Rdbo

Results 97 comments of Rdbo

Full code review

Still need to fix warnings across the platforms.

Consider using registry keys to get Windows boot time (getting rid of NtQuerySystemInformation, which is unstable)

https://learn.microsoft.com/en-us/windows/win32/api/winreg/nf-winreg-regqueryinfokeya `LastWriteTime` is useful here

Consider using registry keys to get Windows boot time (getting rid of NtQuerySystemInformation, which is unstable)

Another way would be to create a static variable in `process.c` that stores the Windows boot time from the `GetTickCount/GetTickCount64` functions.

Consider using registry keys to get Windows boot time (getting rid of NtQuerySystemInformation, which is unstable)

Another possibility: use Unix timestamps across all platforms instead of boot-relative time

Add debugging logs and more specific error return values

I don't think this is going to happen - it would need a lot of restructuring on libmem. Besides, errors are different depending on the OS, so it would become...

Add debugging logs and more specific error return values

The best way for this to happen would probably be using something like `LM_GetLastError`, or `LM_GetLastErrorStr` I'm not sure how this would be implemented though; the errors are different depending...

Add debugging logs and more specific error return values

This is not coming out soon. For now, things either work or don't, and libmem lets you know that. No specific errors.

Add debugging logs and more specific error return values

For Rust, the obvious choice is using `Result`s with a libmem-specific error type. For C++, there is a feature in C++ 23 which is similar to Rust's `Result`, called `std::expected`...

Remove duplicate check for whether file is PE, ELF, etc

LIEF can be strange sometimes, maybe I'll leave it there (?)

Include Capstone's detail in `lm_inst_t`

For reference, this is capstone's `cs_detail`: ```c typedef struct cs_detail { uint16_t regs_read[12]; ///< list of implicit registers read by this insn uint8_t regs_read_count; ///< number of implicit registers read...