- API - Add import for MapFileAndCheckSum.
- PE32 - Replace manual PE checksum calculations with Win32 API call instead.
- PE64 - Replace manual PE checksum calculations with Win32 API call instead.
- Unpacker v2.0 (x86) - Add support for multiple variants of the header.
- Unpacker v2.0 (x86) - Fix and rename some of the fields of the stub header.
- Unpacker v2.0 (x86) - Add error message for unsupported header sizes to help collect samples.
While I was trying to avoid using any kind of direct system API calls in this project, I have opt'd to go against that now. The PE file checksum is an annoying calculation that I do not want to waste more time on than I have to. Because of this, I have removed the custom implementations within Steamless and replaced the checksum replacement code with calls to MapFileAndCheckSum instead. This will now ensure all checksums are valid on PE files as the system is the one responsible for calculating it.
This update also adds multiple variant support to the v2.0 (x86) unpacker.