pedump 0.0.1 → 0.1.0

data/VERSION

@@ -1 +1 @@
-0.0.1
+0.1.0

data/lib/pedump.rb

@@ -27,12 +27,37 @@ class String
   end
 end
 
+class File
+  def checked_seek newpos
+    @file_range ||= (0..size)
+    @file_range.include?(newpos) && (seek(newpos) || true)
+  end
+end
+
 class PEdump
-  attr_accessor :fname, :logger
-  attr_reader :mz, :dos_stub, :rich_hdr, :pe, :resources, :resource_directory
+  attr_accessor :fname, :logger, :force
 
-  alias :rich_header :rich_hdr
-  alias :rich :rich_hdr
+  def initialize fname, params = {}
+    @fname = fname
+    @force = params[:force]
+    @logger = @@logger = params[:logger] || PEdump::Logger.new(STDERR)
+  end
+
+  class Logger < ::Logger
+    def initialize *args
+      super
+      @formatter = proc do |severity,_,_,msg|
+        # quick and dirty way to remove duplicate messages
+        if @prevmsg == msg && severity != 'DEBUG' && severity != 'INFO'
+          ''
+        else
+          @prevmsg = msg
+          "#{msg}\n"
+        end
+      end
+      @level = Logger::WARN
+    end
+  end
 
   class << self
     def logger;    @@logger;   end
@@ -63,14 +88,19 @@ class PEdump
         end
         def x.read file, size = nil
           size ||= const_get 'SIZE'
-          new(*file.read(size).to_s.unpack(const_get('FORMAT')))
+          data = file.read(size).to_s
+          if data.size < size && PEdump.logger
+            PEdump.logger.error "[!] #{self.to_s} want #{size} bytes, got #{data.size}"
+          end
+          new(*data.unpack(const_get('FORMAT')))
         end
       end
     end
   end
 
+
   # http://www.delorie.com/djgpp/doc/exe/
-  MZ = create_struct( "a2v13",
+  MZ = create_struct( "a2v13Qv2V6",
     :signature,
     :bytes_in_last_block,
     :blocks_in_file,
@@ -84,7 +114,16 @@ class PEdump
     :ip,
     :cs,
     :reloc_table_offset,
-    :overlay_number
+    :overlay_number,
+    :reserved0,           #  8 reserved bytes
+    :oem_id,
+    :oem_info,
+    :reserved2,           # 20 reserved bytes
+    :reserved3,
+    :reserved4,
+    :reserved5,
+    :reserved6,
+    :lfanew
   )
 
   PE = Struct.new(
@@ -152,7 +191,7 @@ class PEdump
     def self.read file, size = SIZE
       usual_size = 224
       PEdump.logger.warn "[?] unusual size of IMAGE_OPTIONAL_HEADER = #{size} (must be #{usual_size})" if size != usual_size
-      new(*file.read([size,SIZE].min).unpack(FORMAT)).tap do |ioh|
+      new(*file.read([size,SIZE].min).to_s.unpack(FORMAT)).tap do |ioh|
         ioh.DataDirectory = []
 
         # check if "...this address is outside the memory mapped file and is zeroed by the OS"
@@ -237,8 +276,7 @@ class PEdump
   class RichHdr < String
     attr_accessor :offset, :key # xor key
 
-    Entry = Struct.new(:version,:id,:times)
-    class Entry
+    class Entry < Struct.new(:version,:id,:times)
       def inspect
         "<id=#{id}, version=#{version}, times=#{times}>"
       end
@@ -249,7 +287,10 @@ class PEdump
       start_idx = stub.index(key.xor('DanS'))
       end_idx   = stub.index('Rich')+8
       if stub[end_idx..-1].tr("\x00",'') != ''
-        raise "[!] non-zero dos stub after rich_hdr: #{stub[end_idx..-1].inspect}"
+        t = stub[end_idx..-1]
+        t = "#{t[0,0x100]}..." if t.size > 0x100
+        PEdump.logger.error "[!] non-zero dos stub after rich_hdr: #{t.inspect}"
+        return nil
       end
       RichHdr.new(stub[start_idx, end_idx-start_idx]).tap do |x|
         x.key = key
@@ -272,18 +313,6 @@ class PEdump
     attr_accessor :offset
   end
 
-  def initialize fname, params = {}
-    @fname = fname
-    @logger = params[:logger] ||
-      begin
-        Logger.new(STDERR).tap do |l|
-          l.formatter = proc{ |_,_,_,msg| "#{msg}\n" }
-          l.level = Logger::WARN
-        end
-      end
-    @@logger = @logger
-  end
-
   def logger= l
     @logger = @@logger = l
   end
@@ -292,57 +321,114 @@ class PEdump
     new(fname).dump
   end
 
-  def dump
-    File.open(@fname) do |f|
-      mz_hdr = f.read 0x40
-      @mz = MZ.new(*mz_hdr.unpack(MZ::FORMAT))
-      if @mz.signature != 'MZ' && @mz.signature != 'ZM'
-        logger.warn "[?] no MZ header (want: 'MZ' or 'ZM', got: #{@mz.signature.inspect}"
+  def mz f=nil
+    @mz ||= MZ.read(f).tap do |mz|
+      if mz.signature != 'MZ' && mz.signature != 'ZM'
+        logger.warn "[?] no MZ signature (want: 'MZ' or 'ZM', got: #{mz.signature.inspect}"
       end
-      @pe_offset = mz_hdr.unpack("@60V").first
-      logger.info "[.] PE offset = 0x%x" % @pe_offset
+    end
+  end
 
-      if @pe_offset > 0x1000
-        logger.error "[!] PE offset is too big!"
-      else
-        dos_stub_offset = @mz.header_paragraphs * 0x10
-        dos_stub_size   = @pe_offset - dos_stub_offset
-        if dos_stub_size > 0
+  def dos_stub f=nil
+    @dos_stub ||=
+      begin
+        mz = mz(f)
+        dos_stub_offset = mz.header_paragraphs.to_i * 0x10
+        dos_stub_size   = mz.lfanew.to_i - dos_stub_offset
+        if dos_stub_offset <= 0
+          logger.warn "[?] invalid DOS stub offset #{dos_stub_offset}"
+          nil
+        elsif dos_stub_offset > f.size
+          logger.warn "[?] DOS stub offset beyond EOF: #{dos_stub_offset}"
+          nil
+        elsif dos_stub_size < 0
+          logger.warn "[?] invalid DOS stub size #{dos_stub_size}"
+          nil
+        elsif dos_stub_size == 0
+          # no DOS stub, it's ok
+          nil
+        else
+          if dos_stub_size > 0x1000
+            logger.warn "[?] DOS stub size too big (#{dos_stub_size}), limiting to 0x1000"
+            dos_stub_size = 0x1000
+          end
           f.seek dos_stub_offset
-          @dos_stub = DOSStub.new f.read(dos_stub_size)
-          @dos_stub.offset = dos_stub_offset
-          if @dos_stub['Rich']
-            @rich_hdr = RichHdr.from_dos_stub(@dos_stub)
-            @dos_stub[@dos_stub.index(@rich_hdr)..-1] = ''
+          DOSStub.new(f.read(dos_stub_size)).tap do |dos_stub|
+            dos_stub.offset = dos_stub_offset
+            if dos_stub['Rich']
+              if @rich_hdr = RichHdr.from_dos_stub(dos_stub)
+                dos_stub[dos_stub.index(@rich_hdr)..-1] = ''
+              end
+            end
           end
-        else
-          logger.info "[.] uncommon DOS stub size = #{dos_stub_size}"
         end
       end
+  end
+
+  def rich_hdr f=nil
+    dos_stub(f) && @rich_hdr
+  end
+  alias :rich_header :rich_hdr
+  alias :rich        :rich_hdr
 
-      f.seek @pe_offset
-      @pe = PE.new(*f.read(4).unpack("a4"))
-      logger.warn  "[?] no PE header (want: 'PE\\x00\\x00', got: #{@pe.signature.inspect})" if @pe.signature != "PE\x00\x00"
-      logger.error "[!] 'NE' format is not supported!" if @pe.signature == "NE\x00\x00"
-      @pe.image_file_header = IMAGE_FILE_HEADER.read(f)
-      if @pe.ifh.SizeOfOptionalHeader > 0
-        if @pe.ifh.Machine == 0x8664
-          @pe.image_optional_header = IMAGE_OPTIONAL_HEADER64.read(f, @pe.ifh.SizeOfOptionalHeader)
+  def pe f=nil
+    @pe ||=
+      begin
+        pe_offset = mz(f).try(:lfanew)
+        if pe_offset.nil?
+          logger.fatal "[!] NULL PE offset (e_lfanew). cannot continue."
+          nil
+        elsif pe_offset > f.size
+          logger.fatal "[!] PE offset beyond EOF. cannot continue."
+          nil
         else
-          @pe.image_optional_header = IMAGE_OPTIONAL_HEADER.read(f, @pe.ifh.SizeOfOptionalHeader)
+          f.seek pe_offset
+          pe_sig = f.read 4
+          logger.error "[!] 'NE' format is not supported!" if pe_sig == "NE\x00\x00"
+          logger.warn  "[?] no PE signature (want: 'PE\\x00\\x00', got: #{pe_sig.inspect})" if pe_sig != "PE\x00\x00"
+          PE.new(pe_sig).tap do |pe|
+            pe.image_file_header = IMAGE_FILE_HEADER.read(f)
+            if pe.ifh.SizeOfOptionalHeader > 0
+              if pe.ifh.Machine == 0x8664
+                pe.image_optional_header = IMAGE_OPTIONAL_HEADER64.read(f, pe.ifh.SizeOfOptionalHeader)
+              else
+                pe.image_optional_header = IMAGE_OPTIONAL_HEADER.read(f, pe.ifh.SizeOfOptionalHeader)
+              end
+            end
+
+            if (nToRead=pe.ifh.NumberOfSections) > 32
+              if @force
+                logger.warn "[!] too many sections (#{pe.ifh.NumberOfSections}). forced. reading all"
+              else
+                logger.warn "[!] too many sections (#{pe.ifh.NumberOfSections}). not forced, reading first 32"
+                nToRead = 32
+              end
+            end
+            pe.section_table = nToRead.times.map do
+              IMAGE_SECTION_HEADER.read(f)
+            end
+          end
         end
       end
-      @pe.section_table = @pe.ifh.NumberOfSections.times.map do
-        IMAGE_SECTION_HEADER.read(f)
-      end
+  end
 
-      @resource_directory = _read_resource_directory_tree(f)
-    end
+  def resource_directory f=nil
+    @resource_directory ||= _read_resource_directory_tree(f)
+  end
+
+  # OPTIONAL: assigns @mz, @rich_hdr, @pe, etc
+  def dump f=nil
+    f ? pe(f) : File.open(@fname){ |f| pe(f) }
     self
   end
 
-  def data_directory;  @pe.ioh && @pe.ioh.DataDirectory;  end
-  def sections;        @pe.section_table;      end
+  def data_directory f=nil
+    pe(f) && pe.ioh && pe.ioh.DataDirectory
+  end
+
+  def sections f=nil
+    pe(f) && pe.section_table
+  end
   alias :section_table :sections
 
   IMAGE_RESOURCE_DIRECTORY = create_struct 'V2v4',
@@ -353,31 +439,62 @@ class PEdump
     class << self
       attr_accessor :base
       alias :read_without_children :read
-      def read f
+      def read f, root=true
+        if root
+          @@loopchk1 = Hash.new(0)
+          @@loopchk2 = Hash.new(0)
+          @@loopchk3 = Hash.new(0)
+        elsif (@@loopchk1[f.tell] += 1) > 1
+          PEdump.logger.error "[!] #{self}: loop1 detected at file pos #{f.tell}" if @@loopchk1[f.tell] < 2
+          return nil
+        end
         read_without_children(f).tap do |r|
-          r.entries = (r.NumberOfNamedEntries + r.NumberOfIdEntries).times.map do
-            IMAGE_RESOURCE_DIRECTORY_ENTRY.read(f)
-          end.each do |entry|
+          nToRead = r.NumberOfNamedEntries.to_i + r.NumberOfIdEntries.to_i
+          r.entries = []
+          nToRead.times do |i|
+            if f.eof?
+              PEdump.logger.error "[!] #{self}: #{nToRead} entries in directory, but got EOF on #{i}-th."
+              break
+            end
+            if (@@loopchk2[f.tell] += 1) > 1
+              PEdump.logger.error "[!] #{self}: loop2 detected at file pos #{f.tell}" if @@loopchk2[f.tell] < 2
+              next
+            end
+            r.entries << IMAGE_RESOURCE_DIRECTORY_ENTRY.read(f)
+          end
+          #r.entries.uniq!
+          r.entries.each do |entry|
             entry.name =
-              if entry.Name & 0x8000_0000 > 0
+              if entry.Name.to_i & 0x8000_0000 > 0
                 # Name is an address of unicode string
                 f.seek base + entry.Name & 0x7fff_ffff
-                nChars = f.read(2).unpack("v").first
-                f.read(nChars*2).force_encoding('UTF-16LE').encode!('UTF-8')
+                nChars = f.read(2).to_s.unpack("v").first.to_i
+                begin
+                  f.read(nChars*2).force_encoding('UTF-16LE').encode!('UTF-8')
+                rescue
+                  PEdump.logger.error "[!] #{self} failed to read entry name: #{$!}"
+                  "???"
+                end
               else
                 # Name is a numeric id
                 "##{entry.Name}"
               end
-            f.seek base + entry.OffsetToData & 0x7fff_ffff
-            entry.data =
-              if entry.OffsetToData & 0x8000_0000 > 0
-                # child is a directory
-                IMAGE_RESOURCE_DIRECTORY.read(f)
-              else
-                # child is a resource
-                IMAGE_RESOURCE_DATA_ENTRY.read(f)
+            if entry.OffsetToData && f.checked_seek(base + entry.OffsetToData & 0x7fff_ffff)
+              if (@@loopchk3[f.tell] += 1) > 1
+                PEdump.logger.error "[!] #{self}: loop3 detected at file pos #{f.tell}" if @@loopchk3[f.tell] < 2
+                next
               end
+              entry.data =
+                if entry.OffsetToData & 0x8000_0000 > 0
+                  # child is a directory
+                  IMAGE_RESOURCE_DIRECTORY.read(f,false)
+                else
+                  # child is a resource
+                  IMAGE_RESOURCE_DATA_ENTRY.read(f)
+                end
+            end
           end
+          @@loopchk1 = @@loopchk2 = @@loopchk3 = nil if root # save some memory
         end
       end
     end
@@ -400,7 +517,7 @@ class PEdump
   end
 
   def _read_resource_directory_tree f
-    return nil unless @pe.ioh
+    return nil unless pe(f).try(:ioh)
     res_dir = @pe.ioh.DataDirectory[IMAGE_DATA_DIRECTORY::RESOURCE]
     return [] if !res_dir || (res_dir.va == 0 && res_dir.size == 0)
     res_va = @pe.ioh.DataDirectory[IMAGE_DATA_DIRECTORY::RESOURCE].va
@@ -451,14 +568,14 @@ class PEdump
       end
     end
 
-    def bitmap_and_mask src_fname
+    def bitmap_mask src_fname
       File.open(src_fname, "rb") do |f|
         parse f
         bmp_info_hdr = bitmap_hdr
         bitmap_size = BITMAPINFOHEADER::SIZE + @palette_size + @imgdata_size
         return nil if bitmap_size >= self.size
 
-        and_mask_size = self.size - bitmap_size
+        mask_size = self.size - bitmap_size
         f.seek file_offset + bitmap_size
 
         bmp_info_hdr = BITMAPINFOHEADER.new(*bmp_info_hdr[14..-1].unpack(BITMAPINFOHEADER::FORMAT))
@@ -470,10 +587,10 @@ class PEdump
         @palette_size = palette.size
 
         "BM" + [
-          BITMAPINFOHEADER::SIZE + 14 + @palette_size + and_mask_size,
+          BITMAPINFOHEADER::SIZE + 14 + @palette_size + mask_size,
           0,
           BITMAPINFOHEADER::SIZE + 14 + @palette_size
-        ].pack("V3") + bmp_info_hdr.pack + palette + f.read(and_mask_size)
+        ].pack("V3") + bmp_info_hdr.pack + palette + f.read(mask_size)
       end
     end
 
@@ -516,9 +633,9 @@ class PEdump
 
   STRING = Struct.new(:id, :lang, :value)
 
-  def strings
+  def strings f=nil
     r = []
-    Array(resources).find_all{ |x| x.type == 'STRING'}.each do |res|
+    Array(resources(f)).find_all{ |x| x.type == 'STRING'}.each do |res|
       res.data.each_with_index do |string,idx|
         r << STRING.new( ((res.id-1)<<4) + idx, res.lang, string ) unless string.empty?
       end
@@ -573,7 +690,12 @@ class PEdump
     %w'MESSAGETABLE GROUP_CURSOR' + [nil] + %w'GROUP_ICON' + [nil] +
     %w'VERSION DLGINCLUDE' + [nil] + %w'PLUGPLAY VXD ANICURSOR ANIICON HTML MANIFEST'
 
-  def resources dir = @resource_directory
+  def resources f=nil
+    @resources ||= _scan_resources(f)
+  end
+
+  def _scan_resources f=nil, dir=nil
+    dir ||= resource_directory(f)
     return nil unless dir
     dir.entries.map do |entry|
       case entry.data
@@ -586,14 +708,12 @@ class PEdump
               else
                 entry.name
               end
-            File.open(@fname,"rb") do |f|
-              resources(entry.data).each do |res|
-                res.type = entry_type
-                res.parse f
-              end
+            _scan_resources(f,entry.data).each do |res|
+              res.type = entry_type
+              res.parse f
             end
           else
-            resources(entry.data).each do |res|
+            _scan_resources(f,entry.data).each do |res|
               res.name = res.name == "##{res.lang}" ? entry.name : "#{entry.name} / #{res.name}"
               res.id ||= entry.Name if entry.Name.is_a?(Numeric) && entry.Name < 0x8000_0000
             end
@@ -610,9 +730,10 @@ class PEdump
             entry.data.Reserved
           )
         else
-          raise "[!] invalid resource entry: #{entry.data.inspect}"
+          logger.error "[!] invalid resource entry: #{entry.data.inspect}"
+          nil
       end
-    end.flatten
+    end.flatten.compact
   end
 end
 
@@ -633,10 +754,10 @@ if $0 == __FILE__
               fname = r.name.tr("/# ",'_')+".bmp"
               puts "[.] #{fname}"
               File.open(fname,"wb"){ |fo| fo << r.restore_bitmap(fi) }
-              if and_mask = r.bitmap_and_mask(fi)
-                fname.sub! '.bmp', '.and_mask.bmp'
+              if mask = r.bitmap_mask(fi)
+                fname.sub! '.bmp', '.mask.bmp'
                 puts "[.] #{fname}"
-                File.open(fname,"wb"){ |fo| fo << r.bitmap_and_mask(fi) }
+                File.open(fname,"wb"){ |fo| fo << r.bitmap_mask(fi) }
               end
             end
         end

data/lib/pedump/cli.rb

@@ -29,6 +29,9 @@ class PEdump::CLI
         @options[:verbose] ||= 0
         @options[:verbose] += 1
       end
+      opts.on "-F", "--force", "Try to dump by all means (can cause exceptions & heavy wounds)" do |v|
+        @options[:force] = true
+      end
       opts.on "-f", "--format FORMAT", [:binary, :c, :dump, :hex, :inspect, :table],
         "Output format: bin,c,dump,hex,inspect,table (default)" do |v|
         @options[:format] = v
@@ -59,16 +62,18 @@ class PEdump::CLI
         puts "# -----------------------------------------------"
         puts "# #{fname}"
         puts "# -----------------------------------------------"
-        puts
-      end
-      @pedump = PEdump.new fname
-      if @options[:verbose]
-        @pedump.logger.level = @options[:verbose] > 1 ? Logger::INFO : Logger::DEBUG
       end
-      @pedump = @pedump.dump
 
-      @actions.each do |action|
-        dump_action action
+      File.open(fname,'rb') do |f|
+        @pedump = PEdump.new(fname, :force => @options[:force]).tap do |x|
+          if @options[:verbose]
+            x.logger.level = @options[:verbose] > 1 ? Logger::INFO : Logger::DEBUG
+          end
+        end
+
+        @actions.each do |action|
+          dump_action action,f
+        end
       end
     end
   rescue Errno::EPIPE
@@ -79,11 +84,11 @@ class PEdump::CLI
   def action_title action
     s = action.to_s.upcase.tr('_',' ')
     s += " Header" if [:mz, :pe, :rich].include?(action)
-    "=== %s ===\n\n" % s
+    "\n=== %s ===\n\n" % s
   end
 
-  def dump_action action
-    data = @pedump.send(action)
+  def dump_action action, f
+    data = @pedump.send(action, f)
     return if !data || (data.respond_to?(:empty?) && data.empty?)
 
     puts action_title(action)
@@ -108,8 +113,6 @@ class PEdump::CLI
         end
     end
     dump data, dump_opts
-  ensure
-    puts
   end
 
   def dump data, opts = {}
@@ -165,7 +168,7 @@ class PEdump::CLI
           else
             if COMMENTS[k]
               printf "%30s: %10d  %12s  %s\n", k, v, v<10 ? v : ("0x"+v.to_s(16)),
-                COMMENTS[k][v] || COMMENTS[k]['default'] || ''
+                COMMENTS[k][v] || (COMMENTS[k].is_a?(Hash) ? COMMENTS[k]['default'] : '') || ''
             else
               printf "%30s: %10d  %12s\n", k, v, v<10 ? v : ("0x"+v.to_s(16))
             end
@@ -257,8 +260,10 @@ class PEdump::CLI
       dir.entries.each do |child|
         dump_res_dir child, level+1
       end
-    else
+    elsif dir
       printf "DATA: %8x %8x %5s %8x\n", dir.OffsetToData, dir.Size, dir.CodePage, dir.Reserved
+    else
+      puts # null dir
     end
   end
 
@@ -309,18 +314,18 @@ class PEdump::CLI
     data.each do |s|
       name = s.Name[/[^a-z0-9_.]/i] ? s.Name.inspect : s.Name
       name = "#{name}\n          " if name.size > 8
-      printf "  %-8s %8x %8x %8x %8x %5x %8x %5x %8x  %8x  %s\n", name,
-        s.VirtualAddress,      s.VirtualSize,
-        s.SizeOfRawData,       s.PointerToRawData,
-        s.NumberOfRelocations, s.PointerToRelocations,
-        s.NumberOfLinenumbers, s.PointerToLinenumbers,
-        s.flags,               s.flags_desc
+      printf "  %-8s %8x %8x %8x %8x %5x %8x %5x %8x  %8x  %s\n", name.to_s,
+        s.VirtualAddress.to_i,      s.VirtualSize.to_i,
+        s.SizeOfRawData.to_i,       s.PointerToRawData.to_i,
+        s.NumberOfRelocations.to_i, s.PointerToRelocations.to_i,
+        s.NumberOfLinenumbers.to_i, s.PointerToLinenumbers.to_i,
+        s.flags.to_i,               s.flags_desc
     end
   end
 
   def dump_data_dir data
     data.each do |row|
-      printf "  %-12s  rva:0x%8x   size:0x %8x\n", row.type, row.va, row.size
+      printf "  %-12s  rva:0x%8x   size:0x %8x\n", row.type, row.va.to_i, row.size.to_i
     end
   end
 

data/pedump.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "pedump"
-  s.version = "0.0.1"
+  s.version = "0.1.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Andrey \"Zed\" Zaikin"]
-  s.date = "2011-12-07"
+  s.date = "2011-12-09"
   s.description = "dump headers, sections, extract resources of win32 PE exe,dll,etc"
   s.email = "zed.0xff@gmail.com"
   s.executables = ["pedump"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pedump
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.1.0
   prerelease: 
 platform: ruby
 authors:
@@ -9,11 +9,11 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2011-12-07 00:00:00.000000000Z
+date: 2011-12-09 00:00:00.000000000Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
-  requirement: &70189996908160 !ruby/object:Gem::Requirement
+  requirement: &70102209592580 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -21,10 +21,10 @@ dependencies:
         version: 2.3.0
   type: :development
   prerelease: false
-  version_requirements: *70189996908160
+  version_requirements: *70102209592580
 - !ruby/object:Gem::Dependency
   name: bundler
-  requirement: &70189996906020 !ruby/object:Gem::Requirement
+  requirement: &70102209591820 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -32,10 +32,10 @@ dependencies:
         version: 1.0.0
   type: :development
   prerelease: false
-  version_requirements: *70189996906020
+  version_requirements: *70102209591820
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: &70189996904540 !ruby/object:Gem::Requirement
+  requirement: &70102209590740 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -43,10 +43,10 @@ dependencies:
         version: 1.6.4
   type: :development
   prerelease: false
-  version_requirements: *70189996904540
+  version_requirements: *70102209590740
 - !ruby/object:Gem::Dependency
   name: rcov
-  requirement: &70189996901000 !ruby/object:Gem::Requirement
+  requirement: &70102209585380 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -54,7 +54,7 @@ dependencies:
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *70189996901000
+  version_requirements: *70102209585380
 description: dump headers, sections, extract resources of win32 PE exe,dll,etc
 email: zed.0xff@gmail.com
 executables:
@@ -93,7 +93,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: -797634097994231623
+      hash: 3334158789950577908
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements: