dnpy 1.0.0

A library for reading .NET modules

dnpy

A pure-Python library for parsing .NET assemblies. It reads PE files containing ECMA-335 metadata and CIL bytecode, and exposes them through a typed object model.

The current focus is reading. Writing assemblies back to disk is deliberately out of scope until the read path is fully hardened

Installation

pip install dnpy

Quick start

from dnpy import Module

module = Module.from_path("MyAssembly.exe")

if module.assembly:
    a = module.assembly
    print(f"{a.name} v{a.major_version}.{a.minor_version}.{a.build_number}.{a.revision_number}")

for type_def in module.types:
    print(type_def.full_name)
    for method in type_def.methods:
        print(f"  {method.name}")
        for instruction in method.instructions:
            print(f"    {instruction}")

Module.from_bytes(data) is also available for in-memory binaries.

Documentation

The docs/ directory has longer-form material:

• Getting started – installation, the first script, and recipes for the most common tasks.
• Architecture – how a Module is layered on top of the PE file, metadata streams, tables, and heaps.
• Walking IL – the instruction stream, branch targets, exception handlers, and operand resolution.
• API reference – the public surface of the dnpy.Module, TypeDef, MethodDef, and friends.

Out of scope

The following are not implemented:

• Writing or modifying assemblies
• Reading PDB / .pdb symbol files
• Strong-name signing or verification
• Decompilation back to C#

License

MIT. See LICENSE.