Matt Nadareski
|
386c86f04f
|
Add placeholders for parsing in MoPaQ
|
2022-12-14 16:47:45 -08:00 |
|
Matt Nadareski
|
b793b74b32
|
Add MoPaQ builder (nw)
|
2022-12-14 16:29:07 -08:00 |
|
Matt Nadareski
|
5f387cdb74
|
Migrate WIP MS-CAB to model/builder/wrapper
|
2022-12-14 15:23:54 -08:00 |
|
Matt Nadareski
|
8052ee2afb
|
Some PE resource handling cleanup
|
2022-12-13 21:05:52 -08:00 |
|
Matt Nadareski
|
9c173fd3a1
|
Update extension method for AddD section
|
2022-12-12 21:40:29 -08:00 |
|
Matt Nadareski
|
229e645c8e
|
Bump version
|
2022-12-12 13:35:36 -08:00 |
|
Matt Nadareski
|
64f52698c3
|
Add extension to convert byte array
|
2022-12-10 22:36:02 -08:00 |
|
Matt Nadareski
|
3c3fd1be50
|
Add more guards to PE builder
|
2022-12-10 14:21:37 -08:00 |
|
Matt Nadareski
|
ded5ecb3ed
|
Fix broken COFF string table reading
|
2022-12-09 22:37:35 -08:00 |
|
Matt Nadareski
|
971f769031
|
Update project files
|
2022-12-08 22:53:07 -08:00 |
|
Matt Nadareski
|
cf9cc30d5e
|
Handle casting exceptions
|
2022-12-08 13:13:16 -08:00 |
|
Matt Nadareski
|
713b1c83e1
|
Fix yet more string data reading
|
2022-12-08 10:38:46 -08:00 |
|
Matt Nadareski
|
ddf289d747
|
Force reading name table as ASCII
|
2022-12-08 10:17:26 -08:00 |
|
Matt Nadareski
|
ae1edf0f21
|
Sync resource building in byte and stream paths
|
2022-12-08 10:13:22 -08:00 |
|
Matt Nadareski
|
aeaeff28d3
|
Better alignment in PE resources
|
2022-12-07 23:56:08 -08:00 |
|
Matt Nadareski
|
28948a0511
|
Add back truncation
|
2022-12-07 23:09:18 -08:00 |
|
Matt Nadareski
|
9411f5044a
|
Fix import table parsing
|
2022-12-05 13:52:15 -08:00 |
|
Matt Nadareski
|
9be4b339f8
|
Add PE base relocation table parsing and printing
|
2022-12-04 22:32:41 -08:00 |
|
Matt Nadareski
|
e824428e0f
|
String tables are always Unicode
|
2022-12-04 13:38:04 -08:00 |
|
Matt Nadareski
|
82de7e8b8e
|
Off by one
|
2022-12-03 23:58:20 -08:00 |
|
Matt Nadareski
|
26831b4732
|
Both, both is good
|
2022-12-03 23:48:48 -08:00 |
|
Matt Nadareski
|
a6862925ca
|
Use endOffset instead of EOF
|
2022-12-03 23:46:19 -08:00 |
|
Matt Nadareski
|
1e2ce169af
|
Fix unaligned end-of-file certificates
|
2022-12-03 23:41:42 -08:00 |
|
Matt Nadareski
|
dda9b3551a
|
Cast certificate length more safely
|
2022-12-03 23:32:11 -08:00 |
|
Matt Nadareski
|
2c1e087bc6
|
Include negative numbers
|
2022-12-03 23:23:55 -08:00 |
|
Matt Nadareski
|
26db75853b
|
Fix malformed PE certificates
|
2022-12-03 23:09:45 -08:00 |
|
Matt Nadareski
|
ce5e2982d2
|
Fix resource entry handling
|
2022-12-03 14:22:54 -08:00 |
|
Matt Nadareski
|
8ae0452873
|
Fix reading 0-length string data
|
2022-12-03 13:08:10 -08:00 |
|
Matt Nadareski
|
4d640f3cf2
|
Add Wrapper skeleton project
|
2022-12-02 14:44:06 -08:00 |
|
Matt Nadareski
|
25d495b1d0
|
ASN.1 OID parsing (nw)
|
2022-12-02 14:18:15 -08:00 |
|
Matt Nadareski
|
e281faf664
|
Add first attempt at PE certificate parsing
|
2022-11-12 21:56:24 -08:00 |
|
Matt Nadareski
|
ecd1c93bb9
|
Add PE message resource printing, fix parsing
|
2022-11-11 16:20:17 -08:00 |
|
Matt Nadareski
|
eeb555a6ce
|
Add PE message resource data to parser
|
2022-11-11 15:52:05 -08:00 |
|
Matt Nadareski
|
91eef55173
|
Fix tiny formatting issue
|
2022-11-11 15:33:41 -08:00 |
|
Matt Nadareski
|
f9e1518da6
|
Add PE menu resource reading and writing
|
2022-11-11 15:31:00 -08:00 |
|
Matt Nadareski
|
5b974260cc
|
Add PE extended dialog templates
|
2022-11-11 14:22:53 -08:00 |
|
Matt Nadareski
|
554374b710
|
Add PE dialog template extended
|
2022-11-11 14:12:03 -08:00 |
|
Matt Nadareski
|
475669ac1b
|
Add PE standard dialog parsing and writing
|
2022-11-11 13:56:23 -08:00 |
|
Matt Nadareski
|
623d1e6a40
|
Invert PE "if" logic where possible
|
2022-11-11 10:08:15 -08:00 |
|
Matt Nadareski
|
4e21cf8494
|
Make PE RVA checks simpler
|
2022-11-11 09:58:19 -08:00 |
|
Matt Nadareski
|
2ebbda6852
|
Don't trust PE sections
|
2022-11-10 23:38:59 -08:00 |
|
Matt Nadareski
|
010a6d6e42
|
Safeguard all PE virtual address uses
|
2022-11-10 23:06:21 -08:00 |
|
Matt Nadareski
|
3b1481879a
|
Fix PE debug table parsing
|
2022-11-10 22:39:10 -08:00 |
|
Matt Nadareski
|
260ab1ec89
|
Safeguard PE invalid virtual addresses
|
2022-11-10 22:19:58 -08:00 |
|
Matt Nadareski
|
69803a999f
|
Fix PE virtual address for section-aligned RVAs
|
2022-11-10 22:09:58 -08:00 |
|
Matt Nadareski
|
750cecfdaf
|
Add PE partial debug table parsing
|
2022-11-10 21:24:28 -08:00 |
|
Matt Nadareski
|
fe926cbf9a
|
Rewrite PE accelerator table extension
|
2022-11-10 13:09:23 -08:00 |
|
Matt Nadareski
|
ec67ca605c
|
Fix PE virtual directory size issues
|
2022-11-10 12:57:19 -08:00 |
|
Matt Nadareski
|
690c49ae1f
|
Fix PE import table parsing
|
2022-11-10 11:58:46 -08:00 |
|
Matt Nadareski
|
c77c095893
|
Add initial PE import table parsing
|
2022-11-10 11:31:06 -08:00 |
|