pedump 0.4.16 → 0.5.0

data/lib/pedump/version.rb

@@ -1,8 +1,8 @@
 class PEdump
   module Version
     MAJOR = 0
-    MINOR = 4
-    PATCH = 16
+    MINOR = 5
+    PATCH = 0
     BUILD = nil
 
     STRING = [MAJOR, MINOR, PATCH, BUILD].compact.join('.')

data/lib/pedump/version_info.rb

@@ -1,5 +1,5 @@
 class PEdump
-  class VS_VERSIONINFO < PEdump.create_struct( 'v3a32v',
+  class VS_VERSIONINFO < IOStruct.new( 'v3a32v',
     :wLength,
     :wValueLength,
     :wType,
@@ -40,7 +40,7 @@ class PEdump
     end
   end
 
-  class VS_FIXEDFILEINFO < PEdump.create_struct( 'V13',
+  class VS_FIXEDFILEINFO < IOStruct.new( 'V13',
     :dwSignature,
     :dwStrucVersion,
     :dwFileVersionMS,
@@ -64,7 +64,7 @@ class PEdump
     end
   end
 
-  class StringFileInfo < PEdump.create_struct( 'v3a30',
+  class StringFileInfo < IOStruct.new( 'v3a30',
     :wLength,
     :wValueLength,  # always 0
     :wType,         # 1 => text data, 0 => binary data
@@ -85,7 +85,7 @@ class PEdump
     end
   end
 
-  class StringTable < PEdump.create_struct( 'v3a16v',
+  class StringTable < IOStruct.new( 'v3a16v',
     :wLength,       # The length, in bytes, of this StringTable structure,
                     # including all structures indicated by the Children member.
     :wValueLength,  # always 0
@@ -107,7 +107,7 @@ class PEdump
     end
   end
 
-  class VersionString < PEdump.create_struct( 'v3',
+  class VersionString < IOStruct.new( 'v3',
     :wLength,       # The length, in bytes, of this String structure.
     :wValueLength,  # The size, in words, of the Value member
     :wType,         # 1 => text data, 0 => binary data
@@ -135,7 +135,7 @@ class PEdump
     end
   end
 
-  class VarFileInfo < PEdump.create_struct( 'v3a24v',
+  class VarFileInfo < IOStruct.new( 'v3a24v',
     :wLength,
     :wValueLength,  # always 0
     :wType,         # 1 => text data, 0 => binary data
@@ -152,7 +152,7 @@ class PEdump
     end
   end
 
-  class Var < PEdump.create_struct( 'v3a24',
+  class Var < IOStruct.new( 'v3a24',
     :wLength,
     :wValueLength,  # The length, in bytes, of the Value member
     :wType,         # 1 => text data, 0 => binary data

data/pedump.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "pedump"
-  s.version = "0.4.16"
+  s.version = "0.5.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Andrey \"Zed\" Zaikin"]
-  s.date = "2013-01-03"
+  s.date = "2013-04-20"
   s.description = "dump headers, sections, extract resources of win32 PE exe,dll,etc"
   s.email = "zed.0xff@gmail.com"
   s.executables = ["pedump"]
@@ -38,7 +38,9 @@ Gem::Specification.new do |s|
     "lib/pedump/comparer.rb",
     "lib/pedump/composite_io.rb",
     "lib/pedump/core.rb",
+    "lib/pedump/core_ext/try.rb",
     "lib/pedump/loader.rb",
+    "lib/pedump/loader/minidump.rb",
     "lib/pedump/loader/section.rb",
     "lib/pedump/logger.rb",
     "lib/pedump/ne.rb",
@@ -72,6 +74,8 @@ Gem::Specification.new do |s|
     "spec/foldedhdr_spec.rb",
     "spec/imports_badterm_spec.rb",
     "spec/imports_vterm_spec.rb",
+    "spec/loader/names_spec.rb",
+    "spec/loader/va_spec.rb",
     "spec/manyimportsW7_spec.rb",
     "spec/ne_spec.rb",
     "spec/packer_spec.rb",
@@ -101,6 +105,8 @@ Gem::Specification.new do |s|
       s.add_runtime_dependency(%q<multipart-post>, ["~> 1.1.4"])
       s.add_runtime_dependency(%q<progressbar>, [">= 0"])
       s.add_runtime_dependency(%q<awesome_print>, [">= 0"])
+      s.add_runtime_dependency(%q<iostruct>, [">= 0.0.4"])
+      s.add_runtime_dependency(%q<zhexdump>, [">= 0.0.2"])
       s.add_development_dependency(%q<rspec>, [">= 0"])
       s.add_development_dependency(%q<bundler>, [">= 0"])
       s.add_development_dependency(%q<jeweler>, [">= 0"])
@@ -109,6 +115,8 @@ Gem::Specification.new do |s|
       s.add_dependency(%q<multipart-post>, ["~> 1.1.4"])
       s.add_dependency(%q<progressbar>, [">= 0"])
       s.add_dependency(%q<awesome_print>, [">= 0"])
+      s.add_dependency(%q<iostruct>, [">= 0.0.4"])
+      s.add_dependency(%q<zhexdump>, [">= 0.0.2"])
       s.add_dependency(%q<rspec>, [">= 0"])
       s.add_dependency(%q<bundler>, [">= 0"])
       s.add_dependency(%q<jeweler>, [">= 0"])
@@ -118,6 +126,8 @@ Gem::Specification.new do |s|
     s.add_dependency(%q<multipart-post>, ["~> 1.1.4"])
     s.add_dependency(%q<progressbar>, [">= 0"])
     s.add_dependency(%q<awesome_print>, [">= 0"])
+    s.add_dependency(%q<iostruct>, [">= 0.0.4"])
+    s.add_dependency(%q<zhexdump>, [">= 0.0.2"])
     s.add_dependency(%q<rspec>, [">= 0"])
     s.add_dependency(%q<bundler>, [">= 0"])
     s.add_dependency(%q<jeweler>, [">= 0"])

data/spec/loader/names_spec.rb

@@ -0,0 +1,24 @@
+require 'spec_helper'
+require 'pedump/loader'
+
+describe PEdump::Loader do
+  it "should read names from imports" do
+    io = open("samples/calc.exe","rb")
+    @ldr = PEdump::Loader.new io
+
+    @ldr.names.should_not be_nil
+    @ldr.names.should_not be_empty
+    @ldr.names.size.should >= 343
+    @ldr.names[0x10010d0].should == 'GetStartupInfoA'
+  end
+
+  it "should read names from exports" do
+    io = open("samples/zlib.dll","rb")
+    @ldr = PEdump::Loader.new io
+
+    @ldr.names.should_not be_nil
+    @ldr.names.should_not be_empty
+    @ldr.names.size.should >= 69
+    @ldr.names[0x1000e340].should == 'zlib_version'
+  end
+end

data/spec/loader/va_spec.rb

@@ -0,0 +1,44 @@
+require 'spec_helper'
+require 'pedump/loader'
+
+describe PEdump::Loader do
+  describe "#valid_va?" do
+    describe "samples/calc.exe" do
+      before do
+        io = open("samples/calc.exe","rb")
+        @ldr = PEdump::Loader.new io
+      end
+
+      %w'1001000 1010000 104b999 104c000 1051000 109c000 10a01f5'.each do |x|
+        it "returns true for 0x#{x}" do
+          @ldr.valid_va?(x.to_i(16)).should be_true
+        end
+      end
+
+      %w'0 1 1000 1000fff 104b99a 104bfff 1050fff 109bfff 10a01f6'.each do |x|
+        it "returns false for 0x#{x}" do
+          @ldr.valid_va?(x.to_i(16)).should be_false
+        end
+      end
+    end
+
+    describe "samples/upx.exe" do
+      before do
+        io = open("samples/upx.exe","rb")
+        @ldr = PEdump::Loader.new io
+      end
+
+      %w'401000 541000 589000 589fff'.each do |x|
+        it "returns true for 0x#{x}" do
+          @ldr.valid_va?(x.to_i(16)).should be_true
+        end
+      end
+
+      %w'0 1 1000 400000 58a000'.each do |x|
+        it "returns false for 0x#{x}" do
+          @ldr.valid_va?(x.to_i(16)).should be_false
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,128 +1,160 @@
 --- !ruby/object:Gem::Specification
 name: pedump
 version: !ruby/object:Gem::Version
+  version: 0.5.0
   prerelease: 
-  version: 0.4.16
 platform: ruby
 authors:
 - Andrey "Zed" Zaikin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-01-03 00:00:00.000000000 Z
+date: 2013-04-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :runtime
   name: multipart-post
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: 1.1.4
-    none: false
+  type: :runtime
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: 1.1.4
-    none: false
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :runtime
   name: progressbar
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :runtime
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :runtime
   name: awesome_print
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :runtime
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: iostruct
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
     none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.4
 - !ruby/object:Gem::Dependency
+  name: zhexdump
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+  type: :runtime
   prerelease: false
-  type: :development
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+- !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :development
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :development
   name: bundler
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :development
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :development
   name: jeweler
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :development
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  prerelease: false
-  type: :development
   name: what_methods
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
+  type: :development
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 description: dump headers, sections, extract resources of win32 PE exe,dll,etc
 email: zed.0xff@gmail.com
 executables:
@@ -152,7 +184,9 @@ files:
 - lib/pedump/comparer.rb
 - lib/pedump/composite_io.rb
 - lib/pedump/core.rb
+- lib/pedump/core_ext/try.rb
 - lib/pedump/loader.rb
+- lib/pedump/loader/minidump.rb
 - lib/pedump/loader/section.rb
 - lib/pedump/logger.rb
 - lib/pedump/ne.rb
@@ -186,6 +220,8 @@ files:
 - spec/foldedhdr_spec.rb
 - spec/imports_badterm_spec.rb
 - spec/imports_vterm_spec.rb
+- spec/loader/names_spec.rb
+- spec/loader/va_spec.rb
 - spec/manyimportsW7_spec.rb
 - spec/ne_spec.rb
 - spec/packer_spec.rb
@@ -209,20 +245,20 @@ rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
   requirements:
   - - ! '>='
     - !ruby/object:Gem::Version
       version: '0'
       segments:
       - 0
-      hash: -2417171475449588298
-  none: false
+      hash: -1369606751108388991
 required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
   requirements:
   - - ! '>='
     - !ruby/object:Gem::Version
       version: '0'
-  none: false
 requirements: []
 rubyforge_project: 
 rubygems_version: 1.8.24