Package-level declarations

Types

Link copied to clipboard

Represents a 32-bit address in a PE file.

Link copied to clipboard

Represents a 64-bit address in a PE file.

Link copied to clipboard

Type for C flag-set Characteristics

Link copied to clipboard
value class CodePage(val value: UInt) : Comparable<CodePage>

Represents a code page in a PE file.

Link copied to clipboard
data class CoffHeader(val machine: MachineType, val numbersOfSections: UShort, val timeDateStamp: TimeDateStamp32, val pointerToSymbolTable: Address32, val numbersOfSymbols: UInt, val sizeOfOptionalHeader: UShort, val characteristics: Characteristics) : ReadableStructure

Represents the COFF header structure.

Link copied to clipboard

Represents a data directory item in a pe file.

Link copied to clipboard

Type for C flag-set DllCharacteristics

Link copied to clipboard
Link copied to clipboard

Type for C enum MachineType

Link copied to clipboard

Represents the pe32 magic value in a pe file.

Link copied to clipboard
data class PEExportSymbol(val name: String, val ordinal: UShort, val address: Address32, val isForwarder: Boolean = false, val forwarderString: String? = null) : ExportSymbol

Implementation of export symbol for PE format

Link copied to clipboard
expect open class PEFileException constructor(message: String, cause: Throwable? = null) : CommonFileException

Represents an exception occurring during PE file processing.

actual open class PEFileException @JvmOverloads constructor(message: String, val cause: Throwable?) : CommonFileException

JVM implementation of PEFileException.

actual open class PEFileException constructor(message: String, val cause: Throwable?) : CommonFileException

Non-JVM implementation of PEFileException.

Link copied to clipboard
data class PEImportSymbol(val name: String, val file: String, val ordinal: UShort? = null, val isOrdinal: Boolean = false) : ImportSymbol

Implementation of import symbol for PE format

Link copied to clipboard
interface ResourceNode

Represents a resource node in a PE file.

Link copied to clipboard
Link copied to clipboard

Type for C flag-set SectionFlags

Link copied to clipboard
data class SectionTableItem(val name: String, val virtualSize: UInt, val virtualAddress: Address32, val sizeOfRawData: UInt, val pointerToRawData: Address32, val pointerToRelocations: Address32, val pointerToLinenumbers: Address32, val numberOfRelocations: UShort, val numberOfLinenumbers: UShort, val characteristics: SectionFlags) : ReadableStructure
Link copied to clipboard
data class StandardHeader(val magic: PE32Magic, val majorLinkerVersion: Byte, val minorLinkerVersion: Byte, val sizeOfCode: UInt, val sizeOfInitializedData: UInt, val sizeOfUninitializedData: UInt, val addressOfEntryPoint: Address32, val baseOfCode: Address32, val baseOfData: Address32) : ReadableStructure

Represents the Standard (Optional) Header structure.

Link copied to clipboard

Represents a 32-bit time stamp in PE/COFF file format.

Link copied to clipboard
data class WindowsSpecifiedHeader(val magic: PE32Magic, val imageBase: Address64, val sectionAlignment: UInt, val fileAlignment: UInt, val majorOperatingSystemVersion: UShort, val minorOperatingSystemVersion: UShort, val majorImageVersion: UShort, val minorImageVersion: UShort, val majorSubsystemVersion: UShort, val minorSubsystemVersion: UShort, val win32VersionValue: UInt, val sizeOfImage: UInt, val sizeOfHeaders: UInt, val checkSum: UInt, val subsystem: WindowsSubsystems, val dllCharacteristics: DllCharacteristics, val sizeOfStackReserve: ULong, val sizeOfStackCommit: ULong, val sizeOfHeapReserve: ULong, val sizeOfHeapCommit: ULong, val loaderFlags: UInt, val numbersOfRvaAndSizes: Int, val exportTable: DataDirectoryItem, val importTable: DataDirectoryItem, val resourceTable: DataDirectoryItem, val exceptionTable: DataDirectoryItem, val certificateTable: DataDirectoryItem, val baseRelocationTable: DataDirectoryItem, val debug: DataDirectoryItem, val architecture: DataDirectoryItem, val globalPtr: DataDirectoryItem, val tlsTable: DataDirectoryItem, val loadConfigTable: DataDirectoryItem, val boundImport: DataDirectoryItem, val iat: DataDirectoryItem, val delayImportDescriptor: DataDirectoryItem, val clrRuntimeHeader: DataDirectoryItem) : ReadableStructure

Represents the Windows-Specific fields of the Optional Header.

Link copied to clipboard

Type for C enum WindowsSubsystems

Functions

Link copied to clipboard
fun Address32(value: Int): Address32

Convert from raw value to 32-bit address.

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
fun dumpHeaderJson(data: ByteArray, pretty: Boolean = false): String
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard