Log of /trunk/Win32/Sojaner.MemoryScanner/PEReader.cs

---

Revision 348 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 04:23:30 2012 UTC (9 years, 11 months ago) by william
File length: 44430 byte(s)
Diff to previous 347

---

Revision 347 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 04:03:02 2012 UTC (9 years, 11 months ago) by william
File length: 44398 byte(s)
Diff to previous 345

---

Revision 345 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 03:17:40 2012 UTC (9 years, 11 months ago) by william
File length: 42689 byte(s)
Diff to previous 344

---

Revision 344 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 02:52:18 2012 UTC (9 years, 11 months ago) by william
File length: 41643 byte(s)
Diff to previous 343

+ add section byte data

---

Revision 343 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 02:25:34 2012 UTC (9 years, 11 months ago) by william
File length: 40009 byte(s)
Diff to previous 342

+ add DataSectionFlags

---

Revision 342 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 02:02:28 2012 UTC (9 years, 11 months ago) by william
File length: 32895 byte(s)
Diff to previous 341

+ only add an image section if it's raw data size is not zero

---

Revision 341 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 01:59:32 2012 UTC (9 years, 11 months ago) by william
File length: 32681 byte(s)
Diff to previous 340

- revert back to last working revision

---

Revision 340 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 01:12:08 2012 UTC (9 years, 11 months ago) by william
File length: 49626 byte(s)
Diff to previous 339

+ wip for data direcory tables

---

Revision 339 - (view) (download) (annotate) - [select for diffs]
Modified Fri Jun 8 00:20:39 2012 UTC (9 years, 11 months ago) by william
File length: 34081 byte(s)
Diff to previous 337

---

Revision 337 - (view) (download) (annotate) - [select for diffs]
Modified Thu Jun 7 23:48:29 2012 UTC (9 years, 11 months ago) by william
File length: 32680 byte(s)
Diff to previous 336

---

Revision 336 - (view) (download) (annotate) - [select for diffs]
Modified Thu Jun 7 21:47:14 2012 UTC (9 years, 11 months ago) by william
File length: 32679 byte(s)
Diff to previous 324

---

Revision 324 - (view) (download) (annotate) - [select for diffs]
Modified Thu Jun 7 17:42:57 2012 UTC (9 years, 11 months ago) by william
File length: 32712 byte(s)
Diff to previous 323

PEData add Is32bitAssembly()

---

Revision 323 - (view) (download) (annotate) - [select for diffs]
Modified Thu Jun 7 16:33:41 2012 UTC (9 years, 11 months ago) by william
File length: 32552 byte(s)
Diff to previous 322

+ add event for being able to subscribe to PEReader updates

---

Revision 322 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 23:20:12 2012 UTC (9 years, 11 months ago) by william
File length: 31460 byte(s)
Diff to previous 321

---

Revision 321 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 23:12:53 2012 UTC (9 years, 11 months ago) by william
File length: 31252 byte(s)
Diff to previous 320

GetDateTimeFromDosDateTime iYear = 1970 (not 1980)

---

Revision 320 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 19:18:20 2012 UTC (9 years, 11 months ago) by william
File length: 31254 byte(s)
Diff to previous 319

+ add rest of properties to currently present structures for property grid support

---

Revision 319 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 18:39:06 2012 UTC (9 years, 11 months ago) by william
File length: 22791 byte(s)
Diff to previous 318

+ more property grid implementation work

---

Revision 318 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 17:57:37 2012 UTC (9 years, 11 months ago) by william
File length: 18273 byte(s)
Diff to previous 299

+ add support for displaying PE Struct data into property grid (read-only)

---

Revision 299 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 11:36:17 2012 UTC (9 years, 11 months ago) by william
File length: 15121 byte(s)
Diff to previous 294

+ add internal logging override (so it can be turned on/off for performance reasons)

---

Revision 294 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 10:48:07 2012 UTC (9 years, 11 months ago) by william
File length: 13829 byte(s)
Diff to previous 293

+ setup logging format

---

Revision 293 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 10:27:16 2012 UTC (9 years, 11 months ago) by william
File length: 22837 byte(s)
Diff to previous 290

fix format of IMAGE_NT_HEADERS

---

Revision 290 - (view) (download) (annotate) - [select for diffs]
Modified Tue Jun 5 09:30:32 2012 UTC (9 years, 11 months ago) by william
File length: 13405 byte(s)
Diff to previous 161

+ IMAGE_NT_HEADERS->IMAGE_FILE_HEADER set FieldOffset to 8 to not overlapp Signature
+ add exception handling that will bubble up from the using statement

---

Revision 161 - (view) (download) (annotate) - [select for diffs]
Modified Mon May 28 05:55:59 2012 UTC (9 years, 11 months ago) by william
File length: 12144 byte(s)
Diff to previous 160

---

Revision 160 - (view) (download) (annotate) - [select for diffs]
Modified Mon May 28 05:30:14 2012 UTC (9 years, 11 months ago) by william
File length: 12023 byte(s)
Diff to previous 159

Force the use of the enum values for these types
public struct IMAGE_FILE_HEADER
{
  public MachineType Machine;
  public DllCharacteristicsType Characteristics;
}

---

Revision 159 - (view) (download) (annotate) - [select for diffs]
Added Mon May 28 05:22:28 2012 UTC (9 years, 11 months ago) by william
File length: 11981 byte(s)

+ add support to parse an exe