Back to home page

DOS ain't dead

Forum index page

Log in | Register

Back to the forum
Board view  Mix view

UPX - version detect (Announce)

posted by RayeR Homepage, CZ, 01.11.2007, 22:18

As I found detecting UPX signature at fixed offset from beginning of exe is not very reliable I have some files in DJGPP with diff. stub size and even relative to COFF image begin it may be at various places. So I decided that would be better to search signature in range coff_start..coff_start+N where N=4096 seems to be reasonable number. Here's my updated EXEINFO 1.1:
http://www.volny.cz/rayer/programm/programe.htm#EXEINFO

---
DOS gives me freedom to unlimited HW access.

 

Complete thread:

Back to the forum
Board view  Mix view
22049 Postings in 2034 Threads, 396 registered users, 227 users online (0 registered, 227 guests)
DOS ain't dead | Admin contact
RSS Feed
powered by my little forum