WindowsPEFile class
Window PE file handler.
Constructors
- WindowsPEFile(File file, {bool verbose = false})
Properties
- file → File
-
The file to read or modify.
final
- fileBuffer ↔ BytesBuffer
-
The in-memory file buffer (loaded using
BytesUint8ListIO).latefinal - hashCode → int
-
The hash code for this object.
no setterinherited
- isMachineTypeARM → bool
-
Returns
trueif machineType isARM little endian.no setter - isMachineTypeARM64 → bool
-
Returns
trueif machineType isARM64 little endian.no setter - isMachineTypeI386 → bool
-
Returns
trueif machineType isi386.no setter - isMachineTypeItanium → bool
-
Returns
trueif machineType isIntel Itanium.no setter - isMachineTypeX64 → bool
-
Returns
trueif machineType isx64.no setter - isValidExecutable → bool
-
Returns
trueif file is a valid Windows executable inGUIorConsoleSubsystem.no setter - machineType → int
-
Returns the
machineTypeof the executable.no setter - runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
- verbose → bool
-
If
truewill print to the console each operation.final
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
readInformation(
) → Map< String, int> - Reads the basic PE information.
-
readWindowsSubsystem(
) → int - Reads the current Windows Subsystem value.
-
save(
File outputFile, {bool overwrite = false}) → void -
Saves the current fileBuffer to
outputFile. -
seekToWindowsSubsystem(
) → int - Seeks to the Windows Subsystem position.
-
setWindowsSubsystem(
{required bool gui}) → void -
Sets/writes the Windows Subsystem to
GUIorConsole. -
toString(
) → String -
A string representation of this object.
inherited
-
writeWindowsSubsystem(
int subsystem) → void - Writes the Windows Subsystem.
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited
Static Methods
-
windowsSubsystemName(
int windowsSubsystem) → String -
Returns the
windowsSubsystemvalue name.