C# 读取文件编译生成的时间 (采用读取PE32时间)

C#  读取文件编译生成的时间 

(采用读取PE32时间)

 

/// <summary>
/// 读取文件编译生成的时间 (采用读取PE32时间)
/// </summary>
/// <param name="fileName">文件路径</param>
/// <returns></returns>
public static DateTime GetPE32Time(string fileName)
{
    int seconds=0;
    DateTime dt = new DateTime(1970, 1, 1);//非法的PE32文件 返回这个时间,PE32文件编译的基准时间
    using (var br = new BinaryReader(new FileStream(fileName, FileMode.Open, FileAccess.Read)))
    {
        var bs = br.ReadBytes(2);
        if (bs.Length != 2) return dt;
        if (bs[0] != 'M' || bs[1] != 'Z') return dt;
        br.BaseStream.Seek(0x3c, SeekOrigin.Begin);//File address of new exe header
        var offset = br.ReadByte();
        br.BaseStream.Seek(offset, SeekOrigin.Begin);
        bs = br.ReadBytes(4);
        if (bs.Length != 4) return dt;
        if (bs[0] != 'P' || bs[1] != 'E' || bs[2] != 0 || bs[3] != 0) return dt;
        bs = br.ReadBytes(2);//`6486`: Amd64  `4C01`:I386
        bs = br.ReadBytes(2);//Number of sections
        bs = br.ReadBytes(4);//Unix时间戳,秒
        if (bs.Length != 4) return dt;
        seconds = br.ReadInt32();//小端存储的时间戳: `4D 43 71 62` -> 0x6271434D -> 2022/05/03 14:59:25
    }
    if(seconds>0)
    return DateTime.SpecifyKind(dt, DateTimeKind.Utc).AddSeconds(seconds).ToLocalTime();
    else return dt;
}