+redeclaration
+ fix ReadMemory() methods
+ add section byte data
+ add DataSectionFlags
+ only add an image section if it's raw data size is not zero
- revert back to last working revision
+ wip for data direcory tables
PEData add Is32bitAssembly()
+ add event for being able to subscribe to PEReader updates
GetDateTimeFromDosDateTime iYear = 1970 (not 1980)
+ add rest of properties to currently present structures for property grid support
+ more property grid implementation work
+ add support for displaying PE Struct data into property grid (read-only)
+ add internal logging override (so it can be turned on/off for performance reasons)
+ setup logging format
fix format of IMAGE_NT_HEADERS
+ IMAGE_NT_HEADERS->IMAGE_FILE_HEADER set FieldOffset to 8 to not overlapp Signature + add exception handling that will bubble up from the using statement
+ more wip
use SafeWaitHandle in when closing process handle
set provider null after close to free memory
ReadProcessMemory(): make sure to set byte array capacity :: data = new byte[bytesToRead];
set internal access specifier on ProcessMemoryReader class (must use memory provider classes)
remove code to use MemoryScanner from r204 (I think we fixed the error in the last commit)
ReadProcessMemory(): byte[] buffer = new byte[] { }; ==> byte[] buffer = new byte[bytesToRead]; (the lack of capacity was causing errors to be thrown)
+ add variant classes that use MemoryScanner from r204
change address from uint to int
+ catch, log and throw errors
+ add exception logic to ensure provider is open
change int in method to uint
remove
+ overhaul memory scanner
ignore CS0436: importing conflicting types (AssemblyConfig)
DumpMemoryToByteArray(): set byte_alignment to 1
+ add support to automatically goto the first address that has a non-zero byte
+ initial support for memoryview and getting ram from process for display
+ add success/failure messages for ram dump
+ fix memory dump when bytes to read is less than buffer amount
DumpMemory(): write out using 100mb blocks
+ add support to dump ram to file (even if it is ~2gb or more)
Force the use of the enum values for these types
public struct IMAGE_FILE_HEADER
{
public MachineType Machine;
public DllCharacteristicsType Characteristics;
}
+ add support to parse an exe
+ add support for selecting process by different means
removed these obsolete files