NO

Author Topic: TLPEView partially imitate wjr's PEView  (Read 3355 times)

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1765
Re: TLPEView plugins TLPEPlgUDis86 and TLPEPlgZydis
« Reply #15 on: August 18, 2017, 08:56:45 am »
New example:
TLPEPlgUDis86 plugin for TLPEView.
Using udis86 or udis86 radare

TLPEPlgZydis
Using Zydis 2
« Last Edit: Yesterday at 07:55:48 pm by TimoVJL »
May the source be with you

Offline frankie

  • Global Moderator
  • Member
  • *****
  • Posts: 1673
Re: TLPEView partially imitate wjr's PEView (FREEZED)
« Reply #16 on: August 18, 2017, 12:56:16 pm »
Very good!  ;)

Offline Jupiter

  • Member
  • *
  • Posts: 1
IMAGE_OPTIONAL_HEADER subtree
« Reply #17 on: September 07, 2017, 02:26:48 pm »
Subtree of IMAGE_OPTIONAL_HEADER doesn't react on clicks at all

Offline Vortex

  • Member
  • *
  • Posts: 511
    • http://www.vortex.masmcode.com
Re: TLPEView partially imitate wjr's PEView
« Reply #18 on: September 07, 2017, 09:37:58 pm »
Hi Jupiter,

Welcome to the forum. On my system, I can view the subtree IMAGE_OPTIONAL_HEADER. Could you please provide more information like your operation system and the file you are inspecting with TLPEView?
Code it... That's all...

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1765
Re: TLPEView partially imitate wjr's PEView
« Reply #19 on: May 31, 2018, 01:51:52 pm »
These one are compiled with msvc 2017 and linked with msvcrt.lib for WindowsXP.
« Last Edit: June 02, 2018, 10:24:13 am by TimoVJL »
May the source be with you

Offline Vortex

  • Member
  • *
  • Posts: 511
    • http://www.vortex.masmcode.com
Re: TLPEView partially imitate wjr's PEView
« Reply #20 on: June 01, 2018, 07:53:36 pm »
Hi Timo,

Quote
These one are compiled with msvc 2017 and linked with msvcrt.lib for WindowsXP.

Thanks for this release. TLPEView64.exe works fine but TLPEView.exe fails and outputs the following error message :

Code: [Select]
The procedure entry point _except_handler4_common could not be located in the dynamic link library msvcrt.dll
OS : Windows XP 64-bit
Code it... That's all...

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1765
Re: TLPEView partially imitate wjr's PEView
« Reply #21 on: June 02, 2018, 10:25:39 am »
Thank's for test. Fixed with a correct msvcrt.lib.

EDIT: A smaller one linked with polink. (76 kB)

EDIT: What is that additional code what that 2017 insert ??? The speed optimization ;)
Code: [Select]
Windows x86 app O2
.text   92712
.rdata  12340
.data   3052
.reloc  6240
Total   114344

Windows x86 app O1
.text   43209
.rdata  12340
.data   3052
.reloc  3348
Total   61949
Code: [Select]
Windows x86 app
.text   52838
.rdata  9719
.data   5276
Total   67833

TLPEView.exe msvc 2015 + polink
Windows x86 app
.text   61964
.rdata  9684
.data   5348
Total   76996

TLPEView.exe msvc 2013
Windows x86 app
.text   61524
.rdata  12052
.data   3052
.reloc  4092
Total   80720

TLPEView.exe msvc 2015
Windows x86 app
.text   61864
.rdata  12420
.data   3048
.reloc  4108
Total   81440

TLPEView.exe msvc 2017 community
Windows x86 app
.text   92712
.rdata  12420
.data   3052
.reloc  6244
Total   114428
« Last Edit: June 03, 2018, 02:44:43 pm by TimoVJL »
May the source be with you

Offline Vortex

  • Member
  • *
  • Posts: 511
    • http://www.vortex.masmcode.com
Re: TLPEView partially imitate wjr's PEView
« Reply #22 on: June 02, 2018, 10:45:17 am »
Hi Timo,

Thanks for the new upload. It works on my system.
Code it... That's all...

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1765
Re: TLPEView partially imitate wjr's PEView
« Reply #23 on: June 16, 2018, 08:23:47 pm »
This version add limited dbg-file viewing.
« Last Edit: August 06, 2018, 12:11:36 pm by TimoVJL »
May the source be with you