November 27, 2006
View e6bea1a

New PE parsing model - Accurate virtual and raw size and offset calculations - Proper parsing of executables with weird/handcrafted/uncommon headers - Proper handling (or skipping) of ghost sections at various places in the code - Rebuild improvements for various unpackers - Adjusted alignment on rebuilt executables - Proper handling of out of sections offsets - Broken exe detection now mimics the XPSP2 loader (*) - Lots of misc improvements and fixes

aCaB authored on 2006/11/27 07:23:11
November 20, 2006
View 54c0fba

cache target file info in pattern matchers

Tomasz Kojm authored on 2006/11/20 09:03:16
November 10, 2006
View 11f1a07

fix incorrect comparison

Tomasz Kojm authored on 2006/11/10 06:16:47
November 5, 2006
View 0bf8d34

don't report I/O error when EP is near (less than 200 bytes) to the end of file

Tomasz Kojm authored on 2006/11/05 23:13:25
View 1c90f84

RVA broken.executable checks skip checks on virtual-only sections

aCaB authored on 2006/11/05 10:35:40
View 513f14d

add broken.executable checks on alignments

aCaB authored on 2006/11/05 08:48:32
View 013aab8

lseek check removed

aCaB authored on 2006/11/05 08:26:21
View c211111

Handle 0x148 bytes long optional header

aCaB authored on 2006/11/05 08:01:17
View f164272

pe_plus return moved up

aCaB authored on 2006/11/05 02:54:53
October 25, 2006
View 25eaae2

add support for NsPack

aCaB authored on 2006/10/25 11:35:25
October 20, 2006
View 26bb452

removed unused variable

aCaB authored on 2006/10/20 03:34:17
View ce4d0aa

Obey limits in unspin

aCaB authored on 2006/10/20 03:29:04
September 27, 2006
View 344416f

add support for PE section based MD5 signatures

Tomasz Kojm authored on 2006/09/27 09:36:11
September 14, 2006
View 03f95e3

Phish docs Fix experimental define in suecrypt

aCaB authored on 2006/09/14 07:50:56
August 31, 2006
View ac2888a

Added Windows support

Nigel Horne authored on 2006/08/31 22:50:25