November 27, 2006
View c1df0e6

use unaligned section's virtual size in Magistr detection

Tomasz Kojm authored on 2006/11/27 19:38:52
View 82d4c98

Stuff forgotten in my previous commit

aCaB authored on 2006/11/27 07:31:16
View 57866af

New PE parsing model - Accurate virtual and raw size and offset calculations - Proper parsing of executables with weird/handcrafted/uncommon headers - Proper handling (or skipping) of ghost sections at various places in the code - Rebuild improvements for various unpackers - Adjusted alignment on rebuilt executables - Proper handling of out of sections offsets - Broken exe detection now mimics the XPSP2 loader (*) - Lots of misc improvements and fixes

aCaB authored on 2006/11/27 07:23:11
November 20, 2006
View 841161e

cache target file info in pattern matchers

Tomasz Kojm authored on 2006/11/20 09:03:16
November 10, 2006
View 3b82c17

fix incorrect comparison

Tomasz Kojm authored on 2006/11/10 06:16:47
November 5, 2006
View 6b16969

don't report I/O error when EP is near (less than 200 bytes) to the end of file

Tomasz Kojm authored on 2006/11/05 23:13:25
View 752f17a

RVA broken.executable checks skip checks on virtual-only sections

aCaB authored on 2006/11/05 10:35:40
View e1e5af5

add broken.executable checks on alignments

aCaB authored on 2006/11/05 08:48:32
View 015e795

lseek check removed

aCaB authored on 2006/11/05 08:26:21
View d399f19

Handle 0x148 bytes long optional header

aCaB authored on 2006/11/05 08:01:17
View 5c9300e

pe_plus return moved up

aCaB authored on 2006/11/05 02:54:53
October 25, 2006
View 8103003

add support for NsPack

aCaB authored on 2006/10/25 11:35:25
October 20, 2006
View 3806176

removed unused variable

aCaB authored on 2006/10/20 03:34:17
View 8865a4d

Obey limits in unspin

aCaB authored on 2006/10/20 03:29:04
September 27, 2006
View c09d6c1

add support for PE section based MD5 signatures

Tomasz Kojm authored on 2006/09/27 09:36:11