Matt Nadareski
|
0896842268
|
Builder -> Builders
|
2022-12-22 16:02:10 -08:00 |
|
Matt Nadareski
|
7295001892
|
Read entry point data in safe way
|
2022-12-20 14:19:48 -08:00 |
|
Matt Nadareski
|
7c820b7fd2
|
Start re-adding entry point
|
2022-12-20 13:03:25 -08:00 |
|
Matt Nadareski
|
64cc4785ca
|
Add PE checks to SoftLock
|
2022-12-19 21:39:24 -08:00 |
|
Matt Nadareski
|
e0e16292eb
|
ASN.1 and OID to its own library
|
2022-12-15 22:07:12 -08:00 |
|
Matt Nadareski
|
aded5ee03a
|
Stream safety and better streams
|
2022-12-15 14:20:27 -08:00 |
|
Matt Nadareski
|
bbe234b459
|
Use MemoryStream in wrappers
|
2022-12-15 12:41:08 -08:00 |
|
Matt Nadareski
|
4cc441afcf
|
Get rid of code duplication
|
2022-12-15 00:13:24 -08:00 |
|
Matt Nadareski
|
1f40c2e052
|
Fix locking exception
|
2022-12-14 21:30:53 -08:00 |
|
Matt Nadareski
|
b5c8d05814
|
Add CodeView debug parsing/finding
|
2022-12-14 21:07:02 -08:00 |
|
Matt Nadareski
|
b0df7a8f3b
|
Add debug data to PE wrapper
|
2022-12-14 20:46:24 -08:00 |
|
Matt Nadareski
|
0d4fab100d
|
Add PE table data/string caching
|
2022-12-14 17:24:14 -08:00 |
|
Matt Nadareski
|
756a74eda6
|
Disable printing by default again
|
2022-12-13 21:13:20 -08:00 |
|
Matt Nadareski
|
8052ee2afb
|
Some PE resource handling cleanup
|
2022-12-13 21:05:52 -08:00 |
|
Matt Nadareski
|
4ad7c60443
|
Add overlay string finding
|
2022-12-10 20:10:25 -08:00 |
|
Matt Nadareski
|
d1a6c9be00
|
Add header padding strings
|
2022-12-10 17:31:41 -08:00 |
|
Matt Nadareski
|
92c5745ac8
|
Remove obsolete PE helper method
|
2022-12-10 14:11:25 -08:00 |
|
Matt Nadareski
|
8a77a8a009
|
Simplify PE section helper methods
|
2022-12-09 14:59:31 -08:00 |
|
Matt Nadareski
|
7c243ac6ff
|
Convert CDS to string finding
|
2022-12-09 13:09:27 -08:00 |
|
Matt Nadareski
|
a9c71ced47
|
Add skelton for section string finding
|
2022-12-09 11:53:58 -08:00 |
|
Matt Nadareski
|
bb37c3f94c
|
Add missing commented out print
|
2022-12-08 17:06:05 -08:00 |
|
Matt Nadareski
|
2dcd30e346
|
Make unknown resource printing better
|
2022-12-08 16:40:04 -08:00 |
|
Matt Nadareski
|
58c6f00a6c
|
Add another embedded resource check
|
2022-12-08 16:01:53 -08:00 |
|
Matt Nadareski
|
5f49b56c3d
|
Add a couple more named version fields
|
2022-12-08 14:59:15 -08:00 |
|
Matt Nadareski
|
e1bd26f712
|
Add undocumented version info keys
|
2022-12-08 14:40:30 -08:00 |
|
Matt Nadareski
|
714cee586d
|
Make printing methods for all PE resources
|
2022-12-08 14:00:29 -08:00 |
|
Matt Nadareski
|
cf9cc30d5e
|
Handle casting exceptions
|
2022-12-08 13:13:16 -08:00 |
|
Matt Nadareski
|
24c77ecd07
|
Add header padding data for searching
|
2022-12-05 15:56:37 -08:00 |
|
Matt Nadareski
|
ad5735a559
|
Update printing for import tables
|
2022-12-05 13:57:07 -08:00 |
|
Matt Nadareski
|
9411f5044a
|
Fix import table parsing
|
2022-12-05 13:52:15 -08:00 |
|
Matt Nadareski
|
d72d0d4dc2
|
Clean up printing methods
|
2022-12-05 11:01:22 -08:00 |
|
Matt Nadareski
|
3a63755d96
|
Simplify section printing
|
2022-12-05 10:06:37 -08:00 |
|
Matt Nadareski
|
fc9dd8a34d
|
Add base relocation table to passthrough
|
2022-12-04 23:17:34 -08:00 |
|
Matt Nadareski
|
a1522aabd6
|
Add relocation real address
|
2022-12-04 22:37:59 -08:00 |
|
Matt Nadareski
|
9be4b339f8
|
Add PE base relocation table parsing and printing
|
2022-12-04 22:32:41 -08:00 |
|
Matt Nadareski
|
ce1c74aec3
|
Update DiscGuard
|
2022-12-04 21:11:55 -08:00 |
|
Matt Nadareski
|
fe5a674518
|
Add more safety around resource finding
|
2022-12-03 22:55:03 -08:00 |
|
Matt Nadareski
|
f26e82d2bc
|
Fix some PE resource caching issues
|
2022-12-03 22:47:32 -08:00 |
|
Matt Nadareski
|
8a6f481118
|
Fix indexed section data read
|
2022-12-03 22:13:17 -08:00 |
|
Matt Nadareski
|
f420434fd3
|
Handle overlay data better
|
2022-12-03 21:59:21 -08:00 |
|
Matt Nadareski
|
8e73d7970f
|
Fix PE data locking, add offset read helper
|
2022-12-03 21:37:32 -08:00 |
|
Matt Nadareski
|
44ca0a94b7
|
Better PE wrapper section handling
|
2022-12-03 20:56:06 -08:00 |
|
Matt Nadareski
|
ce5e2982d2
|
Fix resource entry handling
|
2022-12-03 14:22:54 -08:00 |
|
Matt Nadareski
|
7d2edd315c
|
Add stub data to cache, resource/section finding
|
2022-12-03 13:17:29 -08:00 |
|
Matt Nadareski
|
e0efc0d9ab
|
Cache PE overlay data
|
2022-12-02 22:44:55 -08:00 |
|
Matt Nadareski
|
3ce3b7ca2b
|
Cache PE resource, version, manifest
|
2022-12-02 22:24:22 -08:00 |
|
Matt Nadareski
|
6997608b63
|
Split printing into methods, add notes
|
2022-12-02 21:20:52 -08:00 |
|
Matt Nadareski
|
cee7f12974
|
Add printing regions
|
2022-12-02 20:09:55 -08:00 |
|
Matt Nadareski
|
5b4a8d5775
|
Ceeate wrapper base class, PE raw reads
|
2022-12-02 20:05:20 -08:00 |
|
Matt Nadareski
|
a59bedec5d
|
Add data source to all wrappers, add note
|
2022-12-02 17:19:59 -08:00 |
|