserved for Borland.
Reserved.
Reserved.
Indicates additional Visual C++ debug information.
Indicates Profile Guided Optimization data.
Indicates Look into Incremental Link Time Code Generation (ILTCG) data.
Reserved.
Indicates PE determinism or reproducibility.
Indicates extended DLL characteristics bits.
Provides a default implementation of the interface.
Gets the singleton instance of the class.
Represents the contents of an empty debug data entry.
Creates a new empty debug data segment for the provided debug data content.
The content type.
Provides members for reading a stream stored in the debug data directory of a PE image.
Reads the contents of a single debug data entry.
The reader context.
The type of data.
The input stream to read from.
The debug data, or null if the debug data could not be read.
Represents a segment referenced by an entry in a debug data directory.
Gets the type of debug data stored in the segment.
Represents the CodeView data in RSDS format
Gets the minimal expected data size for the rsds format
Initializes a new instance of
Context for the reader
The input stream to read from.
Gets the PDB Signature
Gets or sets the PDB GUID
Gets or sets the PDB age
Gets or sets the PDB path
Provides an implementation of a debug data entry that was stored in a PE file.
Reads a single debug data entry from an input stream.
The reading context.
The input stream.
Provides a mechanism for encoding CIL instructions to an output stream.
Creates a new CIL instruction encoder.
The output stream to write the encoded instructions to.
The object to use for creating raw operands.
Creates a new CIL instruction encoder.
The output stream to write the encoded instructions to.
The object to use for creating raw operands.
The name of the method that is being serialized.
The object used for recording error listener.
Creates a new CIL instruction encoder.
The output stream to write the encoded instructions to.
The object to use for creating raw operands.
A delegate that is used for lazily obtaining the name of the method body.
The object used for recording error listener.
Writes a collection of CIL instructions to the output stream.
The instructions to write.
Writes a single instruction to the output stream.
The instruction to write.
Provides members defining all possible numerical values for each CIL operation code.
See also:
Do nothing (No operation).
See also:
Inform a debugger that a breakpoint has been reached.
See also:
Load argument 0 onto the stack.
See also:
Load argument 1 onto the stack.
See also:
Load argument 2 onto the stack.
See also:
Load argument 3 onto the stack.
See also:
Load local variable 0 onto stack.
See also:
Load local variable 1 onto stack.
See also:
Load local variable 2 onto stack.
See also:
Load local variable 3 onto stack.
See also:
Pop a value from stack into local variable 0.
See also:
Pop a value from stack into local variable 1.
See also:
Pop a value from stack into local variable 2.
See also:
Pop a value from stack into local variable 3.
See also:
Load argument onto the stack, short form.
See also:
Fetch the address of argument, short form.
See also:
Store value to the argument numbered, short form.
See also:
Load local variable of index onto stack, short form.
See also:
Load address of local variable with index, short form.
See also:
Pop a value from stack into local variable with index, short form.
See also:
Push a null reference on the stack.
See also:
Push -1 onto the stack as int32.
See also:
Push 0 onto the stack as int32.
See also:
Push 1 onto the stack as int32.
See also:
Push 2 onto the stack as int32.
See also:
Push 3 onto the stack as int32.
See also:
Push 4 onto the stack as int32.
See also:
Push 5 onto the stack as int32.
See also:
Push 6 onto the stack as int32.
See also:
Push 7 onto the stack as int32.
See also:
Push 8 onto the stack as int32.
See also:
Push num onto the stack as int32, short form.
See also:
Push num of type int32 onto the stack as int32.
See also:
Push num of type int64 onto the stack as int64.
See also:
Push num of type float32 onto the stack as F.
See also:
Push num of type float64 onto the stack as F.
See also:
Duplicate the value on the top of the stack.
See also:
Pop value from the stack.
See also:
Exit current method and jump to the specified method.
See also:
Call method described by method.
See also:
Call method indicated on the stack with arguments described by a calling convention.
See also:
Return from method, possibly with a value.
See also:
Branch to target, short form.
See also:
Branch to target if value is zero (false), short form.
See also:
Branch to target if value is non-zero (true), short form.
See also:
Branch to target if equal, short form.
See also:
Branch to target if greater than or equal to, short form.
See also:
Branch to target if greater than, short form.
See also:
Branch to target if less than or equal to, short form.
See also:
Branch to target if less than, short form.
See also:
Branch to target if unequal or unordered, short form.
See also:
Branch to target if greater than or equal to (unsigned or unordered), short form.
See also:
Branch to target if greater than (unsigned or unordered), short form.
See also:
Branch to target if less than or equal to (unsigned or unordered), short form.
See also:
Branch to target if less than (unsigned or unordered), short form.
See also:
Branch to target.
See also:
Branch to target if value is zero (false).
See also:
Branch to target if value is non-zero (true).
See also:
Branch to target if equal.
See also:
Branch to target if greater than or equal to.
See also:
Branch to target if greater than.
See also:
Branch to target if less than or equal to.
See also:
Branch to target if less than.
See also:
Branch to target if unequal or unordered.
See also:
Branch to target if greater than or equal to (unsigned or unordered).
See also:
Branch to target if greater than (unsigned or unordered).
See also:
Branch to target if less than or equal to (unsigned or unordered).
See also:
Branch to target if less than (unsigned or unordered).
See also:
Jump to one of n values.
See also:
Indirect load value of type int8 as int32 on the stack.
See also:
Indirect load value of type unsigned int8 as int32 on the stack.
See also:
Indirect load value of type int16 as int32 on the stack.
See also:
Indirect load value of type unsigned int16 as int32 on the stack.
See also:
Indirect load value of type int32 as int32 on the stack.
See also:
Indirect load value of type unsigned int32 as int32 on the stack.
See also:
Indirect load value of type signed or unsigned int64 as signed int64 on the stack.
See also:
Indirect load value of type native int as native int on the stack.
See also:
Indirect load value of type float32 as F on the stack.
See also:
Indirect load value of type float64 as F on the stack.
See also:
Indirect load value of type object ref as O on the stack.
See also:
Store value of type object ref (type O) into memory at address.
See also:
Store value of type int8 into memory at address.
See also:
Store value of type int16 into memory at address.
See also:
Store value of type int32 into memory at address.
See also:
Store value of type int64 into memory at address.
See also:
Store value of type float32 into memory at address.
See also:
Store value of type float64 into memory at address.
See also:
Add two values, returning a new value.
See also:
Subtract value2 from value1, returning a new value.
See also:
Multiply values.
See also:
Divide two values to return a quotient or floating-point result.
See also:
Divide two values, unsigned, returning a quotient.
See also:
Remainder when dividing one value by another.
See also:
Remainder when dividing one unsigned value by another.
See also:
Bitwise AND of two integral values, returns an integral value.
See also:
Bitwise OR of two integer values, returns an integer.
See also:
Bitwise XOR of integer values, returns an integer.
See also:
Shift an integer left (shifting in zeros), return an integer.
See also:
Shift an integer right (shift in sign), return an integer.
See also:
Shift an integer right (shift in zero), return an integer.
See also:
Negate value.
See also:
Bitwise complement (logical not).
See also:
Convert to int8, pushing int32 on stack.
See also:
Convert to int16, pushing int32 on stack.
See also:
Convert to int32, pushing int32 on stack.
See also:
Convert to int64, pushing int64 on stack.
See also:
Convert to float32, pushing F on stack.
See also:
Convert to float64, pushing F on stack.
See also:
Convert to unsigned int32, pushing int32 on stack.
See also:
Convert to unsigned int64, pushing int64 on stack.
See also:
Call a method associated with an object.
See also:
Copy a value type from src to dest.
See also:
Copy the value stored at address src to the stack.
See also:
Push a string object for the literal string.
See also:
Allocate an uninitialized object or value type and call ctor.
See also:
Cast obj to class.
See also:
Test if obj is an instance of class, returning null or an instance of that class or interface.
See also:
Convert unsigned integer to floating-point, pushing F on stack.
See also:
Extract a value-type from obj, its boxed representation, and push a controlled-mutability managed pointer to it to the top of the stack.
See also:
Throw an exception.
See also:
Push the value of field of object (or value type) obj, onto the stack.
See also:
Push the address of field of object obj on the stack.
See also:
Replace the value of field of the object obj with value.
See also:
Push the value of the static field on the stack.
See also:
Push the address of the static field, field, on the stack.
See also:
Replace the value of the static field.
See also:
Store a value at an address.
See also:
Convert unsigned to an int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert unsigned to a native int (on the stack as native int) and throw an exception on overflow.
See also:
Convert unsigned to a native unsigned int (on the stack as native int) and throw an exception on overflow.
See also:
Convert a boxable value to its boxed form.
See also:
Create a new array with elements of type etype.
See also:
Push the length (of type native unsigned int) of array on the stack.
See also:
Load the address of element at index onto the top of the stack.
See also:
Load the element with type int8 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int8 at index onto the top of the stack as an int32.
See also:
Load the element with type int16 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int16 at index onto the top of the stack as an int32.
See also:
Load the element with type int32 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int32 at index onto the top of the stack as an int32.
See also:
Load the element with type signed or unsigned int64 at index onto the top of the stack as a signed int64.
See also:
Load the element with type native int at index onto the top of the stack as a native int.
See also:
Load the element with type float32 at index onto the top of the stack as an F.
See also:
Load the element with type float64 at index onto the top of the stack as an F.
See also:
Load the element at index onto the top of the stack as an O. The type of the O is the same as the element type of the array pushed on the CIL stack.
See also:
Replace array element at index with the i value on the stack.
See also:
Replace array element at index with the int8 value on the stack.
See also:
Replace array element at index with the int16 value on the stack.
See also:
Replace array element at index with the int32 value on the stack.
See also:
Replace array element at index with the int64 value on the stack.
See also:
Replace array element at index with the float32 value on the stack.
See also:
Replace array element at index with the float64 value on the stack.
See also:
Replace array element at index with the ref value on the stack.
See also:
Load the element at index onto the top of the stack.
See also:
Replace array element at index with the value on the stack.
See also:
Extract a value-type from obj, its boxed representation, and copy to the top of the stack.
See also:
Convert to an int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert to an unsigned int64 (on the stack as int64) and throw an exception on overflow.
See also:
Push the address stored in a typed reference.
See also:
Throw ArithmeticException if value is not a finite number.
See also:
Push a typed reference to ptr of type class onto the stack.
See also:
Convert metadata token to its runtime representation.
See also:
Convert to unsigned int16, pushing int32 on stack.
See also:
Convert to unsigned int8, pushing int32 on stack.
See also:
Convert to native int, pushing native int on stack.
See also:
Convert to a native int (on the stack as native int) and throw an exception on overflow.
See also:
Convert to a native unsigned int (on the stack as native int) and throw an exception on overflow.
See also:
Add signed integer values with overflow check.
See also:
Add unsigned integer values with overflow check.
See also:
Multiply signed integer values. Signed result shall fit in same size.
See also:
Multiply unsigned integer values. Unsigned result shall fit in same size.
See also:
Subtract native int from a native int. Signed result shall fit in same size.
See also:
Subtract native unsigned int from a native unsigned int. Unsigned result shall fit in same size.
See also:
End finally clause of an exception block.
See also:
Exit a protected region of code.
See also:
Exit a protected region of code, short form.
See also:
Store value of type native int into memory at address.
See also:
Convert to native unsigned int, pushing native int on stack.
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
Return argument list handle for the current method.
See also:
Push 1 (of type int32) if value1 equals value2, else push 0.
See also:
Push 1 (of type int32) if value1 greater that value2, else push 0.
See also:
Push 1 (of type int32) if value1 greater that value2, unsigned or unordered, else push 0.
See also:
Push 1 (of type int32) if value1 lower than value2, else push 0.
See also:
Push 1 (of type int32) if value1 lower than value2, unsigned or unordered, else push 0.
See also:
Push a pointer to a method referenced by method, on the stack.
See also:
Push address of virtual method on the stack.
See also:
Load argument onto the stack.
See also:
Fetch the address of the argument indexed.
See also:
Store value to the argument.
See also:
Load local variable of index onto stack.
See also:
Load address of local variable with index index.
See also:
Pop a value from stack into local variable index.
See also:
Allocate space from the local memory pool.
See also:
End an exception handling filter clause.
See also:
Subsequent pointer instruction might be unaligned.
See also:
Subsequent pointer reference is volatile.
See also:
Subsequent call terminates current method.
See also:
Initialize the value at address dest.
See also:
Call a virtual method on a type constrained to be type T.
See also:
Copy data from memory to memory.
See also:
Set all bytes in a block of memory to a given byte value.
See also:
Rethrow the current exception.
See also:
Push the size, in bytes, of a type as an unsigned int32.
See also:
Push the type token stored in a typed reference.
See also:
Specify that the subsequent array address operation performs no type check at runtime, and that it returns a controlled-mutability managed pointer.
See also:
Provides extensions for the enum.
Transforms the raw CIL code to a .
The code to convert.
The operation code.
Provides a mechanism for decoding CIL instructions from an input stream.
Creates a new CIL disassembler using the provided input stream.
The input stream to read the code from.
Creates a new CIL disassembler using the provided input stream.
The input stream to read the code from.
The object responsible for resolving operands.
Gets or sets a value indicating whether branch targets should be resolved to
where possible.
Reads all instructions from the input stream.
The instructions.
Reads the next instruction from the input stream.
The instruction.
Represents a single section that is appended to the end of a CIL method body, containing additional metadata
such as exception handlers.
This class does not do any verification on the actual contents of the section.
Creates a new extra section that can be appended to a method body.
The attributes associated to this section.
The raw contents of the section.
Gets or sets the attributes associated to this section.
This property does not update automatically if more sections are added to- or removed from the enclosing
method body.
Gets or sets a value indicating the section contains an exception handler table.
Gets or sets a value indicating the sectio contains an OptIL table.
Gets or sets a value indicating the data stored in the section is using the fat format.
Gets or sets a value indicating there is at least one more section following this section.
This property does not update automatically if more sections are added to- or removed from the enclosing
method body.
Gets or sets the actual contents of the section.
Reads a single extra section from the provided input stream.
The input stream to read from.
The extra section that was read.
Defines all possible flags that an extra section in a method body can set.
Indicates the extra section contains an exception handler table.
Indicates the extra section contains an OptIL table (not supported anymore by the CLR).
Indicates the extra section uses the fat format to store its data.
Indicates at least one more section follows this extra section.
Provides members defining all flow control categories of a CIL operation code.
Indicates the operation is an unconditional branching operation.
Indicates the operation is a debugger break operation.
Indicates the operation calls a method, and returns afterwards to the next instruction.
Indicates the operation is a conditional branching operation.
Indicates the operation provides information about a subsequent instruction.
Indicates the operation has no special flow control properties and will execute the next instruction
in the instruction stream.
Reserved.
Indicates the operation exits the current method, and potentially returns a value.
Indicates the operation throws an exception.
Represents a single instruction in a managed CIL method body.
Creates a new CIL instruction with no operand.
The operation to perform.
This constructor does not do any verification on the correctness of the instruction.
Creates a new CIL instruction with no operand.
The offset of the instruction, relative to the start of the method body's code.
The operation to perform.
This constructor does not do any verification on the correctness of the instruction.
Creates a new CIL instruction with an operand..
The operation to perform.
The operand.
This constructor does not do any verification on the correctness of the instruction.
Creates a new CIL instruction with an operand..
The offset of the instruction, relative to the start of the method body's code.
The operation to perform.
The operand.
This constructor does not do any verification on the correctness of the instruction.
Gets or sets the offset to the start of the instruction, relative to the start of the code.
Gets or sets the operation to perform.
Gets or sets the operand of the instruction, if available.
Gets the size in bytes of the CIL instruction.
Create a new instruction pushing the provided integer value, using the smallest possible operation code and
operand size.
The constant to push.
The instruction.
Determines the smallest possible operation code and operand required to push the provided integer constant.
The constant to push.
The operation code and operand.
Determines whether the provided instruction is considered equal to the current instruction.
The instruction to compare against.
true if the instructions are equal, false otherwise.
Creates a new label to the current instruction.
The label.
Determines whether the instruction is using a variant of the ldloc opcodes.
Determines whether the instruction is using a variant of the stloc opcodes.
Determines whether the instruction is using a variant of the ldarg opcodes.
Determines whether the instruction is using a variant of the starg opcodes.
Determines whether the instruction is a branching instruction (either conditional or unconditional).
Determines whether the instruction is an unconditional branch instruction.
Determines whether the instruction is a conditional branch instruction.
Determines whether the instruction is an instruction pushing an int32 constant onto the stack.
When this instruction is an ldc.i4 variant, gets the in32 constant that is being pushed onto the stack.
Replaces the operation code used by the instruction with a new one, and clears the operand.
The new operation code.
This method may be useful when patching a method body, where reusing the instruction object is favourable.
This can prevent breaking any references to the instruction (e.g. branch or exception handler targets).
Replaces the operation code and operand used by the instruction with new ones.
The new operation code.
The new operand.
This method may be useful when patching a method body, where reusing the instruction object is favourable.
This can prevent breaking any references to the instruction (e.g. branch or exception handler targets).
Clears the operand and replaces the operation code with a (No-Operation).
This method may be useful when patching a method body, where reusing the instruction object is favourable.
This can prevent breaking any references to the instruction (e.g. branch or exception handler targets).
Provides extensions to collections of .
Searches for an instruction with the given offset.
The list of instructions.
The offset of the instruction to find.
The index the instruction is located at, or -1 if an instruction with the provided offset could not
be found.
Requires the offsets of the instructions pre-calculated.
Searches for an instruction with the given offset.
The list of instructions.
The offset of the instruction to find.
The instruction with the provided offset, or null if none could be found.
Requires the offsets of the instructions pre-calculated.
Provides the default implementation of the interface.
Gets the default instance of the class.
Formats a CIL offset as a label.
The offset.
The formatted string.
Formats an operation code.
The operation code to format.
The formatted string.
Formats an operand to a human readable string.
The type of operand to format.
The operand to format.
The formatted string.
Occurs when the provided operand type is not valid.
Formats an operand as an or
.
The operand to format.
The formatted string.
Formats an operand as an or
.
The operand to format.
The formatted string.
Formats an integer operand.
The operand to format.
The formatted string.
Formats an integer operand.
The operand to format.
The formatted string.
Formats a reference to a stand-alone signature.
The operand to format.
The formatted string.
Formats a raw metadata token.
The token to format.
The formatted string.
Formats a switch table operand.
The operand to format.
The formatted string.
Formats a string operand.
The operand to format.
The formatted string.
Formats a branch target operand.
The operand to format.
The formatted string.
Formats a reference to a member.
The operand to format.
The formatted string.
Represents a label that references an instruction by its instruction object in a CIL method body.
Creates a new instruction label thar references no instruction yet.
Creates a new instruction label.
The instruction to reference.
Gets or sets the referenced instruction.
Provides all possible flags that can be set in the first (two) byte(s) of a CIL method body.
Indicates the method body is using the tiny format.
Indicates the method body is using the fat format.
Indicates more sections follow after the raw code of the method body.
Indicates all locals defined in the method body should be initialized to zero by the runtime.
Represents a label to a CIL instruction referenced by a fixed offset relative to the start of the CIL method body.
Creates a new fixed offset CIL label.
The offset of the instruction to reference.
Describes the operation that a single CIL instruction performs.
Determines whether two operation codes encode the same operation.
The first operation code.
The second operation code.
true if the same operation code is encoded, false otherwise.
Determines whether two operation codes do not encode the same operation.
The first operation code.
The second operation code.
true if a different operation code is encoded, false otherwise.
Gets a value indicating whether the opcode is valid and interpreted by the runtime.
Gets the mnemonic of the operation code.
Gets the value of the operation code.
Gets a value indicating whether the operation code is large or not. If this value is true, the code
needs two bytes to be encoded, otherwise it only needs one.
Gets the size in bytes of the operation code.
This does not include the operand of the instruction.
Gets the first byte that appears in the instruction stream encoding this operation.
Gets the second byte that appears in the instruction stream encoding this operation.
This property only has meaning if is true.
Gets a value indicating the stack push behaviour of the instruction.
Gets a value indicating the stack pop behaviour of the instruction.
Gets a value indicating the category of the operation code.
Gets a value indicating the category of the operand.
Gets a value indicating the flow control behaviour of the operation.
Determines whether the provided operation code is encoding the same operation.
The other operation code.
true if the same operation code is encoded, false otherwise.
Provides members defining the entire CIL instruction set.
See also:
Gets a sorted list of all single-byte operation codes.
Gets a sorted list of all multi-byte operation codes.
Do nothing (No operation).
See also:
Inform a debugger that a breakpoint has been reached.
See also:
Load argument 0 onto the stack.
See also:
Load argument 1 onto the stack.
See also:
Load argument 2 onto the stack.
See also:
Load argument 3 onto the stack.
See also:
Load local variable 0 onto stack.
See also:
Load local variable 1 onto stack.
See also:
Load local variable 2 onto stack.
See also:
Load local variable 3 onto stack.
See also:
Pop a value from stack into local variable 0.
See also:
Pop a value from stack into local variable 1.
See also:
Pop a value from stack into local variable 2.
See also:
Pop a value from stack into local variable 3.
See also:
Load argument onto the stack, short form.
See also:
Fetch the address of argument, short form.
See also:
Store value to the argument numbered, short form.
See also:
Load local variable of index onto stack, short form.
See also:
Load address of local variable with index, short form.
See also:
Pop a value from stack into local variable with index, short form.
See also:
Push a null reference on the stack.
See also:
Push -1 onto the stack as int32.
See also:
Push 0 onto the stack as int32.
See also:
Push 1 onto the stack as int32.
See also:
Push 2 onto the stack as int32.
See also:
Push 3 onto the stack as int32.
See also:
Push 4 onto the stack as int32.
See also:
Push 5 onto the stack as int32.
See also:
Push 6 onto the stack as int32.
See also:
Push 7 onto the stack as int32.
See also:
Push 8 onto the stack as int32.
See also:
Push num onto the stack as int32, short form.
See also:
Push num of type int32 onto the stack as int32.
See also:
Push num of type int64 onto the stack as int64.
See also:
Push num of type float32 onto the stack as F.
See also:
Push num of type float64 onto the stack as F.
See also:
Duplicate the value on the top of the stack.
See also:
Pop value from the stack.
See also:
Exit current method and jump to the specified method.
See also:
Call method described by method.
See also:
Call method indicated on the stack with arguments described by a calling convention.
See also:
Return from method, possibly with a value.
See also:
Branch to target, short form.
See also:
Branch to target if value is zero (false), short form.
See also:
Branch to target if value is non-zero (true), short form.
See also:
Branch to target if equal, short form.
See also:
Branch to target if greater than or equal to, short form.
See also:
Branch to target if greater than, short form.
See also:
Branch to target if less than or equal to, short form.
See also:
Branch to target if less than, short form.
See also:
Branch to target if unequal or unordered, short form.
See also:
Branch to target if greater than or equal to (unsigned or unordered), short form.
See also:
Branch to target if greater than (unsigned or unordered), short form.
See also:
Branch to target if less than or equal to (unsigned or unordered), short form.
See also:
Branch to target if less than (unsigned or unordered), short form.
See also:
Branch to target.
See also:
Branch to target if value is zero (false).
See also:
Branch to target if value is non-zero (true).
See also:
Branch to target if equal.
See also:
Branch to target if greater than or equal to.
See also:
Branch to target if greater than.
See also:
Branch to target if less than or equal to.
See also:
Branch to target if less than.
See also:
Branch to target if unequal or unordered.
See also:
Branch to target if greater than or equal to (unsigned or unordered).
See also:
Branch to target if greater than (unsigned or unordered).
See also:
Branch to target if less than or equal to (unsigned or unordered).
See also:
Branch to target if less than (unsigned or unordered).
See also:
Jump to one of n values.
See also:
Indirect load value of type int8 as int32 on the stack.
See also:
Indirect load value of type unsigned int8 as int32 on the stack.
See also:
Indirect load value of type int16 as int32 on the stack.
See also:
Indirect load value of type unsigned int16 as int32 on the stack.
See also:
Indirect load value of type int32 as int32 on the stack.
See also:
Indirect load value of type unsigned int32 as int32 on the stack.
See also:
Indirect load value of type signed or unsigned int64 as signed int64 on the stack.
See also:
Indirect load value of type native int as native int on the stack.
See also:
Indirect load value of type float32 as F on the stack.
See also:
Indirect load value of type float64 as F on the stack.
See also:
Indirect load value of type object ref as O on the stack.
See also:
Store value of type object ref (type O) into memory at address.
See also:
Store value of type int8 into memory at address.
See also:
Store value of type int16 into memory at address.
See also:
Store value of type int32 into memory at address.
See also:
Store value of type int64 into memory at address.
See also:
Store value of type float32 into memory at address.
See also:
Store value of type float64 into memory at address.
See also:
Add two values, returning a new value.
See also:
Subtract value2 from value1, returning a new value.
See also:
Multiply values.
See also:
Divide two values to return a quotient or floating-point result.
See also:
Divide two values, unsigned, returning a quotient.
See also:
Remainder when dividing one value by another.
See also:
Remainder when dividing one unsigned value by another.
See also:
Bitwise AND of two integral values, returns an integral value.
See also:
Bitwise OR of two integer values, returns an integer.
See also:
Bitwise XOR of integer values, returns an integer.
See also:
Shift an integer left (shifting in zeros), return an integer.
See also:
Shift an integer right (shift in sign), return an integer.
See also:
Shift an integer right (shift in zero), return an integer.
See also:
Negate value.
See also:
Bitwise complement (logical not).
See also:
Convert to int8, pushing int32 on stack.
See also:
Convert to int16, pushing int32 on stack.
See also:
Convert to int32, pushing int32 on stack.
See also:
Convert to int64, pushing int64 on stack.
See also:
Convert to float32, pushing F on stack.
See also:
Convert to float64, pushing F on stack.
See also:
Convert to unsigned int32, pushing int32 on stack.
See also:
Convert to unsigned int64, pushing int64 on stack.
See also:
Call a method associated with an object.
See also:
Copy a value type from src to dest.
See also:
Copy the value stored at address src to the stack.
See also:
Push a string object for the literal string.
See also:
Allocate an uninitialized object or value type and call ctor.
See also:
Cast obj to class.
See also:
Test if obj is an instance of class, returning null or an instance of that class or interface.
See also:
Convert unsigned integer to floating-point, pushing F on stack.
See also:
Extract a value-type from obj, its boxed representation, and push a controlled-mutability managed pointer to it to the top of the stack.
See also:
Throw an exception.
See also:
Push the value of field of object (or value type) obj, onto the stack.
See also:
Push the address of field of object obj on the stack.
See also:
Replace the value of field of the object obj with value.
See also:
Push the value of the static field on the stack.
See also:
Push the address of the static field, field, on the stack.
See also:
Replace the value of the static field.
See also:
Store a value at an address.
See also:
Convert unsigned to an int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert unsigned to an unsigned int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert unsigned to a native int (on the stack as native int) and throw an exception on overflow.
See also:
Convert unsigned to a native unsigned int (on the stack as native int) and throw an exception on overflow.
See also:
Convert a boxable value to its boxed form.
See also:
Create a new array with elements of type etype.
See also:
Push the length (of type native unsigned int) of array on the stack.
See also:
Load the address of element at index onto the top of the stack.
See also:
Load the element with type int8 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int8 at index onto the top of the stack as an int32.
See also:
Load the element with type int16 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int16 at index onto the top of the stack as an int32.
See also:
Load the element with type int32 at index onto the top of the stack as an int32.
See also:
Load the element with type unsigned int32 at index onto the top of the stack as an int32.
See also:
Load the element with type signed or unsigned int64 at index onto the top of the stack as a signed int64.
See also:
Load the element with type native int at index onto the top of the stack as a native int.
See also:
Load the element with type float32 at index onto the top of the stack as an F.
See also:
Load the element with type float64 at index onto the top of the stack as an F.
See also:
Load the element at index onto the top of the stack as an O. The type of the O is the same as the element type of the array pushed on the CIL stack.
See also:
Replace array element at index with the i value on the stack.
See also:
Replace array element at index with the int8 value on the stack.
See also:
Replace array element at index with the int16 value on the stack.
See also:
Replace array element at index with the int32 value on the stack.
See also:
Replace array element at index with the int64 value on the stack.
See also:
Replace array element at index with the float32 value on the stack.
See also:
Replace array element at index with the float64 value on the stack.
See also:
Replace array element at index with the ref value on the stack.
See also:
Load the element at index onto the top of the stack.
See also:
Replace array element at index with the value on the stack.
See also:
Extract a value-type from obj, its boxed representation, and copy to the top of the stack.
See also:
Convert to an int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int8 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int16 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an unsigned int32 (on the stack as int32) and throw an exception on overflow.
See also:
Convert to an int64 (on the stack as int64) and throw an exception on overflow.
See also:
Convert to an unsigned int64 (on the stack as int64) and throw an exception on overflow.
See also:
Push the address stored in a typed reference.
See also:
Throw ArithmeticException if value is not a finite number.
See also:
Push a typed reference to ptr of type class onto the stack.
See also:
Convert metadata token to its runtime representation.
See also:
Convert to unsigned int16, pushing int32 on stack.
See also:
Convert to unsigned int8, pushing int32 on stack.
See also:
Convert to native int, pushing native int on stack.
See also:
Convert to a native int (on the stack as native int) and throw an exception on overflow.
See also:
Convert to a native unsigned int (on the stack as native int) and throw an exception on overflow.
See also:
Add signed integer values with overflow check.
See also:
Add unsigned integer values with overflow check.
See also:
Multiply signed integer values. Signed result shall fit in same size.
See also:
Multiply unsigned integer values. Unsigned result shall fit in same size.
See also:
Subtract native int from a native int. Signed result shall fit in same size.
See also:
Subtract native unsigned int from a native unsigned int. Unsigned result shall fit in same size.
See also:
End finally clause of an exception block.
See also:
Exit a protected region of code.
See also:
Exit a protected region of code, short form.
See also:
Store value of type native int into memory at address.
See also:
Convert to native unsigned int, pushing native int on stack.
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
This prefix opcode is reserved and currently not implemented in the runtime
See also:
Return argument list handle for the current method.
See also:
Push 1 (of type int32) if value1 equals value2, else push 0.
See also:
Push 1 (of type int32) if value1 greater that value2, else push 0.
See also:
Push 1 (of type int32) if value1 greater that value2, unsigned or unordered, else push 0.
See also:
Push 1 (of type int32) if value1 lower than value2, else push 0.
See also:
Push 1 (of type int32) if value1 lower than value2, unsigned or unordered, else push 0.
See also:
Push a pointer to a method referenced by method, on the stack.
See also:
Push address of virtual method on the stack.
See also:
Load argument onto the stack.
See also:
Fetch the address of the argument indexed.
See also:
Store value to the argument.
See also:
Load local variable of index onto stack.
See also:
Load address of local variable with index index.
See also:
Pop a value from stack into local variable index.
See also:
Allocate space from the local memory pool.
See also:
End an exception handling filter clause.
See also:
Subsequent pointer instruction might be unaligned.
See also:
Subsequent pointer reference is volatile.
See also:
Subsequent call terminates current method.
See also:
Initialize the value at address dest.
See also:
Call a virtual method on a type constrained to be type T.
See also:
Copy data from memory to memory.
See also:
Set all bytes in a block of memory to a given byte value.
See also:
Rethrow the current exception.
See also:
Push the size, in bytes, of a type as an unsigned int32.
See also:
Push the type token stored in a typed reference.
See also:
Specify that the subsequent array address operation performs no type check at runtime, and that it returns a controlled-mutability managed pointer.
See also:
Provides members for all operation code categories.
Deprecated, should not be used.
Indicates the operation code is a macro instruction that expands to another instruction, but taking less space.
Indicates the operation code is a reserved instruction.
Indicates the operation code applies to objects.
Indicates the operation code is a prefix to another instruction.
Indicates the operation code is a built-in primitive instruction.
Provides members defining all categories of operands that each CIL instruction can have.
Indicates the CIL instruction has a branch target (a signed 32-bit offset relative to the next instruction's
offset) as operand.
Indicates the CIL instruction has a metadata token referencing a field as operand.
Indicates the CIL instruction has a single 32-bit integer as operand.
Indicates the CIL instruction has a single 64-bit integer as operand.
Indicates the CIL instruction has a metadata token referencing a method as operand.
Indicates the CIL instruction has no operand.
Indicates the CIL instruction has a list of phi variables as operand.
This operand type is not used in the default CIL instruction set, and is only meant to be used by the
runtime itself.
Indicates the CIL instruction has a 64-bit floating point number as operand.
Indicates the CIL instruction has a metadata token referencing a standalone signature as operand.
Indicates the CIL instruction has a metadata token referencing a string in the #US stream as operand.
Indicates the CIL instruction has a jump table (an array of 32-bit offsets relative to the next instruction's
offset) as operand.
Indicates the CIL instruction has a metadata token referencing a type or member as operand.
Indicates the CIL instruction has a metadata token referencing a type as operand.
Indicates the CIL instruction has a 16-bit variable index as operand.
Indicates the CIL instruction has a short branch target (a signed 8-bit offset relative to the next
instruction's offset) as operand.
Indicates the CIL instruction has a signed 8-bit integer as operand.
Indicates the CIL instruction has a 32-bit floating point number as operand.
Indicates the CIL instruction has an 8-bit variable index as operand.
Indicates the CIL instruction has a 16-bit parameter index as operand.
Indicates the CIL instruction has an 8-bit parameter index as operand.
Represents a CIL method body using the fat format.
The fat method body format is used when a CIL method body's code size is larger than 64 bytes, has local
variables, its max stack size is greater than 8, or uses extra sections (e.g. for storing exception handlers).
This class does not do any encoding/decoding of the bytes that make up the actual CIL instructions, nor does
it do any verification of the code.
Creates a new fat method body.
The attributes associated to the method body.
The maximum amount of values that can be pushed onto the stack.
The metadata token that defines the local variables for the method body.
The raw code of the method.
Gets or sets the attributes associated to the method body.
This property always has the flag set.
Gets or sets a value indicating whether the method body stores extra sections.
This property does not automatically update when is changed.
Gets or sets a value indicating whether all locals defined by this method body should be initialized
to zero by the runtime upon starting execution of the method body.
Gets or sets a value indicating the maximum amount of values that can be pushed onto the stack by the
code stored in the method body.
Gets or sets the metadata token referencing a signature that defines all local variables in the method body.
Gets a collection of extra metadata sections that are appended to the method body.
These sections are used to encode any exception handler in the method body.
Reads a raw method body from the given binary input stream using the fat method body format.
The object responsible for recording parser errors.
The binary input stream to read from.
The raw method body.
Occurs when the method header indicates an method body that is not in the
fat format.
When overridden from this class, represents a chunk of CIL code that implements a method body.
Gets a value indicating whether the method body is using the fat format.
Gets or sets the raw bytes that make up the CIL code of the method body.
Reads a raw method body from the given binary input stream.
The binary input stream to read from.
The raw method body.
Occurs when the method header indicates an invalid or unsupported
method body format.
Reads a raw method body from the given binary input stream.
The object responsible for recording parser errors.
The binary input stream to read from.
The raw method body.
Occurs when the method header indicates an invalid or unsupported
method body format.
Represents a CIL method body using the tiny format.
The tiny method body format is used when a CIL method body's code size is less than 64 bytes, has no local
variables, its max stack size is less than or equal to 8, and has no extra sections (e.g. no exception handlers).
This class does not do any encoding/decoding of the bytes that make up the actual CIL instructions, nor does
it do any verification of the code.
Creates a new method body using a buffer of assembled CIL instructions.
The buffer containing the raw CIL instructions.
Creates a new method body using a buffer of assembled CIL instructions.
The buffer containing the raw CIL instructions.
Reads a raw method body from the given binary input stream using the tiny method body format.
The object responsible for recording parser errors.
The binary input stream to read from.
The raw method body.
Occurs when the method header indicates an method body that is not in the
tiny format.
Provides members defining all possible stack behaviours that a single CIL operation can have.
Indicates the operation pops no values from the stack.
Indicates the operation pops one value from the stack.
Indicates the operation pops one value off the stack for the first operand, and one value of the stack
for the second operand.
Indicates the operation pops a 32-bit integer off the stack.
Indicates the operation pops a 32-bit integer off the stack for the first operand, and a value off the stack
for the second operand.
Indicates the operation pops a 32-bit integer off the stack for the first operand, and a 32-bit integer off
the stack for the second operand.
Indicates the operation pops a 32-bit integer off the stack for the first operand, and a 64-bit integer off
the stack for the second operand.
Indicates the operation pops a 32-bit integer off the stack for the first operand, a 32-bit integer off the
stack for the second operand, and a 32-bit integer off the stack for the third operand.
Indicates the operation pops a 32-bit integer off the stack for the first operand, and a 32-bit floating
point number off the stack for the second operand.
Indicates the operation pops a 32-bit integer off the stack for the first operand, and a 64-bit floating
point number off the stack for the second operand.
Indicates the operation pops a reference off the stack.
Indicates the operation pops a reference off the stack for the first operand, and a value off the stack for
the second operand.
Indicates the operation pops a reference off the stack for the first operand, and a 32-bit integer off the
stack for the second operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a value off the stack for the third operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a 64-bit integer off the stack for the third operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a 32-bit integer off the stack for the third operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a 64-bit floating point number off the stack for the third operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a reference off the stack for the third operand.
Indicates the operation pops a reference off the stack for the first operand, a value off the stack for the
second operand, and a 32-bit integer off the stack for the third operand.
Indicates the operation clears the evaluation stack.
Indicates the operation pushes no values onto the stack.
Indicates the operation pushes one value onto the stack.
Indicates the operation pushes 1 value onto the stack for the first operand, and 1 value onto the stack for
the second operand.
Indicates the operation pushes a 32-bit integer onto the stack.
Indicates the operation pushes a 64-bit integer onto the stack.
Indicates the operation pushes a 32-bit floating point number onto the stack.
Indicates the operation pushes a 64-bit floating point number onto the stack.
Indicates the operation pushes a reference onto the stack.
Indicates the operation pops a variable amount of values off the stack.
Indicates the operation pushes a variable amount of values onto the stack.
Provides an implementation of the that always returns null.
Gets the singleton instance of the empty operand resolver.
Provides methods for patching references to metadata in raw method bodies efficiently.
Patches the provided code stream.
The input code stream to patch.
The output code stream to write to.
The function to use for translating old metadata tokens to new metadata tokens.
Patches the provided raw extra section containing exception handlers.
The input extra section data to patch.
The output code stream to write to.
The function to use for translating old metadata tokens to new metadata tokens.
Provides members for formatting a CIL instruction to a human readable string.
Formats a single instruction to a string.
The instruction to format.
The string representing the instruction.
Represents a label used to reference an instruction in a CIL method body.
Gets the offset of the referenced instruction.
Provides members for serializing high level representations of an operand in a CIL instruction.
Transforms the provided variable operand into its variable index.
The variable operand.
The variable index.
Transforms the provided argument operand into its argument index.
The argument operand.
The argument index.
Transforms the provided string operand into a string token.
The string operand.
The string token.
Transforms the provided member into a metadata token that references the member.
The member.
The metadata token.
Provides members for resolving raw operands of decoded CIL instructions to higher level representations.
Resolves a member operand.
The metadata token of the referenced member.
The member, or null if the metadata token could not be resolved to a member.
Resolves a string operand.
The metadata token of the referenced string/
The string, or null if the metadata token could not be resolved to a string.
Resolves a local variable operand.
The index of the local variable to resolve.
The local variable, or null if the index could not be resolved to a local variable.
Resolves a parameter operand.
The index of the parameter to resolve.
The parameter, or null if the index could not be resolved to a local variable.
Represents a managed native header of a .NET Portable Executable that is in an unsupported or unknown file format.
Creates a new custom managed native header.
The signature to use.
The contents of the header, excluding the signature.
Gets the contents of the header, excluding the signature.
Represents a data directory containing the CLR 2.0 header and data directories of a .NET binary.
Creates a new .NET data directory.
Gets or sets the major runtime version of the directory format.
This field is set to 2 in most .NET binaries.
Gets or sets the minor runtime version of the directory format.
This field is set to 5 in most .NET binaries.
Gets or sets the data directory containing the metadata of the .NET binary.
Gets or sets the flags associated to the .NET binary.
Gets or sets the metadata token or entry point virtual address, depending on whether
is set in .
Setting this property will not alter . This means that even if a native entry point is
assigned to this property, the flag should be set
manually for a properly working .NET module.
Gets or sets the data directory containing the embedded resources data of the .NET binary (if available).
Gets or sets the data directory containing the strong name signature of the .NET binary (if available).
Gets or sets the data directory containing the code manager table of the .NET binary (if available).
Gets or sets the data directory containing the VTable fixups that need to be applied when executing mixed
mode applications (if available).
Gets or sets the data directory containing the addresses to native stubs of exports defined in the
.NET binary (if available).
Gets or sets the data directory containing the managed native header of a mixed mode application (if available).
Obtains the data directory containing the metadata of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the embedded resources data of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the strong name signature of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the code manager table of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the export address table of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the VTable fixups of the .NET binary.
The data directory.
This method is called upon initialization of the property
Obtains the data directory containing the managed native header of the .NET binary.
The data directory.
This method is called upon initialization of the property
Provides all possible values for the .NET data directory flags.
Indicates the .NET image only contains methods implemented using the CIL instruction set.
Mixed-mode applications should set this flag to zero.
Indicates the .NET image requires a 32-bit architecture to run on.
Indicates the .NET image is a .NET library.
Indicates the .NET image is signed with a strong name.
Indicates the entry point defined in is a relative virtual address
to a native function.
Indicates the debug data is tracked.
Indicates the application will run in an 32-bit environment if it is possible.
Provides extension methods for .
Determines whether the module is loaded as a 32-bit process.
The flags of the module as specified in its COR20 header.
The platform to assume the module is loaded on.
true if the module is loaded as a 32-bit process, false if it is loaded as a 64-bit process.
Determines whether the module is loaded as a 32-bit process.
The flags of the module as specified in its COR20 header.
The platform to assume the module is loaded on.
true if a 32-bit system should be assumed.
true if the application can be loaded as a 32-bit process.
true if the module is loaded as a 32-bit process, false if it is loaded as a 64-bit process.
Represents a reference to an entry point in the .NET Data Directory. This is either a metadata token to a
method or file defined in the .NET metadata tables, or a virtual address to native code located in a PE section.
Constructs a new managed entry point reference.
The metadata token of the managed entry point. This must be either a method or a file token.
Constructs a new native entry point reference.
A reference to the native code implementing the entry point.
Gets a value indicating whether an entry point is present or not.
Gets a value indicating the entry point is present in the form of a metadata token.
Gets a value indicating the entry point is present in the form of a reference to native code.
When the entry point is managed, gets the metadata token of the method or file implementing the managed
entry point.
When the entry point is native, gets the reference to the beginning of the native code implementing the
native entry point.
Gets the raw reference value as it would be written in the .NET data directory.
Constructs a new managed entry point reference.
The metadata token of the managed entry point. This must be either a method or a file token.
Constructs a new native entry point reference.
A reference to the native code implementing the entry point.
Constructs a new managed or native entry point reference.
The constructed entry point reference.
This method is added for backwards source compatibility, and should only be used when absolutely necessary.
When the input value resembles a valid metadata token, that is, it is of the form 0x06XXXXXX or
0x26XXXXXX, a managed entry point will be constructed. In any other case, the passed in integer will
be interpreted as a relative virtual address pointing to native code instead.
Gets the raw reference value of a .NET entry point reference as it would be written in the .NET data directory.
The entry point reference.
The raw reference value.
Represents a managed native header of a .NET module, containing Ahead-of-Time (AOT) compilation metadata.
Gets the signature of the native header, indicating the type of metadata that is stored.
Provides members defining all possible managed native header types.
Indicates the managed native header is in the Native Image Generator (NGEN) file format.
Indicates the managed native header is in the ReadyToRun (RTR) file format.
Represents the metadata stream containing blob signatures referenced by entries in the tables stream.
Like most metadata streams, the blob stream does not necessarily contain just valid blobs. It can contain
(garbage) data that is never referenced by any of the tables in the tables stream. The only guarantee that the
blob heap provides, is that any blob index in the tables stream is the start address (relative to the start of
the blob stream) of a blob signature that is prefixed by a length.
The default name of a blob stream, as described in the specification provided by ECMA-335.
Initializes the blob stream with its default name.
Initializes the blob stream with a custom name.
The name of the stream.
Gets a blob by its blob index.
The offset into the heap to start reading.
The blob, excluding the bytes encoding the length of the blob, or null if the index was invalid.
Gets a blob binary reader by its blob index.
The offset into the heap to start reading.
When this method returns true, this parameter contains the created binary reader.
true if a blob reader could be created at the provided index, false otherwise.
Searches the stream for the provided blob.
The blob to search for.
When the function returns true, contains the index at which the blob was found.
true if the blob index was found, false otherwise.
Performs a linear sweep on the stream and yields all blobs that are stored.
The blob enumerator.
As blobs can be referenced at any offset within the heap, the heap is technically allowed to contain
garbage data in between blob entries. As such, this linear sweep enumerator may not be an accurate
depiction of all blobs that are used by the module.
Represents a metadata stream with contents in a custom data format.
Creates a new custom metadata stream.
The name of the stream.
The raw contents of the stream.
Creates a new custom metadata stream.
The name of the stream.
The raw contents of the stream.
Gets or sets the raw contents of the stream.
Provides a default implementation for the interface, which is able
to read all metadata streams defined by the ECMA-335, and creates instances of
when an unknown metadata stream was read.
Gets a default instance
Provides a default implementation of the interface.
Gets the singleton instance of the class.
Represents the metadata stream containing GUIDs referenced by entries in the tables stream.
Like most metadata streams, the GUID stream does not necessarily contain just valid strings. It can contain
(garbage) data that is never referenced by any of the tables in the tables stream. The only guarantee that the
GUID heap provides, is that any blob index in the tables stream is the start address (relative to the start of
the GUID stream) of a GUID.
The size of a single GUID in the GUID stream.
The default name of a GUID stream, as described in the specification provided by ECMA-335.
Initializes the GUID stream with its default name.
Initializes the GUID stream with a custom name.
The name of the stream.
Gets a GUID by its GUID index.
The offset into the heap to start reading.
The GUID.
Searches the stream for the provided GUID.
The GUID to search for.
When the function returns true, contains the index at which the GUID was found.
true if the GUID index was found, false otherwise.
Performs a linear sweep on the stream and yields all GUIDs that are stored.
The GUID enumerator.
Provides members for reading data referenced by a row in the FieldRVA table.
Reads a data segment referenced by a row in the FieldRVA table.
The object responsible for recording parser errors.
The .NET directory to read from.
The row referencing the data.
The data segment, or null if no data was referenced.
Represents a metadata stream that is initialized lazily.
Finalizes the initialization process of the metadata stream.
The metadata directory that defines the stream.
Represents a single metadata stream in the metadata directory of a managed executable file.
Gets or sets the name of the metadata stream.
Gets a value indicating whether the raw contents of the stream can be read using a binary stream reader.
Creates a binary reader that reads the raw contents of the metadata stream.
The reader.
Occurs when is false.
Provides members for reading a stream stored in the metadata directory of a .NET image.
Reads the contents of a metadata stream.
The reader context.
Flags describing the currently read metadata.
The header of the metadata stream.
The input stream to read from.
The read metadata stream.
Represents a data directory containing metadata for a managed executable, including fields from the metadata
header, as well as the streams containing metadata tables and blob signatures.
Gets or sets the major version of the metadata directory format.
This field is usually set to 1.
Gets or sets the minor version of the metadata directory format.
This field is usually set to 1.
Reserved for future use.
Gets or sets the string containing the runtime version that the .NET binary was built for.
Reserved for future use.
Gets a value indicating whether the metadata directory is loaded as Edit-and-Continue metadata.
Gets a collection of metadata streams that are defined in the metadata header.
Reads a .NET metadata directory from a file.
The path to the file.
The read metadata.
Interprets the provided binary data as a .NET metadata directory.
The raw data.
The read metadata.
Reads a .NET metadata directory from a file.
The file to read.
The read metadata.
Interprets the provided binary stream as a .NET metadata directory.
The input stream.
The read metadata.
Interprets the provided binary stream as a .NET metadata directory.
The input stream.
The context in which the reader is situated in.
The read metadata.
Constructs new metadata stream headers for all streams in the metadata directory.
The offset of the first stream header.
A list of stream headers.
Writes a collection of stream headers to an output stream.
The output stream to write to.
The headers to write.
Writes the contents of all streams to an output stream.
The output stream to write to.
Gets a stream by its name.
The name of the stream to search.
The stream
Occurs when the stream is not present in the metadata directory.
Gets a stream by its type.
The type of the stream.
The stream
Occurs when the stream is not present in the metadata directory.
Gets a stream by its name.
The name of the stream to search.
The found stream, or null if no match was found.
true if a match was found, false otherwise.
Gets a stream by its name.
The type of the stream.
The found stream, or null if no match was found.
true if a match was found, false otherwise.
Obtains the list of streams defined in the data directory.
The streams.
This method is called upon initialization of the property.
Provides a base implementation of a metadata heap.
Initializes the metadata heap with a name.
The name of the stream.
Gets a value indicating whether any index into this metadata heap will need 2 or 4 bytes to be encoded.
Provides a context for a .NET metadata directory reader.
Constructs a new metadata reader context.
The factory object responsible for translating RVAs to references.
Constructs a new metadata reader context.
The factory object responsible for translating RVAs to references.
The object responsible for collecting any errors during the parsing.
The object responsible for reading metadata streams in the .NET data directory.
Gets the factory responsible for translating RVAs to references.
Gets the object responsible for collecting any errors during the parsing.
Gets the object responsible for reading metadata streams in the .NET data directory.
Constructs a metadata reader context from a PE reader context.
The context to transform.
The constructed context.
Provides members defining all possible signatures that a metadata directory can start with.
Indicates the BSJB metadata directory format is used.
Indicates the legacy COM+ metadata directory format is used.
Represents a raw metadata stream header, defining the offset, size and name of a metadata stream.
Creates a new metadata stream header.
The offset to the contents of the stream.
The size in bytes of the contents.
The name of the stream.
Occurs when the name is too long.
Gets the offset (relative to the start of the metadata directory) referencing the beginning of the contents
of the stream.
Gets the number of bytes the stream contains.
Gets the name of the stream.
Reads a single metadata stream header from an input stream.
The input stream.
The header.
Provides an implementation of a lazy-initialized list of metadata streams present in a metadata directory.
Prepares a new lazy-initialized metadata stream list.
The owner of the metadata stream list.
The reader context.
Flags describing the currently read metadata.
The stream headers.
The input stream containing the metadata directory.
Special flags used to provide information about metadata to .
No special flags are set.
EnC metadata is being used.
A #JTD stream is present.
If the #JTD stream is present and EnC metadata is being used, all indices in the tables stream are 4 bytes.
Represents the metadata stream containing Portable PDB debug data that is associated to a .NET module.
The default name of a PDB stream, as described in the specification provided by Portable PDB v1.0.
Gets the unique identifier representing the debugging metadata blob content.
Gets or sets the token of the entry point method, or 9 if not applicable.
This should be the same value as stored in the metadata header.
Gets an array of row counts of every portable PDB table in the tables stream.
Synchronizes the row counts stored in with the tables in the provided
tables stream.
The tables stream to pull the data from.
Synchronizes the row counts stored in with the tables in the provided
tables stream row counts.
The tables stream row counts to pull in.
Computes the valid bitmask for the type system table rows referenced by this pdb stream.
The bitmask.
Provides an implementation of a blob stream that obtains blobs from a readable segment in a file.
Creates a new blob stream with the provided byte array as the raw contents of the stream.
The raw contents of the stream.
Creates a new blob stream with the provided byte array as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Creates a new blob stream with the provided segment in a file as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Provides an implementation of a GUID stream that obtains GUIDs from a readable segment in a file.
Creates a new GUID stream with the provided byte array as the raw contents of the stream.
The raw contents of the stream.
Creates a new GUID stream with the provided byte array as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Creates a new GUID stream with the provided file segment reader as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Provides an implementation of a metadata directory that is stored in a PE file.
Reads a metadata directory from an input stream.
The reader context.
The input stream containing the metadata directory.
Occurs when any of the arguments are null.
Occurs when an unsupported metadata directory format was encountered.
Occurs when the metadata directory header is invalid.
Provides an implementation of a PDB stream that obtains GUIDs from a readable segment in a file.
Creates a new PDB stream with the provided byte array as the raw contents of the stream.
The raw contents of the stream.
Creates a new PDB stream with the provided byte array as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Creates a new PDB stream with the provided file segment reader as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Provides an implementation of a strings stream that obtains strings from a readable segment in a file.
Creates a new strings stream with the provided byte array as the raw contents of the stream.
The raw contents of the stream.
Creates a new strings stream with the provided byte array as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Creates a new strings stream with the provided file segment reader as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Provides an implementation of a tables stream that obtains tables from a readable segment in a file.
Same as but may contain row counts from an external tables stream.
This is required for metadata directories containing Portable PDB debug data.
Contains the initial sizes of every column type.
Creates a new tables stream with the provided byte array as the raw contents of the stream.
The reader context.
The name of the stream.
The raw contents of the stream.
Creates a new tables stream with the provided file segment reader as the raw contents of the stream.
The reader context.
The name of the stream.
The raw contents of the stream.
Provides an implementation of a user-strings stream that obtains strings from a readable segment in a file.
Creates a new user-strings stream with the provided byte array as the raw contents of the stream.
The raw contents of the stream.
Creates a new user-strings stream with the provided byte array as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Creates a new user-strings stream with the provided file segment reader as the raw contents of the stream.
The name of the stream.
The raw contents of the stream.
Represents the metadata stream containing the logical strings heap of a managed executable file.
Like most metadata streams, the strings stream does not necessarily contain just valid strings. It can contain
(garbage) data that is never referenced by any of the tables in the tables stream. The only guarantee that the
strings heap provides, is that any string index in the tables stream is the start address (relative to the
start of the strings stream) of a UTF-8 string that is zero terminated.
The default name of a strings stream, as described in the specification provided by ECMA-335.
Initializes the strings stream with its default name.
Initializes the strings stream with a custom name.
Gets a string by its string index.
The offset into the heap to start reading.
The string, or null if the index was invalid.
Searches the stream for the provided string.
The string to search for.
When the function returns true, contains the index at which the string was found.
true if the string index was found, false otherwise.
Performs a linear sweep on the stream and yields all strings that are stored.
The strings enumerator.
As strings can be referenced at any offset within the heap, the heap is technically allowed to contain
garbage data in between string entries. As such, this linear sweep enumerator may not be an accurate
depiction of all strings that are used by the module.
Represents the metadata stream containing tables defining each member in a .NET assembly.
The default name of a table stream using the compressed format.
The default name of a table stream using the Edit-and-Continue, uncompressed format.
The default name of a table stream using the minimal format.
The default name of a table stream using the uncompressed format.
Creates a new, empty tables stream.
Reserved, for future use.
This field must be set to 0 by the CoreCLR implementation of the runtime.
Gets or sets the major version number of the schema.
Gets or sets the minor version number of the schema.
Gets or sets the flags of the tables stream.
Gets or sets a value indicating each string index in the tables stream is a 4 byte integer instead of a
2 byte integer.
Gets or sets a value indicating each GUID index in the tables stream is a 4 byte integer instead of a
2 byte integer.
Gets or sets a value indicating each blob index in the tables stream is a 4 byte integer instead of a
2 byte integer.
Gets or sets a value indicating the tables were created with an extra bit in columns.
Gets or sets a value indicating the tables stream contains only deltas.
Gets or sets a value indicating the tables stream persists an extra 4 bytes of data.
Gets or sets a value indicating the tables stream may contain _Delete tokens.
This only occurs in ENC metadata.
Gets the bit-length of the largest relative identifier (RID) in the table stream.
This value is ignored by the CoreCLR implementation of the runtime, and the standard compilers always set
this value to 1.
Gets or sets the extra 4 bytes data that is persisted after the row counts of the tables stream.
This value is not specified by the ECMA-335 and is only present when is
set to true. Writing to this value does not automatically update ,
and is only persisted in the final output if is set to true.
Gets a value indicating whether the tables stream is assigned with row counts that originate from an
external .NET metadata file.
This value is typically set to false, except for Portable PDB metadata table streams.
Gets or sets an array of row counts originating from an external .NET metadata file that this table stream
should consider when encoding indices.
This value is typically null, except for Portable PDB metadata table streams.
Gets or sets a value whether to force large columns in the tables stream.
This value is typically false, it is intended to be true for cases when
EnC metadata is used and a stream with the name is present.
Gets a collection of all tables in the tables stream.
This collection always contains all tables, in the same order as defines, regardless
of whether a table actually has elements or not.
Gets the layout of all tables in the stream.
Obtains the implied table row count for the provided table index.
The table index.
The row count.
This method takes any external row counts from into account.
Obtains the implied table index size for the provided table index.
The table index.
The index size.
This method takes any external row counts from into account.
Updates the layouts of each metadata table, according to the property.
This method should be called after updating any of the index sizes in any of the ,
, or properties.
Computes the valid bitmask of the tables stream, which is a 64-bit integer where each bit specifies whether
a table is present in the stream or not.
The valid bitmask.
Computes the sorted bitmask of the tables stream, which is a 64-bit integer where each bit specifies whether
a table is sorted or not.
The valid bitmask.
Gets a value indicating the total number of tables in the stream.
The valid bitmask, indicating all present tables in the stream.
The number of tables.
Computes the total amount of bytes that each table combined needs.
The valid bitmask, indicating all present tables in the stream.
The total amount of bytes.
Writes for each present table the row count to the output stream.
The output stream to write to.
The valid bitmask, indicating all present tables in the stream.
Writes each present table to the output stream.
The output stream to write to.
The valid bitmask, indicating all present tables in the stream.
Determines whether a table is present in the tables stream, based on a valid bitmask.
The valid bitmask, indicating all present tables in the stream.
The table to verify existence of.
true if the table is present, false otherwise.
Determines whether a table is sorted in the tables stream, based on a sorted bitmask.
The sorted bitmask, indicating all sorted tables in the stream.
The table to verify.
true if the table is sorted, false otherwise.
Gets a table by its table index.
The table index.
The table.
Gets a table by its row type.
The type of rows the table stores.
The table.
Gets a table by its row type.
The type of rows the table stores.
The table index.
The table.
Gets a value indicating the size of a column in a table.
The column type to verify.
The column size.
Gets an encoder/decoder for a particular coded index.
The type of coded index to encode/decode.
The encoder.
Gets the range of metadata tokens referencing fields that a type defines.
The row identifier of the type definition to obtain the fields from.
The range of metadata tokens.
Gets the range of metadata tokens referencing methods that a type defines.
The row identifier of the type definition to obtain the methods from.
The range of metadata tokens.
Gets the range of metadata tokens referencing parameters that a method defines.
The row identifier of the method definition to obtain the parameters from.
The range of metadata tokens.
Gets the range of metadata tokens referencing properties that a property map row defines.
The row identifier of the property map to obtain the properties from.
The range of metadata tokens.
Gets the range of metadata tokens referencing events that a event map row defines.
The row identifier of the event map to obtain the events from.
The range of metadata tokens.
Obtains the collection of tables in the tables stream.
The tables, including empty tables if there are any.
This method is called upon initialization of the property.
Gets an ordered collection of the current table layouts.
The table layouts.
Provides members for all possible flags that the tables stream defines.
This enum is based on the CoreCLR implementation of the runtime, and therefore contains more members than the
ECMA-335 specifies. For reference see https://github.com/dotnet/coreclr/blob/fcd2d3278ba2eb4da78ddee979fb4c475bd14b37/src/md/inc/metamodel.h#L247
Indicates each string index in the tables stream is a 4 byte integer instead of a 2 byte integer.
Indicates each GUID index in the tables stream is a 4 byte integer instead of a 2 byte integer.
Indicates each blob index in the tables stream is a 4 byte integer instead of a 2 byte integer.
Indicates tables are created with an extra bit in columns.
Indicates the tables stream contains only deltas.
Indicates the tables stream persists an extra 4 bytes of data.
Indicates the tables stream may contain _Delete tokens. This only occurs in ENC metadata.
Provides members defining all possible flags that can be assigned to an assembly definition or reference.
The assembly holds the full (unhashed) public key.
The assembly uses an unspecified processor architecture.
The assembly uses a neutral processor architecture.
The assembly uses a x86 pe32 processor architecture.
The assembly uses an itanium pe32+ processor architecture.
The assembly uses an AMD x64 pe32+ processor architecture.
Bits describing the processor architecture.
Propagate PA flags to Assembly record.
Bits describing the PA incl. Specified.
From "DebuggableAttribute".
From "DebuggableAttribute".
The assembly can be retargeted (at runtime) to an assembly from a different publisher.
The assembly contains .NET Framework code.
The assembly contains Windows Runtime code.
Bits describing the content type.
Represents a single row in the assembly definition metadata table.
Reads a single assembly definition row from an input stream.
The input stream.
The layout of the assembly definition table.
The row.
Creates a new row for the assembly definition table.
The hashing algorithm used to sign the assembly.
The major version number of the assembly.
The minor version number of the assembly.
The build version number of the assembly.
The revision version number of the assembly.
The attributes associated to the assembly.
The index into the #Blob stream referencing the public key of the assembly to use
for verification of a signature, or 0 if the assembly was not signed.
The index into the #Strings stream referencing the name of the assembly.
The index into the #Strings stream referencing the locale string of the assembly.
Gets or sets the hashing algorithm that was used to sign the assembly.
Gets or sets the major version number of the assembly.
Gets or sets the minor version number of the assembly.
Gets or sets the build number of the assembly.
Gets or sets the revision number of the assembly.
Gets or sets the attributes associated to the assembly.
Gets or sets an index into the #Blob stream referencing the public key of the assembly to use for verification of
a signature.
When this field is set to zero, no public key is stored.
Gets or sets an index into the #Strings stream referencing the name of the assembly.
Gets or sets an index into the #Strings stream referencing the locale string of the assembly.
When this field is set to zero, the default culture is used.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all hash algorithms that can be used to hash public keys of assemblies.
Represents a single row in the assembly operating system metadata table.
Reads a single assembly operating system row from an input stream.
The input stream.
The layout of the assembly operating system table.
The row.
Creates a new row for the assembly operating system metadata table.
The identifier of the platform the assembly is targeting.
The major version of the platform the assembly is targeting.
The minor version of the platform the assembly is targeting.
Gets or sets the identifier of the platform the assembly is targeting.
Gets or sets the major version of the platform the assembly is targeting.
Gets or sets the minor version of the platform the assembly is targeting.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the assembly processor metadata table.
Reads a single assembly processor row from an input stream.
The input stream.
The layout of the assembly processor table.
The row.
Creates a new row for the assembly processor metadata table.
The processor identifier the assembly is targeting.
Gets or sets the processor identifier the assembly is targeting.
Determines whether this row is considered equal to the provided assembly processor row.
The other row.
true if the rows are equal, false otherwise.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the assembly definition metadata table.
Reads a single assembly definition row from an input stream.
The input stream.
The layout of the assembly definition table.
The row.
Creates a new row for the assembly reference table.
The major version number of the assembly.
The minor version number of the assembly.
The build version number of the assembly.
The revision version number of the assembly.
The attributes associated to the assembly.
The index into the #Blob stream referencing the public key or token of the
assembly to use for verification of a signature, or 0 if the assembly was not signed.
The index into the #Strings stream referencing the name of the assembly.
The index into the #Strings stream referencing the locale string of the assembly.
The index into the #Blob stream referencing the hash value of the assembly reference.
Gets or sets the major version number of the assembly.
Gets or sets the minor version number of the assembly.
Gets or sets the build number of the assembly.
Gets or sets the revision number of the assembly.
Gets or sets the attributes associated to the assembly.
Gets or sets an index into the #Blob stream referencing the public key or token of the assembly to use for
verification of a signature.
When this field is set to zero, no public key or token is stored.
Gets or sets an index into the #Strings stream referencing the name of the assembly.
Gets or sets an index into the #Strings stream referencing the locale string of the assembly.
When this field is set to zero, the default culture is used.
Gets or sets an index into the #Blob stream referencing the hash value of the assembly reference.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the assembly reference operating system metadata table.
Reads a single assembly reference operating system row from an input stream.
The input stream.
The layout of the assembly reference operating system table.
The row.
Creates a new row for the assembly reference operating system metadata table.
The identifier of the platform the assembly is targeting.
The major version of the platform the assembly is targeting.
The minor version of the platform the assembly is targeting.
The index of the AssemblyRef that this operating system row
was assigned to.
Gets or sets the identifier of the platform the assembly is targeting.
Gets or sets the major version of the platform the assembly is targeting.
Gets or sets the minor version of the platform the assembly is targeting.
Gets or sets an index into the AssemblyRef table referencing the assembly reference that this operating system row
was assigned to.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the assembly reference processor metadata table.
Reads a single assembly reference processor row from an input stream.
The input stream.
The layout of the assembly reference processor table.
The row.
Creates a new row for the assembly processor metadata table.
The processor identifier the assembly is targeting.
The index of the AssemblyRef that this processor row was assigned to.
Gets or sets the processor identifier the assembly is targeting.
Gets or sets an index into the AssemblyRef table referencing the assembly reference that this processor row
was assigned to.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the class layout metadata table.
Reads a single class layout row from an input stream.
The input stream.
The layout of the class layout table.
The row.
Creates a new row for the class layout metadata table,
The alignment in bytes of each field in the type.
The size in bytes of the type.
The index into the TypeDef table indicating the type that this layout is assigned to.
Gets or sets the alignment in bytes of each field in the type.
This value should be a power of two between 0 and 128.
Gets or sets the size in bytes of the type.
Gets or sets an index into the TypeDef table indicating the type that this layout is assigned to.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all coded indices that can appear in the tables stream.
Indicates the index is an index to a member in either the TypeRef, TypeDef or TypeSpec table.
Indicates the index is an index to a member in either the Field, Parameter or Property table.
Indicates the index is an index to a member in one of the following tables:
MethodDef, Field, TypeRef, TypeDef, Parameter, InterfaceImpl, MemberRef, Module, DeclSecurity, Property, Event,
StandAloneSig, ModuleRef, TypeSpec, Assembly, AssemblyRef, File, ExportedType, ManifestResource, GenericParam,
GenericParamConstraint or MethodSpec.
Indicates the index is an index to a member in either the Field or Parameter table.
Indicates the index is an index to a member in either the TypeDef, MethodDef or Assembly table.
Indicates the index is an index to a member in either the TypeDef, TypeRef, ModuleRef, MethodDef or TypeSpec
table.
Indicates the index is an index to a member in either the Event or Property table.
Indicates the index is an index to a member in either the MethodDef or MemberRef table.
Indicates the index is an index to a member in either the Field or MethodDef table.
Indicates the index is an index to a member in either the File, AssemblyRef or ExportedType table.
Indicates the index is an index to a member in either the MethodDef or MemberRef table.
Indicates the index is an index to a member in either the Module, ModuleRef, AssemblyRef or TypeRef table.
Indicates the index is an index to a member in either the TypeDef or MethodDef table.
Indicates the index is an index to a member in one of the following tables:
MethodDef, Field, TypeRef, TypeDef, Parameter, InterfaceImpl, MemberRef, Module, DeclSecurity, Property,
Event, StandAloneSig, ModuleRef, TypeSpec, Assembly, AssemblyRef, File, ExportedType, ManifestResource,
GenericParam, GenericParamConstraint, MethodSpec, Document, LocalScope, LocalVariable, LocalConstant,
or ImportScope
Provides a description of a single column in a metadata table.
Defines a new column layout, using a fixed size column type.
The name of the column.
The value type of the column.
Occurs when the provided column type does not have a fixed size.
Defines a new column layout, using a fixed size column type.
The name of the column.
The value type of the column.
The size of the column.
Defines a new column layout, using a fixed size column type.
The name of the column.
The value type of the column.
The size of the column.
Gets the name of the column.
Gets the data type that this column persists.
Gets the size in bytes of each cell in this column.
Provides all possible data types that a single cell in a metadata table can contain.
Represents a single row in the constants metadata table.
Reads a single constant row from an input stream.
The input stream.
The layout of the constants table.
The row.
Creates a new row for the constants metadata table.
The type of constant that is stored in the blob stream.
The HasConstant index (an index into either the Field, Parameter or Property table)
that is the owner of the constant.
The index into the #Blob stream containing the serialized constant value.
Creates a new row for the constants metadata table.
The type of constant that is stored in the blob stream.
The single padding byte between the type and parent columns.
The HasConstant index (an index into either the Field, Parameter or Property table)
that is the owner of the constant.
The index into the #Blob stream containing the serialized constant value.
Gets or sets the type of constant that is stored in the blob stream.
This field must always be a value-type.
Gets or sets the single padding byte between the type and parent columns.
This field should always be zero.
Gets a HasConstant index (an index into either the Field, Parameter or Property table) that is the owner
of the constant.
Gets or sets an index into the #Blob stream containing the serialized constant value.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the custom attribute metadata table.
Reads a single custom attribute row from an input stream.
The input stream.
The layout of the custom attribute table.
The row.
Creates a new row for the custom attribute metadata table.
The HasCustomAttribute index that this attribute is assigned to.
The CustomAttributeType index (an index into either the Method or MemberRef table) defining the
constructor to call when initializing the custom attribute.
The index into the #Blob stream containing the arguments of the constructor call.
Gets a HasCustomAttribute index (an index into either the Method, Field, TypeRef, TypeDef,
Param, InterfaceImpl, MemberRef, Module, DeclSecurity, Property, Event, StandAloneSig, ModuleRef,
TypeSpec, Assembly, AssemblyRef, File, ExportedType, ManifestResource, GenericParam, GenericParamConstraint,
or MethodSpec table) that this attribute is assigned to.
Gets a CustomAttributeType index (an index into either the Method or MemberRef table) defining the
constructor to call when initializing the custom attribute.
Gets or sets an index into the #Blob stream containing the arguments of the constructor call.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Portable PDB custom debug information metadata table.
Creates a new row for the Portable PDB custom debug information metadata table.
A coded index defining the member that this debug information is associated to.
An index into the GUID stream referencing the type of debug data that is stored in this record.
An index into the blob stream referencing the data of the record.
Gets or sets a coded index defining the member that this debug information is associated to.
Gets or sets an index into the GUID stream referencing the type of debug data that is stored in this record.
Gets or sets an index into the blob stream referencing the data of the record.
Reads a single Portable PDB custom debug information row from an input stream.
The input stream.
The layout of the custom debug information table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all operations that can be performed during an edit-and-continue session.
Indicates the default operation is applied.
Indicates a method is being created.
Indicates a field is being created.
Indicates a parameter is being created.
Indicates a property is being created.
Indicates an event is being created.
Represents a single row in the Portable PDB Document metadata table.
Creates a new row for the Portable PDB Document metadata table.
The index into the blob stream referencing the name of the document.
The index into the GUID stream referencing the hash algorithm identifier.
The index into the blob stream referencing the hash of the document.
The index into the GUID stream referencing the language identifier.
Gets or sets an index into the blob stream referencing the name of the document.
Gets or sets an index into the GUID stream referencing the hash algorithm identifier.
Gets or sets an index into the blob stream referencing the hash of the document.
Gets or sets an index into the GUID stream referencing the language identifier.
Reads a single Portable PDB Document row from an input stream.
The input stream.
The layout of the document table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all element types that can be used to indicate the type of a blob signature or constant.
Represents a single row in the Edit-and-Continue log metadata table.
Reads a single edit-and-continue log row from an input stream.
The input stream.
The layout of the edit-and-continue log table.
The row.
Creates a new row for the edit-and-continue log metadata table.
The metadata token to apply the delta function to.
The delta function to apply.
Gets or sets the metadata token to apply the delta function to.
Gets or sets the delta function to apply.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Edit-and-Continue remap metadata table.
Reads a single edit-and-continue remap row from an input stream.
The input stream.
The layout of the edit-and-continue remap table.
The row.
Creates a new row for the edit-and-continue remap metadata table.
The token that was remapped.
Gets or sets the token that was remapped.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be associated to an event definition.
Specifies that the event has no attributes.
Specifies that the event is using a special name.
Specifies that the runtime should check the name encoding.
Represents a single row in the event map metadata table.
Reads a single event definition row from an input stream.
The input stream.
The layout of the event definition table.
The row.
Creates a new row for the event definition metadata table.
The attributes associated to the event definition.
The index into the #Strings stream referencing the name of the event.
The TypeDefOrRef index (an index into either the TypeRef, TypeDef or TypeSpec table)
indicating the type of the event.
Gets or sets the attributes associated to the event definition.
Gets or sets an index into the #Strings stream referencing the name of the event.
This value should always index a non-empty string.
Gets a TypeDefOrRef index (an index into either the TypeRef, TypeDef or TypeSpec table) indicating the
type of the event.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the event map metadata table.
Reads a single event map row from an input stream.
The input stream.
The layout of the event map table.
The row.
Creates a new row for the event map metadata table.
The index into the TypeDef table that this mapping is associating to an event list.
The index into the Event table indicating the first event that is defined in the event list.
Gets or sets an index into the TypeDef table that this mapping is associating to an event list.
Gets or sets an index into the Event table indicating the first event that is defined in the event list.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the event pointer metadata table.
Reads a single event pointer row from an input stream.
The input stream.
The layout of the event pointer table.
The row.
Creates a new row for the event pointer metadata table.
The index into the Event table that this pointer references.
Gets or sets an index into the Event table that this pointer references.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the exported type metadata table.
Reads a single exported type row from an input stream.
The input stream.
The layout of the exported type table.
The row.
Creates a new row for the exported type metadata table.
The attributes associated to the exported type.
The RID hint of the type definition that was exported.
The index into the #Strings heap containing the name of the type reference.
The index into the #Strings heap containing the namespace of the type reference.
The Implementation index (an index into either the File, ExportedType or AssemblyRef table),
indicating the scope that can be used to resolve the exported type.
Gets or sets the attributes associated to the exported type.
Gets or sets the RID hint of the type definition that was exported.
This field is used as a hint only. If the entry in the table does not match the name and namespace referenced
by and respectively, then the CLR falls back to a search for the
type definition.
Gets or sets an index into the #Strings heap containing the name of the type reference.
This value should always index a non-empty string.
Gets or sets an index into the #Strings heap containing the namespace of the type reference.
This value can be zero. If it is not, it should always index a non-empty string.
Gets or sets an Implementation index (an index into either the File, ExportedType or AssemblyRef table), indicating
the scope that can be used to resolve the exported type.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be associated to a field definition.
The bitmask that is being used to get the access level of the field.
Specifies the field cannot be referenced.
Specifies the field can only be accessed by its declaring type.
Specifies the field can only be accessed by sub-types in the same assembly.
Specifies the field can only be accessed by members in the same assembly.
Specifies the field can only be accessed by this type and sub-types.
Specifies the field can only be accessed by sub-types and anyone in the assembly.
Specifies the field can be accesed by anyone who has visibility to this scope.
Specifies the field can be accessed without requiring an instance.
Specifies the field can only be initialized and not being written after the initialization.
Specifies the field's value is at compile time constant.
Specifies the field does not have to be serialized when the type is remoted.
Specifies the field uses a special name.
Specifies the field is an implementation that is being forwarded through PInvoke.
Reserved flags for runtime use only.
Specifies the runtime should check the name encoding.
Specifies the field has got marshalling information.
Specifies the field has got a default value.
Specifies the field has got an RVA.
Represents a single row in the field definition metadata table.
Reads a single field definition row from an input stream.
The input stream.
The layout of the field definition table.
The row.
Creates a new row for the field definition metadata table.
The attributes associated to the field definition.
The index into the #Strings heap containing the name of the type reference.
The index into the #Blob heap containing the signature of the field.
Gets or sets the attributes associated to the field definition.
Gets or sets an index into the #Strings heap containing the name of the type reference.
This value should always index a non-empty string.
Gets or sets an index into the #Blob heap containing the signature of the field. This includes the field type.
This value should always index a valid field signature.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the field layout metadata table.
Reads a single field layout row from an input stream.
The input stream.
The layout of the field layout table.
The row.
Creates a new row for the field layout metadata table.
The offset of the field relative to the start of the enclosing structure type.
The index into the Field type referencing the field that this layout was assigned to.
Gets or sets the offset of the field relative to the start of the enclosing structure type.
Gets or sets an index into the Field type referencing the field that this layout was assigned to.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the field marshal metadata table.
Reads a single field marshal row from an input stream.
The input stream.
The layout of the field marshal table.
The row.
Creates a new row for the field marshal metadata table.
The HasFieldMarshal index (an index into either the Field or Parameter table) that this
field marshaller is assigned to.
The index into the #Blob stream containing the marshaller data.
Gets a HasFieldMarshal index (an index into either the Field or Parameter table) that this field marshaller
is assigned to.
Gets or sets an index into the #Blob stream containing the marshaller data.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the field pointer metadata table.
Reads a single field pointer row from an input stream.
The input stream.
The layout of the field pointer table.
The row.
Creates a new row for the field pointer metadata table.
The index into the Field table that this pointer references.
Gets or sets an index into the Field table that this pointer references.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the implementation map metadata table.
Reads a single field RVA row from an input stream.
The reader context.
The input stream.
The layout of the field RVA table.
The row.
Creates a new row for the field RVA metadata table.
The reference to the start of the initial field data.
The index into the Field table indicating the field that was assigned an initial value.
Gets a reference to the start of the initial field data.
This field deviates from the original specification as described in ECMA-335. It replaces the RVA column of
the field RVA row. Only the RVA of this reference is only considered when comparing two field RVA rows
for equality.
Gets or sets an index into the Field table indicating the field that was assigned an initial value.
Determines whether this row is considered equal to the provided field RVA row.
The other row.
true if the rows are equal, false otherwise.
When comparing both data fields, only the RVA is considered in this equality test. The exact type is ignored.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a file reference.
Specifies the file reference contains metadata.
Specifies the file references doesn't contain metadata.
Represents a single row in the file metadata table.
Reads a single file row from an input stream.
The input stream.
The layout of the file table.
The row.
Creates a new row for the file reference metadata table.
The attributes associated to the file reference.
The index into the #Strings stream referencing the name of the file.
The index into the #Blob stream referencing the hash value of the file.
Gets or sets the attributes associated to the file reference.
Gets or sets an index into the #Strings stream referencing the name of the file.
Gets or sets an index into the #Blob stream referencing the hash value of the file.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a generic parameter.
Specifies the generic parameter has no special variance rules applied to it.
Specifies the generic parameter is covariant and can appear as the result type of a method, the type of a read-only field, a declared base type or an implemented interface.
Specifies the generic parameter is contravariant and can appear as a parameter type in method signatures.
Provides a mask for variance of type parameters, only applicable to generic parameters for generic interfaces and delegates
Provides a mask for additional constraint rules.
Specifies the generic parameter's type argument must be a type reference.
Specifies the generic parameter's type argument must be a value type and not nullable.
Specifies the generic parameter's type argument must have a public default constructor.
Specifies the generic parameter can be a ref struct type.
Represents a single row in the generic parameter metadata table.
Reads a single generic parameter row from an input stream.
The input stream.
The layout of the generic parameter table.
The row.
Creates anew row for the generic parameter constraint metadata table.
The index into the GenericParam table indicating the owner of the constraint.
The TypeDefOrRef index (an index into either the TypeRef, TypeDef or TypeSpec table)
indicating the constraint that was put on the generic parameter.
Gets or sets an index into the GenericParam table indicating the owner of the constraint.
Gets a TypeDefOrRef index (an index into either the TypeRef, TypeDef or TypeSpec table) indicating the
constraint that was put on the generic parameter.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the generic parameter metadata table.
Reads a single generic parameter row from an input stream.
The input stream.
The layout of the generic parameter table.
The row.
Creates a new row for the generic parameter metadata table.
Gets or sets the index of the generic parameter.
Gets or sets the attributes associated to the generic parameter.
Gets a TypeOrMethodDef index (an index into either the TypeDef or MethodDef table) indicating the owner
of the generic parameter.
Gets or sets an index into the #Strings stream referencing the name of the generic parameter.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in a metadata table.
Gets or sets the index of the table that this row is stored in.
Writes the row to an output stream.
The output stream writer.
The new layout of the table.
Represents a metadata table stored in the tables stream of a managed executable.
Gets the layout of the table.
Gets or sets the row at the provided index.
The index of the row to get.
Occurs when the index is too small or too large for this table.
Gets or sets a value indicating whether the table is considered sorted.
Gets the contents of a row by its row identifier.
The row identifier.
The row.
Attempts to get the contents of a cell in the table by its row identifier and column index.
The row identifier.
The column index.
When successful, the contents of the cell, converted to an unsigned integer.
true if the cell existed and was obtained successfully, false otherwise.
Attempts to get the contents of a row by its row identifier.
The row identifier.
When successful, the read row.
true if the RID existed and the row was obtained successfully, false otherwise.
Attempts to find a row index in a table by a key. This requires the table to be sorted.
The column number to get the key from.
The key to search.
When this functions returns true, this parameter contains the RID of the row that
contains the given key.
true if the row was found, false otherwise.
Gets a single row in a table by a key. This requires the table to be sorted.
The column number to get the key from.
The key to search.
When this functions returns true, this parameter contains the first row that
contains the given key.
true if the row was found, false otherwise.
Sets the contents of a row by its row identifier.
The row identifier.
The new contents of the row.
Updates the table layout.
The new table layout.
This method is used to update the sizes of each column, and therefore requires the new layout to have the
same names and column types as the original one.
Calculates the offset range of a row within the table.
The identifier of the row to get the bounds of.
The bounds.
This method does not do any verification on whether is a valid row in the table.
Provides members defining all possible flags that can be assigned to a P/Invoke implementation mapping.
Indicates no name mangling was used.
Indicates the character set was not specified.
Indicates the character set used is ANSI.
Indicates the character set used is unicode.
Indicates the character set is determined by the runtime.
Provides a mask for the character set.
Indicates best fit mapping behavior when converting Unicode characters to ANSI characters is determined
by the runtime.
Indicates best-fit mapping behavior when converting Unicode characters to ANSI characters is enabled.
Indicates best-fit mapping behavior when converting Unicode characters to ANSI characters is disabled.
Provides a mask for the best-fit behaviour.
Indicates the throw behaviour on an unmappable Unicode character is undefined.
Indicates the runtime will throw an exception on an unmappable Unicode character that is converted to an
ANSI "?" character.
Indicates the runtime will not throw an exception on an unmappable Unicode character that is converted to an
ANSI "?" character.
Provides a mask for the throw on unmappable behaviour.
Indicates whether the callee calls the SetLastError Win32 API function before returning from the attributed
method.
Indicates P/Invoke will use the native calling convention appropriate to target windows platform.
Indicates P/Invoke will use the C calling convention.
Indicates P/Invoke will use the stdcall calling convention.
Indicates P/Invoke will use the thiscall calling convention.
Indicates P/Invoke will use the fastcall calling convention.
Provides a mask for the calling convention flags.
Represents a single row in the implementation map metadata table.
Reads a single implementation map row from an input stream.
The input stream.
The layout of the implementation map table.
The row.
Creates a new row for the implementation map metadata table.
The attributes associated to the implementation mapping.
The MemberForwarded index (an index into either the Field or Method table)
indicating the member that was assigned P/Invoke information.
The index into the #Strings stream referencing the name of the imported member.
The index into the ModuleRef table indicating the module that this imported member defines.
Gets or sets the attributes associated to the implementation mapping.
Gets a MemberForwarded index (an index into either the Field or Method table) indicating the member that was
assigned P/Invoke information.
Gets or sets an index into the #Strings stream referencing the name of the imported member.
Gets or sets an index into the ModuleRef table indicating the module that this imported member defines.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Portable PDB import scope metadata table.
Creates a new row for the Portable PDB import scope metadata table.
An index into the import parent scope defining the parent scope, or 0 if it is the root scope.
An index into the blob stream referencing the imports that this scope defines.
Gets or sets an index into the import parent scope defining the parent scope, or 0 if it is the root scope.
Gets or sets an index into the blob stream referencing the imports that this scope defines.
Reads a single Portable PDB import scope row from an input stream.
The input stream.
The layout of the import scope table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides a mechanism for translating between metadata tokens and coded indices.
Creates a new index encoder.
The tables stream containing the tables the encoder targets.
The table indices to encode for.
Gets the size of the indices encoded by the index encoder.
Translates a metadata token to its corresponding coded index.
The metadata token to encode.
The coded index.
Occurs when the provided metadata token is part of an unsupported metadata table.
Translates a coded index to its corresponding metadata token.
The coded index to decode.
The decoded metadata token.
Represents a single row in the interface implementation metadata table.
Reads a single interface implementation row from an input stream.
The input stream.
The layout of the interface implementation table.
The row.
Creates a new row for the interface implementation metadata table.
The index into the TypeDef table indicating the type that implements the interface.
The TypeDefOrRef (an index to a row in either the TypeRef, TypeDef or TypeSpec table)
indicating the interface that was implemented by the type.
Gets or sets an index into the TypeDef table indicating the type that implements the interface.
Gets a TypeDefOrRef (an index to a row in either the TypeRef, TypeDef or TypeSpec table) indicating the
interface that was implemented by the type.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Portable PDB local constant metadata table.
Creates a new row for the Portable PDB Local Constant metadata table.
An index into the strings stream referencing the name of the constant.
An index into the blob stream referencing the signature of the constant.
Gets or sets an index into the strings stream referencing the name of the constant.
Gets or sets an index into the blob stream referencing the signature of the constant.
Reads a single Portable PDB local constant row from an input stream.
The input stream.
The layout of the local constant table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Portable PDB local scope metadata table.
Creates a new row for the Portable PDB Local Scope metadata table.
An index into the method table that defines the scope.
An index into the import scope table that defines the scope.
An index into the local variable table referencing the first local variable in the method.
An index into the local constant table referencing the first constant in the method.
The starting CIL offset of the scope.
The number of CIL bytes the scope spans.
Gets or sets an index into the method table that defines the scope.
Gets or sets an index into the import scope table that defines the scope.
Gets or sets an index into the local variable table referencing the first local variable in the method.
Gets or sets an index into the local constant table referencing the first constant in the method.
Gets or sets The starting CIL offset of the scope.
Gets or sets the number of CIL bytes the scope spans.
Reads a single Portable PDB local scope row from an input stream.
The input stream.
The layout of the local socpe table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all possible flags that can be assigned to a local variable.
Indicates the local variable should be hidden in a debugger view.
Represents a single row in the Portable PDB local variable metadata table.
Creates a new row for the Portable PDB Local Variable metadata table.
The attributes associated to the local variable.
The index of the local variable.
An index into the strings stream referencing the name of the local variable.
Gets or sets the attributes associated to the local variable.
Gets or sets the index of the local variable.
Gets or sets an index into the strings stream referencing the name of the local variable.
Reads a single Portable PDB local variable row from an input stream.
The input stream.
The layout of the local variable table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a manifest resource.
Specifies the resource is exported from the asembly.
Specifies the resource is private to the assembly.
Represents a single row in the manifest resource metadata table.
Reads a single manifest resource row from an input stream.
The input stream.
The layout of the manifest resource table.
The row.
Creates a new row for the manifest resource metadata table.
The byte offset within the referenced file at which the resource record begins.
The attributes associated with this resource.
The index into the #Strings heap referencing the name of the resource.
The Implementation index (an index into either the File, AssemblyRef or
ExportedType table) indicating the file that contains the resource data.
Gets or sets the byte offset within the referenced file at which the resource record begins.
Gets or sets the attributes associated with this resource.
Gets or sets an index into the #Strings heap referencing the name of the resource.
Gets or sets an Implementation index (an index into either the File, AssemblyRef or ExportedType table) indicating
the file that contains the resource data.
When this field is set to zero, the resource data is embedded into the current assembly.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the member reference metadata table.
Reads a single member reference row from an input stream.
The input stream.
The layout of the member reference table.
The row.
Creates a new row for the member reference metadata table.
The MemberRefParent index indicating the parent member reference or definition that
defines or can resolve the member reference.
The index into the #Strings heap containing the name of the member reference.
The index into the #Blob heap containing the signature of the member.
Gets a MemberRefParent index (an index into either the TypeDef, TypeRef, ModuleRef, Method or TypeSpec table)
indicating the parent member reference or definition that defines or can resolve the member reference.
Gets or sets an index into the #Strings heap containing the name of the member reference.
This value should always index a non-empty string.
Gets or sets an index into the #Blob heap containing the signature of the member.
This value should always index a valid member signature. This value can also be used to determine whether
the member reference is a field or a method.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a range of metadata tokens, indicated by a starting and ending row identifier within a metadata table.
Represents the empty metadata range.
Initializes the range.
The table.
The starting row identifier.
The ending row identifier. This identifier is exclusive.
Initializes the range.
The table that is used for translating raw indices.
The table.
The starting row identifier.
The ending row identifier. This identifier is exclusive.
Gets the index of the metadata table this range is targeting.
Gets the first row identifier that this range includes.
Gets the row identifier indicating the end of the range. The range excludes this row identifier.
Gets the number of metadata rows this range spans.
Gets a value indicating whether the range is empty or not.
Gets the table that is used for translating raw indices.
Gets a value indicating whether the range is associated to a redirection table.
Obtains an enumerator that enumerates all metadata tokens within the range.
Represents an enumerator that enumerates all metadata tokens within a token range.
Initializes a new token enumerator.
The range to enumerate from.
Provides a mechanism for enumerating all column cells in a row of a metadata table.
Creates a new metadata row column enumerator.
Provides a base implementation of a metadata table in the table stream of a managed executable file.
The type of rows that this table stores.
Creates a new metadata table using the provided layout.
The index of the table.
The layout of the table.
Creates a new metadata table using the provided layout.
The index of the table.
The layout of the table.
Indicates the table is sorted or not.
Gets the index of the table in the tables stream.
Gets the version number of the list.
Gets the internal list of rows that are stored in the metadata table.
Gets a value indicating the property is initialized or not.
Gets or sets the total number of rows that the underlying array can store.
Gets a mutable reference to a row within the table.
The RID of the row to obtain a reference for.
The row reference.
Gets a mutable reference to a row within the table.
The RID of the row to obtain a reference for.
The version of the underlying buffer upon obtaining the reference.
The row reference.
Inserts a row in the table at the provided index.
The index to insert at.
The row to insert.
Obtains all rows in the metadata table.
The rows.
This method is called upon initialization of the property.
Gets the contents of a row by its row identifier.
The row identifier.
The row.
Attempts to get the contents of a row by its row identifier.
The row identifier.
When successful, the read row.
true if the RID existed an the row was obtained successfully, false otherwise.
Gets a single row in a table by a key. This requires the table to be sorted.
The column number to get the key from.
The key to search.
When this functions returns true, this parameter contains the first row that
contains the given key.
true if the row was found, false otherwise.
Sets the contents of a row by its row identifier.
The row identifier.
The new contents of the row.
Represents a metadata token, referencing a member using a table and a row index.
Represents the zero metadata token, or the absence of a metadata token.
Converts a 32-bit integer to a metadata token.
The token to convert.
The metadata token.
Converts a 32-bit unsigned integer to a metadata token.
The token to convert.
The metadata token.
Determines whether two metadata tokens are considered equal. That is, both the table index and the row
identifier match.
The first metadata token.
The second metadata token.
true if the tokens are considered equal, false otherwise.
Determines whether two metadata tokens are not considered equal. That is, either the table index or the row
identifier (or both) does not match the other.
The first metadata token.
The second metadata token.
true if the tokens are not considered equal, false otherwise.
Creates a new metadata token from a raw 32 bit integer.
The raw metadata token.
Creates a new metadata token from a table index and a row index.
The table.
The row index.
Occurs when is too large.
Gets the table that the metadata token references.
Gets the row index within the table specified by that the metadata token references.
Converts the metadata token to an unsigned 32 bit integer.
The raw metadata token.
Converts the metadata token to a signed 32 bit integer.
The raw metadata token.
Determines whether the metadata token refers to the same member as another metadata token.
The other metadata token.
true if the token refers to the same member, false otherwise.
Provides members defining all flags that can be assigned to a method definition.
Specifies the method can't be referenced.
Specifies the method can only be accessed by its declaring type.
Specifies the method can only be accessed by sub-types in the same assembly.
Specifies the method can only be accessed by members in the same assembly.
Specifies that the method can only be accessed by this type and sub-types.
Specifies the method can only be accessed by sub-types and anyone in the assembly.
Specifies the method can be accesed by anyone who has visibility to this scope.
Provides a bitmask for all flags related to member access.
Indicates that the managed method is exported by thunk to unmanaged code.
Specifies the method can be accessed without requiring an instance.
Specifies the method cannot be overridden.
Specifies the method is virtual.
Specifies the method is being distinguished by it's name + signature.
Specifies the method reuses an existing slot in vtable.
Specifies the method always gets a new slot in the vtable.
Provides a bitmask for flags related to the vtable layout.
Indicates that the method can only be overridden when it is also accessible.
Indicates the method is abstract and needs to be overridden in a derived class.
Specifies that the method uses a special name.
Specifies that the runtime should check the name encoding.
Specifies that the method is an implementation that is being forwarded through PInvoke.
Specifies the method has security associate with it.
Specifies the method calls another method containing security code.
Represents a single row in the Portable PDB Document metadata table.
Creates a new row for the Portable PDB Method Debug Information metadata table.
The index into the Document table referencing the document that declares the method.
The index into the blob stream referencing an array of sequence points that make up the method.
Gets or sets an index into the Document table referencing the document that declares the method, or 0
if the method does not have sequence points or spans multiple documents.
Gets or sets an index into the blob stream referencing an array of sequence points that make up the method,
or 0 if no sequence points are available.
Reads a single Portable PDB Method Debug Information row from an input stream.
The input stream.
The layout of the method debug information table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the method definition metadata table.
Reads a single method definition row from an input stream.
The reader context.
The input stream.
The layout of the method definition table.
The row.
Creates a new row for the method definition metadata table.
The reference to the beginning of the method body.
The characteristics of the implementation of the method body.
The attributes associated to the method.
The index into the #Strings heap containing the name of the type reference.
The index into the #Blob heap containing the signature of the method.
The index into the Param (or ParamPtr) table, representing the first parameter
that this method defines.
Gets a reference to the beginning of the method body.
This field deviates from the original specification as described in ECMA-335. It replaces the RVA column of
the method definition row. Only the RVA of this reference is only considered when comparing two method definition
rows for equality.
If this value is null, the method does not define any method body.
Gets or sets the characteristics of the implementation of the method body.
These attributes dictate the format of .
Gets or sets the attributes associated to the method.
Gets or sets an index into the #Strings heap containing the name of the type reference.
This value should always index a non-empty string.
Gets or sets an index into the #Blob heap containing the signature of the method. This includes the return type,
as well as parameter types.
This value should always index a valid method signature.
Gets or sets an index into the Param (or ParamPtr) table, representing the first parameter that this method defines.
Determines whether this row is considered equal to the provided method definition row.
The other row.
true if the rows are equal, false otherwise.
When comparing both method bodies, only the RVA is considered in this equality test. The exact type is ignored.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that dictate the implementation of a method body.
Method implementation is IL.
Method implementation is native.
Method implementation is OPTIL.
Method implementation is provided by the runtime.
Provides a bitmask for obtaining the flags related to the code type of the method.
Method implementation is unmanaged.
Method implementation is managed.
Provides a bitmask for obtaining the flags specifying whether the code is managed or unmanaged.
Indicates the method is defined; used primarily in merge scenarios.
Method will not be optimized when generating native code.
Indicates the method signature is not to be mangled to do HRESULT conversion.
Reserved for internal use.
Method is single threaded through the body.
Method may not be inlined.
Method should be inlined if possible.
Method may contain hot code and should be aggressively optimized.
Specifies that the JIT compiler should look for security mitigation attributes, such as the user-defined
System.Runtime.CompilerServices.SecurityMitigationsAttribute. If found, the JIT compiler applies
any related security mitigations. Available starting with .NET Framework 4.8.
This is an undocumented flag and is currently not used:
Original addition: https://github.com/dotnet/dotnet-api-docs/pull/2253
Documentation removal: https://github.com/dotnet/dotnet-api-docs/pull/4652
Method is an Async Method.
This feature is in preview for .NET 10.
See https://github.com/dotnet/runtime/issues/109632
Represents a single row in the method implementation metadata table.
Reads a single method implementation row from an input stream.
The input stream.
The layout of the method implementation table.
The row.
Creates a new row for the method implementation metadata table.
The index into the TypeDef table indicating the class that inherited methods from an interface.
The MethodDefOrRef index indicating the method which provides the implementation
for the interface method.
The MethodDefOrRef index indicating the interface method which is implemented.
Gets or sets an index into the TypeDef table indicating the class that inherited methods from an interface.
Gets a MethodDefOrRef index (an index into either the Method or MemberRef table) indicating the method
which provides the implementation for the interface method.
Gets a MethodDefOrRef index (an index into either the Method or MemberRef table) indicating the interface
method which is implemented.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the method pointer metadata table.
Reads a single field pointer row from an input stream.
The input stream.
The layout of the field pointer table.
The row.
Creates a new row for the method pointer metadata table.
The index into the Method table that this pointer references.
Gets or sets an index into the Method table that this pointer references.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a method semantics row.
The method is a setter for a property.
The method is a getter for a property.
The method is an unspecified method for a property or event.
The method is an AddOn for an event.
The method is a RemoveOn for an event.
The method is used to fire an event.
Represents a single row in the method semantics metadata table.
Reads a single method semantics row from an input stream.
The input stream.
The layout of the method semantics table.
The row.
Creates a new row for the method semantics table.
The semantic attributes that are assigned to the method.
The index into the method definition table indicating the method that was assigned
special semantics.
The index into the method definition table indicating the method that was assigned
special semantics.
Gets or sets the semantic attributes that are assigned to the method.
Gets or sets an index into the method definition table indicating the method that was assigned special semantics.
Gets a HasSemantics index (an index into either the event or property table) indicating the member the method
is associated with.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the method specification metadata table.
Reads a single method specification row from an input stream.
The input stream.
The layout of the method specification table.
The row.
Creates a new row for the method specification metadata table.
The index into the method definition table indicating the method to be instantiated.
The index into the #Blob stream referencing the instantiation parameters of the method.
Gets or sets an index into the method definition table indicating the method to be instantiated.
Gets or sets an index into the #Blob stream referencing the instantiation parameters of the method.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the module definition metadata table.
Reads a single module definition row from an input stream.
The input stream.
The layout of the module definition table.
The row.
Creates a new row for the module definition metadata table.
The generation number of the module.
The index into the #Strings heap containing the name of the module.
The index into the #GUID heap containing the unique identifier to distinguish
between two versions of the same module.
Gets or sets the generation number of the module.
This value is reserved and should be set to zero.
Gets or sets an index into the #Strings heap containing the name of the module.
Gets or sets an index into the #GUID heap containing the unique identifier to distinguish between two versions
of the same module.
Gets or sets an index into the #GUID heap containing the unique identifier to distinguish between two
edit-and-continue generations.
Gets or sets an index into the #GUID heap containing the base identifier of an edit-and-continue generation.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the module definition metadata table.
Reads a single module reference row from an input stream.
The input stream.
The layout of the module reference table.
The row.
Creates a new row for the module reference metadata table.
The index into the #Strings heap referencing the name of the external module that was
imported.
Gets or sets an index into the #Strings heap referencing the name of the external module that was imported.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the nested class metadata table.
Reads a single nested class row from an input stream.
The input stream.
The layout of the nested class table.
The row.
Creates a new row for the nested class metadata table.
The index into the TypeDef table indicating the class that was nested into another class.
The index into the TypeDef table indicating the enclosing class.
Gets or sets an index into the TypeDef table indicating the class that was nested into another class.
Gets or sets an index into the TypeDef table indicating the enclosing class.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a parameter definition.
Parameter is an input parameter.
Parameter is an output parameter.
Parameter is an optional parameter.
Parameter has got a default value.
Parameter has got field marshalling information.
Represents a single row in the parameter definition metadata table.
Reads a single parameter definition row from an input stream.
The input stream.
The layout of the parameter definition table.
The row.
Creates a new row for the parameter definition metadata table.
The attributes associated to the parameter.
The index of the parameter definition.
The index into the #Strings heap containing the name of the type reference.
Gets or sets the attributes associated to the parameter.
Gets or sets the index of the parameter definition.
Gets or sets an index into the #Strings heap containing the name of the type reference.
If this value is zero, the parameter name is considered null.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the parameter pointer metadata table.
Reads a single parameter pointer row from an input stream.
The input stream.
The layout of the parameter pointer table.
The row.
Creates a new row for the parameter pointer metadata table.
The index into the Parameter table that this pointer references.
Gets or sets an index into the Parameter table that this pointer references.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all flags that can be assigned to a property definition.
The property has no attribute.
The property uses a special name.
The runtime should check the name encoding.
The property has got a default value.
Represents a single row in the property definition metadata table.
Reads a single property definition row from an input stream.
The input stream.
The layout of the property definition table.
The row.
Creates a new row for the property definition metadata table.
The attributes associated to the property definition.
The index into the #Strings stream referencing the name of the property.
The index into the #Blob stream referencing the signature of the property.
Gets or sets the attributes associated to the property definition.
Gets or sets an index into the #Strings stream referencing the name of the property.
This value should always index a non-empty string.
Gets or sets an index into the #Blob stream referencing the signature of the property. This includes the property
type.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the property map metadata table.
Reads a single property map row from an input stream.
The input stream.
The layout of the property map table.
The row.
Creates a new row for the property map metadata table.
The index into the TypeDef table that this mapping is associating to an property list.
The index into the Event table indicating the first property that is defined in
the property list.
Gets or sets an index into the TypeDef table that this mapping is associating to an property list.
Gets or sets an index into the Event table indicating the first property that is defined in the property list.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the property pointer metadata table.
Reads a single property pointer row from an input stream.
The input stream.
The layout of the property pointer table.
The row.
Creates a new row for the property pointer metadata table.
The index into the Property table that this pointer references.
Gets or sets an index into the Property table that this pointer references.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all possible flags that can be assigned to a security declaration attribute.
Indicates all callers higher in the call stack are required to have been granted the permission specified
by the current permission object.
Indicates the calling code can access the resource identified by the current permission object,
even if callers higher in the stack have not been granted permission to access the resource.
Indicates the ability to access the resource specified by the current permission object is denied to callers,
even if they have been granted permission to access it.
This value is deprecated.
Indicatges only the resources specified by this permission object can be accessed, even if the code has
been granted permission to access other resources.
Indicates the immediate caller is required to have been granted the specified permission.
Indicates the derived class inheriting the class or overriding a method is required to have been granted the
specified permission.
Indicates the request for the minimum permissions required for code to run. This action can only be used
within the scope of the assembly.
Indicates the request for additional permissions that are optional (not required to run). This request
implicitly refuses all other permissions not specifically requested. This action can only be used within
the scope of the assembly.
The request that permissions that might be misused will not be granted to the calling code.
This action can only be used within the scope of the assembly.
Represents a single row in the security declaration metadata table.
Reads a single security declaration row from an input stream.
The input stream.
The layout of the security declaration table.
The row.
Creates a new row for the security declaration metadata table.
The action to be performed.
The HasDeclSecurity index that this security attribute is assigned to.
The index into the #Blob stream referencing the permission set assigned to the member.
Gets or sets the action to be performed.
Gets a HasDeclSecurity index (an index into either the TypeDef, Method or Assembly table) that this
security attribute is assigned to.
Gets or sets an index into the #Blob stream referencing the permission set assigned to the member.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides an implementation of a metadata table that was serialized to a PE file.
The type of rows that this table stores.
Defines a method that reads a single row from an input stream, using the provided table layout.
The input stream.
The layout of the table.
Defines a method that reads a single row from an input stream, using the provided table layout.
The reader context.
The input stream.
The layout of the table.
Reads a metadata table from an input stream.
The input stream.
The index of the table.
The layout of the table.
Indicates the table is sorted or not.
The method to use for reading each row in the table.
Reads a metadata table from an input stream.
The reader context.
The input stream.
The index of the table.
The layout of the table.
Indicates the table is sorted or not.
The method to use for reading each row in the table.
Represents a single row in the stand-alone signature metadata table.
Reads a single stand-alone signature row from an input stream.
The input stream.
The layout of the stand-alone signature table.
The row.
Creates a new row for the stand-alone signature metadata table.
The index into the #Blob stream referencing the signature that was exposed by this row.
Gets or sets an index into the #Blob stream referencing the signature that was exposed by this row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the Portable PDB state machine method metadata table.
Creates a new row for the Portable PDB state machine method metadata table.
An index into the method table referencing the MoveNext method of an async state machine.
An index into the method table referencing the kickoff method of an async state machine.
Gets or sets an index into the method table referencing the MoveNext method of an async state machine.
Gets or sets an index into the method table referencing the kickoff method of an async state machine.
Reads a single Portable PDB state machine method row from an input stream.
The input stream.
The layout of the state machine method table.
The row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides members defining all metadata tables that can be present in a tables stream.
Provides extension methods to the enumeration.
Determines whether the provided index is a valid table index.
The index.
true if valid, false otherwise.
Provides a description of the layout of a table in the tables metadata stream. This includes information about
the name, data type and size in bytes of each column.
Defines a new layout for a metadata table.
The column layouts.
Gets a collection of columns that this table defines.
Gets the total size in bytes of a single row in the table.
Provides members defining all flags that can be assigned to a type definition.
Class is not public scope.
Class is public scope.
Class is nested with public visibility.
Class is nested with private visibility.
Class is nested with family visibility.
Class is nested with assembly visibility.
Class is nested with family and assembly visibility.
Class is nested with family or assembly visibility.
Provides a bitmask for obtaining flags related to visibility.
Class fields are auto-laid out
Class fields are laid out sequentially
Layout is supplied explicitly
Layout is supplied via a System.Runtime.InteropServices.ExtendedLayoutAttribute
Provides a bitmask for obtaining flags related to the layout of the type.
BaseType is a class.
BaseType is an interface.
Provides a bitmask for obtaining flags related to the semantics of the type.
Class is abstract.
Class is concrete and may not be extended.
Class name is special. Name describes how.
Runtime should check name encoding.
Class / interface is imported.
The class is Serializable.
LPTSTR is interpreted as ANSI in this class.
LPTSTR is interpreted as UNICODE.
LPTSTR is interpreted automatically
A non-standard encoding specified by CustomFormatMask.
Provides a bitmask for obtaining flag related to string format.
Initialize the class any time before first static field access.
This ExportedType is a type forwarder.
Class has security associate with it.
Represents a single row in the type definition metadata table.
Reads a single type definition row from an input stream.
The input stream.
The layout of the type definition table.
The row.
Creates a new row for the type definition metadata table.
The attributes associated to the type.
The index into the #Strings heap containing the name of the type reference.
The index into the #Strings heap containing the namespace of the type reference.
The TypeDefOrRef coded index representing the base type of this type.
The index into the Field (or FieldPtr) table, representing the first field defined
in the type.
The index into the Method (or MethodPtr) table, representing the first method defined
in the type.
Gets or sets the attributes associated to the type.
Gets or sets an index into the #Strings heap containing the name of the type reference.
This value should always index a non-empty string.
Gets or sets an index into the #Strings heap containing the namespace of the type reference.
This value can be zero. If it is not, it should always index a non-empty string.
Gets a TypeDefOrRef coded index (an index to a row in either the TypeRef, TypeDef or TypeSpec table)
representing the base type of this type.
Gets or sets an index into the Field (or FieldPtr) table, representing the first field defined in the type.
Gets or sets an index into the Method (or MethodPtr) table, representing the first method defined in the type.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Provides an implementation for the Type Reference Hash (TRH) as introduced by GData.
This hash is used as an alternative to the ImpHash to identify malware families based on
the type references imported by the .NET image.
Reference:
https://www.gdatasoftware.com/blog/2020/06/36164-introducing-the-typerefhash-trh
If the provided image is a .NET image, computes the Type Reference Hash (TRH) as introduced by GData to
identify malware based on its imported type references.
The image to get the TRH from.
The hash.
Occurs when the provided image does not contain .NET metadata.
Computes the Type Reference Hash (TRH) as introduced by GData to identify malware based on its
imported type references.
The metadata directory to get the TRH from.
The hash.
Occurs when the provided image does not contain .NET metadata.
Represents a single row in the type reference metadata table.
Reads a single type reference row from an input stream.
The input stream.
The layout of the type reference table.
The row.
Creates a new row for the type reference metadata table.
The ResolutionScope coded index containing the scope that can resolve this
type reference.
The index into the #Strings heap containing the name of the type reference.
The index into the #Strings heap containing the namespace of the type reference.
Gets a ResolutionScope coded index (an index to a row in either the Module, ModuleRef, AssemblyRef or TypeRef table)
containing the scope that can resolve this type reference.
Gets or sets an index into the #Strings heap containing the name of the type reference.
This value should always index a non-empty string.
Gets or sets an index into the #Strings heap containing the namespace of the type reference.
This value can be zero. If it is not, it should always index a non-empty string.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents a single row in the type specification metadata table.
Reads a single type specification row from an input stream.
The input stream.
The layout of the type specification table.
The row.
Creates a new row for the type specification metadata table.
The index into the #Blob stream referencing the type signature that was exposed by
this row.
Gets or sets an index into the #Blob stream referencing the type signature that was exposed by this row.
Determines whether two rows are considered equal.
Determines whether two rows are not considered equal.
Represents the metadata streams containing the user strings referenced by CIL method bodies.
Like most metadata streams, the user strings stream does not necessarily contain just valid strings. It can contain
(garbage) data that is never referenced by any of the tables in the tables stream. The only guarantee that the
strings heap provides, is that any string index in a CIL method body is the start address (relative to the start
of the #US stream) of a unicode string, prefixed by a length, and suffixed by one extra terminator byte.
The default name of a user-strings stream, as described in the specification provided by ECMA-335.
Initializes the user-strings stream with its default name.
Initializes the user-strings stream with a custom name.
Gets a string by its string index.
The offset into the heap to start reading.
The string, or null if the index was invalid.
Searches the stream for the provided string.
The string to search for.
When the function returns true, contains the index at which the string was found.
true if the string index was found, false otherwise.
Searches the stream for the provided string.
The string to search for.
When the function returns true, contains the token for which the string was found.
true if the string token was found, false otherwise.
Performs a linear sweep on the stream and yields all strings that are stored.
The strings enumerator.
As strings can be referenced at any offset within the heap, the heap is technically allowed to contain
garbage data in between string entries. As such, this linear sweep enumerator may not be an accurate
depiction of all strings that are used by the module.
Represents a section in a ReadyToRun .NET portable executable that contains an identifier of the compiler
that was used to generate the image.
Creates a new compiler identifier section.
The compiler identifier.
Gets or sets the identifier of the compiler that was used to create the ReadyToRun image.
Represents a ReadyToRun section with a custom or unsupported file format.
Creates a new ReadyToRun section with a custom format.
The type of the section.
The contents of the section.
Gets or sets the contents of the section.
Provides additional debug information to a precompiled method body.
Gets a collection of bounds information associated to the method.
Gets a collection of native variable information associated to the method.
Obtains the bounds information of the method.
The bounds.
This method is called upon initialization of the property.
Obtains the native variable information of the method.
The variables.
This method is called upon initialization of the property.
Provides members defining all possible attributes that can be assigned to a single
entry.
Indicates that no other options apply
Indicates the debugger asked for it.
Indicates the stack is empty here.
Indicates this is a call site.
Indicates an epilog endpoint.
Indicates the actual instruction of a call.
Describes bounds within a precompiled method body and attaches additional semantics to it.
A special offset indicating the native code was not mapped to IL code.
A special offset indicating the native code maps to the function's prologue.
A special offset indicating the native code maps to the function's epilogue.
Creates a new bounds descriptor.
The starting native offset.
The starting IL offset.
The attributes describing the semantics of the bounds.
Gets the starting native offset of the bounds.
Gets the associated starting IL offset of the bounds.
Gets the attributes assigned to the bounds.
Represents the ReadyToRun section containing additional debugging information for precompiled methods.
Gets an ordered collection of debug info entries stored in the section.
Obtains the entries stored in the section.
The entries.
This method is called upon initialization of the property.
Provides debugging information about a single native variable in a precompiled method.
The special VARARGS handle variable index.
The special return buffer variable index.
The special type context variable index.
Creates new debugging information for the specified native variable.
The start offset the variable is live at.
The (exclusive) end offset the variable is live at.
The index of the variable.
The location of the variable.
Gets the start offset the variable is live at.
Gets the (exclusive) end offset the variable is live at.
Gets the index of the variable.
Gets the location of the variable.
Describes the location of a native variable in a precompiled method.
Creates a new location description for a variable.
The type of location.
The first parameter further specifying the location.
Creates a new location description for a variable.
The type of location.
The first parameter further specifying the location.
The second parameter further specifying the location.
Creates a new location description for a variable.
The type of location.
The first parameter further specifying the location.
The second parameter further specifying the location.
The third parameter further specifying the location.
Gets the type of location.
Gets the first parameter further specifying the location.
Gets the second parameter further specifying the location.
Gets the third parameter further specifying the location.
Provides members defining all possible locations a native variable in a precompiled method can be placed at.
variable is in a register.
address of the variable is in a register.
variable is in an fp register.
variable is on the stack (memory addressed relative to the frame-pointer).
address of the variable is on the stack (memory addressed relative to the frame-pointer).
variable lives in two registers.
variable lives partly in a register and partly on the stack.
reverse of VLT_REG_STK.
variable lives in two slots on the stack.
variable lives on the floating-point stack.
variable is a fixed argument in a varargs function (relative to VARARGS_HANDLE).
Provides a default implementation for the interface.
Gets the singleton instance of the class.
Represents a single import section in a ReadyToRun ImportSections section.
Gets a collection of slots stored in the import section.
Gets or sets attributes associated to the section.
Gets or sets the type of slots stored in .
Gets or sets the size in bytes of a single slot in .
Valid values are either 4 or 8.
Gets a collection of signatures associated with each slot in stored in the import
section (if available).
Gets a pointer to auxiliary data attached to this section, if available.
Obtains the slots stored in this section.
The slots.
This method is called upon initialization of the property.
Obtains the signatures stored in this section.
The signatures.
This method is called upon initialization of the property.
Provides members describing all possible attributes that can be attached to a .
Indicates no special attributes were assigned.
Indicates the slots in the section have to be initialized at image load time.
Indicates the slots contain pointers to code.
Represents a section in the ReadyToRun directory of a .NET module that contains import sections.
Gets the import sub-sections stored in the section.
Obtains the sub sections stored in the section.
The sections.
This method is called upon initialization of the property.
Provides members describing all possible import section types.
Indicates the type of the section was unspecified.
Indicates the section contains dispatcher stubs.
Indicates the section contains string handles.
Indicates the section contains IL body fixups.
Represents a single section within a ReadyToRun directory of a .NET module.
Gets the type of the ReadyToRun section.
Indicates whether the raw contents of the section can be read using a .
Creates a binary reader that reads the raw contents of the ReadyToRun section.
The reader.
Occurs when is false.
Provides methods for parsing individual sections in a ReadyToRun directory of a .NET module.
Parses a single ReadyToRun section.
The context in which the reader is situated in.
The type of section to read.
The input stream containing the raw binary contents of the section.
The parsed section.
Provides information about a native entry point for a managed method that was compiled ahead-of-time.
Constructs a new entry point for a method.
The index of the RUNTIME_FUNCTION this method starts at.
Gets or sets the index to the RUNTIME_FUNCTION the method starts at.
Gets a collection of fixups that need to be applied before the method can be executed natively.
Reads a single method entry point metadata segment from the provided input stream.
The input stream.
The read entry point metadata
Represents a section in a ReadyToRun directory of a .NET module containing the native entry points and fixups
of all the ahead-of-time compiled managed methods.
Gets a collection of entry points stored in the section. The index of the element corresponds to the method
as specified in the method definition table in the tables stream of the .NET module.
Obtains the entry points stored in the section.
The entry points.
This method is called upon initialization of the property.
Describes a fixup that needs to be applied to a native method body before it can be executed.
Constructs a new method fixup.
The index to the import section containing the fixup.
The index of the fixup slot within the import section to apply.
Gets the index to the import section containing the fixup.
Gets the index of the fixup slot within the import section to apply.
Represents a sparse list of elements stored in the native file format as specified by the ReadyToRun file format.
The type of elements to store in the array.
Reads a sparse array in the native file format from the provided input stream.
The input stream.
The function to use for reading individual elements.
The read array.
Provides members describing all possible flags that can be associated to a single ReadyToRun header.
Indicates the original IL image was platform neutral. The platform neutrality is part of assembly name.
This flag can be used to reconstruct the full original assembly name.
Indicates the image represents a composite R2R file resulting from a combined compilation of a larger number
of input MSIL assemblies.
Indicates PInvoke stubs compiled into image are non-shareable (no secret parameter).
Indicates the input MSIL is embedded in the R2R image.
Indicates this is a component assembly of a composite R2R image.
Indicates this R2R module has multiple modules within its version bubble (For versions before version 6.3,
all modules are assumed to possibly have this characteristic).
Indicates this R2R module has code in it that would not be naturally encoded into this module.
Represents a managed native header of a .NET portable executable file that is in the ReadyToRun format.
Gets the major version of the file format that is used.
Gets the minor version of the file format that is used.
Gets or sets the flags associated with the ReadyToRun module.
Gets the individual sections referenced by the ReadyToRun directory.
Obtains the sections referenced by the directory.
The sections.
This method is called upon initialization of the property.
Gets a section by its section type.
The type of section.
The section.
Occurs when there is no section of the provided type present in the directory.
Gets a section by its section type.
The type of section.
The section.
Occurs when there is no section of the provided type present in the directory.
Attempts to get a section by its section type.
The type of the section.
The section, or null if none was found.
true if the section was found, false otherwise.
Attempts to get a section by its section type.
The type of section.
The section, or null if none was found.
true if the section was found, false otherwise.
Provides members describing all possible types of imported fixups in a ReadyToRun assembly.
Generic lookup using this; followed by the type signature and by the method signature.
Type-based generic lookup for methods on instantiated types; followed by the TypeSpec signature.
Generic method lookup; followed by the method spec signature.
Pointer uniquely identifying the type to the runtime, followed by TypeSpec signature (see ECMA-335).
Pointer uniquely identifying the method to the runtime, followed by method signature (see below).
Pointer uniquely identifying the field to the runtime, followed by field signature (see below).
Method entrypoint or call, followed by method signature.
Method entrypoint or call, followed by MethodDef token (shortcut).
Method entrypoint or call, followed by MethodRef token (shortcut).
Virtual method entrypoint or call, followed by method signature.
Virtual method entrypoint or call, followed by MethodDef token (shortcut)
Virtual method entrypoint or call, followed by MethodRef token (shortcut)
Virtual method entrypoint or call, followed by TypeSpec signature and slot
Helper call, followed by helper call id (see chapter 4 Helper calls)
String handle, followed by metadata string token
New object helper, followed by TypeSpec signature
New array helper, followed by TypeSpec signature
IsInst helper, followed by TypeSpec signature
ChkCast helper, followed by TypeSpec signature
Field address, followed by field signature
Static constructor trigger, followed by TypeSpec signature
Non-GC static base, followed by TypeSpec signature
GC static base, followed by TypeSpec signature
Non-GC thread-local static base, followed by TypeSpec signature
GC thread-local static base, followed by TypeSpec signature
Starting offset of fields for given type, followed by TypeSpec signature. Used to address base class
fragility.
Field offset, followed by field signature
Hidden dictionary argument for generic code, followed by TypeSpec signature
Hidden dictionary argument for generic code, followed by method signature
Verification of type layout, followed by TypeSpec and expected type layout descriptor
Verification of field offset, followed by field signature and expected field layout descriptor
Delegate constructor, followed by method signature
Dictionary lookup for method declaring type. Followed by the type signature.
Target (indirect) of an inlined PInvoke. Followed by method signature.
Target of an inlined PInvoke. Followed by method signature.
Specify the instruction sets that must be supported/unsupported to use the R2R code associated with the
fixup.
Generate a runtime check to ensure that the field offset matches between compile and runtime.
Unlike CheckFieldOffset, this will generate a runtime exception on failure instead of silently dropping
the method
Generate a runtime check to ensure that the field offset matches between compile and runtime.
Unlike CheckFieldOffset, this will generate a runtime exception on failure instead of silently dropping
the method
Generate a runtime check to ensure that virtual function resolution has equivalent behavior at runtime as
at compile time. If not equivalent, code will not be used. See Virtual override signatures for details of
the signature used.
Generate a runtime check to ensure that virtual function resolution has equivalent behavior at runtime as
at compile time. If not equivalent, generate runtime failure. See Virtual override signatures for details
of the signature used.
Check to see if an IL method is defined the same at runtime as at compile time. A failed match will cause
code not to be used. SeeIL Body signatures for details.
Verify an IL body is defined the same at compile time and runtime. A failed match will cause a hard runtime
failure. SeeIL Body signatures for details.
When or-ed to the fixup ID, the fixup byte in the signature is followed by an encoded uint with AssemblyRef
index, either within the MSIL metadata of the master context module for the signature or within the manifest
metadata R2R header table (used in cases inlining brings in references to assemblies not seen in the input
MSIL).
Provides members describing all available helper calls for a single fixup.
Provides all possible ReadyToRun section types.
Represents a platform-agnostic ReadyToRun section containing RUNTIME_FUNCTION structures describing all code
blocks in the image with pointers to their unwind info.
Obtains the collection of functions stored in the section.
The functions.
Represents a platform-specific ReadyToRun section containing RUNTIME_FUNCTION structures describing all code
blocks in the image with pointers to their unwind info.
The type of function to store in the section.
Gets a collection of functions stored in the section.
Obtains the entries stored in the section.
The entries.
This method is called upon initialization of the property.
Provides a lazy-initialized implementation of a that is read from a file.
Reads debug information from the provided input stream.
The context the reader is situated in.
The input stream.
Provides a lazy-initialized implementation of the that is read from a file.
Reads a debug information section from the provided input stream.
The context the reader is situated in.
The input stream.
Provides a lazy-initialized implementation of the that is read from a file.
Reads a single import section from the provided input stream.
The context in which the reader is situated in.
The input stream.
Provides a lazy-initialized implementation of the that is read from a file.
Reads a single import sections section from the provided input stream.
The context in which the reader is situated in.
The input stream.
Provides a lazy-initialized implementation of that is read from an
input .NET executable file.
Reads a method entry points section from the provided input stream.
The input stream.
Provides an implementation of a .NET ReadyToRun directory that was stored in a PE file.
Reads a .NET ReadyToRun directory from an input stream.
The reader context.
The input stream.
Provides a lazy-initialized implementation of the class that reads
entries from an x86 64-bit PE file.
Reads a runtime function section from the provided input stream.
The context in which the reader is situated in.
The input stream.
Represents a data directory containing the data of all manifest resources stored in a .NET module.
Gets the manifest resource data by its offset.
The offset of the resource data, relative to the start of the data directory.
The data, or null if the offset is not a valid offset.
Gets a reader starting at the beginning of the resource data referenced by the provided offset.
The offset of the resource data, relative to the start of the data directory.
When this method returns true, this parameter contains the created binary reader.
true if a blob reader could be created at the provided offset, false otherwise.
Provides an implementation of a .NET resources directory that obtains blobs from a readable segment in a file.
Creates a new instance of the using an input stream as
raw contents of the directory.
The input stream.
Creates a new instance of the using a readable data segment
as raw contents of the directory.
The input stream.
Provides an implementation of a .NET directory that was stored in a PE file.
Reads a .NET directory from an input stream.
The reader context.
The input stream.
Occurs when any of the arguments are null.
Provides members for all valid RSA public key structures supported by AsmResolver.
Indicates the structure is a public key.
Indicates the structure is a private key.
Provides members for identifying cryptographic algorithms supported by AsmResolver.
RSA public key signature algorithm. This algorithm is supported by the Microsoft Base Cryptographic Provider.
Provides a base for strong name key structures.
Reads and verifies the blob header at the provided input stream.
The input stream.
The expected structure type to read.
The expected structure version to read.
The expected algorithm.
Occurs when the input stream is not in the correct format.
Occurs when an invalid or unsupported algorithm is specified.
Gets the type of structure that is encoded.
Gets the version number of the structure.
Gets the algorithm used.
Provides members for all predefined types of public key structures used by cryptographic service providers (CSP).
The key is a session key.
The key is a public key.
The key is a public/private key pair.
The key is a session key.
The key is a session key.
The key is a public key.
The key is a symmetric key.
The BLOB is a key state BLOB.
Represents a public/private key pair in the RSA crypto system.
Reads a private key from an input file.
The path to the strong-name key file.
The private key.
Occurs when the input stream is not in the correct format.
Occurs when an invalid or unsupported algorithm is specified.
Reads a private key from an input stream.
The input stream.
The private key.
Occurs when the input stream is not in the correct format.
Occurs when an invalid or unsupported algorithm is specified.
Creates a new empty private key.
Imports a public/private key pair from an instance of .
The RSA parameters to import.
Gets or sets the first prime number used in the RSA crypto system.
Gets or sets the second prime number used in the RSA crypto system.
Gets or sets the first exponent (equal to d mod (p-1)) used in the RSA crypto system.
Gets or sets the second exponent (equal to d mod (q-1)) used in the RSA crypto system.
Gets or sets the coefficient which is equal to the modular inverse of q mod p, used in the RSA crypto system.
Gets or sets the private exponent used in the RSA crypto system.
Represents the public key in a RSA crypto system.
Reads a private key from an input file.
The path to the strong-name key file.
The private key.
Occurs when the input stream is not in the correct format.
Occurs when an invalid or unsupported algorithm is specified.
Reads a private key from an input stream.
The input stream.
The private key.
Occurs when the input stream is not in the correct format.
Occurs when an invalid or unsupported algorithm is specified.
Creates a new strong name public key.
The modulus to use in the RSA crypto system.
The public exponent to use in the RSA crypto system.
Imports a public key from an instance of .
The RSA parameters to import.
Gets the magic header number defining the type of RSA public key structure.
Gets the number of bits used by the modulus parameter.
Gets or sets the public exponent used in the RSA crypto system.
Gets or sets the modulus used in the RSA crypto system.
Prepares a blob signature containing the full public key of an assembly.
The hash algorithm that is used to hash the PE file.
The blob signature.
Translates the strong name parameters to an instance of .
The converted RSA parameters.
Provides a mechanism for adding a strong name signature to a PE image.
Creates a new strong name signer instance.
The private key to use.
Gets the private key to use for signing the image.
Finalizes a delay-signed PE image.
The stream containing the image to sign.
The hashing algorithm to use.
Occurs when the image does not contain a valid .NET image.
Occurs when the image does not contain a strong name directory of the right size.
Represents a VTable declared by the VTable fixups directory.
Creates a new VTable fixup.
Gets a list of the tokens added to this vtable.
Reads a single vtable from the provided input stream.
The reader context.
The input stream.
Represents the VTable fixups directory in the Cor20 header.
Represents the segment of the metadata tokens of a VTable.
Gets or sets the type of the entries
Constructs a reference to an element within the collection.
The index of the element to reference.
The reference.
Gets the byte offset to an element within the collection that is relative to the start of the list.
The index of the element to reference.
The offset.
Types of VTable entries
VTable slots are 32 bits.
VTable slots are 64 bits.
Transition from unmanaged to managed code.
Call most derived method described by the token (only valid for virtual methods)
Represents a single scope in an ARM64 .xdata unwind record.
The size of a single epilog scope record.
Creates a new epilog scope from the provided raw value.
The raw value.
Creates a new epilog scope from the provided starting offset and index.
The start offset of the epilog, relative to the start of the function.
The index of the first unwind code to execute.
Gets or sets the start offset of the epilog, relative to the start of the function.
Gets or sets the index of the first unwind code to execute.
Reads a single epilog scope from the provided input stream.
The input stream.
The epilog scope.
Represents a packed ARM64 unwind info record associated to a RUNTIME_FUNCTION of an ARM64 executable file.
Creates an empty packed unwind info record.
Constructs a packed unwind info from the provided raw value.
The raw value.
Gets the number of non-volatile FP registers (d8-15) that are saved by this function.
Gets the number of non-volatile integer registers (x19-x28) that are saved by this function.
Gets or sets a value indicating whether the function homes the integer parameter registers (x0-x7) by storing them
at the start of the function.
Gets or sets flags indicating whether the function includes extra instructions to set up a stack frame chain.
Gets or sets the number of bytes of the stack that is allocated for this function.
Defines all variants for frame chain setup code in an ARM64 function.
Indicates an unchained function where LR is not saved on the stack.
Indicates an unchained function where LR is saved on the stack.
Indicates a chained function with a pacibsp signed return address.
Indicates a chained function that uses a store/load instruction pair in the prolog/epilog for the LR register.
Represents a single runtime function in a Structured Exception Handler (SEH) table of a portable executable
targeting the ARM64 architecture.
The size of a single entry.
Creates a new runtime function for the ARM64 architecture.
The reference to the beginning of the function.
The unwind information associated to the function.
Reads a single from the provided input stream.
The reader context.
The input stream.
The read function entry.
Gets or sets the unwind info associated with this runtime function.
Represents an unpacked ARM64 .xdata unwind info record associated to a RUNTIME_FUNCTION of an ARM64 executable file.
Gets or sets the version of the xdata unwind info format.
Currently, only version 0 is defined. Values of 1-3 are not permitted.
Gets a collection of epilog scopes defined in this xdata unwind info.
Gets or sets the raw bytes of the unwind codes.
When available, gets or sets a reference to the exception handler data.
When available, gets or sets a reference to the exception handler data.
Reads an .xdata unwind information record from the provided input stream.
The reader context.
The input stream.
The read unwind record.
Provides a basic implementation of the directory.
The type of functions to store.
Gets a collection of functions that are stored in the table.
Obtains the entries in the exception handler table.
The entries.
This method is called upon initialization of the property.
Provides members describing unwind information for an ARM64 runtime function.
Gets the raw contents of the data field for the RUNTIME_FUNCTION entry.
Gets the number of instructions that this unwind info is protecting.
Represents the data directory containing a table of functions in a portable executable
that use Structured Exception Handling (SEH).
Gets a collection of functions defined by the exception handler directory.
The functions.
Represents a single entry in an exception data directory of a portable executable (PE).
Gets the address to the beginning of the referenced function.
Gets the address to the end of the referenced function.
Gets the unwind information associated to the referenced function.
Represents unwind information associated to a for handling an exception.
When available, gets the reference to the exception handler code that is associated with this function.
When available, gets the reference to the exception handler data that is associated with this function.
Represents a single runtime function in a Structured Exception Handler (SEH) table of a portable executable
targeting the x64 (AMD64) architecture.
The size of a single entry.
Creates a new instance of the class.
The reference to the beginning of the function.
The reference to the end of the function.
The unwind information associated to the function.
Gets or sets the unwind information associated to the function.
Reads a single from the provided input stream.
The reader context.
The input stream.
The read function entry.
Defines all possible flags that can be assigned to an instance of .
Indicates no handlers.
Indicates the function has an exception handler that should be called when looking for functions
that need to examine exceptions.
Indicates the function has a termination handler that should be called when unwinding an exception.
Indicates This unwind info structure is not the primary one for the procedure. Instead, the chained
unwind info entry is the contents of a previous entry.
Encodes the effects a function has on the stack pointer, and where the nonvolatile
registers are saved on the stack.
Creates a new empty instance of the class.
Gets or sets the version number of the unwind info..
Should be 1.
Gets or sets the flags associated to the unwind information.
Gets or sets a value indicating whether the function has an exception handler that should be called when
looking for functions that need to examine exceptions.
Gets or sets a value indicating whether the function has a termination handler that should be called
when unwinding an exception.
Gets or sets a value indicating whether this unwind info structure is not the primary one for the procedure.
Instead, the chained unwind info entry is the contents of a previous RUNTIME_FUNCTION entry.
Gets or sets the length of the function prolog in bytes.
Gets the number of the nonvolatile register used as the frame pointer, using the same encoding for the
operation info field of UNWIND_CODE nodes.
If is nonzero, gets or sets the scaled offset from RSP that is applied to the
FP register when it is established.
Gets or sets an array of items that explains the effect of the prolog on the nonvolatile registers and RSP.
When or is true, gets or sets
the reference to the exception handler assigned to this unwind information.
When or is true, gets or sets
the reference to the exception handler data assigned to this unwind information.
When is true, gets or sets the function that this unwind information is
chained with.
Reads unwind information from the provided input stream.
The reader context.
The input stream.
The read unwind information.
Provides a mechanism for building up a table of exported addresses in the export data directory of
a portable executable (PE) file.
Constructs a new export address table buffer.
The name table buffer to use for obtaining the RVAs of forwarder symbols.
Adds a single symbol to the address table buffer.
The symbol to add.
Provides a mechanism for building an export data directory in a portable executable (PE) file.
Gets the raw size in bytes of an export directory header.
Creates a new empty export directory buffer.
Gets a value indicating whether the export directory buffer is empty or not.
Adds an export directory and its contents to the buffer.
The export directory to add.
Occurs when a second directory is added.
Represents a mutable buffer that stores strings referenced by exported symbols in the export data directory.
Adds the provided name to the buffer if it does not exist yet.
The name to add.
When the name was registered in the buffer, obtains the relative virtual address (RVA) to the name.
The name.
The RVA.
This method should only be used after the hint-name table has been relocated to the right location in the
PE file.
Provides a mechanism for building up an ordinal and name-pointer table in an export data directory
of a portable executable file.
Creates a new empty ordinal and name-pointer table buffer.
The table containing the names of all exports.
Gets the relative virtual address (RVA) to the ordinal table.
Gets the raw size in bytes of the ordinal table.
Gets the relative virtual address (RVA) to the name pointer table.
Gets the raw size in bytes of the name pointer.
When the symbol is exported by name, adds the ordinal and name pointer pair to the buffer.
The symbol to register.
Represents the data directory containing exported symbols that other images can access through dynamic linking.
Initializes a new empty symbol export directory.
Creates a new symbol export directory.
The name of the library exporting the symbols.
Gets or sets the flags associated to the export directory.
This field is reserved and should be zero.
Gets or sets the time and date that the exports data was created.
Gets or sets the user major version number.
Gets or sets the user minor version number.
Gets or sets the name of the exports directory.
Gets or sets the base ordinal of the exports directory.
Gets an ordered list of symbols that are exported by the portable executable (PE) image.
Obtains the name of the library that is exporting symbols.
The name.
This method is called upon initialization of the property.
Obtains the list of exported symbols defined by the export directory.
The exported symbols..
This method is called upon initialization of the property.
Represents a single symbol that is exported by a dynamically linked library.
Creates a new symbol that is exported by ordinal.
The reference to the segment representing the symbol.
Creates a new symbol that is exported by name.
The reference to the segment representing the symbol.
The name of the symbol.
Creates a new forwarder symbol that is exported by name.
The reference to the segment representing the symbol.
The name of the symbol.
The name of the forwarded symbol.
Gets the export directory this symbol was added to (if available).
Gets the ordinal of the exported symbol.
Gets a value indicating whether the symbol is exported by ordinal number.
Gets a value indicating whether the symbol is exported by name.
Gets or sets the name of the exported symbol.
Gets or sets the reference to the segment representing the symbol.
For exported functions, this reference points to the first instruction that is executed.
For exported fields, this reference points to the first byte of data that this field consists of.
For forwarded symbols, this reference points to the name of the symbol the forwarder is referencing.
When the symbol is a forwarder symbol, gets or sets the full name of the symbol that this export is forwarded to.
For exports by name, this name should be in the format ModuleName.ExportName.
For exports by ordinal, this name should be in the format ModuleName.#1.
Failure in doing so will make the Windows PE loader not able to resolve the forwarder symbol.
Gets a value indicating whether the symbol is forwarded to another external symbol.
Obtains a name that can be used as a in another export.
The name.
Represents a collection of exported symbols within an export data directory.
Creates a new instance of the exported symbol collection.
Provides an implementation of an exports directory that was read from an existing PE file.
Reads a single export directory from an input stream.
The reader context.
The input stream.
Provides a mechanism for building up a table consisting of hint-name pairs.
Adds the name of the module and the names of all named entries to the hint-name table.
The module to add.
Gets the virtual address to the beginning of the name of a module.
The module to obtain the name RVA for.
The virtual address.
This method should only be used after the hint-name table has been relocated to the right location in the
PE file.
Gets the virtual address to the beginning of the hint-name pair associated to an imported member.
The member to obtain the hint-name RVA for.
The virtual address.
This method should only be used after the hint-name table has been relocated to the right location in the
PE file.
Defines members for resolving thunk RVAs to members in the import directory.
Obtains the RVA of a thunk.
The name of the module that defines the imported member.
The name of the imported member.
The RVA
Occurs when the member could not be found.
Provides a mechanism for building an import address directory in a PE file.
Creates a new import address directory buffer, using the provided hint-name table to obtain addresses to names
of an imported member.
The hint-name table that is used to reference names of modules or members.
Indicates the import directory should use 32-bit addresses or 64-bit addresses.
Provides a mechanism for building an import lookup directory in a PE file.
Creates a new import lookup directory.
Indicates the import directory should use 32-bit addresses or 64-bit addresses.
Gets the import address directory that is linked to this lookup directory.
Gets a value indicating whether there is any data added to the buffer.
Provides a base for the import lookup and address directory buffers.
Initializes the new import directory buffer with a hint-name table.
The hint-name table that is used to reference names of modules or members.
Indicates the import directory should use 32-bit addresses or 64-bit addresses.
Gets a value indicating the import directory should use 32-bit addresses or 64-bit addresses.
Gets the number of modules that were added to the import directory.
Gets an ordered list of modules that were added to the buffer.
Gets the hint-name table that is used to reference names of modules or members.
Creates a thunk table for a module and its imported members, and adds it to the buffer.
The module to add.
Obtains the thunk table of a module.
The module to get the associated thunk table for.
The thunk table.
Creates a new thunk table buffer.
The buffer.
Provides a mechanism for building up a thunk table for an import directory.
Creates a new thunk table buffer, that uses the provided hint-name table to reference names.
The hint-name table containing the names of each imported member
Indicates whether the thunk-table should use 32-bit addresses or 64-bit addresses.
Indicates the buffer contains the import address table or lookup table.
Gets a value indicating whether the thunk-table should use 32-bit addresses or 64-bit addresses.
Gets the size of a single entry in the thunk table.
Creates a thunk for the specified member, and adds it to the table.
The member to add.
Obtains the relative virtual address of the thunk associated to an imported member in the thunk table.
The member to get the thunk entry RVA for.
The virtual address
This method should only be used after the thunk table has been relocated to the right location in the
PE file.
Provides an implementation of the that includes some static ordinal-name mappings
from known Windows libraries.
This class should only be used for quick static lookup of common ordinals to names (e.g. in conjuction with
the class). The resulting symbol objects are mock objects and do not contain a valid
address to the actual symbol.
Gets the singleton instance for the class.
Implements a using a delegate.
Creates a new using the provided delegate.
The classification delegate.
Provides an empty implementation for the interface that always returns null.
Gets the singleton instance for the class.
Provides members for classifying imported symbols by their kind.
Classifies the provided symbol.
The symbol to classify.
The classification.
Represents a single module that was imported into a portable executable as part of the imports data directory.
Each instance represents one entry in the imports directory.
Creates a new empty module import.
Creates a new module import.
The name of the module to import.
Gets or sets the name of the module that was imported.
Gets or sets the time stamp that the module was loaded into memory.
This field is always 0 if the PE was read from the disk.
Gets or sets the index of the first member that is a forwarder.
Gets a collection of members from the module that were imported.
Reads a single module import entry from an input stream.
The reader context.
The input stream to read from.
Obtains the collection of members that were imported.
This method is called to initialize the value of property.
The members list.
Represents one member of an external module that was imported into a PE image.
Creates a new import entry that references a member exposed by ordinal.
The ordinal of the member to import.
Creates a new import entry that references a member exposed by name.
The likely index of the export in the export table.
The name of the export.
Gets the module that defines the symbol.
Gets or sets the ordinal of the member that was imported.
This value is meaningless if is true.
Gets or sets the likely index of the member referenced by , into the export table.
Gets or sets the name of the member that was imported.
Gets or sets the entry in the import address table (IAT).
Gets a value indicating the member is imported by its ordinal.
Gets a value indicating the member is imported by its name.
Provides members describing the different types of symbols that can be imported into a PE.
Indicates the imported symbol is referencing an external function or procedure.
Indicates the imported symbol is referencing a global variable or other data symbol.
Provides an implementation of the import hash (ImpHash) introduced by Mandiant.
Reference:
https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html
Computes the hash of all imported symbols.
The image to get the import hash from.
The hash.
This is the ImpHash as introduced by Mandiant.
Reference: https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html
Computes the hash of all imported symbols.
The image to get the import hash from.
The object responsible for resolving symbols imported by ordinal.
The hash.
This is the ImpHash as introduced by Mandiant.
Reference: https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html
Provides members for resolving imported symbols.
Resolves the provided symbol.
The symbol to resolve.
The resolved symbol, or null if none was found.
Provides an implementation of a module import entry present in a PE file.
The amount of bytes a single entry uses in the import directory table.
Reads a module import entry from an input stream.
The reader context.
The input stream.
Determines whether the module import is empty, that is whether every field is 0.
The PE file format uses an empty module import entry to indicate the end of the list of imported modules.
Provides a lazy-initialized list of module import entries that is stored in a PE file.
Prepares a new lazy-initialized list of module import entries.
The reader context.
The import data directory.
Represents an image of a portable executable (PE) file, exposing high level mutable structures.
Opens a PE image from a specific file on the disk.
The
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a specific file on the disk.
The
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a buffer.
The bytes to interpret.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a buffer.
The bytes to interpret.
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a stream.
The stream to interpret.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a stream.
The stream to interpret.
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Reads a mapped PE image starting at the provided module base address (HINSTANCE).
The HINSTANCE or base address of the module.
The PE image that was read.
Occurs when the file does not follow the PE file format.
Reads a mapped PE image starting at the provided module base address (HINSTANCE).
The HINSTANCE or base address of the module.
The parameters to use while reading the PE image.
The PE image that was read.
Occurs when the file does not follow the PE file format.
Reads a PE image starting at the provided module base address (HINSTANCE).
The HINSTANCE or base address of the module.
Indicates how the input PE file is mapped.
The parameters to use while reading the PE image.
The PE image that was read.
Occurs when the file does not follow the PE file format.
Reads a PE image from the provided data source.
The data source to read from.
Indicates how the input PE file is mapped.
The PE image that was read.
Occurs when the file does not follow the PE file format.
Reads a PE image from the provided data source.
The data source to read from.
Indicates how the input PE file is mapped.
The parameters to use while reading the PE image.
The PE image that was read.
Occurs when the file does not follow the PE file format.
Opens a PE image from an input stream.
The input stream.
Indicates the input PE is in its mapped or unmapped form.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from an input stream.
The input stream.
Indicates the input PE is in its mapped or unmapped form.
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from an input file object.
The file representing the PE.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from an input file object.
The file representing the PE.
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a PE file object.
The PE file object.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Opens a PE image from a PE file object.
The PE file object.
The parameters to use while reading the PE image.
The PE image that was opened.
Occurs when the file does not follow the PE file format.
Initializes a new PE image.
Gets the underlying PE file (when available).
When this property is null, the image is a new image that is not yet assembled.
Accessing and using this object file is considered an unsafe operation. Making any changes to this object
while also using the PE image object can have unwanted side effects.
When this PE image was read from the disk, gets the file path to the PE image.
Gets or sets the machine type that the PE image is targeting.
This property is in direct relation with the machine type field in the file header of a portable
executable file.
Gets or sets the attributes assigned to the executable file.
This property is in direct relation with the characteristics field in the file header of a portable
executable file.
Gets or sets the date and time the portable executable file was created.
Gets or sets the magic optional header signature, determining whether the image is a PE32 (32-bit) or a
PE32+ (64-bit) image.
This property is in direct relation with the magic field in the optional header of a portable
executable file.
Gets or sets the subsystem to use when running the portable executable (PE) file.
This property is in direct relation with the subsystem field in the optional header of a portable
executable file.
Gets or sets the dynamic linked library characteristics of the portable executable (PE) file.
This property is in direct relation with the DLL characteristics field in the optional header of a portable
executable file.
Gets or sets the preferred address of the first byte of the image when loaded into memory. Must be a
multiple of 64,000.
This property is in direct relation with the image base field in the optional header of a portable
executable file.
Gets a collection of modules that were imported into the PE, according to the import data directory.
Gets or sets the exports directory in the PE, if available.
Gets or sets the root resource directory in the PE, if available.
Gets or sets the exceptions directory in the PE, if available.
Gets a collection of base relocations that are to be applied when loading the PE into memory for execution.
Gets or sets the data directory containing the CLR 2.0 header of a .NET binary (if available).
Gets a collection of data entries stored in the debug data directory of the PE image (if available).
Gets or sets the data directory containing the Thread-Local Storage (TLS) data.
Gets a collection of attribute certificates that were added to the executable.
Constructs a PE file from the image.
The builder to use for constructing the image.
The constructed file.
Obtains the list of modules that were imported into the PE.
The imported modules.
This method is called upon initialization of the property.
Obtains the list of symbols that were exported from the PE.
The exported symbols.
This method is called upon initialization of the property.
Obtains the root resource directory in the PE.
The root resource directory.
This method is called upon initialization of the property.
Obtains the contents of the exceptions data directory in the PE.
The entries in the exceptions directory.
This method is called upon initialization of the property.
Obtains the base relocation blocks in the PE.
The base relocation blocks.
This method is called upon initialization of the property.
Obtains the data directory containing the CLR 2.0 header of a .NET binary.
The data directory.
This method is called upon initialization of the property.
Obtains the debug data entries in the PE.
The debug data entries.
This method is called upon initialization of the property.
Obtains the data directory containing the Thread-Local Storage (TLS) data.
The data directory.
This method is called upon initialization of the property.
Obtains the data directory containing the attribute certificates table of the executable.
The attribute certificates.
This method is called upon initialization of the property.
Provides a context in which a PE image reader exists in. This includes the original PE file as
well as reader parameters.
Creates a new instance of the class.
The original PE file.
Creates a new instance of the class.
The original PE file.
The reader parameters.
Gets the platform that is assumed while parsing the PE file.
Gets the original PE file that is being parsed.
Gets the reader parameters to use while parsing the PE file.
Creates relocation parameters based on the current PE file that is being read.
The offset of the segment.
The relative virtual address of the segment.
The created relocation parameters.
Provides parameters for the reading process of a PE image.
Initializes the PE reader parameters.
Initializes the PE reader parameters.
The object responsible for recording parser errors.
Gets the object responsible for collecting any errors during the parsing.
Gets or sets the object responsible for reading metadata streams in the .NET data directory.
Gets or sets the object responsible for reading debug data streams in the debug data directory.
Gets or sets the object responsible for reading certificates (such as authenticode signatures) in the
security data directory of the input PE file.
Gets the service to use for reading any additional files from the disk while reading the portable executable.
Gets or sets the object to use for reading ReadyToRun metadata sections from the disk while reading the
portable executable.
Represents a stub of code that initializes slots in a trampolined address table.
Initializes an address table initialization stub with the provided code.
The prologue of the initializer code.
The epilogue of the initializer code.
The implementation of a function that initializes one slot in a table.
Gets the entry point symbol of the address table initializer.
Gets the symbol pointing to the function that initializes a single slot in the table.
This is a function that expects two pointer-sized parameters (original slot address and value), passed in using
the __stdcall calling convention of the underlying ABI.
Gets the raw body (excluding prologue and epilogue) of the initializer stub.
Adds code a single address slot initializer to the stub.
The original slot to initialize.
The new slot to redirect the original slot to.
Collects all required base relocations when adding the initializer stub to a PE image.
The required base relocations.
Provides information and services for the AMD64 target platform.
Gets the singleton instance for the AMD64 platform.
Provides information and services for the ARM32 target platform.
Gets the singleton instance for the ARM32 platform.
Provides information and services for the Aarch64/ARM64 target platform.
Gets the singleton instance for the ARM64 platform.
Represents the generic fallback target platform.
This class implements the bare minimum for any platform that is not supported through a dedicated
class. It is therefore also not able to generate native code (such as thunk stubs or
IAT initializers), and will throw when instructed to do so.
Note that for .NET binaries, the generic platform is not the same as AnyCPU.
AnyCPU binaries are compiled as if they were i386 binaries and thus use the instead.
Provides information and services for the I386 target platform.
Note that .NET AnyCPU binaries are also compiled as i386 binaries.
To distinguish between x86 and AnyCPU .NET binaries, refer to the .NET data directory's attributes to see if
ILOnly is set.
Gets the singleton instance for the I386 platform.
Provides information and services for a particular target platform.
Gets a target platform by its machine type.
The machine type.
The target platform.
Occurs when the platform is not supported.
Gets a target platform by its machine type, and falls back to if the
provided architecture is not officially supported.
The machine type.
The target platform.
Gets a target platform by its machine type.
The machine type.
The target platform.
true if the platform was found, false otherwise.
Gets the machine type associated to the platform.
Gets a value indicating whether PEs with a .NET image embedded requires a CLR bootstrapper.
Gets a value indicating whether the platform is a 32-bit platform.
Gets a value indicating whether the platform is a 64-bit platform.
Gets a value indicating the size of a single pointer.
Gets the default byte-boundary used in aligning thunk stubs in a PE file.
Creates a new thunk stub that transfers control to the provided symbol.
The symbol to jump to.
The created stub.
Attempts to extract the original RVA from the code at the provided thunk address reader.
The image containing the thunk.
The thunk reader.
The extracted RVA.
true if the RVA was extracted successfully from the code, false otherwise.
Creates a new address table initializer stub.
The symbol to kernel32.dll!VirtualProtect to use for temporarily adjusting the memory protection
bits while initializing the address table.
The initializer stub.
Represents a single base relocation that is applied after the operating system has loaded the PE image into
memory.
Creates a new base relocation.
The type of base relocation to apply.
The location within the executable to apply the base relocation.
Gets the type of relocation to apply.
Gets the location within the executable to apply the relocation to.
Determines whether two base relocations are considered equal.
The other base relocation.
true if the base relocations are equal, false otherwise.
This method only considers the virtual address (RVA) of the target location, and not the entire
member.
Represents one block of relocations to be applied when the PE is loaded into memory.
Creates a new base relocation block for the provided page.
The virtual address of the page to apply base relocations on.
Gets or sets the base RVA for this page.
Gets the list of entries added to this page.
Represents one entry in a base relocation block, containing the offset within the page, as well as the type of relocation
to apply after the PE image was loaded by the OS.
Creates a new relocation entry.
The raw value of the entry.
Creates a new relocation entry.
The type of relocation to apply.
The offset within the page to apply the relocation on.
Occurs when the offset does not indicate a valid offset within
the page.
Gets the type of the relocation to apply.
Gets the offset (relative to the current relocation block) to the pointer to relocate.
Gets a value indicating the entry is a zero entry.
Provides a mechanism for building a base relocations directory.
Gets a value indicating whether there is any data added to the buffer.
Adds a single base relocation to the buffer.
The base relocation to add.
Pairs a segment with relocation information.
Creates a new pairing between a segment and relocation information.
The segment.
The relocation information.
Gets the segment that is relocatable.
Gets the relocation information required to relocate the segment.
Provides a mechanism for joining relocatable segments into one single segment.
Gets the number of segments that were concatenated.
Adds the provided segment with no alignment.
The segment to add.
Adds the provided segment to the offset that is the next multiple of the provided alignment.
The segment to add.
The alignment of the segment.
Adds the provided relocatable segment with no alignment.
The segment to add.
Adds the provided relocatable segment to the offset that is the next multiple of the provided alignment.
The segment to add.
The alignment of the segment.
Collects all base relocations that are required when adding the final segment to a PE image.
Provides members for all possible types of relocations that can be applied while loading a PE into memory.
Indicates the relocation is ignored.
Indicates the base relocation adds the high 16 bits of the difference to the 16-bit field at offset.
The 16-bit field represents the high value of a 32-bit word.
Indicates the base relocation adds the low 16 bits of the difference to the 16-bit field at offset.
The 16-bit field represents the low half of a 32-bit word.
Indicates the base relocation applies all 32 bits of the difference to the 32-bit field at offset.
Indicates the base relocation adds the high 16 bits of the difference to the 16-bit field at offset.
The 16-bit field represents the high value of a 32-bit word. The low 16 bits of the 32-bit value are stored
in the 16-bit word that follows this base relocation. This means that this base relocation occupies two slots.
Indicates the relocation interpretation is dependent on the machine type.
This relocation is meaningful only when the machine type is MIPS.
Indicates the base relocation applies the 32-bit address of a symbol across a consecutive MOVW/MOVT
instruction pair.
This relocation is meaningful only when the machine type is ARM or Thumb.
Indicates the base relocation applies to the high 20 bits of a 32-bit absolute address.
This relocation is meaningful only when the machine type is RISC-V.
Indicates the base relocation applies the 32-bit address of a symbol to a consecutive MOVW/MOVT instruction pair.
This relocation is meaningful only when the machine type is Thumb.
Indicates the base relocation applies to the low 12 bits of a 32-bit absolute address formed in RISC-V
I-type instruction format.
This relocation is meaningful only when the machine type is RISC-V.
Indicates the base relocation applies to the low 12 bits of a 32-bit absolute address formed in RISC-V
S-type instruction format.
This relocation is meaningful only when the machine type is RISC-V.
Indicates the base relocation applies to a MIPS16 jump instruction.
This relocation is meaningful only when the machine type is MIPS.
Indicates the base relocation applies the difference to the 64-bit field at offset.
Provides an implementation of a lazy-initialized list of base relocation entries, read from an existing PE file.
Prepares a new lazy-initialized list of base relocations.
The reader context.
The directory that contains the base relocations.
Provides an implementation of a PE image that gets its data from a PE file.
Opens a PE image from a file.
The file to base the image from.
The parameters to use while reading the PE image.
Gets the reading parameters used for reading the PE image.
Provides an implementation of a TLS directory that was read from an existing PE file.
Reads a single TLS directory from an input stream.
The reader context.
The input stream.
Defines all possible values that can be used as characteristics in a TLS directory.
Align data on a 1-byte boundary.
Align data on a 2-byte boundary.
Align data on a 4-byte boundary.
Align data on an 8-byte boundary.
Align data on a 16-byte boundary.
Align data on a 32-byte boundary.
Align data on a 64-byte boundary.
Align data on a 128-byte boundary.
Align data on a 256-byte boundary.
Align data on a 512-byte boundary.
Align data on a 1024-byte boundary.
Align data on a 2048-byte boundary.
Align data on a 4096-byte boundary.
Align data on an 8192-byte boundary.
Represents the data directory containing Thread-Local Storage (TLS) data.
Initializes a new empty TLS data directory.
Gets or sets the block of data that is used as a template to initialize TLS data. The system copies all
of this data each time a thread is created.
The location to receive the TLS index, which the loader assigns
Gets a table of function callbacks that need to be called upon every thread creation.
Gets or sets the number of zero bytes that need to be appended after the template data referenced by
.
Gets or sets the characteristics that are assigned to this directory.
Obtains the block of template data.
The template data.
This method is called upon initialization of the property.
Obtains the table of callback functions.
The callback functions.
This method is called upon initialization of the property.
Obtains a collection of base address relocations that need to be applied to the TLS data directory
after the image was loaded into memory.
The required base relocations.
Provides a mechanism for building a table of data entries in a resource directory.
Creates a new data table buffer.
The resource directory segment that contains the table buffer.
Provides a mechanism for building a new resource directory in a PE file.
Creates a new resource directory buffer.
Gets the segment containing the table with all directory entries.
Gets the segment containing the table with all data entries.
Gets the segment containing the table with the names for all named resource entries.
Gets the segment containing all raw data segments for each data entry.
Gets a value indicating whether there is any data added to the buffer.
Adds a resource directory and all its sub entries to the buffer.
The directory to add.
Provides a mechanism for building a table of directory entries in a resource directory.
Creates a new resource directory table buffer.
The resource directory segment that contains the table buffer.
The table containing the names of each named entry.
The table containing the structures of each data entry.
Provides a mechanism for building a table of names that can be used in a resource directory.
Creates a new name table buffer.
The resource directory segment that contains the name table buffer.
Provides a base for all table buffer structures in the resource directory of a PE file.
The type of entries to store in the table.
Initializes the table buffer.
The resource directory segment that contains the table.
Gets the offset to this segment relative to the start of the resource directory.
This property should only be used after the table has been relocated to the right location in the PE file.
Gets an ordered collection of entries that are put into the table.
Gets a value indicating whether there is any data added to the buffer.
Adds a single entry to the table.
The entry to add.
Determines the size of a single item in the table.
The item to measure.
The size in bytes.
Determines the offset of an entry stored in the table, relative to the start of the resource directory.
The item to get the offset for.
The offset.
This method should only be used after the table has been relocated to the right location in the PE file.
Represents one entry in a win32 resource directory.
Gets the parent directory the entry is stored in.
Gets or sets the name of the entry.
Gets or sets the ID of the entry.
Gets a value indicating the entry is a sub directory or not.
Gets a value indicating the entry is a data entry or not.
Represents a single data entry in a Win32 resource directory.
Initializes a new resource data entry.
Creates a new named data entry.
The name of the entry.
The data to store in the entry.
Creates a new data entry defined by a numerical identifier..
The identifier.
The data to store in the entry.
Gets or sets the raw contents of the data entry.
Gets or sets the code page that is used to decode code point values within the resource data.
Typically, the code page would be the Unicode code page.
Gets a value indicating whether the is readable using a binary stream reader.
Creates a new binary stream reader that reads the raw contents of the resource file.
The reader.
Obtains the contents of the data entry.
The contents.
This method is called upon initializing the value for the property.
Represents a single directory containing Win32 resources of a PE image.
Initializes a new resource directory entry.
Creates a new named resource directory.
The name of the directory.
Creates a new resource directory defined by a numeric identifier.
The identifier.
Creates a new resource directory defined by its resource type.
The type.
Gets the type of resources stored in the directory.
Gets or sets the flags of the directory.
This field is reserved and is usually set to zero.
Gets or sets the time that the resource data was created by the compiler.
Gets or sets the major version number of the directory.
Gets or sets the minor version number of the directory.
Gets a collection of entries that are stored in the directory.
Looks up an entry in the directory by its unique identifier.
The identifier of the entry to lookup.
The entry.
Occurs when no entry with the provided identifier was found.
Looks up an directory by its unique identifier.
The identifier of the directory to lookup.
The directory.
Occurs when no directory with the provided identifier was found.
Looks up an directory by its resource type.
The type of resources to lookup.
The directory.
Occurs when no directory with the provided identifier was found.
Looks up a data entry in the directory by its unique identifier.
The id of the data entry to lookup.
The data entry.
Occurs when no data entry with the provided identifier was found.
Attempts to looks up an entry in the directory by its unique identifier.
The identifier of the entry to lookup.
The found entry, or null if none was found.
true if the entry was found, false otherwise.
Attempts to looks up a directory by its unique identifier.
The identifier of the directory to lookup.
The found directory, or null if none was found.
true if the directory was found, false otherwise.
Attempts to looks up a directory by its resource type.
The type of resources to lookup.
The found directory, or null if none was found.
true if the directory was found, false otherwise.
Attempts to looks up a data entry in the directory by its unique identifier.
The identifier of the data entry to lookup.
The found data entry, or null if none was found.
true if the data entry was found, false otherwise.
Replaces an existing entry with the same ID with the provided entry, or inserts the new entry into the directory.
The entry to store in the directory.
Removes an entry in the directory by its unique identifier.
The identifier of the entry to remove.
true if the data entry was found and removed, false otherwise.
Removes a directory in the directory by its resource type.
The type of resources to remove.
true if the directory was found and removed, false otherwise.
Obtains the list of entries in the directory.
The list of entries.
This method is called upon initialization of the property.
Represents the raw structure of an entry in a directory.
This structure models the IMAGE_DIRECTORY_ENTRY_RESOURCE structure as described in
https://docs.microsoft.com/en-us/windows/win32/debug/pe-format
The size of a single resource directory entry.
Reads a new resource directory entry from the reader.
The containing PE file.
The input stream to read from.
Gets the name of the entry (if available).
Gets either a 32-integer, or an offset to the name, that identifies the type, name or language ID.
Gets a value indicating whether the resource was exposed by name.
Gets the offset (relative to the beginning of the resource directory) to the contents of the entry.
Gets a value indicating whether the resource entry is a data entry or not.
Gets a value indicating whether the resource entry is a sub directory or not.
Provides members for well-known win32 resource types.
Indicates the resource contains a hardware-dependent cursor table.
Indicates the resource contains a bitmap.
Indicates the resource contains a hardware-dependent icon.
Indicates the resource contains a menu.
Indicates the resource contains a dialog box.
Indicates the resource contains a string table.
Indicates the resource contains a directory of fonts.
Indicates the resource contains a font.
Indicates the resource contains an accelerator resource.
Indicates the resource contains an application-defined resource.
Indicates the resource contains a message-table entry.
Indicates the resource contains a hardware-independent cursor.
Indicates the resource contains a hardware-independent icon.
Indicates the resource contains version information.
Indicates the resource contains associations between a string with an .rc file.
Typically, the string is the name of the header file that provides symbolic names.
The resource compiler parses the string but otherwise ignores the value.
Indicates the resource contains Plug and Play.
Indicates the resource contains virtual device driver information.
Indicates the resource contains animated cursors.
Indicates the resource contains animated icons.
Indicates the resource contains an HTML file.
Indicates the resource contains an assembly manifest.
Provides an implementation for a single data entry in a Win32 resource directory, that was read from an existing
PE file.
Indicates the size of a single data entry in a resource directory.
Reads a resource data entry from the provided input stream.
The PE reader context.
The entry to read.
The input stream to read the data from.
Provides an implementation of a resource directory that was read from an existing PE file.
Indicates the size of a single sub-directory entry in a resource directory.
Indicates the maximum depth of sub directories a resource directory can have before AsmResolver aborts
reading the resource tree branch.
Reads a single resource directory from an input stream.
The reader context.
The entry to read. If this value is null, the root directory is assumed.
The input stream.
The current depth of the resource directory tree structure.
If this value exceeds , this class will not initialize any entries.
Specifies an auto property is lazily initialized and that this implementation is provided by a source generator
The source generator generates for every property X marked with this attribute the following:
- A private field _x to store the value of the property
- A private constant XMask specifying the bit mask within the initialization vector _initialized
- A call to a parameterless method GetX()
In case is set, the source generator will also generate code to automatically test and update exclusive ownership of the property's value.
When non-null, gets the name of the property that reflects the owner of the marked property's value.
Use this to indicate the value of the property is exclusively owned by at most one instance of the enclosing class.